One row per frame (its highest layer's), Java's detail tree, the table as Java's text file, "Tabellen löschen" for every card (clearCapture in the room), a tab per card with Java's title, Java's layer colours as tokens, the chosen frame and autoscroll per tab. New oracle ExchangeWindowRun. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
5909 lines
153 KiB
JSON
5909 lines
153 KiB
JSON
{
|
|
"steps": [
|
|
{
|
|
"step": "open",
|
|
"at": 1076,
|
|
"titles": [
|
|
"Anna - 192.168.0.20"
|
|
],
|
|
"selected": 0,
|
|
"visible": true,
|
|
"tables": {
|
|
"00000000-0000-0000-0000-000000000201": {
|
|
"rows": [],
|
|
"layerRows": []
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"step": "after the fetch",
|
|
"at": 15280,
|
|
"titles": [
|
|
"Anna - 192.168.0.20"
|
|
],
|
|
"selected": 0,
|
|
"visible": true,
|
|
"tables": {
|
|
"00000000-0000-0000-0000-000000000201": {
|
|
"rows": [
|
|
[
|
|
"1",
|
|
"08:34:12.286",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
],
|
|
[
|
|
"2",
|
|
"08:34:12.523",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"3",
|
|
"08:34:12.526",
|
|
"192.168.0.20:61663",
|
|
"192.168.0.10:53",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=26498 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n"
|
|
],
|
|
[
|
|
"4",
|
|
"08:34:12.756",
|
|
"192.168.0.10:53",
|
|
"192.168.0.20:61663",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=26498 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n"
|
|
],
|
|
[
|
|
"5",
|
|
"08:34:12.760",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
|
|
],
|
|
[
|
|
"6",
|
|
"08:34:12.983",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"7",
|
|
"08:34:12.984",
|
|
"192.168.0.20:50668",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 2.000.000"
|
|
],
|
|
[
|
|
"8",
|
|
"08:34:13.207",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:50668",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 1.000.000, ACK: 2.000.001"
|
|
],
|
|
[
|
|
"9",
|
|
"08:34:13.208",
|
|
"192.168.0.20:50668",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001, ACK: 1.000.001"
|
|
],
|
|
[
|
|
"10",
|
|
"08:34:13.264",
|
|
"192.168.0.20:50668",
|
|
"192.168.0.30:80",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"GET /text.txt HTTP/1.1\nHost: www.filius.de\n"
|
|
],
|
|
[
|
|
"11",
|
|
"08:34:13.486",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:50668",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001, ACK: 2.000.044"
|
|
],
|
|
[
|
|
"12",
|
|
"08:34:13.542",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:50668",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"HTTP/1.1 200 OK\nContent-type: text/plain\n\nNur Text\nzwei Zeilen"
|
|
],
|
|
[
|
|
"13",
|
|
"08:34:13.543",
|
|
"192.168.0.20:50668",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.044, ACK: 1.000.063"
|
|
],
|
|
[
|
|
"14",
|
|
"08:34:13.598",
|
|
"192.168.0.20:50668",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 2.000.044"
|
|
],
|
|
[
|
|
"15",
|
|
"08:34:13.821",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:50668",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.063, ACK: 2.000.045"
|
|
],
|
|
[
|
|
"16",
|
|
"08:34:13.877",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:50668",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 1.000.063"
|
|
],
|
|
[
|
|
"17",
|
|
"08:34:13.878",
|
|
"192.168.0.20:50668",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.045, ACK: 1.000.064"
|
|
]
|
|
],
|
|
"layerRows": [
|
|
[
|
|
"1",
|
|
"08:34:12.286",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"08:34:12.286",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
],
|
|
[
|
|
"2",
|
|
"08:34:12.523",
|
|
"02:00:00:00:02:12",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"08:34:12.523",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"3",
|
|
"08:34:12.526",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"08:34:12.526",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"3",
|
|
"08:34:12.526",
|
|
"192.168.0.20:61663",
|
|
"192.168.0.10:53",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"3",
|
|
"08:34:12.526",
|
|
"192.168.0.20:61663",
|
|
"192.168.0.10:53",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=26498 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n"
|
|
],
|
|
[
|
|
"4",
|
|
"08:34:12.756",
|
|
"02:00:00:00:02:12",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"08:34:12.756",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"08:34:12.756",
|
|
"192.168.0.10:53",
|
|
"192.168.0.20:61663",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"4",
|
|
"08:34:12.756",
|
|
"192.168.0.10:53",
|
|
"192.168.0.20:61663",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=26498 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n"
|
|
],
|
|
[
|
|
"5",
|
|
"08:34:12.760",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"5",
|
|
"08:34:12.760",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
|
|
],
|
|
[
|
|
"6",
|
|
"08:34:12.983",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"6",
|
|
"08:34:12.983",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"7",
|
|
"08:34:12.984",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"08:34:12.984",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"08:34:12.984",
|
|
"192.168.0.20:50668",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 2.000.000"
|
|
],
|
|
[
|
|
"8",
|
|
"08:34:13.207",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"08:34:13.207",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"08:34:13.207",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:50668",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 1.000.000, ACK: 2.000.001"
|
|
],
|
|
[
|
|
"9",
|
|
"08:34:13.208",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"08:34:13.208",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"08:34:13.208",
|
|
"192.168.0.20:50668",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001, ACK: 1.000.001"
|
|
],
|
|
[
|
|
"10",
|
|
"08:34:13.264",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"08:34:13.264",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"10",
|
|
"08:34:13.264",
|
|
"192.168.0.20:50668",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001"
|
|
],
|
|
[
|
|
"10",
|
|
"08:34:13.264",
|
|
"192.168.0.20:50668",
|
|
"192.168.0.30:80",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"GET /text.txt HTTP/1.1\nHost: www.filius.de\n"
|
|
],
|
|
[
|
|
"11",
|
|
"08:34:13.486",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"11",
|
|
"08:34:13.486",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"11",
|
|
"08:34:13.486",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:50668",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001, ACK: 2.000.044"
|
|
],
|
|
[
|
|
"12",
|
|
"08:34:13.542",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"12",
|
|
"08:34:13.542",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"12",
|
|
"08:34:13.542",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:50668",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001"
|
|
],
|
|
[
|
|
"12",
|
|
"08:34:13.542",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:50668",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"HTTP/1.1 200 OK\nContent-type: text/plain\n\nNur Text\nzwei Zeilen"
|
|
],
|
|
[
|
|
"13",
|
|
"08:34:13.543",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"13",
|
|
"08:34:13.543",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"13",
|
|
"08:34:13.543",
|
|
"192.168.0.20:50668",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.044, ACK: 1.000.063"
|
|
],
|
|
[
|
|
"14",
|
|
"08:34:13.598",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"14",
|
|
"08:34:13.598",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"14",
|
|
"08:34:13.598",
|
|
"192.168.0.20:50668",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 2.000.044"
|
|
],
|
|
[
|
|
"15",
|
|
"08:34:13.821",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"15",
|
|
"08:34:13.821",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"15",
|
|
"08:34:13.821",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:50668",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.063, ACK: 2.000.045"
|
|
],
|
|
[
|
|
"16",
|
|
"08:34:13.877",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"16",
|
|
"08:34:13.877",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"16",
|
|
"08:34:13.877",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:50668",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 1.000.063"
|
|
],
|
|
[
|
|
"17",
|
|
"08:34:13.878",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"17",
|
|
"08:34:13.878",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"17",
|
|
"08:34:13.878",
|
|
"192.168.0.20:50668",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.045, ACK: 1.000.064"
|
|
]
|
|
]
|
|
}
|
|
},
|
|
"details": [
|
|
[
|
|
[
|
|
0,
|
|
"Nr.: 1 / Zeit: 08:34:12.286"
|
|
],
|
|
[
|
|
1,
|
|
"Netzzugang"
|
|
],
|
|
[
|
|
2,
|
|
"Quelle: 02:00:00:00:02:11"
|
|
],
|
|
[
|
|
2,
|
|
"Ziel: FF:FF:FF:FF:FF:FF"
|
|
],
|
|
[
|
|
2,
|
|
"Bemerkungen / Details: 0x806"
|
|
],
|
|
[
|
|
1,
|
|
"Vermittlung"
|
|
],
|
|
[
|
|
2,
|
|
"Quelle: 192.168.0.20"
|
|
],
|
|
[
|
|
2,
|
|
"Ziel: 192.168.0.10"
|
|
],
|
|
[
|
|
2,
|
|
"Protokoll: ARP"
|
|
],
|
|
[
|
|
2,
|
|
"Bemerkungen / Details: "
|
|
],
|
|
[
|
|
3,
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
]
|
|
],
|
|
[
|
|
[
|
|
0,
|
|
"Nr.: 2 / Zeit: 08:34:12.523"
|
|
],
|
|
[
|
|
1,
|
|
"Netzzugang"
|
|
],
|
|
[
|
|
2,
|
|
"Quelle: 02:00:00:00:02:12"
|
|
],
|
|
[
|
|
2,
|
|
"Ziel: 02:00:00:00:02:11"
|
|
],
|
|
[
|
|
2,
|
|
"Bemerkungen / Details: 0x806"
|
|
],
|
|
[
|
|
1,
|
|
"Vermittlung"
|
|
],
|
|
[
|
|
2,
|
|
"Quelle: 192.168.0.10"
|
|
],
|
|
[
|
|
2,
|
|
"Ziel: 192.168.0.20"
|
|
],
|
|
[
|
|
2,
|
|
"Protokoll: ARP"
|
|
],
|
|
[
|
|
2,
|
|
"Bemerkungen / Details: "
|
|
],
|
|
[
|
|
3,
|
|
"MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:11|192.168.0.20]"
|
|
]
|
|
],
|
|
[
|
|
[
|
|
0,
|
|
"Nr.: 3 / Zeit: 08:34:12.526"
|
|
],
|
|
[
|
|
1,
|
|
"Netzzugang"
|
|
],
|
|
[
|
|
2,
|
|
"Quelle: 02:00:00:00:02:11"
|
|
],
|
|
[
|
|
2,
|
|
"Ziel: 02:00:00:00:02:12"
|
|
],
|
|
[
|
|
2,
|
|
"Bemerkungen / Details: 0x800"
|
|
],
|
|
[
|
|
1,
|
|
"Vermittlung"
|
|
],
|
|
[
|
|
2,
|
|
"Quelle: 192.168.0.20"
|
|
],
|
|
[
|
|
2,
|
|
"Ziel: 192.168.0.10"
|
|
],
|
|
[
|
|
2,
|
|
"Protokoll: IP"
|
|
],
|
|
[
|
|
2,
|
|
"Bemerkungen / Details: Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
1,
|
|
"Transport"
|
|
],
|
|
[
|
|
2,
|
|
"Quelle: 61663"
|
|
],
|
|
[
|
|
2,
|
|
"Ziel: 53"
|
|
],
|
|
[
|
|
2,
|
|
"Protokoll: UDP"
|
|
],
|
|
[
|
|
1,
|
|
"Anwendung"
|
|
],
|
|
[
|
|
2,
|
|
"Protokoll: DNS"
|
|
],
|
|
[
|
|
2,
|
|
"Bemerkungen / Details (83 Bytes): "
|
|
],
|
|
[
|
|
3,
|
|
"ID=26498 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n"
|
|
]
|
|
],
|
|
[
|
|
[
|
|
0,
|
|
"Nr.: 4 / Zeit: 08:34:12.756"
|
|
],
|
|
[
|
|
1,
|
|
"Netzzugang"
|
|
],
|
|
[
|
|
2,
|
|
"Quelle: 02:00:00:00:02:12"
|
|
],
|
|
[
|
|
2,
|
|
"Ziel: 02:00:00:00:02:11"
|
|
],
|
|
[
|
|
2,
|
|
"Bemerkungen / Details: 0x800"
|
|
],
|
|
[
|
|
1,
|
|
"Vermittlung"
|
|
],
|
|
[
|
|
2,
|
|
"Quelle: 192.168.0.10"
|
|
],
|
|
[
|
|
2,
|
|
"Ziel: 192.168.0.20"
|
|
],
|
|
[
|
|
2,
|
|
"Protokoll: IP"
|
|
],
|
|
[
|
|
2,
|
|
"Bemerkungen / Details: Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
1,
|
|
"Transport"
|
|
],
|
|
[
|
|
2,
|
|
"Quelle: 53"
|
|
],
|
|
[
|
|
2,
|
|
"Ziel: 61663"
|
|
],
|
|
[
|
|
2,
|
|
"Protokoll: UDP"
|
|
],
|
|
[
|
|
1,
|
|
"Anwendung"
|
|
],
|
|
[
|
|
2,
|
|
"Protokoll: DNS"
|
|
],
|
|
[
|
|
2,
|
|
"Bemerkungen / Details (98 Bytes): "
|
|
],
|
|
[
|
|
3,
|
|
"ID=26498 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n"
|
|
]
|
|
],
|
|
[
|
|
[
|
|
0,
|
|
"Nr.: 5 / Zeit: 08:34:12.760"
|
|
],
|
|
[
|
|
1,
|
|
"Netzzugang"
|
|
],
|
|
[
|
|
2,
|
|
"Quelle: 02:00:00:00:02:11"
|
|
],
|
|
[
|
|
2,
|
|
"Ziel: FF:FF:FF:FF:FF:FF"
|
|
],
|
|
[
|
|
2,
|
|
"Bemerkungen / Details: 0x806"
|
|
],
|
|
[
|
|
1,
|
|
"Vermittlung"
|
|
],
|
|
[
|
|
2,
|
|
"Quelle: 192.168.0.20"
|
|
],
|
|
[
|
|
2,
|
|
"Ziel: 192.168.0.30"
|
|
],
|
|
[
|
|
2,
|
|
"Protokoll: ARP"
|
|
],
|
|
[
|
|
2,
|
|
"Bemerkungen / Details: "
|
|
],
|
|
[
|
|
3,
|
|
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
|
|
]
|
|
],
|
|
[
|
|
[
|
|
0,
|
|
"Nr.: 6 / Zeit: 08:34:12.983"
|
|
],
|
|
[
|
|
1,
|
|
"Netzzugang"
|
|
],
|
|
[
|
|
2,
|
|
"Quelle: 02:00:00:00:02:13"
|
|
],
|
|
[
|
|
2,
|
|
"Ziel: 02:00:00:00:02:11"
|
|
],
|
|
[
|
|
2,
|
|
"Bemerkungen / Details: 0x806"
|
|
],
|
|
[
|
|
1,
|
|
"Vermittlung"
|
|
],
|
|
[
|
|
2,
|
|
"Quelle: 192.168.0.30"
|
|
],
|
|
[
|
|
2,
|
|
"Ziel: 192.168.0.20"
|
|
],
|
|
[
|
|
2,
|
|
"Protokoll: ARP"
|
|
],
|
|
[
|
|
2,
|
|
"Bemerkungen / Details: "
|
|
],
|
|
[
|
|
3,
|
|
"MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]"
|
|
]
|
|
],
|
|
[
|
|
[
|
|
0,
|
|
"Nr.: 7 / Zeit: 08:34:12.984"
|
|
],
|
|
[
|
|
1,
|
|
"Netzzugang"
|
|
],
|
|
[
|
|
2,
|
|
"Quelle: 02:00:00:00:02:11"
|
|
],
|
|
[
|
|
2,
|
|
"Ziel: 02:00:00:00:02:13"
|
|
],
|
|
[
|
|
2,
|
|
"Bemerkungen / Details: 0x800"
|
|
],
|
|
[
|
|
1,
|
|
"Vermittlung"
|
|
],
|
|
[
|
|
2,
|
|
"Quelle: 192.168.0.20"
|
|
],
|
|
[
|
|
2,
|
|
"Ziel: 192.168.0.30"
|
|
],
|
|
[
|
|
2,
|
|
"Protokoll: IP"
|
|
],
|
|
[
|
|
2,
|
|
"Bemerkungen / Details: Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
1,
|
|
"Transport"
|
|
],
|
|
[
|
|
2,
|
|
"Quelle: 50668"
|
|
],
|
|
[
|
|
2,
|
|
"Ziel: 80"
|
|
],
|
|
[
|
|
2,
|
|
"Protokoll: TCP"
|
|
],
|
|
[
|
|
2,
|
|
"Bemerkungen / Details: SYN, SEQ: 2.000.000"
|
|
]
|
|
],
|
|
[
|
|
[
|
|
0,
|
|
"Nr.: 8 / Zeit: 08:34:13.207"
|
|
],
|
|
[
|
|
1,
|
|
"Netzzugang"
|
|
],
|
|
[
|
|
2,
|
|
"Quelle: 02:00:00:00:02:13"
|
|
],
|
|
[
|
|
2,
|
|
"Ziel: 02:00:00:00:02:11"
|
|
],
|
|
[
|
|
2,
|
|
"Bemerkungen / Details: 0x800"
|
|
],
|
|
[
|
|
1,
|
|
"Vermittlung"
|
|
],
|
|
[
|
|
2,
|
|
"Quelle: 192.168.0.30"
|
|
],
|
|
[
|
|
2,
|
|
"Ziel: 192.168.0.20"
|
|
],
|
|
[
|
|
2,
|
|
"Protokoll: IP"
|
|
],
|
|
[
|
|
2,
|
|
"Bemerkungen / Details: Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
1,
|
|
"Transport"
|
|
],
|
|
[
|
|
2,
|
|
"Quelle: 80"
|
|
],
|
|
[
|
|
2,
|
|
"Ziel: 50668"
|
|
],
|
|
[
|
|
2,
|
|
"Protokoll: TCP"
|
|
],
|
|
[
|
|
2,
|
|
"Bemerkungen / Details: SYN, SEQ: 1.000.000, ACK: 2.000.001"
|
|
]
|
|
],
|
|
[
|
|
[
|
|
0,
|
|
"Nr.: 9 / Zeit: 08:34:13.208"
|
|
],
|
|
[
|
|
1,
|
|
"Netzzugang"
|
|
],
|
|
[
|
|
2,
|
|
"Quelle: 02:00:00:00:02:11"
|
|
],
|
|
[
|
|
2,
|
|
"Ziel: 02:00:00:00:02:13"
|
|
],
|
|
[
|
|
2,
|
|
"Bemerkungen / Details: 0x800"
|
|
],
|
|
[
|
|
1,
|
|
"Vermittlung"
|
|
],
|
|
[
|
|
2,
|
|
"Quelle: 192.168.0.20"
|
|
],
|
|
[
|
|
2,
|
|
"Ziel: 192.168.0.30"
|
|
],
|
|
[
|
|
2,
|
|
"Protokoll: IP"
|
|
],
|
|
[
|
|
2,
|
|
"Bemerkungen / Details: Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
1,
|
|
"Transport"
|
|
],
|
|
[
|
|
2,
|
|
"Quelle: 50668"
|
|
],
|
|
[
|
|
2,
|
|
"Ziel: 80"
|
|
],
|
|
[
|
|
2,
|
|
"Protokoll: TCP"
|
|
],
|
|
[
|
|
2,
|
|
"Bemerkungen / Details: SEQ: 2.000.001, ACK: 1.000.001"
|
|
]
|
|
],
|
|
[
|
|
[
|
|
0,
|
|
"Nr.: 10 / Zeit: 08:34:13.264"
|
|
],
|
|
[
|
|
1,
|
|
"Netzzugang"
|
|
],
|
|
[
|
|
2,
|
|
"Quelle: 02:00:00:00:02:11"
|
|
],
|
|
[
|
|
2,
|
|
"Ziel: 02:00:00:00:02:13"
|
|
],
|
|
[
|
|
2,
|
|
"Bemerkungen / Details: 0x800"
|
|
],
|
|
[
|
|
1,
|
|
"Vermittlung"
|
|
],
|
|
[
|
|
2,
|
|
"Quelle: 192.168.0.20"
|
|
],
|
|
[
|
|
2,
|
|
"Ziel: 192.168.0.30"
|
|
],
|
|
[
|
|
2,
|
|
"Protokoll: IP"
|
|
],
|
|
[
|
|
2,
|
|
"Bemerkungen / Details: Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
1,
|
|
"Transport"
|
|
],
|
|
[
|
|
2,
|
|
"Quelle: 50668"
|
|
],
|
|
[
|
|
2,
|
|
"Ziel: 80"
|
|
],
|
|
[
|
|
2,
|
|
"Protokoll: TCP"
|
|
],
|
|
[
|
|
2,
|
|
"Bemerkungen / Details: SEQ: 2.000.001"
|
|
],
|
|
[
|
|
1,
|
|
"Anwendung"
|
|
],
|
|
[
|
|
2,
|
|
"Protokoll: HTTP"
|
|
],
|
|
[
|
|
2,
|
|
"Bemerkungen / Details (43 Bytes): "
|
|
],
|
|
[
|
|
3,
|
|
"GET /text.txt HTTP/1.1\nHost: www.filius.de\n"
|
|
]
|
|
],
|
|
[
|
|
[
|
|
0,
|
|
"Nr.: 11 / Zeit: 08:34:13.486"
|
|
],
|
|
[
|
|
1,
|
|
"Netzzugang"
|
|
],
|
|
[
|
|
2,
|
|
"Quelle: 02:00:00:00:02:13"
|
|
],
|
|
[
|
|
2,
|
|
"Ziel: 02:00:00:00:02:11"
|
|
],
|
|
[
|
|
2,
|
|
"Bemerkungen / Details: 0x800"
|
|
],
|
|
[
|
|
1,
|
|
"Vermittlung"
|
|
],
|
|
[
|
|
2,
|
|
"Quelle: 192.168.0.30"
|
|
],
|
|
[
|
|
2,
|
|
"Ziel: 192.168.0.20"
|
|
],
|
|
[
|
|
2,
|
|
"Protokoll: IP"
|
|
],
|
|
[
|
|
2,
|
|
"Bemerkungen / Details: Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
1,
|
|
"Transport"
|
|
],
|
|
[
|
|
2,
|
|
"Quelle: 80"
|
|
],
|
|
[
|
|
2,
|
|
"Ziel: 50668"
|
|
],
|
|
[
|
|
2,
|
|
"Protokoll: TCP"
|
|
],
|
|
[
|
|
2,
|
|
"Bemerkungen / Details: SEQ: 1.000.001, ACK: 2.000.044"
|
|
]
|
|
],
|
|
[
|
|
[
|
|
0,
|
|
"Nr.: 12 / Zeit: 08:34:13.542"
|
|
],
|
|
[
|
|
1,
|
|
"Netzzugang"
|
|
],
|
|
[
|
|
2,
|
|
"Quelle: 02:00:00:00:02:13"
|
|
],
|
|
[
|
|
2,
|
|
"Ziel: 02:00:00:00:02:11"
|
|
],
|
|
[
|
|
2,
|
|
"Bemerkungen / Details: 0x800"
|
|
],
|
|
[
|
|
1,
|
|
"Vermittlung"
|
|
],
|
|
[
|
|
2,
|
|
"Quelle: 192.168.0.30"
|
|
],
|
|
[
|
|
2,
|
|
"Ziel: 192.168.0.20"
|
|
],
|
|
[
|
|
2,
|
|
"Protokoll: IP"
|
|
],
|
|
[
|
|
2,
|
|
"Bemerkungen / Details: Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
1,
|
|
"Transport"
|
|
],
|
|
[
|
|
2,
|
|
"Quelle: 80"
|
|
],
|
|
[
|
|
2,
|
|
"Ziel: 50668"
|
|
],
|
|
[
|
|
2,
|
|
"Protokoll: TCP"
|
|
],
|
|
[
|
|
2,
|
|
"Bemerkungen / Details: SEQ: 1.000.001"
|
|
],
|
|
[
|
|
1,
|
|
"Anwendung"
|
|
],
|
|
[
|
|
2,
|
|
"Protokoll: HTTP"
|
|
],
|
|
[
|
|
2,
|
|
"Bemerkungen / Details (62 Bytes): "
|
|
],
|
|
[
|
|
3,
|
|
"HTTP/1.1 200 OK\nContent-type: text/plain\n\nNur Text\nzwei Zeilen"
|
|
]
|
|
],
|
|
[
|
|
[
|
|
0,
|
|
"Nr.: 13 / Zeit: 08:34:13.543"
|
|
],
|
|
[
|
|
1,
|
|
"Netzzugang"
|
|
],
|
|
[
|
|
2,
|
|
"Quelle: 02:00:00:00:02:11"
|
|
],
|
|
[
|
|
2,
|
|
"Ziel: 02:00:00:00:02:13"
|
|
],
|
|
[
|
|
2,
|
|
"Bemerkungen / Details: 0x800"
|
|
],
|
|
[
|
|
1,
|
|
"Vermittlung"
|
|
],
|
|
[
|
|
2,
|
|
"Quelle: 192.168.0.20"
|
|
],
|
|
[
|
|
2,
|
|
"Ziel: 192.168.0.30"
|
|
],
|
|
[
|
|
2,
|
|
"Protokoll: IP"
|
|
],
|
|
[
|
|
2,
|
|
"Bemerkungen / Details: Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
1,
|
|
"Transport"
|
|
],
|
|
[
|
|
2,
|
|
"Quelle: 50668"
|
|
],
|
|
[
|
|
2,
|
|
"Ziel: 80"
|
|
],
|
|
[
|
|
2,
|
|
"Protokoll: TCP"
|
|
],
|
|
[
|
|
2,
|
|
"Bemerkungen / Details: SEQ: 2.000.044, ACK: 1.000.063"
|
|
]
|
|
],
|
|
[
|
|
[
|
|
0,
|
|
"Nr.: 14 / Zeit: 08:34:13.598"
|
|
],
|
|
[
|
|
1,
|
|
"Netzzugang"
|
|
],
|
|
[
|
|
2,
|
|
"Quelle: 02:00:00:00:02:11"
|
|
],
|
|
[
|
|
2,
|
|
"Ziel: 02:00:00:00:02:13"
|
|
],
|
|
[
|
|
2,
|
|
"Bemerkungen / Details: 0x800"
|
|
],
|
|
[
|
|
1,
|
|
"Vermittlung"
|
|
],
|
|
[
|
|
2,
|
|
"Quelle: 192.168.0.20"
|
|
],
|
|
[
|
|
2,
|
|
"Ziel: 192.168.0.30"
|
|
],
|
|
[
|
|
2,
|
|
"Protokoll: IP"
|
|
],
|
|
[
|
|
2,
|
|
"Bemerkungen / Details: Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
1,
|
|
"Transport"
|
|
],
|
|
[
|
|
2,
|
|
"Quelle: 50668"
|
|
],
|
|
[
|
|
2,
|
|
"Ziel: 80"
|
|
],
|
|
[
|
|
2,
|
|
"Protokoll: TCP"
|
|
],
|
|
[
|
|
2,
|
|
"Bemerkungen / Details: FIN, SEQ: 2.000.044"
|
|
]
|
|
],
|
|
[
|
|
[
|
|
0,
|
|
"Nr.: 15 / Zeit: 08:34:13.821"
|
|
],
|
|
[
|
|
1,
|
|
"Netzzugang"
|
|
],
|
|
[
|
|
2,
|
|
"Quelle: 02:00:00:00:02:13"
|
|
],
|
|
[
|
|
2,
|
|
"Ziel: 02:00:00:00:02:11"
|
|
],
|
|
[
|
|
2,
|
|
"Bemerkungen / Details: 0x800"
|
|
],
|
|
[
|
|
1,
|
|
"Vermittlung"
|
|
],
|
|
[
|
|
2,
|
|
"Quelle: 192.168.0.30"
|
|
],
|
|
[
|
|
2,
|
|
"Ziel: 192.168.0.20"
|
|
],
|
|
[
|
|
2,
|
|
"Protokoll: IP"
|
|
],
|
|
[
|
|
2,
|
|
"Bemerkungen / Details: Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
1,
|
|
"Transport"
|
|
],
|
|
[
|
|
2,
|
|
"Quelle: 80"
|
|
],
|
|
[
|
|
2,
|
|
"Ziel: 50668"
|
|
],
|
|
[
|
|
2,
|
|
"Protokoll: TCP"
|
|
],
|
|
[
|
|
2,
|
|
"Bemerkungen / Details: SEQ: 1.000.063, ACK: 2.000.045"
|
|
]
|
|
],
|
|
[
|
|
[
|
|
0,
|
|
"Nr.: 16 / Zeit: 08:34:13.877"
|
|
],
|
|
[
|
|
1,
|
|
"Netzzugang"
|
|
],
|
|
[
|
|
2,
|
|
"Quelle: 02:00:00:00:02:13"
|
|
],
|
|
[
|
|
2,
|
|
"Ziel: 02:00:00:00:02:11"
|
|
],
|
|
[
|
|
2,
|
|
"Bemerkungen / Details: 0x800"
|
|
],
|
|
[
|
|
1,
|
|
"Vermittlung"
|
|
],
|
|
[
|
|
2,
|
|
"Quelle: 192.168.0.30"
|
|
],
|
|
[
|
|
2,
|
|
"Ziel: 192.168.0.20"
|
|
],
|
|
[
|
|
2,
|
|
"Protokoll: IP"
|
|
],
|
|
[
|
|
2,
|
|
"Bemerkungen / Details: Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
1,
|
|
"Transport"
|
|
],
|
|
[
|
|
2,
|
|
"Quelle: 80"
|
|
],
|
|
[
|
|
2,
|
|
"Ziel: 50668"
|
|
],
|
|
[
|
|
2,
|
|
"Protokoll: TCP"
|
|
],
|
|
[
|
|
2,
|
|
"Bemerkungen / Details: FIN, SEQ: 1.000.063"
|
|
]
|
|
],
|
|
[
|
|
[
|
|
0,
|
|
"Nr.: 17 / Zeit: 08:34:13.878"
|
|
],
|
|
[
|
|
1,
|
|
"Netzzugang"
|
|
],
|
|
[
|
|
2,
|
|
"Quelle: 02:00:00:00:02:11"
|
|
],
|
|
[
|
|
2,
|
|
"Ziel: 02:00:00:00:02:13"
|
|
],
|
|
[
|
|
2,
|
|
"Bemerkungen / Details: 0x800"
|
|
],
|
|
[
|
|
1,
|
|
"Vermittlung"
|
|
],
|
|
[
|
|
2,
|
|
"Quelle: 192.168.0.20"
|
|
],
|
|
[
|
|
2,
|
|
"Ziel: 192.168.0.30"
|
|
],
|
|
[
|
|
2,
|
|
"Protokoll: IP"
|
|
],
|
|
[
|
|
2,
|
|
"Bemerkungen / Details: Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
1,
|
|
"Transport"
|
|
],
|
|
[
|
|
2,
|
|
"Quelle: 50668"
|
|
],
|
|
[
|
|
2,
|
|
"Ziel: 80"
|
|
],
|
|
[
|
|
2,
|
|
"Protokoll: TCP"
|
|
],
|
|
[
|
|
2,
|
|
"Bemerkungen / Details: SEQ: 2.000.045, ACK: 1.000.064"
|
|
]
|
|
]
|
|
],
|
|
"layered": [
|
|
[
|
|
"1",
|
|
"08:34:12.286",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"08:34:12.286",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
],
|
|
[
|
|
"2",
|
|
"08:34:12.523",
|
|
"02:00:00:00:02:12",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"08:34:12.523",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"3",
|
|
"08:34:12.526",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"08:34:12.526",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"3",
|
|
"08:34:12.526",
|
|
"61663",
|
|
"53",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"3",
|
|
"08:34:12.526",
|
|
null,
|
|
null,
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=26498 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n"
|
|
],
|
|
[
|
|
"4",
|
|
"08:34:12.756",
|
|
"02:00:00:00:02:12",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"08:34:12.756",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"08:34:12.756",
|
|
"53",
|
|
"61663",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"4",
|
|
"08:34:12.756",
|
|
null,
|
|
null,
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=26498 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n"
|
|
],
|
|
[
|
|
"5",
|
|
"08:34:12.760",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"5",
|
|
"08:34:12.760",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
|
|
],
|
|
[
|
|
"6",
|
|
"08:34:12.983",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"6",
|
|
"08:34:12.983",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"7",
|
|
"08:34:12.984",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"08:34:12.984",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"08:34:12.984",
|
|
"50668",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 2.000.000"
|
|
],
|
|
[
|
|
"8",
|
|
"08:34:13.207",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"08:34:13.207",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"08:34:13.207",
|
|
"80",
|
|
"50668",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 1.000.000, ACK: 2.000.001"
|
|
],
|
|
[
|
|
"9",
|
|
"08:34:13.208",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"08:34:13.208",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"08:34:13.208",
|
|
"50668",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001, ACK: 1.000.001"
|
|
],
|
|
[
|
|
"10",
|
|
"08:34:13.264",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"08:34:13.264",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"10",
|
|
"08:34:13.264",
|
|
"50668",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001"
|
|
],
|
|
[
|
|
"10",
|
|
"08:34:13.264",
|
|
null,
|
|
null,
|
|
"HTTP",
|
|
"Anwendung",
|
|
"GET /text.txt HTTP/1.1\nHost: www.filius.de\n"
|
|
],
|
|
[
|
|
"11",
|
|
"08:34:13.486",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"11",
|
|
"08:34:13.486",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"11",
|
|
"08:34:13.486",
|
|
"80",
|
|
"50668",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001, ACK: 2.000.044"
|
|
],
|
|
[
|
|
"12",
|
|
"08:34:13.542",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"12",
|
|
"08:34:13.542",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"12",
|
|
"08:34:13.542",
|
|
"80",
|
|
"50668",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001"
|
|
],
|
|
[
|
|
"12",
|
|
"08:34:13.542",
|
|
null,
|
|
null,
|
|
"HTTP",
|
|
"Anwendung",
|
|
"HTTP/1.1 200 OK\nContent-type: text/plain\n\nNur Text\nzwei Zeilen"
|
|
],
|
|
[
|
|
"13",
|
|
"08:34:13.543",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"13",
|
|
"08:34:13.543",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"13",
|
|
"08:34:13.543",
|
|
"50668",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.044, ACK: 1.000.063"
|
|
],
|
|
[
|
|
"14",
|
|
"08:34:13.598",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"14",
|
|
"08:34:13.598",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"14",
|
|
"08:34:13.598",
|
|
"50668",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 2.000.044"
|
|
],
|
|
[
|
|
"15",
|
|
"08:34:13.821",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"15",
|
|
"08:34:13.821",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"15",
|
|
"08:34:13.821",
|
|
"80",
|
|
"50668",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.063, ACK: 2.000.045"
|
|
],
|
|
[
|
|
"16",
|
|
"08:34:13.877",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"16",
|
|
"08:34:13.877",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"16",
|
|
"08:34:13.877",
|
|
"80",
|
|
"50668",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 1.000.063"
|
|
],
|
|
[
|
|
"17",
|
|
"08:34:13.878",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"17",
|
|
"08:34:13.878",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"17",
|
|
"08:34:13.878",
|
|
"50668",
|
|
"80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.045, ACK: 1.000.064"
|
|
]
|
|
],
|
|
"export": "+============+======================+======================+======================+======================+======================+==========================================+\r\n| Nr. | Zeit | Quelle | Ziel | Protokoll | Schicht | Bemerkungen / Details | \r\n+============+======================+======================+======================+======================+======================+==========================================+\r\n| 1 | 08:34:12.286 | 192.168.0.20 | 192.168.0.10 | ARP | Vermittlung | Suche nach MAC für 192.168.0.10 | \r\n| | | | | | | [op=REQUEST, | \r\n| | | | | | | sender=02:00:00:00:02:11|192.168.0.20, | \r\n| | | | | | | target=FF:FF:FF:FF:FF:FF|192.168.0.10] | \r\n+------------+----------------------+----------------------+----------------------+----------------------+----------------------+------------------------------------------+\r\n| 2 | 08:34:12.523 | 192.168.0.10 | 192.168.0.20 | ARP | Vermittlung | MAC ist 02:00:00:00:02:12 [op=REPLY, | \r\n| | | | | | | sender=02:00:00:00:02:12|192.168.0.10, | \r\n| | | | | | | target=02:00:00:00:02:11|192.168.0.20] | \r\n+------------+----------------------+----------------------+----------------------+----------------------+----------------------+------------------------------------------+\r\n| 3 | 08:34:12.526 | 192.168.0.20:61663 | 192.168.0.10:53 | DNS | Anwendung | ID=26498 QR=0 RCODE=0 QDCOUNT=1 | \r\n| | | | | | | ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 | \r\n| | | | | | | www.filius.de. A IN | \r\n+------------+----------------------+----------------------+----------------------+----------------------+----------------------+------------------------------------------+\r\n| 4 | 08:34:12.756 | 192.168.0.10:53 | 192.168.0.20:61663 | DNS | Anwendung | ID=26498 QR=1 RCODE=0 QDCOUNT=0 | \r\n| | | | | | | ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 | \r\n| | | | | | | www.filius.de. A 3600 192.168.0.30 | \r\n+------------+----------------------+----------------------+----------------------+----------------------+----------------------+------------------------------------------+\r\n| 5 | 08:34:12.760 | 192.168.0.20 | 192.168.0.30 | ARP | Vermittlung | Suche nach MAC für 192.168.0.30 | \r\n| | | | | | | [op=REQUEST, | \r\n| | | | | | | sender=02:00:00:00:02:11|192.168.0.20, | \r\n| | | | | | | target=FF:FF:FF:FF:FF:FF|192.168.0.30] | \r\n+------------+----------------------+----------------------+----------------------+----------------------+----------------------+------------------------------------------+\r\n| 6 | 08:34:12.983 | 192.168.0.30 | 192.168.0.20 | ARP | Vermittlung | MAC ist 02:00:00:00:02:13 [op=REPLY, | \r\n| | | | | | | sender=02:00:00:00:02:13|192.168.0.30, | \r\n| | | | | | | target=02:00:00:00:02:11|192.168.0.20] | \r\n+------------+----------------------+----------------------+----------------------+----------------------+----------------------+------------------------------------------+\r\n| 7 | 08:34:12.984 | 192.168.0.20:50668 | 192.168.0.30:80 | TCP | Transport | SYN, SEQ: 2.000.000 | \r\n+------------+----------------------+----------------------+----------------------+----------------------+----------------------+------------------------------------------+\r\n| 8 | 08:34:13.207 | 192.168.0.30:80 | 192.168.0.20:50668 | TCP | Transport | SYN, SEQ: 1.000.000, ACK: 2.000.001 | \r\n+------------+----------------------+----------------------+----------------------+----------------------+----------------------+------------------------------------------+\r\n| 9 | 08:34:13.208 | 192.168.0.20:50668 | 192.168.0.30:80 | TCP | Transport | SEQ: 2.000.001, ACK: 1.000.001 | \r\n+------------+----------------------+----------------------+----------------------+----------------------+----------------------+------------------------------------------+\r\n| 10 | 08:34:13.264 | 192.168.0.20:50668 | 192.168.0.30:80 | HTTP | Anwendung | GET /text.txt HTTP/1.1 Host: | \r\n| | | | | | | www.filius.de | \r\n+------------+----------------------+----------------------+----------------------+----------------------+----------------------+------------------------------------------+\r\n| 11 | 08:34:13.486 | 192.168.0.30:80 | 192.168.0.20:50668 | TCP | Transport | SEQ: 1.000.001, ACK: 2.000.044 | \r\n+------------+----------------------+----------------------+----------------------+----------------------+----------------------+------------------------------------------+\r\n| 12 | 08:34:13.542 | 192.168.0.30:80 | 192.168.0.20:50668 | HTTP | Anwendung | HTTP/1.1 200 OK Content-type: text/plain | \r\n| | | | | | | Nur Text zwei Zeilen | \r\n+------------+----------------------+----------------------+----------------------+----------------------+----------------------+------------------------------------------+\r\n| 13 | 08:34:13.543 | 192.168.0.20:50668 | 192.168.0.30:80 | TCP | Transport | SEQ: 2.000.044, ACK: 1.000.063 | \r\n+------------+----------------------+----------------------+----------------------+----------------------+----------------------+------------------------------------------+\r\n| 14 | 08:34:13.598 | 192.168.0.20:50668 | 192.168.0.30:80 | TCP | Transport | FIN, SEQ: 2.000.044 | \r\n+------------+----------------------+----------------------+----------------------+----------------------+----------------------+------------------------------------------+\r\n| 15 | 08:34:13.821 | 192.168.0.30:80 | 192.168.0.20:50668 | TCP | Transport | SEQ: 1.000.063, ACK: 2.000.045 | \r\n+------------+----------------------+----------------------+----------------------+----------------------+----------------------+------------------------------------------+\r\n| 16 | 08:34:13.877 | 192.168.0.30:80 | 192.168.0.20:50668 | TCP | Transport | FIN, SEQ: 1.000.063 | \r\n+------------+----------------------+----------------------+----------------------+----------------------+----------------------+------------------------------------------+\r\n| 17 | 08:34:13.878 | 192.168.0.20:50668 | 192.168.0.30:80 | TCP | Transport | SEQ: 2.000.045, ACK: 1.000.064 | \r\n+------------+----------------------+----------------------+----------------------+----------------------+----------------------+------------------------------------------+\r\n"
|
|
},
|
|
{
|
|
"step": "the server's card beside it",
|
|
"at": 15584,
|
|
"titles": [
|
|
"Anna - 192.168.0.20",
|
|
"192.168.0.30"
|
|
],
|
|
"selected": 1,
|
|
"visible": true,
|
|
"tables": {
|
|
"00000000-0000-0000-0000-000000000201": {
|
|
"rows": [
|
|
[
|
|
"1",
|
|
"08:34:12.286",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
],
|
|
[
|
|
"2",
|
|
"08:34:12.523",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"3",
|
|
"08:34:12.526",
|
|
"192.168.0.20:61663",
|
|
"192.168.0.10:53",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=26498 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n"
|
|
],
|
|
[
|
|
"4",
|
|
"08:34:12.756",
|
|
"192.168.0.10:53",
|
|
"192.168.0.20:61663",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=26498 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n"
|
|
],
|
|
[
|
|
"5",
|
|
"08:34:12.760",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
|
|
],
|
|
[
|
|
"6",
|
|
"08:34:12.983",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"7",
|
|
"08:34:12.984",
|
|
"192.168.0.20:50668",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 2.000.000"
|
|
],
|
|
[
|
|
"8",
|
|
"08:34:13.207",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:50668",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 1.000.000, ACK: 2.000.001"
|
|
],
|
|
[
|
|
"9",
|
|
"08:34:13.208",
|
|
"192.168.0.20:50668",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001, ACK: 1.000.001"
|
|
],
|
|
[
|
|
"10",
|
|
"08:34:13.264",
|
|
"192.168.0.20:50668",
|
|
"192.168.0.30:80",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"GET /text.txt HTTP/1.1\nHost: www.filius.de\n"
|
|
],
|
|
[
|
|
"11",
|
|
"08:34:13.486",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:50668",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001, ACK: 2.000.044"
|
|
],
|
|
[
|
|
"12",
|
|
"08:34:13.542",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:50668",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"HTTP/1.1 200 OK\nContent-type: text/plain\n\nNur Text\nzwei Zeilen"
|
|
],
|
|
[
|
|
"13",
|
|
"08:34:13.543",
|
|
"192.168.0.20:50668",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.044, ACK: 1.000.063"
|
|
],
|
|
[
|
|
"14",
|
|
"08:34:13.598",
|
|
"192.168.0.20:50668",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 2.000.044"
|
|
],
|
|
[
|
|
"15",
|
|
"08:34:13.821",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:50668",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.063, ACK: 2.000.045"
|
|
],
|
|
[
|
|
"16",
|
|
"08:34:13.877",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:50668",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 1.000.063"
|
|
],
|
|
[
|
|
"17",
|
|
"08:34:13.878",
|
|
"192.168.0.20:50668",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.045, ACK: 1.000.064"
|
|
]
|
|
],
|
|
"layerRows": [
|
|
[
|
|
"1",
|
|
"08:34:12.286",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"08:34:12.286",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
],
|
|
[
|
|
"2",
|
|
"08:34:12.523",
|
|
"02:00:00:00:02:12",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"08:34:12.523",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"3",
|
|
"08:34:12.526",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"08:34:12.526",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"3",
|
|
"08:34:12.526",
|
|
"192.168.0.20:61663",
|
|
"192.168.0.10:53",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"3",
|
|
"08:34:12.526",
|
|
"192.168.0.20:61663",
|
|
"192.168.0.10:53",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=26498 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n"
|
|
],
|
|
[
|
|
"4",
|
|
"08:34:12.756",
|
|
"02:00:00:00:02:12",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"08:34:12.756",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"08:34:12.756",
|
|
"192.168.0.10:53",
|
|
"192.168.0.20:61663",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"4",
|
|
"08:34:12.756",
|
|
"192.168.0.10:53",
|
|
"192.168.0.20:61663",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=26498 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n"
|
|
],
|
|
[
|
|
"5",
|
|
"08:34:12.760",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"5",
|
|
"08:34:12.760",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
|
|
],
|
|
[
|
|
"6",
|
|
"08:34:12.983",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"6",
|
|
"08:34:12.983",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"7",
|
|
"08:34:12.984",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"08:34:12.984",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"08:34:12.984",
|
|
"192.168.0.20:50668",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 2.000.000"
|
|
],
|
|
[
|
|
"8",
|
|
"08:34:13.207",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"08:34:13.207",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"08:34:13.207",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:50668",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 1.000.000, ACK: 2.000.001"
|
|
],
|
|
[
|
|
"9",
|
|
"08:34:13.208",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"08:34:13.208",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"08:34:13.208",
|
|
"192.168.0.20:50668",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001, ACK: 1.000.001"
|
|
],
|
|
[
|
|
"10",
|
|
"08:34:13.264",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"08:34:13.264",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"10",
|
|
"08:34:13.264",
|
|
"192.168.0.20:50668",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001"
|
|
],
|
|
[
|
|
"10",
|
|
"08:34:13.264",
|
|
"192.168.0.20:50668",
|
|
"192.168.0.30:80",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"GET /text.txt HTTP/1.1\nHost: www.filius.de\n"
|
|
],
|
|
[
|
|
"11",
|
|
"08:34:13.486",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"11",
|
|
"08:34:13.486",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"11",
|
|
"08:34:13.486",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:50668",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001, ACK: 2.000.044"
|
|
],
|
|
[
|
|
"12",
|
|
"08:34:13.542",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"12",
|
|
"08:34:13.542",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"12",
|
|
"08:34:13.542",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:50668",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001"
|
|
],
|
|
[
|
|
"12",
|
|
"08:34:13.542",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:50668",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"HTTP/1.1 200 OK\nContent-type: text/plain\n\nNur Text\nzwei Zeilen"
|
|
],
|
|
[
|
|
"13",
|
|
"08:34:13.543",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"13",
|
|
"08:34:13.543",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"13",
|
|
"08:34:13.543",
|
|
"192.168.0.20:50668",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.044, ACK: 1.000.063"
|
|
],
|
|
[
|
|
"14",
|
|
"08:34:13.598",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"14",
|
|
"08:34:13.598",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"14",
|
|
"08:34:13.598",
|
|
"192.168.0.20:50668",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 2.000.044"
|
|
],
|
|
[
|
|
"15",
|
|
"08:34:13.821",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"15",
|
|
"08:34:13.821",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"15",
|
|
"08:34:13.821",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:50668",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.063, ACK: 2.000.045"
|
|
],
|
|
[
|
|
"16",
|
|
"08:34:13.877",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"16",
|
|
"08:34:13.877",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"16",
|
|
"08:34:13.877",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:50668",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 1.000.063"
|
|
],
|
|
[
|
|
"17",
|
|
"08:34:13.878",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"17",
|
|
"08:34:13.878",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"17",
|
|
"08:34:13.878",
|
|
"192.168.0.20:50668",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.045, ACK: 1.000.064"
|
|
]
|
|
]
|
|
},
|
|
"00000000-0000-0000-0000-000000000203": {
|
|
"rows": [
|
|
[
|
|
"1",
|
|
"08:34:12.410",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
],
|
|
[
|
|
"2",
|
|
"08:34:12.872",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
|
|
],
|
|
[
|
|
"3",
|
|
"08:34:12.872",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"4",
|
|
"08:34:13.095",
|
|
"192.168.0.20:50668",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 2.000.000"
|
|
],
|
|
[
|
|
"5",
|
|
"08:34:13.096",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:50668",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 1.000.000, ACK: 2.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"08:34:13.319",
|
|
"192.168.0.20:50668",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001, ACK: 1.000.001"
|
|
],
|
|
[
|
|
"7",
|
|
"08:34:13.375",
|
|
"192.168.0.20:50668",
|
|
"192.168.0.30:80",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"GET /text.txt HTTP/1.1\nHost: www.filius.de\n"
|
|
],
|
|
[
|
|
"8",
|
|
"08:34:13.375",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:50668",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001, ACK: 2.000.044"
|
|
],
|
|
[
|
|
"9",
|
|
"08:34:13.431",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:50668",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"HTTP/1.1 200 OK\nContent-type: text/plain\n\nNur Text\nzwei Zeilen"
|
|
],
|
|
[
|
|
"10",
|
|
"08:34:13.654",
|
|
"192.168.0.20:50668",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.044, ACK: 1.000.063"
|
|
],
|
|
[
|
|
"11",
|
|
"08:34:13.709",
|
|
"192.168.0.20:50668",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 2.000.044"
|
|
],
|
|
[
|
|
"12",
|
|
"08:34:13.710",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:50668",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.063, ACK: 2.000.045"
|
|
],
|
|
[
|
|
"13",
|
|
"08:34:13.765",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:50668",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 1.000.063"
|
|
],
|
|
[
|
|
"14",
|
|
"08:34:13.989",
|
|
"192.168.0.20:50668",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.045, ACK: 1.000.064"
|
|
]
|
|
],
|
|
"layerRows": [
|
|
[
|
|
"1",
|
|
"08:34:12.410",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"08:34:12.410",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
],
|
|
[
|
|
"2",
|
|
"08:34:12.872",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"08:34:12.872",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
|
|
],
|
|
[
|
|
"3",
|
|
"08:34:12.872",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"3",
|
|
"08:34:12.872",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"4",
|
|
"08:34:13.095",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"08:34:13.095",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"08:34:13.095",
|
|
"192.168.0.20:50668",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 2.000.000"
|
|
],
|
|
[
|
|
"5",
|
|
"08:34:13.096",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"08:34:13.096",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"08:34:13.096",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:50668",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 1.000.000, ACK: 2.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"08:34:13.319",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"08:34:13.319",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"6",
|
|
"08:34:13.319",
|
|
"192.168.0.20:50668",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001, ACK: 1.000.001"
|
|
],
|
|
[
|
|
"7",
|
|
"08:34:13.375",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"08:34:13.375",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"08:34:13.375",
|
|
"192.168.0.20:50668",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001"
|
|
],
|
|
[
|
|
"7",
|
|
"08:34:13.375",
|
|
"192.168.0.20:50668",
|
|
"192.168.0.30:80",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"GET /text.txt HTTP/1.1\nHost: www.filius.de\n"
|
|
],
|
|
[
|
|
"8",
|
|
"08:34:13.375",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"08:34:13.375",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"08:34:13.375",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:50668",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001, ACK: 2.000.044"
|
|
],
|
|
[
|
|
"9",
|
|
"08:34:13.431",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"08:34:13.431",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"08:34:13.431",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:50668",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001"
|
|
],
|
|
[
|
|
"9",
|
|
"08:34:13.431",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:50668",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"HTTP/1.1 200 OK\nContent-type: text/plain\n\nNur Text\nzwei Zeilen"
|
|
],
|
|
[
|
|
"10",
|
|
"08:34:13.654",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"08:34:13.654",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"10",
|
|
"08:34:13.654",
|
|
"192.168.0.20:50668",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.044, ACK: 1.000.063"
|
|
],
|
|
[
|
|
"11",
|
|
"08:34:13.709",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"11",
|
|
"08:34:13.709",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"11",
|
|
"08:34:13.709",
|
|
"192.168.0.20:50668",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 2.000.044"
|
|
],
|
|
[
|
|
"12",
|
|
"08:34:13.710",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"12",
|
|
"08:34:13.710",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"12",
|
|
"08:34:13.710",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:50668",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.063, ACK: 2.000.045"
|
|
],
|
|
[
|
|
"13",
|
|
"08:34:13.765",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"13",
|
|
"08:34:13.765",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"13",
|
|
"08:34:13.765",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:50668",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 1.000.063"
|
|
],
|
|
[
|
|
"14",
|
|
"08:34:13.989",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"14",
|
|
"08:34:13.989",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"14",
|
|
"08:34:13.989",
|
|
"192.168.0.20:50668",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.045, ACK: 1.000.064"
|
|
]
|
|
]
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"step": "the browser's card again",
|
|
"at": 15889,
|
|
"titles": [
|
|
"Anna - 192.168.0.20",
|
|
"192.168.0.30"
|
|
],
|
|
"selected": 0,
|
|
"visible": true,
|
|
"tables": {
|
|
"00000000-0000-0000-0000-000000000201": {
|
|
"rows": [
|
|
[
|
|
"1",
|
|
"08:34:12.286",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
],
|
|
[
|
|
"2",
|
|
"08:34:12.523",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"3",
|
|
"08:34:12.526",
|
|
"192.168.0.20:61663",
|
|
"192.168.0.10:53",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=26498 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n"
|
|
],
|
|
[
|
|
"4",
|
|
"08:34:12.756",
|
|
"192.168.0.10:53",
|
|
"192.168.0.20:61663",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=26498 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n"
|
|
],
|
|
[
|
|
"5",
|
|
"08:34:12.760",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
|
|
],
|
|
[
|
|
"6",
|
|
"08:34:12.983",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"7",
|
|
"08:34:12.984",
|
|
"192.168.0.20:50668",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 2.000.000"
|
|
],
|
|
[
|
|
"8",
|
|
"08:34:13.207",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:50668",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 1.000.000, ACK: 2.000.001"
|
|
],
|
|
[
|
|
"9",
|
|
"08:34:13.208",
|
|
"192.168.0.20:50668",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001, ACK: 1.000.001"
|
|
],
|
|
[
|
|
"10",
|
|
"08:34:13.264",
|
|
"192.168.0.20:50668",
|
|
"192.168.0.30:80",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"GET /text.txt HTTP/1.1\nHost: www.filius.de\n"
|
|
],
|
|
[
|
|
"11",
|
|
"08:34:13.486",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:50668",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001, ACK: 2.000.044"
|
|
],
|
|
[
|
|
"12",
|
|
"08:34:13.542",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:50668",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"HTTP/1.1 200 OK\nContent-type: text/plain\n\nNur Text\nzwei Zeilen"
|
|
],
|
|
[
|
|
"13",
|
|
"08:34:13.543",
|
|
"192.168.0.20:50668",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.044, ACK: 1.000.063"
|
|
],
|
|
[
|
|
"14",
|
|
"08:34:13.598",
|
|
"192.168.0.20:50668",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 2.000.044"
|
|
],
|
|
[
|
|
"15",
|
|
"08:34:13.821",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:50668",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.063, ACK: 2.000.045"
|
|
],
|
|
[
|
|
"16",
|
|
"08:34:13.877",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:50668",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 1.000.063"
|
|
],
|
|
[
|
|
"17",
|
|
"08:34:13.878",
|
|
"192.168.0.20:50668",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.045, ACK: 1.000.064"
|
|
]
|
|
],
|
|
"layerRows": [
|
|
[
|
|
"1",
|
|
"08:34:12.286",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"08:34:12.286",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
],
|
|
[
|
|
"2",
|
|
"08:34:12.523",
|
|
"02:00:00:00:02:12",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"08:34:12.523",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"3",
|
|
"08:34:12.526",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"08:34:12.526",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"3",
|
|
"08:34:12.526",
|
|
"192.168.0.20:61663",
|
|
"192.168.0.10:53",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"3",
|
|
"08:34:12.526",
|
|
"192.168.0.20:61663",
|
|
"192.168.0.10:53",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=26498 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n"
|
|
],
|
|
[
|
|
"4",
|
|
"08:34:12.756",
|
|
"02:00:00:00:02:12",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"08:34:12.756",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"08:34:12.756",
|
|
"192.168.0.10:53",
|
|
"192.168.0.20:61663",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"4",
|
|
"08:34:12.756",
|
|
"192.168.0.10:53",
|
|
"192.168.0.20:61663",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=26498 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n"
|
|
],
|
|
[
|
|
"5",
|
|
"08:34:12.760",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"5",
|
|
"08:34:12.760",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
|
|
],
|
|
[
|
|
"6",
|
|
"08:34:12.983",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"6",
|
|
"08:34:12.983",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"7",
|
|
"08:34:12.984",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"08:34:12.984",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"08:34:12.984",
|
|
"192.168.0.20:50668",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 2.000.000"
|
|
],
|
|
[
|
|
"8",
|
|
"08:34:13.207",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"08:34:13.207",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"08:34:13.207",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:50668",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 1.000.000, ACK: 2.000.001"
|
|
],
|
|
[
|
|
"9",
|
|
"08:34:13.208",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"08:34:13.208",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"08:34:13.208",
|
|
"192.168.0.20:50668",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001, ACK: 1.000.001"
|
|
],
|
|
[
|
|
"10",
|
|
"08:34:13.264",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"08:34:13.264",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"10",
|
|
"08:34:13.264",
|
|
"192.168.0.20:50668",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001"
|
|
],
|
|
[
|
|
"10",
|
|
"08:34:13.264",
|
|
"192.168.0.20:50668",
|
|
"192.168.0.30:80",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"GET /text.txt HTTP/1.1\nHost: www.filius.de\n"
|
|
],
|
|
[
|
|
"11",
|
|
"08:34:13.486",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"11",
|
|
"08:34:13.486",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"11",
|
|
"08:34:13.486",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:50668",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001, ACK: 2.000.044"
|
|
],
|
|
[
|
|
"12",
|
|
"08:34:13.542",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"12",
|
|
"08:34:13.542",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"12",
|
|
"08:34:13.542",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:50668",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001"
|
|
],
|
|
[
|
|
"12",
|
|
"08:34:13.542",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:50668",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"HTTP/1.1 200 OK\nContent-type: text/plain\n\nNur Text\nzwei Zeilen"
|
|
],
|
|
[
|
|
"13",
|
|
"08:34:13.543",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"13",
|
|
"08:34:13.543",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"13",
|
|
"08:34:13.543",
|
|
"192.168.0.20:50668",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.044, ACK: 1.000.063"
|
|
],
|
|
[
|
|
"14",
|
|
"08:34:13.598",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"14",
|
|
"08:34:13.598",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"14",
|
|
"08:34:13.598",
|
|
"192.168.0.20:50668",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 2.000.044"
|
|
],
|
|
[
|
|
"15",
|
|
"08:34:13.821",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"15",
|
|
"08:34:13.821",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"15",
|
|
"08:34:13.821",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:50668",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.063, ACK: 2.000.045"
|
|
],
|
|
[
|
|
"16",
|
|
"08:34:13.877",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"16",
|
|
"08:34:13.877",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"16",
|
|
"08:34:13.877",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:50668",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 1.000.063"
|
|
],
|
|
[
|
|
"17",
|
|
"08:34:13.878",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"17",
|
|
"08:34:13.878",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"17",
|
|
"08:34:13.878",
|
|
"192.168.0.20:50668",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.045, ACK: 1.000.064"
|
|
]
|
|
]
|
|
},
|
|
"00000000-0000-0000-0000-000000000203": {
|
|
"rows": [
|
|
[
|
|
"1",
|
|
"08:34:12.410",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
],
|
|
[
|
|
"2",
|
|
"08:34:12.872",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
|
|
],
|
|
[
|
|
"3",
|
|
"08:34:12.872",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"4",
|
|
"08:34:13.095",
|
|
"192.168.0.20:50668",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 2.000.000"
|
|
],
|
|
[
|
|
"5",
|
|
"08:34:13.096",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:50668",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 1.000.000, ACK: 2.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"08:34:13.319",
|
|
"192.168.0.20:50668",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001, ACK: 1.000.001"
|
|
],
|
|
[
|
|
"7",
|
|
"08:34:13.375",
|
|
"192.168.0.20:50668",
|
|
"192.168.0.30:80",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"GET /text.txt HTTP/1.1\nHost: www.filius.de\n"
|
|
],
|
|
[
|
|
"8",
|
|
"08:34:13.375",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:50668",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001, ACK: 2.000.044"
|
|
],
|
|
[
|
|
"9",
|
|
"08:34:13.431",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:50668",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"HTTP/1.1 200 OK\nContent-type: text/plain\n\nNur Text\nzwei Zeilen"
|
|
],
|
|
[
|
|
"10",
|
|
"08:34:13.654",
|
|
"192.168.0.20:50668",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.044, ACK: 1.000.063"
|
|
],
|
|
[
|
|
"11",
|
|
"08:34:13.709",
|
|
"192.168.0.20:50668",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 2.000.044"
|
|
],
|
|
[
|
|
"12",
|
|
"08:34:13.710",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:50668",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.063, ACK: 2.000.045"
|
|
],
|
|
[
|
|
"13",
|
|
"08:34:13.765",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:50668",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 1.000.063"
|
|
],
|
|
[
|
|
"14",
|
|
"08:34:13.989",
|
|
"192.168.0.20:50668",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.045, ACK: 1.000.064"
|
|
]
|
|
],
|
|
"layerRows": [
|
|
[
|
|
"1",
|
|
"08:34:12.410",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"08:34:12.410",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
|
|
],
|
|
[
|
|
"2",
|
|
"08:34:12.872",
|
|
"02:00:00:00:02:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"08:34:12.872",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
|
|
],
|
|
[
|
|
"3",
|
|
"08:34:12.872",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"3",
|
|
"08:34:12.872",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]"
|
|
],
|
|
[
|
|
"4",
|
|
"08:34:13.095",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"08:34:13.095",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"08:34:13.095",
|
|
"192.168.0.20:50668",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 2.000.000"
|
|
],
|
|
[
|
|
"5",
|
|
"08:34:13.096",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"08:34:13.096",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"08:34:13.096",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:50668",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 1.000.000, ACK: 2.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"08:34:13.319",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"08:34:13.319",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"6",
|
|
"08:34:13.319",
|
|
"192.168.0.20:50668",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001, ACK: 1.000.001"
|
|
],
|
|
[
|
|
"7",
|
|
"08:34:13.375",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"08:34:13.375",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"08:34:13.375",
|
|
"192.168.0.20:50668",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.001"
|
|
],
|
|
[
|
|
"7",
|
|
"08:34:13.375",
|
|
"192.168.0.20:50668",
|
|
"192.168.0.30:80",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"GET /text.txt HTTP/1.1\nHost: www.filius.de\n"
|
|
],
|
|
[
|
|
"8",
|
|
"08:34:13.375",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"08:34:13.375",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"08:34:13.375",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:50668",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001, ACK: 2.000.044"
|
|
],
|
|
[
|
|
"9",
|
|
"08:34:13.431",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"08:34:13.431",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"08:34:13.431",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:50668",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.001"
|
|
],
|
|
[
|
|
"9",
|
|
"08:34:13.431",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:50668",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"HTTP/1.1 200 OK\nContent-type: text/plain\n\nNur Text\nzwei Zeilen"
|
|
],
|
|
[
|
|
"10",
|
|
"08:34:13.654",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"08:34:13.654",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"10",
|
|
"08:34:13.654",
|
|
"192.168.0.20:50668",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.044, ACK: 1.000.063"
|
|
],
|
|
[
|
|
"11",
|
|
"08:34:13.709",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"11",
|
|
"08:34:13.709",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"11",
|
|
"08:34:13.709",
|
|
"192.168.0.20:50668",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 2.000.044"
|
|
],
|
|
[
|
|
"12",
|
|
"08:34:13.710",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"12",
|
|
"08:34:13.710",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"12",
|
|
"08:34:13.710",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:50668",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 1.000.063, ACK: 2.000.045"
|
|
],
|
|
[
|
|
"13",
|
|
"08:34:13.765",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"13",
|
|
"08:34:13.765",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"13",
|
|
"08:34:13.765",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:50668",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 1.000.063"
|
|
],
|
|
[
|
|
"14",
|
|
"08:34:13.989",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"14",
|
|
"08:34:13.989",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"14",
|
|
"08:34:13.989",
|
|
"192.168.0.20:50668",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 2.000.045, ACK: 1.000.064"
|
|
]
|
|
]
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"step": "cleared",
|
|
"at": 16192,
|
|
"titles": [
|
|
"Anna - 192.168.0.20",
|
|
"192.168.0.30"
|
|
],
|
|
"selected": 0,
|
|
"visible": true,
|
|
"tables": {
|
|
"00000000-0000-0000-0000-000000000201": {
|
|
"rows": [],
|
|
"layerRows": []
|
|
},
|
|
"00000000-0000-0000-0000-000000000203": {
|
|
"rows": [],
|
|
"layerRows": []
|
|
}
|
|
},
|
|
"menu": [
|
|
"Tabellen löschen",
|
|
"Als Textdatei exportieren",
|
|
"Automatisches Scrollen"
|
|
]
|
|
},
|
|
{
|
|
"step": "fetched again",
|
|
"at": 25192,
|
|
"titles": [
|
|
"Anna - 192.168.0.20",
|
|
"192.168.0.30"
|
|
],
|
|
"selected": 0,
|
|
"visible": true,
|
|
"tables": {
|
|
"00000000-0000-0000-0000-000000000201": {
|
|
"rows": [
|
|
[
|
|
"1",
|
|
"08:34:27.391",
|
|
"192.168.0.20:49509",
|
|
"192.168.0.10:53",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=10916 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n"
|
|
],
|
|
[
|
|
"2",
|
|
"08:34:27.615",
|
|
"192.168.0.10:53",
|
|
"192.168.0.20:49509",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=10916 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n"
|
|
],
|
|
[
|
|
"3",
|
|
"08:34:27.616",
|
|
"192.168.0.20:60031",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 4.000.000"
|
|
],
|
|
[
|
|
"4",
|
|
"08:34:27.838",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:60031",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 3.000.000, ACK: 4.000.001"
|
|
],
|
|
[
|
|
"5",
|
|
"08:34:27.839",
|
|
"192.168.0.20:60031",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.001, ACK: 3.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"08:34:27.916",
|
|
"192.168.0.20:60031",
|
|
"192.168.0.30:80",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"GET /text.txt HTTP/1.1\nHost: www.filius.de\n"
|
|
],
|
|
[
|
|
"7",
|
|
"08:34:28.139",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:60031",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001, ACK: 4.000.044"
|
|
],
|
|
[
|
|
"8",
|
|
"08:34:28.194",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:60031",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"HTTP/1.1 200 OK\nContent-type: text/plain\n\nNur Text\nzwei Zeilen"
|
|
],
|
|
[
|
|
"9",
|
|
"08:34:28.195",
|
|
"192.168.0.20:60031",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.044, ACK: 3.000.063"
|
|
],
|
|
[
|
|
"10",
|
|
"08:34:28.250",
|
|
"192.168.0.20:60031",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 4.000.044"
|
|
],
|
|
[
|
|
"11",
|
|
"08:34:28.473",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:60031",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.063, ACK: 4.000.045"
|
|
],
|
|
[
|
|
"12",
|
|
"08:34:28.528",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:60031",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 3.000.063"
|
|
],
|
|
[
|
|
"13",
|
|
"08:34:28.529",
|
|
"192.168.0.20:60031",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.045, ACK: 3.000.064"
|
|
]
|
|
],
|
|
"layerRows": [
|
|
[
|
|
"1",
|
|
"08:34:27.391",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"1",
|
|
"08:34:27.391",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"1",
|
|
"08:34:27.391",
|
|
"192.168.0.20:49509",
|
|
"192.168.0.10:53",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"1",
|
|
"08:34:27.391",
|
|
"192.168.0.20:49509",
|
|
"192.168.0.10:53",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=10916 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n"
|
|
],
|
|
[
|
|
"2",
|
|
"08:34:27.615",
|
|
"02:00:00:00:02:12",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"2",
|
|
"08:34:27.615",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"2",
|
|
"08:34:27.615",
|
|
"192.168.0.10:53",
|
|
"192.168.0.20:49509",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"2",
|
|
"08:34:27.615",
|
|
"192.168.0.10:53",
|
|
"192.168.0.20:49509",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=10916 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n"
|
|
],
|
|
[
|
|
"3",
|
|
"08:34:27.616",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"08:34:27.616",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"3",
|
|
"08:34:27.616",
|
|
"192.168.0.20:60031",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 4.000.000"
|
|
],
|
|
[
|
|
"4",
|
|
"08:34:27.838",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"08:34:27.838",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"08:34:27.838",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:60031",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 3.000.000, ACK: 4.000.001"
|
|
],
|
|
[
|
|
"5",
|
|
"08:34:27.839",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"08:34:27.839",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"08:34:27.839",
|
|
"192.168.0.20:60031",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.001, ACK: 3.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"08:34:27.916",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"08:34:27.916",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"6",
|
|
"08:34:27.916",
|
|
"192.168.0.20:60031",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"08:34:27.916",
|
|
"192.168.0.20:60031",
|
|
"192.168.0.30:80",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"GET /text.txt HTTP/1.1\nHost: www.filius.de\n"
|
|
],
|
|
[
|
|
"7",
|
|
"08:34:28.139",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"08:34:28.139",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"08:34:28.139",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:60031",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001, ACK: 4.000.044"
|
|
],
|
|
[
|
|
"8",
|
|
"08:34:28.194",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"08:34:28.194",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"08:34:28.194",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:60031",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001"
|
|
],
|
|
[
|
|
"8",
|
|
"08:34:28.194",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:60031",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"HTTP/1.1 200 OK\nContent-type: text/plain\n\nNur Text\nzwei Zeilen"
|
|
],
|
|
[
|
|
"9",
|
|
"08:34:28.195",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"08:34:28.195",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"08:34:28.195",
|
|
"192.168.0.20:60031",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.044, ACK: 3.000.063"
|
|
],
|
|
[
|
|
"10",
|
|
"08:34:28.250",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"08:34:28.250",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"10",
|
|
"08:34:28.250",
|
|
"192.168.0.20:60031",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 4.000.044"
|
|
],
|
|
[
|
|
"11",
|
|
"08:34:28.473",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"11",
|
|
"08:34:28.473",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"11",
|
|
"08:34:28.473",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:60031",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.063, ACK: 4.000.045"
|
|
],
|
|
[
|
|
"12",
|
|
"08:34:28.528",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"12",
|
|
"08:34:28.528",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"12",
|
|
"08:34:28.528",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:60031",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 3.000.063"
|
|
],
|
|
[
|
|
"13",
|
|
"08:34:28.529",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"13",
|
|
"08:34:28.529",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"13",
|
|
"08:34:28.529",
|
|
"192.168.0.20:60031",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.045, ACK: 3.000.064"
|
|
]
|
|
]
|
|
},
|
|
"00000000-0000-0000-0000-000000000203": {
|
|
"rows": [
|
|
[
|
|
"1",
|
|
"08:34:27.726",
|
|
"192.168.0.20:60031",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 4.000.000"
|
|
],
|
|
[
|
|
"2",
|
|
"08:34:27.727",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:60031",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 3.000.000, ACK: 4.000.001"
|
|
],
|
|
[
|
|
"3",
|
|
"08:34:27.950",
|
|
"192.168.0.20:60031",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.001, ACK: 3.000.001"
|
|
],
|
|
[
|
|
"4",
|
|
"08:34:28.027",
|
|
"192.168.0.20:60031",
|
|
"192.168.0.30:80",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"GET /text.txt HTTP/1.1\nHost: www.filius.de\n"
|
|
],
|
|
[
|
|
"5",
|
|
"08:34:28.028",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:60031",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001, ACK: 4.000.044"
|
|
],
|
|
[
|
|
"6",
|
|
"08:34:28.083",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:60031",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"HTTP/1.1 200 OK\nContent-type: text/plain\n\nNur Text\nzwei Zeilen"
|
|
],
|
|
[
|
|
"7",
|
|
"08:34:28.306",
|
|
"192.168.0.20:60031",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.044, ACK: 3.000.063"
|
|
],
|
|
[
|
|
"8",
|
|
"08:34:28.362",
|
|
"192.168.0.20:60031",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 4.000.044"
|
|
],
|
|
[
|
|
"9",
|
|
"08:34:28.362",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:60031",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.063, ACK: 4.000.045"
|
|
],
|
|
[
|
|
"10",
|
|
"08:34:28.418",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:60031",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 3.000.063"
|
|
],
|
|
[
|
|
"11",
|
|
"08:34:28.640",
|
|
"192.168.0.20:60031",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.045, ACK: 3.000.064"
|
|
]
|
|
],
|
|
"layerRows": [
|
|
[
|
|
"1",
|
|
"08:34:27.726",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"1",
|
|
"08:34:27.726",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"1",
|
|
"08:34:27.726",
|
|
"192.168.0.20:60031",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 4.000.000"
|
|
],
|
|
[
|
|
"2",
|
|
"08:34:27.727",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"2",
|
|
"08:34:27.727",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"2",
|
|
"08:34:27.727",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:60031",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 3.000.000, ACK: 4.000.001"
|
|
],
|
|
[
|
|
"3",
|
|
"08:34:27.950",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"08:34:27.950",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"3",
|
|
"08:34:27.950",
|
|
"192.168.0.20:60031",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.001, ACK: 3.000.001"
|
|
],
|
|
[
|
|
"4",
|
|
"08:34:28.027",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"08:34:28.027",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"08:34:28.027",
|
|
"192.168.0.20:60031",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.001"
|
|
],
|
|
[
|
|
"4",
|
|
"08:34:28.027",
|
|
"192.168.0.20:60031",
|
|
"192.168.0.30:80",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"GET /text.txt HTTP/1.1\nHost: www.filius.de\n"
|
|
],
|
|
[
|
|
"5",
|
|
"08:34:28.028",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"08:34:28.028",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"08:34:28.028",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:60031",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001, ACK: 4.000.044"
|
|
],
|
|
[
|
|
"6",
|
|
"08:34:28.083",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"08:34:28.083",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"6",
|
|
"08:34:28.083",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:60031",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"08:34:28.083",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:60031",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"HTTP/1.1 200 OK\nContent-type: text/plain\n\nNur Text\nzwei Zeilen"
|
|
],
|
|
[
|
|
"7",
|
|
"08:34:28.306",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"08:34:28.306",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"08:34:28.306",
|
|
"192.168.0.20:60031",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.044, ACK: 3.000.063"
|
|
],
|
|
[
|
|
"8",
|
|
"08:34:28.362",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"08:34:28.362",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"08:34:28.362",
|
|
"192.168.0.20:60031",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 4.000.044"
|
|
],
|
|
[
|
|
"9",
|
|
"08:34:28.362",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"08:34:28.362",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"08:34:28.362",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:60031",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.063, ACK: 4.000.045"
|
|
],
|
|
[
|
|
"10",
|
|
"08:34:28.418",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"08:34:28.418",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"10",
|
|
"08:34:28.418",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:60031",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 3.000.063"
|
|
],
|
|
[
|
|
"11",
|
|
"08:34:28.640",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"11",
|
|
"08:34:28.640",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"11",
|
|
"08:34:28.640",
|
|
"192.168.0.20:60031",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.045, ACK: 3.000.064"
|
|
]
|
|
]
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"step": "started again without the server",
|
|
"at": 26499,
|
|
"titles": [
|
|
"Anna - 192.168.0.20"
|
|
],
|
|
"selected": 0,
|
|
"visible": true,
|
|
"tables": {
|
|
"00000000-0000-0000-0000-000000000201": {
|
|
"rows": [
|
|
[
|
|
"1",
|
|
"08:34:27.391",
|
|
"192.168.0.20:49509",
|
|
"192.168.0.10:53",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=10916 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n"
|
|
],
|
|
[
|
|
"2",
|
|
"08:34:27.615",
|
|
"192.168.0.10:53",
|
|
"192.168.0.20:49509",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=10916 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n"
|
|
],
|
|
[
|
|
"3",
|
|
"08:34:27.616",
|
|
"192.168.0.20:60031",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 4.000.000"
|
|
],
|
|
[
|
|
"4",
|
|
"08:34:27.838",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:60031",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 3.000.000, ACK: 4.000.001"
|
|
],
|
|
[
|
|
"5",
|
|
"08:34:27.839",
|
|
"192.168.0.20:60031",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.001, ACK: 3.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"08:34:27.916",
|
|
"192.168.0.20:60031",
|
|
"192.168.0.30:80",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"GET /text.txt HTTP/1.1\nHost: www.filius.de\n"
|
|
],
|
|
[
|
|
"7",
|
|
"08:34:28.139",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:60031",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001, ACK: 4.000.044"
|
|
],
|
|
[
|
|
"8",
|
|
"08:34:28.194",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:60031",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"HTTP/1.1 200 OK\nContent-type: text/plain\n\nNur Text\nzwei Zeilen"
|
|
],
|
|
[
|
|
"9",
|
|
"08:34:28.195",
|
|
"192.168.0.20:60031",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.044, ACK: 3.000.063"
|
|
],
|
|
[
|
|
"10",
|
|
"08:34:28.250",
|
|
"192.168.0.20:60031",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 4.000.044"
|
|
],
|
|
[
|
|
"11",
|
|
"08:34:28.473",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:60031",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.063, ACK: 4.000.045"
|
|
],
|
|
[
|
|
"12",
|
|
"08:34:28.528",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:60031",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 3.000.063"
|
|
],
|
|
[
|
|
"13",
|
|
"08:34:28.529",
|
|
"192.168.0.20:60031",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.045, ACK: 3.000.064"
|
|
]
|
|
],
|
|
"layerRows": [
|
|
[
|
|
"1",
|
|
"08:34:27.391",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:12",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"1",
|
|
"08:34:27.391",
|
|
"192.168.0.20",
|
|
"192.168.0.10",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"1",
|
|
"08:34:27.391",
|
|
"192.168.0.20:49509",
|
|
"192.168.0.10:53",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"1",
|
|
"08:34:27.391",
|
|
"192.168.0.20:49509",
|
|
"192.168.0.10:53",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=10916 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n"
|
|
],
|
|
[
|
|
"2",
|
|
"08:34:27.615",
|
|
"02:00:00:00:02:12",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"2",
|
|
"08:34:27.615",
|
|
"192.168.0.10",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"2",
|
|
"08:34:27.615",
|
|
"192.168.0.10:53",
|
|
"192.168.0.20:49509",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"2",
|
|
"08:34:27.615",
|
|
"192.168.0.10:53",
|
|
"192.168.0.20:49509",
|
|
"DNS",
|
|
"Anwendung",
|
|
"ID=10916 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n"
|
|
],
|
|
[
|
|
"3",
|
|
"08:34:27.616",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"08:34:27.616",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"3",
|
|
"08:34:27.616",
|
|
"192.168.0.20:60031",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 4.000.000"
|
|
],
|
|
[
|
|
"4",
|
|
"08:34:27.838",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"08:34:27.838",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"4",
|
|
"08:34:27.838",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:60031",
|
|
"TCP",
|
|
"Transport",
|
|
"SYN, SEQ: 3.000.000, ACK: 4.000.001"
|
|
],
|
|
[
|
|
"5",
|
|
"08:34:27.839",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"08:34:27.839",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"08:34:27.839",
|
|
"192.168.0.20:60031",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.001, ACK: 3.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"08:34:27.916",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"08:34:27.916",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"6",
|
|
"08:34:27.916",
|
|
"192.168.0.20:60031",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.001"
|
|
],
|
|
[
|
|
"6",
|
|
"08:34:27.916",
|
|
"192.168.0.20:60031",
|
|
"192.168.0.30:80",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"GET /text.txt HTTP/1.1\nHost: www.filius.de\n"
|
|
],
|
|
[
|
|
"7",
|
|
"08:34:28.139",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"08:34:28.139",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"7",
|
|
"08:34:28.139",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:60031",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001, ACK: 4.000.044"
|
|
],
|
|
[
|
|
"8",
|
|
"08:34:28.194",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"08:34:28.194",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"8",
|
|
"08:34:28.194",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:60031",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.001"
|
|
],
|
|
[
|
|
"8",
|
|
"08:34:28.194",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:60031",
|
|
"HTTP",
|
|
"Anwendung",
|
|
"HTTP/1.1 200 OK\nContent-type: text/plain\n\nNur Text\nzwei Zeilen"
|
|
],
|
|
[
|
|
"9",
|
|
"08:34:28.195",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"9",
|
|
"08:34:28.195",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"9",
|
|
"08:34:28.195",
|
|
"192.168.0.20:60031",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.044, ACK: 3.000.063"
|
|
],
|
|
[
|
|
"10",
|
|
"08:34:28.250",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"10",
|
|
"08:34:28.250",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"10",
|
|
"08:34:28.250",
|
|
"192.168.0.20:60031",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 4.000.044"
|
|
],
|
|
[
|
|
"11",
|
|
"08:34:28.473",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"11",
|
|
"08:34:28.473",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"11",
|
|
"08:34:28.473",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:60031",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 3.000.063, ACK: 4.000.045"
|
|
],
|
|
[
|
|
"12",
|
|
"08:34:28.528",
|
|
"02:00:00:00:02:13",
|
|
"02:00:00:00:02:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"12",
|
|
"08:34:28.528",
|
|
"192.168.0.30",
|
|
"192.168.0.20",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"12",
|
|
"08:34:28.528",
|
|
"192.168.0.30:80",
|
|
"192.168.0.20:60031",
|
|
"TCP",
|
|
"Transport",
|
|
"FIN, SEQ: 3.000.063"
|
|
],
|
|
[
|
|
"13",
|
|
"08:34:28.529",
|
|
"02:00:00:00:02:11",
|
|
"02:00:00:00:02:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"13",
|
|
"08:34:28.529",
|
|
"192.168.0.20",
|
|
"192.168.0.30",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 6, TTL: 64"
|
|
],
|
|
[
|
|
"13",
|
|
"08:34:28.529",
|
|
"192.168.0.20:60031",
|
|
"192.168.0.30:80",
|
|
"TCP",
|
|
"Transport",
|
|
"SEQ: 4.000.045, ACK: 3.000.064"
|
|
]
|
|
]
|
|
}
|
|
}
|
|
}
|
|
]
|
|
}
|