{
  "frames": {
    "00000000-0000-0000-0000-000000000301": [
      {
        "time": 720,
        "source": "02:00:00:00:03:11",
        "destination": "FF:FF:FF:FF:FF:FF",
        "arp": 1,
        "senderIp": "10.0.0.2",
        "targetIp": "10.0.0.9"
      },
      {
        "time": 3470,
        "source": "02:00:00:00:03:11",
        "destination": "FF:FF:FF:FF:FF:FF",
        "arp": 1,
        "senderIp": "10.0.0.2",
        "targetIp": "10.0.0.9"
      },
      {
        "time": 6226,
        "source": "02:00:00:00:03:11",
        "destination": "FF:FF:FF:FF:FF:FF",
        "arp": 1,
        "senderIp": "10.0.0.2",
        "targetIp": "10.0.0.1"
      },
      {
        "time": 6449,
        "source": "02:00:00:00:03:21",
        "destination": "02:00:00:00:03:11",
        "arp": 2,
        "senderIp": "10.0.0.1",
        "targetIp": "10.0.0.2"
      },
      {
        "time": 6450,
        "source": "02:00:00:00:03:11",
        "destination": "02:00:00:00:03:21",
        "sourceIp": "10.0.0.2",
        "destinationIp": "20.0.0.2",
        "protocol": 17,
        "sourcePort": 59870,
        "destinationPort": 9,
        "payload": "dahinter"
      }
    ],
    "00000000-0000-0000-0000-000000000302": [
      {
        "time": 843,
        "source": "02:00:00:00:03:11",
        "destination": "FF:FF:FF:FF:FF:FF",
        "arp": 1,
        "senderIp": "10.0.0.2",
        "targetIp": "10.0.0.9"
      },
      {
        "time": 3582,
        "source": "02:00:00:00:03:11",
        "destination": "FF:FF:FF:FF:FF:FF",
        "arp": 1,
        "senderIp": "10.0.0.2",
        "targetIp": "10.0.0.9"
      },
      {
        "time": 6338,
        "source": "02:00:00:00:03:11",
        "destination": "FF:FF:FF:FF:FF:FF",
        "arp": 1,
        "senderIp": "10.0.0.2",
        "targetIp": "10.0.0.1"
      },
      {
        "time": 6338,
        "source": "02:00:00:00:03:21",
        "destination": "02:00:00:00:03:11",
        "arp": 2,
        "senderIp": "10.0.0.1",
        "targetIp": "10.0.0.2"
      },
      {
        "time": 6563,
        "source": "02:00:00:00:03:11",
        "destination": "02:00:00:00:03:21",
        "sourceIp": "10.0.0.2",
        "destinationIp": "20.0.0.2",
        "protocol": 17,
        "sourcePort": 59870,
        "destinationPort": 9,
        "payload": "dahinter"
      }
    ],
    "00000000-0000-0000-0000-000000000302#1": [
      {
        "time": 6563,
        "source": "02:00:00:00:03:22",
        "destination": "FF:FF:FF:FF:FF:FF",
        "arp": 1,
        "senderIp": "20.0.0.1",
        "targetIp": "20.0.0.2"
      },
      {
        "time": 6674,
        "source": "02:00:00:00:03:13",
        "destination": "02:00:00:00:03:22",
        "arp": 2,
        "senderIp": "20.0.0.2",
        "targetIp": "20.0.0.1"
      },
      {
        "time": 6675,
        "source": "02:00:00:00:03:22",
        "destination": "02:00:00:00:03:13",
        "sourceIp": "10.0.0.2",
        "destinationIp": "20.0.0.2",
        "protocol": 17,
        "sourcePort": 59870,
        "destinationPort": 9,
        "payload": "dahinter"
      }
    ],
    "00000000-0000-0000-0000-000000000303": [
      {
        "time": 6619,
        "source": "02:00:00:00:03:22",
        "destination": "FF:FF:FF:FF:FF:FF",
        "arp": 1,
        "senderIp": "20.0.0.1",
        "targetIp": "20.0.0.2"
      },
      {
        "time": 6619,
        "source": "02:00:00:00:03:13",
        "destination": "02:00:00:00:03:22",
        "arp": 2,
        "senderIp": "20.0.0.2",
        "targetIp": "20.0.0.1"
      },
      {
        "time": 6730,
        "source": "02:00:00:00:03:22",
        "destination": "02:00:00:00:03:13",
        "sourceIp": "10.0.0.2",
        "destinationIp": "20.0.0.2",
        "protocol": 17,
        "sourcePort": 59870,
        "destinationPort": 9,
        "payload": "dahinter"
      }
    ]
  },
  "rows": {
    "00000000-0000-0000-0000-000000000301": [
      [
        "1",
        "02:00:00:00:03:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "1",
        "10.0.0.2",
        "10.0.0.9",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 10.0.0.9 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.9]"
      ],
      [
        "2",
        "02:00:00:00:03:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "2",
        "10.0.0.2",
        "10.0.0.9",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 10.0.0.9 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.9]"
      ],
      [
        "3",
        "02:00:00:00:03:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "3",
        "10.0.0.2",
        "10.0.0.1",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]"
      ],
      [
        "4",
        "02:00:00:00:03:21",
        "02:00:00:00:03:11",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "4",
        "10.0.0.1",
        "10.0.0.2",
        "ARP",
        "Vermittlung",
        "MAC ist 02:00:00:00:03:21 [op=REPLY, sender=02:00:00:00:03:21|10.0.0.1, target=02:00:00:00:03:11|10.0.0.2]"
      ],
      [
        "5",
        "02:00:00:00:03:11",
        "02:00:00:00:03:21",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "5",
        "10.0.0.2",
        "20.0.0.2",
        "IP",
        "Vermittlung",
        "Protokoll: 17, TTL: 64"
      ],
      [
        "5",
        "10.0.0.2:59870",
        "20.0.0.2:9",
        "UDP",
        "Transport",
        ""
      ],
      [
        "5",
        "10.0.0.2:59870",
        "20.0.0.2:9",
        "",
        "Anwendung",
        "dahinter"
      ]
    ],
    "00000000-0000-0000-0000-000000000302": [
      [
        "1",
        "02:00:00:00:03:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "1",
        "10.0.0.2",
        "10.0.0.9",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 10.0.0.9 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.9]"
      ],
      [
        "2",
        "02:00:00:00:03:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "2",
        "10.0.0.2",
        "10.0.0.9",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 10.0.0.9 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.9]"
      ],
      [
        "3",
        "02:00:00:00:03:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "3",
        "10.0.0.2",
        "10.0.0.1",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]"
      ],
      [
        "4",
        "02:00:00:00:03:21",
        "02:00:00:00:03:11",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "4",
        "10.0.0.1",
        "10.0.0.2",
        "ARP",
        "Vermittlung",
        "MAC ist 02:00:00:00:03:21 [op=REPLY, sender=02:00:00:00:03:21|10.0.0.1, target=02:00:00:00:03:11|10.0.0.2]"
      ],
      [
        "5",
        "02:00:00:00:03:11",
        "02:00:00:00:03:21",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "5",
        "10.0.0.2",
        "20.0.0.2",
        "IP",
        "Vermittlung",
        "Protokoll: 17, TTL: 64"
      ],
      [
        "5",
        "10.0.0.2:59870",
        "20.0.0.2:9",
        "UDP",
        "Transport",
        ""
      ],
      [
        "5",
        "10.0.0.2:59870",
        "20.0.0.2:9",
        "",
        "Anwendung",
        "dahinter"
      ]
    ],
    "00000000-0000-0000-0000-000000000302#1": [
      [
        "1",
        "02:00:00:00:03:22",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "1",
        "20.0.0.1",
        "20.0.0.2",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 20.0.0.2 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.2]"
      ],
      [
        "2",
        "02:00:00:00:03:13",
        "02:00:00:00:03:22",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "2",
        "20.0.0.2",
        "20.0.0.1",
        "ARP",
        "Vermittlung",
        "MAC ist 02:00:00:00:03:13 [op=REPLY, sender=02:00:00:00:03:13|20.0.0.2, target=02:00:00:00:03:22|20.0.0.1]"
      ],
      [
        "3",
        "02:00:00:00:03:22",
        "02:00:00:00:03:13",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "3",
        "10.0.0.2",
        "20.0.0.2",
        "IP",
        "Vermittlung",
        "Protokoll: 17, TTL: 63"
      ],
      [
        "3",
        "10.0.0.2:59870",
        "20.0.0.2:9",
        "UDP",
        "Transport",
        ""
      ],
      [
        "3",
        "10.0.0.2:59870",
        "20.0.0.2:9",
        "",
        "Anwendung",
        "dahinter"
      ]
    ],
    "00000000-0000-0000-0000-000000000303": [
      [
        "1",
        "02:00:00:00:03:22",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "1",
        "20.0.0.1",
        "20.0.0.2",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 20.0.0.2 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.2]"
      ],
      [
        "2",
        "02:00:00:00:03:13",
        "02:00:00:00:03:22",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "2",
        "20.0.0.2",
        "20.0.0.1",
        "ARP",
        "Vermittlung",
        "MAC ist 02:00:00:00:03:13 [op=REPLY, sender=02:00:00:00:03:13|20.0.0.2, target=02:00:00:00:03:22|20.0.0.1]"
      ],
      [
        "3",
        "02:00:00:00:03:22",
        "02:00:00:00:03:13",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "3",
        "10.0.0.2",
        "20.0.0.2",
        "IP",
        "Vermittlung",
        "Protokoll: 17, TTL: 63"
      ],
      [
        "3",
        "10.0.0.2:59870",
        "20.0.0.2:9",
        "UDP",
        "Transport",
        ""
      ],
      [
        "3",
        "10.0.0.2:59870",
        "20.0.0.2:9",
        "",
        "Anwendung",
        "dahinter"
      ]
    ]
  },
  "layeredRows": {
    "00000000-0000-0000-0000-000000000301": [
      [
        "1",
        "02:00:00:00:03:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "1",
        "10.0.0.2",
        "10.0.0.9",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 10.0.0.9 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.9]"
      ],
      [
        "2",
        "02:00:00:00:03:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "2",
        "10.0.0.2",
        "10.0.0.9",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 10.0.0.9 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.9]"
      ],
      [
        "3",
        "02:00:00:00:03:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "3",
        "10.0.0.2",
        "10.0.0.1",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]"
      ],
      [
        "4",
        "02:00:00:00:03:21",
        "02:00:00:00:03:11",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "4",
        "10.0.0.1",
        "10.0.0.2",
        "ARP",
        "Vermittlung",
        "MAC ist 02:00:00:00:03:21 [op=REPLY, sender=02:00:00:00:03:21|10.0.0.1, target=02:00:00:00:03:11|10.0.0.2]"
      ],
      [
        "5",
        "02:00:00:00:03:11",
        "02:00:00:00:03:21",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "5",
        "10.0.0.2",
        "20.0.0.2",
        "IP",
        "Vermittlung",
        "Protokoll: 17, TTL: 64"
      ],
      [
        "5",
        "59870",
        "9",
        "UDP",
        "Transport",
        ""
      ],
      [
        "5",
        null,
        null,
        "",
        "Anwendung",
        "dahinter"
      ]
    ],
    "00000000-0000-0000-0000-000000000302": [
      [
        "1",
        "02:00:00:00:03:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "1",
        "10.0.0.2",
        "10.0.0.9",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 10.0.0.9 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.9]"
      ],
      [
        "2",
        "02:00:00:00:03:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "2",
        "10.0.0.2",
        "10.0.0.9",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 10.0.0.9 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.9]"
      ],
      [
        "3",
        "02:00:00:00:03:11",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "3",
        "10.0.0.2",
        "10.0.0.1",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]"
      ],
      [
        "4",
        "02:00:00:00:03:21",
        "02:00:00:00:03:11",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "4",
        "10.0.0.1",
        "10.0.0.2",
        "ARP",
        "Vermittlung",
        "MAC ist 02:00:00:00:03:21 [op=REPLY, sender=02:00:00:00:03:21|10.0.0.1, target=02:00:00:00:03:11|10.0.0.2]"
      ],
      [
        "5",
        "02:00:00:00:03:11",
        "02:00:00:00:03:21",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "5",
        "10.0.0.2",
        "20.0.0.2",
        "IP",
        "Vermittlung",
        "Protokoll: 17, TTL: 64"
      ],
      [
        "5",
        "59870",
        "9",
        "UDP",
        "Transport",
        ""
      ],
      [
        "5",
        null,
        null,
        "",
        "Anwendung",
        "dahinter"
      ]
    ],
    "00000000-0000-0000-0000-000000000302#1": [
      [
        "1",
        "02:00:00:00:03:22",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "1",
        "20.0.0.1",
        "20.0.0.2",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 20.0.0.2 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.2]"
      ],
      [
        "2",
        "02:00:00:00:03:13",
        "02:00:00:00:03:22",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "2",
        "20.0.0.2",
        "20.0.0.1",
        "ARP",
        "Vermittlung",
        "MAC ist 02:00:00:00:03:13 [op=REPLY, sender=02:00:00:00:03:13|20.0.0.2, target=02:00:00:00:03:22|20.0.0.1]"
      ],
      [
        "3",
        "02:00:00:00:03:22",
        "02:00:00:00:03:13",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "3",
        "10.0.0.2",
        "20.0.0.2",
        "IP",
        "Vermittlung",
        "Protokoll: 17, TTL: 63"
      ],
      [
        "3",
        "59870",
        "9",
        "UDP",
        "Transport",
        ""
      ],
      [
        "3",
        null,
        null,
        "",
        "Anwendung",
        "dahinter"
      ]
    ],
    "00000000-0000-0000-0000-000000000303": [
      [
        "1",
        "02:00:00:00:03:22",
        "FF:FF:FF:FF:FF:FF",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "1",
        "20.0.0.1",
        "20.0.0.2",
        "ARP",
        "Vermittlung",
        "Suche nach MAC für 20.0.0.2 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.2]"
      ],
      [
        "2",
        "02:00:00:00:03:13",
        "02:00:00:00:03:22",
        "",
        "Netzzugang",
        "0x806"
      ],
      [
        "2",
        "20.0.0.2",
        "20.0.0.1",
        "ARP",
        "Vermittlung",
        "MAC ist 02:00:00:00:03:13 [op=REPLY, sender=02:00:00:00:03:13|20.0.0.2, target=02:00:00:00:03:22|20.0.0.1]"
      ],
      [
        "3",
        "02:00:00:00:03:22",
        "02:00:00:00:03:13",
        "",
        "Netzzugang",
        "0x800"
      ],
      [
        "3",
        "10.0.0.2",
        "20.0.0.2",
        "IP",
        "Vermittlung",
        "Protokoll: 17, TTL: 63"
      ],
      [
        "3",
        "59870",
        "9",
        "UDP",
        "Transport",
        ""
      ],
      [
        "3",
        null,
        null,
        "",
        "Anwendung",
        "dahinter"
      ]
    ]
  },
  "events": [
    [
      711,
      "senden verloren called"
    ],
    [
      716,
      "senden verloren returned "
    ],
    [
      716,
      "senden dahinter called"
    ],
    [
      6226,
      "senden dahinter returned "
    ]
  ]
}