julian.kiedaisch/mdg-filius
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
5fa590246c33f63483ff416b2b0c2ff1fba9cdf1
mdg-filius/packages/core/test/scenarios/tcp-routed-loss.swift.json
T
julian.kiedaischandClaude Opus 5.5 396dbacfc5 feat(core): DHCP in the simulation core, as in Swift 
engine.ts ports Swift's "DHCP server and automatic client": an active
server listens on port 67 from the start and offers a static assignment
before its range, round from the address after the last one offered;
offers last 10 s, dynamic leases a day, and a server whose offer another
server beat blacklists that address for a while. A client starts as an
event: DISCOVER, OFFER, a check by ARP, DECLINE, REQUEST, ACK or NAK,
2.5 s per wait, and after ten failures its old address back. The snapshot
carries the DHCP settings of clients and servers.

Four scenarios match the Swift engine. One Swift error is named in the
oracle test: a client run directly is advanced a second time, to FINISH,
by the server's answer within its own DISCOVER, and the outer run then
writes back its stale copy of the status (Swift's value types); the
address and every trace agree, only the reported status is wrong in
Swift. Swift's three DHCP engine tests are ported, with tests for
stopping and the message format. 15 mutation probes, 14 caught; the other
concerns the home router, which runs only once NAT is ported.

Two departures from Java remain, to be fixed next: from the event queue
the client's ARP check does not wait, so an address conflict is never
found, and each answer that wakes the client makes it send its state's
message again (a second DISCOVER and REQUEST, the second answered with
NAK). Java waits a round trip and sends once per attempt.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-09-30 10:17:36 +00:00

4815 lines
94 KiB
JSON
Raw Blame History

{
"arp" : {
"00000000-0000-0000-0000-000000000201" : {
"10.0.0.1" : "02:00:00:00:02:21"
},
"00000000-0000-0000-0000-000000000202" : {
"10.0.0.2" : "02:00:00:00:02:11",
"20.0.0.2" : "02:00:00:00:02:13"
},
"00000000-0000-0000-0000-000000000203" : {
"20.0.0.1" : "02:00:00:00:02:22"
}
},
"devices" : {
"00000000-0000-0000-0000-000000000201" : [
"10.0.0.2",
"255.255.255.0",
"10.0.0.1",
""
],
"00000000-0000-0000-0000-000000000202" : [
"10.0.0.1",
"255.255.255.0",
"",
""
],
"00000000-0000-0000-0000-000000000203" : [
"20.0.0.2",
"255.255.255.0",
"20.0.0.1",
""
]
},
"dhcp" : {
"blacklist" : {
},
"clients" : {
},
"leases" : [
],
"offers" : [
],
"servers" : {
}
},
"firewallDecisions" : [
{
"accepted" : true,
"node" : "00000000-0000-0000-0000-000000000202",
"packet" : 1
},
{
"accepted" : true,
"node" : "00000000-0000-0000-0000-000000000202",
"packet" : 2
},
{
"accepted" : true,
"node" : "00000000-0000-0000-0000-000000000202",
"packet" : 3
},
{
"accepted" : true,
"node" : "00000000-0000-0000-0000-000000000202",
"packet" : 4
},
{
"accepted" : true,
"node" : "00000000-0000-0000-0000-000000000202",
"packet" : 5
},
{
"accepted" : false,
"node" : "00000000-0000-0000-0000-000000000202",
"packet" : 6,
"rule" : 0
},
{
"accepted" : false,
"node" : "00000000-0000-0000-0000-000000000202",
"packet" : 7,
"rule" : 0
},
{
"accepted" : false,
"node" : "00000000-0000-0000-0000-000000000202",
"packet" : 8,
"rule" : 0
}
],
"icmpObservations" : {
},
"pendingEvents" : 0,
"results" : [
"00000000-0000-0000-0000-000000000001",
"00000000-0000-0000-0000-000000000002",
"00000000-0000-0000-0000-000000000003",
"connected",
true,
"durch den Router",
"00000000-0000-0000-0000-000000000005",
"timedOut",
true,
false,
false,
false,
false,
"00000000-0000-0000-0000-000000000006"
],
"sockets" : [
{
"id" : "00000000-0000-0000-0000-000000000001",
"localIp" : null,
"localPort" : 80,
"node" : "00000000-0000-0000-0000-000000000203",
"parent" : null,
"protocol" : "tcp",
"queued" : 0,
"remoteIp" : null,
"remotePort" : null,
"session" : {
"assembly" : 0,
"attempts" : 0,
"messages" : 0,
"next" : 1000000,
"pending" : false,
"remote" : 0
},
"tcpState" : "CLOSED"
},
{
"id" : "00000000-0000-0000-0000-000000000002",
"localIp" : null,
"localPort" : 81,
"node" : "00000000-0000-0000-0000-000000000203",
"parent" : null,
"protocol" : "tcp",
"queued" : 0,
"remoteIp" : null,
"remotePort" : null,
"session" : {
"assembly" : 0,
"attempts" : 0,
"messages" : 0,
"next" : 2000000,
"pending" : false,
"remote" : 0
},
"tcpState" : "LISTEN"
},
{
"id" : "00000000-0000-0000-0000-000000000003",
"localIp" : "10.0.0.2",
"localPort" : 50299,
"node" : "00000000-0000-0000-0000-000000000201",
"parent" : null,
"protocol" : "tcp",
"queued" : 0,
"remoteIp" : "20.0.0.2",
"remotePort" : 80,
"session" : {
"assembly" : 0,
"attempts" : 3,
"messages" : 0,
"next" : 3000025,
"pending" : false,
"remote" : 4000001
},
"tcpState" : "CLOSED"
},
{
"id" : "00000000-0000-0000-0000-000000000004",
"localIp" : "20.0.0.2",
"localPort" : 80,
"node" : "00000000-0000-0000-0000-000000000203",
"parent" : "00000000-0000-0000-0000-000000000001",
"protocol" : "tcp",
"queued" : 0,
"remoteIp" : "10.0.0.2",
"remotePort" : 50299,
"session" : {
"assembly" : 0,
"attempts" : 1,
"messages" : 0,
"next" : 4000001,
"pending" : false,
"remote" : 3000017
},
"tcpState" : "ESTABLISHED"
},
{
"id" : "00000000-0000-0000-0000-000000000005",
"localIp" : "10.0.0.2",
"localPort" : 63015,
"node" : "00000000-0000-0000-0000-000000000201",
"parent" : null,
"protocol" : "tcp",
"queued" : 0,
"remoteIp" : "20.0.0.2",
"remotePort" : 81,
"session" : {
"assembly" : 0,
"attempts" : 3,
"messages" : 0,
"next" : 5000001,
"pending" : false,
"remote" : 0
},
"tcpState" : "CLOSED"
},
{
"id" : "00000000-0000-0000-0000-000000000006",
"localIp" : null,
"localPort" : 80,
"node" : "00000000-0000-0000-0000-000000000203",
"parent" : null,
"protocol" : "tcp",
"queued" : 0,
"remoteIp" : null,
"remotePort" : null,
"session" : {
"assembly" : 0,
"attempts" : 0,
"messages" : 0,
"next" : 6000000,
"pending" : false,
"remote" : 0
},
"tcpState" : "LISTEN"
}
],
"switchTables" : {
},
"time" : 45880,
"traces" : [
{
"after" : [
[
"state",
"LISTEN"
]
],
"before" : [
[
"state",
"CLOSED"
]
],
"detail" : "TCP CLOSED -> LISTEN",
"direction" : "local",
"id" : 1,
"layer" : "transport",
"node" : "00000000-0000-0000-0000-000000000203",
"operation" : "accepted",
"time" : 0
},
{
"after" : [
[
"state",
"LISTEN"
]
],
"before" : [
[
"state",
"CLOSED"
]
],
"detail" : "TCP CLOSED -> LISTEN",
"direction" : "local",
"id" : 2,
"layer" : "transport",
"node" : "00000000-0000-0000-0000-000000000203",
"operation" : "accepted",
"time" : 0
},
{
"after" : [
[
"state",
"SYN_SENT"
]
],
"before" : [
[
"state",
"CLOSED"
]
],
"detail" : "TCP CLOSED -> SYN_SENT",
"direction" : "local",
"id" : 3,
"layer" : "transport",
"node" : "00000000-0000-0000-0000-000000000201",
"operation" : "accepted",
"time" : 0
},
{
"after" : [
[
"sourcePort",
"50299"
],
[
"destinationPort",
"80"
],
[
"sequenceNumber",
"3000000"
],
[
"acknowledgementNumber",
"0"
],
[
"flags",
"SYN"
],
[
"payloadLength",
"0"
]
],
"before" : [
],
"detail" : "TCP SYN",
"direction" : "outbound",
"id" : 4,
"interface" : "00000000-0000-0000-0000-000000000211",
"layer" : "transport",
"node" : "00000000-0000-0000-0000-000000000201",
"operation" : "sent",
"packet" : 1,
"time" : 0
},
{
"after" : [
[
"sourceMAC",
"02:00:00:00:02:11"
],
[
"destinationMAC",
"FF:FF:FF:FF:FF:FF"
]
],
"before" : [
],
"detail" : "ARP request for 10.0.0.1",
"direction" : "outbound",
"frame" : 1,
"id" : 5,
"interface" : "00000000-0000-0000-0000-000000000211",
"layer" : "dataLink",
"node" : "00000000-0000-0000-0000-000000000201",
"operation" : "created",
"time" : 0
},
{
"after" : [
[
"sourceMAC",
"02:00:00:00:02:11"
],
[
"destinationMAC",
"FF:FF:FF:FF:FF:FF"
]
],
"before" : [
],
"direction" : "outbound",
"frame" : 1,
"id" : 6,
"interface" : "00000000-0000-0000-0000-000000000211",
"layer" : "physical",
"node" : "00000000-0000-0000-0000-000000000201",
"operation" : "sent",
"time" : 0
},
{
"after" : [
],
"before" : [
[
"sourceMAC",
"02:00:00:00:02:11"
],
[
"destinationMAC",
"FF:FF:FF:FF:FF:FF"
]
],
"direction" : "inbound",
"frame" : 1,
"id" : 7,
"interface" : "00000000-0000-0000-0000-000000000221",
"layer" : "physical",
"node" : "00000000-0000-0000-0000-000000000202",
"operation" : "received",
"time" : 55
},
{
"after" : [
],
"before" : [
[
"sourceMAC",
"02:00:00:00:02:11"
],
[
"destinationMAC",
"FF:FF:FF:FF:FF:FF"
]
],
"direction" : "inbound",
"frame" : 1,
"id" : 8,
"interface" : "00000000-0000-0000-0000-000000000221",
"layer" : "dataLink",
"node" : "00000000-0000-0000-0000-000000000202",
"operation" : "received",
"time" : 55
},
{
"after" : [
],
"before" : [
[
"operation",
"request"
],
[
"senderMAC",
"02:00:00:00:02:11"
],
[
"senderIP",
"10.0.0.2"
],
[
"targetMAC",
"00:00:00:00:00:00"
],
[
"targetIP",
"10.0.0.1"
]
],
"direction" : "inbound",
"frame" : 1,
"id" : 9,
"interface" : "00000000-0000-0000-0000-000000000221",
"layer" : "network",
"node" : "00000000-0000-0000-0000-000000000202",
"operation" : "accepted",
"time" : 55
},
{
"after" : [
[
"sourceMAC",
"02:00:00:00:02:21"
],
[
"destinationMAC",
"02:00:00:00:02:11"
]
],
"before" : [
],
"detail" : "ARP reply for 10.0.0.1",
"direction" : "outbound",
"frame" : 2,
"id" : 10,
"interface" : "00000000-0000-0000-0000-000000000221",
"layer" : "dataLink",
"node" : "00000000-0000-0000-0000-000000000202",
"operation" : "created",
"time" : 55
},
{
"after" : [
[
"sourceMAC",
"02:00:00:00:02:21"
],
[
"destinationMAC",
"02:00:00:00:02:11"
]
],
"before" : [
],
"direction" : "outbound",
"frame" : 2,
"id" : 11,
"interface" : "00000000-0000-0000-0000-000000000221",
"layer" : "physical",
"node" : "00000000-0000-0000-0000-000000000202",
"operation" : "sent",
"time" : 55
},
{
"after" : [
],
"before" : [
[
"sourceMAC",
"02:00:00:00:02:21"
],
[
"destinationMAC",
"02:00:00:00:02:11"
]
],
"direction" : "inbound",
"frame" : 2,
"id" : 12,
"interface" : "00000000-0000-0000-0000-000000000211",
"layer" : "physical",
"node" : "00000000-0000-0000-0000-000000000201",
"operation" : "received",
"time" : 110
},
{
"after" : [
],
"before" : [
[
"sourceMAC",
"02:00:00:00:02:21"
],
[
"destinationMAC",
"02:00:00:00:02:11"
]
],
"direction" : "inbound",
"frame" : 2,
"id" : 13,
"interface" : "00000000-0000-0000-0000-000000000211",
"layer" : "dataLink",
"node" : "00000000-0000-0000-0000-000000000201",
"operation" : "received",
"time" : 110
},
{
"after" : [
],
"before" : [
[
"operation",
"reply"
],
[
"senderMAC",
"02:00:00:00:02:21"
],
[
"senderIP",
"10.0.0.1"
],
[
"targetMAC",
"02:00:00:00:02:11"
],
[
"targetIP",
"10.0.0.2"
]
],
"direction" : "inbound",
"frame" : 2,
"id" : 14,
"interface" : "00000000-0000-0000-0000-000000000211",
"layer" : "network",
"node" : "00000000-0000-0000-0000-000000000201",
"operation" : "accepted",
"time" : 110
},
{
"after" : [
[
"senderIP",
"10.0.0.2"
],
[
"receiverIP",
"20.0.0.2"
],
[
"ttl",
"64"
],
[
"protocol",
"6"
]
],
"before" : [
],
"direction" : "outbound",
"frame" : 3,
"id" : 15,
"interface" : "00000000-0000-0000-0000-000000000211",
"layer" : "network",
"node" : "00000000-0000-0000-0000-000000000201",
"operation" : "sent",
"packet" : 1,
"time" : 110
},
{
"after" : [
[
"sourceMAC",
"02:00:00:00:02:11"
],
[
"destinationMAC",
"02:00:00:00:02:21"
]
],
"before" : [
],
"direction" : "outbound",
"frame" : 3,
"id" : 16,
"interface" : "00000000-0000-0000-0000-000000000211",
"layer" : "dataLink",
"node" : "00000000-0000-0000-0000-000000000201",
"operation" : "created",
"packet" : 1,
"time" : 110
},
{
"after" : [
[
"sourceMAC",
"02:00:00:00:02:11"
],
[
"destinationMAC",
"02:00:00:00:02:21"
]
],
"before" : [
],
"direction" : "outbound",
"frame" : 3,
"id" : 17,
"interface" : "00000000-0000-0000-0000-000000000211",
"layer" : "physical",
"node" : "00000000-0000-0000-0000-000000000201",
"operation" : "sent",
"packet" : 1,
"time" : 110
},
{
"after" : [
],
"before" : [
[
"sourceMAC",
"02:00:00:00:02:11"
],
[
"destinationMAC",
"02:00:00:00:02:21"
]
],
"direction" : "inbound",
"frame" : 3,
"id" : 18,
"interface" : "00000000-0000-0000-0000-000000000221",
"layer" : "physical",
"node" : "00000000-0000-0000-0000-000000000202",
"operation" : "received",
"packet" : 1,
"time" : 165
},
{
"after" : [
],
"before" : [
[
"sourceMAC",
"02:00:00:00:02:11"
],
[
"destinationMAC",
"02:00:00:00:02:21"
]
],
"direction" : "inbound",
"frame" : 3,
"id" : 19,
"interface" : "00000000-0000-0000-0000-000000000221",
"layer" : "dataLink",
"node" : "00000000-0000-0000-0000-000000000202",
"operation" : "received",
"packet" : 1,
"time" : 165
},
{
"after" : [
],
"before" : [
[
"senderIP",
"10.0.0.2"
],
[
"receiverIP",
"20.0.0.2"
],
[
"ttl",
"64"
],
[
"protocol",
"6"
]
],
"direction" : "inbound",
"frame" : 3,
"id" : 20,
"interface" : "00000000-0000-0000-0000-000000000221",
"layer" : "network",
"node" : "00000000-0000-0000-0000-000000000202",
"operation" : "received",
"packet" : 1,
"time" : 165
},
{
"after" : [
],
"before" : [
[
"senderIP",
"10.0.0.2"
],
[
"receiverIP",
"20.0.0.2"
],
[
"ttl",
"64"
],
[
"protocol",
"6"
]
],
"detail" : "firewall default policy",
"direction" : "inbound",
"frame" : 3,
"id" : 21,
"interface" : "00000000-0000-0000-0000-000000000221",
"layer" : "network",
"node" : "00000000-0000-0000-0000-000000000202",
"operation" : "accepted",
"packet" : 1,
"time" : 165
},
{
"after" : [
[
"senderIP",
"10.0.0.2"
],
[
"receiverIP",
"20.0.0.2"
],
[
"ttl",
"63"
],
[
"protocol",
"6"
]
],
"before" : [
[
"senderIP",
"10.0.0.2"
],
[
"receiverIP",
"20.0.0.2"
],
[
"ttl",
"64"
],
[
"protocol",
"6"
]
],
"detail" : "TTL decremented",
"direction" : "outbound",
"frame" : 3,
"id" : 22,
"interface" : "00000000-0000-0000-0000-000000000221",
"layer" : "network",
"node" : "00000000-0000-0000-0000-000000000202",
"operation" : "forwarded",
"packet" : 1,
"time" : 165
},
{
"after" : [
[
"sourceMAC",
"02:00:00:00:02:22"
],
[
"destinationMAC",
"FF:FF:FF:FF:FF:FF"
]
],
"before" : [
],
"detail" : "ARP request for 20.0.0.2",
"direction" : "outbound",
"frame" : 4,
"id" : 23,
"interface" : "00000000-0000-0000-0000-000000000222",
"layer" : "dataLink",
"node" : "00000000-0000-0000-0000-000000000202",
"operation" : "created",
"time" : 165
},
{
"after" : [
[
"sourceMAC",
"02:00:00:00:02:22"
],
[
"destinationMAC",
"FF:FF:FF:FF:FF:FF"
]
],
"before" : [
],
"direction" : "outbound",
"frame" : 4,
"id" : 24,
"interface" : "00000000-0000-0000-0000-000000000222",
"layer" : "physical",
"node" : "00000000-0000-0000-0000-000000000202",
"operation" : "sent",
"time" : 165
},
{
"after" : [
[
"sourceMAC",
"02:00:00:00:02:22"
],
[
"destinationMAC",
"FF:FF:FF:FF:FF:FF"
]
],
"before" : [
],
"detail" : "ARP request for 20.0.0.2",
"direction" : "outbound",
"frame" : 5,
"id" : 25,
"interface" : "00000000-0000-0000-0000-000000000222",
"layer" : "dataLink",
"node" : "00000000-0000-0000-0000-000000000202",
"operation" : "created",
"time" : 165
},
{
"after" : [
[
"sourceMAC",
"02:00:00:00:02:22"
],
[
"destinationMAC",
"FF:FF:FF:FF:FF:FF"
]
],
"before" : [
],
"direction" : "outbound",
"frame" : 5,
"id" : 26,
"interface" : "00000000-0000-0000-0000-000000000222",
"layer" : "physical",
"node" : "00000000-0000-0000-0000-000000000202",
"operation" : "sent",
"time" : 165
},
{
"after" : [
],
"before" : [
[
"senderIP",
"10.0.0.2"
],
[
"receiverIP",
"20.0.0.2"
],
[
"ttl",
"63"
],
[
"protocol",
"6"
]
],
"detail" : "waiting for ARP resolution of 20.0.0.2",
"direction" : "outbound",
"id" : 27,
"interface" : "00000000-0000-0000-0000-000000000222",
"layer" : "network",
"node" : "00000000-0000-0000-0000-000000000202",
"operation" : "created",
"packet" : 1,
"time" : 165
},
{
"after" : [
],
"before" : [
[
"sourceMAC",
"02:00:00:00:02:22"
],
[
"destinationMAC",
"FF:FF:FF:FF:FF:FF"
]
],
"direction" : "inbound",
"frame" : 4,
"id" : 28,
"interface" : "00000000-0000-0000-0000-000000000213",
"layer" : "physical",
"node" : "00000000-0000-0000-0000-000000000203",
"operation" : "received",
"time" : 220
},
{
"after" : [
],
"before" : [
[
"sourceMAC",
"02:00:00:00:02:22"
],
[
"destinationMAC",
"FF:FF:FF:FF:FF:FF"
]
],
"direction" : "inbound",
"frame" : 4,
"id" : 29,
"interface" : "00000000-0000-0000-0000-000000000213",
"layer" : "dataLink",
"node" : "00000000-0000-0000-0000-000000000203",
"operation" : "received",
"time" : 220
},
{
"after" : [
],
"before" : [
[
"operation",
"request"
],
[
"senderMAC",
"02:00:00:00:02:22"
],
[
"senderIP",
"20.0.0.1"
],
[
"targetMAC",
"00:00:00:00:00:00"
],
[
"targetIP",
"20.0.0.2"
]
],
"direction" : "inbound",
"frame" : 4,
"id" : 30,
"interface" : "00000000-0000-0000-0000-000000000213",
"layer" : "network",
"node" : "00000000-0000-0000-0000-000000000203",
"operation" : "accepted",
"time" : 220
},
{
"after" : [
[
"sourceMAC",
"02:00:00:00:02:13"
],
[
"destinationMAC",
"02:00:00:00:02:22"
]
],
"before" : [
],
"detail" : "ARP reply for 20.0.0.2",
"direction" : "outbound",
"frame" : 6,
"id" : 31,
"interface" : "00000000-0000-0000-0000-000000000213",
"layer" : "dataLink",
"node" : "00000000-0000-0000-0000-000000000203",
"operation" : "created",
"time" : 220
},
{
"after" : [
[
"sourceMAC",
"02:00:00:00:02:13"
],
[
"destinationMAC",
"02:00:00:00:02:22"
]
],
"before" : [
],
"direction" : "outbound",
"frame" : 6,
"id" : 32,
"interface" : "00000000-0000-0000-0000-000000000213",
"layer" : "physical",
"node" : "00000000-0000-0000-0000-000000000203",
"operation" : "sent",
"time" : 220
},
{
"after" : [
],
"before" : [
[
"sourceMAC",
"02:00:00:00:02:22"
],
[
"destinationMAC",
"FF:FF:FF:FF:FF:FF"
]
],
"direction" : "inbound",
"frame" : 5,
"id" : 33,
"interface" : "00000000-0000-0000-0000-000000000213",
"layer" : "physical",
"node" : "00000000-0000-0000-0000-000000000203",
"operation" : "received",
"time" : 220
},
{
"after" : [
],
"before" : [
[
"sourceMAC",
"02:00:00:00:02:22"
],
[
"destinationMAC",
"FF:FF:FF:FF:FF:FF"
]
],
"direction" : "inbound",
"frame" : 5,
"id" : 34,
"interface" : "00000000-0000-0000-0000-000000000213",
"layer" : "dataLink",
"node" : "00000000-0000-0000-0000-000000000203",
"operation" : "received",
"time" : 220
},
{
"after" : [
],
"before" : [
[
"operation",
"request"
],
[
"senderMAC",
"02:00:00:00:02:22"
],
[
"senderIP",
"20.0.0.1"
],
[
"targetMAC",
"00:00:00:00:00:00"
],
[
"targetIP",
"20.0.0.2"
]
],
"direction" : "inbound",
"frame" : 5,
"id" : 35,
"interface" : "00000000-0000-0000-0000-000000000213",
"layer" : "network",
"node" : "00000000-0000-0000-0000-000000000203",
"operation" : "accepted",
"time" : 220
},
{
"after" : [
[
"sourceMAC",
"02:00:00:00:02:13"
],
[
"destinationMAC",
"02:00:00:00:02:22"
]
],
"before" : [
],
"detail" : "ARP reply for 20.0.0.2",
"direction" : "outbound",
"frame" : 7,
"id" : 36,
"interface" : "00000000-0000-0000-0000-000000000213",
"layer" : "dataLink",
"node" : "00000000-0000-0000-0000-000000000203",
"operation" : "created",
"time" : 220
},
{
"after" : [
[
"sourceMAC",
"02:00:00:00:02:13"
],
[
"destinationMAC",
"02:00:00:00:02:22"
]
],
"before" : [
],
"direction" : "outbound",
"frame" : 7,
"id" : 37,
"interface" : "00000000-0000-0000-0000-000000000213",
"layer" : "physical",
"node" : "00000000-0000-0000-0000-000000000203",
"operation" : "sent",
"time" : 220
},
{
"after" : [
],
"before" : [
[
"sourceMAC",
"02:00:00:00:02:13"
],
[
"destinationMAC",
"02:00:00:00:02:22"
]
],
"direction" : "inbound",
"frame" : 6,
"id" : 38,
"interface" : "00000000-0000-0000-0000-000000000222",
"layer" : "physical",
"node" : "00000000-0000-0000-0000-000000000202",
"operation" : "received",
"time" : 275
},
{
"after" : [
],
"before" : [
[
"sourceMAC",
"02:00:00:00:02:13"
],
[
"destinationMAC",
"02:00:00:00:02:22"
]
],
"direction" : "inbound",
"frame" : 6,
"id" : 39,
"interface" : "00000000-0000-0000-0000-000000000222",
"layer" : "dataLink",
"node" : "00000000-0000-0000-0000-000000000202",
"operation" : "received",
"time" : 275
},
{
"after" : [
[
"senderIP",
"10.0.0.2"
],
[
"receiverIP",
"20.0.0.2"
],
[
"ttl",
"63"
],
[
"protocol",
"6"
]
],
"before" : [
],
"direction" : "outbound",
"frame" : 8,
"id" : 40,
"interface" : "00000000-0000-0000-0000-000000000222",
"layer" : "network",
"node" : "00000000-0000-0000-0000-000000000202",
"operation" : "forwarded",
"packet" : 1,
"time" : 275
},
{
"after" : [
[
"sourceMAC",
"02:00:00:00:02:22"
],
[
"destinationMAC",
"02:00:00:00:02:13"
]
],
"before" : [
],
"direction" : "outbound",
"frame" : 8,
"id" : 41,
"interface" : "00000000-0000-0000-0000-000000000222",
"layer" : "dataLink",
"node" : "00000000-0000-0000-0000-000000000202",
"operation" : "created",
"packet" : 1,
"time" : 275
},
{
"after" : [
[
"sourceMAC",
"02:00:00:00:02:22"
],
[
"destinationMAC",
"02:00:00:00:02:13"
]
],
"before" : [
],
"direction" : "outbound",
"frame" : 8,
"id" : 42,
"interface" : "00000000-0000-0000-0000-000000000222",
"layer" : "physical",
"node" : "00000000-0000-0000-0000-000000000202",
"operation" : "sent",
"packet" : 1,
"time" : 275
},
{
"after" : [
],
"before" : [
[
"operation",
"reply"
],
[
"senderMAC",
"02:00:00:00:02:13"
],
[
"senderIP",
"20.0.0.2"
],
[
"targetMAC",
"02:00:00:00:02:22"
],
[
"targetIP",
"20.0.0.1"
]
],
"direction" : "inbound",
"frame" : 6,
"id" : 43,
"interface" : "00000000-0000-0000-0000-000000000222",
"layer" : "network",
"node" : "00000000-0000-0000-0000-000000000202",
"operation" : "accepted",
"time" : 275
},
{
"after" : [
],
"before" : [
[
"sourceMAC",
"02:00:00:00:02:13"
],
[
"destinationMAC",
"02:00:00:00:02:22"
]
],
"direction" : "inbound",
"frame" : 7,
"id" : 44,
"interface" : "00000000-0000-0000-0000-000000000222",
"layer" : "physical",
"node" : "00000000-0000-0000-0000-000000000202",
"operation" : "received",
"time" : 275
},
{
"after" : [
],
"before" : [
[
"sourceMAC",
"02:00:00:00:02:13"
],
[
"destinationMAC",
"02:00:00:00:02:22"
]
],
"direction" : "inbound",
"frame" : 7,
"id" : 45,
"interface" : "00000000-0000-0000-0000-000000000222",
"layer" : "dataLink",
"node" : "00000000-0000-0000-0000-000000000202",
"operation" : "received",
"time" : 275
},
{
"after" : [
],
"before" : [
[
"operation",
"reply"
],
[
"senderMAC",
"02:00:00:00:02:13"
],
[
"senderIP",
"20.0.0.2"
],
[
"targetMAC",
"02:00:00:00:02:22"
],
[
"targetIP",
"20.0.0.1"
]
],
"direction" : "inbound",
"frame" : 7,
"id" : 46,
"interface" : "00000000-0000-0000-0000-000000000222",
"layer" : "network",
"node" : "00000000-0000-0000-0000-000000000202",
"operation" : "accepted",
"time" : 275
},
{
"after" : [
],
"before" : [
[
"sourceMAC",
"02:00:00:00:02:22"
],
[
"destinationMAC",
"02:00:00:00:02:13"
]
],
"direction" : "inbound",
"frame" : 8,
"id" : 47,
"interface" : "00000000-0000-0000-0000-000000000213",
"layer" : "physical",
"node" : "00000000-0000-0000-0000-000000000203",
"operation" : "received",
"packet" : 1,
"time" : 330
},
{
"after" : [
],
"before" : [
[
"sourceMAC",
"02:00:00:00:02:22"
],
[
"destinationMAC",
"02:00:00:00:02:13"
]
],
"direction" : "inbound",
"frame" : 8,
"id" : 48,
"interface" : "00000000-0000-0000-0000-000000000213",
"layer" : "dataLink",
"node" : "00000000-0000-0000-0000-000000000203",
"operation" : "received",
"packet" : 1,
"time" : 330
},
{
"after" : [
],
"before" : [
[
"senderIP",
"10.0.0.2"
],
[
"receiverIP",
"20.0.0.2"
],
[
"ttl",
"63"
],
[
"protocol",
"6"
]
],
"direction" : "inbound",
"frame" : 8,
"id" : 49,
"interface" : "00000000-0000-0000-0000-000000000213",
"layer" : "network",
"node" : "00000000-0000-0000-0000-000000000203",
"operation" : "received",
"packet" : 1,
"time" : 330
},
{
"after" : [
],
"before" : [
[
"sourcePort",
"50299"
],
[
"destinationPort",
"80"
],
[
"sequenceNumber",
"3000000"
],
[
"acknowledgementNumber",
"0"
],
[
"flags",
"SYN"
],
[
"payloadLength",
"0"
]
],
"detail" : "TCP segment received",
"direction" : "local",
"id" : 50,
"interface" : "00000000-0000-0000-0000-000000000213",
"layer" : "transport",
"node" : "00000000-0000-0000-0000-000000000203",
"operation" : "accepted",
"packet" : 1,
"time" : 330
},
{
"after" : [
[
"state",
"SYN_RCVD"
]
],
"before" : [
[
"state",
"LISTEN"
]
],
"detail" : "TCP LISTEN -> SYN_RCVD",
"direction" : "local",
"id" : 51,
"layer" : "transport",
"node" : "00000000-0000-0000-0000-000000000203",
"operation" : "accepted",
"time" : 330
},
{
"after" : [
[
"sourcePort",
"80"
],
[
"destinationPort",
"50299"
],
[
"sequenceNumber",
"4000000"
],
[
"acknowledgementNumber",
"3000001"
],
[
"flags",
"SYN+ACK"
],
[
"payloadLength",
"0"
]
],
"before" : [
],
"detail" : "TCP SYN+ACK",
"direction" : "outbound",
"id" : 52,
"interface" : "00000000-0000-0000-0000-000000000213",
"layer" : "transport",
"node" : "00000000-0000-0000-0000-000000000203",
"operation" : "sent",
"packet" : 2,
"time" : 330
},
{
"after" : [
[
"senderIP",
"20.0.0.2"
],
[
"receiverIP",
"10.0.0.2"
],
[
"ttl",
"64"
],
[
"protocol",
"6"
]
],
"before" : [
],
"direction" : "outbound",
"frame" : 9,
"id" : 53,
"interface" : "00000000-0000-0000-0000-000000000213",
"layer" : "network",
"node" : "00000000-0000-0000-0000-000000000203",
"operation" : "sent",
"packet" : 2,
"time" : 330
},
{
"after" : [
[
"sourceMAC",
"02:00:00:00:02:13"
],
[
"destinationMAC",
"02:00:00:00:02:22"
]
],
"before" : [
],
"direction" : "outbound",
"frame" : 9,
"id" : 54,
"interface" : "00000000-0000-0000-0000-000000000213",
"layer" : "dataLink",
"node" : "00000000-0000-0000-0000-000000000203",
"operation" : "created",
"packet" : 2,
"time" : 330
},
{
"after" : [
[
"sourceMAC",
"02:00:00:00:02:13"
],
[
"destinationMAC",
"02:00:00:00:02:22"
]
],
"before" : [
],
"direction" : "outbound",
"frame" : 9,
"id" : 55,
"interface" : "00000000-0000-0000-0000-000000000213",
"layer" : "physical",
"node" : "00000000-0000-0000-0000-000000000203",
"operation" : "sent",
"packet" : 2,
"time" : 330
},
{
"after" : [
],
"before" : [
[
"sourceMAC",
"02:00:00:00:02:13"
],
[
"destinationMAC",
"02:00:00:00:02:22"
]
],
"direction" : "inbound",
"frame" : 9,
"id" : 56,
"interface" : "00000000-0000-0000-0000-000000000222",
"layer" : "physical",
"node" : "00000000-0000-0000-0000-000000000202",
"operation" : "received",
"packet" : 2,
"time" : 385
},
{
"after" : [
],
"before" : [
[
"sourceMAC",
"02:00:00:00:02:13"
],
[
"destinationMAC",
"02:00:00:00:02:22"
]
],
"direction" : "inbound",
"frame" : 9,
"id" : 57,
"interface" : "00000000-0000-0000-0000-000000000222",
"layer" : "dataLink",
"node" : "00000000-0000-0000-0000-000000000202",
"operation" : "received",
"packet" : 2,
"time" : 385
},
{
"after" : [
],
"before" : [
[
"senderIP",
"20.0.0.2"
],
[
"receiverIP",
"10.0.0.2"
],
[
"ttl",
"64"
],
[
"protocol",
"6"
]
],
"direction" : "inbound",
"frame" : 9,
"id" : 58,
"interface" : "00000000-0000-0000-0000-000000000222",
"layer" : "network",
"node" : "00000000-0000-0000-0000-000000000202",
"operation" : "received",
"packet" : 2,
"time" : 385
},
{
"after" : [
],
"before" : [
[
"senderIP",
"20.0.0.2"
],
[
"receiverIP",
"10.0.0.2"
],
[
"ttl",
"64"
],
[
"protocol",
"6"
]
],
"detail" : "established TCP traffic bypasses SYN-only filtering",
"direction" : "inbound",
"frame" : 9,
"id" : 59,
"interface" : "00000000-0000-0000-0000-000000000222",
"layer" : "network",
"node" : "00000000-0000-0000-0000-000000000202",
"operation" : "accepted",
"packet" : 2,
"time" : 385
},
{
"after" : [
[
"senderIP",
"20.0.0.2"
],
[
"receiverIP",
"10.0.0.2"
],
[
"ttl",
"63"
],
[
"protocol",
"6"
]
],
"before" : [
[
"senderIP",
"20.0.0.2"
],
[
"receiverIP",
"10.0.0.2"
],
[
"ttl",
"64"
],
[
"protocol",
"6"
]
],
"detail" : "TTL decremented",
"direction" : "outbound",
"frame" : 9,
"id" : 60,
"interface" : "00000000-0000-0000-0000-000000000222",
"layer" : "network",
"node" : "00000000-0000-0000-0000-000000000202",
"operation" : "forwarded",
"packet" : 2,
"time" : 385
},
{
"after" : [
[
"senderIP",
"20.0.0.2"
],
[
"receiverIP",
"10.0.0.2"
],
[
"ttl",
"63"
],
[
"protocol",
"6"
]
],
"before" : [
],
"direction" : "outbound",
"frame" : 10,
"id" : 61,
"interface" : "00000000-0000-0000-0000-000000000221",
"layer" : "network",
"node" : "00000000-0000-0000-0000-000000000202",
"operation" : "forwarded",
"packet" : 2,
"time" : 385
},
{
"after" : [
[
"sourceMAC",
"02:00:00:00:02:21"
],
[
"destinationMAC",
"02:00:00:00:02:11"
]
],
"before" : [
],
"direction" : "outbound",
"frame" : 10,
"id" : 62,
"interface" : "00000000-0000-0000-0000-000000000221",
"layer" : "dataLink",
"node" : "00000000-0000-0000-0000-000000000202",
"operation" : "created",
"packet" : 2,
"time" : 385
},
{
"after" : [
[
"sourceMAC",
"02:00:00:00:02:21"
],
[
"destinationMAC",
"02:00:00:00:02:11"
]
],
"before" : [
],
"direction" : "outbound",
"frame" : 10,
"id" : 63,
"interface" : "00000000-0000-0000-0000-000000000221",
"layer" : "physical",
"node" : "00000000-0000-0000-0000-000000000202",
"operation" : "sent",
"packet" : 2,
"time" : 385
},
{
"after" : [
],
"before" : [
[
"sourceMAC",
"02:00:00:00:02:21"
],
[
"destinationMAC",
"02:00:00:00:02:11"
]
],
"direction" : "inbound",
"frame" : 10,
"id" : 64,
"interface" : "00000000-0000-0000-0000-000000000211",
"layer" : "physical",
"node" : "00000000-0000-0000-0000-000000000201",
"operation" : "received",
"packet" : 2,
"time" : 440
},
{
"after" : [
],
"before" : [
[
"sourceMAC",
"02:00:00:00:02:21"
],
[
"destinationMAC",
"02:00:00:00:02:11"
]
],
"direction" : "inbound",
"frame" : 10,
"id" : 65,
"interface" : "00000000-0000-0000-0000-000000000211",
"layer" : "dataLink",
"node" : "00000000-0000-0000-0000-000000000201",
"operation" : "received",
"packet" : 2,
"time" : 440
},
{
"after" : [
],
"before" : [
[
"senderIP",
"20.0.0.2"
],
[
"receiverIP",
"10.0.0.2"
],
[
"ttl",
"63"
],
[
"protocol",
"6"
]
],
"direction" : "inbound",
"frame" : 10,
"id" : 66,
"interface" : "00000000-0000-0000-0000-000000000211",
"layer" : "network",
"node" : "00000000-0000-0000-0000-000000000201",
"operation" : "received",
"packet" : 2,
"time" : 440
},
{
"after" : [
],
"before" : [
[
"sourcePort",
"80"
],
[
"destinationPort",
"50299"
],
[
"sequenceNumber",
"4000000"
],
[
"acknowledgementNumber",
"3000001"
],
[
"flags",
"SYN+ACK"
],
[
"payloadLength",
"0"
]
],
"detail" : "TCP segment received",
"direction" : "local",
"id" : 67,
"interface" : "00000000-0000-0000-0000-000000000211",
"layer" : "transport",
"node" : "00000000-0000-0000-0000-000000000201",
"operation" : "accepted",
"packet" : 2,
"time" : 440
},
{
"after" : [
[
"state",
"ESTABLISHED"
]
],
"before" : [
[
"state",
"SYN_SENT"
]
],
"detail" : "TCP SYN_SENT -> ESTABLISHED",
"direction" : "local",
"id" : 68,
"layer" : "transport",
"node" : "00000000-0000-0000-0000-000000000201",
"operation" : "accepted",
"time" : 440
},
{
"after" : [
[
"sourcePort",
"50299"
],
[
"destinationPort",
"80"
],
[
"sequenceNumber",
"3000001"
],
[
"acknowledgementNumber",
"4000001"
],
[
"flags",
"ACK"
],
[
"payloadLength",
"0"
]
],
"before" : [
],
"detail" : "TCP ACK",
"direction" : "outbound",
"id" : 69,
"interface" : "00000000-0000-0000-0000-000000000211",
"layer" : "transport",
"node" : "00000000-0000-0000-0000-000000000201",
"operation" : "sent",
"packet" : 3,
"time" : 440
},
{
"after" : [
[
"senderIP",
"10.0.0.2"
],
[
"receiverIP",
"20.0.0.2"
],
[
"ttl",
"64"
],
[
"protocol",
"6"
]
],
"before" : [
],
"direction" : "outbound",
"frame" : 11,
"id" : 70,
"interface" : "00000000-0000-0000-0000-000000000211",
"layer" : "network",
"node" : "00000000-0000-0000-0000-000000000201",
"operation" : "sent",
"packet" : 3,
"time" : 440
},
{
"after" : [
[
"sourceMAC",
"02:00:00:00:02:11"
],
[
"destinationMAC",
"02:00:00:00:02:21"
]
],
"before" : [
],
"direction" : "outbound",
"frame" : 11,
"id" : 71,
"interface" : "00000000-0000-0000-0000-000000000211",
"layer" : "dataLink",
"node" : "00000000-0000-0000-0000-000000000201",
"operation" : "created",
"packet" : 3,
"time" : 440
},
{
"after" : [
[
"sourceMAC",
"02:00:00:00:02:11"
],
[
"destinationMAC",
"02:00:00:00:02:21"
]
],
"before" : [
],
"direction" : "outbound",
"frame" : 11,
"id" : 72,
"interface" : "00000000-0000-0000-0000-000000000211",
"layer" : "physical",
"node" : "00000000-0000-0000-0000-000000000201",
"operation" : "sent",
"packet" : 3,
"time" : 440
},
{
"after" : [
],
"before" : [
[
"sourceMAC",
"02:00:00:00:02:11"
],
[
"destinationMAC",
"02:00:00:00:02:21"
]
],
"direction" : "inbound",
"frame" : 11,
"id" : 73,
"interface" : "00000000-0000-0000-0000-000000000221",
"layer" : "physical",
"node" : "00000000-0000-0000-0000-000000000202",
"operation" : "received",
"packet" : 3,
"time" : 495
},
{
"after" : [
],
"before" : [
[
"sourceMAC",
"02:00:00:00:02:11"
],
[
"destinationMAC",
"02:00:00:00:02:21"
]
],
"direction" : "inbound",
"frame" : 11,
"id" : 74,
"interface" : "00000000-0000-0000-0000-000000000221",
"layer" : "dataLink",
"node" : "00000000-0000-0000-0000-000000000202",
"operation" : "received",
"packet" : 3,
"time" : 495
},
{
"after" : [
],
"before" : [
[
"senderIP",
"10.0.0.2"
],
[
"receiverIP",
"20.0.0.2"
],
[
"ttl",
"64"
],
[
"protocol",
"6"
]
],
"direction" : "inbound",
"frame" : 11,
"id" : 75,
"interface" : "00000000-0000-0000-0000-000000000221",
"layer" : "network",
"node" : "00000000-0000-0000-0000-000000000202",
"operation" : "received",
"packet" : 3,
"time" : 495
},
{
"after" : [
],
"before" : [
[
"senderIP",
"10.0.0.2"
],
[
"receiverIP",
"20.0.0.2"
],
[
"ttl",
"64"
],
[
"protocol",
"6"
]
],
"detail" : "established TCP traffic bypasses SYN-only filtering",
"direction" : "inbound",
"frame" : 11,
"id" : 76,
"interface" : "00000000-0000-0000-0000-000000000221",
"layer" : "network",
"node" : "00000000-0000-0000-0000-000000000202",
"operation" : "accepted",
"packet" : 3,
"time" : 495
},
{
"after" : [
[
"senderIP",
"10.0.0.2"
],
[
"receiverIP",
"20.0.0.2"
],
[
"ttl",
"63"
],
[
"protocol",
"6"
]
],
"before" : [
[
"senderIP",
"10.0.0.2"
],
[
"receiverIP",
"20.0.0.2"
],
[
"ttl",
"64"
],
[
"protocol",
"6"
]
],
"detail" : "TTL decremented",
"direction" : "outbound",
"frame" : 11,
"id" : 77,
"interface" : "00000000-0000-0000-0000-000000000221",
"layer" : "network",
"node" : "00000000-0000-0000-0000-000000000202",
"operation" : "forwarded",
"packet" : 3,
"time" : 495
},
{
"after" : [
[
"senderIP",
"10.0.0.2"
],
[
"receiverIP",
"20.0.0.2"
],
[
"ttl",
"63"
],
[
"protocol",
"6"
]
],
"before" : [
],
"direction" : "outbound",
"frame" : 12,
"id" : 78,
"interface" : "00000000-0000-0000-0000-000000000222",
"layer" : "network",
"node" : "00000000-0000-0000-0000-000000000202",
"operation" : "forwarded",
"packet" : 3,
"time" : 495
},
{
"after" : [
[
"sourceMAC",
"02:00:00:00:02:22"
],
[
"destinationMAC",
"02:00:00:00:02:13"
]
],
"before" : [
],
"direction" : "outbound",
"frame" : 12,
"id" : 79,
"interface" : "00000000-0000-0000-0000-000000000222",
"layer" : "dataLink",
"node" : "00000000-0000-0000-0000-000000000202",
"operation" : "created",
"packet" : 3,
"time" : 495
},
{
"after" : [
[
"sourceMAC",
"02:00:00:00:02:22"
],
[
"destinationMAC",
"02:00:00:00:02:13"
]
],
"before" : [
],
"direction" : "outbound",
"frame" : 12,
"id" : 80,
"interface" : "00000000-0000-0000-0000-000000000222",
"layer" : "physical",
"node" : "00000000-0000-0000-0000-000000000202",
"operation" : "sent",
"packet" : 3,
"time" : 495
},
{
"after" : [
],
"before" : [
[
"sourceMAC",
"02:00:00:00:02:22"
],
[
"destinationMAC",
"02:00:00:00:02:13"
]
],
"direction" : "inbound",
"frame" : 12,
"id" : 81,
"interface" : "00000000-0000-0000-0000-000000000213",
"layer" : "physical",
"node" : "00000000-0000-0000-0000-000000000203",
"operation" : "received",
"packet" : 3,
"time" : 550
},
{
"after" : [
],
"before" : [
[
"sourceMAC",
"02:00:00:00:02:22"
],
[
"destinationMAC",
"02:00:00:00:02:13"
]
],
"direction" : "inbound",
"frame" : 12,
"id" : 82,
"interface" : "00000000-0000-0000-0000-000000000213",
"layer" : "dataLink",
"node" : "00000000-0000-0000-0000-000000000203",
"operation" : "received",
"packet" : 3,
"time" : 550
},
{
"after" : [
],
"before" : [
[
"senderIP",
"10.0.0.2"
],
[
"receiverIP",
"20.0.0.2"
],
[
"ttl",
"63"
],
[
"protocol",
"6"
]
],
"direction" : "inbound",
"frame" : 12,
"id" : 83,
"interface" : "00000000-0000-0000-0000-000000000213",
"layer" : "network",
"node" : "00000000-0000-0000-0000-000000000203",
"operation" : "received",
"packet" : 3,
"time" : 550
},
{
"after" : [
],
"before" : [
[
"sourcePort",
"50299"
],
[
"destinationPort",
"80"
],
[
"sequenceNumber",
"3000001"
],
[
"acknowledgementNumber",
"4000001"
],
[
"flags",
"ACK"
],
[
"payloadLength",
"0"
]
],
"detail" : "TCP segment received",
"direction" : "local",
"id" : 84,
"interface" : "00000000-0000-0000-0000-000000000213",
"layer" : "transport",
"node" : "00000000-0000-0000-0000-000000000203",
"operation" : "accepted",
"packet" : 3,
"time" : 550
},
{
"after" : [
[
"state",
"ESTABLISHED"
]
],
"before" : [
[
"state",
"SYN_RCVD"
]
],
"detail" : "TCP SYN_RCVD -> ESTABLISHED",
"direction" : "local",
"id" : 85,
"layer" : "transport",
"node" : "00000000-0000-0000-0000-000000000203",
"operation" : "accepted",
"time" : 550
},
{
"after" : [
[
"sourcePort",
"50299"
],
[
"destinationPort",
"80"
],
[
"sequenceNumber",
"3000001"
],
[
"acknowledgementNumber",
"0"
],
[
"flags",
"PSH"
],
[
"payloadLength",
"16"
]
],
"before" : [
],
"detail" : "TCP data segment 1\/1",
"direction" : "outbound",
"id" : 86,
"interface" : "00000000-0000-0000-0000-000000000211",
"layer" : "transport",
"node" : "00000000-0000-0000-0000-000000000201",
"operation" : "sent",
"packet" : 4,
"time" : 550
},
{
"after" : [
[
"senderIP",
"10.0.0.2"
],
[
"receiverIP",
"20.0.0.2"
],
[
"ttl",
"64"
],
[
"protocol",
"6"
]
],
"before" : [
],
"direction" : "outbound",
"frame" : 13,
"id" : 87,
"interface" : "00000000-0000-0000-0000-000000000211",
"layer" : "network",
"node" : "00000000-0000-0000-0000-000000000201",
"operation" : "sent",
"packet" : 4,
"time" : 550
},
{
"after" : [
[
"sourceMAC",
"02:00:00:00:02:11"
],
[
"destinationMAC",
"02:00:00:00:02:21"
]
],
"before" : [
],
"direction" : "outbound",
"frame" : 13,
"id" : 88,
"interface" : "00000000-0000-0000-0000-000000000211",
"layer" : "dataLink",
"node" : "00000000-0000-0000-0000-000000000201",
"operation" : "created",
"packet" : 4,
"time" : 550
},
{
"after" : [
[
"sourceMAC",
"02:00:00:00:02:11"
],
[
"destinationMAC",
"02:00:00:00:02:21"
]
],
"before" : [
],
"direction" : "outbound",
"frame" : 13,
"id" : 89,
"interface" : "00000000-0000-0000-0000-000000000211",
"layer" : "physical",
"node" : "00000000-0000-0000-0000-000000000201",
"operation" : "sent",
"packet" : 4,
"time" : 550
},
{
"after" : [
],
"before" : [
[
"sourceMAC",
"02:00:00:00:02:11"
],
[
"destinationMAC",
"02:00:00:00:02:21"
]
],
"direction" : "inbound",
"frame" : 13,
"id" : 90,
"interface" : "00000000-0000-0000-0000-000000000221",
"layer" : "physical",
"node" : "00000000-0000-0000-0000-000000000202",
"operation" : "received",
"packet" : 4,
"time" : 605
},
{
"after" : [
],
"before" : [
[
"sourceMAC",
"02:00:00:00:02:11"
],
[
"destinationMAC",
"02:00:00:00:02:21"
]
],
"direction" : "inbound",
"frame" : 13,
"id" : 91,
"interface" : "00000000-0000-0000-0000-000000000221",
"layer" : "dataLink",
"node" : "00000000-0000-0000-0000-000000000202",
"operation" : "received",
"packet" : 4,
"time" : 605
},
{
"after" : [
],
"before" : [
[
"senderIP",
"10.0.0.2"
],
[
"receiverIP",
"20.0.0.2"
],
[
"ttl",
"64"
],
[
"protocol",
"6"
]
],
"direction" : "inbound",
"frame" : 13,
"id" : 92,
"interface" : "00000000-0000-0000-0000-000000000221",
"layer" : "network",
"node" : "00000000-0000-0000-0000-000000000202",
"operation" : "received",
"packet" : 4,
"time" : 605
},
{
"after" : [
],
"before" : [
[
"senderIP",
"10.0.0.2"
],
[
"receiverIP",
"20.0.0.2"
],
[
"ttl",
"64"
],
[
"protocol",
"6"
]
],
"detail" : "established TCP traffic bypasses SYN-only filtering",
"direction" : "inbound",
"frame" : 13,
"id" : 93,
"interface" : "00000000-0000-0000-0000-000000000221",
"layer" : "network",
"node" : "00000000-0000-0000-0000-000000000202",
"operation" : "accepted",
"packet" : 4,
"time" : 605
},
{
"after" : [
[
"senderIP",
"10.0.0.2"
],
[
"receiverIP",
"20.0.0.2"
],
[
"ttl",
"63"
],
[
"protocol",
"6"
]
],
"before" : [
[
"senderIP",
"10.0.0.2"
],
[
"receiverIP",
"20.0.0.2"
],
[
"ttl",
"64"
],
[
"protocol",
"6"
]
],
"detail" : "TTL decremented",
"direction" : "outbound",
"frame" : 13,
"id" : 94,
"interface" : "00000000-0000-0000-0000-000000000221",
"layer" : "network",
"node" : "00000000-0000-0000-0000-000000000202",
"operation" : "forwarded",
"packet" : 4,
"time" : 605
},
{
"after" : [
[
"senderIP",
"10.0.0.2"
],
[
"receiverIP",
"20.0.0.2"
],
[
"ttl",
"63"
],
[
"protocol",
"6"
]
],
"before" : [
],
"direction" : "outbound",
"frame" : 14,
"id" : 95,
"interface" : "00000000-0000-0000-0000-000000000222",
"layer" : "network",
"node" : "00000000-0000-0000-0000-000000000202",
"operation" : "forwarded",
"packet" : 4,
"time" : 605
},
{
"after" : [
[
"sourceMAC",
"02:00:00:00:02:22"
],
[
"destinationMAC",
"02:00:00:00:02:13"
]
],
"before" : [
],
"direction" : "outbound",
"frame" : 14,
"id" : 96,
"interface" : "00000000-0000-0000-0000-000000000222",
"layer" : "dataLink",
"node" : "00000000-0000-0000-0000-000000000202",
"operation" : "created",
"packet" : 4,
"time" : 605
},
{
"after" : [
[
"sourceMAC",
"02:00:00:00:02:22"
],
[
"destinationMAC",
"02:00:00:00:02:13"
]
],
"before" : [
],
"direction" : "outbound",
"frame" : 14,
"id" : 97,
"interface" : "00000000-0000-0000-0000-000000000222",
"layer" : "physical",
"node" : "00000000-0000-0000-0000-000000000202",
"operation" : "sent",
"packet" : 4,
"time" : 605
},
{
"after" : [
],
"before" : [
[
"sourceMAC",
"02:00:00:00:02:22"
],
[
"destinationMAC",
"02:00:00:00:02:13"
]
],
"direction" : "inbound",
"frame" : 14,
"id" : 98,
"interface" : "00000000-0000-0000-0000-000000000213",
"layer" : "physical",
"node" : "00000000-0000-0000-0000-000000000203",
"operation" : "received",
"packet" : 4,
"time" : 660
},
{
"after" : [
],
"before" : [
[
"sourceMAC",
"02:00:00:00:02:22"
],
[
"destinationMAC",
"02:00:00:00:02:13"
]
],
"direction" : "inbound",
"frame" : 14,
"id" : 99,
"interface" : "00000000-0000-0000-0000-000000000213",
"layer" : "dataLink",
"node" : "00000000-0000-0000-0000-000000000203",
"operation" : "received",
"packet" : 4,
"time" : 660
},
{
"after" : [
],
"before" : [
[
"senderIP",
"10.0.0.2"
],
[
"receiverIP",
"20.0.0.2"
],
[
"ttl",
"63"
],
[
"protocol",
"6"
]
],
"direction" : "inbound",
"frame" : 14,
"id" : 100,
"interface" : "00000000-0000-0000-0000-000000000213",
"layer" : "network",
"node" : "00000000-0000-0000-0000-000000000203",
"operation" : "received",
"packet" : 4,
"time" : 660
},
{
"after" : [
],
"before" : [
[
"sourcePort",
"50299"
],
[
"destinationPort",
"80"
],
[
"sequenceNumber",
"3000001"
],
[
"acknowledgementNumber",
"0"
],
[
"flags",
"PSH"
],
[
"payloadLength",
"16"
]
],
"detail" : "TCP segment received",
"direction" : "local",
"id" : 101,
"interface" : "00000000-0000-0000-0000-000000000213",
"layer" : "transport",
"node" : "00000000-0000-0000-0000-000000000203",
"operation" : "accepted",
"packet" : 4,
"time" : 660
},
{
"after" : [
[
"sourcePort",
"80"
],
[
"destinationPort",
"50299"
],
[
"sequenceNumber",
"4000001"
],
[
"acknowledgementNumber",
"3000017"
],
[
"flags",
"ACK"
],
[
"payloadLength",
"0"
]
],
"before" : [
],
"detail" : "TCP ACK",
"direction" : "outbound",
"id" : 102,
"interface" : "00000000-0000-0000-0000-000000000213",
"layer" : "transport",
"node" : "00000000-0000-0000-0000-000000000203",
"operation" : "sent",
"packet" : 5,
"time" : 660
},
{
"after" : [
[
"senderIP",
"20.0.0.2"
],
[
"receiverIP",
"10.0.0.2"
],
[
"ttl",
"64"
],
[
"protocol",
"6"
]
],
"before" : [
],
"direction" : "outbound",
"frame" : 15,
"id" : 103,
"interface" : "00000000-0000-0000-0000-000000000213",
"layer" : "network",
"node" : "00000000-0000-0000-0000-000000000203",
"operation" : "sent",
"packet" : 5,
"time" : 660
},
{
"after" : [
[
"sourceMAC",
"02:00:00:00:02:13"
],
[
"destinationMAC",
"02:00:00:00:02:22"
]
],
"before" : [
],
"direction" : "outbound",
"frame" : 15,
"id" : 104,
"interface" : "00000000-0000-0000-0000-000000000213",
"layer" : "dataLink",
"node" : "00000000-0000-0000-0000-000000000203",
"operation" : "created",
"packet" : 5,
"time" : 660
},
{
"after" : [
[
"sourceMAC",
"02:00:00:00:02:13"
],
[
"destinationMAC",
"02:00:00:00:02:22"
]
],
"before" : [
],
"direction" : "outbound",
"frame" : 15,
"id" : 105,
"interface" : "00000000-0000-0000-0000-000000000213",
"layer" : "physical",
"node" : "00000000-0000-0000-0000-000000000203",
"operation" : "sent",
"packet" : 5,
"time" : 660
},
{
"after" : [
],
"before" : [
[
"sourceMAC",
"02:00:00:00:02:13"
],
[
"destinationMAC",
"02:00:00:00:02:22"
]
],
"direction" : "inbound",
"frame" : 15,
"id" : 106,
"interface" : "00000000-0000-0000-0000-000000000222",
"layer" : "physical",
"node" : "00000000-0000-0000-0000-000000000202",
"operation" : "received",
"packet" : 5,
"time" : 715
},
{
"after" : [
],
"before" : [
[
"sourceMAC",
"02:00:00:00:02:13"
],
[
"destinationMAC",
"02:00:00:00:02:22"
]
],
"direction" : "inbound",
"frame" : 15,
"id" : 107,
"interface" : "00000000-0000-0000-0000-000000000222",
"layer" : "dataLink",
"node" : "00000000-0000-0000-0000-000000000202",
"operation" : "received",
"packet" : 5,
"time" : 715
},
{
"after" : [
],
"before" : [
[
"senderIP",
"20.0.0.2"
],
[
"receiverIP",
"10.0.0.2"
],
[
"ttl",
"64"
],
[
"protocol",
"6"
]
],
"direction" : "inbound",
"frame" : 15,
"id" : 108,
"interface" : "00000000-0000-0000-0000-000000000222",
"layer" : "network",
"node" : "00000000-0000-0000-0000-000000000202",
"operation" : "received",
"packet" : 5,
"time" : 715
},
{
"after" : [
],
"before" : [
[
"senderIP",
"20.0.0.2"
],
[
"receiverIP",
"10.0.0.2"
],
[
"ttl",
"64"
],
[
"protocol",
"6"
]
],
"detail" : "established TCP traffic bypasses SYN-only filtering",
"direction" : "inbound",
"frame" : 15,
"id" : 109,
"interface" : "00000000-0000-0000-0000-000000000222",
"layer" : "network",
"node" : "00000000-0000-0000-0000-000000000202",
"operation" : "accepted",
"packet" : 5,
"time" : 715
},
{
"after" : [
[
"senderIP",
"20.0.0.2"
],
[
"receiverIP",
"10.0.0.2"
],
[
"ttl",
"63"
],
[
"protocol",
"6"
]
],
"before" : [
[
"senderIP",
"20.0.0.2"
],
[
"receiverIP",
"10.0.0.2"
],
[
"ttl",
"64"
],
[
"protocol",
"6"
]
],
"detail" : "TTL decremented",
"direction" : "outbound",
"frame" : 15,
"id" : 110,
"interface" : "00000000-0000-0000-0000-000000000222",
"layer" : "network",
"node" : "00000000-0000-0000-0000-000000000202",
"operation" : "forwarded",
"packet" : 5,
"time" : 715
},
{
"after" : [
[
"senderIP",
"20.0.0.2"
],
[
"receiverIP",
"10.0.0.2"
],
[
"ttl",
"63"
],
[
"protocol",
"6"
]
],
"before" : [
],
"direction" : "outbound",
"frame" : 16,
"id" : 111,
"interface" : "00000000-0000-0000-0000-000000000221",
"layer" : "network",
"node" : "00000000-0000-0000-0000-000000000202",
"operation" : "forwarded",
"packet" : 5,
"time" : 715
},
{
"after" : [
[
"sourceMAC",
"02:00:00:00:02:21"
],
[
"destinationMAC",
"02:00:00:00:02:11"
]
],
"before" : [
],
"direction" : "outbound",
"frame" : 16,
"id" : 112,
"interface" : "00000000-0000-0000-0000-000000000221",
"layer" : "dataLink",
"node" : "00000000-0000-0000-0000-000000000202",
"operation" : "created",
"packet" : 5,
"time" : 715
},
{
"after" : [
[
"sourceMAC",
"02:00:00:00:02:21"
],
[
"destinationMAC",
"02:00:00:00:02:11"
]
],
"before" : [
],
"direction" : "outbound",
"frame" : 16,
"id" : 113,
"interface" : "00000000-0000-0000-0000-000000000221",
"layer" : "physical",
"node" : "00000000-0000-0000-0000-000000000202",
"operation" : "sent",
"packet" : 5,
"time" : 715
},
{
"after" : [
],
"before" : [
[
"sourceMAC",
"02:00:00:00:02:21"
],
[
"destinationMAC",
"02:00:00:00:02:11"
]
],
"direction" : "inbound",
"frame" : 16,
"id" : 114,
"interface" : "00000000-0000-0000-0000-000000000211",
"layer" : "physical",
"node" : "00000000-0000-0000-0000-000000000201",
"operation" : "received",
"packet" : 5,
"time" : 770
},
{
"after" : [
],
"before" : [
[
"sourceMAC",
"02:00:00:00:02:21"
],
[
"destinationMAC",
"02:00:00:00:02:11"
]
],
"direction" : "inbound",
"frame" : 16,
"id" : 115,
"interface" : "00000000-0000-0000-0000-000000000211",
"layer" : "dataLink",
"node" : "00000000-0000-0000-0000-000000000201",
"operation" : "received",
"packet" : 5,
"time" : 770
},
{
"after" : [
],
"before" : [
[
"senderIP",
"20.0.0.2"
],
[
"receiverIP",
"10.0.0.2"
],
[
"ttl",
"63"
],
[
"protocol",
"6"
]
],
"direction" : "inbound",
"frame" : 16,
"id" : 116,
"interface" : "00000000-0000-0000-0000-000000000211",
"layer" : "network",
"node" : "00000000-0000-0000-0000-000000000201",
"operation" : "received",
"packet" : 5,
"time" : 770
},
{
"after" : [
],
"before" : [
[
"sourcePort",
"80"
],
[
"destinationPort",
"50299"
],
[
"sequenceNumber",
"4000001"
],
[
"acknowledgementNumber",
"3000017"
],
[
"flags",
"ACK"
],
[
"payloadLength",
"0"
]
],
"detail" : "TCP segment received",
"direction" : "local",
"id" : 117,
"interface" : "00000000-0000-0000-0000-000000000211",
"layer" : "transport",
"node" : "00000000-0000-0000-0000-000000000201",
"operation" : "accepted",
"packet" : 5,
"time" : 770
},
{
"after" : [
[
"state",
"SYN_SENT"
]
],
"before" : [
[
"state",
"CLOSED"
]
],
"detail" : "TCP CLOSED -> SYN_SENT",
"direction" : "local",
"id" : 118,
"layer" : "transport",
"node" : "00000000-0000-0000-0000-000000000201",
"operation" : "accepted",
"time" : 770
},
{
"after" : [
[
"sourcePort",
"63015"
],
[
"destinationPort",
"81"
],
[
"sequenceNumber",
"5000000"
],
[
"acknowledgementNumber",
"0"
],
[
"flags",
"SYN"
],
[
"payloadLength",
"0"
]
],
"before" : [
],
"detail" : "TCP SYN",
"direction" : "outbound",
"id" : 119,
"interface" : "00000000-0000-0000-0000-000000000211",
"layer" : "transport",
"node" : "00000000-0000-0000-0000-000000000201",
"operation" : "sent",
"packet" : 6,
"time" : 770
},
{
"after" : [
[
"senderIP",
"10.0.0.2"
],
[
"receiverIP",
"20.0.0.2"
],
[
"ttl",
"64"
],
[
"protocol",
"6"
]
],
"before" : [
],
"direction" : "outbound",
"frame" : 17,
"id" : 120,
"interface" : "00000000-0000-0000-0000-000000000211",
"layer" : "network",
"node" : "00000000-0000-0000-0000-000000000201",
"operation" : "sent",
"packet" : 6,
"time" : 770
},
{
"after" : [
[
"sourceMAC",
"02:00:00:00:02:11"
],
[
"destinationMAC",
"02:00:00:00:02:21"
]
],
"before" : [
],
"direction" : "outbound",
"frame" : 17,
"id" : 121,
"interface" : "00000000-0000-0000-0000-000000000211",
"layer" : "dataLink",
"node" : "00000000-0000-0000-0000-000000000201",
"operation" : "created",
"packet" : 6,
"time" : 770
},
{
"after" : [
[
"sourceMAC",
"02:00:00:00:02:11"
],
[
"destinationMAC",
"02:00:00:00:02:21"
]
],
"before" : [
],
"direction" : "outbound",
"frame" : 17,
"id" : 122,
"interface" : "00000000-0000-0000-0000-000000000211",
"layer" : "physical",
"node" : "00000000-0000-0000-0000-000000000201",
"operation" : "sent",
"packet" : 6,
"time" : 770
},
{
"after" : [
],
"before" : [
[
"sourceMAC",
"02:00:00:00:02:11"
],
[
"destinationMAC",
"02:00:00:00:02:21"
]
],
"direction" : "inbound",
"frame" : 17,
"id" : 123,
"interface" : "00000000-0000-0000-0000-000000000221",
"layer" : "physical",
"node" : "00000000-0000-0000-0000-000000000202",
"operation" : "received",
"packet" : 6,
"time" : 825
},
{
"after" : [
],
"before" : [
[
"sourceMAC",
"02:00:00:00:02:11"
],
[
"destinationMAC",
"02:00:00:00:02:21"
]
],
"direction" : "inbound",
"frame" : 17,
"id" : 124,
"interface" : "00000000-0000-0000-0000-000000000221",
"layer" : "dataLink",
"node" : "00000000-0000-0000-0000-000000000202",
"operation" : "received",
"packet" : 6,
"time" : 825
},
{
"after" : [
],
"before" : [
[
"senderIP",
"10.0.0.2"
],
[
"receiverIP",
"20.0.0.2"
],
[
"ttl",
"64"
],
[
"protocol",
"6"
]
],
"direction" : "inbound",
"frame" : 17,
"id" : 125,
"interface" : "00000000-0000-0000-0000-000000000221",
"layer" : "network",
"node" : "00000000-0000-0000-0000-000000000202",
"operation" : "received",
"packet" : 6,
"time" : 825
},
{
"after" : [
],
"before" : [
[
"senderIP",
"10.0.0.2"
],
[
"receiverIP",
"20.0.0.2"
],
[
"ttl",
"64"
],
[
"protocol",
"6"
]
],
"detail" : "TCP matched rule #1",
"direction" : "inbound",
"frame" : 17,
"id" : 126,
"interface" : "00000000-0000-0000-0000-000000000221",
"layer" : "network",
"node" : "00000000-0000-0000-0000-000000000202",
"operation" : "dropped",
"packet" : 6,
"time" : 825
},
{
"after" : [
[
"sourcePort",
"63015"
],
[
"destinationPort",
"81"
],
[
"sequenceNumber",
"5000000"
],
[
"acknowledgementNumber",
"0"
],
[
"flags",
"SYN"
],
[
"payloadLength",
"0"
]
],
"before" : [
],
"detail" : "TCP SYN retransmission attempt 2",
"direction" : "outbound",
"id" : 127,
"interface" : "00000000-0000-0000-0000-000000000211",
"layer" : "transport",
"node" : "00000000-0000-0000-0000-000000000201",
"operation" : "retransmitted",
"packet" : 7,
"time" : 8325
},
{
"after" : [
[
"senderIP",
"10.0.0.2"
],
[
"receiverIP",
"20.0.0.2"
],
[
"ttl",
"64"
],
[
"protocol",
"6"
]
],
"before" : [
],
"direction" : "outbound",
"frame" : 18,
"id" : 128,
"interface" : "00000000-0000-0000-0000-000000000211",
"layer" : "network",
"node" : "00000000-0000-0000-0000-000000000201",
"operation" : "sent",
"packet" : 7,
"time" : 8325
},
{
"after" : [
[
"sourceMAC",
"02:00:00:00:02:11"
],
[
"destinationMAC",
"02:00:00:00:02:21"
]
],
"before" : [
],
"direction" : "outbound",
"frame" : 18,
"id" : 129,
"interface" : "00000000-0000-0000-0000-000000000211",
"layer" : "dataLink",
"node" : "00000000-0000-0000-0000-000000000201",
"operation" : "created",
"packet" : 7,
"time" : 8325
},
{
"after" : [
[
"sourceMAC",
"02:00:00:00:02:11"
],
[
"destinationMAC",
"02:00:00:00:02:21"
]
],
"before" : [
],
"direction" : "outbound",
"frame" : 18,
"id" : 130,
"interface" : "00000000-0000-0000-0000-000000000211",
"layer" : "physical",
"node" : "00000000-0000-0000-0000-000000000201",
"operation" : "sent",
"packet" : 7,
"time" : 8325
},
{
"after" : [
],
"before" : [
[
"sourceMAC",
"02:00:00:00:02:11"
],
[
"destinationMAC",
"02:00:00:00:02:21"
]
],
"direction" : "inbound",
"frame" : 18,
"id" : 131,
"interface" : "00000000-0000-0000-0000-000000000221",
"layer" : "physical",
"node" : "00000000-0000-0000-0000-000000000202",
"operation" : "received",
"packet" : 7,
"time" : 8380
},
{
"after" : [
],
"before" : [
[
"sourceMAC",
"02:00:00:00:02:11"
],
[
"destinationMAC",
"02:00:00:00:02:21"
]
],
"direction" : "inbound",
"frame" : 18,
"id" : 132,
"interface" : "00000000-0000-0000-0000-000000000221",
"layer" : "dataLink",
"node" : "00000000-0000-0000-0000-000000000202",
"operation" : "received",
"packet" : 7,
"time" : 8380
},
{
"after" : [
],
"before" : [
[
"senderIP",
"10.0.0.2"
],
[
"receiverIP",
"20.0.0.2"
],
[
"ttl",
"64"
],
[
"protocol",
"6"
]
],
"direction" : "inbound",
"frame" : 18,
"id" : 133,
"interface" : "00000000-0000-0000-0000-000000000221",
"layer" : "network",
"node" : "00000000-0000-0000-0000-000000000202",
"operation" : "received",
"packet" : 7,
"time" : 8380
},
{
"after" : [
],
"before" : [
[
"senderIP",
"10.0.0.2"
],
[
"receiverIP",
"20.0.0.2"
],
[
"ttl",
"64"
],
[
"protocol",
"6"
]
],
"detail" : "TCP matched rule #1",
"direction" : "inbound",
"frame" : 18,
"id" : 134,
"interface" : "00000000-0000-0000-0000-000000000221",
"layer" : "network",
"node" : "00000000-0000-0000-0000-000000000202",
"operation" : "dropped",
"packet" : 7,
"time" : 8380
},
{
"after" : [
[
"sourcePort",
"63015"
],
[
"destinationPort",
"81"
],
[
"sequenceNumber",
"5000000"
],
[
"acknowledgementNumber",
"0"
],
[
"flags",
"SYN"
],
[
"payloadLength",
"0"
]
],
"before" : [
],
"detail" : "TCP SYN retransmission attempt 3",
"direction" : "outbound",
"id" : 135,
"interface" : "00000000-0000-0000-0000-000000000211",
"layer" : "transport",
"node" : "00000000-0000-0000-0000-000000000201",
"operation" : "retransmitted",
"packet" : 8,
"time" : 15825
},
{
"after" : [
[
"senderIP",
"10.0.0.2"
],
[
"receiverIP",
"20.0.0.2"
],
[
"ttl",
"64"
],
[
"protocol",
"6"
]
],
"before" : [
],
"direction" : "outbound",
"frame" : 19,
"id" : 136,
"interface" : "00000000-0000-0000-0000-000000000211",
"layer" : "network",
"node" : "00000000-0000-0000-0000-000000000201",
"operation" : "sent",
"packet" : 8,
"time" : 15825
},
{
"after" : [
[
"sourceMAC",
"02:00:00:00:02:11"
],
[
"destinationMAC",
"02:00:00:00:02:21"
]
],
"before" : [
],
"direction" : "outbound",
"frame" : 19,
"id" : 137,
"interface" : "00000000-0000-0000-0000-000000000211",
"layer" : "dataLink",
"node" : "00000000-0000-0000-0000-000000000201",
"operation" : "created",
"packet" : 8,
"time" : 15825
},
{
"after" : [
[
"sourceMAC",
"02:00:00:00:02:11"
],
[
"destinationMAC",
"02:00:00:00:02:21"
]
],
"before" : [
],
"direction" : "outbound",
"frame" : 19,
"id" : 138,
"interface" : "00000000-0000-0000-0000-000000000211",
"layer" : "physical",
"node" : "00000000-0000-0000-0000-000000000201",
"operation" : "sent",
"packet" : 8,
"time" : 15825
},
{
"after" : [
],
"before" : [
[
"sourceMAC",
"02:00:00:00:02:11"
],
[
"destinationMAC",
"02:00:00:00:02:21"
]
],
"direction" : "inbound",
"frame" : 19,
"id" : 139,
"interface" : "00000000-0000-0000-0000-000000000221",
"layer" : "physical",
"node" : "00000000-0000-0000-0000-000000000202",
"operation" : "received",
"packet" : 8,
"time" : 15880
},
{
"after" : [
],
"before" : [
[
"sourceMAC",
"02:00:00:00:02:11"
],
[
"destinationMAC",
"02:00:00:00:02:21"
]
],
"direction" : "inbound",
"frame" : 19,
"id" : 140,
"interface" : "00000000-0000-0000-0000-000000000221",
"layer" : "dataLink",
"node" : "00000000-0000-0000-0000-000000000202",
"operation" : "received",
"packet" : 8,
"time" : 15880
},
{
"after" : [
],
"before" : [
[
"senderIP",
"10.0.0.2"
],
[
"receiverIP",
"20.0.0.2"
],
[
"ttl",
"64"
],
[
"protocol",
"6"
]
],
"direction" : "inbound",
"frame" : 19,
"id" : 141,
"interface" : "00000000-0000-0000-0000-000000000221",
"layer" : "network",
"node" : "00000000-0000-0000-0000-000000000202",
"operation" : "received",
"packet" : 8,
"time" : 15880
},
{
"after" : [
],
"before" : [
[
"senderIP",
"10.0.0.2"
],
[
"receiverIP",
"20.0.0.2"
],
[
"ttl",
"64"
],
[
"protocol",
"6"
]
],
"detail" : "TCP matched rule #1",
"direction" : "inbound",
"frame" : 19,
"id" : 142,
"interface" : "00000000-0000-0000-0000-000000000221",
"layer" : "network",
"node" : "00000000-0000-0000-0000-000000000202",
"operation" : "dropped",
"packet" : 8,
"time" : 15880
},
{
"after" : [
[
"state",
"CLOSED"
]
],
"before" : [
[
"state",
"SYN_SENT"
]
],
"detail" : "TCP SYN_SENT -> CLOSED",
"direction" : "local",
"id" : 143,
"layer" : "transport",
"node" : "00000000-0000-0000-0000-000000000201",
"operation" : "accepted",
"time" : 23325
},
{
"after" : [
[
"sourcePort",
"50299"
],
[
"destinationPort",
"80"
],
[
"sequenceNumber",
"3000017"
],
[
"acknowledgementNumber",
"0"
],
[
"flags",
"PSH"
],
[
"payloadLength",
"8"
]
],
"before" : [
],
"detail" : "TCP data segment 1\/1",
"direction" : "outbound",
"id" : 144,
"interface" : "00000000-0000-0000-0000-000000000211",
"layer" : "transport",
"node" : "00000000-0000-0000-0000-000000000201",
"operation" : "sent",
"packet" : 9,
"time" : 23325
},
{
"after" : [
[
"senderIP",
"10.0.0.2"
],
[
"receiverIP",
"20.0.0.2"
],
[
"ttl",
"64"
],
[
"protocol",
"6"
]
],
"before" : [
],
"direction" : "outbound",
"frame" : 20,
"id" : 145,
"interface" : "00000000-0000-0000-0000-000000000211",
"layer" : "network",
"node" : "00000000-0000-0000-0000-000000000201",
"operation" : "sent",
"packet" : 9,
"time" : 23325
},
{
"after" : [
[
"sourceMAC",
"02:00:00:00:02:11"
],
[
"destinationMAC",
"02:00:00:00:02:21"
]
],
"before" : [
],
"direction" : "outbound",
"frame" : 20,
"id" : 146,
"interface" : "00000000-0000-0000-0000-000000000211",
"layer" : "dataLink",
"node" : "00000000-0000-0000-0000-000000000201",
"operation" : "created",
"packet" : 9,
"time" : 23325
},
{
"after" : [
[
"sourceMAC",
"02:00:00:00:02:11"
],
[
"destinationMAC",
"02:00:00:00:02:21"
]
],
"before" : [
],
"direction" : "outbound",
"frame" : 20,
"id" : 147,
"interface" : "00000000-0000-0000-0000-000000000211",
"layer" : "physical",
"node" : "00000000-0000-0000-0000-000000000201",
"operation" : "sent",
"packet" : 9,
"time" : 23325
},
{
"after" : [
[
"sourceMAC",
"02:00:00:00:02:11"
],
[
"destinationMAC",
"02:00:00:00:02:21"
]
],
"before" : [
],
"detail" : "global packet-loss simulation",
"direction" : "inbound",
"frame" : 20,
"id" : 148,
"interface" : "00000000-0000-0000-0000-000000000221",
"layer" : "physical",
"node" : "00000000-0000-0000-0000-000000000202",
"operation" : "dropped",
"packet" : 9,
"time" : 23380
},
{
"after" : [
[
"sourcePort",
"50299"
],
[
"destinationPort",
"80"
],
[
"sequenceNumber",
"3000017"
],
[
"acknowledgementNumber",
"0"
],
[
"flags",
"PSH"
],
[
"payloadLength",
"8"
]
],
"before" : [
],
"detail" : "TCP data retransmission attempt 2",
"direction" : "outbound",
"id" : 149,
"interface" : "00000000-0000-0000-0000-000000000211",
"layer" : "transport",
"node" : "00000000-0000-0000-0000-000000000201",
"operation" : "retransmitted",
"packet" : 10,
"time" : 30880
},
{
"after" : [
[
"senderIP",
"10.0.0.2"
],
[
"receiverIP",
"20.0.0.2"
],
[
"ttl",
"64"
],
[
"protocol",
"6"
]
],
"before" : [
],
"direction" : "outbound",
"frame" : 21,
"id" : 150,
"interface" : "00000000-0000-0000-0000-000000000211",
"layer" : "network",
"node" : "00000000-0000-0000-0000-000000000201",
"operation" : "sent",
"packet" : 10,
"time" : 30880
},
{
"after" : [
[
"sourceMAC",
"02:00:00:00:02:11"
],
[
"destinationMAC",
"02:00:00:00:02:21"
]
],
"before" : [
],
"direction" : "outbound",
"frame" : 21,
"id" : 151,
"interface" : "00000000-0000-0000-0000-000000000211",
"layer" : "dataLink",
"node" : "00000000-0000-0000-0000-000000000201",
"operation" : "created",
"packet" : 10,
"time" : 30880
},
{
"after" : [
[
"sourceMAC",
"02:00:00:00:02:11"
],
[
"destinationMAC",
"02:00:00:00:02:21"
]
],
"before" : [
],
"direction" : "outbound",
"frame" : 21,
"id" : 152,
"interface" : "00000000-0000-0000-0000-000000000211",
"layer" : "physical",
"node" : "00000000-0000-0000-0000-000000000201",
"operation" : "sent",
"packet" : 10,
"time" : 30880
},
{
"after" : [
[
"sourceMAC",
"02:00:00:00:02:11"
],
[
"destinationMAC",
"02:00:00:00:02:21"
]
],
"before" : [
],
"detail" : "global packet-loss simulation",
"direction" : "inbound",
"frame" : 21,
"id" : 153,
"interface" : "00000000-0000-0000-0000-000000000221",
"layer" : "physical",
"node" : "00000000-0000-0000-0000-000000000202",
"operation" : "dropped",
"packet" : 10,
"time" : 30935
},
{
"after" : [
[
"sourcePort",
"50299"
],
[
"destinationPort",
"80"
],
[
"sequenceNumber",
"3000017"
],
[
"acknowledgementNumber",
"0"
],
[
"flags",
"PSH"
],
[
"payloadLength",
"8"
]
],
"before" : [
],
"detail" : "TCP data retransmission attempt 3",
"direction" : "outbound",
"id" : 154,
"interface" : "00000000-0000-0000-0000-000000000211",
"layer" : "transport",
"node" : "00000000-0000-0000-0000-000000000201",
"operation" : "retransmitted",
"packet" : 11,
"time" : 38380
},
{
"after" : [
[
"senderIP",
"10.0.0.2"
],
[
"receiverIP",
"20.0.0.2"
],
[
"ttl",
"64"
],
[
"protocol",
"6"
]
],
"before" : [
],
"direction" : "outbound",
"frame" : 22,
"id" : 155,
"interface" : "00000000-0000-0000-0000-000000000211",
"layer" : "network",
"node" : "00000000-0000-0000-0000-000000000201",
"operation" : "sent",
"packet" : 11,
"time" : 38380
},
{
"after" : [
[
"sourceMAC",
"02:00:00:00:02:11"
],
[
"destinationMAC",
"02:00:00:00:02:21"
]
],
"before" : [
],
"direction" : "outbound",
"frame" : 22,
"id" : 156,
"interface" : "00000000-0000-0000-0000-000000000211",
"layer" : "dataLink",
"node" : "00000000-0000-0000-0000-000000000201",
"operation" : "created",
"packet" : 11,
"time" : 38380
},
{
"after" : [
[
"sourceMAC",
"02:00:00:00:02:11"
],
[
"destinationMAC",
"02:00:00:00:02:21"
]
],
"before" : [
],
"direction" : "outbound",
"frame" : 22,
"id" : 157,
"interface" : "00000000-0000-0000-0000-000000000211",
"layer" : "physical",
"node" : "00000000-0000-0000-0000-000000000201",
"operation" : "sent",
"packet" : 11,
"time" : 38380
},
{
"after" : [
[
"sourceMAC",
"02:00:00:00:02:11"
],
[
"destinationMAC",
"02:00:00:00:02:21"
]
],
"before" : [
],
"detail" : "global packet-loss simulation",
"direction" : "inbound",
"frame" : 22,
"id" : 158,
"interface" : "00000000-0000-0000-0000-000000000221",
"layer" : "physical",
"node" : "00000000-0000-0000-0000-000000000202",
"operation" : "dropped",
"packet" : 11,
"time" : 38435
},
{
"after" : [
[
"state",
"CLOSED"
]
],
"before" : [
[
"state",
"ESTABLISHED"
]
],
"detail" : "TCP ESTABLISHED -> CLOSED",
"direction" : "local",
"id" : 159,
"layer" : "transport",
"node" : "00000000-0000-0000-0000-000000000201",
"operation" : "accepted",
"time" : 45880
},
{
"after" : [
[
"state",
"CLOSED"
]
],
"before" : [
[
"state",
"LISTEN"
]
],
"detail" : "TCP LISTEN -> CLOSED",
"direction" : "local",
"id" : 160,
"layer" : "transport",
"node" : "00000000-0000-0000-0000-000000000203",
"operation" : "accepted",
"time" : 45880
},
{
"after" : [
[
"state",
"LISTEN"
]
],
"before" : [
[
"state",
"CLOSED"
]
],
"detail" : "TCP CLOSED -> LISTEN",
"direction" : "local",
"id" : 161,
"layer" : "transport",
"node" : "00000000-0000-0000-0000-000000000203",
"operation" : "accepted",
"time" : 45880
}
]
}
Reference in New Issue View Git Blame Copy Permalink