captureRows.ts builds Java's rows per frame (Lauscher.datenVorbereiten): Ethernet; ARP, ICMP or IP; TCP or UDP; the data with Java's protocol recognition; with addresses and ports or ports only. The comment stays structured; captureCommentText says it with given words and numbers. ScenarioNetwork writes Java's finished tables per card (Lauscher.getDaten, German locale); all runtime runs are recorded again, NatRun has ttlOut. expectSameCaptures compares both views for every frame. Fixed where the engine differed: an ARP request's target MAC is the broadcast address, an ICMP error's identifier and sequence number are 0 (RFC 792), and host unreachable from a router carries the packet as forwarded. Not taken: Java's lower-case broadcast address in a reply to 0.0.0.0, and the typo 'Exeeded'. RIP keeps its recordings: Java's staggered router start now gives a different startup on this machine. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
1963 lines
43 KiB
JSON
1963 lines
43 KiB
JSON
{
|
|
"frames": {
|
|
"00000000-0000-0000-0000-000000000101": [
|
|
{
|
|
"time": 728,
|
|
"source": "02:00:00:00:01:11",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.20",
|
|
"targetIp": "192.168.0.10"
|
|
},
|
|
{
|
|
"time": 961,
|
|
"source": "02:00:00:00:01:12",
|
|
"destination": "02:00:00:00:01:11",
|
|
"arp": 2,
|
|
"senderIp": "192.168.0.10",
|
|
"targetIp": "192.168.0.20"
|
|
},
|
|
{
|
|
"time": 964,
|
|
"source": "02:00:00:00:01:11",
|
|
"destination": "02:00:00:00:01:12",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.10",
|
|
"protocol": 17,
|
|
"sourcePort": 56738,
|
|
"destinationPort": 53,
|
|
"payload": "ID=37623 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nnix.schule.de. A IN\n"
|
|
},
|
|
{
|
|
"time": 1197,
|
|
"source": "02:00:00:00:01:12",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.10",
|
|
"targetIp": "192.168.0.11"
|
|
},
|
|
{
|
|
"time": 1868,
|
|
"source": "02:00:00:00:01:12",
|
|
"destination": "02:00:00:00:01:11",
|
|
"sourceIp": "192.168.0.10",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 17,
|
|
"sourcePort": 53,
|
|
"destinationPort": 56738,
|
|
"payload": "ID=37623 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nschule.de. NS 3600 ns.schule.de.\nns.schule.de. A 3600 192.168.0.11\n"
|
|
},
|
|
{
|
|
"time": 1868,
|
|
"source": "02:00:00:00:01:11",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.20",
|
|
"targetIp": "192.168.0.11"
|
|
},
|
|
{
|
|
"time": 2090,
|
|
"source": "02:00:00:00:01:13",
|
|
"destination": "02:00:00:00:01:11",
|
|
"arp": 2,
|
|
"senderIp": "192.168.0.11",
|
|
"targetIp": "192.168.0.20"
|
|
},
|
|
{
|
|
"time": 2090,
|
|
"source": "02:00:00:00:01:11",
|
|
"destination": "02:00:00:00:01:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.11",
|
|
"protocol": 17,
|
|
"sourcePort": 59860,
|
|
"destinationPort": 53,
|
|
"payload": "ID=26956 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nnix.schule.de. A IN\n"
|
|
},
|
|
{
|
|
"time": 2313,
|
|
"source": "02:00:00:00:01:13",
|
|
"destination": "02:00:00:00:01:11",
|
|
"sourceIp": "192.168.0.11",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 17,
|
|
"sourcePort": 53,
|
|
"destinationPort": 59860,
|
|
"payload": "ID=26956 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
|
|
}
|
|
],
|
|
"00000000-0000-0000-0000-000000000102": [
|
|
{
|
|
"time": 848,
|
|
"source": "02:00:00:00:01:11",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.20",
|
|
"targetIp": "192.168.0.10"
|
|
},
|
|
{
|
|
"time": 849,
|
|
"source": "02:00:00:00:01:12",
|
|
"destination": "02:00:00:00:01:11",
|
|
"arp": 2,
|
|
"senderIp": "192.168.0.10",
|
|
"targetIp": "192.168.0.20"
|
|
},
|
|
{
|
|
"time": 1077,
|
|
"source": "02:00:00:00:01:11",
|
|
"destination": "02:00:00:00:01:12",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.10",
|
|
"protocol": 17,
|
|
"sourcePort": 56738,
|
|
"destinationPort": 53,
|
|
"payload": "ID=37623 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nnix.schule.de. A IN\n"
|
|
},
|
|
{
|
|
"time": 1086,
|
|
"source": "02:00:00:00:01:12",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.10",
|
|
"targetIp": "192.168.0.11"
|
|
},
|
|
{
|
|
"time": 1308,
|
|
"source": "02:00:00:00:01:13",
|
|
"destination": "02:00:00:00:01:12",
|
|
"arp": 2,
|
|
"senderIp": "192.168.0.11",
|
|
"targetIp": "192.168.0.10"
|
|
},
|
|
{
|
|
"time": 1308,
|
|
"source": "02:00:00:00:01:12",
|
|
"destination": "02:00:00:00:01:13",
|
|
"sourceIp": "192.168.0.10",
|
|
"destinationIp": "192.168.0.11",
|
|
"protocol": 17,
|
|
"sourcePort": 64537,
|
|
"destinationPort": 53,
|
|
"payload": "ID=8610 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nnix.schule.de. A IN\n"
|
|
},
|
|
{
|
|
"time": 1531,
|
|
"source": "02:00:00:00:01:13",
|
|
"destination": "02:00:00:00:01:12",
|
|
"sourceIp": "192.168.0.11",
|
|
"destinationIp": "192.168.0.10",
|
|
"protocol": 17,
|
|
"sourcePort": 53,
|
|
"destinationPort": 64537,
|
|
"payload": "ID=8610 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
|
|
},
|
|
{
|
|
"time": 1532,
|
|
"source": "02:00:00:00:01:12",
|
|
"destination": "02:00:00:00:01:13",
|
|
"sourceIp": "192.168.0.10",
|
|
"destinationIp": "192.168.0.11",
|
|
"protocol": 17,
|
|
"sourcePort": 59840,
|
|
"destinationPort": 53,
|
|
"payload": "ID=55399 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nnix.schule.de. A IN\n"
|
|
},
|
|
{
|
|
"time": 1755,
|
|
"source": "02:00:00:00:01:13",
|
|
"destination": "02:00:00:00:01:12",
|
|
"sourceIp": "192.168.0.11",
|
|
"destinationIp": "192.168.0.10",
|
|
"protocol": 17,
|
|
"sourcePort": 53,
|
|
"destinationPort": 59840,
|
|
"payload": "ID=55399 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
|
|
},
|
|
{
|
|
"time": 1756,
|
|
"source": "02:00:00:00:01:12",
|
|
"destination": "02:00:00:00:01:11",
|
|
"sourceIp": "192.168.0.10",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 17,
|
|
"sourcePort": 53,
|
|
"destinationPort": 56738,
|
|
"payload": "ID=37623 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nschule.de. NS 3600 ns.schule.de.\nns.schule.de. A 3600 192.168.0.11\n"
|
|
},
|
|
{
|
|
"time": 1979,
|
|
"source": "02:00:00:00:01:11",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.20",
|
|
"targetIp": "192.168.0.11"
|
|
}
|
|
],
|
|
"00000000-0000-0000-0000-000000000103": [
|
|
{
|
|
"time": 848,
|
|
"source": "02:00:00:00:01:11",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.20",
|
|
"targetIp": "192.168.0.10"
|
|
},
|
|
{
|
|
"time": 1197,
|
|
"source": "02:00:00:00:01:12",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.10",
|
|
"targetIp": "192.168.0.11"
|
|
},
|
|
{
|
|
"time": 1197,
|
|
"source": "02:00:00:00:01:13",
|
|
"destination": "02:00:00:00:01:12",
|
|
"arp": 2,
|
|
"senderIp": "192.168.0.11",
|
|
"targetIp": "192.168.0.10"
|
|
},
|
|
{
|
|
"time": 1419,
|
|
"source": "02:00:00:00:01:12",
|
|
"destination": "02:00:00:00:01:13",
|
|
"sourceIp": "192.168.0.10",
|
|
"destinationIp": "192.168.0.11",
|
|
"protocol": 17,
|
|
"sourcePort": 64537,
|
|
"destinationPort": 53,
|
|
"payload": "ID=8610 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nnix.schule.de. A IN\n"
|
|
},
|
|
{
|
|
"time": 1420,
|
|
"source": "02:00:00:00:01:13",
|
|
"destination": "02:00:00:00:01:12",
|
|
"sourceIp": "192.168.0.11",
|
|
"destinationIp": "192.168.0.10",
|
|
"protocol": 17,
|
|
"sourcePort": 53,
|
|
"destinationPort": 64537,
|
|
"payload": "ID=8610 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
|
|
},
|
|
{
|
|
"time": 1643,
|
|
"source": "02:00:00:00:01:12",
|
|
"destination": "02:00:00:00:01:13",
|
|
"sourceIp": "192.168.0.10",
|
|
"destinationIp": "192.168.0.11",
|
|
"protocol": 17,
|
|
"sourcePort": 59840,
|
|
"destinationPort": 53,
|
|
"payload": "ID=55399 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nnix.schule.de. A IN\n"
|
|
},
|
|
{
|
|
"time": 1644,
|
|
"source": "02:00:00:00:01:13",
|
|
"destination": "02:00:00:00:01:12",
|
|
"sourceIp": "192.168.0.11",
|
|
"destinationIp": "192.168.0.10",
|
|
"protocol": 17,
|
|
"sourcePort": 53,
|
|
"destinationPort": 59840,
|
|
"payload": "ID=55399 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
|
|
},
|
|
{
|
|
"time": 1979,
|
|
"source": "02:00:00:00:01:11",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.20",
|
|
"targetIp": "192.168.0.11"
|
|
},
|
|
{
|
|
"time": 1979,
|
|
"source": "02:00:00:00:01:13",
|
|
"destination": "02:00:00:00:01:11",
|
|
"arp": 2,
|
|
"senderIp": "192.168.0.11",
|
|
"targetIp": "192.168.0.20"
|
|
},
|
|
{
|
|
"time": 2201,
|
|
"source": "02:00:00:00:01:11",
|
|
"destination": "02:00:00:00:01:13",
|
|
"sourceIp": "192.168.0.20",
|
|
"destinationIp": "192.168.0.11",
|
|
"protocol": 17,
|
|
"sourcePort": 59860,
|
|
"destinationPort": 53,
|
|
"payload": "ID=26956 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nnix.schule.de. A IN\n"
|
|
},
|
|
{
|
|
"time": 2202,
|
|
"source": "02:00:00:00:01:13",
|
|
"destination": "02:00:00:00:01:11",
|
|
"sourceIp": "192.168.0.11",
|
|
"destinationIp": "192.168.0.20",
|
|
"protocol": 17,
|
|
"sourcePort": 53,
|
|
"destinationPort": 59860,
|
|
"payload": "ID=26956 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
|
|
}
|
|
],
|
|
"00000000-0000-0000-0000-000000000104": [
|
|
{
|
|
"time": 848,
|
|
"source": "02:00:00:00:01:11",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.20",
|
|
"targetIp": "192.168.0.10"
|
|
},
|
|
{
|
|
"time": 1197,
|
|
"source": "02:00:00:00:01:12",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.10",
|
|
"targetIp": "192.168.0.11"
|
|
},
|
|
{
|
|
"time": 1979,
|
|
"source": "02:00:00:00:01:11",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "192.168.0.20",
|
|
"targetIp": "192.168.0.11"
|
|
}
|
|
]
|
|
},
|
|
"rows": {
|
|
"00000000-0000-0000-0000-000000000101": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:01:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:01:12",
|
|
"02:00:00:00:01:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:01:12 [op=REPLY, sender=02:00:00:00:01:12|192.168.0.10, target=02:00:00:00:01:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:01:11",
|
|
"02:00:00:00:01:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.20:56738",
|
|
"192.168.0.10:53",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.20:56738",
|
|
"192.168.0.10:53",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=37623 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nnix.schule.de. A IN\n"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:01:12",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.10",
|
|
"192.168.0.11",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.11 [op=REQUEST, sender=02:00:00:00:01:12|192.168.0.10, target=FF:FF:FF:FF:FF:FF|192.168.0.11]"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:01:12",
|
|
"02:00:00:00:01:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.10:53",
|
|
"192.168.0.20:56738",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.10:53",
|
|
"192.168.0.20:56738",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=37623 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nschule.de. NS 3600 ns.schule.de.\nns.schule.de. A 3600 192.168.0.11\n"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:01:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.20",
|
|
"192.168.0.11",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.11 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.11]"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:01:13",
|
|
"02:00:00:00:01:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.11",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:01:13 [op=REPLY, sender=02:00:00:00:01:13|192.168.0.11, target=02:00:00:00:01:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:01:11",
|
|
"02:00:00:00:01:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.20",
|
|
"192.168.0.11",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.20:59860",
|
|
"192.168.0.11:53",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.20:59860",
|
|
"192.168.0.11:53",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=26956 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nnix.schule.de. A IN\n"
|
|
],
|
|
[
|
|
"9",
|
|
"02:00:00:00:01:13",
|
|
"02:00:00:00:01:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.11",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.11:53",
|
|
"192.168.0.20:59860",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.11:53",
|
|
"192.168.0.20:59860",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=26956 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000102": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:01:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:01:12",
|
|
"02:00:00:00:01:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:01:12 [op=REPLY, sender=02:00:00:00:01:12|192.168.0.10, target=02:00:00:00:01:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:01:11",
|
|
"02:00:00:00:01:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.20:56738",
|
|
"192.168.0.10:53",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.20:56738",
|
|
"192.168.0.10:53",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=37623 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nnix.schule.de. A IN\n"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:01:12",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.10",
|
|
"192.168.0.11",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.11 [op=REQUEST, sender=02:00:00:00:01:12|192.168.0.10, target=FF:FF:FF:FF:FF:FF|192.168.0.11]"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:01:13",
|
|
"02:00:00:00:01:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.11",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:01:13 [op=REPLY, sender=02:00:00:00:01:13|192.168.0.11, target=02:00:00:00:01:12|192.168.0.10]"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:01:12",
|
|
"02:00:00:00:01:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.10",
|
|
"192.168.0.11",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.10:64537",
|
|
"192.168.0.11:53",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.10:64537",
|
|
"192.168.0.11:53",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=8610 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nnix.schule.de. A IN\n"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:01:13",
|
|
"02:00:00:00:01:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.11",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.11:53",
|
|
"192.168.0.10:64537",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.11:53",
|
|
"192.168.0.10:64537",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=8610 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:01:12",
|
|
"02:00:00:00:01:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.10",
|
|
"192.168.0.11",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.10:59840",
|
|
"192.168.0.11:53",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.10:59840",
|
|
"192.168.0.11:53",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=55399 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nnix.schule.de. A IN\n"
|
|
],
|
|
[
|
|
"9",
|
|
"02:00:00:00:01:13",
|
|
"02:00:00:00:01:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.11",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.11:53",
|
|
"192.168.0.10:59840",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.11:53",
|
|
"192.168.0.10:59840",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=55399 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
|
|
],
|
|
[
|
|
"10",
|
|
"02:00:00:00:01:12",
|
|
"02:00:00:00:01:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.10:53",
|
|
"192.168.0.20:56738",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.10:53",
|
|
"192.168.0.20:56738",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=37623 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nschule.de. NS 3600 ns.schule.de.\nns.schule.de. A 3600 192.168.0.11\n"
|
|
],
|
|
[
|
|
"11",
|
|
"02:00:00:00:01:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"11",
|
|
"192.168.0.20",
|
|
"192.168.0.11",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.11 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.11]"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000103": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:01:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:01:12",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"192.168.0.10",
|
|
"192.168.0.11",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.11 [op=REQUEST, sender=02:00:00:00:01:12|192.168.0.10, target=FF:FF:FF:FF:FF:FF|192.168.0.11]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:01:13",
|
|
"02:00:00:00:01:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.11",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:01:13 [op=REPLY, sender=02:00:00:00:01:13|192.168.0.11, target=02:00:00:00:01:12|192.168.0.10]"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:01:12",
|
|
"02:00:00:00:01:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.10",
|
|
"192.168.0.11",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.10:64537",
|
|
"192.168.0.11:53",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.10:64537",
|
|
"192.168.0.11:53",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=8610 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nnix.schule.de. A IN\n"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:01:13",
|
|
"02:00:00:00:01:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.11",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.11:53",
|
|
"192.168.0.10:64537",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.11:53",
|
|
"192.168.0.10:64537",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=8610 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:01:12",
|
|
"02:00:00:00:01:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.10",
|
|
"192.168.0.11",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.10:59840",
|
|
"192.168.0.11:53",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.10:59840",
|
|
"192.168.0.11:53",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=55399 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nnix.schule.de. A IN\n"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:01:13",
|
|
"02:00:00:00:01:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.11",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.11:53",
|
|
"192.168.0.10:59840",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.11:53",
|
|
"192.168.0.10:59840",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=55399 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:01:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.20",
|
|
"192.168.0.11",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.11 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.11]"
|
|
],
|
|
[
|
|
"9",
|
|
"02:00:00:00:01:13",
|
|
"02:00:00:00:01:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.11",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:01:13 [op=REPLY, sender=02:00:00:00:01:13|192.168.0.11, target=02:00:00:00:01:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"10",
|
|
"02:00:00:00:01:11",
|
|
"02:00:00:00:01:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.20",
|
|
"192.168.0.11",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.20:59860",
|
|
"192.168.0.11:53",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.20:59860",
|
|
"192.168.0.11:53",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=26956 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nnix.schule.de. A IN\n"
|
|
],
|
|
[
|
|
"11",
|
|
"02:00:00:00:01:13",
|
|
"02:00:00:00:01:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"11",
|
|
"192.168.0.11",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"11",
|
|
"192.168.0.11:53",
|
|
"192.168.0.20:59860",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"11",
|
|
"192.168.0.11:53",
|
|
"192.168.0.20:59860",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=26956 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000104": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:01:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:01:12",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"192.168.0.10",
|
|
"192.168.0.11",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.11 [op=REQUEST, sender=02:00:00:00:01:12|192.168.0.10, target=FF:FF:FF:FF:FF:FF|192.168.0.11]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:01:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.20",
|
|
"192.168.0.11",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.11 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.11]"
|
|
]
|
|
]
|
|
},
|
|
"layeredRows": {
|
|
"00000000-0000-0000-0000-000000000101": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:01:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:01:12",
|
|
"02:00:00:00:01:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:01:12 [op=REPLY, sender=02:00:00:00:01:12|192.168.0.10, target=02:00:00:00:01:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:01:11",
|
|
"02:00:00:00:01:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"3",
|
|
"56738",
|
|
"53",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"3",
|
|
null,
|
|
null,
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=37623 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nnix.schule.de. A IN\n"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:01:12",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.10",
|
|
"192.168.0.11",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.11 [op=REQUEST, sender=02:00:00:00:01:12|192.168.0.10, target=FF:FF:FF:FF:FF:FF|192.168.0.11]"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:01:12",
|
|
"02:00:00:00:01:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"53",
|
|
"56738",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"5",
|
|
null,
|
|
null,
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=37623 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nschule.de. NS 3600 ns.schule.de.\nns.schule.de. A 3600 192.168.0.11\n"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:01:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.20",
|
|
"192.168.0.11",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.11 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.11]"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:01:13",
|
|
"02:00:00:00:01:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.11",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:01:13 [op=REPLY, sender=02:00:00:00:01:13|192.168.0.11, target=02:00:00:00:01:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:01:11",
|
|
"02:00:00:00:01:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.20",
|
|
"192.168.0.11",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"59860",
|
|
"53",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"8",
|
|
null,
|
|
null,
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=26956 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nnix.schule.de. A IN\n"
|
|
],
|
|
[
|
|
"9",
|
|
"02:00:00:00:01:13",
|
|
"02:00:00:00:01:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.11",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"53",
|
|
"59860",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"9",
|
|
null,
|
|
null,
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=26956 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000102": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:01:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:01:12",
|
|
"02:00:00:00:01:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:01:12 [op=REPLY, sender=02:00:00:00:01:12|192.168.0.10, target=02:00:00:00:01:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:01:11",
|
|
"02:00:00:00:01:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"3",
|
|
"56738",
|
|
"53",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"3",
|
|
null,
|
|
null,
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=37623 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nnix.schule.de. A IN\n"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:01:12",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.10",
|
|
"192.168.0.11",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.11 [op=REQUEST, sender=02:00:00:00:01:12|192.168.0.10, target=FF:FF:FF:FF:FF:FF|192.168.0.11]"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:01:13",
|
|
"02:00:00:00:01:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.11",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:01:13 [op=REPLY, sender=02:00:00:00:01:13|192.168.0.11, target=02:00:00:00:01:12|192.168.0.10]"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:01:12",
|
|
"02:00:00:00:01:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.10",
|
|
"192.168.0.11",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"6",
|
|
"64537",
|
|
"53",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"6",
|
|
null,
|
|
null,
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=8610 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nnix.schule.de. A IN\n"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:01:13",
|
|
"02:00:00:00:01:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.11",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"53",
|
|
"64537",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"7",
|
|
null,
|
|
null,
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=8610 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:01:12",
|
|
"02:00:00:00:01:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.10",
|
|
"192.168.0.11",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"59840",
|
|
"53",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"8",
|
|
null,
|
|
null,
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=55399 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nnix.schule.de. A IN\n"
|
|
],
|
|
[
|
|
"9",
|
|
"02:00:00:00:01:13",
|
|
"02:00:00:00:01:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.11",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"53",
|
|
"59840",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"9",
|
|
null,
|
|
null,
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=55399 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
|
|
],
|
|
[
|
|
"10",
|
|
"02:00:00:00:01:12",
|
|
"02:00:00:00:01:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"10",
|
|
"53",
|
|
"56738",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"10",
|
|
null,
|
|
null,
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=37623 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=2 NSCOUNT=0 ARCOUNT=0 \nschule.de. NS 3600 ns.schule.de.\nns.schule.de. A 3600 192.168.0.11\n"
|
|
],
|
|
[
|
|
"11",
|
|
"02:00:00:00:01:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"11",
|
|
"192.168.0.20",
|
|
"192.168.0.11",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.11 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.11]"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000103": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:01:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:01:12",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"192.168.0.10",
|
|
"192.168.0.11",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.11 [op=REQUEST, sender=02:00:00:00:01:12|192.168.0.10, target=FF:FF:FF:FF:FF:FF|192.168.0.11]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:01:13",
|
|
"02:00:00:00:01:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.11",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:01:13 [op=REPLY, sender=02:00:00:00:01:13|192.168.0.11, target=02:00:00:00:01:12|192.168.0.10]"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:01:12",
|
|
"02:00:00:00:01:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"192.168.0.10",
|
|
"192.168.0.11",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"64537",
|
|
"53",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"4",
|
|
null,
|
|
null,
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=8610 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nnix.schule.de. A IN\n"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:01:13",
|
|
"02:00:00:00:01:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"192.168.0.11",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"53",
|
|
"64537",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"5",
|
|
null,
|
|
null,
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=8610 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:01:12",
|
|
"02:00:00:00:01:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"192.168.0.10",
|
|
"192.168.0.11",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"6",
|
|
"59840",
|
|
"53",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"6",
|
|
null,
|
|
null,
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=55399 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nnix.schule.de. A IN\n"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:01:13",
|
|
"02:00:00:00:01:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"192.168.0.11",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"53",
|
|
"59840",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"7",
|
|
null,
|
|
null,
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=55399 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:01:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"8",
|
|
"192.168.0.20",
|
|
"192.168.0.11",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.11 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.11]"
|
|
],
|
|
[
|
|
"9",
|
|
"02:00:00:00:01:13",
|
|
"02:00:00:00:01:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"9",
|
|
"192.168.0.11",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:01:13 [op=REPLY, sender=02:00:00:00:01:13|192.168.0.11, target=02:00:00:00:01:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"10",
|
|
"02:00:00:00:01:11",
|
|
"02:00:00:00:01:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"192.168.0.20",
|
|
"192.168.0.11",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"10",
|
|
"59860",
|
|
"53",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"10",
|
|
null,
|
|
null,
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=26956 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nnix.schule.de. A IN\n"
|
|
],
|
|
[
|
|
"11",
|
|
"02:00:00:00:01:13",
|
|
"02:00:00:00:01:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"11",
|
|
"192.168.0.11",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"11",
|
|
"53",
|
|
"59860",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"11",
|
|
null,
|
|
null,
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=26956 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \n"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000104": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:01:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:01:12",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"192.168.0.10",
|
|
"192.168.0.11",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.11 [op=REQUEST, sender=02:00:00:00:01:12|192.168.0.10, target=FF:FF:FF:FF:FF:FF|192.168.0.11]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:01:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"3",
|
|
"192.168.0.20",
|
|
"192.168.0.11",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.11 [op=REQUEST, sender=02:00:00:00:01:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.11]"
|
|
]
|
|
]
|
|
},
|
|
"events": [
|
|
[
|
|
718,
|
|
"holeIPAdresse nix.schule.de called"
|
|
],
|
|
[
|
|
2313,
|
|
"holeIPAdresse nix.schule.de returned null"
|
|
]
|
|
]
|
|
}
|