captureRows.ts builds Java's rows per frame (Lauscher.datenVorbereiten): Ethernet; ARP, ICMP or IP; TCP or UDP; the data with Java's protocol recognition; with addresses and ports or ports only. The comment stays structured; captureCommentText says it with given words and numbers. ScenarioNetwork writes Java's finished tables per card (Lauscher.getDaten, German locale); all runtime runs are recorded again, NatRun has ttlOut. expectSameCaptures compares both views for every frame. Fixed where the engine differed: an ARP request's target MAC is the broadcast address, an ICMP error's identifier and sequence number are 0 (RFC 792), and host unreachable from a router carries the packet as forwarded. Not taken: Java's lower-case broadcast address in a reply to 0.0.0.0, and the typo 'Exeeded'. RIP keeps its recordings: Java's staggered router start now gives a different startup on this machine. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
1475 lines
29 KiB
JSON
1475 lines
29 KiB
JSON
{
|
|
"frames": {
|
|
"00000000-0000-0000-0000-000000000101": [
|
|
{
|
|
"time": 853,
|
|
"source": "02:00:00:00:01:12",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.20",
|
|
"targetIp": "192.168.0.10"
|
|
},
|
|
{
|
|
"time": 855,
|
|
"source": "02:00:00:00:01:11",
|
|
"destination": "02:00:00:00:01:12",
|
|
"arp": 2,
|
|
"senderIp": "192.168.0.10",
|
|
"targetIp": "192.168.0.20"
|
|
},
|
|
{
|
|
"time": 1082,
|
|
"source": "02:00:00:00:01:12",
|
|
"destination": "02:00:00:00:01:11",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.10",
|
|
"protocol": 6,
|
|
"sourcePort": 51011,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "S",
|
|
"sequence": 2000000,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 1084,
|
|
"source": "02:00:00:00:01:11",
|
|
"destination": "02:00:00:00:01:12",
|
|
"sourceIp": "192.168.0.10",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 51011,
|
|
"payload": null,
|
|
"tcpFlags": "SA",
|
|
"sequence": 1000000,
|
|
"acknowledgement": 2000001
|
|
},
|
|
{
|
|
"time": 1307,
|
|
"source": "02:00:00:00:01:12",
|
|
"destination": "02:00:00:00:01:11",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.10",
|
|
"protocol": 6,
|
|
"sourcePort": 51011,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000001,
|
|
"acknowledgement": 1000001
|
|
},
|
|
{
|
|
"time": 26580,
|
|
"source": "02:00:00:00:01:12",
|
|
"destination": "02:00:00:00:01:11",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.10",
|
|
"protocol": 6,
|
|
"sourcePort": 51011,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 2000009,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 26581,
|
|
"source": "02:00:00:00:01:11",
|
|
"destination": "02:00:00:00:01:12",
|
|
"sourceIp": "192.168.0.10",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 51011,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000001,
|
|
"acknowledgement": 2000010
|
|
},
|
|
{
|
|
"time": 26636,
|
|
"source": "02:00:00:00:01:11",
|
|
"destination": "02:00:00:00:01:12",
|
|
"sourceIp": "192.168.0.10",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 51011,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 1000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 26859,
|
|
"source": "02:00:00:00:01:12",
|
|
"destination": "02:00:00:00:01:11",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.10",
|
|
"protocol": 6,
|
|
"sourcePort": 51011,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000010,
|
|
"acknowledgement": 1000002
|
|
}
|
|
],
|
|
"00000000-0000-0000-0000-000000000102": [
|
|
{
|
|
"time": 731,
|
|
"source": "02:00:00:00:01:12",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.20",
|
|
"targetIp": "192.168.0.10"
|
|
},
|
|
{
|
|
"time": 966,
|
|
"source": "02:00:00:00:01:11",
|
|
"destination": "02:00:00:00:01:12",
|
|
"arp": 2,
|
|
"senderIp": "192.168.0.10",
|
|
"targetIp": "192.168.0.20"
|
|
},
|
|
{
|
|
"time": 968,
|
|
"source": "02:00:00:00:01:12",
|
|
"destination": "02:00:00:00:01:11",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.10",
|
|
"protocol": 6,
|
|
"sourcePort": 51011,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "S",
|
|
"sequence": 2000000,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 1195,
|
|
"source": "02:00:00:00:01:11",
|
|
"destination": "02:00:00:00:01:12",
|
|
"sourceIp": "192.168.0.10",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 51011,
|
|
"payload": null,
|
|
"tcpFlags": "SA",
|
|
"sequence": 1000000,
|
|
"acknowledgement": 2000001
|
|
},
|
|
{
|
|
"time": 1196,
|
|
"source": "02:00:00:00:01:12",
|
|
"destination": "02:00:00:00:01:11",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.10",
|
|
"protocol": 6,
|
|
"sourcePort": 51011,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000001,
|
|
"acknowledgement": 1000001
|
|
},
|
|
{
|
|
"time": 1718,
|
|
"source": "02:00:00:00:01:12",
|
|
"destination": "02:00:00:00:01:11",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.10",
|
|
"protocol": 6,
|
|
"sourcePort": 51011,
|
|
"destinationPort": 80,
|
|
"payload": "verloren",
|
|
"tcpFlags": "P",
|
|
"sequence": 2000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 9969,
|
|
"source": "02:00:00:00:01:12",
|
|
"destination": "02:00:00:00:01:11",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.10",
|
|
"protocol": 6,
|
|
"sourcePort": 51011,
|
|
"destinationPort": 80,
|
|
"payload": "verloren",
|
|
"tcpFlags": "P",
|
|
"sequence": 2000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 18219,
|
|
"source": "02:00:00:00:01:12",
|
|
"destination": "02:00:00:00:01:11",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.10",
|
|
"protocol": 6,
|
|
"sourcePort": 51011,
|
|
"destinationPort": 80,
|
|
"payload": "verloren",
|
|
"tcpFlags": "P",
|
|
"sequence": 2000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 26469,
|
|
"source": "02:00:00:00:01:12",
|
|
"destination": "02:00:00:00:01:11",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.10",
|
|
"protocol": 6,
|
|
"sourcePort": 51011,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 2000009,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 26692,
|
|
"source": "02:00:00:00:01:11",
|
|
"destination": "02:00:00:00:01:12",
|
|
"sourceIp": "192.168.0.10",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 51011,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000001,
|
|
"acknowledgement": 2000010
|
|
},
|
|
{
|
|
"time": 26747,
|
|
"source": "02:00:00:00:01:11",
|
|
"destination": "02:00:00:00:01:12",
|
|
"sourceIp": "192.168.0.10",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 51011,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 1000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 26748,
|
|
"source": "02:00:00:00:01:12",
|
|
"destination": "02:00:00:00:01:11",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.10",
|
|
"protocol": 6,
|
|
"sourcePort": 51011,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000010,
|
|
"acknowledgement": 1000002
|
|
}
|
|
],
|
|
"00000000-0000-0000-0000-000000000103": [
|
|
{
|
|
"time": 853,
|
|
"source": "02:00:00:00:01:12",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.20",
|
|
"targetIp": "192.168.0.10"
|
|
},
|
|
{
|
|
"time": 26580,
|
|
"source": "02:00:00:00:01:12",
|
|
"destination": "02:00:00:00:01:11",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.10",
|
|
"protocol": 6,
|
|
"sourcePort": 51011,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 2000009,
|
|
"acknowledgement": 0
|
|
}
|
|
]
|
|
},
|
|
"rows": {
|
|
"00000000-0000-0000-0000-000000000101": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:01:12",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:12|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:01:11",
|
|
"02:00:00:00:01:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:01:11 [op=REPLY, sender=02:00:00:00:01:11|192.168.0.10, target=02:00:00:00:01:12|192.168.0.20]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:01:12",
|
|
"02:00:00:00:01:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.20:51011",
|
|
"192.168.0.10:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 2.000.000"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:01:11",
|
|
"02:00:00:00:01:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.10:80",
|
|
"192.168.0.20:51011",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 1.000.000, ACK: 2.000.001"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:01:12",
|
|
"02:00:00:00:01:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.20:51011",
|
|
"192.168.0.10:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001, ACK: 1.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:01:12",
|
|
"02:00:00:00:01:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.20:51011",
|
|
"192.168.0.10:80",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 2.000.009"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:01:11",
|
|
"02:00:00:00:01:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.10:80",
|
|
"192.168.0.20:51011",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001, ACK: 2.000.010"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:01:11",
|
|
"02:00:00:00:01:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.10:80",
|
|
"192.168.0.20:51011",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 1.000.001"
|
|
],
|
|
[
|
|
"9",
|
|
"02:00:00:00:01:12",
|
|
"02:00:00:00:01:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.20:51011",
|
|
"192.168.0.10:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.010, ACK: 1.000.002"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000102": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:01:12",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:12|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:01:11",
|
|
"02:00:00:00:01:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:01:11 [op=REPLY, sender=02:00:00:00:01:11|192.168.0.10, target=02:00:00:00:01:12|192.168.0.20]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:01:12",
|
|
"02:00:00:00:01:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.20:51011",
|
|
"192.168.0.10:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 2.000.000"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:01:11",
|
|
"02:00:00:00:01:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.10:80",
|
|
"192.168.0.20:51011",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 1.000.000, ACK: 2.000.001"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:01:12",
|
|
"02:00:00:00:01:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.20:51011",
|
|
"192.168.0.10:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001, ACK: 1.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:01:12",
|
|
"02:00:00:00:01:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.20:51011",
|
|
"192.168.0.10:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.20:51011",
|
|
"192.168.0.10:80",
|
|
"",
|
|
"Anwendung",
|
|
"verloren"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:01:12",
|
|
"02:00:00:00:01:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.20:51011",
|
|
"192.168.0.10:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.20:51011",
|
|
"192.168.0.10:80",
|
|
"",
|
|
"Anwendung",
|
|
"verloren"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:01:12",
|
|
"02:00:00:00:01:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.20:51011",
|
|
"192.168.0.10:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.20:51011",
|
|
"192.168.0.10:80",
|
|
"",
|
|
"Anwendung",
|
|
"verloren"
|
|
],
|
|
[
|
|
"9",
|
|
"02:00:00:00:01:12",
|
|
"02:00:00:00:01:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.20:51011",
|
|
"192.168.0.10:80",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 2.000.009"
|
|
],
|
|
[
|
|
"10",
|
|
"02:00:00:00:01:11",
|
|
"02:00:00:00:01:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.10:80",
|
|
"192.168.0.20:51011",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001, ACK: 2.000.010"
|
|
],
|
|
[
|
|
"11",
|
|
"02:00:00:00:01:11",
|
|
"02:00:00:00:01:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"11",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"11",
|
|
"192.168.0.10:80",
|
|
"192.168.0.20:51011",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 1.000.001"
|
|
],
|
|
[
|
|
"12",
|
|
"02:00:00:00:01:12",
|
|
"02:00:00:00:01:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.20:51011",
|
|
"192.168.0.10:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.010, ACK: 1.000.002"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000103": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:01:12",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:12|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:01:12",
|
|
"02:00:00:00:01:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"2",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"2",
|
|
"192.168.0.20:51011",
|
|
"192.168.0.10:80",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 2.000.009"
|
|
]
|
|
]
|
|
},
|
|
"layeredRows": {
|
|
"00000000-0000-0000-0000-000000000101": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:01:12",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:12|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:01:11",
|
|
"02:00:00:00:01:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:01:11 [op=REPLY, sender=02:00:00:00:01:11|192.168.0.10, target=02:00:00:00:01:12|192.168.0.20]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:01:12",
|
|
"02:00:00:00:01:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"3",
|
|
"51011",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 2.000.000"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:01:11",
|
|
"02:00:00:00:01:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"80",
|
|
"51011",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 1.000.000, ACK: 2.000.001"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:01:12",
|
|
"02:00:00:00:01:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"51011",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001, ACK: 1.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:01:12",
|
|
"02:00:00:00:01:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"6",
|
|
"51011",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 2.000.009"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:01:11",
|
|
"02:00:00:00:01:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"80",
|
|
"51011",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001, ACK: 2.000.010"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:01:11",
|
|
"02:00:00:00:01:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"80",
|
|
"51011",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 1.000.001"
|
|
],
|
|
[
|
|
"9",
|
|
"02:00:00:00:01:12",
|
|
"02:00:00:00:01:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"51011",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.010, ACK: 1.000.002"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000102": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:01:12",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:12|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:01:11",
|
|
"02:00:00:00:01:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:01:11 [op=REPLY, sender=02:00:00:00:01:11|192.168.0.10, target=02:00:00:00:01:12|192.168.0.20]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:01:12",
|
|
"02:00:00:00:01:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"3",
|
|
"51011",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 2.000.000"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:01:11",
|
|
"02:00:00:00:01:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"80",
|
|
"51011",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 1.000.000, ACK: 2.000.001"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:01:12",
|
|
"02:00:00:00:01:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"51011",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001, ACK: 1.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:01:12",
|
|
"02:00:00:00:01:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"6",
|
|
"51011",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
null,
|
|
null,
|
|
"",
|
|
"Anwendung",
|
|
"verloren"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:01:12",
|
|
"02:00:00:00:01:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"51011",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001"
|
|
],
|
|
[
|
|
"7",
|
|
null,
|
|
null,
|
|
"",
|
|
"Anwendung",
|
|
"verloren"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:01:12",
|
|
"02:00:00:00:01:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"51011",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001"
|
|
],
|
|
[
|
|
"8",
|
|
null,
|
|
null,
|
|
"",
|
|
"Anwendung",
|
|
"verloren"
|
|
],
|
|
[
|
|
"9",
|
|
"02:00:00:00:01:12",
|
|
"02:00:00:00:01:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"51011",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 2.000.009"
|
|
],
|
|
[
|
|
"10",
|
|
"02:00:00:00:01:11",
|
|
"02:00:00:00:01:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"10",
|
|
"80",
|
|
"51011",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001, ACK: 2.000.010"
|
|
],
|
|
[
|
|
"11",
|
|
"02:00:00:00:01:11",
|
|
"02:00:00:00:01:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"11",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"11",
|
|
"80",
|
|
"51011",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 1.000.001"
|
|
],
|
|
[
|
|
"12",
|
|
"02:00:00:00:01:12",
|
|
"02:00:00:00:01:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"12",
|
|
"51011",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.010, ACK: 1.000.002"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000103": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:01:12",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:12|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:01:12",
|
|
"02:00:00:00:01:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"2",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"2",
|
|
"51011",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 2.000.009"
|
|
]
|
|
]
|
|
},
|
|
"events": [
|
|
[
|
|
216,
|
|
"server oeffnen called"
|
|
],
|
|
[
|
|
717,
|
|
"client verbinden called"
|
|
],
|
|
[
|
|
1217,
|
|
"client verbinden returned"
|
|
],
|
|
[
|
|
1319,
|
|
"server oeffnen returned"
|
|
],
|
|
[
|
|
1717,
|
|
"loss on"
|
|
],
|
|
[
|
|
1718,
|
|
"client senden called"
|
|
],
|
|
[
|
|
26469,
|
|
"client senden failed TimeOutException"
|
|
],
|
|
[
|
|
26469,
|
|
"loss off"
|
|
]
|
|
],
|
|
"states": {
|
|
"client": [
|
|
[
|
|
717,
|
|
"CLOSED"
|
|
],
|
|
[
|
|
728,
|
|
"SYN_SENT"
|
|
],
|
|
[
|
|
1198,
|
|
"ESTABLISHED"
|
|
],
|
|
[
|
|
26469,
|
|
"FIN_WAIT_1"
|
|
],
|
|
[
|
|
26694,
|
|
"FIN_WAIT_2"
|
|
],
|
|
[
|
|
26748,
|
|
"TIME_WAIT"
|
|
],
|
|
[
|
|
34999,
|
|
"CLOSED"
|
|
]
|
|
],
|
|
"server": [
|
|
[
|
|
1319,
|
|
"ESTABLISHED"
|
|
],
|
|
[
|
|
26581,
|
|
"CLOSE_WAIT"
|
|
],
|
|
[
|
|
26583,
|
|
"LAST_ACK"
|
|
],
|
|
[
|
|
26860,
|
|
"CLOSED"
|
|
]
|
|
]
|
|
}
|
|
}
|