engine.ts ports Swift's "Java-compatible TCP sockets" in one piece, since half a state machine could not be checked: server and client sockets (a free port from Java's random numbers on their own seed), the three-way handshake with its result (connected, invalid socket, unreachable, timed out), segments of 1460 bytes, messages up to the push, a timeout of 3 × 2.5 s with at most three attempts, closing through every Java state including TIME_WAIT (2.5 s), sequence numbers modulo 2^32. Three scenarios match the Swift engine trace for trace: a LAN with data over three segments, closing from both ends, a closed port and an unreachable host; two networks through a router with a firewall rule, data lost until the connection closes, and an accepted socket that does not hold the port of its closed listener; CLOSING, reached by a lost FIN. The engine delivers a FIN within the same close, so both ends close at once only with packet loss; an empty message does not arrive in Swift (it does not advance the sequence number), nor here. Swift's four TCP engine tests are ported, with tests for stopping, a foreign SYN+ACK at a listener and the flag names. 17 mutation probes, 16 caught; the other (delivered, not waited, not connected gives unreachable) cannot be reached through Swift's engine, which never sends a reset and always acknowledges correctly. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
10425 lines
212 KiB
JSON
10425 lines
212 KiB
JSON
{
|
|
"arp" : {
|
|
"00000000-0000-0000-0000-000000000101" : {
|
|
"192.168.0.20" : "02:00:00:00:01:12",
|
|
"192.168.0.30" : "02:00:00:00:01:13"
|
|
},
|
|
"00000000-0000-0000-0000-000000000102" : {
|
|
"192.168.0.10" : "02:00:00:00:01:11",
|
|
"192.168.0.30" : "02:00:00:00:01:13"
|
|
},
|
|
"00000000-0000-0000-0000-000000000103" : {
|
|
"192.168.0.10" : "02:00:00:00:01:11",
|
|
"192.168.0.20" : "02:00:00:00:01:12"
|
|
}
|
|
},
|
|
"firewallDecisions" : [
|
|
|
|
],
|
|
"icmpObservations" : {
|
|
"00000000-0000-0000-0000-000000000103" : [
|
|
{
|
|
"identifier" : 0,
|
|
"kind" : "destinationHostUnreachable",
|
|
"sender" : "192.168.0.30",
|
|
"sequence" : 0
|
|
},
|
|
{
|
|
"identifier" : 0,
|
|
"kind" : "destinationHostUnreachable",
|
|
"sender" : "192.168.0.30",
|
|
"sequence" : 0
|
|
},
|
|
{
|
|
"identifier" : 0,
|
|
"kind" : "destinationHostUnreachable",
|
|
"sender" : "192.168.0.30",
|
|
"sequence" : 0
|
|
}
|
|
]
|
|
},
|
|
"pendingEvents" : 0,
|
|
"results" : [
|
|
"00000000-0000-0000-0000-000000000001",
|
|
null,
|
|
"00000000-0000-0000-0000-000000000002",
|
|
"connected",
|
|
[
|
|
"00000000-0000-0000-0000-000000000003"
|
|
],
|
|
"00000000-0000-0000-0000-000000000003",
|
|
true,
|
|
"GET \/",
|
|
true,
|
|
"xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx",
|
|
null,
|
|
false,
|
|
3000,
|
|
false,
|
|
4000,
|
|
8000,
|
|
true,
|
|
false,
|
|
"invalidSocket",
|
|
"00000000-0000-0000-0000-000000000004",
|
|
false,
|
|
"timedOut",
|
|
"00000000-0000-0000-0000-000000000005",
|
|
"unreachable",
|
|
false
|
|
],
|
|
"sockets" : [
|
|
{
|
|
"id" : "00000000-0000-0000-0000-000000000001",
|
|
"localIp" : null,
|
|
"localPort" : 80,
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"parent" : null,
|
|
"protocol" : "tcp",
|
|
"queued" : 0,
|
|
"remoteIp" : null,
|
|
"remotePort" : null,
|
|
"session" : {
|
|
"assembly" : 0,
|
|
"attempts" : 0,
|
|
"messages" : 0,
|
|
"next" : 1000000,
|
|
"pending" : false,
|
|
"remote" : 0
|
|
},
|
|
"tcpState" : "CLOSED"
|
|
},
|
|
{
|
|
"id" : "00000000-0000-0000-0000-000000000003",
|
|
"localIp" : "192.168.0.10",
|
|
"localPort" : 80,
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"parent" : "00000000-0000-0000-0000-000000000001",
|
|
"protocol" : "tcp",
|
|
"queued" : 0,
|
|
"remoteIp" : "192.168.0.20",
|
|
"remotePort" : 61957,
|
|
"session" : {
|
|
"assembly" : 0,
|
|
"attempts" : 1,
|
|
"messages" : 0,
|
|
"next" : 3003002,
|
|
"pending" : false,
|
|
"remote" : 2000006
|
|
},
|
|
"tcpState" : "CLOSED"
|
|
},
|
|
{
|
|
"id" : "00000000-0000-0000-0000-000000000004",
|
|
"localIp" : "192.168.0.30",
|
|
"localPort" : 51292,
|
|
"node" : "00000000-0000-0000-0000-000000000103",
|
|
"parent" : null,
|
|
"protocol" : "tcp",
|
|
"queued" : 0,
|
|
"remoteIp" : "192.168.0.10",
|
|
"remotePort" : 81,
|
|
"session" : {
|
|
"assembly" : 0,
|
|
"attempts" : 3,
|
|
"messages" : 0,
|
|
"next" : 4000001,
|
|
"pending" : false,
|
|
"remote" : 0
|
|
},
|
|
"tcpState" : "CLOSED"
|
|
},
|
|
{
|
|
"id" : "00000000-0000-0000-0000-000000000005",
|
|
"localIp" : "192.168.0.30",
|
|
"localPort" : 5000,
|
|
"node" : "00000000-0000-0000-0000-000000000103",
|
|
"parent" : null,
|
|
"protocol" : "tcp",
|
|
"queued" : 0,
|
|
"remoteIp" : "192.168.0.99",
|
|
"remotePort" : 80,
|
|
"session" : {
|
|
"assembly" : 0,
|
|
"attempts" : 3,
|
|
"messages" : 0,
|
|
"next" : 5000001,
|
|
"pending" : false,
|
|
"remote" : 0
|
|
},
|
|
"tcpState" : "CLOSED"
|
|
}
|
|
],
|
|
"switchTables" : {
|
|
|
|
},
|
|
"time" : 53550,
|
|
"traces" : [
|
|
{
|
|
"after" : [
|
|
[
|
|
"state",
|
|
"LISTEN"
|
|
]
|
|
],
|
|
"before" : [
|
|
[
|
|
"state",
|
|
"CLOSED"
|
|
]
|
|
],
|
|
"detail" : "TCP CLOSED -> LISTEN",
|
|
"direction" : "local",
|
|
"id" : 1,
|
|
"layer" : "transport",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "accepted",
|
|
"time" : 0
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"state",
|
|
"SYN_SENT"
|
|
]
|
|
],
|
|
"before" : [
|
|
[
|
|
"state",
|
|
"CLOSED"
|
|
]
|
|
],
|
|
"detail" : "TCP CLOSED -> SYN_SENT",
|
|
"direction" : "local",
|
|
"id" : 2,
|
|
"layer" : "transport",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "accepted",
|
|
"time" : 0
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourcePort",
|
|
"61957"
|
|
],
|
|
[
|
|
"destinationPort",
|
|
"80"
|
|
],
|
|
[
|
|
"sequenceNumber",
|
|
"2000000"
|
|
],
|
|
[
|
|
"acknowledgementNumber",
|
|
"0"
|
|
],
|
|
[
|
|
"flags",
|
|
"SYN"
|
|
],
|
|
[
|
|
"payloadLength",
|
|
"0"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "TCP SYN",
|
|
"direction" : "outbound",
|
|
"id" : 3,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "transport",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "sent",
|
|
"packet" : 1,
|
|
"time" : 0
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "ARP request for 192.168.0.10",
|
|
"direction" : "outbound",
|
|
"frame" : 1,
|
|
"id" : 4,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "created",
|
|
"time" : 0
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 1,
|
|
"id" : 5,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "sent",
|
|
"time" : 0
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 1,
|
|
"id" : 6,
|
|
"interface" : "00000000-0000-0000-0000-000000000122",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "received",
|
|
"time" : 55
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"detail" : "switch learned source MAC",
|
|
"direction" : "inbound",
|
|
"frame" : 1,
|
|
"id" : 7,
|
|
"interface" : "00000000-0000-0000-0000-000000000122",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "accepted",
|
|
"time" : 55
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "switch broadcast flooding",
|
|
"direction" : "outbound",
|
|
"frame" : 1,
|
|
"id" : 8,
|
|
"interface" : "00000000-0000-0000-0000-000000000121",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "forwarded",
|
|
"time" : 55
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 1,
|
|
"id" : 9,
|
|
"interface" : "00000000-0000-0000-0000-000000000121",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "sent",
|
|
"time" : 55
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "switch broadcast flooding",
|
|
"direction" : "outbound",
|
|
"frame" : 1,
|
|
"id" : 10,
|
|
"interface" : "00000000-0000-0000-0000-000000000123",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "forwarded",
|
|
"time" : 55
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 1,
|
|
"id" : 11,
|
|
"interface" : "00000000-0000-0000-0000-000000000123",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "sent",
|
|
"time" : 55
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 1,
|
|
"id" : 12,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "received",
|
|
"time" : 110
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 1,
|
|
"id" : 13,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "received",
|
|
"time" : 110
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"operation",
|
|
"request"
|
|
],
|
|
[
|
|
"senderMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"senderIP",
|
|
"192.168.0.20"
|
|
],
|
|
[
|
|
"targetMAC",
|
|
"00:00:00:00:00:00"
|
|
],
|
|
[
|
|
"targetIP",
|
|
"192.168.0.10"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 1,
|
|
"id" : 14,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "accepted",
|
|
"time" : 110
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:12"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "ARP reply for 192.168.0.10",
|
|
"direction" : "outbound",
|
|
"frame" : 2,
|
|
"id" : 15,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "created",
|
|
"time" : 110
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:12"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 2,
|
|
"id" : 16,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "sent",
|
|
"time" : 110
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 1,
|
|
"id" : 17,
|
|
"interface" : "00000000-0000-0000-0000-000000000113",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000103",
|
|
"operation" : "received",
|
|
"time" : 110
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 1,
|
|
"id" : 18,
|
|
"interface" : "00000000-0000-0000-0000-000000000113",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000103",
|
|
"operation" : "received",
|
|
"time" : 110
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"operation",
|
|
"request"
|
|
],
|
|
[
|
|
"senderMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"senderIP",
|
|
"192.168.0.20"
|
|
],
|
|
[
|
|
"targetMAC",
|
|
"00:00:00:00:00:00"
|
|
],
|
|
[
|
|
"targetIP",
|
|
"192.168.0.10"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 1,
|
|
"id" : 19,
|
|
"interface" : "00000000-0000-0000-0000-000000000113",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000103",
|
|
"operation" : "accepted",
|
|
"time" : 110
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:12"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 2,
|
|
"id" : 20,
|
|
"interface" : "00000000-0000-0000-0000-000000000121",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "received",
|
|
"time" : 165
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:12"
|
|
]
|
|
],
|
|
"detail" : "switch learned source MAC",
|
|
"direction" : "inbound",
|
|
"frame" : 2,
|
|
"id" : 21,
|
|
"interface" : "00000000-0000-0000-0000-000000000121",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "accepted",
|
|
"time" : 165
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:12"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "switch learned unicast forwarding",
|
|
"direction" : "outbound",
|
|
"frame" : 2,
|
|
"id" : 22,
|
|
"interface" : "00000000-0000-0000-0000-000000000122",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "forwarded",
|
|
"time" : 165
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:12"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 2,
|
|
"id" : 23,
|
|
"interface" : "00000000-0000-0000-0000-000000000122",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "sent",
|
|
"time" : 165
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:12"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 2,
|
|
"id" : 24,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "received",
|
|
"time" : 220
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:12"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 2,
|
|
"id" : 25,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "received",
|
|
"time" : 220
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"operation",
|
|
"reply"
|
|
],
|
|
[
|
|
"senderMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"senderIP",
|
|
"192.168.0.10"
|
|
],
|
|
[
|
|
"targetMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"targetIP",
|
|
"192.168.0.20"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 2,
|
|
"id" : 26,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "accepted",
|
|
"time" : 220
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"senderIP",
|
|
"192.168.0.20"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"192.168.0.10"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"6"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 3,
|
|
"id" : 27,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "sent",
|
|
"packet" : 1,
|
|
"time" : 220
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 3,
|
|
"id" : 28,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "created",
|
|
"packet" : 1,
|
|
"time" : 220
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 3,
|
|
"id" : 29,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "sent",
|
|
"packet" : 1,
|
|
"time" : 220
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 3,
|
|
"id" : 30,
|
|
"interface" : "00000000-0000-0000-0000-000000000122",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "received",
|
|
"packet" : 1,
|
|
"time" : 275
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"detail" : "switch learned source MAC",
|
|
"direction" : "inbound",
|
|
"frame" : 3,
|
|
"id" : 31,
|
|
"interface" : "00000000-0000-0000-0000-000000000122",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "accepted",
|
|
"packet" : 1,
|
|
"time" : 275
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "switch learned unicast forwarding",
|
|
"direction" : "outbound",
|
|
"frame" : 3,
|
|
"id" : 32,
|
|
"interface" : "00000000-0000-0000-0000-000000000121",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "forwarded",
|
|
"packet" : 1,
|
|
"time" : 275
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 3,
|
|
"id" : 33,
|
|
"interface" : "00000000-0000-0000-0000-000000000121",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "sent",
|
|
"packet" : 1,
|
|
"time" : 275
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 3,
|
|
"id" : 34,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "received",
|
|
"packet" : 1,
|
|
"time" : 330
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 3,
|
|
"id" : 35,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "received",
|
|
"packet" : 1,
|
|
"time" : 330
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"senderIP",
|
|
"192.168.0.20"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"192.168.0.10"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"6"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 3,
|
|
"id" : 36,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "received",
|
|
"packet" : 1,
|
|
"time" : 330
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourcePort",
|
|
"61957"
|
|
],
|
|
[
|
|
"destinationPort",
|
|
"80"
|
|
],
|
|
[
|
|
"sequenceNumber",
|
|
"2000000"
|
|
],
|
|
[
|
|
"acknowledgementNumber",
|
|
"0"
|
|
],
|
|
[
|
|
"flags",
|
|
"SYN"
|
|
],
|
|
[
|
|
"payloadLength",
|
|
"0"
|
|
]
|
|
],
|
|
"detail" : "TCP segment received",
|
|
"direction" : "local",
|
|
"id" : 37,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "transport",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "accepted",
|
|
"packet" : 1,
|
|
"time" : 330
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"state",
|
|
"SYN_RCVD"
|
|
]
|
|
],
|
|
"before" : [
|
|
[
|
|
"state",
|
|
"LISTEN"
|
|
]
|
|
],
|
|
"detail" : "TCP LISTEN -> SYN_RCVD",
|
|
"direction" : "local",
|
|
"id" : 38,
|
|
"layer" : "transport",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "accepted",
|
|
"time" : 330
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourcePort",
|
|
"80"
|
|
],
|
|
[
|
|
"destinationPort",
|
|
"61957"
|
|
],
|
|
[
|
|
"sequenceNumber",
|
|
"3000000"
|
|
],
|
|
[
|
|
"acknowledgementNumber",
|
|
"2000001"
|
|
],
|
|
[
|
|
"flags",
|
|
"SYN+ACK"
|
|
],
|
|
[
|
|
"payloadLength",
|
|
"0"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "TCP SYN+ACK",
|
|
"direction" : "outbound",
|
|
"id" : 39,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "transport",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "sent",
|
|
"packet" : 2,
|
|
"time" : 330
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"senderIP",
|
|
"192.168.0.10"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"192.168.0.20"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"6"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 4,
|
|
"id" : 40,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "sent",
|
|
"packet" : 2,
|
|
"time" : 330
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:12"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 4,
|
|
"id" : 41,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "created",
|
|
"packet" : 2,
|
|
"time" : 330
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:12"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 4,
|
|
"id" : 42,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "sent",
|
|
"packet" : 2,
|
|
"time" : 330
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:12"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 4,
|
|
"id" : 43,
|
|
"interface" : "00000000-0000-0000-0000-000000000121",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "received",
|
|
"packet" : 2,
|
|
"time" : 385
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:12"
|
|
]
|
|
],
|
|
"detail" : "switch learned source MAC",
|
|
"direction" : "inbound",
|
|
"frame" : 4,
|
|
"id" : 44,
|
|
"interface" : "00000000-0000-0000-0000-000000000121",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "accepted",
|
|
"packet" : 2,
|
|
"time" : 385
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:12"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "switch learned unicast forwarding",
|
|
"direction" : "outbound",
|
|
"frame" : 4,
|
|
"id" : 45,
|
|
"interface" : "00000000-0000-0000-0000-000000000122",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "forwarded",
|
|
"packet" : 2,
|
|
"time" : 385
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:12"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 4,
|
|
"id" : 46,
|
|
"interface" : "00000000-0000-0000-0000-000000000122",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "sent",
|
|
"packet" : 2,
|
|
"time" : 385
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:12"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 4,
|
|
"id" : 47,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "received",
|
|
"packet" : 2,
|
|
"time" : 440
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:12"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 4,
|
|
"id" : 48,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "received",
|
|
"packet" : 2,
|
|
"time" : 440
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"senderIP",
|
|
"192.168.0.10"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"192.168.0.20"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"6"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 4,
|
|
"id" : 49,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "received",
|
|
"packet" : 2,
|
|
"time" : 440
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourcePort",
|
|
"80"
|
|
],
|
|
[
|
|
"destinationPort",
|
|
"61957"
|
|
],
|
|
[
|
|
"sequenceNumber",
|
|
"3000000"
|
|
],
|
|
[
|
|
"acknowledgementNumber",
|
|
"2000001"
|
|
],
|
|
[
|
|
"flags",
|
|
"SYN+ACK"
|
|
],
|
|
[
|
|
"payloadLength",
|
|
"0"
|
|
]
|
|
],
|
|
"detail" : "TCP segment received",
|
|
"direction" : "local",
|
|
"id" : 50,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "transport",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "accepted",
|
|
"packet" : 2,
|
|
"time" : 440
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"state",
|
|
"ESTABLISHED"
|
|
]
|
|
],
|
|
"before" : [
|
|
[
|
|
"state",
|
|
"SYN_SENT"
|
|
]
|
|
],
|
|
"detail" : "TCP SYN_SENT -> ESTABLISHED",
|
|
"direction" : "local",
|
|
"id" : 51,
|
|
"layer" : "transport",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "accepted",
|
|
"time" : 440
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourcePort",
|
|
"61957"
|
|
],
|
|
[
|
|
"destinationPort",
|
|
"80"
|
|
],
|
|
[
|
|
"sequenceNumber",
|
|
"2000001"
|
|
],
|
|
[
|
|
"acknowledgementNumber",
|
|
"3000001"
|
|
],
|
|
[
|
|
"flags",
|
|
"ACK"
|
|
],
|
|
[
|
|
"payloadLength",
|
|
"0"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "TCP ACK",
|
|
"direction" : "outbound",
|
|
"id" : 52,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "transport",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "sent",
|
|
"packet" : 3,
|
|
"time" : 440
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"senderIP",
|
|
"192.168.0.20"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"192.168.0.10"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"6"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 5,
|
|
"id" : 53,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "sent",
|
|
"packet" : 3,
|
|
"time" : 440
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 5,
|
|
"id" : 54,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "created",
|
|
"packet" : 3,
|
|
"time" : 440
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 5,
|
|
"id" : 55,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "sent",
|
|
"packet" : 3,
|
|
"time" : 440
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 5,
|
|
"id" : 56,
|
|
"interface" : "00000000-0000-0000-0000-000000000122",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "received",
|
|
"packet" : 3,
|
|
"time" : 495
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"detail" : "switch learned source MAC",
|
|
"direction" : "inbound",
|
|
"frame" : 5,
|
|
"id" : 57,
|
|
"interface" : "00000000-0000-0000-0000-000000000122",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "accepted",
|
|
"packet" : 3,
|
|
"time" : 495
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "switch learned unicast forwarding",
|
|
"direction" : "outbound",
|
|
"frame" : 5,
|
|
"id" : 58,
|
|
"interface" : "00000000-0000-0000-0000-000000000121",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "forwarded",
|
|
"packet" : 3,
|
|
"time" : 495
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 5,
|
|
"id" : 59,
|
|
"interface" : "00000000-0000-0000-0000-000000000121",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "sent",
|
|
"packet" : 3,
|
|
"time" : 495
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 5,
|
|
"id" : 60,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "received",
|
|
"packet" : 3,
|
|
"time" : 550
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 5,
|
|
"id" : 61,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "received",
|
|
"packet" : 3,
|
|
"time" : 550
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"senderIP",
|
|
"192.168.0.20"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"192.168.0.10"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"6"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 5,
|
|
"id" : 62,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "received",
|
|
"packet" : 3,
|
|
"time" : 550
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourcePort",
|
|
"61957"
|
|
],
|
|
[
|
|
"destinationPort",
|
|
"80"
|
|
],
|
|
[
|
|
"sequenceNumber",
|
|
"2000001"
|
|
],
|
|
[
|
|
"acknowledgementNumber",
|
|
"3000001"
|
|
],
|
|
[
|
|
"flags",
|
|
"ACK"
|
|
],
|
|
[
|
|
"payloadLength",
|
|
"0"
|
|
]
|
|
],
|
|
"detail" : "TCP segment received",
|
|
"direction" : "local",
|
|
"id" : 63,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "transport",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "accepted",
|
|
"packet" : 3,
|
|
"time" : 550
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"state",
|
|
"ESTABLISHED"
|
|
]
|
|
],
|
|
"before" : [
|
|
[
|
|
"state",
|
|
"SYN_RCVD"
|
|
]
|
|
],
|
|
"detail" : "TCP SYN_RCVD -> ESTABLISHED",
|
|
"direction" : "local",
|
|
"id" : 64,
|
|
"layer" : "transport",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "accepted",
|
|
"time" : 550
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourcePort",
|
|
"61957"
|
|
],
|
|
[
|
|
"destinationPort",
|
|
"80"
|
|
],
|
|
[
|
|
"sequenceNumber",
|
|
"2000001"
|
|
],
|
|
[
|
|
"acknowledgementNumber",
|
|
"0"
|
|
],
|
|
[
|
|
"flags",
|
|
"PSH"
|
|
],
|
|
[
|
|
"payloadLength",
|
|
"5"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "TCP data segment 1\/1",
|
|
"direction" : "outbound",
|
|
"id" : 65,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "transport",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "sent",
|
|
"packet" : 4,
|
|
"time" : 550
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"senderIP",
|
|
"192.168.0.20"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"192.168.0.10"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"6"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 6,
|
|
"id" : 66,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "sent",
|
|
"packet" : 4,
|
|
"time" : 550
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 6,
|
|
"id" : 67,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "created",
|
|
"packet" : 4,
|
|
"time" : 550
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 6,
|
|
"id" : 68,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "sent",
|
|
"packet" : 4,
|
|
"time" : 550
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 6,
|
|
"id" : 69,
|
|
"interface" : "00000000-0000-0000-0000-000000000122",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "received",
|
|
"packet" : 4,
|
|
"time" : 605
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"detail" : "switch learned source MAC",
|
|
"direction" : "inbound",
|
|
"frame" : 6,
|
|
"id" : 70,
|
|
"interface" : "00000000-0000-0000-0000-000000000122",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "accepted",
|
|
"packet" : 4,
|
|
"time" : 605
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "switch learned unicast forwarding",
|
|
"direction" : "outbound",
|
|
"frame" : 6,
|
|
"id" : 71,
|
|
"interface" : "00000000-0000-0000-0000-000000000121",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "forwarded",
|
|
"packet" : 4,
|
|
"time" : 605
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 6,
|
|
"id" : 72,
|
|
"interface" : "00000000-0000-0000-0000-000000000121",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "sent",
|
|
"packet" : 4,
|
|
"time" : 605
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 6,
|
|
"id" : 73,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "received",
|
|
"packet" : 4,
|
|
"time" : 660
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 6,
|
|
"id" : 74,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "received",
|
|
"packet" : 4,
|
|
"time" : 660
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"senderIP",
|
|
"192.168.0.20"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"192.168.0.10"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"6"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 6,
|
|
"id" : 75,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "received",
|
|
"packet" : 4,
|
|
"time" : 660
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourcePort",
|
|
"61957"
|
|
],
|
|
[
|
|
"destinationPort",
|
|
"80"
|
|
],
|
|
[
|
|
"sequenceNumber",
|
|
"2000001"
|
|
],
|
|
[
|
|
"acknowledgementNumber",
|
|
"0"
|
|
],
|
|
[
|
|
"flags",
|
|
"PSH"
|
|
],
|
|
[
|
|
"payloadLength",
|
|
"5"
|
|
]
|
|
],
|
|
"detail" : "TCP segment received",
|
|
"direction" : "local",
|
|
"id" : 76,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "transport",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "accepted",
|
|
"packet" : 4,
|
|
"time" : 660
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourcePort",
|
|
"80"
|
|
],
|
|
[
|
|
"destinationPort",
|
|
"61957"
|
|
],
|
|
[
|
|
"sequenceNumber",
|
|
"3000001"
|
|
],
|
|
[
|
|
"acknowledgementNumber",
|
|
"2000006"
|
|
],
|
|
[
|
|
"flags",
|
|
"ACK"
|
|
],
|
|
[
|
|
"payloadLength",
|
|
"0"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "TCP ACK",
|
|
"direction" : "outbound",
|
|
"id" : 77,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "transport",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "sent",
|
|
"packet" : 5,
|
|
"time" : 660
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"senderIP",
|
|
"192.168.0.10"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"192.168.0.20"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"6"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 7,
|
|
"id" : 78,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "sent",
|
|
"packet" : 5,
|
|
"time" : 660
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:12"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 7,
|
|
"id" : 79,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "created",
|
|
"packet" : 5,
|
|
"time" : 660
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:12"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 7,
|
|
"id" : 80,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "sent",
|
|
"packet" : 5,
|
|
"time" : 660
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:12"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 7,
|
|
"id" : 81,
|
|
"interface" : "00000000-0000-0000-0000-000000000121",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "received",
|
|
"packet" : 5,
|
|
"time" : 715
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:12"
|
|
]
|
|
],
|
|
"detail" : "switch learned source MAC",
|
|
"direction" : "inbound",
|
|
"frame" : 7,
|
|
"id" : 82,
|
|
"interface" : "00000000-0000-0000-0000-000000000121",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "accepted",
|
|
"packet" : 5,
|
|
"time" : 715
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:12"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "switch learned unicast forwarding",
|
|
"direction" : "outbound",
|
|
"frame" : 7,
|
|
"id" : 83,
|
|
"interface" : "00000000-0000-0000-0000-000000000122",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "forwarded",
|
|
"packet" : 5,
|
|
"time" : 715
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:12"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 7,
|
|
"id" : 84,
|
|
"interface" : "00000000-0000-0000-0000-000000000122",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "sent",
|
|
"packet" : 5,
|
|
"time" : 715
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:12"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 7,
|
|
"id" : 85,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "received",
|
|
"packet" : 5,
|
|
"time" : 770
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:12"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 7,
|
|
"id" : 86,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "received",
|
|
"packet" : 5,
|
|
"time" : 770
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"senderIP",
|
|
"192.168.0.10"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"192.168.0.20"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"6"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 7,
|
|
"id" : 87,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "received",
|
|
"packet" : 5,
|
|
"time" : 770
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourcePort",
|
|
"80"
|
|
],
|
|
[
|
|
"destinationPort",
|
|
"61957"
|
|
],
|
|
[
|
|
"sequenceNumber",
|
|
"3000001"
|
|
],
|
|
[
|
|
"acknowledgementNumber",
|
|
"2000006"
|
|
],
|
|
[
|
|
"flags",
|
|
"ACK"
|
|
],
|
|
[
|
|
"payloadLength",
|
|
"0"
|
|
]
|
|
],
|
|
"detail" : "TCP segment received",
|
|
"direction" : "local",
|
|
"id" : 88,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "transport",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "accepted",
|
|
"packet" : 5,
|
|
"time" : 770
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourcePort",
|
|
"80"
|
|
],
|
|
[
|
|
"destinationPort",
|
|
"61957"
|
|
],
|
|
[
|
|
"sequenceNumber",
|
|
"3000001"
|
|
],
|
|
[
|
|
"acknowledgementNumber",
|
|
"0"
|
|
],
|
|
[
|
|
"flags",
|
|
""
|
|
],
|
|
[
|
|
"payloadLength",
|
|
"1460"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "TCP data segment 1\/3",
|
|
"direction" : "outbound",
|
|
"id" : 89,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "transport",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "sent",
|
|
"packet" : 6,
|
|
"time" : 770
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"senderIP",
|
|
"192.168.0.10"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"192.168.0.20"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"6"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 8,
|
|
"id" : 90,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "sent",
|
|
"packet" : 6,
|
|
"time" : 770
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:12"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 8,
|
|
"id" : 91,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "created",
|
|
"packet" : 6,
|
|
"time" : 770
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:12"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 8,
|
|
"id" : 92,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "sent",
|
|
"packet" : 6,
|
|
"time" : 770
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:12"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 8,
|
|
"id" : 93,
|
|
"interface" : "00000000-0000-0000-0000-000000000121",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "received",
|
|
"packet" : 6,
|
|
"time" : 825
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:12"
|
|
]
|
|
],
|
|
"detail" : "switch learned source MAC",
|
|
"direction" : "inbound",
|
|
"frame" : 8,
|
|
"id" : 94,
|
|
"interface" : "00000000-0000-0000-0000-000000000121",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "accepted",
|
|
"packet" : 6,
|
|
"time" : 825
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:12"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "switch learned unicast forwarding",
|
|
"direction" : "outbound",
|
|
"frame" : 8,
|
|
"id" : 95,
|
|
"interface" : "00000000-0000-0000-0000-000000000122",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "forwarded",
|
|
"packet" : 6,
|
|
"time" : 825
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:12"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 8,
|
|
"id" : 96,
|
|
"interface" : "00000000-0000-0000-0000-000000000122",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "sent",
|
|
"packet" : 6,
|
|
"time" : 825
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:12"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 8,
|
|
"id" : 97,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "received",
|
|
"packet" : 6,
|
|
"time" : 880
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:12"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 8,
|
|
"id" : 98,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "received",
|
|
"packet" : 6,
|
|
"time" : 880
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"senderIP",
|
|
"192.168.0.10"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"192.168.0.20"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"6"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 8,
|
|
"id" : 99,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "received",
|
|
"packet" : 6,
|
|
"time" : 880
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourcePort",
|
|
"80"
|
|
],
|
|
[
|
|
"destinationPort",
|
|
"61957"
|
|
],
|
|
[
|
|
"sequenceNumber",
|
|
"3000001"
|
|
],
|
|
[
|
|
"acknowledgementNumber",
|
|
"0"
|
|
],
|
|
[
|
|
"flags",
|
|
""
|
|
],
|
|
[
|
|
"payloadLength",
|
|
"1460"
|
|
]
|
|
],
|
|
"detail" : "TCP segment received",
|
|
"direction" : "local",
|
|
"id" : 100,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "transport",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "accepted",
|
|
"packet" : 6,
|
|
"time" : 880
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourcePort",
|
|
"61957"
|
|
],
|
|
[
|
|
"destinationPort",
|
|
"80"
|
|
],
|
|
[
|
|
"sequenceNumber",
|
|
"2000006"
|
|
],
|
|
[
|
|
"acknowledgementNumber",
|
|
"3001461"
|
|
],
|
|
[
|
|
"flags",
|
|
"ACK"
|
|
],
|
|
[
|
|
"payloadLength",
|
|
"0"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "TCP ACK",
|
|
"direction" : "outbound",
|
|
"id" : 101,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "transport",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "sent",
|
|
"packet" : 7,
|
|
"time" : 880
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"senderIP",
|
|
"192.168.0.20"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"192.168.0.10"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"6"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 9,
|
|
"id" : 102,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "sent",
|
|
"packet" : 7,
|
|
"time" : 880
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 9,
|
|
"id" : 103,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "created",
|
|
"packet" : 7,
|
|
"time" : 880
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 9,
|
|
"id" : 104,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "sent",
|
|
"packet" : 7,
|
|
"time" : 880
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 9,
|
|
"id" : 105,
|
|
"interface" : "00000000-0000-0000-0000-000000000122",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "received",
|
|
"packet" : 7,
|
|
"time" : 935
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"detail" : "switch learned source MAC",
|
|
"direction" : "inbound",
|
|
"frame" : 9,
|
|
"id" : 106,
|
|
"interface" : "00000000-0000-0000-0000-000000000122",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "accepted",
|
|
"packet" : 7,
|
|
"time" : 935
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "switch learned unicast forwarding",
|
|
"direction" : "outbound",
|
|
"frame" : 9,
|
|
"id" : 107,
|
|
"interface" : "00000000-0000-0000-0000-000000000121",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "forwarded",
|
|
"packet" : 7,
|
|
"time" : 935
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 9,
|
|
"id" : 108,
|
|
"interface" : "00000000-0000-0000-0000-000000000121",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "sent",
|
|
"packet" : 7,
|
|
"time" : 935
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 9,
|
|
"id" : 109,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "received",
|
|
"packet" : 7,
|
|
"time" : 990
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 9,
|
|
"id" : 110,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "received",
|
|
"packet" : 7,
|
|
"time" : 990
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"senderIP",
|
|
"192.168.0.20"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"192.168.0.10"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"6"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 9,
|
|
"id" : 111,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "received",
|
|
"packet" : 7,
|
|
"time" : 990
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourcePort",
|
|
"61957"
|
|
],
|
|
[
|
|
"destinationPort",
|
|
"80"
|
|
],
|
|
[
|
|
"sequenceNumber",
|
|
"2000006"
|
|
],
|
|
[
|
|
"acknowledgementNumber",
|
|
"3001461"
|
|
],
|
|
[
|
|
"flags",
|
|
"ACK"
|
|
],
|
|
[
|
|
"payloadLength",
|
|
"0"
|
|
]
|
|
],
|
|
"detail" : "TCP segment received",
|
|
"direction" : "local",
|
|
"id" : 112,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "transport",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "accepted",
|
|
"packet" : 7,
|
|
"time" : 990
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourcePort",
|
|
"80"
|
|
],
|
|
[
|
|
"destinationPort",
|
|
"61957"
|
|
],
|
|
[
|
|
"sequenceNumber",
|
|
"3001461"
|
|
],
|
|
[
|
|
"acknowledgementNumber",
|
|
"0"
|
|
],
|
|
[
|
|
"flags",
|
|
""
|
|
],
|
|
[
|
|
"payloadLength",
|
|
"1460"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "TCP data segment 2\/3",
|
|
"direction" : "outbound",
|
|
"id" : 113,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "transport",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "sent",
|
|
"packet" : 8,
|
|
"time" : 990
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"senderIP",
|
|
"192.168.0.10"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"192.168.0.20"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"6"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 10,
|
|
"id" : 114,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "sent",
|
|
"packet" : 8,
|
|
"time" : 990
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:12"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 10,
|
|
"id" : 115,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "created",
|
|
"packet" : 8,
|
|
"time" : 990
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:12"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 10,
|
|
"id" : 116,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "sent",
|
|
"packet" : 8,
|
|
"time" : 990
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:12"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 10,
|
|
"id" : 117,
|
|
"interface" : "00000000-0000-0000-0000-000000000121",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "received",
|
|
"packet" : 8,
|
|
"time" : 1045
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:12"
|
|
]
|
|
],
|
|
"detail" : "switch learned source MAC",
|
|
"direction" : "inbound",
|
|
"frame" : 10,
|
|
"id" : 118,
|
|
"interface" : "00000000-0000-0000-0000-000000000121",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "accepted",
|
|
"packet" : 8,
|
|
"time" : 1045
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:12"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "switch learned unicast forwarding",
|
|
"direction" : "outbound",
|
|
"frame" : 10,
|
|
"id" : 119,
|
|
"interface" : "00000000-0000-0000-0000-000000000122",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "forwarded",
|
|
"packet" : 8,
|
|
"time" : 1045
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:12"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 10,
|
|
"id" : 120,
|
|
"interface" : "00000000-0000-0000-0000-000000000122",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "sent",
|
|
"packet" : 8,
|
|
"time" : 1045
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:12"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 10,
|
|
"id" : 121,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "received",
|
|
"packet" : 8,
|
|
"time" : 1100
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:12"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 10,
|
|
"id" : 122,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "received",
|
|
"packet" : 8,
|
|
"time" : 1100
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"senderIP",
|
|
"192.168.0.10"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"192.168.0.20"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"6"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 10,
|
|
"id" : 123,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "received",
|
|
"packet" : 8,
|
|
"time" : 1100
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourcePort",
|
|
"80"
|
|
],
|
|
[
|
|
"destinationPort",
|
|
"61957"
|
|
],
|
|
[
|
|
"sequenceNumber",
|
|
"3001461"
|
|
],
|
|
[
|
|
"acknowledgementNumber",
|
|
"0"
|
|
],
|
|
[
|
|
"flags",
|
|
""
|
|
],
|
|
[
|
|
"payloadLength",
|
|
"1460"
|
|
]
|
|
],
|
|
"detail" : "TCP segment received",
|
|
"direction" : "local",
|
|
"id" : 124,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "transport",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "accepted",
|
|
"packet" : 8,
|
|
"time" : 1100
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourcePort",
|
|
"61957"
|
|
],
|
|
[
|
|
"destinationPort",
|
|
"80"
|
|
],
|
|
[
|
|
"sequenceNumber",
|
|
"2000006"
|
|
],
|
|
[
|
|
"acknowledgementNumber",
|
|
"3002921"
|
|
],
|
|
[
|
|
"flags",
|
|
"ACK"
|
|
],
|
|
[
|
|
"payloadLength",
|
|
"0"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "TCP ACK",
|
|
"direction" : "outbound",
|
|
"id" : 125,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "transport",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "sent",
|
|
"packet" : 9,
|
|
"time" : 1100
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"senderIP",
|
|
"192.168.0.20"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"192.168.0.10"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"6"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 11,
|
|
"id" : 126,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "sent",
|
|
"packet" : 9,
|
|
"time" : 1100
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 11,
|
|
"id" : 127,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "created",
|
|
"packet" : 9,
|
|
"time" : 1100
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 11,
|
|
"id" : 128,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "sent",
|
|
"packet" : 9,
|
|
"time" : 1100
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 11,
|
|
"id" : 129,
|
|
"interface" : "00000000-0000-0000-0000-000000000122",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "received",
|
|
"packet" : 9,
|
|
"time" : 1155
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"detail" : "switch learned source MAC",
|
|
"direction" : "inbound",
|
|
"frame" : 11,
|
|
"id" : 130,
|
|
"interface" : "00000000-0000-0000-0000-000000000122",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "accepted",
|
|
"packet" : 9,
|
|
"time" : 1155
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "switch learned unicast forwarding",
|
|
"direction" : "outbound",
|
|
"frame" : 11,
|
|
"id" : 131,
|
|
"interface" : "00000000-0000-0000-0000-000000000121",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "forwarded",
|
|
"packet" : 9,
|
|
"time" : 1155
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 11,
|
|
"id" : 132,
|
|
"interface" : "00000000-0000-0000-0000-000000000121",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "sent",
|
|
"packet" : 9,
|
|
"time" : 1155
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 11,
|
|
"id" : 133,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "received",
|
|
"packet" : 9,
|
|
"time" : 1210
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 11,
|
|
"id" : 134,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "received",
|
|
"packet" : 9,
|
|
"time" : 1210
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"senderIP",
|
|
"192.168.0.20"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"192.168.0.10"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"6"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 11,
|
|
"id" : 135,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "received",
|
|
"packet" : 9,
|
|
"time" : 1210
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourcePort",
|
|
"61957"
|
|
],
|
|
[
|
|
"destinationPort",
|
|
"80"
|
|
],
|
|
[
|
|
"sequenceNumber",
|
|
"2000006"
|
|
],
|
|
[
|
|
"acknowledgementNumber",
|
|
"3002921"
|
|
],
|
|
[
|
|
"flags",
|
|
"ACK"
|
|
],
|
|
[
|
|
"payloadLength",
|
|
"0"
|
|
]
|
|
],
|
|
"detail" : "TCP segment received",
|
|
"direction" : "local",
|
|
"id" : 136,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "transport",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "accepted",
|
|
"packet" : 9,
|
|
"time" : 1210
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourcePort",
|
|
"80"
|
|
],
|
|
[
|
|
"destinationPort",
|
|
"61957"
|
|
],
|
|
[
|
|
"sequenceNumber",
|
|
"3002921"
|
|
],
|
|
[
|
|
"acknowledgementNumber",
|
|
"0"
|
|
],
|
|
[
|
|
"flags",
|
|
"PSH"
|
|
],
|
|
[
|
|
"payloadLength",
|
|
"80"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "TCP data segment 3\/3",
|
|
"direction" : "outbound",
|
|
"id" : 137,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "transport",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "sent",
|
|
"packet" : 10,
|
|
"time" : 1210
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"senderIP",
|
|
"192.168.0.10"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"192.168.0.20"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"6"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 12,
|
|
"id" : 138,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "sent",
|
|
"packet" : 10,
|
|
"time" : 1210
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:12"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 12,
|
|
"id" : 139,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "created",
|
|
"packet" : 10,
|
|
"time" : 1210
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:12"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 12,
|
|
"id" : 140,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "sent",
|
|
"packet" : 10,
|
|
"time" : 1210
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:12"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 12,
|
|
"id" : 141,
|
|
"interface" : "00000000-0000-0000-0000-000000000121",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "received",
|
|
"packet" : 10,
|
|
"time" : 1265
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:12"
|
|
]
|
|
],
|
|
"detail" : "switch learned source MAC",
|
|
"direction" : "inbound",
|
|
"frame" : 12,
|
|
"id" : 142,
|
|
"interface" : "00000000-0000-0000-0000-000000000121",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "accepted",
|
|
"packet" : 10,
|
|
"time" : 1265
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:12"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "switch learned unicast forwarding",
|
|
"direction" : "outbound",
|
|
"frame" : 12,
|
|
"id" : 143,
|
|
"interface" : "00000000-0000-0000-0000-000000000122",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "forwarded",
|
|
"packet" : 10,
|
|
"time" : 1265
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:12"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 12,
|
|
"id" : 144,
|
|
"interface" : "00000000-0000-0000-0000-000000000122",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "sent",
|
|
"packet" : 10,
|
|
"time" : 1265
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:12"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 12,
|
|
"id" : 145,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "received",
|
|
"packet" : 10,
|
|
"time" : 1320
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:12"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 12,
|
|
"id" : 146,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "received",
|
|
"packet" : 10,
|
|
"time" : 1320
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"senderIP",
|
|
"192.168.0.10"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"192.168.0.20"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"6"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 12,
|
|
"id" : 147,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "received",
|
|
"packet" : 10,
|
|
"time" : 1320
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourcePort",
|
|
"80"
|
|
],
|
|
[
|
|
"destinationPort",
|
|
"61957"
|
|
],
|
|
[
|
|
"sequenceNumber",
|
|
"3002921"
|
|
],
|
|
[
|
|
"acknowledgementNumber",
|
|
"0"
|
|
],
|
|
[
|
|
"flags",
|
|
"PSH"
|
|
],
|
|
[
|
|
"payloadLength",
|
|
"80"
|
|
]
|
|
],
|
|
"detail" : "TCP segment received",
|
|
"direction" : "local",
|
|
"id" : 148,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "transport",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "accepted",
|
|
"packet" : 10,
|
|
"time" : 1320
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourcePort",
|
|
"61957"
|
|
],
|
|
[
|
|
"destinationPort",
|
|
"80"
|
|
],
|
|
[
|
|
"sequenceNumber",
|
|
"2000006"
|
|
],
|
|
[
|
|
"acknowledgementNumber",
|
|
"3003001"
|
|
],
|
|
[
|
|
"flags",
|
|
"ACK"
|
|
],
|
|
[
|
|
"payloadLength",
|
|
"0"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "TCP ACK",
|
|
"direction" : "outbound",
|
|
"id" : 149,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "transport",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "sent",
|
|
"packet" : 11,
|
|
"time" : 1320
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"senderIP",
|
|
"192.168.0.20"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"192.168.0.10"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"6"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 13,
|
|
"id" : 150,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "sent",
|
|
"packet" : 11,
|
|
"time" : 1320
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 13,
|
|
"id" : 151,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "created",
|
|
"packet" : 11,
|
|
"time" : 1320
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 13,
|
|
"id" : 152,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "sent",
|
|
"packet" : 11,
|
|
"time" : 1320
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 13,
|
|
"id" : 153,
|
|
"interface" : "00000000-0000-0000-0000-000000000122",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "received",
|
|
"packet" : 11,
|
|
"time" : 1375
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"detail" : "switch learned source MAC",
|
|
"direction" : "inbound",
|
|
"frame" : 13,
|
|
"id" : 154,
|
|
"interface" : "00000000-0000-0000-0000-000000000122",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "accepted",
|
|
"packet" : 11,
|
|
"time" : 1375
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "switch learned unicast forwarding",
|
|
"direction" : "outbound",
|
|
"frame" : 13,
|
|
"id" : 155,
|
|
"interface" : "00000000-0000-0000-0000-000000000121",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "forwarded",
|
|
"packet" : 11,
|
|
"time" : 1375
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 13,
|
|
"id" : 156,
|
|
"interface" : "00000000-0000-0000-0000-000000000121",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "sent",
|
|
"packet" : 11,
|
|
"time" : 1375
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 13,
|
|
"id" : 157,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "received",
|
|
"packet" : 11,
|
|
"time" : 1430
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 13,
|
|
"id" : 158,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "received",
|
|
"packet" : 11,
|
|
"time" : 1430
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"senderIP",
|
|
"192.168.0.20"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"192.168.0.10"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"6"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 13,
|
|
"id" : 159,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "received",
|
|
"packet" : 11,
|
|
"time" : 1430
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourcePort",
|
|
"61957"
|
|
],
|
|
[
|
|
"destinationPort",
|
|
"80"
|
|
],
|
|
[
|
|
"sequenceNumber",
|
|
"2000006"
|
|
],
|
|
[
|
|
"acknowledgementNumber",
|
|
"3003001"
|
|
],
|
|
[
|
|
"flags",
|
|
"ACK"
|
|
],
|
|
[
|
|
"payloadLength",
|
|
"0"
|
|
]
|
|
],
|
|
"detail" : "TCP segment received",
|
|
"direction" : "local",
|
|
"id" : 160,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "transport",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "accepted",
|
|
"packet" : 11,
|
|
"time" : 1430
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"state",
|
|
"FIN_WAIT_1"
|
|
]
|
|
],
|
|
"before" : [
|
|
[
|
|
"state",
|
|
"ESTABLISHED"
|
|
]
|
|
],
|
|
"detail" : "TCP ESTABLISHED -> FIN_WAIT_1",
|
|
"direction" : "local",
|
|
"id" : 161,
|
|
"layer" : "transport",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "accepted",
|
|
"time" : 1430
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourcePort",
|
|
"61957"
|
|
],
|
|
[
|
|
"destinationPort",
|
|
"80"
|
|
],
|
|
[
|
|
"sequenceNumber",
|
|
"2000006"
|
|
],
|
|
[
|
|
"acknowledgementNumber",
|
|
"0"
|
|
],
|
|
[
|
|
"flags",
|
|
"FIN"
|
|
],
|
|
[
|
|
"payloadLength",
|
|
"0"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "TCP FIN",
|
|
"direction" : "outbound",
|
|
"id" : 162,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "transport",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "sent",
|
|
"packet" : 12,
|
|
"time" : 1430
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"senderIP",
|
|
"192.168.0.20"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"192.168.0.10"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"6"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 14,
|
|
"id" : 163,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "sent",
|
|
"packet" : 12,
|
|
"time" : 1430
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 14,
|
|
"id" : 164,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "created",
|
|
"packet" : 12,
|
|
"time" : 1430
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 14,
|
|
"id" : 165,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "sent",
|
|
"packet" : 12,
|
|
"time" : 1430
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 14,
|
|
"id" : 166,
|
|
"interface" : "00000000-0000-0000-0000-000000000122",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "received",
|
|
"packet" : 12,
|
|
"time" : 1485
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"detail" : "switch learned source MAC",
|
|
"direction" : "inbound",
|
|
"frame" : 14,
|
|
"id" : 167,
|
|
"interface" : "00000000-0000-0000-0000-000000000122",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "accepted",
|
|
"packet" : 12,
|
|
"time" : 1485
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "switch learned unicast forwarding",
|
|
"direction" : "outbound",
|
|
"frame" : 14,
|
|
"id" : 168,
|
|
"interface" : "00000000-0000-0000-0000-000000000121",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "forwarded",
|
|
"packet" : 12,
|
|
"time" : 1485
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 14,
|
|
"id" : 169,
|
|
"interface" : "00000000-0000-0000-0000-000000000121",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "sent",
|
|
"packet" : 12,
|
|
"time" : 1485
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 14,
|
|
"id" : 170,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "received",
|
|
"packet" : 12,
|
|
"time" : 1540
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 14,
|
|
"id" : 171,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "received",
|
|
"packet" : 12,
|
|
"time" : 1540
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"senderIP",
|
|
"192.168.0.20"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"192.168.0.10"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"6"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 14,
|
|
"id" : 172,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "received",
|
|
"packet" : 12,
|
|
"time" : 1540
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourcePort",
|
|
"61957"
|
|
],
|
|
[
|
|
"destinationPort",
|
|
"80"
|
|
],
|
|
[
|
|
"sequenceNumber",
|
|
"2000006"
|
|
],
|
|
[
|
|
"acknowledgementNumber",
|
|
"0"
|
|
],
|
|
[
|
|
"flags",
|
|
"FIN"
|
|
],
|
|
[
|
|
"payloadLength",
|
|
"0"
|
|
]
|
|
],
|
|
"detail" : "TCP segment received",
|
|
"direction" : "local",
|
|
"id" : 173,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "transport",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "accepted",
|
|
"packet" : 12,
|
|
"time" : 1540
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourcePort",
|
|
"80"
|
|
],
|
|
[
|
|
"destinationPort",
|
|
"61957"
|
|
],
|
|
[
|
|
"sequenceNumber",
|
|
"3003001"
|
|
],
|
|
[
|
|
"acknowledgementNumber",
|
|
"2000007"
|
|
],
|
|
[
|
|
"flags",
|
|
"ACK"
|
|
],
|
|
[
|
|
"payloadLength",
|
|
"0"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "TCP ACK",
|
|
"direction" : "outbound",
|
|
"id" : 174,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "transport",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "sent",
|
|
"packet" : 13,
|
|
"time" : 1540
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"senderIP",
|
|
"192.168.0.10"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"192.168.0.20"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"6"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 15,
|
|
"id" : 175,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "sent",
|
|
"packet" : 13,
|
|
"time" : 1540
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:12"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 15,
|
|
"id" : 176,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "created",
|
|
"packet" : 13,
|
|
"time" : 1540
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:12"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 15,
|
|
"id" : 177,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "sent",
|
|
"packet" : 13,
|
|
"time" : 1540
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"state",
|
|
"CLOSE_WAIT"
|
|
]
|
|
],
|
|
"before" : [
|
|
[
|
|
"state",
|
|
"ESTABLISHED"
|
|
]
|
|
],
|
|
"detail" : "TCP ESTABLISHED -> CLOSE_WAIT",
|
|
"direction" : "local",
|
|
"id" : 178,
|
|
"layer" : "transport",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "accepted",
|
|
"time" : 1540
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:12"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 15,
|
|
"id" : 179,
|
|
"interface" : "00000000-0000-0000-0000-000000000121",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "received",
|
|
"packet" : 13,
|
|
"time" : 1595
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:12"
|
|
]
|
|
],
|
|
"detail" : "switch learned source MAC",
|
|
"direction" : "inbound",
|
|
"frame" : 15,
|
|
"id" : 180,
|
|
"interface" : "00000000-0000-0000-0000-000000000121",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "accepted",
|
|
"packet" : 13,
|
|
"time" : 1595
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:12"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "switch learned unicast forwarding",
|
|
"direction" : "outbound",
|
|
"frame" : 15,
|
|
"id" : 181,
|
|
"interface" : "00000000-0000-0000-0000-000000000122",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "forwarded",
|
|
"packet" : 13,
|
|
"time" : 1595
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:12"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 15,
|
|
"id" : 182,
|
|
"interface" : "00000000-0000-0000-0000-000000000122",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "sent",
|
|
"packet" : 13,
|
|
"time" : 1595
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:12"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 15,
|
|
"id" : 183,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "received",
|
|
"packet" : 13,
|
|
"time" : 1650
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:12"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 15,
|
|
"id" : 184,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "received",
|
|
"packet" : 13,
|
|
"time" : 1650
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"senderIP",
|
|
"192.168.0.10"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"192.168.0.20"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"6"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 15,
|
|
"id" : 185,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "received",
|
|
"packet" : 13,
|
|
"time" : 1650
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourcePort",
|
|
"80"
|
|
],
|
|
[
|
|
"destinationPort",
|
|
"61957"
|
|
],
|
|
[
|
|
"sequenceNumber",
|
|
"3003001"
|
|
],
|
|
[
|
|
"acknowledgementNumber",
|
|
"2000007"
|
|
],
|
|
[
|
|
"flags",
|
|
"ACK"
|
|
],
|
|
[
|
|
"payloadLength",
|
|
"0"
|
|
]
|
|
],
|
|
"detail" : "TCP segment received",
|
|
"direction" : "local",
|
|
"id" : 186,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "transport",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "accepted",
|
|
"packet" : 13,
|
|
"time" : 1650
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"state",
|
|
"FIN_WAIT_2"
|
|
]
|
|
],
|
|
"before" : [
|
|
[
|
|
"state",
|
|
"FIN_WAIT_1"
|
|
]
|
|
],
|
|
"detail" : "TCP FIN_WAIT_1 -> FIN_WAIT_2",
|
|
"direction" : "local",
|
|
"id" : 187,
|
|
"layer" : "transport",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "accepted",
|
|
"time" : 1650
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"state",
|
|
"LAST_ACK"
|
|
]
|
|
],
|
|
"before" : [
|
|
[
|
|
"state",
|
|
"CLOSE_WAIT"
|
|
]
|
|
],
|
|
"detail" : "TCP CLOSE_WAIT -> LAST_ACK",
|
|
"direction" : "local",
|
|
"id" : 188,
|
|
"layer" : "transport",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "accepted",
|
|
"time" : 3000
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourcePort",
|
|
"80"
|
|
],
|
|
[
|
|
"destinationPort",
|
|
"61957"
|
|
],
|
|
[
|
|
"sequenceNumber",
|
|
"3003001"
|
|
],
|
|
[
|
|
"acknowledgementNumber",
|
|
"0"
|
|
],
|
|
[
|
|
"flags",
|
|
"FIN"
|
|
],
|
|
[
|
|
"payloadLength",
|
|
"0"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "TCP FIN after CLOSE_WAIT",
|
|
"direction" : "outbound",
|
|
"id" : 189,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "transport",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "sent",
|
|
"packet" : 14,
|
|
"time" : 3000
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"senderIP",
|
|
"192.168.0.10"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"192.168.0.20"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"6"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 16,
|
|
"id" : 190,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "sent",
|
|
"packet" : 14,
|
|
"time" : 3000
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:12"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 16,
|
|
"id" : 191,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "created",
|
|
"packet" : 14,
|
|
"time" : 3000
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:12"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 16,
|
|
"id" : 192,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "sent",
|
|
"packet" : 14,
|
|
"time" : 3000
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:12"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 16,
|
|
"id" : 193,
|
|
"interface" : "00000000-0000-0000-0000-000000000121",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "received",
|
|
"packet" : 14,
|
|
"time" : 3055
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:12"
|
|
]
|
|
],
|
|
"detail" : "switch learned source MAC",
|
|
"direction" : "inbound",
|
|
"frame" : 16,
|
|
"id" : 194,
|
|
"interface" : "00000000-0000-0000-0000-000000000121",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "accepted",
|
|
"packet" : 14,
|
|
"time" : 3055
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:12"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "switch learned unicast forwarding",
|
|
"direction" : "outbound",
|
|
"frame" : 16,
|
|
"id" : 195,
|
|
"interface" : "00000000-0000-0000-0000-000000000122",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "forwarded",
|
|
"packet" : 14,
|
|
"time" : 3055
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:12"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 16,
|
|
"id" : 196,
|
|
"interface" : "00000000-0000-0000-0000-000000000122",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "sent",
|
|
"packet" : 14,
|
|
"time" : 3055
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:12"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 16,
|
|
"id" : 197,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "received",
|
|
"packet" : 14,
|
|
"time" : 3110
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:12"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 16,
|
|
"id" : 198,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "received",
|
|
"packet" : 14,
|
|
"time" : 3110
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"senderIP",
|
|
"192.168.0.10"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"192.168.0.20"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"6"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 16,
|
|
"id" : 199,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "received",
|
|
"packet" : 14,
|
|
"time" : 3110
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourcePort",
|
|
"80"
|
|
],
|
|
[
|
|
"destinationPort",
|
|
"61957"
|
|
],
|
|
[
|
|
"sequenceNumber",
|
|
"3003001"
|
|
],
|
|
[
|
|
"acknowledgementNumber",
|
|
"0"
|
|
],
|
|
[
|
|
"flags",
|
|
"FIN"
|
|
],
|
|
[
|
|
"payloadLength",
|
|
"0"
|
|
]
|
|
],
|
|
"detail" : "TCP segment received",
|
|
"direction" : "local",
|
|
"id" : 200,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "transport",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "accepted",
|
|
"packet" : 14,
|
|
"time" : 3110
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourcePort",
|
|
"61957"
|
|
],
|
|
[
|
|
"destinationPort",
|
|
"80"
|
|
],
|
|
[
|
|
"sequenceNumber",
|
|
"2000007"
|
|
],
|
|
[
|
|
"acknowledgementNumber",
|
|
"3003002"
|
|
],
|
|
[
|
|
"flags",
|
|
"ACK"
|
|
],
|
|
[
|
|
"payloadLength",
|
|
"0"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "TCP ACK",
|
|
"direction" : "outbound",
|
|
"id" : 201,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "transport",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "sent",
|
|
"packet" : 15,
|
|
"time" : 3110
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"senderIP",
|
|
"192.168.0.20"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"192.168.0.10"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"6"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 17,
|
|
"id" : 202,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "sent",
|
|
"packet" : 15,
|
|
"time" : 3110
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 17,
|
|
"id" : 203,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "created",
|
|
"packet" : 15,
|
|
"time" : 3110
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 17,
|
|
"id" : 204,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "sent",
|
|
"packet" : 15,
|
|
"time" : 3110
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"state",
|
|
"TIME_WAIT"
|
|
]
|
|
],
|
|
"before" : [
|
|
[
|
|
"state",
|
|
"FIN_WAIT_2"
|
|
]
|
|
],
|
|
"detail" : "TCP FIN_WAIT_2 -> TIME_WAIT",
|
|
"direction" : "local",
|
|
"id" : 205,
|
|
"layer" : "transport",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "accepted",
|
|
"time" : 3110
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 17,
|
|
"id" : 206,
|
|
"interface" : "00000000-0000-0000-0000-000000000122",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "received",
|
|
"packet" : 15,
|
|
"time" : 3165
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"detail" : "switch learned source MAC",
|
|
"direction" : "inbound",
|
|
"frame" : 17,
|
|
"id" : 207,
|
|
"interface" : "00000000-0000-0000-0000-000000000122",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "accepted",
|
|
"packet" : 15,
|
|
"time" : 3165
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "switch learned unicast forwarding",
|
|
"direction" : "outbound",
|
|
"frame" : 17,
|
|
"id" : 208,
|
|
"interface" : "00000000-0000-0000-0000-000000000121",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "forwarded",
|
|
"packet" : 15,
|
|
"time" : 3165
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 17,
|
|
"id" : 209,
|
|
"interface" : "00000000-0000-0000-0000-000000000121",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "sent",
|
|
"packet" : 15,
|
|
"time" : 3165
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 17,
|
|
"id" : 210,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "received",
|
|
"packet" : 15,
|
|
"time" : 3220
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:12"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 17,
|
|
"id" : 211,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "received",
|
|
"packet" : 15,
|
|
"time" : 3220
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"senderIP",
|
|
"192.168.0.20"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"192.168.0.10"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"6"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 17,
|
|
"id" : 212,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "received",
|
|
"packet" : 15,
|
|
"time" : 3220
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourcePort",
|
|
"61957"
|
|
],
|
|
[
|
|
"destinationPort",
|
|
"80"
|
|
],
|
|
[
|
|
"sequenceNumber",
|
|
"2000007"
|
|
],
|
|
[
|
|
"acknowledgementNumber",
|
|
"3003002"
|
|
],
|
|
[
|
|
"flags",
|
|
"ACK"
|
|
],
|
|
[
|
|
"payloadLength",
|
|
"0"
|
|
]
|
|
],
|
|
"detail" : "TCP segment received",
|
|
"direction" : "local",
|
|
"id" : 213,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "transport",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "accepted",
|
|
"packet" : 15,
|
|
"time" : 3220
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"state",
|
|
"CLOSED"
|
|
]
|
|
],
|
|
"before" : [
|
|
[
|
|
"state",
|
|
"LAST_ACK"
|
|
]
|
|
],
|
|
"detail" : "TCP LAST_ACK -> CLOSED",
|
|
"direction" : "local",
|
|
"id" : 214,
|
|
"layer" : "transport",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "accepted",
|
|
"time" : 3220
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"state",
|
|
"CLOSED"
|
|
]
|
|
],
|
|
"before" : [
|
|
[
|
|
"state",
|
|
"TIME_WAIT"
|
|
]
|
|
],
|
|
"detail" : "TCP TIME_WAIT -> CLOSED",
|
|
"direction" : "local",
|
|
"id" : 215,
|
|
"layer" : "transport",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "accepted",
|
|
"time" : 5610
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"state",
|
|
"SYN_SENT"
|
|
]
|
|
],
|
|
"before" : [
|
|
[
|
|
"state",
|
|
"CLOSED"
|
|
]
|
|
],
|
|
"detail" : "TCP CLOSED -> SYN_SENT",
|
|
"direction" : "local",
|
|
"id" : 216,
|
|
"layer" : "transport",
|
|
"node" : "00000000-0000-0000-0000-000000000103",
|
|
"operation" : "accepted",
|
|
"time" : 8000
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourcePort",
|
|
"51292"
|
|
],
|
|
[
|
|
"destinationPort",
|
|
"81"
|
|
],
|
|
[
|
|
"sequenceNumber",
|
|
"4000000"
|
|
],
|
|
[
|
|
"acknowledgementNumber",
|
|
"0"
|
|
],
|
|
[
|
|
"flags",
|
|
"SYN"
|
|
],
|
|
[
|
|
"payloadLength",
|
|
"0"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "TCP SYN",
|
|
"direction" : "outbound",
|
|
"id" : 217,
|
|
"interface" : "00000000-0000-0000-0000-000000000113",
|
|
"layer" : "transport",
|
|
"node" : "00000000-0000-0000-0000-000000000103",
|
|
"operation" : "sent",
|
|
"packet" : 16,
|
|
"time" : 8000
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "ARP request for 192.168.0.10",
|
|
"direction" : "outbound",
|
|
"frame" : 18,
|
|
"id" : 218,
|
|
"interface" : "00000000-0000-0000-0000-000000000113",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000103",
|
|
"operation" : "created",
|
|
"time" : 8000
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 18,
|
|
"id" : 219,
|
|
"interface" : "00000000-0000-0000-0000-000000000113",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000103",
|
|
"operation" : "sent",
|
|
"time" : 8000
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 18,
|
|
"id" : 220,
|
|
"interface" : "00000000-0000-0000-0000-000000000123",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "received",
|
|
"time" : 8055
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"detail" : "switch learned source MAC",
|
|
"direction" : "inbound",
|
|
"frame" : 18,
|
|
"id" : 221,
|
|
"interface" : "00000000-0000-0000-0000-000000000123",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "accepted",
|
|
"time" : 8055
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "switch broadcast flooding",
|
|
"direction" : "outbound",
|
|
"frame" : 18,
|
|
"id" : 222,
|
|
"interface" : "00000000-0000-0000-0000-000000000121",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "forwarded",
|
|
"time" : 8055
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 18,
|
|
"id" : 223,
|
|
"interface" : "00000000-0000-0000-0000-000000000121",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "sent",
|
|
"time" : 8055
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "switch broadcast flooding",
|
|
"direction" : "outbound",
|
|
"frame" : 18,
|
|
"id" : 224,
|
|
"interface" : "00000000-0000-0000-0000-000000000122",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "forwarded",
|
|
"time" : 8055
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 18,
|
|
"id" : 225,
|
|
"interface" : "00000000-0000-0000-0000-000000000122",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "sent",
|
|
"time" : 8055
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 18,
|
|
"id" : 226,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "received",
|
|
"time" : 8110
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 18,
|
|
"id" : 227,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "received",
|
|
"time" : 8110
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"operation",
|
|
"request"
|
|
],
|
|
[
|
|
"senderMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"senderIP",
|
|
"192.168.0.30"
|
|
],
|
|
[
|
|
"targetMAC",
|
|
"00:00:00:00:00:00"
|
|
],
|
|
[
|
|
"targetIP",
|
|
"192.168.0.10"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 18,
|
|
"id" : 228,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "accepted",
|
|
"time" : 8110
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:13"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "ARP reply for 192.168.0.10",
|
|
"direction" : "outbound",
|
|
"frame" : 19,
|
|
"id" : 229,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "created",
|
|
"time" : 8110
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:13"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 19,
|
|
"id" : 230,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "sent",
|
|
"time" : 8110
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 18,
|
|
"id" : 231,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "received",
|
|
"time" : 8110
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 18,
|
|
"id" : 232,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "received",
|
|
"time" : 8110
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"operation",
|
|
"request"
|
|
],
|
|
[
|
|
"senderMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"senderIP",
|
|
"192.168.0.30"
|
|
],
|
|
[
|
|
"targetMAC",
|
|
"00:00:00:00:00:00"
|
|
],
|
|
[
|
|
"targetIP",
|
|
"192.168.0.10"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 18,
|
|
"id" : 233,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "accepted",
|
|
"time" : 8110
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:13"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 19,
|
|
"id" : 234,
|
|
"interface" : "00000000-0000-0000-0000-000000000121",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "received",
|
|
"time" : 8165
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:13"
|
|
]
|
|
],
|
|
"detail" : "switch learned source MAC",
|
|
"direction" : "inbound",
|
|
"frame" : 19,
|
|
"id" : 235,
|
|
"interface" : "00000000-0000-0000-0000-000000000121",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "accepted",
|
|
"time" : 8165
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:13"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "switch learned unicast forwarding",
|
|
"direction" : "outbound",
|
|
"frame" : 19,
|
|
"id" : 236,
|
|
"interface" : "00000000-0000-0000-0000-000000000123",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "forwarded",
|
|
"time" : 8165
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:13"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 19,
|
|
"id" : 237,
|
|
"interface" : "00000000-0000-0000-0000-000000000123",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "sent",
|
|
"time" : 8165
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:13"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 19,
|
|
"id" : 238,
|
|
"interface" : "00000000-0000-0000-0000-000000000113",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000103",
|
|
"operation" : "received",
|
|
"time" : 8220
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:13"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 19,
|
|
"id" : 239,
|
|
"interface" : "00000000-0000-0000-0000-000000000113",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000103",
|
|
"operation" : "received",
|
|
"time" : 8220
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"operation",
|
|
"reply"
|
|
],
|
|
[
|
|
"senderMAC",
|
|
"02:00:00:00:01:11"
|
|
],
|
|
[
|
|
"senderIP",
|
|
"192.168.0.10"
|
|
],
|
|
[
|
|
"targetMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"targetIP",
|
|
"192.168.0.30"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 19,
|
|
"id" : 240,
|
|
"interface" : "00000000-0000-0000-0000-000000000113",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000103",
|
|
"operation" : "accepted",
|
|
"time" : 8220
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"senderIP",
|
|
"192.168.0.30"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"192.168.0.10"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"6"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 20,
|
|
"id" : 241,
|
|
"interface" : "00000000-0000-0000-0000-000000000113",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000103",
|
|
"operation" : "sent",
|
|
"packet" : 16,
|
|
"time" : 8220
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 20,
|
|
"id" : 242,
|
|
"interface" : "00000000-0000-0000-0000-000000000113",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000103",
|
|
"operation" : "created",
|
|
"packet" : 16,
|
|
"time" : 8220
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 20,
|
|
"id" : 243,
|
|
"interface" : "00000000-0000-0000-0000-000000000113",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000103",
|
|
"operation" : "sent",
|
|
"packet" : 16,
|
|
"time" : 8220
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 20,
|
|
"id" : 244,
|
|
"interface" : "00000000-0000-0000-0000-000000000123",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "received",
|
|
"packet" : 16,
|
|
"time" : 8275
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"detail" : "switch learned source MAC",
|
|
"direction" : "inbound",
|
|
"frame" : 20,
|
|
"id" : 245,
|
|
"interface" : "00000000-0000-0000-0000-000000000123",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "accepted",
|
|
"packet" : 16,
|
|
"time" : 8275
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "switch learned unicast forwarding",
|
|
"direction" : "outbound",
|
|
"frame" : 20,
|
|
"id" : 246,
|
|
"interface" : "00000000-0000-0000-0000-000000000121",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "forwarded",
|
|
"packet" : 16,
|
|
"time" : 8275
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 20,
|
|
"id" : 247,
|
|
"interface" : "00000000-0000-0000-0000-000000000121",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "sent",
|
|
"packet" : 16,
|
|
"time" : 8275
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 20,
|
|
"id" : 248,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "received",
|
|
"packet" : 16,
|
|
"time" : 8330
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 20,
|
|
"id" : 249,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "received",
|
|
"packet" : 16,
|
|
"time" : 8330
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"senderIP",
|
|
"192.168.0.30"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"192.168.0.10"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"6"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 20,
|
|
"id" : 250,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "received",
|
|
"packet" : 16,
|
|
"time" : 8330
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourcePort",
|
|
"51292"
|
|
],
|
|
[
|
|
"destinationPort",
|
|
"81"
|
|
],
|
|
[
|
|
"sequenceNumber",
|
|
"4000000"
|
|
],
|
|
[
|
|
"acknowledgementNumber",
|
|
"0"
|
|
],
|
|
[
|
|
"flags",
|
|
"SYN"
|
|
],
|
|
[
|
|
"payloadLength",
|
|
"0"
|
|
]
|
|
],
|
|
"detail" : "TCP segment received",
|
|
"direction" : "local",
|
|
"id" : 251,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "transport",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "accepted",
|
|
"packet" : 16,
|
|
"time" : 8330
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourcePort",
|
|
"51292"
|
|
],
|
|
[
|
|
"destinationPort",
|
|
"81"
|
|
],
|
|
[
|
|
"sequenceNumber",
|
|
"4000000"
|
|
],
|
|
[
|
|
"acknowledgementNumber",
|
|
"0"
|
|
],
|
|
[
|
|
"flags",
|
|
"SYN"
|
|
],
|
|
[
|
|
"payloadLength",
|
|
"0"
|
|
]
|
|
],
|
|
"detail" : "TCP destination port closed",
|
|
"direction" : "local",
|
|
"id" : 252,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "transport",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "dropped",
|
|
"packet" : 16,
|
|
"time" : 8330
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourcePort",
|
|
"51292"
|
|
],
|
|
[
|
|
"destinationPort",
|
|
"81"
|
|
],
|
|
[
|
|
"sequenceNumber",
|
|
"4000000"
|
|
],
|
|
[
|
|
"acknowledgementNumber",
|
|
"0"
|
|
],
|
|
[
|
|
"flags",
|
|
"SYN"
|
|
],
|
|
[
|
|
"payloadLength",
|
|
"0"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "TCP SYN retransmission attempt 2",
|
|
"direction" : "outbound",
|
|
"id" : 253,
|
|
"interface" : "00000000-0000-0000-0000-000000000113",
|
|
"layer" : "transport",
|
|
"node" : "00000000-0000-0000-0000-000000000103",
|
|
"operation" : "retransmitted",
|
|
"packet" : 17,
|
|
"time" : 15830
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"senderIP",
|
|
"192.168.0.30"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"192.168.0.10"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"6"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 21,
|
|
"id" : 254,
|
|
"interface" : "00000000-0000-0000-0000-000000000113",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000103",
|
|
"operation" : "sent",
|
|
"packet" : 17,
|
|
"time" : 15830
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 21,
|
|
"id" : 255,
|
|
"interface" : "00000000-0000-0000-0000-000000000113",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000103",
|
|
"operation" : "created",
|
|
"packet" : 17,
|
|
"time" : 15830
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 21,
|
|
"id" : 256,
|
|
"interface" : "00000000-0000-0000-0000-000000000113",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000103",
|
|
"operation" : "sent",
|
|
"packet" : 17,
|
|
"time" : 15830
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 21,
|
|
"id" : 257,
|
|
"interface" : "00000000-0000-0000-0000-000000000123",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "received",
|
|
"packet" : 17,
|
|
"time" : 15885
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"detail" : "switch learned source MAC",
|
|
"direction" : "inbound",
|
|
"frame" : 21,
|
|
"id" : 258,
|
|
"interface" : "00000000-0000-0000-0000-000000000123",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "accepted",
|
|
"packet" : 17,
|
|
"time" : 15885
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "switch unknown unicast flooding",
|
|
"direction" : "outbound",
|
|
"frame" : 21,
|
|
"id" : 259,
|
|
"interface" : "00000000-0000-0000-0000-000000000121",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "forwarded",
|
|
"packet" : 17,
|
|
"time" : 15885
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 21,
|
|
"id" : 260,
|
|
"interface" : "00000000-0000-0000-0000-000000000121",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "sent",
|
|
"packet" : 17,
|
|
"time" : 15885
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "switch unknown unicast flooding",
|
|
"direction" : "outbound",
|
|
"frame" : 21,
|
|
"id" : 261,
|
|
"interface" : "00000000-0000-0000-0000-000000000122",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "forwarded",
|
|
"packet" : 17,
|
|
"time" : 15885
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 21,
|
|
"id" : 262,
|
|
"interface" : "00000000-0000-0000-0000-000000000122",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "sent",
|
|
"packet" : 17,
|
|
"time" : 15885
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 21,
|
|
"id" : 263,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "received",
|
|
"packet" : 17,
|
|
"time" : 15940
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 21,
|
|
"id" : 264,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "received",
|
|
"packet" : 17,
|
|
"time" : 15940
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"senderIP",
|
|
"192.168.0.30"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"192.168.0.10"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"6"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 21,
|
|
"id" : 265,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "received",
|
|
"packet" : 17,
|
|
"time" : 15940
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourcePort",
|
|
"51292"
|
|
],
|
|
[
|
|
"destinationPort",
|
|
"81"
|
|
],
|
|
[
|
|
"sequenceNumber",
|
|
"4000000"
|
|
],
|
|
[
|
|
"acknowledgementNumber",
|
|
"0"
|
|
],
|
|
[
|
|
"flags",
|
|
"SYN"
|
|
],
|
|
[
|
|
"payloadLength",
|
|
"0"
|
|
]
|
|
],
|
|
"detail" : "TCP segment received",
|
|
"direction" : "local",
|
|
"id" : 266,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "transport",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "accepted",
|
|
"packet" : 17,
|
|
"time" : 15940
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourcePort",
|
|
"51292"
|
|
],
|
|
[
|
|
"destinationPort",
|
|
"81"
|
|
],
|
|
[
|
|
"sequenceNumber",
|
|
"4000000"
|
|
],
|
|
[
|
|
"acknowledgementNumber",
|
|
"0"
|
|
],
|
|
[
|
|
"flags",
|
|
"SYN"
|
|
],
|
|
[
|
|
"payloadLength",
|
|
"0"
|
|
]
|
|
],
|
|
"detail" : "TCP destination port closed",
|
|
"direction" : "local",
|
|
"id" : 267,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "transport",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "dropped",
|
|
"packet" : 17,
|
|
"time" : 15940
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 21,
|
|
"id" : 268,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "received",
|
|
"packet" : 17,
|
|
"time" : 15940
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 21,
|
|
"id" : 269,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "received",
|
|
"packet" : 17,
|
|
"time" : 15940
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"detail" : "destination MAC does not match interface",
|
|
"direction" : "inbound",
|
|
"frame" : 21,
|
|
"id" : 270,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "dropped",
|
|
"packet" : 17,
|
|
"time" : 15940
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourcePort",
|
|
"51292"
|
|
],
|
|
[
|
|
"destinationPort",
|
|
"81"
|
|
],
|
|
[
|
|
"sequenceNumber",
|
|
"4000000"
|
|
],
|
|
[
|
|
"acknowledgementNumber",
|
|
"0"
|
|
],
|
|
[
|
|
"flags",
|
|
"SYN"
|
|
],
|
|
[
|
|
"payloadLength",
|
|
"0"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "TCP SYN retransmission attempt 3",
|
|
"direction" : "outbound",
|
|
"id" : 271,
|
|
"interface" : "00000000-0000-0000-0000-000000000113",
|
|
"layer" : "transport",
|
|
"node" : "00000000-0000-0000-0000-000000000103",
|
|
"operation" : "retransmitted",
|
|
"packet" : 18,
|
|
"time" : 23330
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"senderIP",
|
|
"192.168.0.30"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"192.168.0.10"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"6"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 22,
|
|
"id" : 272,
|
|
"interface" : "00000000-0000-0000-0000-000000000113",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000103",
|
|
"operation" : "sent",
|
|
"packet" : 18,
|
|
"time" : 23330
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 22,
|
|
"id" : 273,
|
|
"interface" : "00000000-0000-0000-0000-000000000113",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000103",
|
|
"operation" : "created",
|
|
"packet" : 18,
|
|
"time" : 23330
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 22,
|
|
"id" : 274,
|
|
"interface" : "00000000-0000-0000-0000-000000000113",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000103",
|
|
"operation" : "sent",
|
|
"packet" : 18,
|
|
"time" : 23330
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 22,
|
|
"id" : 275,
|
|
"interface" : "00000000-0000-0000-0000-000000000123",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "received",
|
|
"packet" : 18,
|
|
"time" : 23385
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"detail" : "switch learned source MAC",
|
|
"direction" : "inbound",
|
|
"frame" : 22,
|
|
"id" : 276,
|
|
"interface" : "00000000-0000-0000-0000-000000000123",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "accepted",
|
|
"packet" : 18,
|
|
"time" : 23385
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "switch unknown unicast flooding",
|
|
"direction" : "outbound",
|
|
"frame" : 22,
|
|
"id" : 277,
|
|
"interface" : "00000000-0000-0000-0000-000000000121",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "forwarded",
|
|
"packet" : 18,
|
|
"time" : 23385
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 22,
|
|
"id" : 278,
|
|
"interface" : "00000000-0000-0000-0000-000000000121",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "sent",
|
|
"packet" : 18,
|
|
"time" : 23385
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "switch unknown unicast flooding",
|
|
"direction" : "outbound",
|
|
"frame" : 22,
|
|
"id" : 279,
|
|
"interface" : "00000000-0000-0000-0000-000000000122",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "forwarded",
|
|
"packet" : 18,
|
|
"time" : 23385
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 22,
|
|
"id" : 280,
|
|
"interface" : "00000000-0000-0000-0000-000000000122",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "sent",
|
|
"packet" : 18,
|
|
"time" : 23385
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 22,
|
|
"id" : 281,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "received",
|
|
"packet" : 18,
|
|
"time" : 23440
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 22,
|
|
"id" : 282,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "received",
|
|
"packet" : 18,
|
|
"time" : 23440
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"senderIP",
|
|
"192.168.0.30"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"192.168.0.10"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"6"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 22,
|
|
"id" : 283,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "received",
|
|
"packet" : 18,
|
|
"time" : 23440
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourcePort",
|
|
"51292"
|
|
],
|
|
[
|
|
"destinationPort",
|
|
"81"
|
|
],
|
|
[
|
|
"sequenceNumber",
|
|
"4000000"
|
|
],
|
|
[
|
|
"acknowledgementNumber",
|
|
"0"
|
|
],
|
|
[
|
|
"flags",
|
|
"SYN"
|
|
],
|
|
[
|
|
"payloadLength",
|
|
"0"
|
|
]
|
|
],
|
|
"detail" : "TCP segment received",
|
|
"direction" : "local",
|
|
"id" : 284,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "transport",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "accepted",
|
|
"packet" : 18,
|
|
"time" : 23440
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourcePort",
|
|
"51292"
|
|
],
|
|
[
|
|
"destinationPort",
|
|
"81"
|
|
],
|
|
[
|
|
"sequenceNumber",
|
|
"4000000"
|
|
],
|
|
[
|
|
"acknowledgementNumber",
|
|
"0"
|
|
],
|
|
[
|
|
"flags",
|
|
"SYN"
|
|
],
|
|
[
|
|
"payloadLength",
|
|
"0"
|
|
]
|
|
],
|
|
"detail" : "TCP destination port closed",
|
|
"direction" : "local",
|
|
"id" : 285,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "transport",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "dropped",
|
|
"packet" : 18,
|
|
"time" : 23440
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 22,
|
|
"id" : 286,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "received",
|
|
"packet" : 18,
|
|
"time" : 23440
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 22,
|
|
"id" : 287,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "received",
|
|
"packet" : 18,
|
|
"time" : 23440
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:01:11"
|
|
]
|
|
],
|
|
"detail" : "destination MAC does not match interface",
|
|
"direction" : "inbound",
|
|
"frame" : 22,
|
|
"id" : 288,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "dropped",
|
|
"packet" : 18,
|
|
"time" : 23440
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"state",
|
|
"CLOSED"
|
|
]
|
|
],
|
|
"before" : [
|
|
[
|
|
"state",
|
|
"SYN_SENT"
|
|
]
|
|
],
|
|
"detail" : "TCP SYN_SENT -> CLOSED",
|
|
"direction" : "local",
|
|
"id" : 289,
|
|
"layer" : "transport",
|
|
"node" : "00000000-0000-0000-0000-000000000103",
|
|
"operation" : "accepted",
|
|
"time" : 30830
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"state",
|
|
"SYN_SENT"
|
|
]
|
|
],
|
|
"before" : [
|
|
[
|
|
"state",
|
|
"CLOSED"
|
|
]
|
|
],
|
|
"detail" : "TCP CLOSED -> SYN_SENT",
|
|
"direction" : "local",
|
|
"id" : 290,
|
|
"layer" : "transport",
|
|
"node" : "00000000-0000-0000-0000-000000000103",
|
|
"operation" : "accepted",
|
|
"time" : 30830
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourcePort",
|
|
"5000"
|
|
],
|
|
[
|
|
"destinationPort",
|
|
"80"
|
|
],
|
|
[
|
|
"sequenceNumber",
|
|
"5000000"
|
|
],
|
|
[
|
|
"acknowledgementNumber",
|
|
"0"
|
|
],
|
|
[
|
|
"flags",
|
|
"SYN"
|
|
],
|
|
[
|
|
"payloadLength",
|
|
"0"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "TCP SYN",
|
|
"direction" : "outbound",
|
|
"id" : 291,
|
|
"interface" : "00000000-0000-0000-0000-000000000113",
|
|
"layer" : "transport",
|
|
"node" : "00000000-0000-0000-0000-000000000103",
|
|
"operation" : "sent",
|
|
"packet" : 19,
|
|
"time" : 30830
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "ARP request for 192.168.0.99",
|
|
"direction" : "outbound",
|
|
"frame" : 23,
|
|
"id" : 292,
|
|
"interface" : "00000000-0000-0000-0000-000000000113",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000103",
|
|
"operation" : "created",
|
|
"time" : 30830
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 23,
|
|
"id" : 293,
|
|
"interface" : "00000000-0000-0000-0000-000000000113",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000103",
|
|
"operation" : "sent",
|
|
"time" : 30830
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 23,
|
|
"id" : 294,
|
|
"interface" : "00000000-0000-0000-0000-000000000123",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "received",
|
|
"time" : 30885
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"detail" : "switch learned source MAC",
|
|
"direction" : "inbound",
|
|
"frame" : 23,
|
|
"id" : 295,
|
|
"interface" : "00000000-0000-0000-0000-000000000123",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "accepted",
|
|
"time" : 30885
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "switch broadcast flooding",
|
|
"direction" : "outbound",
|
|
"frame" : 23,
|
|
"id" : 296,
|
|
"interface" : "00000000-0000-0000-0000-000000000121",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "forwarded",
|
|
"time" : 30885
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 23,
|
|
"id" : 297,
|
|
"interface" : "00000000-0000-0000-0000-000000000121",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "sent",
|
|
"time" : 30885
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "switch broadcast flooding",
|
|
"direction" : "outbound",
|
|
"frame" : 23,
|
|
"id" : 298,
|
|
"interface" : "00000000-0000-0000-0000-000000000122",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "forwarded",
|
|
"time" : 30885
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 23,
|
|
"id" : 299,
|
|
"interface" : "00000000-0000-0000-0000-000000000122",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "sent",
|
|
"time" : 30885
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 23,
|
|
"id" : 300,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "received",
|
|
"time" : 30940
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 23,
|
|
"id" : 301,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "received",
|
|
"time" : 30940
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"operation",
|
|
"request"
|
|
],
|
|
[
|
|
"senderMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"senderIP",
|
|
"192.168.0.30"
|
|
],
|
|
[
|
|
"targetMAC",
|
|
"00:00:00:00:00:00"
|
|
],
|
|
[
|
|
"targetIP",
|
|
"192.168.0.99"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 23,
|
|
"id" : 302,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "accepted",
|
|
"time" : 30940
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 23,
|
|
"id" : 303,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "received",
|
|
"time" : 30940
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 23,
|
|
"id" : 304,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "received",
|
|
"time" : 30940
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"operation",
|
|
"request"
|
|
],
|
|
[
|
|
"senderMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"senderIP",
|
|
"192.168.0.30"
|
|
],
|
|
[
|
|
"targetMAC",
|
|
"00:00:00:00:00:00"
|
|
],
|
|
[
|
|
"targetIP",
|
|
"192.168.0.99"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 23,
|
|
"id" : 305,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "accepted",
|
|
"time" : 30940
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "ARP request for 192.168.0.99",
|
|
"direction" : "outbound",
|
|
"frame" : 24,
|
|
"id" : 306,
|
|
"interface" : "00000000-0000-0000-0000-000000000113",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000103",
|
|
"operation" : "created",
|
|
"time" : 30940
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 24,
|
|
"id" : 307,
|
|
"interface" : "00000000-0000-0000-0000-000000000113",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000103",
|
|
"operation" : "sent",
|
|
"time" : 30940
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 24,
|
|
"id" : 308,
|
|
"interface" : "00000000-0000-0000-0000-000000000123",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "received",
|
|
"time" : 30995
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"detail" : "switch learned source MAC",
|
|
"direction" : "inbound",
|
|
"frame" : 24,
|
|
"id" : 309,
|
|
"interface" : "00000000-0000-0000-0000-000000000123",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "accepted",
|
|
"time" : 30995
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "switch broadcast flooding",
|
|
"direction" : "outbound",
|
|
"frame" : 24,
|
|
"id" : 310,
|
|
"interface" : "00000000-0000-0000-0000-000000000121",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "forwarded",
|
|
"time" : 30995
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 24,
|
|
"id" : 311,
|
|
"interface" : "00000000-0000-0000-0000-000000000121",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "sent",
|
|
"time" : 30995
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "switch broadcast flooding",
|
|
"direction" : "outbound",
|
|
"frame" : 24,
|
|
"id" : 312,
|
|
"interface" : "00000000-0000-0000-0000-000000000122",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "forwarded",
|
|
"time" : 30995
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 24,
|
|
"id" : 313,
|
|
"interface" : "00000000-0000-0000-0000-000000000122",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "sent",
|
|
"time" : 30995
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 24,
|
|
"id" : 314,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "received",
|
|
"time" : 31050
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 24,
|
|
"id" : 315,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "received",
|
|
"time" : 31050
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"operation",
|
|
"request"
|
|
],
|
|
[
|
|
"senderMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"senderIP",
|
|
"192.168.0.30"
|
|
],
|
|
[
|
|
"targetMAC",
|
|
"00:00:00:00:00:00"
|
|
],
|
|
[
|
|
"targetIP",
|
|
"192.168.0.99"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 24,
|
|
"id" : 316,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "accepted",
|
|
"time" : 31050
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 24,
|
|
"id" : 317,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "received",
|
|
"time" : 31050
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 24,
|
|
"id" : 318,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "received",
|
|
"time" : 31050
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"operation",
|
|
"request"
|
|
],
|
|
[
|
|
"senderMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"senderIP",
|
|
"192.168.0.30"
|
|
],
|
|
[
|
|
"targetMAC",
|
|
"00:00:00:00:00:00"
|
|
],
|
|
[
|
|
"targetIP",
|
|
"192.168.0.99"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 24,
|
|
"id" : 319,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "accepted",
|
|
"time" : 31050
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"senderIP",
|
|
"192.168.0.30"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"192.168.0.30"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "ICMP destinationHostUnreachable",
|
|
"direction" : "local",
|
|
"id" : 320,
|
|
"interface" : "00000000-0000-0000-0000-000000000113",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000103",
|
|
"operation" : "created",
|
|
"packet" : 20,
|
|
"time" : 31050
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourcePort",
|
|
"5000"
|
|
],
|
|
[
|
|
"destinationPort",
|
|
"80"
|
|
],
|
|
[
|
|
"sequenceNumber",
|
|
"5000000"
|
|
],
|
|
[
|
|
"acknowledgementNumber",
|
|
"0"
|
|
],
|
|
[
|
|
"flags",
|
|
"SYN"
|
|
],
|
|
[
|
|
"payloadLength",
|
|
"0"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "TCP SYN retransmission attempt 2",
|
|
"direction" : "outbound",
|
|
"id" : 321,
|
|
"interface" : "00000000-0000-0000-0000-000000000113",
|
|
"layer" : "transport",
|
|
"node" : "00000000-0000-0000-0000-000000000103",
|
|
"operation" : "retransmitted",
|
|
"packet" : 21,
|
|
"time" : 38550
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "ARP request for 192.168.0.99",
|
|
"direction" : "outbound",
|
|
"frame" : 25,
|
|
"id" : 322,
|
|
"interface" : "00000000-0000-0000-0000-000000000113",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000103",
|
|
"operation" : "created",
|
|
"time" : 38550
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 25,
|
|
"id" : 323,
|
|
"interface" : "00000000-0000-0000-0000-000000000113",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000103",
|
|
"operation" : "sent",
|
|
"time" : 38550
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "ARP request for 192.168.0.99",
|
|
"direction" : "outbound",
|
|
"frame" : 26,
|
|
"id" : 324,
|
|
"interface" : "00000000-0000-0000-0000-000000000113",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000103",
|
|
"operation" : "created",
|
|
"time" : 38550
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 26,
|
|
"id" : 325,
|
|
"interface" : "00000000-0000-0000-0000-000000000113",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000103",
|
|
"operation" : "sent",
|
|
"time" : 38550
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"senderIP",
|
|
"192.168.0.30"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"192.168.0.30"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "ICMP destinationHostUnreachable",
|
|
"direction" : "local",
|
|
"id" : 326,
|
|
"interface" : "00000000-0000-0000-0000-000000000113",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000103",
|
|
"operation" : "created",
|
|
"packet" : 22,
|
|
"time" : 38550
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 25,
|
|
"id" : 327,
|
|
"interface" : "00000000-0000-0000-0000-000000000123",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "received",
|
|
"time" : 38605
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"detail" : "switch learned source MAC",
|
|
"direction" : "inbound",
|
|
"frame" : 25,
|
|
"id" : 328,
|
|
"interface" : "00000000-0000-0000-0000-000000000123",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "accepted",
|
|
"time" : 38605
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "switch broadcast flooding",
|
|
"direction" : "outbound",
|
|
"frame" : 25,
|
|
"id" : 329,
|
|
"interface" : "00000000-0000-0000-0000-000000000121",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "forwarded",
|
|
"time" : 38605
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 25,
|
|
"id" : 330,
|
|
"interface" : "00000000-0000-0000-0000-000000000121",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "sent",
|
|
"time" : 38605
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "switch broadcast flooding",
|
|
"direction" : "outbound",
|
|
"frame" : 25,
|
|
"id" : 331,
|
|
"interface" : "00000000-0000-0000-0000-000000000122",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "forwarded",
|
|
"time" : 38605
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 25,
|
|
"id" : 332,
|
|
"interface" : "00000000-0000-0000-0000-000000000122",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "sent",
|
|
"time" : 38605
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 26,
|
|
"id" : 333,
|
|
"interface" : "00000000-0000-0000-0000-000000000123",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "received",
|
|
"time" : 38605
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"detail" : "switch learned source MAC",
|
|
"direction" : "inbound",
|
|
"frame" : 26,
|
|
"id" : 334,
|
|
"interface" : "00000000-0000-0000-0000-000000000123",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "accepted",
|
|
"time" : 38605
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "switch broadcast flooding",
|
|
"direction" : "outbound",
|
|
"frame" : 26,
|
|
"id" : 335,
|
|
"interface" : "00000000-0000-0000-0000-000000000121",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "forwarded",
|
|
"time" : 38605
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 26,
|
|
"id" : 336,
|
|
"interface" : "00000000-0000-0000-0000-000000000121",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "sent",
|
|
"time" : 38605
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "switch broadcast flooding",
|
|
"direction" : "outbound",
|
|
"frame" : 26,
|
|
"id" : 337,
|
|
"interface" : "00000000-0000-0000-0000-000000000122",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "forwarded",
|
|
"time" : 38605
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 26,
|
|
"id" : 338,
|
|
"interface" : "00000000-0000-0000-0000-000000000122",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "sent",
|
|
"time" : 38605
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 25,
|
|
"id" : 339,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "received",
|
|
"time" : 38660
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 25,
|
|
"id" : 340,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "received",
|
|
"time" : 38660
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"operation",
|
|
"request"
|
|
],
|
|
[
|
|
"senderMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"senderIP",
|
|
"192.168.0.30"
|
|
],
|
|
[
|
|
"targetMAC",
|
|
"00:00:00:00:00:00"
|
|
],
|
|
[
|
|
"targetIP",
|
|
"192.168.0.99"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 25,
|
|
"id" : 341,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "accepted",
|
|
"time" : 38660
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 25,
|
|
"id" : 342,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "received",
|
|
"time" : 38660
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 25,
|
|
"id" : 343,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "received",
|
|
"time" : 38660
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"operation",
|
|
"request"
|
|
],
|
|
[
|
|
"senderMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"senderIP",
|
|
"192.168.0.30"
|
|
],
|
|
[
|
|
"targetMAC",
|
|
"00:00:00:00:00:00"
|
|
],
|
|
[
|
|
"targetIP",
|
|
"192.168.0.99"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 25,
|
|
"id" : 344,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "accepted",
|
|
"time" : 38660
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 26,
|
|
"id" : 345,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "received",
|
|
"time" : 38660
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 26,
|
|
"id" : 346,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "received",
|
|
"time" : 38660
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"operation",
|
|
"request"
|
|
],
|
|
[
|
|
"senderMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"senderIP",
|
|
"192.168.0.30"
|
|
],
|
|
[
|
|
"targetMAC",
|
|
"00:00:00:00:00:00"
|
|
],
|
|
[
|
|
"targetIP",
|
|
"192.168.0.99"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 26,
|
|
"id" : 347,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "accepted",
|
|
"time" : 38660
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 26,
|
|
"id" : 348,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "received",
|
|
"time" : 38660
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 26,
|
|
"id" : 349,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "received",
|
|
"time" : 38660
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"operation",
|
|
"request"
|
|
],
|
|
[
|
|
"senderMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"senderIP",
|
|
"192.168.0.30"
|
|
],
|
|
[
|
|
"targetMAC",
|
|
"00:00:00:00:00:00"
|
|
],
|
|
[
|
|
"targetIP",
|
|
"192.168.0.99"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 26,
|
|
"id" : 350,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "accepted",
|
|
"time" : 38660
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourcePort",
|
|
"5000"
|
|
],
|
|
[
|
|
"destinationPort",
|
|
"80"
|
|
],
|
|
[
|
|
"sequenceNumber",
|
|
"5000000"
|
|
],
|
|
[
|
|
"acknowledgementNumber",
|
|
"0"
|
|
],
|
|
[
|
|
"flags",
|
|
"SYN"
|
|
],
|
|
[
|
|
"payloadLength",
|
|
"0"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "TCP SYN retransmission attempt 3",
|
|
"direction" : "outbound",
|
|
"id" : 351,
|
|
"interface" : "00000000-0000-0000-0000-000000000113",
|
|
"layer" : "transport",
|
|
"node" : "00000000-0000-0000-0000-000000000103",
|
|
"operation" : "retransmitted",
|
|
"packet" : 23,
|
|
"time" : 46050
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "ARP request for 192.168.0.99",
|
|
"direction" : "outbound",
|
|
"frame" : 27,
|
|
"id" : 352,
|
|
"interface" : "00000000-0000-0000-0000-000000000113",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000103",
|
|
"operation" : "created",
|
|
"time" : 46050
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 27,
|
|
"id" : 353,
|
|
"interface" : "00000000-0000-0000-0000-000000000113",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000103",
|
|
"operation" : "sent",
|
|
"time" : 46050
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "ARP request for 192.168.0.99",
|
|
"direction" : "outbound",
|
|
"frame" : 28,
|
|
"id" : 354,
|
|
"interface" : "00000000-0000-0000-0000-000000000113",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000103",
|
|
"operation" : "created",
|
|
"time" : 46050
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 28,
|
|
"id" : 355,
|
|
"interface" : "00000000-0000-0000-0000-000000000113",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000103",
|
|
"operation" : "sent",
|
|
"time" : 46050
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"senderIP",
|
|
"192.168.0.30"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"192.168.0.30"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "ICMP destinationHostUnreachable",
|
|
"direction" : "local",
|
|
"id" : 356,
|
|
"interface" : "00000000-0000-0000-0000-000000000113",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000103",
|
|
"operation" : "created",
|
|
"packet" : 24,
|
|
"time" : 46050
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 27,
|
|
"id" : 357,
|
|
"interface" : "00000000-0000-0000-0000-000000000123",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "received",
|
|
"time" : 46105
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"detail" : "switch learned source MAC",
|
|
"direction" : "inbound",
|
|
"frame" : 27,
|
|
"id" : 358,
|
|
"interface" : "00000000-0000-0000-0000-000000000123",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "accepted",
|
|
"time" : 46105
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "switch broadcast flooding",
|
|
"direction" : "outbound",
|
|
"frame" : 27,
|
|
"id" : 359,
|
|
"interface" : "00000000-0000-0000-0000-000000000121",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "forwarded",
|
|
"time" : 46105
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 27,
|
|
"id" : 360,
|
|
"interface" : "00000000-0000-0000-0000-000000000121",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "sent",
|
|
"time" : 46105
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "switch broadcast flooding",
|
|
"direction" : "outbound",
|
|
"frame" : 27,
|
|
"id" : 361,
|
|
"interface" : "00000000-0000-0000-0000-000000000122",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "forwarded",
|
|
"time" : 46105
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 27,
|
|
"id" : 362,
|
|
"interface" : "00000000-0000-0000-0000-000000000122",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "sent",
|
|
"time" : 46105
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 28,
|
|
"id" : 363,
|
|
"interface" : "00000000-0000-0000-0000-000000000123",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "received",
|
|
"time" : 46105
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"detail" : "switch learned source MAC",
|
|
"direction" : "inbound",
|
|
"frame" : 28,
|
|
"id" : 364,
|
|
"interface" : "00000000-0000-0000-0000-000000000123",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "accepted",
|
|
"time" : 46105
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "switch broadcast flooding",
|
|
"direction" : "outbound",
|
|
"frame" : 28,
|
|
"id" : 365,
|
|
"interface" : "00000000-0000-0000-0000-000000000121",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "forwarded",
|
|
"time" : 46105
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 28,
|
|
"id" : 366,
|
|
"interface" : "00000000-0000-0000-0000-000000000121",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "sent",
|
|
"time" : 46105
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "switch broadcast flooding",
|
|
"direction" : "outbound",
|
|
"frame" : 28,
|
|
"id" : 367,
|
|
"interface" : "00000000-0000-0000-0000-000000000122",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "forwarded",
|
|
"time" : 46105
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 28,
|
|
"id" : 368,
|
|
"interface" : "00000000-0000-0000-0000-000000000122",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000104",
|
|
"operation" : "sent",
|
|
"time" : 46105
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 27,
|
|
"id" : 369,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "received",
|
|
"time" : 46160
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 27,
|
|
"id" : 370,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "received",
|
|
"time" : 46160
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"operation",
|
|
"request"
|
|
],
|
|
[
|
|
"senderMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"senderIP",
|
|
"192.168.0.30"
|
|
],
|
|
[
|
|
"targetMAC",
|
|
"00:00:00:00:00:00"
|
|
],
|
|
[
|
|
"targetIP",
|
|
"192.168.0.99"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 27,
|
|
"id" : 371,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "accepted",
|
|
"time" : 46160
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 27,
|
|
"id" : 372,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "received",
|
|
"time" : 46160
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 27,
|
|
"id" : 373,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "received",
|
|
"time" : 46160
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"operation",
|
|
"request"
|
|
],
|
|
[
|
|
"senderMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"senderIP",
|
|
"192.168.0.30"
|
|
],
|
|
[
|
|
"targetMAC",
|
|
"00:00:00:00:00:00"
|
|
],
|
|
[
|
|
"targetIP",
|
|
"192.168.0.99"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 27,
|
|
"id" : 374,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "accepted",
|
|
"time" : 46160
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 28,
|
|
"id" : 375,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "received",
|
|
"time" : 46160
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 28,
|
|
"id" : 376,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "received",
|
|
"time" : 46160
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"operation",
|
|
"request"
|
|
],
|
|
[
|
|
"senderMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"senderIP",
|
|
"192.168.0.30"
|
|
],
|
|
[
|
|
"targetMAC",
|
|
"00:00:00:00:00:00"
|
|
],
|
|
[
|
|
"targetIP",
|
|
"192.168.0.99"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 28,
|
|
"id" : 377,
|
|
"interface" : "00000000-0000-0000-0000-000000000111",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "accepted",
|
|
"time" : 46160
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 28,
|
|
"id" : 378,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "received",
|
|
"time" : 46160
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 28,
|
|
"id" : 379,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "received",
|
|
"time" : 46160
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"operation",
|
|
"request"
|
|
],
|
|
[
|
|
"senderMAC",
|
|
"02:00:00:00:01:13"
|
|
],
|
|
[
|
|
"senderIP",
|
|
"192.168.0.30"
|
|
],
|
|
[
|
|
"targetMAC",
|
|
"00:00:00:00:00:00"
|
|
],
|
|
[
|
|
"targetIP",
|
|
"192.168.0.99"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 28,
|
|
"id" : 380,
|
|
"interface" : "00000000-0000-0000-0000-000000000112",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000102",
|
|
"operation" : "accepted",
|
|
"time" : 46160
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"state",
|
|
"CLOSED"
|
|
]
|
|
],
|
|
"before" : [
|
|
[
|
|
"state",
|
|
"SYN_SENT"
|
|
]
|
|
],
|
|
"detail" : "TCP SYN_SENT -> CLOSED",
|
|
"direction" : "local",
|
|
"id" : 381,
|
|
"layer" : "transport",
|
|
"node" : "00000000-0000-0000-0000-000000000103",
|
|
"operation" : "accepted",
|
|
"time" : 53550
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"state",
|
|
"CLOSED"
|
|
]
|
|
],
|
|
"before" : [
|
|
[
|
|
"state",
|
|
"LISTEN"
|
|
]
|
|
],
|
|
"detail" : "TCP LISTEN -> CLOSED",
|
|
"direction" : "local",
|
|
"id" : 382,
|
|
"layer" : "transport",
|
|
"node" : "00000000-0000-0000-0000-000000000101",
|
|
"operation" : "accepted",
|
|
"time" : 53550
|
|
}
|
|
]
|
|
}
|