Routers and home routers start a web server on port 80 with Java's index, log and routes pages in the project's language (routerPages.ts); the firewall keeps a log per node that outlives a new start; RIP routes carry the telling router's public address. TCP counts sequence numbers and segments in Java's characters, not bytes. RouterWebRun records six stories, with firewalls now built by ScenarioNetwork. Not taken from Java: its router server sometimes never listening (a race in setAktiv), and </titel>. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
3214 lines
70 KiB
JSON
3214 lines
70 KiB
JSON
{
|
|
"frames": {
|
|
"00000000-0000-0000-0000-000000000301": [
|
|
{
|
|
"time": 505,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "10.0.0.2",
|
|
"targetIp": "10.0.0.1"
|
|
},
|
|
{
|
|
"time": 742,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"arp": 2,
|
|
"senderIp": "10.0.0.1",
|
|
"targetIp": "10.0.0.2"
|
|
},
|
|
{
|
|
"time": 746,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"icmp": 8,
|
|
"icmpCode": 0,
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "20.0.0.2",
|
|
"sequence": 1
|
|
},
|
|
{
|
|
"time": 3516,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 55413,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "S",
|
|
"sequence": 2000000,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 3743,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 55413,
|
|
"payload": null,
|
|
"tcpFlags": "SA",
|
|
"sequence": 1000000,
|
|
"acknowledgement": 2000001
|
|
},
|
|
{
|
|
"time": 3744,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 55413,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000001,
|
|
"acknowledgement": 1000001
|
|
},
|
|
{
|
|
"time": 3811,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 55413,
|
|
"destinationPort": 80,
|
|
"payload": "GET / HTTP/1.1\nHost: 10.0.0.1\n",
|
|
"tcpFlags": "P",
|
|
"sequence": 2000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 4038,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 55413,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000001,
|
|
"acknowledgement": 2000031
|
|
},
|
|
{
|
|
"time": 4094,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 55413,
|
|
"payload": "HTTP/1.1 200 OK\nContent-type: text/html\n\n<html>\n <head>\n <title>Administration des Vermittlungsrechners</title>\n </head>\n <body>\n\n <h1>Firewall-Administration</h1>\n <p> <a href=\"konfig\">Konfiguration</a> </p>\n <p> <a href=\"log\">Log-Einträge anzeigen</a> </p>\n\n <h1> Weiterleitung/Routing </h1>\n <p> <a href=\"routes\"> Anzeige des aktuellen Status der Weiterleitungs-/Routing-Tabelle </a></p>\n </body>\n</html>\n",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 4094,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 55413,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000031,
|
|
"acknowledgement": 1000436
|
|
},
|
|
{
|
|
"time": 4150,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 55413,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 2000031,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 4372,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 55413,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000436,
|
|
"acknowledgement": 2000032
|
|
},
|
|
{
|
|
"time": 4428,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 55413,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 1000436,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 4428,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 55413,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000032,
|
|
"acknowledgement": 1000437
|
|
},
|
|
{
|
|
"time": 7001,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 64301,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "S",
|
|
"sequence": 4000000,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 7224,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 64301,
|
|
"payload": null,
|
|
"tcpFlags": "SA",
|
|
"sequence": 3000000,
|
|
"acknowledgement": 4000001
|
|
},
|
|
{
|
|
"time": 7225,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 64301,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 4000001,
|
|
"acknowledgement": 3000001
|
|
},
|
|
{
|
|
"time": 7302,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 64301,
|
|
"destinationPort": 80,
|
|
"payload": "GET /log HTTP/1.1\nHost: 10.0.0.1\n",
|
|
"tcpFlags": "P",
|
|
"sequence": 4000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 7524,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 64301,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000001,
|
|
"acknowledgement": 4000034
|
|
},
|
|
{
|
|
"time": 7580,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 64301,
|
|
"payload": "HTTP/1.1 200 OK\nContent-type: text/html\n\n<html>\n\u0009<head>\n\u0009\u0009<title>Log-Einträge der Firewall</titel>\n\u0009</head>\n\u0009<body>\n\u0009\u0009<h2>Log-Einträge der Firewall</h2>\n\n<br /> \nICMP-Paket verworfen: 10.0.0.2 -> 20.0.0.2 (code: 0, type: 8)<br /> \nFirewall-Regel hat gegriffen: #1 (10.0.0.0/255.255.255.0 -> */*; TCP:80 => ACCEPT) -> akzeptieren<br /> \nFirewall-Regel hat gegriffen: #1 (10.0.0.0/255.255.255.0 -> */*; TCP:80 => ACCEPT) -> akzeptieren\n\n\u0009</body>\n</html>",
|
|
"tcpFlags": "P",
|
|
"sequence": 3000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 7580,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 64301,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 4000034,
|
|
"acknowledgement": 3000461
|
|
},
|
|
{
|
|
"time": 7636,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 64301,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 4000034,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 7858,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 64301,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000461,
|
|
"acknowledgement": 4000035
|
|
},
|
|
{
|
|
"time": 7914,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 64301,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 3000461,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 7914,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 64301,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 4000035,
|
|
"acknowledgement": 3000462
|
|
}
|
|
],
|
|
"00000000-0000-0000-0000-000000000302": [
|
|
{
|
|
"time": 628,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "10.0.0.2",
|
|
"targetIp": "10.0.0.1"
|
|
},
|
|
{
|
|
"time": 630,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"arp": 2,
|
|
"senderIp": "10.0.0.1",
|
|
"targetIp": "10.0.0.2"
|
|
},
|
|
{
|
|
"time": 861,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"icmp": 8,
|
|
"icmpCode": 0,
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "20.0.0.2",
|
|
"sequence": 1
|
|
},
|
|
{
|
|
"time": 3629,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 55413,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "S",
|
|
"sequence": 2000000,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 3632,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 55413,
|
|
"payload": null,
|
|
"tcpFlags": "SA",
|
|
"sequence": 1000000,
|
|
"acknowledgement": 2000001
|
|
},
|
|
{
|
|
"time": 3855,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 55413,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000001,
|
|
"acknowledgement": 1000001
|
|
},
|
|
{
|
|
"time": 3922,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 55413,
|
|
"destinationPort": 80,
|
|
"payload": "GET / HTTP/1.1\nHost: 10.0.0.1\n",
|
|
"tcpFlags": "P",
|
|
"sequence": 2000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 3923,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 55413,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000001,
|
|
"acknowledgement": 2000031
|
|
},
|
|
{
|
|
"time": 3979,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 55413,
|
|
"payload": "HTTP/1.1 200 OK\nContent-type: text/html\n\n<html>\n <head>\n <title>Administration des Vermittlungsrechners</title>\n </head>\n <body>\n\n <h1>Firewall-Administration</h1>\n <p> <a href=\"konfig\">Konfiguration</a> </p>\n <p> <a href=\"log\">Log-Einträge anzeigen</a> </p>\n\n <h1> Weiterleitung/Routing </h1>\n <p> <a href=\"routes\"> Anzeige des aktuellen Status der Weiterleitungs-/Routing-Tabelle </a></p>\n </body>\n</html>\n",
|
|
"tcpFlags": "P",
|
|
"sequence": 1000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 4205,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 55413,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000031,
|
|
"acknowledgement": 1000436
|
|
},
|
|
{
|
|
"time": 4261,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 55413,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 2000031,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 4261,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 55413,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 1000436,
|
|
"acknowledgement": 2000032
|
|
},
|
|
{
|
|
"time": 4317,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 55413,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 1000436,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 4540,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 55413,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 2000032,
|
|
"acknowledgement": 1000437
|
|
},
|
|
{
|
|
"time": 7113,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 64301,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "S",
|
|
"sequence": 4000000,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 7113,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 64301,
|
|
"payload": null,
|
|
"tcpFlags": "SA",
|
|
"sequence": 3000000,
|
|
"acknowledgement": 4000001
|
|
},
|
|
{
|
|
"time": 7336,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 64301,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 4000001,
|
|
"acknowledgement": 3000001
|
|
},
|
|
{
|
|
"time": 7413,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 64301,
|
|
"destinationPort": 80,
|
|
"payload": "GET /log HTTP/1.1\nHost: 10.0.0.1\n",
|
|
"tcpFlags": "P",
|
|
"sequence": 4000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 7413,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 64301,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000001,
|
|
"acknowledgement": 4000034
|
|
},
|
|
{
|
|
"time": 7469,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 64301,
|
|
"payload": "HTTP/1.1 200 OK\nContent-type: text/html\n\n<html>\n\u0009<head>\n\u0009\u0009<title>Log-Einträge der Firewall</titel>\n\u0009</head>\n\u0009<body>\n\u0009\u0009<h2>Log-Einträge der Firewall</h2>\n\n<br /> \nICMP-Paket verworfen: 10.0.0.2 -> 20.0.0.2 (code: 0, type: 8)<br /> \nFirewall-Regel hat gegriffen: #1 (10.0.0.0/255.255.255.0 -> */*; TCP:80 => ACCEPT) -> akzeptieren<br /> \nFirewall-Regel hat gegriffen: #1 (10.0.0.0/255.255.255.0 -> */*; TCP:80 => ACCEPT) -> akzeptieren\n\n\u0009</body>\n</html>",
|
|
"tcpFlags": "P",
|
|
"sequence": 3000001,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 7691,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 64301,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 4000034,
|
|
"acknowledgement": 3000461
|
|
},
|
|
{
|
|
"time": 7747,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 64301,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 4000034,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 7747,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 64301,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 3000461,
|
|
"acknowledgement": 4000035
|
|
},
|
|
{
|
|
"time": 7803,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"protocol": 6,
|
|
"sourcePort": 80,
|
|
"destinationPort": 64301,
|
|
"payload": null,
|
|
"tcpFlags": "F",
|
|
"sequence": 3000461,
|
|
"acknowledgement": 0
|
|
},
|
|
{
|
|
"time": 8025,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "10.0.0.1",
|
|
"protocol": 6,
|
|
"sourcePort": 64301,
|
|
"destinationPort": 80,
|
|
"payload": null,
|
|
"tcpFlags": "A",
|
|
"sequence": 4000035,
|
|
"acknowledgement": 3000462
|
|
}
|
|
],
|
|
"00000000-0000-0000-0000-000000000302#1": [],
|
|
"00000000-0000-0000-0000-000000000303": []
|
|
},
|
|
"rows": {
|
|
"00000000-0000-0000-0000-000000000301": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:03:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:03:21 [op=REPLY, sender=02:00:00:00:03:21|10.0.0.1, target=02:00:00:00:03:11|10.0.0.2]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"10.0.0.2",
|
|
"20.0.0.2",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"10.0.0.2:55413",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 2.000.000"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:55413",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 1.000.000, ACK: 2.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"6",
|
|
"10.0.0.2:55413",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001, ACK: 1.000.001"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"10.0.0.2:55413",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001"
|
|
],
|
|
[
|
|
"7",
|
|
"10.0.0.2:55413",
|
|
"10.0.0.1:80",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"GET / HTTP/1.1\nHost: 10.0.0.1\n"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:55413",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001, ACK: 2.000.031"
|
|
],
|
|
[
|
|
"9",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:55413",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001"
|
|
],
|
|
[
|
|
"9",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:55413",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"HTTP/1.1 200 OK\nContent-type: text/html\n\n<html>\n <head>\n <title>Administration des Vermittlungsrechners</title>\n </head>\n <body>\n\n <h1>Firewall-Administration</h1>\n <p> <a href=\"konfig\">Konfiguration</a> </p>\n <p> <a href=\"log\">Log-Einträge anzeigen</a> </p>\n\n <h1> Weiterleitung/Routing </h1>\n <p> <a href=\"routes\"> Anzeige des aktuellen Status der Weiterleitungs-/Routing-Tabelle </a></p>\n </body>\n</html>\n"
|
|
],
|
|
[
|
|
"10",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"10",
|
|
"10.0.0.2:55413",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.031, ACK: 1.000.436"
|
|
],
|
|
[
|
|
"11",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"11",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"11",
|
|
"10.0.0.2:55413",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 2.000.031"
|
|
],
|
|
[
|
|
"12",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"12",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"12",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:55413",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.436, ACK: 2.000.032"
|
|
],
|
|
[
|
|
"13",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"13",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"13",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:55413",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 1.000.436"
|
|
],
|
|
[
|
|
"14",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"14",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"14",
|
|
"10.0.0.2:55413",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.032, ACK: 1.000.437"
|
|
],
|
|
[
|
|
"15",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"15",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"15",
|
|
"10.0.0.2:64301",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 4.000.000"
|
|
],
|
|
[
|
|
"16",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"16",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"16",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:64301",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 3.000.000, ACK: 4.000.001"
|
|
],
|
|
[
|
|
"17",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"17",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"17",
|
|
"10.0.0.2:64301",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.001, ACK: 3.000.001"
|
|
],
|
|
[
|
|
"18",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"18",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"18",
|
|
"10.0.0.2:64301",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.001"
|
|
],
|
|
[
|
|
"18",
|
|
"10.0.0.2:64301",
|
|
"10.0.0.1:80",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"GET /log HTTP/1.1\nHost: 10.0.0.1\n"
|
|
],
|
|
[
|
|
"19",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"19",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"19",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:64301",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001, ACK: 4.000.034"
|
|
],
|
|
[
|
|
"20",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"20",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"20",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:64301",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001"
|
|
],
|
|
[
|
|
"20",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:64301",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"HTTP/1.1 200 OK\nContent-type: text/html\n\n<html>\n\u0009<head>\n\u0009\u0009<title>Log-Einträge der Firewall</titel>\n\u0009</head>\n\u0009<body>\n\u0009\u0009<h2>Log-Einträge der Firewall</h2>\n\n<br /> \nICMP-Paket verworfen: 10.0.0.2 -> 20.0.0.2 (code: 0, type: 8)<br /> \nFirewall-Regel hat gegriffen: #1 (10.0.0.0/255.255.255.0 -> */*; TCP:80 => ACCEPT) -> akzeptieren<br /> \nFirewall-Regel hat gegriffen: #1 (10.0.0.0/255.255.255.0 -> */*; TCP:80 => ACCEPT) -> akzeptieren\n\n\u0009</body>\n</html>"
|
|
],
|
|
[
|
|
"21",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"21",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"21",
|
|
"10.0.0.2:64301",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.034, ACK: 3.000.461"
|
|
],
|
|
[
|
|
"22",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"22",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"22",
|
|
"10.0.0.2:64301",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 4.000.034"
|
|
],
|
|
[
|
|
"23",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"23",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"23",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:64301",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.461, ACK: 4.000.035"
|
|
],
|
|
[
|
|
"24",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"24",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"24",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:64301",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 3.000.461"
|
|
],
|
|
[
|
|
"25",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"25",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"25",
|
|
"10.0.0.2:64301",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.035, ACK: 3.000.462"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000302": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:03:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:03:21 [op=REPLY, sender=02:00:00:00:03:21|10.0.0.1, target=02:00:00:00:03:11|10.0.0.2]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"10.0.0.2",
|
|
"20.0.0.2",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"10.0.0.2:55413",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 2.000.000"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:55413",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 1.000.000, ACK: 2.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"6",
|
|
"10.0.0.2:55413",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001, ACK: 1.000.001"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"10.0.0.2:55413",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001"
|
|
],
|
|
[
|
|
"7",
|
|
"10.0.0.2:55413",
|
|
"10.0.0.1:80",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"GET / HTTP/1.1\nHost: 10.0.0.1\n"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:55413",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001, ACK: 2.000.031"
|
|
],
|
|
[
|
|
"9",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:55413",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001"
|
|
],
|
|
[
|
|
"9",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:55413",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"HTTP/1.1 200 OK\nContent-type: text/html\n\n<html>\n <head>\n <title>Administration des Vermittlungsrechners</title>\n </head>\n <body>\n\n <h1>Firewall-Administration</h1>\n <p> <a href=\"konfig\">Konfiguration</a> </p>\n <p> <a href=\"log\">Log-Einträge anzeigen</a> </p>\n\n <h1> Weiterleitung/Routing </h1>\n <p> <a href=\"routes\"> Anzeige des aktuellen Status der Weiterleitungs-/Routing-Tabelle </a></p>\n </body>\n</html>\n"
|
|
],
|
|
[
|
|
"10",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"10",
|
|
"10.0.0.2:55413",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.031, ACK: 1.000.436"
|
|
],
|
|
[
|
|
"11",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"11",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"11",
|
|
"10.0.0.2:55413",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 2.000.031"
|
|
],
|
|
[
|
|
"12",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"12",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"12",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:55413",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.436, ACK: 2.000.032"
|
|
],
|
|
[
|
|
"13",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"13",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"13",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:55413",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 1.000.436"
|
|
],
|
|
[
|
|
"14",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"14",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"14",
|
|
"10.0.0.2:55413",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.032, ACK: 1.000.437"
|
|
],
|
|
[
|
|
"15",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"15",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"15",
|
|
"10.0.0.2:64301",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 4.000.000"
|
|
],
|
|
[
|
|
"16",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"16",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"16",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:64301",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 3.000.000, ACK: 4.000.001"
|
|
],
|
|
[
|
|
"17",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"17",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"17",
|
|
"10.0.0.2:64301",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.001, ACK: 3.000.001"
|
|
],
|
|
[
|
|
"18",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"18",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"18",
|
|
"10.0.0.2:64301",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.001"
|
|
],
|
|
[
|
|
"18",
|
|
"10.0.0.2:64301",
|
|
"10.0.0.1:80",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"GET /log HTTP/1.1\nHost: 10.0.0.1\n"
|
|
],
|
|
[
|
|
"19",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"19",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"19",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:64301",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001, ACK: 4.000.034"
|
|
],
|
|
[
|
|
"20",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"20",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"20",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:64301",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001"
|
|
],
|
|
[
|
|
"20",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:64301",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"HTTP/1.1 200 OK\nContent-type: text/html\n\n<html>\n\u0009<head>\n\u0009\u0009<title>Log-Einträge der Firewall</titel>\n\u0009</head>\n\u0009<body>\n\u0009\u0009<h2>Log-Einträge der Firewall</h2>\n\n<br /> \nICMP-Paket verworfen: 10.0.0.2 -> 20.0.0.2 (code: 0, type: 8)<br /> \nFirewall-Regel hat gegriffen: #1 (10.0.0.0/255.255.255.0 -> */*; TCP:80 => ACCEPT) -> akzeptieren<br /> \nFirewall-Regel hat gegriffen: #1 (10.0.0.0/255.255.255.0 -> */*; TCP:80 => ACCEPT) -> akzeptieren\n\n\u0009</body>\n</html>"
|
|
],
|
|
[
|
|
"21",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"21",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"21",
|
|
"10.0.0.2:64301",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.034, ACK: 3.000.461"
|
|
],
|
|
[
|
|
"22",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"22",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"22",
|
|
"10.0.0.2:64301",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 4.000.034"
|
|
],
|
|
[
|
|
"23",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"23",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"23",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:64301",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.461, ACK: 4.000.035"
|
|
],
|
|
[
|
|
"24",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"24",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"24",
|
|
"10.0.0.1:80",
|
|
"10.0.0.2:64301",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 3.000.461"
|
|
],
|
|
[
|
|
"25",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"25",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"25",
|
|
"10.0.0.2:64301",
|
|
"10.0.0.1:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.035, ACK: 3.000.462"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000302#1": [],
|
|
"00000000-0000-0000-0000-000000000303": []
|
|
},
|
|
"layeredRows": {
|
|
"00000000-0000-0000-0000-000000000301": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:03:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:03:21 [op=REPLY, sender=02:00:00:00:03:21|10.0.0.1, target=02:00:00:00:03:11|10.0.0.2]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"10.0.0.2",
|
|
"20.0.0.2",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"55413",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 2.000.000"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"80",
|
|
"55413",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 1.000.000, ACK: 2.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"6",
|
|
"55413",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001, ACK: 1.000.001"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"55413",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001"
|
|
],
|
|
[
|
|
"7",
|
|
null,
|
|
null,
|
|
"HTTP",
|
|
"Anwendung",
|
|
"GET / HTTP/1.1\nHost: 10.0.0.1\n"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"80",
|
|
"55413",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001, ACK: 2.000.031"
|
|
],
|
|
[
|
|
"9",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"80",
|
|
"55413",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001"
|
|
],
|
|
[
|
|
"9",
|
|
null,
|
|
null,
|
|
"HTTP",
|
|
"Anwendung",
|
|
"HTTP/1.1 200 OK\nContent-type: text/html\n\n<html>\n <head>\n <title>Administration des Vermittlungsrechners</title>\n </head>\n <body>\n\n <h1>Firewall-Administration</h1>\n <p> <a href=\"konfig\">Konfiguration</a> </p>\n <p> <a href=\"log\">Log-Einträge anzeigen</a> </p>\n\n <h1> Weiterleitung/Routing </h1>\n <p> <a href=\"routes\"> Anzeige des aktuellen Status der Weiterleitungs-/Routing-Tabelle </a></p>\n </body>\n</html>\n"
|
|
],
|
|
[
|
|
"10",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"10",
|
|
"55413",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.031, ACK: 1.000.436"
|
|
],
|
|
[
|
|
"11",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"11",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"11",
|
|
"55413",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 2.000.031"
|
|
],
|
|
[
|
|
"12",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"12",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"12",
|
|
"80",
|
|
"55413",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.436, ACK: 2.000.032"
|
|
],
|
|
[
|
|
"13",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"13",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"13",
|
|
"80",
|
|
"55413",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 1.000.436"
|
|
],
|
|
[
|
|
"14",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"14",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"14",
|
|
"55413",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.032, ACK: 1.000.437"
|
|
],
|
|
[
|
|
"15",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"15",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"15",
|
|
"64301",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 4.000.000"
|
|
],
|
|
[
|
|
"16",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"16",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"16",
|
|
"80",
|
|
"64301",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 3.000.000, ACK: 4.000.001"
|
|
],
|
|
[
|
|
"17",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"17",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"17",
|
|
"64301",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.001, ACK: 3.000.001"
|
|
],
|
|
[
|
|
"18",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"18",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"18",
|
|
"64301",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.001"
|
|
],
|
|
[
|
|
"18",
|
|
null,
|
|
null,
|
|
"HTTP",
|
|
"Anwendung",
|
|
"GET /log HTTP/1.1\nHost: 10.0.0.1\n"
|
|
],
|
|
[
|
|
"19",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"19",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"19",
|
|
"80",
|
|
"64301",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001, ACK: 4.000.034"
|
|
],
|
|
[
|
|
"20",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"20",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"20",
|
|
"80",
|
|
"64301",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001"
|
|
],
|
|
[
|
|
"20",
|
|
null,
|
|
null,
|
|
"HTTP",
|
|
"Anwendung",
|
|
"HTTP/1.1 200 OK\nContent-type: text/html\n\n<html>\n\u0009<head>\n\u0009\u0009<title>Log-Einträge der Firewall</titel>\n\u0009</head>\n\u0009<body>\n\u0009\u0009<h2>Log-Einträge der Firewall</h2>\n\n<br /> \nICMP-Paket verworfen: 10.0.0.2 -> 20.0.0.2 (code: 0, type: 8)<br /> \nFirewall-Regel hat gegriffen: #1 (10.0.0.0/255.255.255.0 -> */*; TCP:80 => ACCEPT) -> akzeptieren<br /> \nFirewall-Regel hat gegriffen: #1 (10.0.0.0/255.255.255.0 -> */*; TCP:80 => ACCEPT) -> akzeptieren\n\n\u0009</body>\n</html>"
|
|
],
|
|
[
|
|
"21",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"21",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"21",
|
|
"64301",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.034, ACK: 3.000.461"
|
|
],
|
|
[
|
|
"22",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"22",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"22",
|
|
"64301",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 4.000.034"
|
|
],
|
|
[
|
|
"23",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"23",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"23",
|
|
"80",
|
|
"64301",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.461, ACK: 4.000.035"
|
|
],
|
|
[
|
|
"24",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"24",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"24",
|
|
"80",
|
|
"64301",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 3.000.461"
|
|
],
|
|
[
|
|
"25",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"25",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"25",
|
|
"64301",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.035, ACK: 3.000.462"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000302": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:03:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:03:21 [op=REPLY, sender=02:00:00:00:03:21|10.0.0.1, target=02:00:00:00:03:11|10.0.0.2]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"10.0.0.2",
|
|
"20.0.0.2",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"55413",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 2.000.000"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"80",
|
|
"55413",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 1.000.000, ACK: 2.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"6",
|
|
"55413",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001, ACK: 1.000.001"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"55413",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001"
|
|
],
|
|
[
|
|
"7",
|
|
null,
|
|
null,
|
|
"HTTP",
|
|
"Anwendung",
|
|
"GET / HTTP/1.1\nHost: 10.0.0.1\n"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"80",
|
|
"55413",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001, ACK: 2.000.031"
|
|
],
|
|
[
|
|
"9",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"80",
|
|
"55413",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001"
|
|
],
|
|
[
|
|
"9",
|
|
null,
|
|
null,
|
|
"HTTP",
|
|
"Anwendung",
|
|
"HTTP/1.1 200 OK\nContent-type: text/html\n\n<html>\n <head>\n <title>Administration des Vermittlungsrechners</title>\n </head>\n <body>\n\n <h1>Firewall-Administration</h1>\n <p> <a href=\"konfig\">Konfiguration</a> </p>\n <p> <a href=\"log\">Log-Einträge anzeigen</a> </p>\n\n <h1> Weiterleitung/Routing </h1>\n <p> <a href=\"routes\"> Anzeige des aktuellen Status der Weiterleitungs-/Routing-Tabelle </a></p>\n </body>\n</html>\n"
|
|
],
|
|
[
|
|
"10",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"10",
|
|
"55413",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.031, ACK: 1.000.436"
|
|
],
|
|
[
|
|
"11",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"11",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"11",
|
|
"55413",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 2.000.031"
|
|
],
|
|
[
|
|
"12",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"12",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"12",
|
|
"80",
|
|
"55413",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.436, ACK: 2.000.032"
|
|
],
|
|
[
|
|
"13",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"13",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"13",
|
|
"80",
|
|
"55413",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 1.000.436"
|
|
],
|
|
[
|
|
"14",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"14",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"14",
|
|
"55413",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.032, ACK: 1.000.437"
|
|
],
|
|
[
|
|
"15",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"15",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"15",
|
|
"64301",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 4.000.000"
|
|
],
|
|
[
|
|
"16",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"16",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"16",
|
|
"80",
|
|
"64301",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 3.000.000, ACK: 4.000.001"
|
|
],
|
|
[
|
|
"17",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"17",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"17",
|
|
"64301",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.001, ACK: 3.000.001"
|
|
],
|
|
[
|
|
"18",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"18",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"18",
|
|
"64301",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.001"
|
|
],
|
|
[
|
|
"18",
|
|
null,
|
|
null,
|
|
"HTTP",
|
|
"Anwendung",
|
|
"GET /log HTTP/1.1\nHost: 10.0.0.1\n"
|
|
],
|
|
[
|
|
"19",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"19",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"19",
|
|
"80",
|
|
"64301",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001, ACK: 4.000.034"
|
|
],
|
|
[
|
|
"20",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"20",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"20",
|
|
"80",
|
|
"64301",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001"
|
|
],
|
|
[
|
|
"20",
|
|
null,
|
|
null,
|
|
"HTTP",
|
|
"Anwendung",
|
|
"HTTP/1.1 200 OK\nContent-type: text/html\n\n<html>\n\u0009<head>\n\u0009\u0009<title>Log-Einträge der Firewall</titel>\n\u0009</head>\n\u0009<body>\n\u0009\u0009<h2>Log-Einträge der Firewall</h2>\n\n<br /> \nICMP-Paket verworfen: 10.0.0.2 -> 20.0.0.2 (code: 0, type: 8)<br /> \nFirewall-Regel hat gegriffen: #1 (10.0.0.0/255.255.255.0 -> */*; TCP:80 => ACCEPT) -> akzeptieren<br /> \nFirewall-Regel hat gegriffen: #1 (10.0.0.0/255.255.255.0 -> */*; TCP:80 => ACCEPT) -> akzeptieren\n\n\u0009</body>\n</html>"
|
|
],
|
|
[
|
|
"21",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"21",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"21",
|
|
"64301",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.034, ACK: 3.000.461"
|
|
],
|
|
[
|
|
"22",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"22",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"22",
|
|
"64301",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 4.000.034"
|
|
],
|
|
[
|
|
"23",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"23",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"23",
|
|
"80",
|
|
"64301",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.461, ACK: 4.000.035"
|
|
],
|
|
[
|
|
"24",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"24",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"24",
|
|
"80",
|
|
"64301",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 3.000.461"
|
|
],
|
|
[
|
|
"25",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"25",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"25",
|
|
"64301",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.035, ACK: 3.000.462"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000302#1": [],
|
|
"00000000-0000-0000-0000-000000000303": []
|
|
},
|
|
"events": [
|
|
[
|
|
212,
|
|
"browser",
|
|
"update"
|
|
],
|
|
[
|
|
213,
|
|
"server",
|
|
"null"
|
|
],
|
|
[
|
|
214,
|
|
"server",
|
|
"Annahme von Verbindungsanfragen gestartet"
|
|
],
|
|
[
|
|
500,
|
|
"ping",
|
|
"call sendProbe 20.0.0.2"
|
|
],
|
|
[
|
|
3497,
|
|
"ping",
|
|
"returned null"
|
|
],
|
|
[
|
|
3500,
|
|
"browser",
|
|
"call holeWebseite 10.0.0.1"
|
|
],
|
|
[
|
|
3922,
|
|
"server",
|
|
"Verbindung zu 10.0.0.2:55413 hergestellt"
|
|
],
|
|
[
|
|
3923,
|
|
"server",
|
|
">>GET / HTTP/1.1\nHost: 10.0.0.1\n"
|
|
],
|
|
[
|
|
4108,
|
|
"browser",
|
|
"page 200 text/html\n<html>\n <head>\n <title>Administration des Vermittlungsrechners</title>\n </head>\n <body>\n\n <h1>Firewall-Administration</h1>\n <p> <a href=\"konfig\">Konfiguration</a> </p>\n <p> <a href=\"log\">Log-Einträge anzeigen</a> </p>\n\n <h1> Weiterleitung/Routing </h1>\n <p> <a href=\"routes\"> Anzeige des aktuellen Status der Weiterleitungs-/Routing-Tabelle </a></p>\n </body>\n</html>"
|
|
],
|
|
[
|
|
4206,
|
|
"server",
|
|
"<<HTTP/1.1 200 OK\nContent-type: text/html\n\n<html>\n <head>\n <title>Administration des Vermittlungsrechners</title>\n </head>\n <body>\n\n <h1>Firewall-Administration</h1>\n <p> <a href=\"konfig\">Konfiguration</a> </p>\n <p> <a href=\"log\">Log-Einträge anzeigen</a> </p>\n\n <h1> Weiterleitung/Routing </h1>\n <p> <a href=\"routes\"> Anzeige des aktuellen Status der Weiterleitungs-/Routing-Tabelle </a></p>\n </body>\n</html>\n"
|
|
],
|
|
[
|
|
4261,
|
|
"server",
|
|
"Socket zu 10.0.0.2:55413 geschlossen"
|
|
],
|
|
[
|
|
7000,
|
|
"browser",
|
|
"call holeWebseite 10.0.0.1/log"
|
|
],
|
|
[
|
|
7425,
|
|
"server",
|
|
"Verbindung zu 10.0.0.2:64301 hergestellt"
|
|
],
|
|
[
|
|
7425,
|
|
"server",
|
|
">>GET /log HTTP/1.1\nHost: 10.0.0.1\n"
|
|
],
|
|
[
|
|
7581,
|
|
"browser",
|
|
"page 200 text/html\n<html>\n\u0009<head>\n\u0009\u0009<title>Log-Einträge der Firewall</titel>\n\u0009</head>\n\u0009<body>\n\u0009\u0009<h2>Log-Einträge der Firewall</h2>\n\n<br /> \nICMP-Paket verworfen: 10.0.0.2 -> 20.0.0.2 (code: 0, type: 8)<br /> \nFirewall-Regel hat gegriffen: #1 (10.0.0.0/255.255.255.0 -> */*; TCP:80 => ACCEPT) -> akzeptieren<br /> \nFirewall-Regel hat gegriffen: #1 (10.0.0.0/255.255.255.0 -> */*; TCP:80 => ACCEPT) -> akzeptieren\n\n\u0009</body>\n</html>"
|
|
],
|
|
[
|
|
7692,
|
|
"server",
|
|
"<<HTTP/1.1 200 OK\nContent-type: text/html\n\n<html>\n\u0009<head>\n\u0009\u0009<title>Log-Einträge der Firewall</titel>\n\u0009</head>\n\u0009<body>\n\u0009\u0009<h2>Log-Einträge der Firewall</h2>\n\n<br /> \nICMP-Paket verworfen: 10.0.0.2 -> 20.0.0.2 (code: 0, type: 8)<br /> \nFirewall-Regel hat gegriffen: #1 (10.0.0.0/255.255.255.0 -> */*; TCP:80 => ACCEPT) -> akzeptieren<br /> \nFirewall-Regel hat gegriffen: #1 (10.0.0.0/255.255.255.0 -> */*; TCP:80 => ACCEPT) -> akzeptieren\n\n\u0009</body>\n</html>"
|
|
],
|
|
[
|
|
7747,
|
|
"server",
|
|
"Socket zu 10.0.0.2:64301 geschlossen"
|
|
]
|
|
]
|
|
}
|