TerminalRun types lines into Java's command line on terminal-net at set times; the engine types the same lines. New in the engine: an ICMP echo in a program's thread (the first ICMP message after the send, whatever it is), Java's route choice, the ARP table with Java's broadcast row, DNS in a program's thread, ICMP broadcasts of a node's own network, and an ARP wait that ends after what else happens at that millisecond. Departures from Java: an echo is answered from the address asked (RFC 792), network unreachable carries the packet with its sender, ping names the host and takes only -b before it, arp and netstat list in the order learned, netstat lists a UDP server's listening socket only. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2242 lines
49 KiB
JSON
2242 lines
49 KiB
JSON
{
|
|
"frames": {
|
|
"00000000-0000-0000-0000-000000000401": [
|
|
{
|
|
"time": 518,
|
|
"source": "02:00:00:00:04:11",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.20",
|
|
"targetIp": "192.168.0.31"
|
|
},
|
|
{
|
|
"time": 752,
|
|
"source": "02:00:00:00:04:14",
|
|
"destination": "02:00:00:00:04:11",
|
|
"arp": 2,
|
|
"senderIp": "192.168.0.31",
|
|
"targetIp": "192.168.0.20"
|
|
},
|
|
{
|
|
"time": 755,
|
|
"source": "02:00:00:00:04:11",
|
|
"destination": "02:00:00:00:04:14",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 63658,
|
|
"destinationPort": 55555,
|
|
"payload": null,
|
|
"tcpFlags": "S",
|
|
"sequence": 4000000,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 982,
|
|
"source": "02:00:00:00:04:14",
|
|
"destination": "02:00:00:00:04:11",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 55555,
|
|
"destinationPort": 63658,
|
|
"payload": null,
|
|
"tcpFlags": "SA",
|
|
"sequence": 2000000,
|
|
"acknowledgement": 4000001
|
|
},
|
|
{
|
|
"time": 982,
|
|
"source": "02:00:00:00:04:11",
|
|
"destination": "02:00:00:00:04:14",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 63658,
|
|
"destinationPort": 55555,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 4000001,
|
|
"acknowledgement": 2000001
|
|
},
|
|
{
|
|
"time": 2904,
|
|
"source": "02:00:00:00:04:11",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.20",
|
|
"targetIp": "192.168.0.10"
|
|
},
|
|
{
|
|
"time": 3127,
|
|
"source": "02:00:00:00:04:12",
|
|
"destination": "02:00:00:00:04:11",
|
|
"arp": 2,
|
|
"senderIp": "192.168.0.10",
|
|
"targetIp": "192.168.0.20"
|
|
},
|
|
{
|
|
"time": 3127,
|
|
"source": "02:00:00:00:04:11",
|
|
"destination": "02:00:00:00:04:12",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.10",
|
|
"protocol": 17,
|
|
"sourcePort": 53339,
|
|
"destinationPort": 53,
|
|
"payload": "ID=41076 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n"
|
|
},
|
|
{
|
|
"time": 3354,
|
|
"source": "02:00:00:00:04:12",
|
|
"destination": "02:00:00:00:04:11",
|
|
"sourceIp": "192.168.0.10",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 17,
|
|
"sourcePort": 53,
|
|
"destinationPort": 53339,
|
|
"payload": "ID=41076 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n"
|
|
},
|
|
{
|
|
"time": 3355,
|
|
"source": "02:00:00:00:04:11",
|
|
"destination": "02:00:00:00:04:12",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.10",
|
|
"protocol": 17,
|
|
"sourcePort": 54167,
|
|
"destinationPort": 53,
|
|
"payload": "ID=35450 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. MX IN\n"
|
|
},
|
|
{
|
|
"time": 3579,
|
|
"source": "02:00:00:00:04:12",
|
|
"destination": "02:00:00:00:04:11",
|
|
"sourceIp": "192.168.0.10",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 17,
|
|
"sourcePort": 53,
|
|
"destinationPort": 54167,
|
|
"payload": "ID=35450 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
|
|
},
|
|
{
|
|
"time": 5000,
|
|
"source": "02:00:00:00:04:11",
|
|
"destination": "02:00:00:00:04:14",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 63658,
|
|
"destinationPort": 55555,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 4000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 5223,
|
|
"source": "02:00:00:00:04:14",
|
|
"destination": "02:00:00:00:04:11",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 55555,
|
|
"destinationPort": 63658,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000001,
|
|
"acknowledgement": 4000002
|
|
},
|
|
{
|
|
"time": 5279,
|
|
"source": "02:00:00:00:04:14",
|
|
"destination": "02:00:00:00:04:11",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 55555,
|
|
"destinationPort": 63658,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 2000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 5279,
|
|
"source": "02:00:00:00:04:11",
|
|
"destination": "02:00:00:00:04:14",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 63658,
|
|
"destinationPort": 55555,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 4000002,
|
|
"acknowledgement": 2000002
|
|
}
|
|
],
|
|
"00000000-0000-0000-0000-000000000402": [
|
|
{
|
|
"time": 639,
|
|
"source": "02:00:00:00:04:11",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.20",
|
|
"targetIp": "192.168.0.31"
|
|
},
|
|
{
|
|
"time": 3016,
|
|
"source": "02:00:00:00:04:11",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.20",
|
|
"targetIp": "192.168.0.10"
|
|
},
|
|
{
|
|
"time": 3016,
|
|
"source": "02:00:00:00:04:12",
|
|
"destination": "02:00:00:00:04:11",
|
|
"arp": 2,
|
|
"senderIp": "192.168.0.10",
|
|
"targetIp": "192.168.0.20"
|
|
},
|
|
{
|
|
"time": 3239,
|
|
"source": "02:00:00:00:04:11",
|
|
"destination": "02:00:00:00:04:12",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.10",
|
|
"protocol": 17,
|
|
"sourcePort": 53339,
|
|
"destinationPort": 53,
|
|
"payload": "ID=41076 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n"
|
|
},
|
|
{
|
|
"time": 3243,
|
|
"source": "02:00:00:00:04:12",
|
|
"destination": "02:00:00:00:04:11",
|
|
"sourceIp": "192.168.0.10",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 17,
|
|
"sourcePort": 53,
|
|
"destinationPort": 53339,
|
|
"payload": "ID=41076 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n"
|
|
},
|
|
{
|
|
"time": 3466,
|
|
"source": "02:00:00:00:04:11",
|
|
"destination": "02:00:00:00:04:12",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.10",
|
|
"protocol": 17,
|
|
"sourcePort": 54167,
|
|
"destinationPort": 53,
|
|
"payload": "ID=35450 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. MX IN\n"
|
|
},
|
|
{
|
|
"time": 3468,
|
|
"source": "02:00:00:00:04:12",
|
|
"destination": "02:00:00:00:04:11",
|
|
"sourceIp": "192.168.0.10",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 17,
|
|
"sourcePort": 53,
|
|
"destinationPort": 54167,
|
|
"payload": "ID=35450 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
|
|
}
|
|
],
|
|
"00000000-0000-0000-0000-000000000403": [
|
|
{
|
|
"time": 639,
|
|
"source": "02:00:00:00:04:11",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.20",
|
|
"targetIp": "192.168.0.31"
|
|
},
|
|
{
|
|
"time": 3016,
|
|
"source": "02:00:00:00:04:11",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.20",
|
|
"targetIp": "192.168.0.10"
|
|
}
|
|
],
|
|
"00000000-0000-0000-0000-000000000404": [
|
|
{
|
|
"time": 639,
|
|
"source": "02:00:00:00:04:11",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.20",
|
|
"targetIp": "192.168.0.31"
|
|
},
|
|
{
|
|
"time": 641,
|
|
"source": "02:00:00:00:04:14",
|
|
"destination": "02:00:00:00:04:11",
|
|
"arp": 2,
|
|
"senderIp": "192.168.0.31",
|
|
"targetIp": "192.168.0.20"
|
|
},
|
|
{
|
|
"time": 868,
|
|
"source": "02:00:00:00:04:11",
|
|
"destination": "02:00:00:00:04:14",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 63658,
|
|
"destinationPort": 55555,
|
|
"payload": null,
|
|
"tcpFlags": "S",
|
|
"sequence": 4000000,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 870,
|
|
"source": "02:00:00:00:04:14",
|
|
"destination": "02:00:00:00:04:11",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 55555,
|
|
"destinationPort": 63658,
|
|
"payload": null,
|
|
"tcpFlags": "SA",
|
|
"sequence": 2000000,
|
|
"acknowledgement": 4000001
|
|
},
|
|
{
|
|
"time": 1093,
|
|
"source": "02:00:00:00:04:11",
|
|
"destination": "02:00:00:00:04:14",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 63658,
|
|
"destinationPort": 55555,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 4000001,
|
|
"acknowledgement": 2000001
|
|
},
|
|
{
|
|
"time": 3016,
|
|
"source": "02:00:00:00:04:11",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.20",
|
|
"targetIp": "192.168.0.10"
|
|
},
|
|
{
|
|
"time": 5111,
|
|
"source": "02:00:00:00:04:11",
|
|
"destination": "02:00:00:00:04:14",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 63658,
|
|
"destinationPort": 55555,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 4000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 5112,
|
|
"source": "02:00:00:00:04:14",
|
|
"destination": "02:00:00:00:04:11",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 55555,
|
|
"destinationPort": 63658,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000001,
|
|
"acknowledgement": 4000002
|
|
},
|
|
{
|
|
"time": 5167,
|
|
"source": "02:00:00:00:04:14",
|
|
"destination": "02:00:00:00:04:11",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 55555,
|
|
"destinationPort": 63658,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 2000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 5390,
|
|
"source": "02:00:00:00:04:11",
|
|
"destination": "02:00:00:00:04:14",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 63658,
|
|
"destinationPort": 55555,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 4000002,
|
|
"acknowledgement": 2000002
|
|
}
|
|
],
|
|
"00000000-0000-0000-0000-000000000405": [
|
|
{
|
|
"time": 639,
|
|
"source": "02:00:00:00:04:11",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.20",
|
|
"targetIp": "192.168.0.31"
|
|
},
|
|
{
|
|
"time": 3016,
|
|
"source": "02:00:00:00:04:11",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.20",
|
|
"targetIp": "192.168.0.10"
|
|
}
|
|
],
|
|
"00000000-0000-0000-0000-000000000405#1": [],
|
|
"00000000-0000-0000-0000-000000000406": []
|
|
},
|
|
"rows": {
|
|
"00000000-0000-0000-0000-000000000401": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:04:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.31",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:04:14",
|
|
"02:00:00:00:04:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"192.168.0.31",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:04:14 [op=REPLY, sender=02:00:00:00:04:14|192.168.0.31, target=02:00:00:00:04:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:04:11",
|
|
"02:00:00:00:04:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.20",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.20:63658",
|
|
"192.168.0.31:55555",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 4.000.000"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:04:14",
|
|
"02:00:00:00:04:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.31",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.31:55555",
|
|
"192.168.0.20:63658",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 2.000.000, ACK: 4.000.001"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:04:11",
|
|
"02:00:00:00:04:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.20",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.20:63658",
|
|
"192.168.0.31:55555",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.001, ACK: 2.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:04:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:04:12",
|
|
"02:00:00:00:04:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:04:12 [op=REPLY, sender=02:00:00:00:04:12|192.168.0.10, target=02:00:00:00:04:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:04:11",
|
|
"02:00:00:00:04:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.20:53339",
|
|
"192.168.0.10:53",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.20:53339",
|
|
"192.168.0.10:53",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=41076 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n"
|
|
],
|
|
[
|
|
"9",
|
|
"02:00:00:00:04:12",
|
|
"02:00:00:00:04:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.10:53",
|
|
"192.168.0.20:53339",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.10:53",
|
|
"192.168.0.20:53339",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=41076 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n"
|
|
],
|
|
[
|
|
"10",
|
|
"02:00:00:00:04:11",
|
|
"02:00:00:00:04:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.20:54167",
|
|
"192.168.0.10:53",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.20:54167",
|
|
"192.168.0.10:53",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=35450 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. MX IN\n"
|
|
],
|
|
[
|
|
"11",
|
|
"02:00:00:00:04:12",
|
|
"02:00:00:00:04:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"11",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"11",
|
|
"192.168.0.10:53",
|
|
"192.168.0.20:54167",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"11",
|
|
"192.168.0.10:53",
|
|
"192.168.0.20:54167",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=35450 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
|
|
],
|
|
[
|
|
"12",
|
|
"02:00:00:00:04:11",
|
|
"02:00:00:00:04:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.20",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.20:63658",
|
|
"192.168.0.31:55555",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 4.000.001"
|
|
],
|
|
[
|
|
"13",
|
|
"02:00:00:00:04:14",
|
|
"02:00:00:00:04:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"13",
|
|
"192.168.0.31",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"13",
|
|
"192.168.0.31:55555",
|
|
"192.168.0.20:63658",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001, ACK: 4.000.002"
|
|
],
|
|
[
|
|
"14",
|
|
"02:00:00:00:04:14",
|
|
"02:00:00:00:04:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.31",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.31:55555",
|
|
"192.168.0.20:63658",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 2.000.001"
|
|
],
|
|
[
|
|
"15",
|
|
"02:00:00:00:04:11",
|
|
"02:00:00:00:04:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"15",
|
|
"192.168.0.20",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"15",
|
|
"192.168.0.20:63658",
|
|
"192.168.0.31:55555",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.002, ACK: 2.000.002"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000402": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:04:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.31",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:04:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:04:12",
|
|
"02:00:00:00:04:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:04:12 [op=REPLY, sender=02:00:00:00:04:12|192.168.0.10, target=02:00:00:00:04:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:04:11",
|
|
"02:00:00:00:04:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.20:53339",
|
|
"192.168.0.10:53",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.20:53339",
|
|
"192.168.0.10:53",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=41076 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:04:12",
|
|
"02:00:00:00:04:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.10:53",
|
|
"192.168.0.20:53339",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.10:53",
|
|
"192.168.0.20:53339",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=41076 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:04:11",
|
|
"02:00:00:00:04:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.20:54167",
|
|
"192.168.0.10:53",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.20:54167",
|
|
"192.168.0.10:53",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=35450 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. MX IN\n"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:04:12",
|
|
"02:00:00:00:04:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.10:53",
|
|
"192.168.0.20:54167",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.10:53",
|
|
"192.168.0.20:54167",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=35450 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000403": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:04:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.31",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:04:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000404": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:04:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.31",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:04:14",
|
|
"02:00:00:00:04:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"192.168.0.31",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:04:14 [op=REPLY, sender=02:00:00:00:04:14|192.168.0.31, target=02:00:00:00:04:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:04:11",
|
|
"02:00:00:00:04:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.20",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.20:63658",
|
|
"192.168.0.31:55555",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 4.000.000"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:04:14",
|
|
"02:00:00:00:04:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.31",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.31:55555",
|
|
"192.168.0.20:63658",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 2.000.000, ACK: 4.000.001"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:04:11",
|
|
"02:00:00:00:04:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.20",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.20:63658",
|
|
"192.168.0.31:55555",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.001, ACK: 2.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:04:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:04:11",
|
|
"02:00:00:00:04:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.20",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.20:63658",
|
|
"192.168.0.31:55555",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 4.000.001"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:04:14",
|
|
"02:00:00:00:04:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.31",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.31:55555",
|
|
"192.168.0.20:63658",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001, ACK: 4.000.002"
|
|
],
|
|
[
|
|
"9",
|
|
"02:00:00:00:04:14",
|
|
"02:00:00:00:04:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.31",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.31:55555",
|
|
"192.168.0.20:63658",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 2.000.001"
|
|
],
|
|
[
|
|
"10",
|
|
"02:00:00:00:04:11",
|
|
"02:00:00:00:04:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.20",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.20:63658",
|
|
"192.168.0.31:55555",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.002, ACK: 2.000.002"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000405": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:04:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.31",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:04:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000405#1": [],
|
|
"00000000-0000-0000-0000-000000000406": []
|
|
},
|
|
"layeredRows": {
|
|
"00000000-0000-0000-0000-000000000401": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:04:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.31",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:04:14",
|
|
"02:00:00:00:04:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"192.168.0.31",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:04:14 [op=REPLY, sender=02:00:00:00:04:14|192.168.0.31, target=02:00:00:00:04:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:04:11",
|
|
"02:00:00:00:04:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.20",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"3",
|
|
"63658",
|
|
"55555",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 4.000.000"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:04:14",
|
|
"02:00:00:00:04:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.31",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"55555",
|
|
"63658",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 2.000.000, ACK: 4.000.001"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:04:11",
|
|
"02:00:00:00:04:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.20",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"63658",
|
|
"55555",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.001, ACK: 2.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:04:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:04:12",
|
|
"02:00:00:00:04:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:04:12 [op=REPLY, sender=02:00:00:00:04:12|192.168.0.10, target=02:00:00:00:04:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:04:11",
|
|
"02:00:00:00:04:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"53339",
|
|
"53",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"8",
|
|
null,
|
|
null,
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=41076 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n"
|
|
],
|
|
[
|
|
"9",
|
|
"02:00:00:00:04:12",
|
|
"02:00:00:00:04:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"53",
|
|
"53339",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"9",
|
|
null,
|
|
null,
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=41076 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n"
|
|
],
|
|
[
|
|
"10",
|
|
"02:00:00:00:04:11",
|
|
"02:00:00:00:04:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"10",
|
|
"54167",
|
|
"53",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"10",
|
|
null,
|
|
null,
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=35450 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. MX IN\n"
|
|
],
|
|
[
|
|
"11",
|
|
"02:00:00:00:04:12",
|
|
"02:00:00:00:04:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"11",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"11",
|
|
"53",
|
|
"54167",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"11",
|
|
null,
|
|
null,
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=35450 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
|
|
],
|
|
[
|
|
"12",
|
|
"02:00:00:00:04:11",
|
|
"02:00:00:00:04:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.20",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"12",
|
|
"63658",
|
|
"55555",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 4.000.001"
|
|
],
|
|
[
|
|
"13",
|
|
"02:00:00:00:04:14",
|
|
"02:00:00:00:04:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"13",
|
|
"192.168.0.31",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"13",
|
|
"55555",
|
|
"63658",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001, ACK: 4.000.002"
|
|
],
|
|
[
|
|
"14",
|
|
"02:00:00:00:04:14",
|
|
"02:00:00:00:04:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.31",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"14",
|
|
"55555",
|
|
"63658",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 2.000.001"
|
|
],
|
|
[
|
|
"15",
|
|
"02:00:00:00:04:11",
|
|
"02:00:00:00:04:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"15",
|
|
"192.168.0.20",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"15",
|
|
"63658",
|
|
"55555",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.002, ACK: 2.000.002"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000402": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:04:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.31",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:04:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:04:12",
|
|
"02:00:00:00:04:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:04:12 [op=REPLY, sender=02:00:00:00:04:12|192.168.0.10, target=02:00:00:00:04:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:04:11",
|
|
"02:00:00:00:04:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"53339",
|
|
"53",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"4",
|
|
null,
|
|
null,
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=41076 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:04:12",
|
|
"02:00:00:00:04:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"53",
|
|
"53339",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"5",
|
|
null,
|
|
null,
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=41076 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:04:11",
|
|
"02:00:00:00:04:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"6",
|
|
"54167",
|
|
"53",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"6",
|
|
null,
|
|
null,
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=35450 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. MX IN\n"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:04:12",
|
|
"02:00:00:00:04:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"53",
|
|
"54167",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"7",
|
|
null,
|
|
null,
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=35450 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000403": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:04:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.31",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:04:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000404": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:04:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.31",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:04:14",
|
|
"02:00:00:00:04:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"192.168.0.31",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:04:14 [op=REPLY, sender=02:00:00:00:04:14|192.168.0.31, target=02:00:00:00:04:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:04:11",
|
|
"02:00:00:00:04:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.20",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"3",
|
|
"63658",
|
|
"55555",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 4.000.000"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:04:14",
|
|
"02:00:00:00:04:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.31",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"55555",
|
|
"63658",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 2.000.000, ACK: 4.000.001"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:04:11",
|
|
"02:00:00:00:04:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.20",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"63658",
|
|
"55555",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.001, ACK: 2.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:04:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:04:11",
|
|
"02:00:00:00:04:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.20",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"63658",
|
|
"55555",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 4.000.001"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:04:14",
|
|
"02:00:00:00:04:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.31",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"55555",
|
|
"63658",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001, ACK: 4.000.002"
|
|
],
|
|
[
|
|
"9",
|
|
"02:00:00:00:04:14",
|
|
"02:00:00:00:04:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.31",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"55555",
|
|
"63658",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 2.000.001"
|
|
],
|
|
[
|
|
"10",
|
|
"02:00:00:00:04:11",
|
|
"02:00:00:00:04:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.20",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"10",
|
|
"63658",
|
|
"55555",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.002, ACK: 2.000.002"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000405": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:04:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.31",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:04:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000405#1": [],
|
|
"00000000-0000-0000-0000-000000000406": []
|
|
},
|
|
"acts": [
|
|
[
|
|
2500,
|
|
"00000000-0000-0000-0000-000000000401",
|
|
"netstat"
|
|
],
|
|
[
|
|
2700,
|
|
"00000000-0000-0000-0000-000000000404",
|
|
"netstat"
|
|
],
|
|
[
|
|
2900,
|
|
"00000000-0000-0000-0000-000000000401",
|
|
"host www.filius.de"
|
|
],
|
|
[
|
|
4500,
|
|
"00000000-0000-0000-0000-000000000402",
|
|
"netstat"
|
|
],
|
|
[
|
|
4700,
|
|
"00000000-0000-0000-0000-000000000403",
|
|
"netstat"
|
|
],
|
|
[
|
|
4900,
|
|
"00000000-0000-0000-0000-000000000401",
|
|
"netstat x"
|
|
],
|
|
[
|
|
5000,
|
|
"00000000-0000-0000-0000-000000000401",
|
|
"disconnect"
|
|
],
|
|
[
|
|
8000,
|
|
"00000000-0000-0000-0000-000000000401",
|
|
"netstat"
|
|
],
|
|
[
|
|
8200,
|
|
"00000000-0000-0000-0000-000000000404",
|
|
"netstat"
|
|
]
|
|
],
|
|
"events": [
|
|
[
|
|
500,
|
|
"00000000-0000-0000-0000-000000000401",
|
|
"call",
|
|
"connect 192.168.0.31:55555"
|
|
],
|
|
[
|
|
2500,
|
|
"00000000-0000-0000-0000-000000000401",
|
|
"call",
|
|
"netstat"
|
|
],
|
|
[
|
|
2502,
|
|
"00000000-0000-0000-0000-000000000401",
|
|
"text",
|
|
"| Proto | Lokale Adresse | Entfernte Adresse | Zustand |\n--------------------------------------------------------------------------\n| TCP | 192.168.0.20:63658 | 192.168.0.31:55555 | ESTABLISHED |\n"
|
|
],
|
|
[
|
|
2700,
|
|
"00000000-0000-0000-0000-000000000404",
|
|
"call",
|
|
"netstat"
|
|
],
|
|
[
|
|
2701,
|
|
"00000000-0000-0000-0000-000000000404",
|
|
"text",
|
|
"| Proto | Lokale Adresse | Entfernte Adresse | Zustand |\n--------------------------------------------------------------------------\n| TCP | 0.0.0.0:55555 | -:- | LISTEN |\n| TCP | 192.168.0.31:55555 | 192.168.0.20:63658 | ESTABLISHED |\n"
|
|
],
|
|
[
|
|
2900,
|
|
"00000000-0000-0000-0000-000000000401",
|
|
"call",
|
|
"host www.filius.de"
|
|
],
|
|
[
|
|
2900,
|
|
"00000000-0000-0000-0000-000000000401",
|
|
"busy",
|
|
"true"
|
|
],
|
|
[
|
|
3355,
|
|
"00000000-0000-0000-0000-000000000401",
|
|
"text",
|
|
"www.filius.de. hat die IP-Adresse 192.168.0.30\n"
|
|
],
|
|
[
|
|
3580,
|
|
"00000000-0000-0000-0000-000000000401",
|
|
"busy",
|
|
"false"
|
|
],
|
|
[
|
|
4500,
|
|
"00000000-0000-0000-0000-000000000402",
|
|
"call",
|
|
"netstat"
|
|
],
|
|
[
|
|
4501,
|
|
"00000000-0000-0000-0000-000000000402",
|
|
"text",
|
|
"| Proto | Lokale Adresse | Entfernte Adresse | Zustand |\n--------------------------------------------------------------------------\n| TCP | 0.0.0.0:55555 | -:- | LISTEN |\n| UDP | 0.0.0.0:53 | -:- | LISTEN |\n| UDP | 192.168.0.10:53 | 192.168.0.20:53339 | CONNECTED |\n| UDP | 192.168.0.10:53 | 192.168.0.20:54167 | CONNECTED |\n"
|
|
],
|
|
[
|
|
4700,
|
|
"00000000-0000-0000-0000-000000000403",
|
|
"call",
|
|
"netstat"
|
|
],
|
|
[
|
|
4701,
|
|
"00000000-0000-0000-0000-000000000403",
|
|
"text",
|
|
"| Proto | Lokale Adresse | Entfernte Adresse | Zustand |\n--------------------------------------------------------------------------\n"
|
|
],
|
|
[
|
|
4900,
|
|
"00000000-0000-0000-0000-000000000401",
|
|
"call",
|
|
"netstat x"
|
|
],
|
|
[
|
|
4900,
|
|
"00000000-0000-0000-0000-000000000401",
|
|
"text",
|
|
"| Proto | Lokale Adresse | Entfernte Adresse | Zustand |\n--------------------------------------------------------------------------\n| TCP | 192.168.0.20:63658 | 192.168.0.31:55555 | ESTABLISHED |\n"
|
|
],
|
|
[
|
|
5000,
|
|
"00000000-0000-0000-0000-000000000401",
|
|
"call",
|
|
"disconnect"
|
|
],
|
|
[
|
|
8000,
|
|
"00000000-0000-0000-0000-000000000401",
|
|
"call",
|
|
"netstat"
|
|
],
|
|
[
|
|
8000,
|
|
"00000000-0000-0000-0000-000000000401",
|
|
"text",
|
|
"| Proto | Lokale Adresse | Entfernte Adresse | Zustand |\n--------------------------------------------------------------------------\n| TCP | 192.168.0.20:63658 | 192.168.0.31:55555 | TIME_WAIT |\n"
|
|
],
|
|
[
|
|
8200,
|
|
"00000000-0000-0000-0000-000000000404",
|
|
"call",
|
|
"netstat"
|
|
],
|
|
[
|
|
8200,
|
|
"00000000-0000-0000-0000-000000000404",
|
|
"text",
|
|
"| Proto | Lokale Adresse | Entfernte Adresse | Zustand |\n--------------------------------------------------------------------------\n| TCP | 0.0.0.0:55555 | -:- | LISTEN |\n"
|
|
]
|
|
]
|
|
}
|