TerminalRun adds nine stories: traceroute in the LAN, through the router, unreachable, without a route, to no one, to the host itself, errors and Ctrl+C; tcpdump on two hosts. traceroute counts failures across hops as Java does and takes an error that carries its probe; tcpdump tells each frame's highest capture row with its time of day, at once. Departures from Java: traceroute tells its summary before the end mark (Java after it, where its window shows no text) and calls a host at the 20th hop reached. arpsend is not built. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2575 lines
57 KiB
JSON
2575 lines
57 KiB
JSON
{
|
|
"frames": {
|
|
"00000000-0000-0000-0000-000000000401": [
|
|
{
|
|
"time": 1003,
|
|
"source": "02:00:00:00:04:11",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.20",
|
|
"targetIp": "192.168.0.31"
|
|
},
|
|
{
|
|
"time": 1240,
|
|
"source": "02:00:00:00:04:14",
|
|
"destination": "02:00:00:00:04:11",
|
|
"arp": 2,
|
|
"senderIp": "192.168.0.31",
|
|
"targetIp": "192.168.0.20"
|
|
},
|
|
{
|
|
"time": 1244,
|
|
"source": "02:00:00:00:04:11",
|
|
"destination": "02:00:00:00:04:14",
|
|
"icmp": 8,
|
|
"icmpCode": 0,
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.31",
|
|
"sequence": 1
|
|
},
|
|
{
|
|
"time": 1469,
|
|
"source": "02:00:00:00:04:14",
|
|
"destination": "02:00:00:00:04:11",
|
|
"icmp": 0,
|
|
"icmpCode": 0,
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.20",
|
|
"sequence": 1
|
|
},
|
|
{
|
|
"time": 2003,
|
|
"source": "02:00:00:00:04:11",
|
|
"destination": "02:00:00:00:04:14",
|
|
"icmp": 8,
|
|
"icmpCode": 0,
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.31",
|
|
"sequence": 2
|
|
},
|
|
{
|
|
"time": 2226,
|
|
"source": "02:00:00:00:04:14",
|
|
"destination": "02:00:00:00:04:11",
|
|
"icmp": 0,
|
|
"icmpCode": 0,
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.20",
|
|
"sequence": 2
|
|
},
|
|
{
|
|
"time": 3003,
|
|
"source": "02:00:00:00:04:11",
|
|
"destination": "02:00:00:00:04:14",
|
|
"icmp": 8,
|
|
"icmpCode": 0,
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.31",
|
|
"sequence": 3
|
|
},
|
|
{
|
|
"time": 3226,
|
|
"source": "02:00:00:00:04:14",
|
|
"destination": "02:00:00:00:04:11",
|
|
"icmp": 0,
|
|
"icmpCode": 0,
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.20",
|
|
"sequence": 3
|
|
},
|
|
{
|
|
"time": 4003,
|
|
"source": "02:00:00:00:04:11",
|
|
"destination": "02:00:00:00:04:14",
|
|
"icmp": 8,
|
|
"icmpCode": 0,
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.31",
|
|
"sequence": 4
|
|
},
|
|
{
|
|
"time": 4226,
|
|
"source": "02:00:00:00:04:14",
|
|
"destination": "02:00:00:00:04:11",
|
|
"icmp": 0,
|
|
"icmpCode": 0,
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.20",
|
|
"sequence": 4
|
|
},
|
|
{
|
|
"time": 5506,
|
|
"source": "02:00:00:00:04:11",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.20",
|
|
"targetIp": "192.168.0.10"
|
|
},
|
|
{
|
|
"time": 5728,
|
|
"source": "02:00:00:00:04:12",
|
|
"destination": "02:00:00:00:04:11",
|
|
"arp": 2,
|
|
"senderIp": "192.168.0.10",
|
|
"targetIp": "192.168.0.20"
|
|
},
|
|
{
|
|
"time": 5730,
|
|
"source": "02:00:00:00:04:11",
|
|
"destination": "02:00:00:00:04:12",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.10",
|
|
"protocol": 17,
|
|
"sourcePort": 49379,
|
|
"destinationPort": 53,
|
|
"payload": "ID=30470 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n"
|
|
},
|
|
{
|
|
"time": 5958,
|
|
"source": "02:00:00:00:04:12",
|
|
"destination": "02:00:00:00:04:11",
|
|
"sourceIp": "192.168.0.10",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 17,
|
|
"sourcePort": 53,
|
|
"destinationPort": 49379,
|
|
"payload": "ID=30470 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n"
|
|
},
|
|
{
|
|
"time": 5959,
|
|
"source": "02:00:00:00:04:11",
|
|
"destination": "02:00:00:00:04:12",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.10",
|
|
"protocol": 17,
|
|
"sourcePort": 56898,
|
|
"destinationPort": 53,
|
|
"payload": "ID=44276 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. MX IN\n"
|
|
},
|
|
{
|
|
"time": 6183,
|
|
"source": "02:00:00:00:04:12",
|
|
"destination": "02:00:00:00:04:11",
|
|
"sourceIp": "192.168.0.10",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 17,
|
|
"sourcePort": 53,
|
|
"destinationPort": 56898,
|
|
"payload": "ID=44276 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
|
|
},
|
|
{
|
|
"time": 6507,
|
|
"source": "02:00:00:00:04:11",
|
|
"destination": "02:00:00:00:04:14",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 61489,
|
|
"destinationPort": 55555,
|
|
"payload": null,
|
|
"tcpFlags": "S",
|
|
"sequence": 4000000,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 6730,
|
|
"source": "02:00:00:00:04:14",
|
|
"destination": "02:00:00:00:04:11",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 55555,
|
|
"destinationPort": 61489,
|
|
"payload": null,
|
|
"tcpFlags": "SA",
|
|
"sequence": 2000000,
|
|
"acknowledgement": 4000001
|
|
},
|
|
{
|
|
"time": 6731,
|
|
"source": "02:00:00:00:04:11",
|
|
"destination": "02:00:00:00:04:14",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 61489,
|
|
"destinationPort": 55555,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 4000001,
|
|
"acknowledgement": 2000001
|
|
}
|
|
],
|
|
"00000000-0000-0000-0000-000000000402": [
|
|
{
|
|
"time": 1126,
|
|
"source": "02:00:00:00:04:11",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.20",
|
|
"targetIp": "192.168.0.31"
|
|
},
|
|
{
|
|
"time": 5617,
|
|
"source": "02:00:00:00:04:11",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.20",
|
|
"targetIp": "192.168.0.10"
|
|
},
|
|
{
|
|
"time": 5617,
|
|
"source": "02:00:00:00:04:12",
|
|
"destination": "02:00:00:00:04:11",
|
|
"arp": 2,
|
|
"senderIp": "192.168.0.10",
|
|
"targetIp": "192.168.0.20"
|
|
},
|
|
{
|
|
"time": 5842,
|
|
"source": "02:00:00:00:04:11",
|
|
"destination": "02:00:00:00:04:12",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.10",
|
|
"protocol": 17,
|
|
"sourcePort": 49379,
|
|
"destinationPort": 53,
|
|
"payload": "ID=30470 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n"
|
|
},
|
|
{
|
|
"time": 5846,
|
|
"source": "02:00:00:00:04:12",
|
|
"destination": "02:00:00:00:04:11",
|
|
"sourceIp": "192.168.0.10",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 17,
|
|
"sourcePort": 53,
|
|
"destinationPort": 49379,
|
|
"payload": "ID=30470 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n"
|
|
},
|
|
{
|
|
"time": 6070,
|
|
"source": "02:00:00:00:04:11",
|
|
"destination": "02:00:00:00:04:12",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.10",
|
|
"protocol": 17,
|
|
"sourcePort": 56898,
|
|
"destinationPort": 53,
|
|
"payload": "ID=44276 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. MX IN\n"
|
|
},
|
|
{
|
|
"time": 6072,
|
|
"source": "02:00:00:00:04:12",
|
|
"destination": "02:00:00:00:04:11",
|
|
"sourceIp": "192.168.0.10",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 17,
|
|
"sourcePort": 53,
|
|
"destinationPort": 56898,
|
|
"payload": "ID=44276 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
|
|
}
|
|
],
|
|
"00000000-0000-0000-0000-000000000403": [
|
|
{
|
|
"time": 1126,
|
|
"source": "02:00:00:00:04:11",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.20",
|
|
"targetIp": "192.168.0.31"
|
|
},
|
|
{
|
|
"time": 5617,
|
|
"source": "02:00:00:00:04:11",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.20",
|
|
"targetIp": "192.168.0.10"
|
|
}
|
|
],
|
|
"00000000-0000-0000-0000-000000000404": [
|
|
{
|
|
"time": 1126,
|
|
"source": "02:00:00:00:04:11",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.20",
|
|
"targetIp": "192.168.0.31"
|
|
},
|
|
{
|
|
"time": 1129,
|
|
"source": "02:00:00:00:04:14",
|
|
"destination": "02:00:00:00:04:11",
|
|
"arp": 2,
|
|
"senderIp": "192.168.0.31",
|
|
"targetIp": "192.168.0.20"
|
|
},
|
|
{
|
|
"time": 1358,
|
|
"source": "02:00:00:00:04:11",
|
|
"destination": "02:00:00:00:04:14",
|
|
"icmp": 8,
|
|
"icmpCode": 0,
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.31",
|
|
"sequence": 1
|
|
},
|
|
{
|
|
"time": 1358,
|
|
"source": "02:00:00:00:04:14",
|
|
"destination": "02:00:00:00:04:11",
|
|
"icmp": 0,
|
|
"icmpCode": 0,
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.20",
|
|
"sequence": 1
|
|
},
|
|
{
|
|
"time": 2115,
|
|
"source": "02:00:00:00:04:11",
|
|
"destination": "02:00:00:00:04:14",
|
|
"icmp": 8,
|
|
"icmpCode": 0,
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.31",
|
|
"sequence": 2
|
|
},
|
|
{
|
|
"time": 2115,
|
|
"source": "02:00:00:00:04:14",
|
|
"destination": "02:00:00:00:04:11",
|
|
"icmp": 0,
|
|
"icmpCode": 0,
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.20",
|
|
"sequence": 2
|
|
},
|
|
{
|
|
"time": 3115,
|
|
"source": "02:00:00:00:04:11",
|
|
"destination": "02:00:00:00:04:14",
|
|
"icmp": 8,
|
|
"icmpCode": 0,
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.31",
|
|
"sequence": 3
|
|
},
|
|
{
|
|
"time": 3115,
|
|
"source": "02:00:00:00:04:14",
|
|
"destination": "02:00:00:00:04:11",
|
|
"icmp": 0,
|
|
"icmpCode": 0,
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.20",
|
|
"sequence": 3
|
|
},
|
|
{
|
|
"time": 4115,
|
|
"source": "02:00:00:00:04:11",
|
|
"destination": "02:00:00:00:04:14",
|
|
"icmp": 8,
|
|
"icmpCode": 0,
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.31",
|
|
"sequence": 4
|
|
},
|
|
{
|
|
"time": 4115,
|
|
"source": "02:00:00:00:04:14",
|
|
"destination": "02:00:00:00:04:11",
|
|
"icmp": 0,
|
|
"icmpCode": 0,
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.20",
|
|
"sequence": 4
|
|
},
|
|
{
|
|
"time": 5617,
|
|
"source": "02:00:00:00:04:11",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.20",
|
|
"targetIp": "192.168.0.10"
|
|
},
|
|
{
|
|
"time": 6619,
|
|
"source": "02:00:00:00:04:11",
|
|
"destination": "02:00:00:00:04:14",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 61489,
|
|
"destinationPort": 55555,
|
|
"payload": null,
|
|
"tcpFlags": "S",
|
|
"sequence": 4000000,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 6619,
|
|
"source": "02:00:00:00:04:14",
|
|
"destination": "02:00:00:00:04:11",
|
|
"sourceIp": "192.168.0.31",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 6,
|
|
"sourcePort": 55555,
|
|
"destinationPort": 61489,
|
|
"payload": null,
|
|
"tcpFlags": "SA",
|
|
"sequence": 2000000,
|
|
"acknowledgement": 4000001
|
|
},
|
|
{
|
|
"time": 6842,
|
|
"source": "02:00:00:00:04:11",
|
|
"destination": "02:00:00:00:04:14",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.31",
|
|
"protocol": 6,
|
|
"sourcePort": 61489,
|
|
"destinationPort": 55555,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 4000001,
|
|
"acknowledgement": 2000001
|
|
}
|
|
],
|
|
"00000000-0000-0000-0000-000000000405": [
|
|
{
|
|
"time": 1126,
|
|
"source": "02:00:00:00:04:11",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.20",
|
|
"targetIp": "192.168.0.31"
|
|
},
|
|
{
|
|
"time": 5617,
|
|
"source": "02:00:00:00:04:11",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.20",
|
|
"targetIp": "192.168.0.10"
|
|
}
|
|
],
|
|
"00000000-0000-0000-0000-000000000405#1": [],
|
|
"00000000-0000-0000-0000-000000000406": []
|
|
},
|
|
"rows": {
|
|
"00000000-0000-0000-0000-000000000401": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:04:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.31",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:04:14",
|
|
"02:00:00:00:04:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"192.168.0.31",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:04:14 [op=REPLY, sender=02:00:00:00:04:14|192.168.0.31, target=02:00:00:00:04:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:04:11",
|
|
"02:00:00:00:04:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.20",
|
|
"192.168.0.31",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Request (ping), TTL: 64, Identifier: 483, Seq.-No.: 1"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:04:14",
|
|
"02:00:00:00:04:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.31",
|
|
"192.168.0.20",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 1"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:04:11",
|
|
"02:00:00:00:04:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.20",
|
|
"192.168.0.31",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Request (ping), TTL: 64, Identifier: 483, Seq.-No.: 2"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:04:14",
|
|
"02:00:00:00:04:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.31",
|
|
"192.168.0.20",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 2"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:04:11",
|
|
"02:00:00:00:04:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.20",
|
|
"192.168.0.31",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Request (ping), TTL: 64, Identifier: 483, Seq.-No.: 3"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:04:14",
|
|
"02:00:00:00:04:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.31",
|
|
"192.168.0.20",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 3"
|
|
],
|
|
[
|
|
"9",
|
|
"02:00:00:00:04:11",
|
|
"02:00:00:00:04:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.20",
|
|
"192.168.0.31",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Request (ping), TTL: 64, Identifier: 483, Seq.-No.: 4"
|
|
],
|
|
[
|
|
"10",
|
|
"02:00:00:00:04:14",
|
|
"02:00:00:00:04:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.31",
|
|
"192.168.0.20",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 4"
|
|
],
|
|
[
|
|
"11",
|
|
"02:00:00:00:04:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"11",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
],
|
|
[
|
|
"12",
|
|
"02:00:00:00:04:12",
|
|
"02:00:00:00:04:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:04:12 [op=REPLY, sender=02:00:00:00:04:12|192.168.0.10, target=02:00:00:00:04:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"13",
|
|
"02:00:00:00:04:11",
|
|
"02:00:00:00:04:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"13",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"13",
|
|
"192.168.0.20:49379",
|
|
"192.168.0.10:53",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"13",
|
|
"192.168.0.20:49379",
|
|
"192.168.0.10:53",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=30470 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n"
|
|
],
|
|
[
|
|
"14",
|
|
"02:00:00:00:04:12",
|
|
"02:00:00:00:04:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.10:53",
|
|
"192.168.0.20:49379",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.10:53",
|
|
"192.168.0.20:49379",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=30470 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n"
|
|
],
|
|
[
|
|
"15",
|
|
"02:00:00:00:04:11",
|
|
"02:00:00:00:04:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"15",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"15",
|
|
"192.168.0.20:56898",
|
|
"192.168.0.10:53",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"15",
|
|
"192.168.0.20:56898",
|
|
"192.168.0.10:53",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=44276 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. MX IN\n"
|
|
],
|
|
[
|
|
"16",
|
|
"02:00:00:00:04:12",
|
|
"02:00:00:00:04:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"16",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"16",
|
|
"192.168.0.10:53",
|
|
"192.168.0.20:56898",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"16",
|
|
"192.168.0.10:53",
|
|
"192.168.0.20:56898",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=44276 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
|
|
],
|
|
[
|
|
"17",
|
|
"02:00:00:00:04:11",
|
|
"02:00:00:00:04:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"17",
|
|
"192.168.0.20",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"17",
|
|
"192.168.0.20:61489",
|
|
"192.168.0.31:55555",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 4.000.000"
|
|
],
|
|
[
|
|
"18",
|
|
"02:00:00:00:04:14",
|
|
"02:00:00:00:04:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"18",
|
|
"192.168.0.31",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"18",
|
|
"192.168.0.31:55555",
|
|
"192.168.0.20:61489",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 2.000.000, ACK: 4.000.001"
|
|
],
|
|
[
|
|
"19",
|
|
"02:00:00:00:04:11",
|
|
"02:00:00:00:04:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"19",
|
|
"192.168.0.20",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"19",
|
|
"192.168.0.20:61489",
|
|
"192.168.0.31:55555",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.001, ACK: 2.000.001"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000402": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:04:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.31",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:04:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:04:12",
|
|
"02:00:00:00:04:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:04:12 [op=REPLY, sender=02:00:00:00:04:12|192.168.0.10, target=02:00:00:00:04:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:04:11",
|
|
"02:00:00:00:04:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.20:49379",
|
|
"192.168.0.10:53",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.20:49379",
|
|
"192.168.0.10:53",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=30470 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:04:12",
|
|
"02:00:00:00:04:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.10:53",
|
|
"192.168.0.20:49379",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.10:53",
|
|
"192.168.0.20:49379",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=30470 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:04:11",
|
|
"02:00:00:00:04:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.20:56898",
|
|
"192.168.0.10:53",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.20:56898",
|
|
"192.168.0.10:53",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=44276 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. MX IN\n"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:04:12",
|
|
"02:00:00:00:04:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.10:53",
|
|
"192.168.0.20:56898",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.10:53",
|
|
"192.168.0.20:56898",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=44276 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000403": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:04:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.31",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:04:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000404": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:04:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.31",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:04:14",
|
|
"02:00:00:00:04:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"192.168.0.31",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:04:14 [op=REPLY, sender=02:00:00:00:04:14|192.168.0.31, target=02:00:00:00:04:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:04:11",
|
|
"02:00:00:00:04:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.20",
|
|
"192.168.0.31",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Request (ping), TTL: 64, Identifier: 483, Seq.-No.: 1"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:04:14",
|
|
"02:00:00:00:04:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.31",
|
|
"192.168.0.20",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 1"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:04:11",
|
|
"02:00:00:00:04:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.20",
|
|
"192.168.0.31",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Request (ping), TTL: 64, Identifier: 483, Seq.-No.: 2"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:04:14",
|
|
"02:00:00:00:04:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.31",
|
|
"192.168.0.20",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 2"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:04:11",
|
|
"02:00:00:00:04:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.20",
|
|
"192.168.0.31",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Request (ping), TTL: 64, Identifier: 483, Seq.-No.: 3"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:04:14",
|
|
"02:00:00:00:04:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.31",
|
|
"192.168.0.20",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 3"
|
|
],
|
|
[
|
|
"9",
|
|
"02:00:00:00:04:11",
|
|
"02:00:00:00:04:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.20",
|
|
"192.168.0.31",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Request (ping), TTL: 64, Identifier: 483, Seq.-No.: 4"
|
|
],
|
|
[
|
|
"10",
|
|
"02:00:00:00:04:14",
|
|
"02:00:00:00:04:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.31",
|
|
"192.168.0.20",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 4"
|
|
],
|
|
[
|
|
"11",
|
|
"02:00:00:00:04:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"11",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
],
|
|
[
|
|
"12",
|
|
"02:00:00:00:04:11",
|
|
"02:00:00:00:04:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.20",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.20:61489",
|
|
"192.168.0.31:55555",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 4.000.000"
|
|
],
|
|
[
|
|
"13",
|
|
"02:00:00:00:04:14",
|
|
"02:00:00:00:04:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"13",
|
|
"192.168.0.31",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"13",
|
|
"192.168.0.31:55555",
|
|
"192.168.0.20:61489",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 2.000.000, ACK: 4.000.001"
|
|
],
|
|
[
|
|
"14",
|
|
"02:00:00:00:04:11",
|
|
"02:00:00:00:04:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.20",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.20:61489",
|
|
"192.168.0.31:55555",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.001, ACK: 2.000.001"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000405": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:04:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.31",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:04:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000405#1": [],
|
|
"00000000-0000-0000-0000-000000000406": []
|
|
},
|
|
"layeredRows": {
|
|
"00000000-0000-0000-0000-000000000401": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:04:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.31",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:04:14",
|
|
"02:00:00:00:04:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"192.168.0.31",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:04:14 [op=REPLY, sender=02:00:00:00:04:14|192.168.0.31, target=02:00:00:00:04:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:04:11",
|
|
"02:00:00:00:04:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.20",
|
|
"192.168.0.31",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Request (ping), TTL: 64, Identifier: 483, Seq.-No.: 1"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:04:14",
|
|
"02:00:00:00:04:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.31",
|
|
"192.168.0.20",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 1"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:04:11",
|
|
"02:00:00:00:04:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.20",
|
|
"192.168.0.31",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Request (ping), TTL: 64, Identifier: 483, Seq.-No.: 2"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:04:14",
|
|
"02:00:00:00:04:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.31",
|
|
"192.168.0.20",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 2"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:04:11",
|
|
"02:00:00:00:04:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.20",
|
|
"192.168.0.31",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Request (ping), TTL: 64, Identifier: 483, Seq.-No.: 3"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:04:14",
|
|
"02:00:00:00:04:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.31",
|
|
"192.168.0.20",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 3"
|
|
],
|
|
[
|
|
"9",
|
|
"02:00:00:00:04:11",
|
|
"02:00:00:00:04:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.20",
|
|
"192.168.0.31",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Request (ping), TTL: 64, Identifier: 483, Seq.-No.: 4"
|
|
],
|
|
[
|
|
"10",
|
|
"02:00:00:00:04:14",
|
|
"02:00:00:00:04:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.31",
|
|
"192.168.0.20",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 4"
|
|
],
|
|
[
|
|
"11",
|
|
"02:00:00:00:04:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"11",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
],
|
|
[
|
|
"12",
|
|
"02:00:00:00:04:12",
|
|
"02:00:00:00:04:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:04:12 [op=REPLY, sender=02:00:00:00:04:12|192.168.0.10, target=02:00:00:00:04:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"13",
|
|
"02:00:00:00:04:11",
|
|
"02:00:00:00:04:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"13",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"13",
|
|
"49379",
|
|
"53",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"13",
|
|
null,
|
|
null,
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=30470 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n"
|
|
],
|
|
[
|
|
"14",
|
|
"02:00:00:00:04:12",
|
|
"02:00:00:00:04:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"14",
|
|
"53",
|
|
"49379",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"14",
|
|
null,
|
|
null,
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=30470 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n"
|
|
],
|
|
[
|
|
"15",
|
|
"02:00:00:00:04:11",
|
|
"02:00:00:00:04:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"15",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"15",
|
|
"56898",
|
|
"53",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"15",
|
|
null,
|
|
null,
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=44276 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. MX IN\n"
|
|
],
|
|
[
|
|
"16",
|
|
"02:00:00:00:04:12",
|
|
"02:00:00:00:04:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"16",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"16",
|
|
"53",
|
|
"56898",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"16",
|
|
null,
|
|
null,
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=44276 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
|
|
],
|
|
[
|
|
"17",
|
|
"02:00:00:00:04:11",
|
|
"02:00:00:00:04:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"17",
|
|
"192.168.0.20",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"17",
|
|
"61489",
|
|
"55555",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 4.000.000"
|
|
],
|
|
[
|
|
"18",
|
|
"02:00:00:00:04:14",
|
|
"02:00:00:00:04:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"18",
|
|
"192.168.0.31",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"18",
|
|
"55555",
|
|
"61489",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 2.000.000, ACK: 4.000.001"
|
|
],
|
|
[
|
|
"19",
|
|
"02:00:00:00:04:11",
|
|
"02:00:00:00:04:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"19",
|
|
"192.168.0.20",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"19",
|
|
"61489",
|
|
"55555",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.001, ACK: 2.000.001"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000402": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:04:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.31",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:04:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:04:12",
|
|
"02:00:00:00:04:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:04:12 [op=REPLY, sender=02:00:00:00:04:12|192.168.0.10, target=02:00:00:00:04:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:04:11",
|
|
"02:00:00:00:04:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"49379",
|
|
"53",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"4",
|
|
null,
|
|
null,
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=30470 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:04:12",
|
|
"02:00:00:00:04:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"53",
|
|
"49379",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"5",
|
|
null,
|
|
null,
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=30470 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:04:11",
|
|
"02:00:00:00:04:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"6",
|
|
"56898",
|
|
"53",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"6",
|
|
null,
|
|
null,
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=44276 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. MX IN\n"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:04:12",
|
|
"02:00:00:00:04:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"53",
|
|
"56898",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"7",
|
|
null,
|
|
null,
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=44276 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000403": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:04:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.31",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:04:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000404": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:04:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.31",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:04:14",
|
|
"02:00:00:00:04:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"192.168.0.31",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:04:14 [op=REPLY, sender=02:00:00:00:04:14|192.168.0.31, target=02:00:00:00:04:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:04:11",
|
|
"02:00:00:00:04:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.20",
|
|
"192.168.0.31",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Request (ping), TTL: 64, Identifier: 483, Seq.-No.: 1"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:04:14",
|
|
"02:00:00:00:04:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.31",
|
|
"192.168.0.20",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 1"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:04:11",
|
|
"02:00:00:00:04:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.20",
|
|
"192.168.0.31",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Request (ping), TTL: 64, Identifier: 483, Seq.-No.: 2"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:04:14",
|
|
"02:00:00:00:04:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.31",
|
|
"192.168.0.20",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 2"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:04:11",
|
|
"02:00:00:00:04:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.20",
|
|
"192.168.0.31",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Request (ping), TTL: 64, Identifier: 483, Seq.-No.: 3"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:04:14",
|
|
"02:00:00:00:04:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.31",
|
|
"192.168.0.20",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 3"
|
|
],
|
|
[
|
|
"9",
|
|
"02:00:00:00:04:11",
|
|
"02:00:00:00:04:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.20",
|
|
"192.168.0.31",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Request (ping), TTL: 64, Identifier: 483, Seq.-No.: 4"
|
|
],
|
|
[
|
|
"10",
|
|
"02:00:00:00:04:14",
|
|
"02:00:00:00:04:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.31",
|
|
"192.168.0.20",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 4"
|
|
],
|
|
[
|
|
"11",
|
|
"02:00:00:00:04:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"11",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
],
|
|
[
|
|
"12",
|
|
"02:00:00:00:04:11",
|
|
"02:00:00:00:04:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"12",
|
|
"192.168.0.20",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"12",
|
|
"61489",
|
|
"55555",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 4.000.000"
|
|
],
|
|
[
|
|
"13",
|
|
"02:00:00:00:04:14",
|
|
"02:00:00:00:04:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"13",
|
|
"192.168.0.31",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"13",
|
|
"55555",
|
|
"61489",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 2.000.000, ACK: 4.000.001"
|
|
],
|
|
[
|
|
"14",
|
|
"02:00:00:00:04:11",
|
|
"02:00:00:00:04:14",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"14",
|
|
"192.168.0.20",
|
|
"192.168.0.31",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"14",
|
|
"61489",
|
|
"55555",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.001, ACK: 2.000.001"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000405": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:04:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.31",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:04:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000405#1": [],
|
|
"00000000-0000-0000-0000-000000000406": []
|
|
},
|
|
"acts": [
|
|
[
|
|
500,
|
|
"00000000-0000-0000-0000-000000000404",
|
|
"tcpdump"
|
|
],
|
|
[
|
|
600,
|
|
"00000000-0000-0000-0000-000000000402",
|
|
"tcpdump"
|
|
],
|
|
[
|
|
1000,
|
|
"00000000-0000-0000-0000-000000000401",
|
|
"ping 192.168.0.31"
|
|
],
|
|
[
|
|
3000,
|
|
"00000000-0000-0000-0000-000000000404",
|
|
"arp"
|
|
],
|
|
[
|
|
5500,
|
|
"00000000-0000-0000-0000-000000000401",
|
|
"host www.filius.de"
|
|
],
|
|
[
|
|
6500,
|
|
"00000000-0000-0000-0000-000000000401",
|
|
"connect"
|
|
],
|
|
[
|
|
8000,
|
|
"00000000-0000-0000-0000-000000000404",
|
|
"^C"
|
|
],
|
|
[
|
|
8100,
|
|
"00000000-0000-0000-0000-000000000402",
|
|
"^C"
|
|
]
|
|
],
|
|
"events": [
|
|
[
|
|
500,
|
|
"00000000-0000-0000-0000-000000000404",
|
|
"call",
|
|
"tcpdump"
|
|
],
|
|
[
|
|
501,
|
|
"00000000-0000-0000-0000-000000000404",
|
|
"busy",
|
|
"true"
|
|
],
|
|
[
|
|
501,
|
|
"00000000-0000-0000-0000-000000000404",
|
|
"text",
|
|
"Beenden mit Strg+C"
|
|
],
|
|
[
|
|
600,
|
|
"00000000-0000-0000-0000-000000000402",
|
|
"call",
|
|
"tcpdump"
|
|
],
|
|
[
|
|
600,
|
|
"00000000-0000-0000-0000-000000000402",
|
|
"busy",
|
|
"true"
|
|
],
|
|
[
|
|
600,
|
|
"00000000-0000-0000-0000-000000000402",
|
|
"text",
|
|
"Beenden mit Strg+C"
|
|
],
|
|
[
|
|
1000,
|
|
"00000000-0000-0000-0000-000000000401",
|
|
"call",
|
|
"ping 192.168.0.31"
|
|
],
|
|
[
|
|
1001,
|
|
"00000000-0000-0000-0000-000000000401",
|
|
"busy",
|
|
"true"
|
|
],
|
|
[
|
|
1001,
|
|
"00000000-0000-0000-0000-000000000401",
|
|
"text",
|
|
"PING 192.168.0.31 (192.168.0.31)"
|
|
],
|
|
[
|
|
1201,
|
|
"00000000-0000-0000-0000-000000000402",
|
|
"text",
|
|
"\n 10:37:06.217 ARP 192.168.0.20 > 192.168.0.31 Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]"
|
|
],
|
|
[
|
|
1205,
|
|
"00000000-0000-0000-0000-000000000404",
|
|
"text",
|
|
"\n 10:37:06.217 ARP 192.168.0.20 > 192.168.0.31 Suche nach MAC für 192.168.0.31 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.31]"
|
|
],
|
|
[
|
|
1205,
|
|
"00000000-0000-0000-0000-000000000404",
|
|
"text",
|
|
"\n 10:37:06.220 ARP 192.168.0.31 > 192.168.0.20 MAC ist 02:00:00:00:04:14 [op=REPLY, sender=02:00:00:00:04:14|192.168.0.31, target=02:00:00:00:04:11|192.168.0.20]"
|
|
],
|
|
[
|
|
1407,
|
|
"00000000-0000-0000-0000-000000000404",
|
|
"text",
|
|
"\n 10:37:06.449 ICMP 192.168.0.20 > 192.168.0.31 ICMP Echo Request (ping), TTL: 64, Identifier: 483, Seq.-No.: 1"
|
|
],
|
|
[
|
|
1407,
|
|
"00000000-0000-0000-0000-000000000404",
|
|
"text",
|
|
"\n 10:37:06.449 ICMP 192.168.0.31 > 192.168.0.20 ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 1"
|
|
],
|
|
[
|
|
1471,
|
|
"00000000-0000-0000-0000-000000000401",
|
|
"text",
|
|
"\nFrom 192.168.0.31: icmp_seq=1 ttl=64 time=468ms"
|
|
],
|
|
[
|
|
2207,
|
|
"00000000-0000-0000-0000-000000000404",
|
|
"text",
|
|
"\n 10:37:07.206 ICMP 192.168.0.20 > 192.168.0.31 ICMP Echo Request (ping), TTL: 64, Identifier: 483, Seq.-No.: 2"
|
|
],
|
|
[
|
|
2207,
|
|
"00000000-0000-0000-0000-000000000404",
|
|
"text",
|
|
"\n 10:37:07.206 ICMP 192.168.0.31 > 192.168.0.20 ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 2"
|
|
],
|
|
[
|
|
2226,
|
|
"00000000-0000-0000-0000-000000000401",
|
|
"text",
|
|
"\nFrom 192.168.0.31: icmp_seq=2 ttl=64 time=223ms"
|
|
],
|
|
[
|
|
3000,
|
|
"00000000-0000-0000-0000-000000000404",
|
|
"call",
|
|
"arp"
|
|
],
|
|
[
|
|
3208,
|
|
"00000000-0000-0000-0000-000000000404",
|
|
"text",
|
|
"\n 10:37:08.206 ICMP 192.168.0.20 > 192.168.0.31 ICMP Echo Request (ping), TTL: 64, Identifier: 483, Seq.-No.: 3"
|
|
],
|
|
[
|
|
3208,
|
|
"00000000-0000-0000-0000-000000000404",
|
|
"text",
|
|
"\n 10:37:08.206 ICMP 192.168.0.31 > 192.168.0.20 ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 3"
|
|
],
|
|
[
|
|
3226,
|
|
"00000000-0000-0000-0000-000000000401",
|
|
"text",
|
|
"\nFrom 192.168.0.31: icmp_seq=3 ttl=64 time=223ms"
|
|
],
|
|
[
|
|
4209,
|
|
"00000000-0000-0000-0000-000000000404",
|
|
"text",
|
|
"\n 10:37:09.206 ICMP 192.168.0.20 > 192.168.0.31 ICMP Echo Request (ping), TTL: 64, Identifier: 483, Seq.-No.: 4"
|
|
],
|
|
[
|
|
4209,
|
|
"00000000-0000-0000-0000-000000000404",
|
|
"text",
|
|
"\n 10:37:09.206 ICMP 192.168.0.31 > 192.168.0.20 ICMP Echo Reply (pong), TTL: 64, Identifier: 483, Seq.-No.: 4"
|
|
],
|
|
[
|
|
4226,
|
|
"00000000-0000-0000-0000-000000000401",
|
|
"text",
|
|
"\nFrom 192.168.0.31: icmp_seq=4 ttl=64 time=223ms"
|
|
],
|
|
[
|
|
5005,
|
|
"00000000-0000-0000-0000-000000000401",
|
|
"text",
|
|
"\n--- 192.168.0.31 Paketstatistik ---\n4 Paket(e) gesendet, 4 Paket(e) empfangen, 0% Paketverlust\n"
|
|
],
|
|
[
|
|
5005,
|
|
"00000000-0000-0000-0000-000000000401",
|
|
"busy",
|
|
"false"
|
|
],
|
|
[
|
|
5500,
|
|
"00000000-0000-0000-0000-000000000401",
|
|
"call",
|
|
"host www.filius.de"
|
|
],
|
|
[
|
|
5501,
|
|
"00000000-0000-0000-0000-000000000401",
|
|
"busy",
|
|
"true"
|
|
],
|
|
[
|
|
5706,
|
|
"00000000-0000-0000-0000-000000000402",
|
|
"text",
|
|
"\n 10:37:10.708 ARP 192.168.0.20 > 192.168.0.10 Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
],
|
|
[
|
|
5706,
|
|
"00000000-0000-0000-0000-000000000402",
|
|
"text",
|
|
"\n 10:37:10.708 ARP 192.168.0.10 > 192.168.0.20 MAC ist 02:00:00:00:04:12 [op=REPLY, sender=02:00:00:00:04:12|192.168.0.10, target=02:00:00:00:04:11|192.168.0.20]"
|
|
],
|
|
[
|
|
5711,
|
|
"00000000-0000-0000-0000-000000000404",
|
|
"text",
|
|
"\n 10:37:10.708 ARP 192.168.0.20 > 192.168.0.10 Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:04:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
],
|
|
[
|
|
5917,
|
|
"00000000-0000-0000-0000-000000000402",
|
|
"text",
|
|
"\n 10:37:10.933 DNS 192.168.0.20:49379 > 192.168.0.10:53 ID=30470 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 www.filius.de. A IN"
|
|
],
|
|
[
|
|
5917,
|
|
"00000000-0000-0000-0000-000000000402",
|
|
"text",
|
|
"\n 10:37:10.937 DNS 192.168.0.10:53 > 192.168.0.20:49379 ID=30470 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 www.filius.de. A 3600 192.168.0.30"
|
|
],
|
|
[
|
|
5958,
|
|
"00000000-0000-0000-0000-000000000401",
|
|
"text",
|
|
"www.filius.de. hat die IP-Adresse 192.168.0.30\n"
|
|
],
|
|
[
|
|
6117,
|
|
"00000000-0000-0000-0000-000000000402",
|
|
"text",
|
|
"\n 10:37:11.161 DNS 192.168.0.20:56898 > 192.168.0.10:53 ID=44276 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 www.filius.de. MX IN"
|
|
],
|
|
[
|
|
6117,
|
|
"00000000-0000-0000-0000-000000000402",
|
|
"text",
|
|
"\n 10:37:11.163 DNS 192.168.0.10:53 > 192.168.0.20:56898 ID=44276 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0"
|
|
],
|
|
[
|
|
6183,
|
|
"00000000-0000-0000-0000-000000000401",
|
|
"busy",
|
|
"false"
|
|
],
|
|
[
|
|
6500,
|
|
"00000000-0000-0000-0000-000000000401",
|
|
"call",
|
|
"connect 192.168.0.31:55555"
|
|
],
|
|
[
|
|
6712,
|
|
"00000000-0000-0000-0000-000000000404",
|
|
"text",
|
|
"\n 10:37:11.710 TCP 192.168.0.20:61489 > 192.168.0.31:55555 SYN, SEQ: 4.000.000"
|
|
],
|
|
[
|
|
6712,
|
|
"00000000-0000-0000-0000-000000000404",
|
|
"text",
|
|
"\n 10:37:11.710 TCP 192.168.0.31:55555 > 192.168.0.20:61489 SYN, SEQ: 2.000.000, ACK: 4.000.001"
|
|
],
|
|
[
|
|
6913,
|
|
"00000000-0000-0000-0000-000000000404",
|
|
"text",
|
|
"\n 10:37:11.933 TCP 192.168.0.20:61489 > 192.168.0.31:55555 SEQ: 4.000.001, ACK: 2.000.001"
|
|
],
|
|
[
|
|
8000,
|
|
"00000000-0000-0000-0000-000000000404",
|
|
"call",
|
|
"^C"
|
|
],
|
|
[
|
|
8014,
|
|
"00000000-0000-0000-0000-000000000404",
|
|
"busy",
|
|
"false"
|
|
],
|
|
[
|
|
8014,
|
|
"00000000-0000-0000-0000-000000000404",
|
|
"text",
|
|
"| Internetadresse | Physische Adresse |\n----------------------------------------\n| 192.168.0.20 | 02:00:00:00:04:11 |\n| 255.255.255.255 | FF:FF:FF:FF:FF:FF |\n----------------------------------------\n"
|
|
],
|
|
[
|
|
8100,
|
|
"00000000-0000-0000-0000-000000000402",
|
|
"call",
|
|
"^C"
|
|
],
|
|
[
|
|
8119,
|
|
"00000000-0000-0000-0000-000000000402",
|
|
"busy",
|
|
"false"
|
|
]
|
|
]
|
|
}
|