{ "arp" : { "00000000-0000-0000-0000-000000000201" : { "10.0.0.1" : "02:00:00:00:02:21" }, "00000000-0000-0000-0000-000000000202" : { "10.0.0.2" : "02:00:00:00:02:11", "20.0.0.2" : "02:00:00:00:02:13" }, "00000000-0000-0000-0000-000000000203" : { "20.0.0.1" : "02:00:00:00:02:22" } }, "firewallDecisions" : [ { "accepted" : true, "node" : "00000000-0000-0000-0000-000000000202", "packet" : 1 }, { "accepted" : true, "node" : "00000000-0000-0000-0000-000000000202", "packet" : 2 }, { "accepted" : true, "node" : "00000000-0000-0000-0000-000000000202", "packet" : 3 }, { "accepted" : true, "node" : "00000000-0000-0000-0000-000000000202", "packet" : 5 }, { "accepted" : true, "node" : "00000000-0000-0000-0000-000000000202", "packet" : 7 }, { "accepted" : true, "node" : "00000000-0000-0000-0000-000000000202", "packet" : 8 }, { "accepted" : true, "node" : "00000000-0000-0000-0000-000000000202", "packet" : 9 }, { "accepted" : true, "node" : "00000000-0000-0000-0000-000000000202", "packet" : 11 }, { "accepted" : true, "node" : "00000000-0000-0000-0000-000000000202", "packet" : 13 } ], "icmpObservations" : { "00000000-0000-0000-0000-000000000201" : [ { "identifier" : 10, "kind" : "echoReply", "sender" : "20.0.0.2", "sequence" : 1 }, { "identifier" : 11, "kind" : "timeExceeded", "sender" : "10.0.0.1", "sequence" : 1 }, { "identifier" : 12, "kind" : "timeExceeded", "sender" : "10.0.0.1", "sequence" : 1 }, { "identifier" : 12, "kind" : "echoReply", "sender" : "20.0.0.2", "sequence" : 2 }, { "identifier" : 13, "kind" : "destinationNetworkUnreachable", "sender" : "10.0.0.1", "sequence" : 1 }, { "identifier" : 14, "kind" : "destinationHostUnreachable", "sender" : "10.0.0.1", "sequence" : 1 } ], "00000000-0000-0000-0000-000000000203" : [ { "identifier" : 15, "kind" : "echoReply", "sender" : "20.0.0.1", "sequence" : 1 } ] }, "pendingEvents" : 0, "results" : [ { "node" : "00000000-0000-0000-0000-000000000201", "packet" : 1, "type" : "delivered" }, { "kind" : "timeExceeded", "node" : "00000000-0000-0000-0000-000000000201", "packet" : 3, "type" : "icmpError" }, [ { "identifier" : 12, "kind" : "timeExceeded", "sender" : "10.0.0.1", "sequence" : 1 }, { "identifier" : 12, "kind" : "echoReply", "sender" : "20.0.0.2", "sequence" : 2 } ], { "kind" : "destinationNetworkUnreachable", "node" : "00000000-0000-0000-0000-000000000201", "packet" : 9, "type" : "icmpError" }, { "kind" : "destinationHostUnreachable", "node" : "00000000-0000-0000-0000-000000000201", "packet" : 11, "type" : "icmpError" }, { "node" : "00000000-0000-0000-0000-000000000203", "packet" : 13, "type" : "delivered" }, "02:00:00:00:02:22" ], "switchTables" : { }, "time" : 1210, "traces" : [ { "after" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "64" ], [ "protocol", "1" ] ], "before" : [ ], "detail" : "ICMP echo request", "direction" : "outbound", "id" : 1, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "created", "packet" : 1, "time" : 0 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "before" : [ ], "detail" : "ARP request for 10.0.0.1", "direction" : "outbound", "frame" : 1, "id" : 2, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "created", "time" : 0 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "before" : [ ], "direction" : "outbound", "frame" : 1, "id" : 3, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "sent", "time" : 0 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "direction" : "inbound", "frame" : 1, "id" : 4, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "time" : 55 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "direction" : "inbound", "frame" : 1, "id" : 5, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "time" : 55 }, { "after" : [ ], "before" : [ [ "operation", "request" ], [ "senderMAC", "02:00:00:00:02:11" ], [ "senderIP", "10.0.0.2" ], [ "targetMAC", "00:00:00:00:00:00" ], [ "targetIP", "10.0.0.1" ] ], "direction" : "inbound", "frame" : 1, "id" : 6, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "accepted", "time" : 55 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:21" ], [ "destinationMAC", "02:00:00:00:02:11" ] ], "before" : [ ], "detail" : "ARP reply for 10.0.0.1", "direction" : "outbound", "frame" : 2, "id" : 7, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "created", "time" : 55 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:21" ], [ "destinationMAC", "02:00:00:00:02:11" ] ], "before" : [ ], "direction" : "outbound", "frame" : 2, "id" : 8, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "sent", "time" : 55 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:21" ], [ "destinationMAC", "02:00:00:00:02:11" ] ], "direction" : "inbound", "frame" : 2, "id" : 9, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "received", "time" : 110 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:21" ], [ "destinationMAC", "02:00:00:00:02:11" ] ], "direction" : "inbound", "frame" : 2, "id" : 10, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "received", "time" : 110 }, { "after" : [ ], "before" : [ [ "operation", "reply" ], [ "senderMAC", "02:00:00:00:02:21" ], [ "senderIP", "10.0.0.1" ], [ "targetMAC", "02:00:00:00:02:11" ], [ "targetIP", "10.0.0.2" ] ], "direction" : "inbound", "frame" : 2, "id" : 11, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "accepted", "time" : 110 }, { "after" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "64" ], [ "protocol", "1" ] ], "before" : [ ], "direction" : "outbound", "frame" : 3, "id" : 12, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "sent", "packet" : 1, "time" : 110 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "02:00:00:00:02:21" ] ], "before" : [ ], "direction" : "outbound", "frame" : 3, "id" : 13, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "created", "packet" : 1, "time" : 110 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "02:00:00:00:02:21" ] ], "before" : [ ], "direction" : "outbound", "frame" : 3, "id" : 14, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "sent", "packet" : 1, "time" : 110 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "02:00:00:00:02:21" ] ], "direction" : "inbound", "frame" : 3, "id" : 15, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "packet" : 1, "time" : 165 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "02:00:00:00:02:21" ] ], "direction" : "inbound", "frame" : 3, "id" : 16, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "packet" : 1, "time" : 165 }, { "after" : [ ], "before" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "64" ], [ "protocol", "1" ] ], "direction" : "inbound", "frame" : 3, "id" : 17, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "packet" : 1, "time" : 165 }, { "after" : [ ], "before" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "64" ], [ "protocol", "1" ] ], "detail" : "firewall inactive", "direction" : "inbound", "frame" : 3, "id" : 18, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "accepted", "packet" : 1, "time" : 165 }, { "after" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "63" ], [ "protocol", "1" ] ], "before" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "64" ], [ "protocol", "1" ] ], "detail" : "TTL decremented", "direction" : "outbound", "frame" : 3, "id" : 19, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "forwarded", "packet" : 1, "time" : 165 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:22" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "before" : [ ], "detail" : "ARP request for 20.0.0.2", "direction" : "outbound", "frame" : 4, "id" : 20, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "created", "time" : 165 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:22" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "before" : [ ], "direction" : "outbound", "frame" : 4, "id" : 21, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "sent", "time" : 165 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:22" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "before" : [ ], "detail" : "ARP request for 20.0.0.2", "direction" : "outbound", "frame" : 5, "id" : 22, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "created", "time" : 165 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:22" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "before" : [ ], "direction" : "outbound", "frame" : 5, "id" : 23, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "sent", "time" : 165 }, { "after" : [ ], "before" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "63" ], [ "protocol", "1" ] ], "detail" : "waiting for ARP resolution of 20.0.0.2", "direction" : "outbound", "id" : 24, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "created", "packet" : 1, "time" : 165 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:22" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "direction" : "inbound", "frame" : 4, "id" : 25, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "received", "time" : 220 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:22" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "direction" : "inbound", "frame" : 4, "id" : 26, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "received", "time" : 220 }, { "after" : [ ], "before" : [ [ "operation", "request" ], [ "senderMAC", "02:00:00:00:02:22" ], [ "senderIP", "20.0.0.1" ], [ "targetMAC", "00:00:00:00:00:00" ], [ "targetIP", "20.0.0.2" ] ], "direction" : "inbound", "frame" : 4, "id" : 27, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "accepted", "time" : 220 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:13" ], [ "destinationMAC", "02:00:00:00:02:22" ] ], "before" : [ ], "detail" : "ARP reply for 20.0.0.2", "direction" : "outbound", "frame" : 6, "id" : 28, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "created", "time" : 220 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:13" ], [ "destinationMAC", "02:00:00:00:02:22" ] ], "before" : [ ], "direction" : "outbound", "frame" : 6, "id" : 29, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "sent", "time" : 220 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:22" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "direction" : "inbound", "frame" : 5, "id" : 30, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "received", "time" : 220 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:22" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "direction" : "inbound", "frame" : 5, "id" : 31, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "received", "time" : 220 }, { "after" : [ ], "before" : [ [ "operation", "request" ], [ "senderMAC", "02:00:00:00:02:22" ], [ "senderIP", "20.0.0.1" ], [ "targetMAC", "00:00:00:00:00:00" ], [ "targetIP", "20.0.0.2" ] ], "direction" : "inbound", "frame" : 5, "id" : 32, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "accepted", "time" : 220 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:13" ], [ "destinationMAC", "02:00:00:00:02:22" ] ], "before" : [ ], "detail" : "ARP reply for 20.0.0.2", "direction" : "outbound", "frame" : 7, "id" : 33, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "created", "time" : 220 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:13" ], [ "destinationMAC", "02:00:00:00:02:22" ] ], "before" : [ ], "direction" : "outbound", "frame" : 7, "id" : 34, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "sent", "time" : 220 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:13" ], [ "destinationMAC", "02:00:00:00:02:22" ] ], "direction" : "inbound", "frame" : 6, "id" : 35, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "time" : 275 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:13" ], [ "destinationMAC", "02:00:00:00:02:22" ] ], "direction" : "inbound", "frame" : 6, "id" : 36, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "time" : 275 }, { "after" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "63" ], [ "protocol", "1" ] ], "before" : [ ], "direction" : "outbound", "frame" : 8, "id" : 37, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "forwarded", "packet" : 1, "time" : 275 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:22" ], [ "destinationMAC", "02:00:00:00:02:13" ] ], "before" : [ ], "direction" : "outbound", "frame" : 8, "id" : 38, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "created", "packet" : 1, "time" : 275 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:22" ], [ "destinationMAC", "02:00:00:00:02:13" ] ], "before" : [ ], "direction" : "outbound", "frame" : 8, "id" : 39, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "sent", "packet" : 1, "time" : 275 }, { "after" : [ ], "before" : [ [ "operation", "reply" ], [ "senderMAC", "02:00:00:00:02:13" ], [ "senderIP", "20.0.0.2" ], [ "targetMAC", "02:00:00:00:02:22" ], [ "targetIP", "20.0.0.1" ] ], "direction" : "inbound", "frame" : 6, "id" : 40, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "accepted", "time" : 275 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:13" ], [ "destinationMAC", "02:00:00:00:02:22" ] ], "direction" : "inbound", "frame" : 7, "id" : 41, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "time" : 275 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:13" ], [ "destinationMAC", "02:00:00:00:02:22" ] ], "direction" : "inbound", "frame" : 7, "id" : 42, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "time" : 275 }, { "after" : [ ], "before" : [ [ "operation", "reply" ], [ "senderMAC", "02:00:00:00:02:13" ], [ "senderIP", "20.0.0.2" ], [ "targetMAC", "02:00:00:00:02:22" ], [ "targetIP", "20.0.0.1" ] ], "direction" : "inbound", "frame" : 7, "id" : 43, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "accepted", "time" : 275 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:22" ], [ "destinationMAC", "02:00:00:00:02:13" ] ], "direction" : "inbound", "frame" : 8, "id" : 44, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "received", "packet" : 1, "time" : 330 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:22" ], [ "destinationMAC", "02:00:00:00:02:13" ] ], "direction" : "inbound", "frame" : 8, "id" : 45, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "received", "packet" : 1, "time" : 330 }, { "after" : [ ], "before" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "63" ], [ "protocol", "1" ] ], "direction" : "inbound", "frame" : 8, "id" : 46, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "received", "packet" : 1, "time" : 330 }, { "after" : [ [ "senderIP", "20.0.0.2" ], [ "receiverIP", "10.0.0.2" ], [ "ttl", "64" ], [ "protocol", "1" ] ], "before" : [ ], "detail" : "ICMP echo reply", "direction" : "outbound", "id" : 47, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "created", "packet" : 2, "time" : 330 }, { "after" : [ [ "senderIP", "20.0.0.2" ], [ "receiverIP", "10.0.0.2" ], [ "ttl", "64" ], [ "protocol", "1" ] ], "before" : [ ], "direction" : "outbound", "frame" : 9, "id" : 48, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "sent", "packet" : 2, "time" : 330 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:13" ], [ "destinationMAC", "02:00:00:00:02:22" ] ], "before" : [ ], "direction" : "outbound", "frame" : 9, "id" : 49, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "created", "packet" : 2, "time" : 330 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:13" ], [ "destinationMAC", "02:00:00:00:02:22" ] ], "before" : [ ], "direction" : "outbound", "frame" : 9, "id" : 50, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "sent", "packet" : 2, "time" : 330 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:13" ], [ "destinationMAC", "02:00:00:00:02:22" ] ], "direction" : "inbound", "frame" : 9, "id" : 51, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "packet" : 2, "time" : 385 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:13" ], [ "destinationMAC", "02:00:00:00:02:22" ] ], "direction" : "inbound", "frame" : 9, "id" : 52, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "packet" : 2, "time" : 385 }, { "after" : [ ], "before" : [ [ "senderIP", "20.0.0.2" ], [ "receiverIP", "10.0.0.2" ], [ "ttl", "64" ], [ "protocol", "1" ] ], "direction" : "inbound", "frame" : 9, "id" : 53, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "packet" : 2, "time" : 385 }, { "after" : [ ], "before" : [ [ "senderIP", "20.0.0.2" ], [ "receiverIP", "10.0.0.2" ], [ "ttl", "64" ], [ "protocol", "1" ] ], "detail" : "firewall inactive", "direction" : "inbound", "frame" : 9, "id" : 54, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "accepted", "packet" : 2, "time" : 385 }, { "after" : [ [ "senderIP", "20.0.0.2" ], [ "receiverIP", "10.0.0.2" ], [ "ttl", "63" ], [ "protocol", "1" ] ], "before" : [ [ "senderIP", "20.0.0.2" ], [ "receiverIP", "10.0.0.2" ], [ "ttl", "64" ], [ "protocol", "1" ] ], "detail" : "TTL decremented", "direction" : "outbound", "frame" : 9, "id" : 55, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "forwarded", "packet" : 2, "time" : 385 }, { "after" : [ [ "senderIP", "20.0.0.2" ], [ "receiverIP", "10.0.0.2" ], [ "ttl", "63" ], [ "protocol", "1" ] ], "before" : [ ], "direction" : "outbound", "frame" : 10, "id" : 56, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "forwarded", "packet" : 2, "time" : 385 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:21" ], [ "destinationMAC", "02:00:00:00:02:11" ] ], "before" : [ ], "direction" : "outbound", "frame" : 10, "id" : 57, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "created", "packet" : 2, "time" : 385 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:21" ], [ "destinationMAC", "02:00:00:00:02:11" ] ], "before" : [ ], "direction" : "outbound", "frame" : 10, "id" : 58, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "sent", "packet" : 2, "time" : 385 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:21" ], [ "destinationMAC", "02:00:00:00:02:11" ] ], "direction" : "inbound", "frame" : 10, "id" : 59, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "received", "packet" : 2, "time" : 440 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:21" ], [ "destinationMAC", "02:00:00:00:02:11" ] ], "direction" : "inbound", "frame" : 10, "id" : 60, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "received", "packet" : 2, "time" : 440 }, { "after" : [ ], "before" : [ [ "senderIP", "20.0.0.2" ], [ "receiverIP", "10.0.0.2" ], [ "ttl", "63" ], [ "protocol", "1" ] ], "direction" : "inbound", "frame" : 10, "id" : 61, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "received", "packet" : 2, "time" : 440 }, { "after" : [ ], "before" : [ [ "kind", "echoReply" ], [ "identifier", "10" ], [ "sequence", "1" ] ], "detail" : "ICMP observation queued", "direction" : "local", "id" : 62, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "accepted", "packet" : 2, "time" : 440 }, { "after" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "1" ], [ "protocol", "1" ] ], "before" : [ ], "detail" : "ICMP echo request", "direction" : "outbound", "id" : 63, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "created", "packet" : 3, "time" : 440 }, { "after" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "1" ], [ "protocol", "1" ] ], "before" : [ ], "direction" : "outbound", "frame" : 11, "id" : 64, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "sent", "packet" : 3, "time" : 440 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "02:00:00:00:02:21" ] ], "before" : [ ], "direction" : "outbound", "frame" : 11, "id" : 65, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "created", "packet" : 3, "time" : 440 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "02:00:00:00:02:21" ] ], "before" : [ ], "direction" : "outbound", "frame" : 11, "id" : 66, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "sent", "packet" : 3, "time" : 440 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "02:00:00:00:02:21" ] ], "direction" : "inbound", "frame" : 11, "id" : 67, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "packet" : 3, "time" : 495 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "02:00:00:00:02:21" ] ], "direction" : "inbound", "frame" : 11, "id" : 68, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "packet" : 3, "time" : 495 }, { "after" : [ ], "before" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "1" ], [ "protocol", "1" ] ], "direction" : "inbound", "frame" : 11, "id" : 69, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "packet" : 3, "time" : 495 }, { "after" : [ ], "before" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "1" ], [ "protocol", "1" ] ], "detail" : "firewall inactive", "direction" : "inbound", "frame" : 11, "id" : 70, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "accepted", "packet" : 3, "time" : 495 }, { "after" : [ [ "senderIP", "10.0.0.1" ], [ "receiverIP", "10.0.0.2" ], [ "ttl", "64" ], [ "protocol", "1" ] ], "before" : [ ], "detail" : "ICMP timeExceeded", "direction" : "outbound", "id" : 71, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "created", "packet" : 4, "time" : 495 }, { "after" : [ [ "senderIP", "10.0.0.1" ], [ "receiverIP", "10.0.0.2" ], [ "ttl", "64" ], [ "protocol", "1" ] ], "before" : [ ], "direction" : "outbound", "frame" : 12, "id" : 72, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "sent", "packet" : 4, "time" : 495 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:21" ], [ "destinationMAC", "02:00:00:00:02:11" ] ], "before" : [ ], "direction" : "outbound", "frame" : 12, "id" : 73, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "created", "packet" : 4, "time" : 495 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:21" ], [ "destinationMAC", "02:00:00:00:02:11" ] ], "before" : [ ], "direction" : "outbound", "frame" : 12, "id" : 74, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "sent", "packet" : 4, "time" : 495 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:21" ], [ "destinationMAC", "02:00:00:00:02:11" ] ], "direction" : "inbound", "frame" : 12, "id" : 75, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "received", "packet" : 4, "time" : 550 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:21" ], [ "destinationMAC", "02:00:00:00:02:11" ] ], "direction" : "inbound", "frame" : 12, "id" : 76, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "received", "packet" : 4, "time" : 550 }, { "after" : [ ], "before" : [ [ "senderIP", "10.0.0.1" ], [ "receiverIP", "10.0.0.2" ], [ "ttl", "64" ], [ "protocol", "1" ] ], "direction" : "inbound", "frame" : 12, "id" : 77, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "received", "packet" : 4, "time" : 550 }, { "after" : [ ], "before" : [ [ "kind", "timeExceeded" ], [ "identifier", "11" ], [ "sequence", "1" ] ], "detail" : "ICMP observation queued", "direction" : "local", "id" : 78, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "accepted", "packet" : 4, "time" : 550 }, { "after" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "1" ], [ "protocol", "1" ] ], "before" : [ ], "detail" : "ICMP echo request", "direction" : "outbound", "id" : 79, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "created", "packet" : 5, "time" : 550 }, { "after" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "1" ], [ "protocol", "1" ] ], "before" : [ ], "direction" : "outbound", "frame" : 13, "id" : 80, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "sent", "packet" : 5, "time" : 550 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "02:00:00:00:02:21" ] ], "before" : [ ], "direction" : "outbound", "frame" : 13, "id" : 81, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "created", "packet" : 5, "time" : 550 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "02:00:00:00:02:21" ] ], "before" : [ ], "direction" : "outbound", "frame" : 13, "id" : 82, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "sent", "packet" : 5, "time" : 550 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "02:00:00:00:02:21" ] ], "direction" : "inbound", "frame" : 13, "id" : 83, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "packet" : 5, "time" : 605 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "02:00:00:00:02:21" ] ], "direction" : "inbound", "frame" : 13, "id" : 84, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "packet" : 5, "time" : 605 }, { "after" : [ ], "before" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "1" ], [ "protocol", "1" ] ], "direction" : "inbound", "frame" : 13, "id" : 85, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "packet" : 5, "time" : 605 }, { "after" : [ ], "before" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "1" ], [ "protocol", "1" ] ], "detail" : "firewall inactive", "direction" : "inbound", "frame" : 13, "id" : 86, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "accepted", "packet" : 5, "time" : 605 }, { "after" : [ [ "senderIP", "10.0.0.1" ], [ "receiverIP", "10.0.0.2" ], [ "ttl", "64" ], [ "protocol", "1" ] ], "before" : [ ], "detail" : "ICMP timeExceeded", "direction" : "outbound", "id" : 87, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "created", "packet" : 6, "time" : 605 }, { "after" : [ [ "senderIP", "10.0.0.1" ], [ "receiverIP", "10.0.0.2" ], [ "ttl", "64" ], [ "protocol", "1" ] ], "before" : [ ], "direction" : "outbound", "frame" : 14, "id" : 88, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "sent", "packet" : 6, "time" : 605 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:21" ], [ "destinationMAC", "02:00:00:00:02:11" ] ], "before" : [ ], "direction" : "outbound", "frame" : 14, "id" : 89, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "created", "packet" : 6, "time" : 605 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:21" ], [ "destinationMAC", "02:00:00:00:02:11" ] ], "before" : [ ], "direction" : "outbound", "frame" : 14, "id" : 90, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "sent", "packet" : 6, "time" : 605 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:21" ], [ "destinationMAC", "02:00:00:00:02:11" ] ], "direction" : "inbound", "frame" : 14, "id" : 91, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "received", "packet" : 6, "time" : 660 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:21" ], [ "destinationMAC", "02:00:00:00:02:11" ] ], "direction" : "inbound", "frame" : 14, "id" : 92, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "received", "packet" : 6, "time" : 660 }, { "after" : [ ], "before" : [ [ "senderIP", "10.0.0.1" ], [ "receiverIP", "10.0.0.2" ], [ "ttl", "64" ], [ "protocol", "1" ] ], "direction" : "inbound", "frame" : 14, "id" : 93, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "received", "packet" : 6, "time" : 660 }, { "after" : [ ], "before" : [ [ "kind", "timeExceeded" ], [ "identifier", "12" ], [ "sequence", "1" ] ], "detail" : "ICMP observation queued", "direction" : "local", "id" : 94, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "accepted", "packet" : 6, "time" : 660 }, { "after" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "2" ], [ "protocol", "1" ] ], "before" : [ ], "detail" : "ICMP echo request", "direction" : "outbound", "id" : 95, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "created", "packet" : 7, "time" : 660 }, { "after" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "2" ], [ "protocol", "1" ] ], "before" : [ ], "direction" : "outbound", "frame" : 15, "id" : 96, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "sent", "packet" : 7, "time" : 660 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "02:00:00:00:02:21" ] ], "before" : [ ], "direction" : "outbound", "frame" : 15, "id" : 97, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "created", "packet" : 7, "time" : 660 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "02:00:00:00:02:21" ] ], "before" : [ ], "direction" : "outbound", "frame" : 15, "id" : 98, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "sent", "packet" : 7, "time" : 660 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "02:00:00:00:02:21" ] ], "direction" : "inbound", "frame" : 15, "id" : 99, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "packet" : 7, "time" : 715 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "02:00:00:00:02:21" ] ], "direction" : "inbound", "frame" : 15, "id" : 100, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "packet" : 7, "time" : 715 }, { "after" : [ ], "before" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "2" ], [ "protocol", "1" ] ], "direction" : "inbound", "frame" : 15, "id" : 101, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "packet" : 7, "time" : 715 }, { "after" : [ ], "before" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "2" ], [ "protocol", "1" ] ], "detail" : "firewall inactive", "direction" : "inbound", "frame" : 15, "id" : 102, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "accepted", "packet" : 7, "time" : 715 }, { "after" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "1" ], [ "protocol", "1" ] ], "before" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "2" ], [ "protocol", "1" ] ], "detail" : "TTL decremented", "direction" : "outbound", "frame" : 15, "id" : 103, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "forwarded", "packet" : 7, "time" : 715 }, { "after" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "1" ], [ "protocol", "1" ] ], "before" : [ ], "direction" : "outbound", "frame" : 16, "id" : 104, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "forwarded", "packet" : 7, "time" : 715 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:22" ], [ "destinationMAC", "02:00:00:00:02:13" ] ], "before" : [ ], "direction" : "outbound", "frame" : 16, "id" : 105, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "created", "packet" : 7, "time" : 715 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:22" ], [ "destinationMAC", "02:00:00:00:02:13" ] ], "before" : [ ], "direction" : "outbound", "frame" : 16, "id" : 106, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "sent", "packet" : 7, "time" : 715 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:22" ], [ "destinationMAC", "02:00:00:00:02:13" ] ], "direction" : "inbound", "frame" : 16, "id" : 107, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "received", "packet" : 7, "time" : 770 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:22" ], [ "destinationMAC", "02:00:00:00:02:13" ] ], "direction" : "inbound", "frame" : 16, "id" : 108, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "received", "packet" : 7, "time" : 770 }, { "after" : [ ], "before" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "1" ], [ "protocol", "1" ] ], "direction" : "inbound", "frame" : 16, "id" : 109, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "received", "packet" : 7, "time" : 770 }, { "after" : [ [ "senderIP", "20.0.0.2" ], [ "receiverIP", "10.0.0.2" ], [ "ttl", "64" ], [ "protocol", "1" ] ], "before" : [ ], "detail" : "ICMP echo reply", "direction" : "outbound", "id" : 110, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "created", "packet" : 8, "time" : 770 }, { "after" : [ [ "senderIP", "20.0.0.2" ], [ "receiverIP", "10.0.0.2" ], [ "ttl", "64" ], [ "protocol", "1" ] ], "before" : [ ], "direction" : "outbound", "frame" : 17, "id" : 111, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "sent", "packet" : 8, "time" : 770 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:13" ], [ "destinationMAC", "02:00:00:00:02:22" ] ], "before" : [ ], "direction" : "outbound", "frame" : 17, "id" : 112, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "created", "packet" : 8, "time" : 770 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:13" ], [ "destinationMAC", "02:00:00:00:02:22" ] ], "before" : [ ], "direction" : "outbound", "frame" : 17, "id" : 113, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "sent", "packet" : 8, "time" : 770 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:13" ], [ "destinationMAC", "02:00:00:00:02:22" ] ], "direction" : "inbound", "frame" : 17, "id" : 114, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "packet" : 8, "time" : 825 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:13" ], [ "destinationMAC", "02:00:00:00:02:22" ] ], "direction" : "inbound", "frame" : 17, "id" : 115, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "packet" : 8, "time" : 825 }, { "after" : [ ], "before" : [ [ "senderIP", "20.0.0.2" ], [ "receiverIP", "10.0.0.2" ], [ "ttl", "64" ], [ "protocol", "1" ] ], "direction" : "inbound", "frame" : 17, "id" : 116, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "packet" : 8, "time" : 825 }, { "after" : [ ], "before" : [ [ "senderIP", "20.0.0.2" ], [ "receiverIP", "10.0.0.2" ], [ "ttl", "64" ], [ "protocol", "1" ] ], "detail" : "firewall inactive", "direction" : "inbound", "frame" : 17, "id" : 117, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "accepted", "packet" : 8, "time" : 825 }, { "after" : [ [ "senderIP", "20.0.0.2" ], [ "receiverIP", "10.0.0.2" ], [ "ttl", "63" ], [ "protocol", "1" ] ], "before" : [ [ "senderIP", "20.0.0.2" ], [ "receiverIP", "10.0.0.2" ], [ "ttl", "64" ], [ "protocol", "1" ] ], "detail" : "TTL decremented", "direction" : "outbound", "frame" : 17, "id" : 118, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "forwarded", "packet" : 8, "time" : 825 }, { "after" : [ [ "senderIP", "20.0.0.2" ], [ "receiverIP", "10.0.0.2" ], [ "ttl", "63" ], [ "protocol", "1" ] ], "before" : [ ], "direction" : "outbound", "frame" : 18, "id" : 119, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "forwarded", "packet" : 8, "time" : 825 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:21" ], [ "destinationMAC", "02:00:00:00:02:11" ] ], "before" : [ ], "direction" : "outbound", "frame" : 18, "id" : 120, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "created", "packet" : 8, "time" : 825 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:21" ], [ "destinationMAC", "02:00:00:00:02:11" ] ], "before" : [ ], "direction" : "outbound", "frame" : 18, "id" : 121, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "sent", "packet" : 8, "time" : 825 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:21" ], [ "destinationMAC", "02:00:00:00:02:11" ] ], "direction" : "inbound", "frame" : 18, "id" : 122, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "received", "packet" : 8, "time" : 880 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:21" ], [ "destinationMAC", "02:00:00:00:02:11" ] ], "direction" : "inbound", "frame" : 18, "id" : 123, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "received", "packet" : 8, "time" : 880 }, { "after" : [ ], "before" : [ [ "senderIP", "20.0.0.2" ], [ "receiverIP", "10.0.0.2" ], [ "ttl", "63" ], [ "protocol", "1" ] ], "direction" : "inbound", "frame" : 18, "id" : 124, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "received", "packet" : 8, "time" : 880 }, { "after" : [ ], "before" : [ [ "kind", "echoReply" ], [ "identifier", "12" ], [ "sequence", "2" ] ], "detail" : "ICMP observation queued", "direction" : "local", "id" : 125, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "accepted", "packet" : 8, "time" : 880 }, { "after" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "30.0.0.2" ], [ "ttl", "64" ], [ "protocol", "1" ] ], "before" : [ ], "detail" : "ICMP echo request", "direction" : "outbound", "id" : 126, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "created", "packet" : 9, "time" : 880 }, { "after" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "30.0.0.2" ], [ "ttl", "64" ], [ "protocol", "1" ] ], "before" : [ ], "direction" : "outbound", "frame" : 19, "id" : 127, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "sent", "packet" : 9, "time" : 880 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "02:00:00:00:02:21" ] ], "before" : [ ], "direction" : "outbound", "frame" : 19, "id" : 128, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "created", "packet" : 9, "time" : 880 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "02:00:00:00:02:21" ] ], "before" : [ ], "direction" : "outbound", "frame" : 19, "id" : 129, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "sent", "packet" : 9, "time" : 880 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "02:00:00:00:02:21" ] ], "direction" : "inbound", "frame" : 19, "id" : 130, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "packet" : 9, "time" : 935 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "02:00:00:00:02:21" ] ], "direction" : "inbound", "frame" : 19, "id" : 131, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "packet" : 9, "time" : 935 }, { "after" : [ ], "before" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "30.0.0.2" ], [ "ttl", "64" ], [ "protocol", "1" ] ], "direction" : "inbound", "frame" : 19, "id" : 132, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "packet" : 9, "time" : 935 }, { "after" : [ ], "before" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "30.0.0.2" ], [ "ttl", "64" ], [ "protocol", "1" ] ], "detail" : "firewall inactive", "direction" : "inbound", "frame" : 19, "id" : 133, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "accepted", "packet" : 9, "time" : 935 }, { "after" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "30.0.0.2" ], [ "ttl", "63" ], [ "protocol", "1" ] ], "before" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "30.0.0.2" ], [ "ttl", "64" ], [ "protocol", "1" ] ], "detail" : "TTL decremented", "direction" : "outbound", "frame" : 19, "id" : 134, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "forwarded", "packet" : 9, "time" : 935 }, { "after" : [ [ "senderIP", "10.0.0.1" ], [ "receiverIP", "10.0.0.2" ], [ "ttl", "64" ], [ "protocol", "1" ] ], "before" : [ ], "detail" : "ICMP destinationNetworkUnreachable", "direction" : "outbound", "id" : 135, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "created", "packet" : 10, "time" : 935 }, { "after" : [ [ "senderIP", "10.0.0.1" ], [ "receiverIP", "10.0.0.2" ], [ "ttl", "64" ], [ "protocol", "1" ] ], "before" : [ ], "direction" : "outbound", "frame" : 20, "id" : 136, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "sent", "packet" : 10, "time" : 935 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:21" ], [ "destinationMAC", "02:00:00:00:02:11" ] ], "before" : [ ], "direction" : "outbound", "frame" : 20, "id" : 137, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "created", "packet" : 10, "time" : 935 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:21" ], [ "destinationMAC", "02:00:00:00:02:11" ] ], "before" : [ ], "direction" : "outbound", "frame" : 20, "id" : 138, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "sent", "packet" : 10, "time" : 935 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:21" ], [ "destinationMAC", "02:00:00:00:02:11" ] ], "direction" : "inbound", "frame" : 20, "id" : 139, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "received", "packet" : 10, "time" : 990 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:21" ], [ "destinationMAC", "02:00:00:00:02:11" ] ], "direction" : "inbound", "frame" : 20, "id" : 140, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "received", "packet" : 10, "time" : 990 }, { "after" : [ ], "before" : [ [ "senderIP", "10.0.0.1" ], [ "receiverIP", "10.0.0.2" ], [ "ttl", "64" ], [ "protocol", "1" ] ], "direction" : "inbound", "frame" : 20, "id" : 141, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "received", "packet" : 10, "time" : 990 }, { "after" : [ ], "before" : [ [ "kind", "destinationNetworkUnreachable" ], [ "identifier", "13" ], [ "sequence", "1" ] ], "detail" : "ICMP observation queued", "direction" : "local", "id" : 142, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "accepted", "packet" : 10, "time" : 990 }, { "after" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.99" ], [ "ttl", "64" ], [ "protocol", "1" ] ], "before" : [ ], "detail" : "ICMP echo request", "direction" : "outbound", "id" : 143, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "created", "packet" : 11, "time" : 990 }, { "after" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.99" ], [ "ttl", "64" ], [ "protocol", "1" ] ], "before" : [ ], "direction" : "outbound", "frame" : 21, "id" : 144, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "sent", "packet" : 11, "time" : 990 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "02:00:00:00:02:21" ] ], "before" : [ ], "direction" : "outbound", "frame" : 21, "id" : 145, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "created", "packet" : 11, "time" : 990 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "02:00:00:00:02:21" ] ], "before" : [ ], "direction" : "outbound", "frame" : 21, "id" : 146, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "sent", "packet" : 11, "time" : 990 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "02:00:00:00:02:21" ] ], "direction" : "inbound", "frame" : 21, "id" : 147, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "packet" : 11, "time" : 1045 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:11" ], [ "destinationMAC", "02:00:00:00:02:21" ] ], "direction" : "inbound", "frame" : 21, "id" : 148, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "packet" : 11, "time" : 1045 }, { "after" : [ ], "before" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.99" ], [ "ttl", "64" ], [ "protocol", "1" ] ], "direction" : "inbound", "frame" : 21, "id" : 149, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "packet" : 11, "time" : 1045 }, { "after" : [ ], "before" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.99" ], [ "ttl", "64" ], [ "protocol", "1" ] ], "detail" : "firewall inactive", "direction" : "inbound", "frame" : 21, "id" : 150, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "accepted", "packet" : 11, "time" : 1045 }, { "after" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.99" ], [ "ttl", "63" ], [ "protocol", "1" ] ], "before" : [ [ "senderIP", "10.0.0.2" ], [ "receiverIP", "20.0.0.99" ], [ "ttl", "64" ], [ "protocol", "1" ] ], "detail" : "TTL decremented", "direction" : "outbound", "frame" : 21, "id" : 151, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "forwarded", "packet" : 11, "time" : 1045 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:22" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "before" : [ ], "detail" : "ARP request for 20.0.0.99", "direction" : "outbound", "frame" : 22, "id" : 152, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "created", "time" : 1045 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:22" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "before" : [ ], "direction" : "outbound", "frame" : 22, "id" : 153, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "sent", "time" : 1045 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:22" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "before" : [ ], "detail" : "ARP request for 20.0.0.99", "direction" : "outbound", "frame" : 23, "id" : 154, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "created", "time" : 1045 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:22" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "before" : [ ], "direction" : "outbound", "frame" : 23, "id" : 155, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "sent", "time" : 1045 }, { "after" : [ [ "senderIP", "10.0.0.1" ], [ "receiverIP", "10.0.0.2" ], [ "ttl", "64" ], [ "protocol", "1" ] ], "before" : [ ], "detail" : "ICMP destinationHostUnreachable", "direction" : "outbound", "id" : 156, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "created", "packet" : 12, "time" : 1045 }, { "after" : [ [ "senderIP", "10.0.0.1" ], [ "receiverIP", "10.0.0.2" ], [ "ttl", "64" ], [ "protocol", "1" ] ], "before" : [ ], "direction" : "outbound", "frame" : 24, "id" : 157, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "sent", "packet" : 12, "time" : 1045 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:21" ], [ "destinationMAC", "02:00:00:00:02:11" ] ], "before" : [ ], "direction" : "outbound", "frame" : 24, "id" : 158, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "created", "packet" : 12, "time" : 1045 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:21" ], [ "destinationMAC", "02:00:00:00:02:11" ] ], "before" : [ ], "direction" : "outbound", "frame" : 24, "id" : 159, "interface" : "00000000-0000-0000-0000-000000000221", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "sent", "packet" : 12, "time" : 1045 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:22" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "direction" : "inbound", "frame" : 22, "id" : 160, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "received", "time" : 1100 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:22" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "direction" : "inbound", "frame" : 22, "id" : 161, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "received", "time" : 1100 }, { "after" : [ ], "before" : [ [ "operation", "request" ], [ "senderMAC", "02:00:00:00:02:22" ], [ "senderIP", "20.0.0.1" ], [ "targetMAC", "00:00:00:00:00:00" ], [ "targetIP", "20.0.0.99" ] ], "direction" : "inbound", "frame" : 22, "id" : 162, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "accepted", "time" : 1100 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:22" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "direction" : "inbound", "frame" : 23, "id" : 163, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "received", "time" : 1100 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:22" ], [ "destinationMAC", "FF:FF:FF:FF:FF:FF" ] ], "direction" : "inbound", "frame" : 23, "id" : 164, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "received", "time" : 1100 }, { "after" : [ ], "before" : [ [ "operation", "request" ], [ "senderMAC", "02:00:00:00:02:22" ], [ "senderIP", "20.0.0.1" ], [ "targetMAC", "00:00:00:00:00:00" ], [ "targetIP", "20.0.0.99" ] ], "direction" : "inbound", "frame" : 23, "id" : 165, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "accepted", "time" : 1100 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:21" ], [ "destinationMAC", "02:00:00:00:02:11" ] ], "direction" : "inbound", "frame" : 24, "id" : 166, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "received", "packet" : 12, "time" : 1100 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:21" ], [ "destinationMAC", "02:00:00:00:02:11" ] ], "direction" : "inbound", "frame" : 24, "id" : 167, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "received", "packet" : 12, "time" : 1100 }, { "after" : [ ], "before" : [ [ "senderIP", "10.0.0.1" ], [ "receiverIP", "10.0.0.2" ], [ "ttl", "64" ], [ "protocol", "1" ] ], "direction" : "inbound", "frame" : 24, "id" : 168, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "received", "packet" : 12, "time" : 1100 }, { "after" : [ ], "before" : [ [ "kind", "destinationHostUnreachable" ], [ "identifier", "14" ], [ "sequence", "1" ] ], "detail" : "ICMP observation queued", "direction" : "local", "id" : 169, "interface" : "00000000-0000-0000-0000-000000000211", "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000201", "operation" : "accepted", "packet" : 12, "time" : 1100 }, { "after" : [ [ "senderIP", "20.0.0.2" ], [ "receiverIP", "10.0.0.1" ], [ "ttl", "64" ], [ "protocol", "1" ] ], "before" : [ ], "detail" : "ICMP echo request", "direction" : "outbound", "id" : 170, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "created", "packet" : 13, "time" : 1100 }, { "after" : [ [ "senderIP", "20.0.0.2" ], [ "receiverIP", "10.0.0.1" ], [ "ttl", "64" ], [ "protocol", "1" ] ], "before" : [ ], "direction" : "outbound", "frame" : 25, "id" : 171, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "sent", "packet" : 13, "time" : 1100 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:13" ], [ "destinationMAC", "02:00:00:00:02:22" ] ], "before" : [ ], "direction" : "outbound", "frame" : 25, "id" : 172, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "created", "packet" : 13, "time" : 1100 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:13" ], [ "destinationMAC", "02:00:00:00:02:22" ] ], "before" : [ ], "direction" : "outbound", "frame" : 25, "id" : 173, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "sent", "packet" : 13, "time" : 1100 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:13" ], [ "destinationMAC", "02:00:00:00:02:22" ] ], "direction" : "inbound", "frame" : 25, "id" : 174, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "packet" : 13, "time" : 1155 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:13" ], [ "destinationMAC", "02:00:00:00:02:22" ] ], "direction" : "inbound", "frame" : 25, "id" : 175, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "packet" : 13, "time" : 1155 }, { "after" : [ ], "before" : [ [ "senderIP", "20.0.0.2" ], [ "receiverIP", "10.0.0.1" ], [ "ttl", "64" ], [ "protocol", "1" ] ], "direction" : "inbound", "frame" : 25, "id" : 176, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "received", "packet" : 13, "time" : 1155 }, { "after" : [ ], "before" : [ [ "senderIP", "20.0.0.2" ], [ "receiverIP", "10.0.0.1" ], [ "ttl", "64" ], [ "protocol", "1" ] ], "detail" : "firewall inactive", "direction" : "inbound", "frame" : 25, "id" : 177, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "accepted", "packet" : 13, "time" : 1155 }, { "after" : [ [ "senderIP", "20.0.0.1" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "64" ], [ "protocol", "1" ] ], "before" : [ ], "detail" : "ICMP echo reply", "direction" : "outbound", "id" : 178, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "created", "packet" : 14, "time" : 1155 }, { "after" : [ [ "senderIP", "20.0.0.1" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "64" ], [ "protocol", "1" ] ], "before" : [ ], "direction" : "outbound", "frame" : 26, "id" : 179, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "sent", "packet" : 14, "time" : 1155 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:22" ], [ "destinationMAC", "02:00:00:00:02:13" ] ], "before" : [ ], "direction" : "outbound", "frame" : 26, "id" : 180, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "created", "packet" : 14, "time" : 1155 }, { "after" : [ [ "sourceMAC", "02:00:00:00:02:22" ], [ "destinationMAC", "02:00:00:00:02:13" ] ], "before" : [ ], "direction" : "outbound", "frame" : 26, "id" : 181, "interface" : "00000000-0000-0000-0000-000000000222", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000202", "operation" : "sent", "packet" : 14, "time" : 1155 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:22" ], [ "destinationMAC", "02:00:00:00:02:13" ] ], "direction" : "inbound", "frame" : 26, "id" : 182, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "physical", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "received", "packet" : 14, "time" : 1210 }, { "after" : [ ], "before" : [ [ "sourceMAC", "02:00:00:00:02:22" ], [ "destinationMAC", "02:00:00:00:02:13" ] ], "direction" : "inbound", "frame" : 26, "id" : 183, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "dataLink", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "received", "packet" : 14, "time" : 1210 }, { "after" : [ ], "before" : [ [ "senderIP", "20.0.0.1" ], [ "receiverIP", "20.0.0.2" ], [ "ttl", "64" ], [ "protocol", "1" ] ], "direction" : "inbound", "frame" : 26, "id" : 184, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "network", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "received", "packet" : 14, "time" : 1210 }, { "after" : [ ], "before" : [ [ "kind", "echoReply" ], [ "identifier", "15" ], [ "sequence", "1" ] ], "detail" : "ICMP observation queued", "direction" : "local", "id" : 185, "interface" : "00000000-0000-0000-0000-000000000213", "layer" : "transport", "node" : "00000000-0000-0000-0000-000000000203", "operation" : "accepted", "packet" : 14, "time" : 1210 } ] }