{
  "frames": {
    "00000000-0000-0000-0000-000000000101": [
      {
        "time": 724,
        "source": "02:00:00:00:01:11",
        "destination": "FF:FF:FF:FF:FF:FF",
        "arp": 1,
        "senderIp": "192.168.0.20",
        "targetIp": "192.168.0.10"
      },
      {
        "time": 957,
        "source": "02:00:00:00:01:12",
        "destination": "02:00:00:00:01:11",
        "arp": 2,
        "senderIp": "192.168.0.10",
        "targetIp": "192.168.0.20"
      },
      {
        "time": 959,
        "source": "02:00:00:00:01:11",
        "destination": "02:00:00:00:01:12",
        "sourceIp": "192.168.0.20",
        "destinationIp": "192.168.0.10",
        "protocol": 17,
        "sourcePort": 63577,
        "destinationPort": 53,
        "payload": "ID=25033 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.schule.de. A IN\n"
      },
      {
        "time": 1188,
        "source": "02:00:00:00:01:12",
        "destination": "02:00:00:00:01:11",
        "sourceIp": "192.168.0.10",
        "destinationIp": "192.168.0.20",
        "protocol": 17,
        "sourcePort": 53,
        "destinationPort": 63577,
        "payload": "ID=25033 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nschule.de. NS 3600 ns.schule.de.\nns.schule.de. A 3600 192.168.0.11\n"
      },
      {
        "time": 1189,
        "source": "02:00:00:00:01:11",
        "destination": "FF:FF:FF:FF:FF:FF",
        "arp": 1,
        "senderIp": "192.168.0.20",
        "targetIp": "192.168.0.11"
      },
      {
        "time": 1411,
        "source": "02:00:00:00:01:13",
        "destination": "02:00:00:00:01:11",
        "arp": 2,
        "senderIp": "192.168.0.11",
        "targetIp": "192.168.0.20"
      },
      {
        "time": 1411,
        "source": "02:00:00:00:01:11",
        "destination": "02:00:00:00:01:13",
        "sourceIp": "192.168.0.20",
        "destinationIp": "192.168.0.11",
        "protocol": 17,
        "sourcePort": 60331,
        "destinationPort": 53,
        "payload": "ID=21497 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.schule.de. A IN\n"
      },
      {
        "time": 1635,
        "source": "02:00:00:00:01:13",
        "destination": "02:00:00:00:01:11",
        "sourceIp": "192.168.0.11",
        "destinationIp": "192.168.0.20",
        "protocol": 17,
        "sourcePort": 53,
        "destinationPort": 60331,
        "payload": "ID=21497 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.schule.de. A 3600 192.168.0.40\n"
      }
    ],
    "00000000-0000-0000-0000-000000000102": [
      {
        "time": 845,
        "source": "02:00:00:00:01:11",
        "destination": "FF:FF:FF:FF:FF:FF",
        "arp": 1,
        "senderIp": "192.168.0.20",
        "targetIp": "192.168.0.10"
      },
      {
        "time": 846,
        "source": "02:00:00:00:01:12",
        "destination": "02:00:00:00:01:11",
        "arp": 2,
        "senderIp": "192.168.0.10",
        "targetIp": "192.168.0.20"
      },
      {
        "time": 1072,
        "source": "02:00:00:00:01:11",
        "destination": "02:00:00:00:01:12",
        "sourceIp": "192.168.0.20",
        "destinationIp": "192.168.0.10",
        "protocol": 17,
        "sourcePort": 63577,
        "destinationPort": 53,
        "payload": "ID=25033 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.schule.de. A IN\n"
      },
      {
        "time": 1077,
        "source": "02:00:00:00:01:12",
        "destination": "02:00:00:00:01:11",
        "sourceIp": "192.168.0.10",
        "destinationIp": "192.168.0.20",
        "protocol": 17,
        "sourcePort": 53,
        "destinationPort": 63577,
        "payload": "ID=25033 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nschule.de. NS 3600 ns.schule.de.\nns.schule.de. A 3600 192.168.0.11\n"
      },
      {
        "time": 1300,
        "source": "02:00:00:00:01:11",
        "destination": "FF:FF:FF:FF:FF:FF",
        "arp": 1,
        "senderIp": "192.168.0.20",
        "targetIp": "192.168.0.11"
      }
    ],
    "00000000-0000-0000-0000-000000000103": [
      {
        "time": 845,
        "source": "02:00:00:00:01:11",
        "destination": "FF:FF:FF:FF:FF:FF",
        "arp": 1,
        "senderIp": "192.168.0.20",
        "targetIp": "192.168.0.10"
      },
      {
        "time": 1300,
        "source": "02:00:00:00:01:11",
        "destination": "FF:FF:FF:FF:FF:FF",
        "arp": 1,
        "senderIp": "192.168.0.20",
        "targetIp": "192.168.0.11"
      },
      {
        "time": 1300,
        "source": "02:00:00:00:01:13",
        "destination": "02:00:00:00:01:11",
        "arp": 2,
        "senderIp": "192.168.0.11",
        "targetIp": "192.168.0.20"
      },
      {
        "time": 1523,
        "source": "02:00:00:00:01:11",
        "destination": "02:00:00:00:01:13",
        "sourceIp": "192.168.0.20",
        "destinationIp": "192.168.0.11",
        "protocol": 17,
        "sourcePort": 60331,
        "destinationPort": 53,
        "payload": "ID=21497 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.schule.de. A IN\n"
      },
      {
        "time": 1524,
        "source": "02:00:00:00:01:13",
        "destination": "02:00:00:00:01:11",
        "sourceIp": "192.168.0.11",
        "destinationIp": "192.168.0.20",
        "protocol": 17,
        "sourcePort": 53,
        "destinationPort": 60331,
        "payload": "ID=21497 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.schule.de. A 3600 192.168.0.40\n"
      }
    ],
    "00000000-0000-0000-0000-000000000104": [
      {
        "time": 845,
        "source": "02:00:00:00:01:11",
        "destination": "FF:FF:FF:FF:FF:FF",
        "arp": 1,
        "senderIp": "192.168.0.20",
        "targetIp": "192.168.0.10"
      },
      {
        "time": 1300,
        "source": "02:00:00:00:01:11",
        "destination": "FF:FF:FF:FF:FF:FF",
        "arp": 1,
        "senderIp": "192.168.0.20",
        "targetIp": "192.168.0.11"
      }
    ]
  },
  "rows": {
    "00000000-0000-0000-0000-000000000101": [
      [
        "1",
        "02:00:00:00:01:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "1",
        "192.168.0.20",
        "192.168.0.10",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
      ],
      [
        "2",
        "02:00:00:00:01:12",
        "02:00:00:00:01:11",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "2",
        "192.168.0.10",
        "192.168.0.20",
        "ARP",
        "Vermittlung",
        "MAC ist 02:00:00:00:01:12 [op=REPLY, sender=02:00:00:00:01:12|192.168.0.10, target=02:00:00:00:01:11|192.168.0.20]"
      ],
      [
        "3",
        "02:00:00:00:01:11",
        "02:00:00:00:01:12",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "3",
        "192.168.0.20",
        "192.168.0.10",
        "IP",
        "Vermittlung",
        "Protokoll: 17, TTL: 64"
      ],
      [
        "3",
        "192.168.0.20:63577",
        "192.168.0.10:53",
        "UDP",
        "Transport",
        ""
      ],
      [
        "3",
        "192.168.0.20:63577",
        "192.168.0.10:53",
        "DNS",
        "Anwendung",
        "ID=25033 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.schule.de. A IN\n"
      ],
      [
        "4",
        "02:00:00:00:01:12",
        "02:00:00:00:01:11",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "4",
        "192.168.0.10",
        "192.168.0.20",
        "IP",
        "Vermittlung",
        "Protokoll: 17, TTL: 64"
      ],
      [
        "4",
        "192.168.0.10:53",
        "192.168.0.20:63577",
        "UDP",
        "Transport",
        ""
      ],
      [
        "4",
        "192.168.0.10:53",
        "192.168.0.20:63577",
        "DNS",
        "Anwendung",
        "ID=25033 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nschule.de. NS 3600 ns.schule.de.\nns.schule.de. A 3600 192.168.0.11\n"
      ],
      [
        "5",
        "02:00:00:00:01:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "5",
        "192.168.0.20",
        "192.168.0.11",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 192.168.0.11 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.11]"
      ],
      [
        "6",
        "02:00:00:00:01:13",
        "02:00:00:00:01:11",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "6",
        "192.168.0.11",
        "192.168.0.20",
        "ARP",
        "Vermittlung",
        "MAC ist 02:00:00:00:01:13 [op=REPLY, sender=02:00:00:00:01:13|192.168.0.11, target=02:00:00:00:01:11|192.168.0.20]"
      ],
      [
        "7",
        "02:00:00:00:01:11",
        "02:00:00:00:01:13",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "7",
        "192.168.0.20",
        "192.168.0.11",
        "IP",
        "Vermittlung",
        "Protokoll: 17, TTL: 64"
      ],
      [
        "7",
        "192.168.0.20:60331",
        "192.168.0.11:53",
        "UDP",
        "Transport",
        ""
      ],
      [
        "7",
        "192.168.0.20:60331",
        "192.168.0.11:53",
        "DNS",
        "Anwendung",
        "ID=21497 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.schule.de. A IN\n"
      ],
      [
        "8",
        "02:00:00:00:01:13",
        "02:00:00:00:01:11",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "8",
        "192.168.0.11",
        "192.168.0.20",
        "IP",
        "Vermittlung",
        "Protokoll: 17, TTL: 64"
      ],
      [
        "8",
        "192.168.0.11:53",
        "192.168.0.20:60331",
        "UDP",
        "Transport",
        ""
      ],
      [
        "8",
        "192.168.0.11:53",
        "192.168.0.20:60331",
        "DNS",
        "Anwendung",
        "ID=21497 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.schule.de. A 3600 192.168.0.40\n"
      ]
    ],
    "00000000-0000-0000-0000-000000000102": [
      [
        "1",
        "02:00:00:00:01:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "1",
        "192.168.0.20",
        "192.168.0.10",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
      ],
      [
        "2",
        "02:00:00:00:01:12",
        "02:00:00:00:01:11",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "2",
        "192.168.0.10",
        "192.168.0.20",
        "ARP",
        "Vermittlung",
        "MAC ist 02:00:00:00:01:12 [op=REPLY, sender=02:00:00:00:01:12|192.168.0.10, target=02:00:00:00:01:11|192.168.0.20]"
      ],
      [
        "3",
        "02:00:00:00:01:11",
        "02:00:00:00:01:12",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "3",
        "192.168.0.20",
        "192.168.0.10",
        "IP",
        "Vermittlung",
        "Protokoll: 17, TTL: 64"
      ],
      [
        "3",
        "192.168.0.20:63577",
        "192.168.0.10:53",
        "UDP",
        "Transport",
        ""
      ],
      [
        "3",
        "192.168.0.20:63577",
        "192.168.0.10:53",
        "DNS",
        "Anwendung",
        "ID=25033 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.schule.de. A IN\n"
      ],
      [
        "4",
        "02:00:00:00:01:12",
        "02:00:00:00:01:11",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "4",
        "192.168.0.10",
        "192.168.0.20",
        "IP",
        "Vermittlung",
        "Protokoll: 17, TTL: 64"
      ],
      [
        "4",
        "192.168.0.10:53",
        "192.168.0.20:63577",
        "UDP",
        "Transport",
        ""
      ],
      [
        "4",
        "192.168.0.10:53",
        "192.168.0.20:63577",
        "DNS",
        "Anwendung",
        "ID=25033 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nschule.de. NS 3600 ns.schule.de.\nns.schule.de. A 3600 192.168.0.11\n"
      ],
      [
        "5",
        "02:00:00:00:01:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "5",
        "192.168.0.20",
        "192.168.0.11",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 192.168.0.11 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.11]"
      ]
    ],
    "00000000-0000-0000-0000-000000000103": [
      [
        "1",
        "02:00:00:00:01:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "1",
        "192.168.0.20",
        "192.168.0.10",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
      ],
      [
        "2",
        "02:00:00:00:01:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "2",
        "192.168.0.20",
        "192.168.0.11",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 192.168.0.11 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.11]"
      ],
      [
        "3",
        "02:00:00:00:01:13",
        "02:00:00:00:01:11",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "3",
        "192.168.0.11",
        "192.168.0.20",
        "ARP",
        "Vermittlung",
        "MAC ist 02:00:00:00:01:13 [op=REPLY, sender=02:00:00:00:01:13|192.168.0.11, target=02:00:00:00:01:11|192.168.0.20]"
      ],
      [
        "4",
        "02:00:00:00:01:11",
        "02:00:00:00:01:13",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "4",
        "192.168.0.20",
        "192.168.0.11",
        "IP",
        "Vermittlung",
        "Protokoll: 17, TTL: 64"
      ],
      [
        "4",
        "192.168.0.20:60331",
        "192.168.0.11:53",
        "UDP",
        "Transport",
        ""
      ],
      [
        "4",
        "192.168.0.20:60331",
        "192.168.0.11:53",
        "DNS",
        "Anwendung",
        "ID=21497 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.schule.de. A IN\n"
      ],
      [
        "5",
        "02:00:00:00:01:13",
        "02:00:00:00:01:11",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "5",
        "192.168.0.11",
        "192.168.0.20",
        "IP",
        "Vermittlung",
        "Protokoll: 17, TTL: 64"
      ],
      [
        "5",
        "192.168.0.11:53",
        "192.168.0.20:60331",
        "UDP",
        "Transport",
        ""
      ],
      [
        "5",
        "192.168.0.11:53",
        "192.168.0.20:60331",
        "DNS",
        "Anwendung",
        "ID=21497 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.schule.de. A 3600 192.168.0.40\n"
      ]
    ],
    "00000000-0000-0000-0000-000000000104": [
      [
        "1",
        "02:00:00:00:01:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "1",
        "192.168.0.20",
        "192.168.0.10",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
      ],
      [
        "2",
        "02:00:00:00:01:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "2",
        "192.168.0.20",
        "192.168.0.11",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 192.168.0.11 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.11]"
      ]
    ]
  },
  "layeredRows": {
    "00000000-0000-0000-0000-000000000101": [
      [
        "1",
        "02:00:00:00:01:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "1",
        "192.168.0.20",
        "192.168.0.10",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
      ],
      [
        "2",
        "02:00:00:00:01:12",
        "02:00:00:00:01:11",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "2",
        "192.168.0.10",
        "192.168.0.20",
        "ARP",
        "Vermittlung",
        "MAC ist 02:00:00:00:01:12 [op=REPLY, sender=02:00:00:00:01:12|192.168.0.10, target=02:00:00:00:01:11|192.168.0.20]"
      ],
      [
        "3",
        "02:00:00:00:01:11",
        "02:00:00:00:01:12",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "3",
        "192.168.0.20",
        "192.168.0.10",
        "IP",
        "Vermittlung",
        "Protokoll: 17, TTL: 64"
      ],
      [
        "3",
        "63577",
        "53",
        "UDP",
        "Transport",
        ""
      ],
      [
        "3",
        null,
        null,
        "DNS",
        "Anwendung",
        "ID=25033 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.schule.de. A IN\n"
      ],
      [
        "4",
        "02:00:00:00:01:12",
        "02:00:00:00:01:11",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "4",
        "192.168.0.10",
        "192.168.0.20",
        "IP",
        "Vermittlung",
        "Protokoll: 17, TTL: 64"
      ],
      [
        "4",
        "53",
        "63577",
        "UDP",
        "Transport",
        ""
      ],
      [
        "4",
        null,
        null,
        "DNS",
        "Anwendung",
        "ID=25033 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nschule.de. NS 3600 ns.schule.de.\nns.schule.de. A 3600 192.168.0.11\n"
      ],
      [
        "5",
        "02:00:00:00:01:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "5",
        "192.168.0.20",
        "192.168.0.11",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 192.168.0.11 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.11]"
      ],
      [
        "6",
        "02:00:00:00:01:13",
        "02:00:00:00:01:11",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "6",
        "192.168.0.11",
        "192.168.0.20",
        "ARP",
        "Vermittlung",
        "MAC ist 02:00:00:00:01:13 [op=REPLY, sender=02:00:00:00:01:13|192.168.0.11, target=02:00:00:00:01:11|192.168.0.20]"
      ],
      [
        "7",
        "02:00:00:00:01:11",
        "02:00:00:00:01:13",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "7",
        "192.168.0.20",
        "192.168.0.11",
        "IP",
        "Vermittlung",
        "Protokoll: 17, TTL: 64"
      ],
      [
        "7",
        "60331",
        "53",
        "UDP",
        "Transport",
        ""
      ],
      [
        "7",
        null,
        null,
        "DNS",
        "Anwendung",
        "ID=21497 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.schule.de. A IN\n"
      ],
      [
        "8",
        "02:00:00:00:01:13",
        "02:00:00:00:01:11",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "8",
        "192.168.0.11",
        "192.168.0.20",
        "IP",
        "Vermittlung",
        "Protokoll: 17, TTL: 64"
      ],
      [
        "8",
        "53",
        "60331",
        "UDP",
        "Transport",
        ""
      ],
      [
        "8",
        null,
        null,
        "DNS",
        "Anwendung",
        "ID=21497 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.schule.de. A 3600 192.168.0.40\n"
      ]
    ],
    "00000000-0000-0000-0000-000000000102": [
      [
        "1",
        "02:00:00:00:01:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "1",
        "192.168.0.20",
        "192.168.0.10",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
      ],
      [
        "2",
        "02:00:00:00:01:12",
        "02:00:00:00:01:11",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "2",
        "192.168.0.10",
        "192.168.0.20",
        "ARP",
        "Vermittlung",
        "MAC ist 02:00:00:00:01:12 [op=REPLY, sender=02:00:00:00:01:12|192.168.0.10, target=02:00:00:00:01:11|192.168.0.20]"
      ],
      [
        "3",
        "02:00:00:00:01:11",
        "02:00:00:00:01:12",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "3",
        "192.168.0.20",
        "192.168.0.10",
        "IP",
        "Vermittlung",
        "Protokoll: 17, TTL: 64"
      ],
      [
        "3",
        "63577",
        "53",
        "UDP",
        "Transport",
        ""
      ],
      [
        "3",
        null,
        null,
        "DNS",
        "Anwendung",
        "ID=25033 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.schule.de. A IN\n"
      ],
      [
        "4",
        "02:00:00:00:01:12",
        "02:00:00:00:01:11",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "4",
        "192.168.0.10",
        "192.168.0.20",
        "IP",
        "Vermittlung",
        "Protokoll: 17, TTL: 64"
      ],
      [
        "4",
        "53",
        "63577",
        "UDP",
        "Transport",
        ""
      ],
      [
        "4",
        null,
        null,
        "DNS",
        "Anwendung",
        "ID=25033 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nschule.de. NS 3600 ns.schule.de.\nns.schule.de. A 3600 192.168.0.11\n"
      ],
      [
        "5",
        "02:00:00:00:01:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "5",
        "192.168.0.20",
        "192.168.0.11",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 192.168.0.11 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.11]"
      ]
    ],
    "00000000-0000-0000-0000-000000000103": [
      [
        "1",
        "02:00:00:00:01:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "1",
        "192.168.0.20",
        "192.168.0.10",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
      ],
      [
        "2",
        "02:00:00:00:01:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "2",
        "192.168.0.20",
        "192.168.0.11",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 192.168.0.11 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.11]"
      ],
      [
        "3",
        "02:00:00:00:01:13",
        "02:00:00:00:01:11",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "3",
        "192.168.0.11",
        "192.168.0.20",
        "ARP",
        "Vermittlung",
        "MAC ist 02:00:00:00:01:13 [op=REPLY, sender=02:00:00:00:01:13|192.168.0.11, target=02:00:00:00:01:11|192.168.0.20]"
      ],
      [
        "4",
        "02:00:00:00:01:11",
        "02:00:00:00:01:13",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "4",
        "192.168.0.20",
        "192.168.0.11",
        "IP",
        "Vermittlung",
        "Protokoll: 17, TTL: 64"
      ],
      [
        "4",
        "60331",
        "53",
        "UDP",
        "Transport",
        ""
      ],
      [
        "4",
        null,
        null,
        "DNS",
        "Anwendung",
        "ID=21497 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.schule.de. A IN\n"
      ],
      [
        "5",
        "02:00:00:00:01:13",
        "02:00:00:00:01:11",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "5",
        "192.168.0.11",
        "192.168.0.20",
        "IP",
        "Vermittlung",
        "Protokoll: 17, TTL: 64"
      ],
      [
        "5",
        "53",
        "60331",
        "UDP",
        "Transport",
        ""
      ],
      [
        "5",
        null,
        null,
        "DNS",
        "Anwendung",
        "ID=21497 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.schule.de. A 3600 192.168.0.40\n"
      ]
    ],
    "00000000-0000-0000-0000-000000000104": [
      [
        "1",
        "02:00:00:00:01:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "1",
        "192.168.0.20",
        "192.168.0.10",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
      ],
      [
        "2",
        "02:00:00:00:01:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "2",
        "192.168.0.20",
        "192.168.0.11",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 192.168.0.11 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.11]"
      ]
    ]
  },
  "events": [
    [
      714,
      "holeIPAdresse www.schule.de called"
    ],
    [
      1635,
      "holeIPAdresse www.schule.de returned 192.168.0.40"
    ]
  ]
}