captureRows.ts builds Java's rows per frame (Lauscher.datenVorbereiten): Ethernet; ARP, ICMP or IP; TCP or UDP; the data with Java's protocol recognition; with addresses and ports or ports only. The comment stays structured; captureCommentText says it with given words and numbers. ScenarioNetwork writes Java's finished tables per card (Lauscher.getDaten, German locale); all runtime runs are recorded again, NatRun has ttlOut. expectSameCaptures compares both views for every frame. Fixed where the engine differed: an ARP request's target MAC is the broadcast address, an ICMP error's identifier and sequence number are 0 (RFC 792), and host unreachable from a router carries the packet as forwarded. Not taken: Java's lower-case broadcast address in a reply to 0.0.0.0, and the typo 'Exeeded'. RIP keeps its recordings: Java's staggered router start now gives a different startup on this machine. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
1445 lines
31 KiB
JSON
1445 lines
31 KiB
JSON
{
|
|
"frames": {
|
|
"00000000-0000-0000-0000-000000000301": [
|
|
{
|
|
"time": 718,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "10.0.0.2",
|
|
"targetIp": "10.0.0.1"
|
|
},
|
|
{
|
|
"time": 955,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"arp": 2,
|
|
"senderIp": "10.0.0.1",
|
|
"targetIp": "10.0.0.2"
|
|
},
|
|
{
|
|
"time": 959,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"icmp": 8,
|
|
"icmpCode": 0,
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "20.0.0.2",
|
|
"sequence": 1
|
|
},
|
|
{
|
|
"time": 1407,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"icmp": 0,
|
|
"icmpCode": 0,
|
|
"sourceIp": "20.0.0.2",
|
|
"destinationIp": "10.0.0.2",
|
|
"sequence": 1
|
|
},
|
|
{
|
|
"time": 1412,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "20.0.0.9",
|
|
"protocol": 17,
|
|
"sourcePort": 56083,
|
|
"destinationPort": 9,
|
|
"payload": "verloren"
|
|
},
|
|
{
|
|
"time": 1512,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"icmp": 8,
|
|
"icmpCode": 0,
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "20.0.0.2",
|
|
"sequence": 2
|
|
},
|
|
{
|
|
"time": 1845,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"icmp": 0,
|
|
"icmpCode": 0,
|
|
"sourceIp": "20.0.0.2",
|
|
"destinationIp": "10.0.0.2",
|
|
"sequence": 2
|
|
},
|
|
{
|
|
"time": 7138,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"icmp": 3,
|
|
"icmpCode": 1,
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"sequence": 0
|
|
}
|
|
],
|
|
"00000000-0000-0000-0000-000000000302": [
|
|
{
|
|
"time": 841,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "10.0.0.2",
|
|
"targetIp": "10.0.0.1"
|
|
},
|
|
{
|
|
"time": 843,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"arp": 2,
|
|
"senderIp": "10.0.0.1",
|
|
"targetIp": "10.0.0.2"
|
|
},
|
|
{
|
|
"time": 1072,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"icmp": 8,
|
|
"icmpCode": 0,
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "20.0.0.2",
|
|
"sequence": 1
|
|
},
|
|
{
|
|
"time": 1295,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"icmp": 0,
|
|
"icmpCode": 0,
|
|
"sourceIp": "20.0.0.2",
|
|
"destinationIp": "10.0.0.2",
|
|
"sequence": 1
|
|
},
|
|
{
|
|
"time": 1525,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "20.0.0.9",
|
|
"protocol": 17,
|
|
"sourcePort": 56083,
|
|
"destinationPort": 9,
|
|
"payload": "verloren"
|
|
},
|
|
{
|
|
"time": 1623,
|
|
"source": "02:00:00:00:03:11",
|
|
"destination": "02:00:00:00:03:21",
|
|
"icmp": 8,
|
|
"icmpCode": 0,
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "20.0.0.2",
|
|
"sequence": 2
|
|
},
|
|
{
|
|
"time": 1734,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"icmp": 0,
|
|
"icmpCode": 0,
|
|
"sourceIp": "20.0.0.2",
|
|
"destinationIp": "10.0.0.2",
|
|
"sequence": 2
|
|
},
|
|
{
|
|
"time": 7026,
|
|
"source": "02:00:00:00:03:21",
|
|
"destination": "02:00:00:00:03:11",
|
|
"icmp": 3,
|
|
"icmpCode": 1,
|
|
"sourceIp": "10.0.0.1",
|
|
"destinationIp": "10.0.0.2",
|
|
"sequence": 0
|
|
}
|
|
],
|
|
"00000000-0000-0000-0000-000000000302#1": [
|
|
{
|
|
"time": 1072,
|
|
"source": "02:00:00:00:03:22",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "20.0.0.1",
|
|
"targetIp": "20.0.0.2"
|
|
},
|
|
{
|
|
"time": 1183,
|
|
"source": "02:00:00:00:03:13",
|
|
"destination": "02:00:00:00:03:22",
|
|
"arp": 2,
|
|
"senderIp": "20.0.0.2",
|
|
"targetIp": "20.0.0.1"
|
|
},
|
|
{
|
|
"time": 1184,
|
|
"source": "02:00:00:00:03:22",
|
|
"destination": "02:00:00:00:03:13",
|
|
"icmp": 8,
|
|
"icmpCode": 0,
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "20.0.0.2",
|
|
"sequence": 1
|
|
},
|
|
{
|
|
"time": 1295,
|
|
"source": "02:00:00:00:03:13",
|
|
"destination": "02:00:00:00:03:22",
|
|
"icmp": 0,
|
|
"icmpCode": 0,
|
|
"sourceIp": "20.0.0.2",
|
|
"destinationIp": "10.0.0.2",
|
|
"sequence": 1
|
|
},
|
|
{
|
|
"time": 1525,
|
|
"source": "02:00:00:00:03:22",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "20.0.0.1",
|
|
"targetIp": "20.0.0.9"
|
|
},
|
|
{
|
|
"time": 1623,
|
|
"source": "02:00:00:00:03:22",
|
|
"destination": "02:00:00:00:03:13",
|
|
"icmp": 8,
|
|
"icmpCode": 0,
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "20.0.0.2",
|
|
"sequence": 2
|
|
},
|
|
{
|
|
"time": 1734,
|
|
"source": "02:00:00:00:03:13",
|
|
"destination": "02:00:00:00:03:22",
|
|
"icmp": 0,
|
|
"icmpCode": 0,
|
|
"sourceIp": "20.0.0.2",
|
|
"destinationIp": "10.0.0.2",
|
|
"sequence": 2
|
|
},
|
|
{
|
|
"time": 4275,
|
|
"source": "02:00:00:00:03:22",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "20.0.0.1",
|
|
"targetIp": "20.0.0.9"
|
|
}
|
|
],
|
|
"00000000-0000-0000-0000-000000000303": [
|
|
{
|
|
"time": 1128,
|
|
"source": "02:00:00:00:03:22",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "20.0.0.1",
|
|
"targetIp": "20.0.0.2"
|
|
},
|
|
{
|
|
"time": 1128,
|
|
"source": "02:00:00:00:03:13",
|
|
"destination": "02:00:00:00:03:22",
|
|
"arp": 2,
|
|
"senderIp": "20.0.0.2",
|
|
"targetIp": "20.0.0.1"
|
|
},
|
|
{
|
|
"time": 1239,
|
|
"source": "02:00:00:00:03:22",
|
|
"destination": "02:00:00:00:03:13",
|
|
"icmp": 8,
|
|
"icmpCode": 0,
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "20.0.0.2",
|
|
"sequence": 1
|
|
},
|
|
{
|
|
"time": 1239,
|
|
"source": "02:00:00:00:03:13",
|
|
"destination": "02:00:00:00:03:22",
|
|
"icmp": 0,
|
|
"icmpCode": 0,
|
|
"sourceIp": "20.0.0.2",
|
|
"destinationIp": "10.0.0.2",
|
|
"sequence": 1
|
|
},
|
|
{
|
|
"time": 1580,
|
|
"source": "02:00:00:00:03:22",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "20.0.0.1",
|
|
"targetIp": "20.0.0.9"
|
|
},
|
|
{
|
|
"time": 1679,
|
|
"source": "02:00:00:00:03:22",
|
|
"destination": "02:00:00:00:03:13",
|
|
"icmp": 8,
|
|
"icmpCode": 0,
|
|
"sourceIp": "10.0.0.2",
|
|
"destinationIp": "20.0.0.2",
|
|
"sequence": 2
|
|
},
|
|
{
|
|
"time": 1679,
|
|
"source": "02:00:00:00:03:13",
|
|
"destination": "02:00:00:00:03:22",
|
|
"icmp": 0,
|
|
"icmpCode": 0,
|
|
"sourceIp": "20.0.0.2",
|
|
"destinationIp": "10.0.0.2",
|
|
"sequence": 2
|
|
},
|
|
{
|
|
"time": 4331,
|
|
"source": "02:00:00:00:03:22",
|
|
"destination": "FF:FF:FF:FF:FF:FF",
|
|
"arp": 1,
|
|
"senderIp": "20.0.0.1",
|
|
"targetIp": "20.0.0.9"
|
|
}
|
|
]
|
|
},
|
|
"rows": {
|
|
"00000000-0000-0000-0000-000000000301": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:03:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:03:21 [op=REPLY, sender=02:00:00:00:03:21|10.0.0.1, target=02:00:00:00:03:11|10.0.0.2]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"10.0.0.2",
|
|
"20.0.0.2",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"20.0.0.2",
|
|
"10.0.0.2",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Reply (pong), TTL: 63, Identifier: 1, Seq.-No.: 1"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"10.0.0.2",
|
|
"20.0.0.9",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"10.0.0.2:56083",
|
|
"20.0.0.9:9",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"5",
|
|
"10.0.0.2:56083",
|
|
"20.0.0.9:9",
|
|
"",
|
|
"Anwendung",
|
|
"verloren"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"10.0.0.2",
|
|
"20.0.0.2",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 2"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"20.0.0.2",
|
|
"10.0.0.2",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Reply (pong), TTL: 63, Identifier: 1, Seq.-No.: 2"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Host Unreachable, TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=3, ttl=63, protocol=17, dest=20.0.0.9, src=10.0.0.2]"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000302": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:03:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:03:21 [op=REPLY, sender=02:00:00:00:03:21|10.0.0.1, target=02:00:00:00:03:11|10.0.0.2]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"10.0.0.2",
|
|
"20.0.0.2",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"20.0.0.2",
|
|
"10.0.0.2",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Reply (pong), TTL: 63, Identifier: 1, Seq.-No.: 1"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"10.0.0.2",
|
|
"20.0.0.9",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"10.0.0.2:56083",
|
|
"20.0.0.9:9",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"5",
|
|
"10.0.0.2:56083",
|
|
"20.0.0.9:9",
|
|
"",
|
|
"Anwendung",
|
|
"verloren"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"10.0.0.2",
|
|
"20.0.0.2",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 2"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"20.0.0.2",
|
|
"10.0.0.2",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Reply (pong), TTL: 63, Identifier: 1, Seq.-No.: 2"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Host Unreachable, TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=3, ttl=63, protocol=17, dest=20.0.0.9, src=10.0.0.2]"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000302#1": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:03:22",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"20.0.0.1",
|
|
"20.0.0.2",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 20.0.0.2 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.2]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:03:13",
|
|
"02:00:00:00:03:22",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"20.0.0.2",
|
|
"20.0.0.1",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:03:13 [op=REPLY, sender=02:00:00:00:03:13|20.0.0.2, target=02:00:00:00:03:22|20.0.0.1]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:03:22",
|
|
"02:00:00:00:03:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"10.0.0.2",
|
|
"20.0.0.2",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Request (ping), TTL: 63, Identifier: 1, Seq.-No.: 1"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:03:13",
|
|
"02:00:00:00:03:22",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"20.0.0.2",
|
|
"10.0.0.2",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Reply (pong), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:03:22",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"5",
|
|
"20.0.0.1",
|
|
"20.0.0.9",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 20.0.0.9 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.9]"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:03:22",
|
|
"02:00:00:00:03:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"10.0.0.2",
|
|
"20.0.0.2",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Request (ping), TTL: 63, Identifier: 1, Seq.-No.: 2"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:03:13",
|
|
"02:00:00:00:03:22",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"20.0.0.2",
|
|
"10.0.0.2",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Reply (pong), TTL: 64, Identifier: 1, Seq.-No.: 2"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:03:22",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"8",
|
|
"20.0.0.1",
|
|
"20.0.0.9",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 20.0.0.9 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.9]"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000303": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:03:22",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"20.0.0.1",
|
|
"20.0.0.2",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 20.0.0.2 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.2]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:03:13",
|
|
"02:00:00:00:03:22",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"20.0.0.2",
|
|
"20.0.0.1",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:03:13 [op=REPLY, sender=02:00:00:00:03:13|20.0.0.2, target=02:00:00:00:03:22|20.0.0.1]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:03:22",
|
|
"02:00:00:00:03:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"10.0.0.2",
|
|
"20.0.0.2",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Request (ping), TTL: 63, Identifier: 1, Seq.-No.: 1"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:03:13",
|
|
"02:00:00:00:03:22",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"20.0.0.2",
|
|
"10.0.0.2",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Reply (pong), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:03:22",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"5",
|
|
"20.0.0.1",
|
|
"20.0.0.9",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 20.0.0.9 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.9]"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:03:22",
|
|
"02:00:00:00:03:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"10.0.0.2",
|
|
"20.0.0.2",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Request (ping), TTL: 63, Identifier: 1, Seq.-No.: 2"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:03:13",
|
|
"02:00:00:00:03:22",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"20.0.0.2",
|
|
"10.0.0.2",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Reply (pong), TTL: 64, Identifier: 1, Seq.-No.: 2"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:03:22",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"8",
|
|
"20.0.0.1",
|
|
"20.0.0.9",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 20.0.0.9 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.9]"
|
|
]
|
|
]
|
|
},
|
|
"layeredRows": {
|
|
"00000000-0000-0000-0000-000000000301": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:03:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:03:21 [op=REPLY, sender=02:00:00:00:03:21|10.0.0.1, target=02:00:00:00:03:11|10.0.0.2]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"10.0.0.2",
|
|
"20.0.0.2",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"20.0.0.2",
|
|
"10.0.0.2",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Reply (pong), TTL: 63, Identifier: 1, Seq.-No.: 1"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"10.0.0.2",
|
|
"20.0.0.9",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"56083",
|
|
"9",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"5",
|
|
null,
|
|
null,
|
|
"",
|
|
"Anwendung",
|
|
"verloren"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"10.0.0.2",
|
|
"20.0.0.2",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 2"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"20.0.0.2",
|
|
"10.0.0.2",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Reply (pong), TTL: 63, Identifier: 1, Seq.-No.: 2"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Host Unreachable, TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=3, ttl=63, protocol=17, dest=20.0.0.9, src=10.0.0.2]"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000302": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:03:11",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"10.0.0.2",
|
|
"10.0.0.1",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 10.0.0.1 [op=REQUEST, sender=02:00:00:00:03:11|10.0.0.2, target=FF:FF:FF:FF:FF:FF|10.0.0.1]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:03:21 [op=REPLY, sender=02:00:00:00:03:21|10.0.0.1, target=02:00:00:00:03:11|10.0.0.2]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"10.0.0.2",
|
|
"20.0.0.2",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"20.0.0.2",
|
|
"10.0.0.2",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Reply (pong), TTL: 63, Identifier: 1, Seq.-No.: 1"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"5",
|
|
"10.0.0.2",
|
|
"20.0.0.9",
|
|
"IP",
|
|
"Vermittlung",
|
|
"Protokoll: 17, TTL: 64"
|
|
],
|
|
[
|
|
"5",
|
|
"56083",
|
|
"9",
|
|
"UDP",
|
|
"Transport",
|
|
""
|
|
],
|
|
[
|
|
"5",
|
|
null,
|
|
null,
|
|
"",
|
|
"Anwendung",
|
|
"verloren"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:03:11",
|
|
"02:00:00:00:03:21",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"10.0.0.2",
|
|
"20.0.0.2",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Request (ping), TTL: 64, Identifier: 1, Seq.-No.: 2"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"20.0.0.2",
|
|
"10.0.0.2",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Reply (pong), TTL: 63, Identifier: 1, Seq.-No.: 2"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:03:21",
|
|
"02:00:00:00:03:11",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"8",
|
|
"10.0.0.1",
|
|
"10.0.0.2",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Host Unreachable, TTL: 64, Identifier: 0, Seq.-No.: 0, Payload: [id=3, ttl=63, protocol=17, dest=20.0.0.9, src=10.0.0.2]"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000302#1": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:03:22",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"20.0.0.1",
|
|
"20.0.0.2",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 20.0.0.2 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.2]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:03:13",
|
|
"02:00:00:00:03:22",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"20.0.0.2",
|
|
"20.0.0.1",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:03:13 [op=REPLY, sender=02:00:00:00:03:13|20.0.0.2, target=02:00:00:00:03:22|20.0.0.1]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:03:22",
|
|
"02:00:00:00:03:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"10.0.0.2",
|
|
"20.0.0.2",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Request (ping), TTL: 63, Identifier: 1, Seq.-No.: 1"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:03:13",
|
|
"02:00:00:00:03:22",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"20.0.0.2",
|
|
"10.0.0.2",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Reply (pong), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:03:22",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"5",
|
|
"20.0.0.1",
|
|
"20.0.0.9",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 20.0.0.9 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.9]"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:03:22",
|
|
"02:00:00:00:03:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"10.0.0.2",
|
|
"20.0.0.2",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Request (ping), TTL: 63, Identifier: 1, Seq.-No.: 2"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:03:13",
|
|
"02:00:00:00:03:22",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"20.0.0.2",
|
|
"10.0.0.2",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Reply (pong), TTL: 64, Identifier: 1, Seq.-No.: 2"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:03:22",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"8",
|
|
"20.0.0.1",
|
|
"20.0.0.9",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 20.0.0.9 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.9]"
|
|
]
|
|
],
|
|
"00000000-0000-0000-0000-000000000303": [
|
|
[
|
|
"1",
|
|
"02:00:00:00:03:22",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"1",
|
|
"20.0.0.1",
|
|
"20.0.0.2",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 20.0.0.2 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.2]"
|
|
],
|
|
[
|
|
"2",
|
|
"02:00:00:00:03:13",
|
|
"02:00:00:00:03:22",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"2",
|
|
"20.0.0.2",
|
|
"20.0.0.1",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"MAC ist 02:00:00:00:03:13 [op=REPLY, sender=02:00:00:00:03:13|20.0.0.2, target=02:00:00:00:03:22|20.0.0.1]"
|
|
],
|
|
[
|
|
"3",
|
|
"02:00:00:00:03:22",
|
|
"02:00:00:00:03:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"3",
|
|
"10.0.0.2",
|
|
"20.0.0.2",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Request (ping), TTL: 63, Identifier: 1, Seq.-No.: 1"
|
|
],
|
|
[
|
|
"4",
|
|
"02:00:00:00:03:13",
|
|
"02:00:00:00:03:22",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"4",
|
|
"20.0.0.2",
|
|
"10.0.0.2",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Reply (pong), TTL: 64, Identifier: 1, Seq.-No.: 1"
|
|
],
|
|
[
|
|
"5",
|
|
"02:00:00:00:03:22",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"5",
|
|
"20.0.0.1",
|
|
"20.0.0.9",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 20.0.0.9 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.9]"
|
|
],
|
|
[
|
|
"6",
|
|
"02:00:00:00:03:22",
|
|
"02:00:00:00:03:13",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"6",
|
|
"10.0.0.2",
|
|
"20.0.0.2",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Request (ping), TTL: 63, Identifier: 1, Seq.-No.: 2"
|
|
],
|
|
[
|
|
"7",
|
|
"02:00:00:00:03:13",
|
|
"02:00:00:00:03:22",
|
|
"",
|
|
"Netzzugang",
|
|
"0x800"
|
|
],
|
|
[
|
|
"7",
|
|
"20.0.0.2",
|
|
"10.0.0.2",
|
|
"ICMP",
|
|
"Vermittlung",
|
|
"ICMP Echo Reply (pong), TTL: 64, Identifier: 1, Seq.-No.: 2"
|
|
],
|
|
[
|
|
"8",
|
|
"02:00:00:00:03:22",
|
|
"FF:FF:FF:FF:FF:FF",
|
|
"",
|
|
"Netzzugang",
|
|
"0x806"
|
|
],
|
|
[
|
|
"8",
|
|
"20.0.0.1",
|
|
"20.0.0.9",
|
|
"ARP",
|
|
"Vermittlung",
|
|
"Suche nach MAC für 20.0.0.9 [op=REQUEST, sender=02:00:00:00:03:22|20.0.0.1, target=FF:FF:FF:FF:FF:FF|20.0.0.9]"
|
|
]
|
|
]
|
|
},
|
|
"events": [
|
|
[
|
|
713,
|
|
"sendProbe 20.0.0.2 called"
|
|
],
|
|
[
|
|
1408,
|
|
"sendProbe 20.0.0.2 returned ICMP 0/0 from 20.0.0.2"
|
|
],
|
|
[
|
|
1408,
|
|
"senden verloren called"
|
|
],
|
|
[
|
|
1411,
|
|
"senden verloren returned "
|
|
],
|
|
[
|
|
1512,
|
|
"sendProbe 20.0.0.2 called"
|
|
],
|
|
[
|
|
1845,
|
|
"sendProbe 20.0.0.2 returned ICMP 0/0 from 20.0.0.2"
|
|
]
|
|
]
|
|
}
|