julian.kiedaisch/mdg-filius
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
master
mdg-filius/packages/core/test/scenarios/dns-java-referral.java.json
T
julian.kiedaischandClaude Opus 5.5 21a404693c feat(core): the packet capture's table after Java's Lauscher, measured against Java's own tables 
captureRows.ts builds Java's rows per frame (Lauscher.datenVorbereiten):
Ethernet; ARP, ICMP or IP; TCP or UDP; the data with Java's protocol
recognition; with addresses and ports or ports only. The comment stays
structured; captureCommentText says it with given words and numbers.

ScenarioNetwork writes Java's finished tables per card (Lauscher.getDaten,
German locale); all runtime runs are recorded again, NatRun has ttlOut.
expectSameCaptures compares both views for every frame. Fixed where the
engine differed: an ARP request's target MAC is the broadcast address,
an ICMP error's identifier and sequence number are 0 (RFC 792), and host
unreachable from a router carries the packet as forwarded. Not taken:
Java's lower-case broadcast address in a reply to 0.0.0.0, and the typo
'Exeeded'. RIP keeps its recordings: Java's staggered router start now
gives a different startup on this machine.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-01 15:11:05 +00:00

1123 lines
25 KiB
JSON
Raw Permalink Blame History

{
"frames": {
"00000000-0000-0000-0000-000000000101": [
{
"time": 724,
"source": "02:00:00:00:01:11",
"destination": "FF:FF:FF:FF:FF:FF",
"arp": 1,
"senderIp": "192.168.0.20",
"targetIp": "192.168.0.10"
},
{
"time": 957,
"source": "02:00:00:00:01:12",
"destination": "02:00:00:00:01:11",
"arp": 2,
"senderIp": "192.168.0.10",
"targetIp": "192.168.0.20"
},
{
"time": 959,
"source": "02:00:00:00:01:11",
"destination": "02:00:00:00:01:12",
"sourceIp": "192.168.0.20",
"destinationIp": "192.168.0.10",
"protocol": 17,
"sourcePort": 63577,
"destinationPort": 53,
"payload": "ID=25033 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.schule.de. A IN\n"
},
{
"time": 1188,
"source": "02:00:00:00:01:12",
"destination": "02:00:00:00:01:11",
"sourceIp": "192.168.0.10",
"destinationIp": "192.168.0.20",
"protocol": 17,
"sourcePort": 53,
"destinationPort": 63577,
"payload": "ID=25033 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nschule.de. NS 3600 ns.schule.de.\nns.schule.de. A 3600 192.168.0.11\n"
},
{
"time": 1189,
"source": "02:00:00:00:01:11",
"destination": "FF:FF:FF:FF:FF:FF",
"arp": 1,
"senderIp": "192.168.0.20",
"targetIp": "192.168.0.11"
},
{
"time": 1411,
"source": "02:00:00:00:01:13",
"destination": "02:00:00:00:01:11",
"arp": 2,
"senderIp": "192.168.0.11",
"targetIp": "192.168.0.20"
},
{
"time": 1411,
"source": "02:00:00:00:01:11",
"destination": "02:00:00:00:01:13",
"sourceIp": "192.168.0.20",
"destinationIp": "192.168.0.11",
"protocol": 17,
"sourcePort": 60331,
"destinationPort": 53,
"payload": "ID=21497 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.schule.de. A IN\n"
},
{
"time": 1635,
"source": "02:00:00:00:01:13",
"destination": "02:00:00:00:01:11",
"sourceIp": "192.168.0.11",
"destinationIp": "192.168.0.20",
"protocol": 17,
"sourcePort": 53,
"destinationPort": 60331,
"payload": "ID=21497 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.schule.de. A 3600 192.168.0.40\n"
}
],
"00000000-0000-0000-0000-000000000102": [
{
"time": 845,
"source": "02:00:00:00:01:11",
"destination": "FF:FF:FF:FF:FF:FF",
"arp": 1,
"senderIp": "192.168.0.20",
"targetIp": "192.168.0.10"
},
{
"time": 846,
"source": "02:00:00:00:01:12",
"destination": "02:00:00:00:01:11",
"arp": 2,
"senderIp": "192.168.0.10",
"targetIp": "192.168.0.20"
},
{
"time": 1072,
"source": "02:00:00:00:01:11",
"destination": "02:00:00:00:01:12",
"sourceIp": "192.168.0.20",
"destinationIp": "192.168.0.10",
"protocol": 17,
"sourcePort": 63577,
"destinationPort": 53,
"payload": "ID=25033 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.schule.de. A IN\n"
},
{
"time": 1077,
"source": "02:00:00:00:01:12",
"destination": "02:00:00:00:01:11",
"sourceIp": "192.168.0.10",
"destinationIp": "192.168.0.20",
"protocol": 17,
"sourcePort": 53,
"destinationPort": 63577,
"payload": "ID=25033 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nschule.de. NS 3600 ns.schule.de.\nns.schule.de. A 3600 192.168.0.11\n"
},
{
"time": 1300,
"source": "02:00:00:00:01:11",
"destination": "FF:FF:FF:FF:FF:FF",
"arp": 1,
"senderIp": "192.168.0.20",
"targetIp": "192.168.0.11"
}
],
"00000000-0000-0000-0000-000000000103": [
{
"time": 845,
"source": "02:00:00:00:01:11",
"destination": "FF:FF:FF:FF:FF:FF",
"arp": 1,
"senderIp": "192.168.0.20",
"targetIp": "192.168.0.10"
},
{
"time": 1300,
"source": "02:00:00:00:01:11",
"destination": "FF:FF:FF:FF:FF:FF",
"arp": 1,
"senderIp": "192.168.0.20",
"targetIp": "192.168.0.11"
},
{
"time": 1300,
"source": "02:00:00:00:01:13",
"destination": "02:00:00:00:01:11",
"arp": 2,
"senderIp": "192.168.0.11",
"targetIp": "192.168.0.20"
},
{
"time": 1523,
"source": "02:00:00:00:01:11",
"destination": "02:00:00:00:01:13",
"sourceIp": "192.168.0.20",
"destinationIp": "192.168.0.11",
"protocol": 17,
"sourcePort": 60331,
"destinationPort": 53,
"payload": "ID=21497 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.schule.de. A IN\n"
},
{
"time": 1524,
"source": "02:00:00:00:01:13",
"destination": "02:00:00:00:01:11",
"sourceIp": "192.168.0.11",
"destinationIp": "192.168.0.20",
"protocol": 17,
"sourcePort": 53,
"destinationPort": 60331,
"payload": "ID=21497 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.schule.de. A 3600 192.168.0.40\n"
}
],
"00000000-0000-0000-0000-000000000104": [
{
"time": 845,
"source": "02:00:00:00:01:11",
"destination": "FF:FF:FF:FF:FF:FF",
"arp": 1,
"senderIp": "192.168.0.20",
"targetIp": "192.168.0.10"
},
{
"time": 1300,
"source": "02:00:00:00:01:11",
"destination": "FF:FF:FF:FF:FF:FF",
"arp": 1,
"senderIp": "192.168.0.20",
"targetIp": "192.168.0.11"
}
]
},
"rows": {
"00000000-0000-0000-0000-000000000101": [
[
"1",
"02:00:00:00:01:11",
"FF:FF:FF:FF:FF:FF",
"",
"Netzzugang",
"0x806"
],
[
"1",
"192.168.0.20",
"192.168.0.10",
"ARP",
"Vermittlung",
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
],
[
"2",
"02:00:00:00:01:12",
"02:00:00:00:01:11",
"",
"Netzzugang",
"0x806"
],
[
"2",
"192.168.0.10",
"192.168.0.20",
"ARP",
"Vermittlung",
"MAC ist 02:00:00:00:01:12 [op=REPLY, sender=02:00:00:00:01:12|192.168.0.10, target=02:00:00:00:01:11|192.168.0.20]"
],
[
"3",
"02:00:00:00:01:11",
"02:00:00:00:01:12",
"",
"Netzzugang",
"0x800"
],
[
"3",
"192.168.0.20",
"192.168.0.10",
"IP",
"Vermittlung",
"Protokoll: 17, TTL: 64"
],
[
"3",
"192.168.0.20:63577",
"192.168.0.10:53",
"UDP",
"Transport",
""
],
[
"3",
"192.168.0.20:63577",
"192.168.0.10:53",
"DNS",
"Anwendung",
"ID=25033 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.schule.de. A IN\n"
],
[
"4",
"02:00:00:00:01:12",
"02:00:00:00:01:11",
"",
"Netzzugang",
"0x800"
],
[
"4",
"192.168.0.10",
"192.168.0.20",
"IP",
"Vermittlung",
"Protokoll: 17, TTL: 64"
],
[
"4",
"192.168.0.10:53",
"192.168.0.20:63577",
"UDP",
"Transport",
""
],
[
"4",
"192.168.0.10:53",
"192.168.0.20:63577",
"DNS",
"Anwendung",
"ID=25033 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nschule.de. NS 3600 ns.schule.de.\nns.schule.de. A 3600 192.168.0.11\n"
],
[
"5",
"02:00:00:00:01:11",
"FF:FF:FF:FF:FF:FF",
"",
"Netzzugang",
"0x806"
],
[
"5",
"192.168.0.20",
"192.168.0.11",
"ARP",
"Vermittlung",
"Suche nach MAC für 192.168.0.11 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.11]"
],
[
"6",
"02:00:00:00:01:13",
"02:00:00:00:01:11",
"",
"Netzzugang",
"0x806"
],
[
"6",
"192.168.0.11",
"192.168.0.20",
"ARP",
"Vermittlung",
"MAC ist 02:00:00:00:01:13 [op=REPLY, sender=02:00:00:00:01:13|192.168.0.11, target=02:00:00:00:01:11|192.168.0.20]"
],
[
"7",
"02:00:00:00:01:11",
"02:00:00:00:01:13",
"",
"Netzzugang",
"0x800"
],
[
"7",
"192.168.0.20",
"192.168.0.11",
"IP",
"Vermittlung",
"Protokoll: 17, TTL: 64"
],
[
"7",
"192.168.0.20:60331",
"192.168.0.11:53",
"UDP",
"Transport",
""
],
[
"7",
"192.168.0.20:60331",
"192.168.0.11:53",
"DNS",
"Anwendung",
"ID=21497 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.schule.de. A IN\n"
],
[
"8",
"02:00:00:00:01:13",
"02:00:00:00:01:11",
"",
"Netzzugang",
"0x800"
],
[
"8",
"192.168.0.11",
"192.168.0.20",
"IP",
"Vermittlung",
"Protokoll: 17, TTL: 64"
],
[
"8",
"192.168.0.11:53",
"192.168.0.20:60331",
"UDP",
"Transport",
""
],
[
"8",
"192.168.0.11:53",
"192.168.0.20:60331",
"DNS",
"Anwendung",
"ID=21497 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.schule.de. A 3600 192.168.0.40\n"
]
],
"00000000-0000-0000-0000-000000000102": [
[
"1",
"02:00:00:00:01:11",
"FF:FF:FF:FF:FF:FF",
"",
"Netzzugang",
"0x806"
],
[
"1",
"192.168.0.20",
"192.168.0.10",
"ARP",
"Vermittlung",
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
],
[
"2",
"02:00:00:00:01:12",
"02:00:00:00:01:11",
"",
"Netzzugang",
"0x806"
],
[
"2",
"192.168.0.10",
"192.168.0.20",
"ARP",
"Vermittlung",
"MAC ist 02:00:00:00:01:12 [op=REPLY, sender=02:00:00:00:01:12|192.168.0.10, target=02:00:00:00:01:11|192.168.0.20]"
],
[
"3",
"02:00:00:00:01:11",
"02:00:00:00:01:12",
"",
"Netzzugang",
"0x800"
],
[
"3",
"192.168.0.20",
"192.168.0.10",
"IP",
"Vermittlung",
"Protokoll: 17, TTL: 64"
],
[
"3",
"192.168.0.20:63577",
"192.168.0.10:53",
"UDP",
"Transport",
""
],
[
"3",
"192.168.0.20:63577",
"192.168.0.10:53",
"DNS",
"Anwendung",
"ID=25033 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.schule.de. A IN\n"
],
[
"4",
"02:00:00:00:01:12",
"02:00:00:00:01:11",
"",
"Netzzugang",
"0x800"
],
[
"4",
"192.168.0.10",
"192.168.0.20",
"IP",
"Vermittlung",
"Protokoll: 17, TTL: 64"
],
[
"4",
"192.168.0.10:53",
"192.168.0.20:63577",
"UDP",
"Transport",
""
],
[
"4",
"192.168.0.10:53",
"192.168.0.20:63577",
"DNS",
"Anwendung",
"ID=25033 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nschule.de. NS 3600 ns.schule.de.\nns.schule.de. A 3600 192.168.0.11\n"
],
[
"5",
"02:00:00:00:01:11",
"FF:FF:FF:FF:FF:FF",
"",
"Netzzugang",
"0x806"
],
[
"5",
"192.168.0.20",
"192.168.0.11",
"ARP",
"Vermittlung",
"Suche nach MAC für 192.168.0.11 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.11]"
]
],
"00000000-0000-0000-0000-000000000103": [
[
"1",
"02:00:00:00:01:11",
"FF:FF:FF:FF:FF:FF",
"",
"Netzzugang",
"0x806"
],
[
"1",
"192.168.0.20",
"192.168.0.10",
"ARP",
"Vermittlung",
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
],
[
"2",
"02:00:00:00:01:11",
"FF:FF:FF:FF:FF:FF",
"",
"Netzzugang",
"0x806"
],
[
"2",
"192.168.0.20",
"192.168.0.11",
"ARP",
"Vermittlung",
"Suche nach MAC für 192.168.0.11 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.11]"
],
[
"3",
"02:00:00:00:01:13",
"02:00:00:00:01:11",
"",
"Netzzugang",
"0x806"
],
[
"3",
"192.168.0.11",
"192.168.0.20",
"ARP",
"Vermittlung",
"MAC ist 02:00:00:00:01:13 [op=REPLY, sender=02:00:00:00:01:13|192.168.0.11, target=02:00:00:00:01:11|192.168.0.20]"
],
[
"4",
"02:00:00:00:01:11",
"02:00:00:00:01:13",
"",
"Netzzugang",
"0x800"
],
[
"4",
"192.168.0.20",
"192.168.0.11",
"IP",
"Vermittlung",
"Protokoll: 17, TTL: 64"
],
[
"4",
"192.168.0.20:60331",
"192.168.0.11:53",
"UDP",
"Transport",
""
],
[
"4",
"192.168.0.20:60331",
"192.168.0.11:53",
"DNS",
"Anwendung",
"ID=21497 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.schule.de. A IN\n"
],
[
"5",
"02:00:00:00:01:13",
"02:00:00:00:01:11",
"",
"Netzzugang",
"0x800"
],
[
"5",
"192.168.0.11",
"192.168.0.20",
"IP",
"Vermittlung",
"Protokoll: 17, TTL: 64"
],
[
"5",
"192.168.0.11:53",
"192.168.0.20:60331",
"UDP",
"Transport",
""
],
[
"5",
"192.168.0.11:53",
"192.168.0.20:60331",
"DNS",
"Anwendung",
"ID=21497 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.schule.de. A 3600 192.168.0.40\n"
]
],
"00000000-0000-0000-0000-000000000104": [
[
"1",
"02:00:00:00:01:11",
"FF:FF:FF:FF:FF:FF",
"",
"Netzzugang",
"0x806"
],
[
"1",
"192.168.0.20",
"192.168.0.10",
"ARP",
"Vermittlung",
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
],
[
"2",
"02:00:00:00:01:11",
"FF:FF:FF:FF:FF:FF",
"",
"Netzzugang",
"0x806"
],
[
"2",
"192.168.0.20",
"192.168.0.11",
"ARP",
"Vermittlung",
"Suche nach MAC für 192.168.0.11 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.11]"
]
]
},
"layeredRows": {
"00000000-0000-0000-0000-000000000101": [
[
"1",
"02:00:00:00:01:11",
"FF:FF:FF:FF:FF:FF",
"",
"Netzzugang",
"0x806"
],
[
"1",
"192.168.0.20",
"192.168.0.10",
"ARP",
"Vermittlung",
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
],
[
"2",
"02:00:00:00:01:12",
"02:00:00:00:01:11",
"",
"Netzzugang",
"0x806"
],
[
"2",
"192.168.0.10",
"192.168.0.20",
"ARP",
"Vermittlung",
"MAC ist 02:00:00:00:01:12 [op=REPLY, sender=02:00:00:00:01:12|192.168.0.10, target=02:00:00:00:01:11|192.168.0.20]"
],
[
"3",
"02:00:00:00:01:11",
"02:00:00:00:01:12",
"",
"Netzzugang",
"0x800"
],
[
"3",
"192.168.0.20",
"192.168.0.10",
"IP",
"Vermittlung",
"Protokoll: 17, TTL: 64"
],
[
"3",
"63577",
"53",
"UDP",
"Transport",
""
],
[
"3",
null,
null,
"DNS",
"Anwendung",
"ID=25033 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.schule.de. A IN\n"
],
[
"4",
"02:00:00:00:01:12",
"02:00:00:00:01:11",
"",
"Netzzugang",
"0x800"
],
[
"4",
"192.168.0.10",
"192.168.0.20",
"IP",
"Vermittlung",
"Protokoll: 17, TTL: 64"
],
[
"4",
"53",
"63577",
"UDP",
"Transport",
""
],
[
"4",
null,
null,
"DNS",
"Anwendung",
"ID=25033 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nschule.de. NS 3600 ns.schule.de.\nns.schule.de. A 3600 192.168.0.11\n"
],
[
"5",
"02:00:00:00:01:11",
"FF:FF:FF:FF:FF:FF",
"",
"Netzzugang",
"0x806"
],
[
"5",
"192.168.0.20",
"192.168.0.11",
"ARP",
"Vermittlung",
"Suche nach MAC für 192.168.0.11 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.11]"
],
[
"6",
"02:00:00:00:01:13",
"02:00:00:00:01:11",
"",
"Netzzugang",
"0x806"
],
[
"6",
"192.168.0.11",
"192.168.0.20",
"ARP",
"Vermittlung",
"MAC ist 02:00:00:00:01:13 [op=REPLY, sender=02:00:00:00:01:13|192.168.0.11, target=02:00:00:00:01:11|192.168.0.20]"
],
[
"7",
"02:00:00:00:01:11",
"02:00:00:00:01:13",
"",
"Netzzugang",
"0x800"
],
[
"7",
"192.168.0.20",
"192.168.0.11",
"IP",
"Vermittlung",
"Protokoll: 17, TTL: 64"
],
[
"7",
"60331",
"53",
"UDP",
"Transport",
""
],
[
"7",
null,
null,
"DNS",
"Anwendung",
"ID=21497 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.schule.de. A IN\n"
],
[
"8",
"02:00:00:00:01:13",
"02:00:00:00:01:11",
"",
"Netzzugang",
"0x800"
],
[
"8",
"192.168.0.11",
"192.168.0.20",
"IP",
"Vermittlung",
"Protokoll: 17, TTL: 64"
],
[
"8",
"53",
"60331",
"UDP",
"Transport",
""
],
[
"8",
null,
null,
"DNS",
"Anwendung",
"ID=21497 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.schule.de. A 3600 192.168.0.40\n"
]
],
"00000000-0000-0000-0000-000000000102": [
[
"1",
"02:00:00:00:01:11",
"FF:FF:FF:FF:FF:FF",
"",
"Netzzugang",
"0x806"
],
[
"1",
"192.168.0.20",
"192.168.0.10",
"ARP",
"Vermittlung",
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
],
[
"2",
"02:00:00:00:01:12",
"02:00:00:00:01:11",
"",
"Netzzugang",
"0x806"
],
[
"2",
"192.168.0.10",
"192.168.0.20",
"ARP",
"Vermittlung",
"MAC ist 02:00:00:00:01:12 [op=REPLY, sender=02:00:00:00:01:12|192.168.0.10, target=02:00:00:00:01:11|192.168.0.20]"
],
[
"3",
"02:00:00:00:01:11",
"02:00:00:00:01:12",
"",
"Netzzugang",
"0x800"
],
[
"3",
"192.168.0.20",
"192.168.0.10",
"IP",
"Vermittlung",
"Protokoll: 17, TTL: 64"
],
[
"3",
"63577",
"53",
"UDP",
"Transport",
""
],
[
"3",
null,
null,
"DNS",
"Anwendung",
"ID=25033 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.schule.de. A IN\n"
],
[
"4",
"02:00:00:00:01:12",
"02:00:00:00:01:11",
"",
"Netzzugang",
"0x800"
],
[
"4",
"192.168.0.10",
"192.168.0.20",
"IP",
"Vermittlung",
"Protokoll: 17, TTL: 64"
],
[
"4",
"53",
"63577",
"UDP",
"Transport",
""
],
[
"4",
null,
null,
"DNS",
"Anwendung",
"ID=25033 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nschule.de. NS 3600 ns.schule.de.\nns.schule.de. A 3600 192.168.0.11\n"
],
[
"5",
"02:00:00:00:01:11",
"FF:FF:FF:FF:FF:FF",
"",
"Netzzugang",
"0x806"
],
[
"5",
"192.168.0.20",
"192.168.0.11",
"ARP",
"Vermittlung",
"Suche nach MAC für 192.168.0.11 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.11]"
]
],
"00000000-0000-0000-0000-000000000103": [
[
"1",
"02:00:00:00:01:11",
"FF:FF:FF:FF:FF:FF",
"",
"Netzzugang",
"0x806"
],
[
"1",
"192.168.0.20",
"192.168.0.10",
"ARP",
"Vermittlung",
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
],
[
"2",
"02:00:00:00:01:11",
"FF:FF:FF:FF:FF:FF",
"",
"Netzzugang",
"0x806"
],
[
"2",
"192.168.0.20",
"192.168.0.11",
"ARP",
"Vermittlung",
"Suche nach MAC für 192.168.0.11 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.11]"
],
[
"3",
"02:00:00:00:01:13",
"02:00:00:00:01:11",
"",
"Netzzugang",
"0x806"
],
[
"3",
"192.168.0.11",
"192.168.0.20",
"ARP",
"Vermittlung",
"MAC ist 02:00:00:00:01:13 [op=REPLY, sender=02:00:00:00:01:13|192.168.0.11, target=02:00:00:00:01:11|192.168.0.20]"
],
[
"4",
"02:00:00:00:01:11",
"02:00:00:00:01:13",
"",
"Netzzugang",
"0x800"
],
[
"4",
"192.168.0.20",
"192.168.0.11",
"IP",
"Vermittlung",
"Protokoll: 17, TTL: 64"
],
[
"4",
"60331",
"53",
"UDP",
"Transport",
""
],
[
"4",
null,
null,
"DNS",
"Anwendung",
"ID=21497 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.schule.de. A IN\n"
],
[
"5",
"02:00:00:00:01:13",
"02:00:00:00:01:11",
"",
"Netzzugang",
"0x800"
],
[
"5",
"192.168.0.11",
"192.168.0.20",
"IP",
"Vermittlung",
"Protokoll: 17, TTL: 64"
],
[
"5",
"53",
"60331",
"UDP",
"Transport",
""
],
[
"5",
null,
null,
"DNS",
"Anwendung",
"ID=21497 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.schule.de. A 3600 192.168.0.40\n"
]
],
"00000000-0000-0000-0000-000000000104": [
[
"1",
"02:00:00:00:01:11",
"FF:FF:FF:FF:FF:FF",
"",
"Netzzugang",
"0x806"
],
[
"1",
"192.168.0.20",
"192.168.0.10",
"ARP",
"Vermittlung",
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
],
[
"2",
"02:00:00:00:01:11",
"FF:FF:FF:FF:FF:FF",
"",
"Netzzugang",
"0x806"
],
[
"2",
"192.168.0.20",
"192.168.0.11",
"ARP",
"Vermittlung",
"Suche nach MAC für 192.168.0.11 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.11]"
]
]
},
"events": [
[
714,
"holeIPAdresse www.schule.de called"
],
[
1635,
"holeIPAdresse www.schule.de returned 192.168.0.40"
]
]
}
Reference in New Issue View Git Blame Copy Permalink