tools/swift-oracle builds the unchanged Swift runtime (pinned 3b5ded0) in Docker and replays JSON scenarios; the TypeScript engine must produce the same trace events, results and end state. Five scenarios, 884 events, identical. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
5327 lines
104 KiB
JSON
5327 lines
104 KiB
JSON
{
|
|
"arp" : {
|
|
"00000000-0000-0000-0000-000000000201" : {
|
|
"10.0.0.1" : "02:00:00:00:02:21"
|
|
},
|
|
"00000000-0000-0000-0000-000000000202" : {
|
|
"10.0.0.2" : "02:00:00:00:02:11",
|
|
"20.0.0.2" : "02:00:00:00:02:13"
|
|
},
|
|
"00000000-0000-0000-0000-000000000203" : {
|
|
"20.0.0.1" : "02:00:00:00:02:22"
|
|
}
|
|
},
|
|
"firewallDecisions" : [
|
|
{
|
|
"accepted" : true,
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"packet" : 1
|
|
},
|
|
{
|
|
"accepted" : true,
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"packet" : 2
|
|
},
|
|
{
|
|
"accepted" : true,
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"packet" : 3
|
|
},
|
|
{
|
|
"accepted" : true,
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"packet" : 5
|
|
},
|
|
{
|
|
"accepted" : true,
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"packet" : 7
|
|
},
|
|
{
|
|
"accepted" : true,
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"packet" : 8
|
|
},
|
|
{
|
|
"accepted" : true,
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"packet" : 9
|
|
},
|
|
{
|
|
"accepted" : true,
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"packet" : 11
|
|
},
|
|
{
|
|
"accepted" : true,
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"packet" : 13
|
|
}
|
|
],
|
|
"icmpObservations" : {
|
|
"00000000-0000-0000-0000-000000000201" : [
|
|
{
|
|
"identifier" : 10,
|
|
"kind" : "echoReply",
|
|
"sender" : "20.0.0.2",
|
|
"sequence" : 1
|
|
},
|
|
{
|
|
"identifier" : 11,
|
|
"kind" : "timeExceeded",
|
|
"sender" : "10.0.0.1",
|
|
"sequence" : 1
|
|
},
|
|
{
|
|
"identifier" : 12,
|
|
"kind" : "timeExceeded",
|
|
"sender" : "10.0.0.1",
|
|
"sequence" : 1
|
|
},
|
|
{
|
|
"identifier" : 12,
|
|
"kind" : "echoReply",
|
|
"sender" : "20.0.0.2",
|
|
"sequence" : 2
|
|
},
|
|
{
|
|
"identifier" : 13,
|
|
"kind" : "destinationNetworkUnreachable",
|
|
"sender" : "10.0.0.1",
|
|
"sequence" : 1
|
|
},
|
|
{
|
|
"identifier" : 14,
|
|
"kind" : "destinationHostUnreachable",
|
|
"sender" : "10.0.0.1",
|
|
"sequence" : 1
|
|
}
|
|
],
|
|
"00000000-0000-0000-0000-000000000203" : [
|
|
{
|
|
"identifier" : 15,
|
|
"kind" : "echoReply",
|
|
"sender" : "20.0.0.1",
|
|
"sequence" : 1
|
|
}
|
|
]
|
|
},
|
|
"pendingEvents" : 0,
|
|
"results" : [
|
|
{
|
|
"node" : "00000000-0000-0000-0000-000000000201",
|
|
"packet" : 1,
|
|
"type" : "delivered"
|
|
},
|
|
{
|
|
"kind" : "timeExceeded",
|
|
"node" : "00000000-0000-0000-0000-000000000201",
|
|
"packet" : 3,
|
|
"type" : "icmpError"
|
|
},
|
|
[
|
|
{
|
|
"identifier" : 12,
|
|
"kind" : "timeExceeded",
|
|
"sender" : "10.0.0.1",
|
|
"sequence" : 1
|
|
},
|
|
{
|
|
"identifier" : 12,
|
|
"kind" : "echoReply",
|
|
"sender" : "20.0.0.2",
|
|
"sequence" : 2
|
|
}
|
|
],
|
|
{
|
|
"kind" : "destinationNetworkUnreachable",
|
|
"node" : "00000000-0000-0000-0000-000000000201",
|
|
"packet" : 9,
|
|
"type" : "icmpError"
|
|
},
|
|
{
|
|
"kind" : "destinationHostUnreachable",
|
|
"node" : "00000000-0000-0000-0000-000000000201",
|
|
"packet" : 11,
|
|
"type" : "icmpError"
|
|
},
|
|
{
|
|
"node" : "00000000-0000-0000-0000-000000000203",
|
|
"packet" : 13,
|
|
"type" : "delivered"
|
|
},
|
|
"02:00:00:00:02:22"
|
|
],
|
|
"switchTables" : {
|
|
|
|
},
|
|
"time" : 1210,
|
|
"traces" : [
|
|
{
|
|
"after" : [
|
|
[
|
|
"senderIP",
|
|
"10.0.0.2"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"20.0.0.2"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "ICMP echo request",
|
|
"direction" : "outbound",
|
|
"id" : 1,
|
|
"interface" : "00000000-0000-0000-0000-000000000211",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000201",
|
|
"operation" : "created",
|
|
"packet" : 1,
|
|
"time" : 0
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "ARP request for 10.0.0.1",
|
|
"direction" : "outbound",
|
|
"frame" : 1,
|
|
"id" : 2,
|
|
"interface" : "00000000-0000-0000-0000-000000000211",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000201",
|
|
"operation" : "created",
|
|
"time" : 0
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 1,
|
|
"id" : 3,
|
|
"interface" : "00000000-0000-0000-0000-000000000211",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000201",
|
|
"operation" : "sent",
|
|
"time" : 0
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 1,
|
|
"id" : 4,
|
|
"interface" : "00000000-0000-0000-0000-000000000221",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "received",
|
|
"time" : 55
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 1,
|
|
"id" : 5,
|
|
"interface" : "00000000-0000-0000-0000-000000000221",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "received",
|
|
"time" : 55
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"operation",
|
|
"request"
|
|
],
|
|
[
|
|
"senderMAC",
|
|
"02:00:00:00:02:11"
|
|
],
|
|
[
|
|
"senderIP",
|
|
"10.0.0.2"
|
|
],
|
|
[
|
|
"targetMAC",
|
|
"00:00:00:00:00:00"
|
|
],
|
|
[
|
|
"targetIP",
|
|
"10.0.0.1"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 1,
|
|
"id" : 6,
|
|
"interface" : "00000000-0000-0000-0000-000000000221",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "accepted",
|
|
"time" : 55
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:21"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:11"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "ARP reply for 10.0.0.1",
|
|
"direction" : "outbound",
|
|
"frame" : 2,
|
|
"id" : 7,
|
|
"interface" : "00000000-0000-0000-0000-000000000221",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "created",
|
|
"time" : 55
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:21"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:11"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 2,
|
|
"id" : 8,
|
|
"interface" : "00000000-0000-0000-0000-000000000221",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "sent",
|
|
"time" : 55
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:21"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:11"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 2,
|
|
"id" : 9,
|
|
"interface" : "00000000-0000-0000-0000-000000000211",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000201",
|
|
"operation" : "received",
|
|
"time" : 110
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:21"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:11"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 2,
|
|
"id" : 10,
|
|
"interface" : "00000000-0000-0000-0000-000000000211",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000201",
|
|
"operation" : "received",
|
|
"time" : 110
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"operation",
|
|
"reply"
|
|
],
|
|
[
|
|
"senderMAC",
|
|
"02:00:00:00:02:21"
|
|
],
|
|
[
|
|
"senderIP",
|
|
"10.0.0.1"
|
|
],
|
|
[
|
|
"targetMAC",
|
|
"02:00:00:00:02:11"
|
|
],
|
|
[
|
|
"targetIP",
|
|
"10.0.0.2"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 2,
|
|
"id" : 11,
|
|
"interface" : "00000000-0000-0000-0000-000000000211",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000201",
|
|
"operation" : "accepted",
|
|
"time" : 110
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"senderIP",
|
|
"10.0.0.2"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"20.0.0.2"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 3,
|
|
"id" : 12,
|
|
"interface" : "00000000-0000-0000-0000-000000000211",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000201",
|
|
"operation" : "sent",
|
|
"packet" : 1,
|
|
"time" : 110
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:21"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 3,
|
|
"id" : 13,
|
|
"interface" : "00000000-0000-0000-0000-000000000211",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000201",
|
|
"operation" : "created",
|
|
"packet" : 1,
|
|
"time" : 110
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:21"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 3,
|
|
"id" : 14,
|
|
"interface" : "00000000-0000-0000-0000-000000000211",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000201",
|
|
"operation" : "sent",
|
|
"packet" : 1,
|
|
"time" : 110
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:21"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 3,
|
|
"id" : 15,
|
|
"interface" : "00000000-0000-0000-0000-000000000221",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "received",
|
|
"packet" : 1,
|
|
"time" : 165
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:21"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 3,
|
|
"id" : 16,
|
|
"interface" : "00000000-0000-0000-0000-000000000221",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "received",
|
|
"packet" : 1,
|
|
"time" : 165
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"senderIP",
|
|
"10.0.0.2"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"20.0.0.2"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 3,
|
|
"id" : 17,
|
|
"interface" : "00000000-0000-0000-0000-000000000221",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "received",
|
|
"packet" : 1,
|
|
"time" : 165
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"senderIP",
|
|
"10.0.0.2"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"20.0.0.2"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"detail" : "firewall inactive",
|
|
"direction" : "inbound",
|
|
"frame" : 3,
|
|
"id" : 18,
|
|
"interface" : "00000000-0000-0000-0000-000000000221",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "accepted",
|
|
"packet" : 1,
|
|
"time" : 165
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"senderIP",
|
|
"10.0.0.2"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"20.0.0.2"
|
|
],
|
|
[
|
|
"ttl",
|
|
"63"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"before" : [
|
|
[
|
|
"senderIP",
|
|
"10.0.0.2"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"20.0.0.2"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"detail" : "TTL decremented",
|
|
"direction" : "outbound",
|
|
"frame" : 3,
|
|
"id" : 19,
|
|
"interface" : "00000000-0000-0000-0000-000000000221",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "forwarded",
|
|
"packet" : 1,
|
|
"time" : 165
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:22"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "ARP request for 20.0.0.2",
|
|
"direction" : "outbound",
|
|
"frame" : 4,
|
|
"id" : 20,
|
|
"interface" : "00000000-0000-0000-0000-000000000222",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "created",
|
|
"time" : 165
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:22"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 4,
|
|
"id" : 21,
|
|
"interface" : "00000000-0000-0000-0000-000000000222",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "sent",
|
|
"time" : 165
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:22"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "ARP request for 20.0.0.2",
|
|
"direction" : "outbound",
|
|
"frame" : 5,
|
|
"id" : 22,
|
|
"interface" : "00000000-0000-0000-0000-000000000222",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "created",
|
|
"time" : 165
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:22"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 5,
|
|
"id" : 23,
|
|
"interface" : "00000000-0000-0000-0000-000000000222",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "sent",
|
|
"time" : 165
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"senderIP",
|
|
"10.0.0.2"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"20.0.0.2"
|
|
],
|
|
[
|
|
"ttl",
|
|
"63"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"detail" : "waiting for ARP resolution of 20.0.0.2",
|
|
"direction" : "outbound",
|
|
"id" : 24,
|
|
"interface" : "00000000-0000-0000-0000-000000000222",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "created",
|
|
"packet" : 1,
|
|
"time" : 165
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:22"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 4,
|
|
"id" : 25,
|
|
"interface" : "00000000-0000-0000-0000-000000000213",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000203",
|
|
"operation" : "received",
|
|
"time" : 220
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:22"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 4,
|
|
"id" : 26,
|
|
"interface" : "00000000-0000-0000-0000-000000000213",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000203",
|
|
"operation" : "received",
|
|
"time" : 220
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"operation",
|
|
"request"
|
|
],
|
|
[
|
|
"senderMAC",
|
|
"02:00:00:00:02:22"
|
|
],
|
|
[
|
|
"senderIP",
|
|
"20.0.0.1"
|
|
],
|
|
[
|
|
"targetMAC",
|
|
"00:00:00:00:00:00"
|
|
],
|
|
[
|
|
"targetIP",
|
|
"20.0.0.2"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 4,
|
|
"id" : 27,
|
|
"interface" : "00000000-0000-0000-0000-000000000213",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000203",
|
|
"operation" : "accepted",
|
|
"time" : 220
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:22"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "ARP reply for 20.0.0.2",
|
|
"direction" : "outbound",
|
|
"frame" : 6,
|
|
"id" : 28,
|
|
"interface" : "00000000-0000-0000-0000-000000000213",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000203",
|
|
"operation" : "created",
|
|
"time" : 220
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:22"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 6,
|
|
"id" : 29,
|
|
"interface" : "00000000-0000-0000-0000-000000000213",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000203",
|
|
"operation" : "sent",
|
|
"time" : 220
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:22"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 5,
|
|
"id" : 30,
|
|
"interface" : "00000000-0000-0000-0000-000000000213",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000203",
|
|
"operation" : "received",
|
|
"time" : 220
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:22"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 5,
|
|
"id" : 31,
|
|
"interface" : "00000000-0000-0000-0000-000000000213",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000203",
|
|
"operation" : "received",
|
|
"time" : 220
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"operation",
|
|
"request"
|
|
],
|
|
[
|
|
"senderMAC",
|
|
"02:00:00:00:02:22"
|
|
],
|
|
[
|
|
"senderIP",
|
|
"20.0.0.1"
|
|
],
|
|
[
|
|
"targetMAC",
|
|
"00:00:00:00:00:00"
|
|
],
|
|
[
|
|
"targetIP",
|
|
"20.0.0.2"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 5,
|
|
"id" : 32,
|
|
"interface" : "00000000-0000-0000-0000-000000000213",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000203",
|
|
"operation" : "accepted",
|
|
"time" : 220
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:22"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "ARP reply for 20.0.0.2",
|
|
"direction" : "outbound",
|
|
"frame" : 7,
|
|
"id" : 33,
|
|
"interface" : "00000000-0000-0000-0000-000000000213",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000203",
|
|
"operation" : "created",
|
|
"time" : 220
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:22"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 7,
|
|
"id" : 34,
|
|
"interface" : "00000000-0000-0000-0000-000000000213",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000203",
|
|
"operation" : "sent",
|
|
"time" : 220
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:22"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 6,
|
|
"id" : 35,
|
|
"interface" : "00000000-0000-0000-0000-000000000222",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "received",
|
|
"time" : 275
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:22"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 6,
|
|
"id" : 36,
|
|
"interface" : "00000000-0000-0000-0000-000000000222",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "received",
|
|
"time" : 275
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"senderIP",
|
|
"10.0.0.2"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"20.0.0.2"
|
|
],
|
|
[
|
|
"ttl",
|
|
"63"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 8,
|
|
"id" : 37,
|
|
"interface" : "00000000-0000-0000-0000-000000000222",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "forwarded",
|
|
"packet" : 1,
|
|
"time" : 275
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:22"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:13"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 8,
|
|
"id" : 38,
|
|
"interface" : "00000000-0000-0000-0000-000000000222",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "created",
|
|
"packet" : 1,
|
|
"time" : 275
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:22"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:13"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 8,
|
|
"id" : 39,
|
|
"interface" : "00000000-0000-0000-0000-000000000222",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "sent",
|
|
"packet" : 1,
|
|
"time" : 275
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"operation",
|
|
"reply"
|
|
],
|
|
[
|
|
"senderMAC",
|
|
"02:00:00:00:02:13"
|
|
],
|
|
[
|
|
"senderIP",
|
|
"20.0.0.2"
|
|
],
|
|
[
|
|
"targetMAC",
|
|
"02:00:00:00:02:22"
|
|
],
|
|
[
|
|
"targetIP",
|
|
"20.0.0.1"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 6,
|
|
"id" : 40,
|
|
"interface" : "00000000-0000-0000-0000-000000000222",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "accepted",
|
|
"time" : 275
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:22"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 7,
|
|
"id" : 41,
|
|
"interface" : "00000000-0000-0000-0000-000000000222",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "received",
|
|
"time" : 275
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:22"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 7,
|
|
"id" : 42,
|
|
"interface" : "00000000-0000-0000-0000-000000000222",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "received",
|
|
"time" : 275
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"operation",
|
|
"reply"
|
|
],
|
|
[
|
|
"senderMAC",
|
|
"02:00:00:00:02:13"
|
|
],
|
|
[
|
|
"senderIP",
|
|
"20.0.0.2"
|
|
],
|
|
[
|
|
"targetMAC",
|
|
"02:00:00:00:02:22"
|
|
],
|
|
[
|
|
"targetIP",
|
|
"20.0.0.1"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 7,
|
|
"id" : 43,
|
|
"interface" : "00000000-0000-0000-0000-000000000222",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "accepted",
|
|
"time" : 275
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:22"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:13"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 8,
|
|
"id" : 44,
|
|
"interface" : "00000000-0000-0000-0000-000000000213",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000203",
|
|
"operation" : "received",
|
|
"packet" : 1,
|
|
"time" : 330
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:22"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:13"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 8,
|
|
"id" : 45,
|
|
"interface" : "00000000-0000-0000-0000-000000000213",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000203",
|
|
"operation" : "received",
|
|
"packet" : 1,
|
|
"time" : 330
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"senderIP",
|
|
"10.0.0.2"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"20.0.0.2"
|
|
],
|
|
[
|
|
"ttl",
|
|
"63"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 8,
|
|
"id" : 46,
|
|
"interface" : "00000000-0000-0000-0000-000000000213",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000203",
|
|
"operation" : "received",
|
|
"packet" : 1,
|
|
"time" : 330
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"senderIP",
|
|
"20.0.0.2"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"10.0.0.2"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "ICMP echo reply",
|
|
"direction" : "outbound",
|
|
"id" : 47,
|
|
"interface" : "00000000-0000-0000-0000-000000000213",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000203",
|
|
"operation" : "created",
|
|
"packet" : 2,
|
|
"time" : 330
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"senderIP",
|
|
"20.0.0.2"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"10.0.0.2"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 9,
|
|
"id" : 48,
|
|
"interface" : "00000000-0000-0000-0000-000000000213",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000203",
|
|
"operation" : "sent",
|
|
"packet" : 2,
|
|
"time" : 330
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:22"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 9,
|
|
"id" : 49,
|
|
"interface" : "00000000-0000-0000-0000-000000000213",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000203",
|
|
"operation" : "created",
|
|
"packet" : 2,
|
|
"time" : 330
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:22"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 9,
|
|
"id" : 50,
|
|
"interface" : "00000000-0000-0000-0000-000000000213",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000203",
|
|
"operation" : "sent",
|
|
"packet" : 2,
|
|
"time" : 330
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:22"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 9,
|
|
"id" : 51,
|
|
"interface" : "00000000-0000-0000-0000-000000000222",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "received",
|
|
"packet" : 2,
|
|
"time" : 385
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:22"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 9,
|
|
"id" : 52,
|
|
"interface" : "00000000-0000-0000-0000-000000000222",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "received",
|
|
"packet" : 2,
|
|
"time" : 385
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"senderIP",
|
|
"20.0.0.2"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"10.0.0.2"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 9,
|
|
"id" : 53,
|
|
"interface" : "00000000-0000-0000-0000-000000000222",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "received",
|
|
"packet" : 2,
|
|
"time" : 385
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"senderIP",
|
|
"20.0.0.2"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"10.0.0.2"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"detail" : "firewall inactive",
|
|
"direction" : "inbound",
|
|
"frame" : 9,
|
|
"id" : 54,
|
|
"interface" : "00000000-0000-0000-0000-000000000222",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "accepted",
|
|
"packet" : 2,
|
|
"time" : 385
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"senderIP",
|
|
"20.0.0.2"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"10.0.0.2"
|
|
],
|
|
[
|
|
"ttl",
|
|
"63"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"before" : [
|
|
[
|
|
"senderIP",
|
|
"20.0.0.2"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"10.0.0.2"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"detail" : "TTL decremented",
|
|
"direction" : "outbound",
|
|
"frame" : 9,
|
|
"id" : 55,
|
|
"interface" : "00000000-0000-0000-0000-000000000222",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "forwarded",
|
|
"packet" : 2,
|
|
"time" : 385
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"senderIP",
|
|
"20.0.0.2"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"10.0.0.2"
|
|
],
|
|
[
|
|
"ttl",
|
|
"63"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 10,
|
|
"id" : 56,
|
|
"interface" : "00000000-0000-0000-0000-000000000221",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "forwarded",
|
|
"packet" : 2,
|
|
"time" : 385
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:21"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:11"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 10,
|
|
"id" : 57,
|
|
"interface" : "00000000-0000-0000-0000-000000000221",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "created",
|
|
"packet" : 2,
|
|
"time" : 385
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:21"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:11"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 10,
|
|
"id" : 58,
|
|
"interface" : "00000000-0000-0000-0000-000000000221",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "sent",
|
|
"packet" : 2,
|
|
"time" : 385
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:21"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:11"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 10,
|
|
"id" : 59,
|
|
"interface" : "00000000-0000-0000-0000-000000000211",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000201",
|
|
"operation" : "received",
|
|
"packet" : 2,
|
|
"time" : 440
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:21"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:11"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 10,
|
|
"id" : 60,
|
|
"interface" : "00000000-0000-0000-0000-000000000211",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000201",
|
|
"operation" : "received",
|
|
"packet" : 2,
|
|
"time" : 440
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"senderIP",
|
|
"20.0.0.2"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"10.0.0.2"
|
|
],
|
|
[
|
|
"ttl",
|
|
"63"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 10,
|
|
"id" : 61,
|
|
"interface" : "00000000-0000-0000-0000-000000000211",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000201",
|
|
"operation" : "received",
|
|
"packet" : 2,
|
|
"time" : 440
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"kind",
|
|
"echoReply"
|
|
],
|
|
[
|
|
"identifier",
|
|
"10"
|
|
],
|
|
[
|
|
"sequence",
|
|
"1"
|
|
]
|
|
],
|
|
"detail" : "ICMP observation queued",
|
|
"direction" : "local",
|
|
"id" : 62,
|
|
"interface" : "00000000-0000-0000-0000-000000000211",
|
|
"layer" : "transport",
|
|
"node" : "00000000-0000-0000-0000-000000000201",
|
|
"operation" : "accepted",
|
|
"packet" : 2,
|
|
"time" : 440
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"senderIP",
|
|
"10.0.0.2"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"20.0.0.2"
|
|
],
|
|
[
|
|
"ttl",
|
|
"1"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "ICMP echo request",
|
|
"direction" : "outbound",
|
|
"id" : 63,
|
|
"interface" : "00000000-0000-0000-0000-000000000211",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000201",
|
|
"operation" : "created",
|
|
"packet" : 3,
|
|
"time" : 440
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"senderIP",
|
|
"10.0.0.2"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"20.0.0.2"
|
|
],
|
|
[
|
|
"ttl",
|
|
"1"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 11,
|
|
"id" : 64,
|
|
"interface" : "00000000-0000-0000-0000-000000000211",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000201",
|
|
"operation" : "sent",
|
|
"packet" : 3,
|
|
"time" : 440
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:21"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 11,
|
|
"id" : 65,
|
|
"interface" : "00000000-0000-0000-0000-000000000211",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000201",
|
|
"operation" : "created",
|
|
"packet" : 3,
|
|
"time" : 440
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:21"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 11,
|
|
"id" : 66,
|
|
"interface" : "00000000-0000-0000-0000-000000000211",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000201",
|
|
"operation" : "sent",
|
|
"packet" : 3,
|
|
"time" : 440
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:21"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 11,
|
|
"id" : 67,
|
|
"interface" : "00000000-0000-0000-0000-000000000221",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "received",
|
|
"packet" : 3,
|
|
"time" : 495
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:21"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 11,
|
|
"id" : 68,
|
|
"interface" : "00000000-0000-0000-0000-000000000221",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "received",
|
|
"packet" : 3,
|
|
"time" : 495
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"senderIP",
|
|
"10.0.0.2"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"20.0.0.2"
|
|
],
|
|
[
|
|
"ttl",
|
|
"1"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 11,
|
|
"id" : 69,
|
|
"interface" : "00000000-0000-0000-0000-000000000221",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "received",
|
|
"packet" : 3,
|
|
"time" : 495
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"senderIP",
|
|
"10.0.0.2"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"20.0.0.2"
|
|
],
|
|
[
|
|
"ttl",
|
|
"1"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"detail" : "firewall inactive",
|
|
"direction" : "inbound",
|
|
"frame" : 11,
|
|
"id" : 70,
|
|
"interface" : "00000000-0000-0000-0000-000000000221",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "accepted",
|
|
"packet" : 3,
|
|
"time" : 495
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"senderIP",
|
|
"10.0.0.1"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"10.0.0.2"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "ICMP timeExceeded",
|
|
"direction" : "outbound",
|
|
"id" : 71,
|
|
"interface" : "00000000-0000-0000-0000-000000000221",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "created",
|
|
"packet" : 4,
|
|
"time" : 495
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"senderIP",
|
|
"10.0.0.1"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"10.0.0.2"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 12,
|
|
"id" : 72,
|
|
"interface" : "00000000-0000-0000-0000-000000000221",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "sent",
|
|
"packet" : 4,
|
|
"time" : 495
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:21"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:11"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 12,
|
|
"id" : 73,
|
|
"interface" : "00000000-0000-0000-0000-000000000221",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "created",
|
|
"packet" : 4,
|
|
"time" : 495
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:21"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:11"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 12,
|
|
"id" : 74,
|
|
"interface" : "00000000-0000-0000-0000-000000000221",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "sent",
|
|
"packet" : 4,
|
|
"time" : 495
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:21"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:11"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 12,
|
|
"id" : 75,
|
|
"interface" : "00000000-0000-0000-0000-000000000211",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000201",
|
|
"operation" : "received",
|
|
"packet" : 4,
|
|
"time" : 550
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:21"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:11"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 12,
|
|
"id" : 76,
|
|
"interface" : "00000000-0000-0000-0000-000000000211",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000201",
|
|
"operation" : "received",
|
|
"packet" : 4,
|
|
"time" : 550
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"senderIP",
|
|
"10.0.0.1"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"10.0.0.2"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 12,
|
|
"id" : 77,
|
|
"interface" : "00000000-0000-0000-0000-000000000211",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000201",
|
|
"operation" : "received",
|
|
"packet" : 4,
|
|
"time" : 550
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"kind",
|
|
"timeExceeded"
|
|
],
|
|
[
|
|
"identifier",
|
|
"11"
|
|
],
|
|
[
|
|
"sequence",
|
|
"1"
|
|
]
|
|
],
|
|
"detail" : "ICMP observation queued",
|
|
"direction" : "local",
|
|
"id" : 78,
|
|
"interface" : "00000000-0000-0000-0000-000000000211",
|
|
"layer" : "transport",
|
|
"node" : "00000000-0000-0000-0000-000000000201",
|
|
"operation" : "accepted",
|
|
"packet" : 4,
|
|
"time" : 550
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"senderIP",
|
|
"10.0.0.2"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"20.0.0.2"
|
|
],
|
|
[
|
|
"ttl",
|
|
"1"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "ICMP echo request",
|
|
"direction" : "outbound",
|
|
"id" : 79,
|
|
"interface" : "00000000-0000-0000-0000-000000000211",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000201",
|
|
"operation" : "created",
|
|
"packet" : 5,
|
|
"time" : 550
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"senderIP",
|
|
"10.0.0.2"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"20.0.0.2"
|
|
],
|
|
[
|
|
"ttl",
|
|
"1"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 13,
|
|
"id" : 80,
|
|
"interface" : "00000000-0000-0000-0000-000000000211",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000201",
|
|
"operation" : "sent",
|
|
"packet" : 5,
|
|
"time" : 550
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:21"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 13,
|
|
"id" : 81,
|
|
"interface" : "00000000-0000-0000-0000-000000000211",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000201",
|
|
"operation" : "created",
|
|
"packet" : 5,
|
|
"time" : 550
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:21"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 13,
|
|
"id" : 82,
|
|
"interface" : "00000000-0000-0000-0000-000000000211",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000201",
|
|
"operation" : "sent",
|
|
"packet" : 5,
|
|
"time" : 550
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:21"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 13,
|
|
"id" : 83,
|
|
"interface" : "00000000-0000-0000-0000-000000000221",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "received",
|
|
"packet" : 5,
|
|
"time" : 605
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:21"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 13,
|
|
"id" : 84,
|
|
"interface" : "00000000-0000-0000-0000-000000000221",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "received",
|
|
"packet" : 5,
|
|
"time" : 605
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"senderIP",
|
|
"10.0.0.2"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"20.0.0.2"
|
|
],
|
|
[
|
|
"ttl",
|
|
"1"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 13,
|
|
"id" : 85,
|
|
"interface" : "00000000-0000-0000-0000-000000000221",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "received",
|
|
"packet" : 5,
|
|
"time" : 605
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"senderIP",
|
|
"10.0.0.2"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"20.0.0.2"
|
|
],
|
|
[
|
|
"ttl",
|
|
"1"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"detail" : "firewall inactive",
|
|
"direction" : "inbound",
|
|
"frame" : 13,
|
|
"id" : 86,
|
|
"interface" : "00000000-0000-0000-0000-000000000221",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "accepted",
|
|
"packet" : 5,
|
|
"time" : 605
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"senderIP",
|
|
"10.0.0.1"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"10.0.0.2"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "ICMP timeExceeded",
|
|
"direction" : "outbound",
|
|
"id" : 87,
|
|
"interface" : "00000000-0000-0000-0000-000000000221",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "created",
|
|
"packet" : 6,
|
|
"time" : 605
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"senderIP",
|
|
"10.0.0.1"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"10.0.0.2"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 14,
|
|
"id" : 88,
|
|
"interface" : "00000000-0000-0000-0000-000000000221",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "sent",
|
|
"packet" : 6,
|
|
"time" : 605
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:21"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:11"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 14,
|
|
"id" : 89,
|
|
"interface" : "00000000-0000-0000-0000-000000000221",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "created",
|
|
"packet" : 6,
|
|
"time" : 605
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:21"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:11"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 14,
|
|
"id" : 90,
|
|
"interface" : "00000000-0000-0000-0000-000000000221",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "sent",
|
|
"packet" : 6,
|
|
"time" : 605
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:21"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:11"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 14,
|
|
"id" : 91,
|
|
"interface" : "00000000-0000-0000-0000-000000000211",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000201",
|
|
"operation" : "received",
|
|
"packet" : 6,
|
|
"time" : 660
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:21"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:11"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 14,
|
|
"id" : 92,
|
|
"interface" : "00000000-0000-0000-0000-000000000211",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000201",
|
|
"operation" : "received",
|
|
"packet" : 6,
|
|
"time" : 660
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"senderIP",
|
|
"10.0.0.1"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"10.0.0.2"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 14,
|
|
"id" : 93,
|
|
"interface" : "00000000-0000-0000-0000-000000000211",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000201",
|
|
"operation" : "received",
|
|
"packet" : 6,
|
|
"time" : 660
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"kind",
|
|
"timeExceeded"
|
|
],
|
|
[
|
|
"identifier",
|
|
"12"
|
|
],
|
|
[
|
|
"sequence",
|
|
"1"
|
|
]
|
|
],
|
|
"detail" : "ICMP observation queued",
|
|
"direction" : "local",
|
|
"id" : 94,
|
|
"interface" : "00000000-0000-0000-0000-000000000211",
|
|
"layer" : "transport",
|
|
"node" : "00000000-0000-0000-0000-000000000201",
|
|
"operation" : "accepted",
|
|
"packet" : 6,
|
|
"time" : 660
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"senderIP",
|
|
"10.0.0.2"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"20.0.0.2"
|
|
],
|
|
[
|
|
"ttl",
|
|
"2"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "ICMP echo request",
|
|
"direction" : "outbound",
|
|
"id" : 95,
|
|
"interface" : "00000000-0000-0000-0000-000000000211",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000201",
|
|
"operation" : "created",
|
|
"packet" : 7,
|
|
"time" : 660
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"senderIP",
|
|
"10.0.0.2"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"20.0.0.2"
|
|
],
|
|
[
|
|
"ttl",
|
|
"2"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 15,
|
|
"id" : 96,
|
|
"interface" : "00000000-0000-0000-0000-000000000211",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000201",
|
|
"operation" : "sent",
|
|
"packet" : 7,
|
|
"time" : 660
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:21"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 15,
|
|
"id" : 97,
|
|
"interface" : "00000000-0000-0000-0000-000000000211",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000201",
|
|
"operation" : "created",
|
|
"packet" : 7,
|
|
"time" : 660
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:21"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 15,
|
|
"id" : 98,
|
|
"interface" : "00000000-0000-0000-0000-000000000211",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000201",
|
|
"operation" : "sent",
|
|
"packet" : 7,
|
|
"time" : 660
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:21"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 15,
|
|
"id" : 99,
|
|
"interface" : "00000000-0000-0000-0000-000000000221",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "received",
|
|
"packet" : 7,
|
|
"time" : 715
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:21"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 15,
|
|
"id" : 100,
|
|
"interface" : "00000000-0000-0000-0000-000000000221",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "received",
|
|
"packet" : 7,
|
|
"time" : 715
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"senderIP",
|
|
"10.0.0.2"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"20.0.0.2"
|
|
],
|
|
[
|
|
"ttl",
|
|
"2"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 15,
|
|
"id" : 101,
|
|
"interface" : "00000000-0000-0000-0000-000000000221",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "received",
|
|
"packet" : 7,
|
|
"time" : 715
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"senderIP",
|
|
"10.0.0.2"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"20.0.0.2"
|
|
],
|
|
[
|
|
"ttl",
|
|
"2"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"detail" : "firewall inactive",
|
|
"direction" : "inbound",
|
|
"frame" : 15,
|
|
"id" : 102,
|
|
"interface" : "00000000-0000-0000-0000-000000000221",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "accepted",
|
|
"packet" : 7,
|
|
"time" : 715
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"senderIP",
|
|
"10.0.0.2"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"20.0.0.2"
|
|
],
|
|
[
|
|
"ttl",
|
|
"1"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"before" : [
|
|
[
|
|
"senderIP",
|
|
"10.0.0.2"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"20.0.0.2"
|
|
],
|
|
[
|
|
"ttl",
|
|
"2"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"detail" : "TTL decremented",
|
|
"direction" : "outbound",
|
|
"frame" : 15,
|
|
"id" : 103,
|
|
"interface" : "00000000-0000-0000-0000-000000000221",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "forwarded",
|
|
"packet" : 7,
|
|
"time" : 715
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"senderIP",
|
|
"10.0.0.2"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"20.0.0.2"
|
|
],
|
|
[
|
|
"ttl",
|
|
"1"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 16,
|
|
"id" : 104,
|
|
"interface" : "00000000-0000-0000-0000-000000000222",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "forwarded",
|
|
"packet" : 7,
|
|
"time" : 715
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:22"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:13"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 16,
|
|
"id" : 105,
|
|
"interface" : "00000000-0000-0000-0000-000000000222",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "created",
|
|
"packet" : 7,
|
|
"time" : 715
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:22"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:13"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 16,
|
|
"id" : 106,
|
|
"interface" : "00000000-0000-0000-0000-000000000222",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "sent",
|
|
"packet" : 7,
|
|
"time" : 715
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:22"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:13"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 16,
|
|
"id" : 107,
|
|
"interface" : "00000000-0000-0000-0000-000000000213",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000203",
|
|
"operation" : "received",
|
|
"packet" : 7,
|
|
"time" : 770
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:22"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:13"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 16,
|
|
"id" : 108,
|
|
"interface" : "00000000-0000-0000-0000-000000000213",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000203",
|
|
"operation" : "received",
|
|
"packet" : 7,
|
|
"time" : 770
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"senderIP",
|
|
"10.0.0.2"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"20.0.0.2"
|
|
],
|
|
[
|
|
"ttl",
|
|
"1"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 16,
|
|
"id" : 109,
|
|
"interface" : "00000000-0000-0000-0000-000000000213",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000203",
|
|
"operation" : "received",
|
|
"packet" : 7,
|
|
"time" : 770
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"senderIP",
|
|
"20.0.0.2"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"10.0.0.2"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "ICMP echo reply",
|
|
"direction" : "outbound",
|
|
"id" : 110,
|
|
"interface" : "00000000-0000-0000-0000-000000000213",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000203",
|
|
"operation" : "created",
|
|
"packet" : 8,
|
|
"time" : 770
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"senderIP",
|
|
"20.0.0.2"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"10.0.0.2"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 17,
|
|
"id" : 111,
|
|
"interface" : "00000000-0000-0000-0000-000000000213",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000203",
|
|
"operation" : "sent",
|
|
"packet" : 8,
|
|
"time" : 770
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:22"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 17,
|
|
"id" : 112,
|
|
"interface" : "00000000-0000-0000-0000-000000000213",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000203",
|
|
"operation" : "created",
|
|
"packet" : 8,
|
|
"time" : 770
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:22"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 17,
|
|
"id" : 113,
|
|
"interface" : "00000000-0000-0000-0000-000000000213",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000203",
|
|
"operation" : "sent",
|
|
"packet" : 8,
|
|
"time" : 770
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:22"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 17,
|
|
"id" : 114,
|
|
"interface" : "00000000-0000-0000-0000-000000000222",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "received",
|
|
"packet" : 8,
|
|
"time" : 825
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:22"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 17,
|
|
"id" : 115,
|
|
"interface" : "00000000-0000-0000-0000-000000000222",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "received",
|
|
"packet" : 8,
|
|
"time" : 825
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"senderIP",
|
|
"20.0.0.2"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"10.0.0.2"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 17,
|
|
"id" : 116,
|
|
"interface" : "00000000-0000-0000-0000-000000000222",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "received",
|
|
"packet" : 8,
|
|
"time" : 825
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"senderIP",
|
|
"20.0.0.2"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"10.0.0.2"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"detail" : "firewall inactive",
|
|
"direction" : "inbound",
|
|
"frame" : 17,
|
|
"id" : 117,
|
|
"interface" : "00000000-0000-0000-0000-000000000222",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "accepted",
|
|
"packet" : 8,
|
|
"time" : 825
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"senderIP",
|
|
"20.0.0.2"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"10.0.0.2"
|
|
],
|
|
[
|
|
"ttl",
|
|
"63"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"before" : [
|
|
[
|
|
"senderIP",
|
|
"20.0.0.2"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"10.0.0.2"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"detail" : "TTL decremented",
|
|
"direction" : "outbound",
|
|
"frame" : 17,
|
|
"id" : 118,
|
|
"interface" : "00000000-0000-0000-0000-000000000222",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "forwarded",
|
|
"packet" : 8,
|
|
"time" : 825
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"senderIP",
|
|
"20.0.0.2"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"10.0.0.2"
|
|
],
|
|
[
|
|
"ttl",
|
|
"63"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 18,
|
|
"id" : 119,
|
|
"interface" : "00000000-0000-0000-0000-000000000221",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "forwarded",
|
|
"packet" : 8,
|
|
"time" : 825
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:21"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:11"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 18,
|
|
"id" : 120,
|
|
"interface" : "00000000-0000-0000-0000-000000000221",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "created",
|
|
"packet" : 8,
|
|
"time" : 825
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:21"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:11"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 18,
|
|
"id" : 121,
|
|
"interface" : "00000000-0000-0000-0000-000000000221",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "sent",
|
|
"packet" : 8,
|
|
"time" : 825
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:21"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:11"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 18,
|
|
"id" : 122,
|
|
"interface" : "00000000-0000-0000-0000-000000000211",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000201",
|
|
"operation" : "received",
|
|
"packet" : 8,
|
|
"time" : 880
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:21"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:11"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 18,
|
|
"id" : 123,
|
|
"interface" : "00000000-0000-0000-0000-000000000211",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000201",
|
|
"operation" : "received",
|
|
"packet" : 8,
|
|
"time" : 880
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"senderIP",
|
|
"20.0.0.2"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"10.0.0.2"
|
|
],
|
|
[
|
|
"ttl",
|
|
"63"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 18,
|
|
"id" : 124,
|
|
"interface" : "00000000-0000-0000-0000-000000000211",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000201",
|
|
"operation" : "received",
|
|
"packet" : 8,
|
|
"time" : 880
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"kind",
|
|
"echoReply"
|
|
],
|
|
[
|
|
"identifier",
|
|
"12"
|
|
],
|
|
[
|
|
"sequence",
|
|
"2"
|
|
]
|
|
],
|
|
"detail" : "ICMP observation queued",
|
|
"direction" : "local",
|
|
"id" : 125,
|
|
"interface" : "00000000-0000-0000-0000-000000000211",
|
|
"layer" : "transport",
|
|
"node" : "00000000-0000-0000-0000-000000000201",
|
|
"operation" : "accepted",
|
|
"packet" : 8,
|
|
"time" : 880
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"senderIP",
|
|
"10.0.0.2"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"30.0.0.2"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "ICMP echo request",
|
|
"direction" : "outbound",
|
|
"id" : 126,
|
|
"interface" : "00000000-0000-0000-0000-000000000211",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000201",
|
|
"operation" : "created",
|
|
"packet" : 9,
|
|
"time" : 880
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"senderIP",
|
|
"10.0.0.2"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"30.0.0.2"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 19,
|
|
"id" : 127,
|
|
"interface" : "00000000-0000-0000-0000-000000000211",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000201",
|
|
"operation" : "sent",
|
|
"packet" : 9,
|
|
"time" : 880
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:21"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 19,
|
|
"id" : 128,
|
|
"interface" : "00000000-0000-0000-0000-000000000211",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000201",
|
|
"operation" : "created",
|
|
"packet" : 9,
|
|
"time" : 880
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:21"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 19,
|
|
"id" : 129,
|
|
"interface" : "00000000-0000-0000-0000-000000000211",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000201",
|
|
"operation" : "sent",
|
|
"packet" : 9,
|
|
"time" : 880
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:21"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 19,
|
|
"id" : 130,
|
|
"interface" : "00000000-0000-0000-0000-000000000221",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "received",
|
|
"packet" : 9,
|
|
"time" : 935
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:21"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 19,
|
|
"id" : 131,
|
|
"interface" : "00000000-0000-0000-0000-000000000221",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "received",
|
|
"packet" : 9,
|
|
"time" : 935
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"senderIP",
|
|
"10.0.0.2"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"30.0.0.2"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 19,
|
|
"id" : 132,
|
|
"interface" : "00000000-0000-0000-0000-000000000221",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "received",
|
|
"packet" : 9,
|
|
"time" : 935
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"senderIP",
|
|
"10.0.0.2"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"30.0.0.2"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"detail" : "firewall inactive",
|
|
"direction" : "inbound",
|
|
"frame" : 19,
|
|
"id" : 133,
|
|
"interface" : "00000000-0000-0000-0000-000000000221",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "accepted",
|
|
"packet" : 9,
|
|
"time" : 935
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"senderIP",
|
|
"10.0.0.2"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"30.0.0.2"
|
|
],
|
|
[
|
|
"ttl",
|
|
"63"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"before" : [
|
|
[
|
|
"senderIP",
|
|
"10.0.0.2"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"30.0.0.2"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"detail" : "TTL decremented",
|
|
"direction" : "outbound",
|
|
"frame" : 19,
|
|
"id" : 134,
|
|
"interface" : "00000000-0000-0000-0000-000000000221",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "forwarded",
|
|
"packet" : 9,
|
|
"time" : 935
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"senderIP",
|
|
"10.0.0.1"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"10.0.0.2"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "ICMP destinationNetworkUnreachable",
|
|
"direction" : "outbound",
|
|
"id" : 135,
|
|
"interface" : "00000000-0000-0000-0000-000000000221",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "created",
|
|
"packet" : 10,
|
|
"time" : 935
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"senderIP",
|
|
"10.0.0.1"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"10.0.0.2"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 20,
|
|
"id" : 136,
|
|
"interface" : "00000000-0000-0000-0000-000000000221",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "sent",
|
|
"packet" : 10,
|
|
"time" : 935
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:21"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:11"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 20,
|
|
"id" : 137,
|
|
"interface" : "00000000-0000-0000-0000-000000000221",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "created",
|
|
"packet" : 10,
|
|
"time" : 935
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:21"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:11"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 20,
|
|
"id" : 138,
|
|
"interface" : "00000000-0000-0000-0000-000000000221",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "sent",
|
|
"packet" : 10,
|
|
"time" : 935
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:21"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:11"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 20,
|
|
"id" : 139,
|
|
"interface" : "00000000-0000-0000-0000-000000000211",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000201",
|
|
"operation" : "received",
|
|
"packet" : 10,
|
|
"time" : 990
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:21"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:11"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 20,
|
|
"id" : 140,
|
|
"interface" : "00000000-0000-0000-0000-000000000211",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000201",
|
|
"operation" : "received",
|
|
"packet" : 10,
|
|
"time" : 990
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"senderIP",
|
|
"10.0.0.1"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"10.0.0.2"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 20,
|
|
"id" : 141,
|
|
"interface" : "00000000-0000-0000-0000-000000000211",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000201",
|
|
"operation" : "received",
|
|
"packet" : 10,
|
|
"time" : 990
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"kind",
|
|
"destinationNetworkUnreachable"
|
|
],
|
|
[
|
|
"identifier",
|
|
"13"
|
|
],
|
|
[
|
|
"sequence",
|
|
"1"
|
|
]
|
|
],
|
|
"detail" : "ICMP observation queued",
|
|
"direction" : "local",
|
|
"id" : 142,
|
|
"interface" : "00000000-0000-0000-0000-000000000211",
|
|
"layer" : "transport",
|
|
"node" : "00000000-0000-0000-0000-000000000201",
|
|
"operation" : "accepted",
|
|
"packet" : 10,
|
|
"time" : 990
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"senderIP",
|
|
"10.0.0.2"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"20.0.0.99"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "ICMP echo request",
|
|
"direction" : "outbound",
|
|
"id" : 143,
|
|
"interface" : "00000000-0000-0000-0000-000000000211",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000201",
|
|
"operation" : "created",
|
|
"packet" : 11,
|
|
"time" : 990
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"senderIP",
|
|
"10.0.0.2"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"20.0.0.99"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 21,
|
|
"id" : 144,
|
|
"interface" : "00000000-0000-0000-0000-000000000211",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000201",
|
|
"operation" : "sent",
|
|
"packet" : 11,
|
|
"time" : 990
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:21"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 21,
|
|
"id" : 145,
|
|
"interface" : "00000000-0000-0000-0000-000000000211",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000201",
|
|
"operation" : "created",
|
|
"packet" : 11,
|
|
"time" : 990
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:21"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 21,
|
|
"id" : 146,
|
|
"interface" : "00000000-0000-0000-0000-000000000211",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000201",
|
|
"operation" : "sent",
|
|
"packet" : 11,
|
|
"time" : 990
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:21"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 21,
|
|
"id" : 147,
|
|
"interface" : "00000000-0000-0000-0000-000000000221",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "received",
|
|
"packet" : 11,
|
|
"time" : 1045
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:11"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:21"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 21,
|
|
"id" : 148,
|
|
"interface" : "00000000-0000-0000-0000-000000000221",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "received",
|
|
"packet" : 11,
|
|
"time" : 1045
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"senderIP",
|
|
"10.0.0.2"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"20.0.0.99"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 21,
|
|
"id" : 149,
|
|
"interface" : "00000000-0000-0000-0000-000000000221",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "received",
|
|
"packet" : 11,
|
|
"time" : 1045
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"senderIP",
|
|
"10.0.0.2"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"20.0.0.99"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"detail" : "firewall inactive",
|
|
"direction" : "inbound",
|
|
"frame" : 21,
|
|
"id" : 150,
|
|
"interface" : "00000000-0000-0000-0000-000000000221",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "accepted",
|
|
"packet" : 11,
|
|
"time" : 1045
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"senderIP",
|
|
"10.0.0.2"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"20.0.0.99"
|
|
],
|
|
[
|
|
"ttl",
|
|
"63"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"before" : [
|
|
[
|
|
"senderIP",
|
|
"10.0.0.2"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"20.0.0.99"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"detail" : "TTL decremented",
|
|
"direction" : "outbound",
|
|
"frame" : 21,
|
|
"id" : 151,
|
|
"interface" : "00000000-0000-0000-0000-000000000221",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "forwarded",
|
|
"packet" : 11,
|
|
"time" : 1045
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:22"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "ARP request for 20.0.0.99",
|
|
"direction" : "outbound",
|
|
"frame" : 22,
|
|
"id" : 152,
|
|
"interface" : "00000000-0000-0000-0000-000000000222",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "created",
|
|
"time" : 1045
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:22"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 22,
|
|
"id" : 153,
|
|
"interface" : "00000000-0000-0000-0000-000000000222",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "sent",
|
|
"time" : 1045
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:22"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "ARP request for 20.0.0.99",
|
|
"direction" : "outbound",
|
|
"frame" : 23,
|
|
"id" : 154,
|
|
"interface" : "00000000-0000-0000-0000-000000000222",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "created",
|
|
"time" : 1045
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:22"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 23,
|
|
"id" : 155,
|
|
"interface" : "00000000-0000-0000-0000-000000000222",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "sent",
|
|
"time" : 1045
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"senderIP",
|
|
"10.0.0.1"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"10.0.0.2"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "ICMP destinationHostUnreachable",
|
|
"direction" : "outbound",
|
|
"id" : 156,
|
|
"interface" : "00000000-0000-0000-0000-000000000221",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "created",
|
|
"packet" : 12,
|
|
"time" : 1045
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"senderIP",
|
|
"10.0.0.1"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"10.0.0.2"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 24,
|
|
"id" : 157,
|
|
"interface" : "00000000-0000-0000-0000-000000000221",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "sent",
|
|
"packet" : 12,
|
|
"time" : 1045
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:21"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:11"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 24,
|
|
"id" : 158,
|
|
"interface" : "00000000-0000-0000-0000-000000000221",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "created",
|
|
"packet" : 12,
|
|
"time" : 1045
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:21"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:11"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 24,
|
|
"id" : 159,
|
|
"interface" : "00000000-0000-0000-0000-000000000221",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "sent",
|
|
"packet" : 12,
|
|
"time" : 1045
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:22"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 22,
|
|
"id" : 160,
|
|
"interface" : "00000000-0000-0000-0000-000000000213",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000203",
|
|
"operation" : "received",
|
|
"time" : 1100
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:22"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 22,
|
|
"id" : 161,
|
|
"interface" : "00000000-0000-0000-0000-000000000213",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000203",
|
|
"operation" : "received",
|
|
"time" : 1100
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"operation",
|
|
"request"
|
|
],
|
|
[
|
|
"senderMAC",
|
|
"02:00:00:00:02:22"
|
|
],
|
|
[
|
|
"senderIP",
|
|
"20.0.0.1"
|
|
],
|
|
[
|
|
"targetMAC",
|
|
"00:00:00:00:00:00"
|
|
],
|
|
[
|
|
"targetIP",
|
|
"20.0.0.99"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 22,
|
|
"id" : 162,
|
|
"interface" : "00000000-0000-0000-0000-000000000213",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000203",
|
|
"operation" : "accepted",
|
|
"time" : 1100
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:22"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 23,
|
|
"id" : 163,
|
|
"interface" : "00000000-0000-0000-0000-000000000213",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000203",
|
|
"operation" : "received",
|
|
"time" : 1100
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:22"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"FF:FF:FF:FF:FF:FF"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 23,
|
|
"id" : 164,
|
|
"interface" : "00000000-0000-0000-0000-000000000213",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000203",
|
|
"operation" : "received",
|
|
"time" : 1100
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"operation",
|
|
"request"
|
|
],
|
|
[
|
|
"senderMAC",
|
|
"02:00:00:00:02:22"
|
|
],
|
|
[
|
|
"senderIP",
|
|
"20.0.0.1"
|
|
],
|
|
[
|
|
"targetMAC",
|
|
"00:00:00:00:00:00"
|
|
],
|
|
[
|
|
"targetIP",
|
|
"20.0.0.99"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 23,
|
|
"id" : 165,
|
|
"interface" : "00000000-0000-0000-0000-000000000213",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000203",
|
|
"operation" : "accepted",
|
|
"time" : 1100
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:21"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:11"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 24,
|
|
"id" : 166,
|
|
"interface" : "00000000-0000-0000-0000-000000000211",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000201",
|
|
"operation" : "received",
|
|
"packet" : 12,
|
|
"time" : 1100
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:21"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:11"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 24,
|
|
"id" : 167,
|
|
"interface" : "00000000-0000-0000-0000-000000000211",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000201",
|
|
"operation" : "received",
|
|
"packet" : 12,
|
|
"time" : 1100
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"senderIP",
|
|
"10.0.0.1"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"10.0.0.2"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 24,
|
|
"id" : 168,
|
|
"interface" : "00000000-0000-0000-0000-000000000211",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000201",
|
|
"operation" : "received",
|
|
"packet" : 12,
|
|
"time" : 1100
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"kind",
|
|
"destinationHostUnreachable"
|
|
],
|
|
[
|
|
"identifier",
|
|
"14"
|
|
],
|
|
[
|
|
"sequence",
|
|
"1"
|
|
]
|
|
],
|
|
"detail" : "ICMP observation queued",
|
|
"direction" : "local",
|
|
"id" : 169,
|
|
"interface" : "00000000-0000-0000-0000-000000000211",
|
|
"layer" : "transport",
|
|
"node" : "00000000-0000-0000-0000-000000000201",
|
|
"operation" : "accepted",
|
|
"packet" : 12,
|
|
"time" : 1100
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"senderIP",
|
|
"20.0.0.2"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"10.0.0.1"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "ICMP echo request",
|
|
"direction" : "outbound",
|
|
"id" : 170,
|
|
"interface" : "00000000-0000-0000-0000-000000000213",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000203",
|
|
"operation" : "created",
|
|
"packet" : 13,
|
|
"time" : 1100
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"senderIP",
|
|
"20.0.0.2"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"10.0.0.1"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 25,
|
|
"id" : 171,
|
|
"interface" : "00000000-0000-0000-0000-000000000213",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000203",
|
|
"operation" : "sent",
|
|
"packet" : 13,
|
|
"time" : 1100
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:22"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 25,
|
|
"id" : 172,
|
|
"interface" : "00000000-0000-0000-0000-000000000213",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000203",
|
|
"operation" : "created",
|
|
"packet" : 13,
|
|
"time" : 1100
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:22"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 25,
|
|
"id" : 173,
|
|
"interface" : "00000000-0000-0000-0000-000000000213",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000203",
|
|
"operation" : "sent",
|
|
"packet" : 13,
|
|
"time" : 1100
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:22"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 25,
|
|
"id" : 174,
|
|
"interface" : "00000000-0000-0000-0000-000000000222",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "received",
|
|
"packet" : 13,
|
|
"time" : 1155
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:13"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:22"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 25,
|
|
"id" : 175,
|
|
"interface" : "00000000-0000-0000-0000-000000000222",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "received",
|
|
"packet" : 13,
|
|
"time" : 1155
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"senderIP",
|
|
"20.0.0.2"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"10.0.0.1"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 25,
|
|
"id" : 176,
|
|
"interface" : "00000000-0000-0000-0000-000000000222",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "received",
|
|
"packet" : 13,
|
|
"time" : 1155
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"senderIP",
|
|
"20.0.0.2"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"10.0.0.1"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"detail" : "firewall inactive",
|
|
"direction" : "inbound",
|
|
"frame" : 25,
|
|
"id" : 177,
|
|
"interface" : "00000000-0000-0000-0000-000000000222",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "accepted",
|
|
"packet" : 13,
|
|
"time" : 1155
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"senderIP",
|
|
"20.0.0.1"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"20.0.0.2"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"detail" : "ICMP echo reply",
|
|
"direction" : "outbound",
|
|
"id" : 178,
|
|
"interface" : "00000000-0000-0000-0000-000000000222",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "created",
|
|
"packet" : 14,
|
|
"time" : 1155
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"senderIP",
|
|
"20.0.0.1"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"20.0.0.2"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 26,
|
|
"id" : 179,
|
|
"interface" : "00000000-0000-0000-0000-000000000222",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "sent",
|
|
"packet" : 14,
|
|
"time" : 1155
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:22"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:13"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 26,
|
|
"id" : 180,
|
|
"interface" : "00000000-0000-0000-0000-000000000222",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "created",
|
|
"packet" : 14,
|
|
"time" : 1155
|
|
},
|
|
{
|
|
"after" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:22"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:13"
|
|
]
|
|
],
|
|
"before" : [
|
|
|
|
],
|
|
"direction" : "outbound",
|
|
"frame" : 26,
|
|
"id" : 181,
|
|
"interface" : "00000000-0000-0000-0000-000000000222",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000202",
|
|
"operation" : "sent",
|
|
"packet" : 14,
|
|
"time" : 1155
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:22"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:13"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 26,
|
|
"id" : 182,
|
|
"interface" : "00000000-0000-0000-0000-000000000213",
|
|
"layer" : "physical",
|
|
"node" : "00000000-0000-0000-0000-000000000203",
|
|
"operation" : "received",
|
|
"packet" : 14,
|
|
"time" : 1210
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"sourceMAC",
|
|
"02:00:00:00:02:22"
|
|
],
|
|
[
|
|
"destinationMAC",
|
|
"02:00:00:00:02:13"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 26,
|
|
"id" : 183,
|
|
"interface" : "00000000-0000-0000-0000-000000000213",
|
|
"layer" : "dataLink",
|
|
"node" : "00000000-0000-0000-0000-000000000203",
|
|
"operation" : "received",
|
|
"packet" : 14,
|
|
"time" : 1210
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"senderIP",
|
|
"20.0.0.1"
|
|
],
|
|
[
|
|
"receiverIP",
|
|
"20.0.0.2"
|
|
],
|
|
[
|
|
"ttl",
|
|
"64"
|
|
],
|
|
[
|
|
"protocol",
|
|
"1"
|
|
]
|
|
],
|
|
"direction" : "inbound",
|
|
"frame" : 26,
|
|
"id" : 184,
|
|
"interface" : "00000000-0000-0000-0000-000000000213",
|
|
"layer" : "network",
|
|
"node" : "00000000-0000-0000-0000-000000000203",
|
|
"operation" : "received",
|
|
"packet" : 14,
|
|
"time" : 1210
|
|
},
|
|
{
|
|
"after" : [
|
|
|
|
],
|
|
"before" : [
|
|
[
|
|
"kind",
|
|
"echoReply"
|
|
],
|
|
[
|
|
"identifier",
|
|
"15"
|
|
],
|
|
[
|
|
"sequence",
|
|
"1"
|
|
]
|
|
],
|
|
"detail" : "ICMP observation queued",
|
|
"direction" : "local",
|
|
"id" : 185,
|
|
"interface" : "00000000-0000-0000-0000-000000000213",
|
|
"layer" : "transport",
|
|
"node" : "00000000-0000-0000-0000-000000000203",
|
|
"operation" : "accepted",
|
|
"packet" : 14,
|
|
"time" : 1210
|
|
}
|
|
]
|
|
}
|