Routers and home routers start a web server on port 80 with Java's index, log and routes pages in the project's language (routerPages.ts); the firewall keeps a log per node that outlives a new start; RIP routes carry the telling router's public address. TCP counts sequence numbers and segments in Java's characters, not bytes. RouterWebRun records six stories, with firewalls now built by ScenarioNetwork. Not taken from Java: its router server sometimes never listening (a race in setAktiv), and </titel>. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
1708 lines
36 KiB
JSON
1708 lines
36 KiB
JSON
{
|
|
"frames": {
|
|
"00000000-0000-0000-0000-000000000501": [],
|
|
"00000000-0000-0000-0000-000000000502": [
|
|
{
|
|
"time": 642,
|
|
"source": "02:00:00:00:05:41",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "42.0.0.20",
|
|
"targetIp": "42.0.0.10"
|
|
},
|
|
{
|
|
"time": 644,
|
|
"source": "02:00:00:00:05:21",
|
|
"destination": "02:00:00:00:05:41",
|
|
"arp": 2,
|
|
"senderIp": "42.0.0.10",
|
|
"targetIp": "42.0.0.20"
|
|
},
|
|
{
|
|
"time": 872,
|
|
"source": "02:00:00:00:05:41",
|
|
"destination": "02:00:00:00:05:21",
|
|
"sourceIp": "42.0.0.20",
|
|
"destinationIp": "42.0.0.10",
|
|
"protocol": 6,
|
|
"sourcePort": 52794,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "S",
|
|
"sequence": 2000000,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 874,
|
|
"source": "02:00:00:00:05:21",
|
|
"destination": "02:00:00:00:05:41",
|
|
"sourceIp": "42.0.0.10",
|
|
"destinationIp": "42.0.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 52794,
|
|
"payload": null,
|
|
"tcpFlags": "SA",
|
|
"sequence": 1000000,
|
|
"acknowledgement": 2000001
|
|
},
|
|
{
|
|
"time": 1098,
|
|
"source": "02:00:00:00:05:41",
|
|
"destination": "02:00:00:00:05:21",
|
|
"sourceIp": "42.0.0.20",
|
|
"destinationIp": "42.0.0.10",
|
|
"protocol": 6,
|
|
"sourcePort": 52794,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000001,
|
|
"acknowledgement": 1000001
|
|
},
|
|
{
|
|
"time": 1154,
|
|
"source": "02:00:00:00:05:41",
|
|
"destination": "02:00:00:00:05:21",
|
|
"sourceIp": "42.0.0.20",
|
|
"destinationIp": "42.0.0.10",
|
|
"protocol": 6,
|
|
"sourcePort": 52794,
|
|
"destinationPort": 80,
|
|
"payload": "GET / HTTP/1.1\nHost: 42.0.0.10\n",
|
|
"tcpFlags": "P",
|
|
"sequence": 2000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 1154,
|
|
"source": "02:00:00:00:05:21",
|
|
"destination": "02:00:00:00:05:41",
|
|
"sourceIp": "42.0.0.10",
|
|
"destinationIp": "42.0.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 52794,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000001,
|
|
"acknowledgement": 2000032
|
|
},
|
|
{
|
|
"time": 1210,
|
|
"source": "02:00:00:00:05:21",
|
|
"destination": "02:00:00:00:05:41",
|
|
"sourceIp": "42.0.0.10",
|
|
"destinationIp": "42.0.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 52794,
|
|
"payload": "HTTP/1.1 200 OK\nContent-type: text/html\n\n<html>\n <head>\n <title>Administration des Gateways</title>\n </head>\n <body>\n <h1>Firewall-Administration</h1>\n <p> <a href=\"konfig\">Konfiguration</a> </p>\n <p> <a href=\"log\">Log-Einträge anzeigen</a> </p>\n </body>\n</html>\n",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 1433,
|
|
"source": "02:00:00:00:05:41",
|
|
"destination": "02:00:00:00:05:21",
|
|
"sourceIp": "42.0.0.20",
|
|
"destinationIp": "42.0.0.10",
|
|
"protocol": 6,
|
|
"sourcePort": 52794,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000032,
|
|
"acknowledgement": 1000285
|
|
},
|
|
{
|
|
"time": 1488,
|
|
"source": "02:00:00:00:05:41",
|
|
"destination": "02:00:00:00:05:21",
|
|
"sourceIp": "42.0.0.20",
|
|
"destinationIp": "42.0.0.10",
|
|
"protocol": 6,
|
|
"sourcePort": 52794,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 2000032,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 1489,
|
|
"source": "02:00:00:00:05:21",
|
|
"destination": "02:00:00:00:05:41",
|
|
"sourceIp": "42.0.0.10",
|
|
"destinationIp": "42.0.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 52794,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000285,
|
|
"acknowledgement": 2000033
|
|
},
|
|
{
|
|
"time": 1544,
|
|
"source": "02:00:00:00:05:21",
|
|
"destination": "02:00:00:00:05:41",
|
|
"sourceIp": "42.0.0.10",
|
|
"destinationIp": "42.0.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 52794,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 1000285,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 1767,
|
|
"source": "02:00:00:00:05:41",
|
|
"destination": "02:00:00:00:05:21",
|
|
"sourceIp": "42.0.0.20",
|
|
"destinationIp": "42.0.0.10",
|
|
"protocol": 6,
|
|
"sourcePort": 52794,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000033,
|
|
"acknowledgement": 1000286
|
|
}
|
|
],
|
|
"00000000-0000-0000-0000-000000000502#1": [],
|
|
"00000000-0000-0000-0000-000000000504": [
|
|
{
|
|
"time": 518,
|
|
"source": "02:00:00:00:05:41",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "42.0.0.20",
|
|
"targetIp": "42.0.0.10"
|
|
},
|
|
{
|
|
"time": 755,
|
|
"source": "02:00:00:00:05:21",
|
|
"destination": "02:00:00:00:05:41",
|
|
"arp": 2,
|
|
"senderIp": "42.0.0.10",
|
|
"targetIp": "42.0.0.20"
|
|
},
|
|
{
|
|
"time": 757,
|
|
"source": "02:00:00:00:05:41",
|
|
"destination": "02:00:00:00:05:21",
|
|
"sourceIp": "42.0.0.20",
|
|
"destinationIp": "42.0.0.10",
|
|
"protocol": 6,
|
|
"sourcePort": 52794,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "S",
|
|
"sequence": 2000000,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 986,
|
|
"source": "02:00:00:00:05:21",
|
|
"destination": "02:00:00:00:05:41",
|
|
"sourceIp": "42.0.0.10",
|
|
"destinationIp": "42.0.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 52794,
|
|
"payload": null,
|
|
"tcpFlags": "SA",
|
|
"sequence": 1000000,
|
|
"acknowledgement": 2000001
|
|
},
|
|
{
|
|
"time": 986,
|
|
"source": "02:00:00:00:05:41",
|
|
"destination": "02:00:00:00:05:21",
|
|
"sourceIp": "42.0.0.20",
|
|
"destinationIp": "42.0.0.10",
|
|
"protocol": 6,
|
|
"sourcePort": 52794,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000001,
|
|
"acknowledgement": 1000001
|
|
},
|
|
{
|
|
"time": 1042,
|
|
"source": "02:00:00:00:05:41",
|
|
"destination": "02:00:00:00:05:21",
|
|
"sourceIp": "42.0.0.20",
|
|
"destinationIp": "42.0.0.10",
|
|
"protocol": 6,
|
|
"sourcePort": 52794,
|
|
"destinationPort": 80,
|
|
"payload": "GET / HTTP/1.1\nHost: 42.0.0.10\n",
|
|
"tcpFlags": "P",
|
|
"sequence": 2000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 1266,
|
|
"source": "02:00:00:00:05:21",
|
|
"destination": "02:00:00:00:05:41",
|
|
"sourceIp": "42.0.0.10",
|
|
"destinationIp": "42.0.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 52794,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000001,
|
|
"acknowledgement": 2000032
|
|
},
|
|
{
|
|
"time": 1321,
|
|
"source": "02:00:00:00:05:21",
|
|
"destination": "02:00:00:00:05:41",
|
|
"sourceIp": "42.0.0.10",
|
|
"destinationIp": "42.0.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 52794,
|
|
"payload": "HTTP/1.1 200 OK\nContent-type: text/html\n\n<html>\n <head>\n <title>Administration des Gateways</title>\n </head>\n <body>\n <h1>Firewall-Administration</h1>\n <p> <a href=\"konfig\">Konfiguration</a> </p>\n <p> <a href=\"log\">Log-Einträge anzeigen</a> </p>\n </body>\n</html>\n",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 1322,
|
|
"source": "02:00:00:00:05:41",
|
|
"destination": "02:00:00:00:05:21",
|
|
"sourceIp": "42.0.0.20",
|
|
"destinationIp": "42.0.0.10",
|
|
"protocol": 6,
|
|
"sourcePort": 52794,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000032,
|
|
"acknowledgement": 1000285
|
|
},
|
|
{
|
|
"time": 1377,
|
|
"source": "02:00:00:00:05:41",
|
|
"destination": "02:00:00:00:05:21",
|
|
"sourceIp": "42.0.0.20",
|
|
"destinationIp": "42.0.0.10",
|
|
"protocol": 6,
|
|
"sourcePort": 52794,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 2000032,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 1600,
|
|
"source": "02:00:00:00:05:21",
|
|
"destination": "02:00:00:00:05:41",
|
|
"sourceIp": "42.0.0.10",
|
|
"destinationIp": "42.0.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 52794,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000285,
|
|
"acknowledgement": 2000033
|
|
},
|
|
{
|
|
"time": 1656,
|
|
"source": "02:00:00:00:05:21",
|
|
"destination": "02:00:00:00:05:41",
|
|
"sourceIp": "42.0.0.10",
|
|
"destinationIp": "42.0.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 52794,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 1000285,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 1656,
|
|
"source": "02:00:00:00:05:41",
|
|
"destination": "02:00:00:00:05:21",
|
|
"sourceIp": "42.0.0.20",
|
|
"destinationIp": "42.0.0.10",
|
|
"protocol": 6,
|
|
"sourcePort": 52794,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000033,
|
|
"acknowledgement": 1000286
|
|
}
|
|
],
|
|
"00000000-0000-0000-0000-000000000505": [
|
|
{
|
|
"time": 642,
|
|
"source": "02:00:00:00:05:41",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "42.0.0.20",
|
|
"targetIp": "42.0.0.10"
|
|
}
|
|
]
|
|
},
|
|
"rows": {
|
|
"00000000-0000-0000-0000-000000000501": [],
|
|
"00000000-0000-0000-0000-000000000502": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:05:41",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"42.0.0.20",
|
|
"42.0.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 42.0.0.10 [op=REQUEST, sender=02:00:00:00:05:41|42.0.0.20, target=FF:FF:FF:FF:FF:FF|42.0.0.10]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:05:21",
|
|
"02:00:00:00:05:41",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"42.0.0.10",
|
|
"42.0.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:05:21 [op=REPLY, sender=02:00:00:00:05:21|42.0.0.10, target=02:00:00:00:05:41|42.0.0.20]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:05:41",
|
|
"02:00:00:00:05:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"42.0.0.20",
|
|
"42.0.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"3",
|
|
"42.0.0.20:52794",
|
|
"42.0.0.10:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 2.000.000"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:05:21",
|
|
"02:00:00:00:05:41",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"42.0.0.10",
|
|
"42.0.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"42.0.0.10:80",
|
|
"42.0.0.20:52794",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 1.000.000, ACK: 2.000.001"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:05:41",
|
|
"02:00:00:00:05:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"42.0.0.20",
|
|
"42.0.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"42.0.0.20:52794",
|
|
"42.0.0.10:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001, ACK: 1.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:05:41",
|
|
"02:00:00:00:05:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"42.0.0.20",
|
|
"42.0.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"6",
|
|
"42.0.0.20:52794",
|
|
"42.0.0.10:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"42.0.0.20:52794",
|
|
"42.0.0.10:80",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"GET / HTTP/1.1\nHost: 42.0.0.10\n"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:05:21",
|
|
"02:00:00:00:05:41",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"42.0.0.10",
|
|
"42.0.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"42.0.0.10:80",
|
|
"42.0.0.20:52794",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001, ACK: 2.000.032"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:05:21",
|
|
"02:00:00:00:05:41",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"42.0.0.10",
|
|
"42.0.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"42.0.0.10:80",
|
|
"42.0.0.20:52794",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001"
|
|
],
|
|
[
|
|
"8",
|
|
"42.0.0.10:80",
|
|
"42.0.0.20:52794",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"HTTP/1.1 200 OK\nContent-type: text/html\n\n<html>\n <head>\n <title>Administration des Gateways</title>\n </head>\n <body>\n <h1>Firewall-Administration</h1>\n <p> <a href=\"konfig\">Konfiguration</a> </p>\n <p> <a href=\"log\">Log-Einträge anzeigen</a> </p>\n </body>\n</html>\n"
|
|
],
|
|
[
|
|
"9",
|
|
"02:00:00:00:05:41",
|
|
"02:00:00:00:05:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"42.0.0.20",
|
|
"42.0.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"42.0.0.20:52794",
|
|
"42.0.0.10:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.032, ACK: 1.000.285"
|
|
],
|
|
[
|
|
"10",
|
|
"02:00:00:00:05:41",
|
|
"02:00:00:00:05:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"42.0.0.20",
|
|
"42.0.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"10",
|
|
"42.0.0.20:52794",
|
|
"42.0.0.10:80",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 2.000.032"
|
|
],
|
|
[
|
|
"11",
|
|
"02:00:00:00:05:21",
|
|
"02:00:00:00:05:41",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"11",
|
|
"42.0.0.10",
|
|
"42.0.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"11",
|
|
"42.0.0.10:80",
|
|
"42.0.0.20:52794",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.285, ACK: 2.000.033"
|
|
],
|
|
[
|
|
"12",
|
|
"02:00:00:00:05:21",
|
|
"02:00:00:00:05:41",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"12",
|
|
"42.0.0.10",
|
|
"42.0.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"12",
|
|
"42.0.0.10:80",
|
|
"42.0.0.20:52794",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 1.000.285"
|
|
],
|
|
[
|
|
"13",
|
|
"02:00:00:00:05:41",
|
|
"02:00:00:00:05:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"13",
|
|
"42.0.0.20",
|
|
"42.0.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"13",
|
|
"42.0.0.20:52794",
|
|
"42.0.0.10:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.033, ACK: 1.000.286"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000502#1": [],
|
|
"00000000-0000-0000-0000-000000000504": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:05:41",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"42.0.0.20",
|
|
"42.0.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 42.0.0.10 [op=REQUEST, sender=02:00:00:00:05:41|42.0.0.20, target=FF:FF:FF:FF:FF:FF|42.0.0.10]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:05:21",
|
|
"02:00:00:00:05:41",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"42.0.0.10",
|
|
"42.0.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:05:21 [op=REPLY, sender=02:00:00:00:05:21|42.0.0.10, target=02:00:00:00:05:41|42.0.0.20]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:05:41",
|
|
"02:00:00:00:05:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"42.0.0.20",
|
|
"42.0.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"3",
|
|
"42.0.0.20:52794",
|
|
"42.0.0.10:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 2.000.000"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:05:21",
|
|
"02:00:00:00:05:41",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"42.0.0.10",
|
|
"42.0.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"42.0.0.10:80",
|
|
"42.0.0.20:52794",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 1.000.000, ACK: 2.000.001"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:05:41",
|
|
"02:00:00:00:05:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"42.0.0.20",
|
|
"42.0.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"42.0.0.20:52794",
|
|
"42.0.0.10:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001, ACK: 1.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:05:41",
|
|
"02:00:00:00:05:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"42.0.0.20",
|
|
"42.0.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"6",
|
|
"42.0.0.20:52794",
|
|
"42.0.0.10:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"42.0.0.20:52794",
|
|
"42.0.0.10:80",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"GET / HTTP/1.1\nHost: 42.0.0.10\n"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:05:21",
|
|
"02:00:00:00:05:41",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"42.0.0.10",
|
|
"42.0.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"42.0.0.10:80",
|
|
"42.0.0.20:52794",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001, ACK: 2.000.032"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:05:21",
|
|
"02:00:00:00:05:41",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"42.0.0.10",
|
|
"42.0.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"42.0.0.10:80",
|
|
"42.0.0.20:52794",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001"
|
|
],
|
|
[
|
|
"8",
|
|
"42.0.0.10:80",
|
|
"42.0.0.20:52794",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"HTTP/1.1 200 OK\nContent-type: text/html\n\n<html>\n <head>\n <title>Administration des Gateways</title>\n </head>\n <body>\n <h1>Firewall-Administration</h1>\n <p> <a href=\"konfig\">Konfiguration</a> </p>\n <p> <a href=\"log\">Log-Einträge anzeigen</a> </p>\n </body>\n</html>\n"
|
|
],
|
|
[
|
|
"9",
|
|
"02:00:00:00:05:41",
|
|
"02:00:00:00:05:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"42.0.0.20",
|
|
"42.0.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"42.0.0.20:52794",
|
|
"42.0.0.10:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.032, ACK: 1.000.285"
|
|
],
|
|
[
|
|
"10",
|
|
"02:00:00:00:05:41",
|
|
"02:00:00:00:05:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"42.0.0.20",
|
|
"42.0.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"10",
|
|
"42.0.0.20:52794",
|
|
"42.0.0.10:80",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 2.000.032"
|
|
],
|
|
[
|
|
"11",
|
|
"02:00:00:00:05:21",
|
|
"02:00:00:00:05:41",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"11",
|
|
"42.0.0.10",
|
|
"42.0.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"11",
|
|
"42.0.0.10:80",
|
|
"42.0.0.20:52794",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.285, ACK: 2.000.033"
|
|
],
|
|
[
|
|
"12",
|
|
"02:00:00:00:05:21",
|
|
"02:00:00:00:05:41",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"12",
|
|
"42.0.0.10",
|
|
"42.0.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"12",
|
|
"42.0.0.10:80",
|
|
"42.0.0.20:52794",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 1.000.285"
|
|
],
|
|
[
|
|
"13",
|
|
"02:00:00:00:05:41",
|
|
"02:00:00:00:05:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"13",
|
|
"42.0.0.20",
|
|
"42.0.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"13",
|
|
"42.0.0.20:52794",
|
|
"42.0.0.10:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.033, ACK: 1.000.286"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000505": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:05:41",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"42.0.0.20",
|
|
"42.0.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 42.0.0.10 [op=REQUEST, sender=02:00:00:00:05:41|42.0.0.20, target=FF:FF:FF:FF:FF:FF|42.0.0.10]"
|
|
]
|
|
]
|
|
},
|
|
"layeredRows": {
|
|
"00000000-0000-0000-0000-000000000501": [],
|
|
"00000000-0000-0000-0000-000000000502": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:05:41",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"42.0.0.20",
|
|
"42.0.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 42.0.0.10 [op=REQUEST, sender=02:00:00:00:05:41|42.0.0.20, target=FF:FF:FF:FF:FF:FF|42.0.0.10]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:05:21",
|
|
"02:00:00:00:05:41",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"42.0.0.10",
|
|
"42.0.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:05:21 [op=REPLY, sender=02:00:00:00:05:21|42.0.0.10, target=02:00:00:00:05:41|42.0.0.20]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:05:41",
|
|
"02:00:00:00:05:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"42.0.0.20",
|
|
"42.0.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"3",
|
|
"52794",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 2.000.000"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:05:21",
|
|
"02:00:00:00:05:41",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"42.0.0.10",
|
|
"42.0.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"80",
|
|
"52794",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 1.000.000, ACK: 2.000.001"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:05:41",
|
|
"02:00:00:00:05:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"42.0.0.20",
|
|
"42.0.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"52794",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001, ACK: 1.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:05:41",
|
|
"02:00:00:00:05:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"42.0.0.20",
|
|
"42.0.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"6",
|
|
"52794",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
null,
|
|
null,
|
|
"HTTP",
|
|
"Anwendung",
|
|
"GET / HTTP/1.1\nHost: 42.0.0.10\n"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:05:21",
|
|
"02:00:00:00:05:41",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"42.0.0.10",
|
|
"42.0.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"80",
|
|
"52794",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001, ACK: 2.000.032"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:05:21",
|
|
"02:00:00:00:05:41",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"42.0.0.10",
|
|
"42.0.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"80",
|
|
"52794",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001"
|
|
],
|
|
[
|
|
"8",
|
|
null,
|
|
null,
|
|
"HTTP",
|
|
"Anwendung",
|
|
"HTTP/1.1 200 OK\nContent-type: text/html\n\n<html>\n <head>\n <title>Administration des Gateways</title>\n </head>\n <body>\n <h1>Firewall-Administration</h1>\n <p> <a href=\"konfig\">Konfiguration</a> </p>\n <p> <a href=\"log\">Log-Einträge anzeigen</a> </p>\n </body>\n</html>\n"
|
|
],
|
|
[
|
|
"9",
|
|
"02:00:00:00:05:41",
|
|
"02:00:00:00:05:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"42.0.0.20",
|
|
"42.0.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"52794",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.032, ACK: 1.000.285"
|
|
],
|
|
[
|
|
"10",
|
|
"02:00:00:00:05:41",
|
|
"02:00:00:00:05:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"42.0.0.20",
|
|
"42.0.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"10",
|
|
"52794",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 2.000.032"
|
|
],
|
|
[
|
|
"11",
|
|
"02:00:00:00:05:21",
|
|
"02:00:00:00:05:41",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"11",
|
|
"42.0.0.10",
|
|
"42.0.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"11",
|
|
"80",
|
|
"52794",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.285, ACK: 2.000.033"
|
|
],
|
|
[
|
|
"12",
|
|
"02:00:00:00:05:21",
|
|
"02:00:00:00:05:41",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"12",
|
|
"42.0.0.10",
|
|
"42.0.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"12",
|
|
"80",
|
|
"52794",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 1.000.285"
|
|
],
|
|
[
|
|
"13",
|
|
"02:00:00:00:05:41",
|
|
"02:00:00:00:05:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"13",
|
|
"42.0.0.20",
|
|
"42.0.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"13",
|
|
"52794",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.033, ACK: 1.000.286"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000502#1": [],
|
|
"00000000-0000-0000-0000-000000000504": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:05:41",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"42.0.0.20",
|
|
"42.0.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 42.0.0.10 [op=REQUEST, sender=02:00:00:00:05:41|42.0.0.20, target=FF:FF:FF:FF:FF:FF|42.0.0.10]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:05:21",
|
|
"02:00:00:00:05:41",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"42.0.0.10",
|
|
"42.0.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:05:21 [op=REPLY, sender=02:00:00:00:05:21|42.0.0.10, target=02:00:00:00:05:41|42.0.0.20]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:05:41",
|
|
"02:00:00:00:05:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"42.0.0.20",
|
|
"42.0.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"3",
|
|
"52794",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 2.000.000"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:05:21",
|
|
"02:00:00:00:05:41",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"42.0.0.10",
|
|
"42.0.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"80",
|
|
"52794",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 1.000.000, ACK: 2.000.001"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:05:41",
|
|
"02:00:00:00:05:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"42.0.0.20",
|
|
"42.0.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"52794",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001, ACK: 1.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:05:41",
|
|
"02:00:00:00:05:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"42.0.0.20",
|
|
"42.0.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"6",
|
|
"52794",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
null,
|
|
null,
|
|
"HTTP",
|
|
"Anwendung",
|
|
"GET / HTTP/1.1\nHost: 42.0.0.10\n"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:05:21",
|
|
"02:00:00:00:05:41",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"42.0.0.10",
|
|
"42.0.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"80",
|
|
"52794",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001, ACK: 2.000.032"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:05:21",
|
|
"02:00:00:00:05:41",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"42.0.0.10",
|
|
"42.0.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"80",
|
|
"52794",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001"
|
|
],
|
|
[
|
|
"8",
|
|
null,
|
|
null,
|
|
"HTTP",
|
|
"Anwendung",
|
|
"HTTP/1.1 200 OK\nContent-type: text/html\n\n<html>\n <head>\n <title>Administration des Gateways</title>\n </head>\n <body>\n <h1>Firewall-Administration</h1>\n <p> <a href=\"konfig\">Konfiguration</a> </p>\n <p> <a href=\"log\">Log-Einträge anzeigen</a> </p>\n </body>\n</html>\n"
|
|
],
|
|
[
|
|
"9",
|
|
"02:00:00:00:05:41",
|
|
"02:00:00:00:05:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"42.0.0.20",
|
|
"42.0.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"52794",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.032, ACK: 1.000.285"
|
|
],
|
|
[
|
|
"10",
|
|
"02:00:00:00:05:41",
|
|
"02:00:00:00:05:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"42.0.0.20",
|
|
"42.0.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"10",
|
|
"52794",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 2.000.032"
|
|
],
|
|
[
|
|
"11",
|
|
"02:00:00:00:05:21",
|
|
"02:00:00:00:05:41",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"11",
|
|
"42.0.0.10",
|
|
"42.0.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"11",
|
|
"80",
|
|
"52794",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.285, ACK: 2.000.033"
|
|
],
|
|
[
|
|
"12",
|
|
"02:00:00:00:05:21",
|
|
"02:00:00:00:05:41",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"12",
|
|
"42.0.0.10",
|
|
"42.0.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"12",
|
|
"80",
|
|
"52794",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 1.000.285"
|
|
],
|
|
[
|
|
"13",
|
|
"02:00:00:00:05:41",
|
|
"02:00:00:00:05:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"13",
|
|
"42.0.0.20",
|
|
"42.0.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"13",
|
|
"52794",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.033, ACK: 1.000.286"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000505": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:05:41",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"42.0.0.20",
|
|
"42.0.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 42.0.0.10 [op=REQUEST, sender=02:00:00:00:05:41|42.0.0.20, target=FF:FF:FF:FF:FF:FF|42.0.0.10]"
|
|
]
|
|
]
|
|
},
|
|
"events": [
|
|
[
|
|
215,
|
|
"server",
|
|
"null"
|
|
],
|
|
[
|
|
217,
|
|
"server",
|
|
"Annahme von Verbindungsanfragen gestartet"
|
|
],
|
|
[
|
|
220,
|
|
"browser",
|
|
"update"
|
|
],
|
|
[
|
|
501,
|
|
"browser",
|
|
"call holeWebseite 42.0.0.10"
|
|
],
|
|
[
|
|
1123,
|
|
"server",
|
|
"Verbindung zu 42.0.0.20:52794 hergestellt"
|
|
],
|
|
[
|
|
1154,
|
|
"server",
|
|
">>GET / HTTP/1.1\nHost: 42.0.0.10\n"
|
|
],
|
|
[
|
|
1340,
|
|
"browser",
|
|
"page 200 text/html\n<html>\n <head>\n <title>Administration des Gateways</title>\n </head>\n <body>\n <h1>Firewall-Administration</h1>\n <p> <a href=\"konfig\">Konfiguration</a> </p>\n <p> <a href=\"log\">Log-Einträge anzeigen</a> </p>\n </body>\n</html>"
|
|
],
|
|
[
|
|
1433,
|
|
"server",
|
|
"<<HTTP/1.1 200 OK\nContent-type: text/html\n\n<html>\n <head>\n <title>Administration des Gateways</title>\n </head>\n <body>\n <h1>Firewall-Administration</h1>\n <p> <a href=\"konfig\">Konfiguration</a> </p>\n <p> <a href=\"log\">Log-Einträge anzeigen</a> </p>\n </body>\n</html>\n"
|
|
],
|
|
[
|
|
1489,
|
|
"server",
|
|
"Socket zu 42.0.0.20:52794 geschlossen"
|
|
]
|
|
]
|
|
}
|