Files
mdg-filius/packages/core/test/exchangeWindow.java.json
T
julian.kiedaischandClaude Opus 5.5 9252b942c4 feat: F4.7 the data exchange window, measured against Java's
One row per frame (its highest layer's), Java's detail tree, the table as
Java's text file, "Tabellen löschen" for every card (clearCapture in the
room), a tab per card with Java's title, Java's layer colours as tokens,
the chosen frame and autoscroll per tab. New oracle ExchangeWindowRun.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-04 09:12:38 +00:00

5909 lines
153 KiB
JSON

{
"steps": [
{
"step": "open",
"at": 1076,
"titles": [
"Anna - 192.168.0.20"
],
"selected": 0,
"visible": true,
"tables": {
"00000000-0000-0000-0000-000000000201": {
"rows": [],
"layerRows": []
}
}
},
{
"step": "after the fetch",
"at": 15280,
"titles": [
"Anna - 192.168.0.20"
],
"selected": 0,
"visible": true,
"tables": {
"00000000-0000-0000-0000-000000000201": {
"rows": [
[
"1",
"08:34:12.286",
"192.168.0.20",
"192.168.0.10",
"ARP",
"Vermittlung",
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
],
[
"2",
"08:34:12.523",
"192.168.0.10",
"192.168.0.20",
"ARP",
"Vermittlung",
"MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:11|192.168.0.20]"
],
[
"3",
"08:34:12.526",
"192.168.0.20:61663",
"192.168.0.10:53",
"DNS",
"Anwendung",
"ID=26498 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n"
],
[
"4",
"08:34:12.756",
"192.168.0.10:53",
"192.168.0.20:61663",
"DNS",
"Anwendung",
"ID=26498 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n"
],
[
"5",
"08:34:12.760",
"192.168.0.20",
"192.168.0.30",
"ARP",
"Vermittlung",
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
],
[
"6",
"08:34:12.983",
"192.168.0.30",
"192.168.0.20",
"ARP",
"Vermittlung",
"MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]"
],
[
"7",
"08:34:12.984",
"192.168.0.20:50668",
"192.168.0.30:80",
"TCP",
"Transport",
"SYN, SEQ: 2.000.000"
],
[
"8",
"08:34:13.207",
"192.168.0.30:80",
"192.168.0.20:50668",
"TCP",
"Transport",
"SYN, SEQ: 1.000.000, ACK: 2.000.001"
],
[
"9",
"08:34:13.208",
"192.168.0.20:50668",
"192.168.0.30:80",
"TCP",
"Transport",
"SEQ: 2.000.001, ACK: 1.000.001"
],
[
"10",
"08:34:13.264",
"192.168.0.20:50668",
"192.168.0.30:80",
"HTTP",
"Anwendung",
"GET /text.txt HTTP/1.1\nHost: www.filius.de\n"
],
[
"11",
"08:34:13.486",
"192.168.0.30:80",
"192.168.0.20:50668",
"TCP",
"Transport",
"SEQ: 1.000.001, ACK: 2.000.044"
],
[
"12",
"08:34:13.542",
"192.168.0.30:80",
"192.168.0.20:50668",
"HTTP",
"Anwendung",
"HTTP/1.1 200 OK\nContent-type: text/plain\n\nNur Text\nzwei Zeilen"
],
[
"13",
"08:34:13.543",
"192.168.0.20:50668",
"192.168.0.30:80",
"TCP",
"Transport",
"SEQ: 2.000.044, ACK: 1.000.063"
],
[
"14",
"08:34:13.598",
"192.168.0.20:50668",
"192.168.0.30:80",
"TCP",
"Transport",
"FIN, SEQ: 2.000.044"
],
[
"15",
"08:34:13.821",
"192.168.0.30:80",
"192.168.0.20:50668",
"TCP",
"Transport",
"SEQ: 1.000.063, ACK: 2.000.045"
],
[
"16",
"08:34:13.877",
"192.168.0.30:80",
"192.168.0.20:50668",
"TCP",
"Transport",
"FIN, SEQ: 1.000.063"
],
[
"17",
"08:34:13.878",
"192.168.0.20:50668",
"192.168.0.30:80",
"TCP",
"Transport",
"SEQ: 2.000.045, ACK: 1.000.064"
]
],
"layerRows": [
[
"1",
"08:34:12.286",
"02:00:00:00:02:11",
"FF:FF:FF:FF:FF:FF",
"",
"Netzzugang",
"0x806"
],
[
"1",
"08:34:12.286",
"192.168.0.20",
"192.168.0.10",
"ARP",
"Vermittlung",
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
],
[
"2",
"08:34:12.523",
"02:00:00:00:02:12",
"02:00:00:00:02:11",
"",
"Netzzugang",
"0x806"
],
[
"2",
"08:34:12.523",
"192.168.0.10",
"192.168.0.20",
"ARP",
"Vermittlung",
"MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:11|192.168.0.20]"
],
[
"3",
"08:34:12.526",
"02:00:00:00:02:11",
"02:00:00:00:02:12",
"",
"Netzzugang",
"0x800"
],
[
"3",
"08:34:12.526",
"192.168.0.20",
"192.168.0.10",
"IP",
"Vermittlung",
"Protokoll: 17, TTL: 64"
],
[
"3",
"08:34:12.526",
"192.168.0.20:61663",
"192.168.0.10:53",
"UDP",
"Transport",
""
],
[
"3",
"08:34:12.526",
"192.168.0.20:61663",
"192.168.0.10:53",
"DNS",
"Anwendung",
"ID=26498 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n"
],
[
"4",
"08:34:12.756",
"02:00:00:00:02:12",
"02:00:00:00:02:11",
"",
"Netzzugang",
"0x800"
],
[
"4",
"08:34:12.756",
"192.168.0.10",
"192.168.0.20",
"IP",
"Vermittlung",
"Protokoll: 17, TTL: 64"
],
[
"4",
"08:34:12.756",
"192.168.0.10:53",
"192.168.0.20:61663",
"UDP",
"Transport",
""
],
[
"4",
"08:34:12.756",
"192.168.0.10:53",
"192.168.0.20:61663",
"DNS",
"Anwendung",
"ID=26498 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n"
],
[
"5",
"08:34:12.760",
"02:00:00:00:02:11",
"FF:FF:FF:FF:FF:FF",
"",
"Netzzugang",
"0x806"
],
[
"5",
"08:34:12.760",
"192.168.0.20",
"192.168.0.30",
"ARP",
"Vermittlung",
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
],
[
"6",
"08:34:12.983",
"02:00:00:00:02:13",
"02:00:00:00:02:11",
"",
"Netzzugang",
"0x806"
],
[
"6",
"08:34:12.983",
"192.168.0.30",
"192.168.0.20",
"ARP",
"Vermittlung",
"MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]"
],
[
"7",
"08:34:12.984",
"02:00:00:00:02:11",
"02:00:00:00:02:13",
"",
"Netzzugang",
"0x800"
],
[
"7",
"08:34:12.984",
"192.168.0.20",
"192.168.0.30",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"7",
"08:34:12.984",
"192.168.0.20:50668",
"192.168.0.30:80",
"TCP",
"Transport",
"SYN, SEQ: 2.000.000"
],
[
"8",
"08:34:13.207",
"02:00:00:00:02:13",
"02:00:00:00:02:11",
"",
"Netzzugang",
"0x800"
],
[
"8",
"08:34:13.207",
"192.168.0.30",
"192.168.0.20",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"8",
"08:34:13.207",
"192.168.0.30:80",
"192.168.0.20:50668",
"TCP",
"Transport",
"SYN, SEQ: 1.000.000, ACK: 2.000.001"
],
[
"9",
"08:34:13.208",
"02:00:00:00:02:11",
"02:00:00:00:02:13",
"",
"Netzzugang",
"0x800"
],
[
"9",
"08:34:13.208",
"192.168.0.20",
"192.168.0.30",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"9",
"08:34:13.208",
"192.168.0.20:50668",
"192.168.0.30:80",
"TCP",
"Transport",
"SEQ: 2.000.001, ACK: 1.000.001"
],
[
"10",
"08:34:13.264",
"02:00:00:00:02:11",
"02:00:00:00:02:13",
"",
"Netzzugang",
"0x800"
],
[
"10",
"08:34:13.264",
"192.168.0.20",
"192.168.0.30",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"10",
"08:34:13.264",
"192.168.0.20:50668",
"192.168.0.30:80",
"TCP",
"Transport",
"SEQ: 2.000.001"
],
[
"10",
"08:34:13.264",
"192.168.0.20:50668",
"192.168.0.30:80",
"HTTP",
"Anwendung",
"GET /text.txt HTTP/1.1\nHost: www.filius.de\n"
],
[
"11",
"08:34:13.486",
"02:00:00:00:02:13",
"02:00:00:00:02:11",
"",
"Netzzugang",
"0x800"
],
[
"11",
"08:34:13.486",
"192.168.0.30",
"192.168.0.20",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"11",
"08:34:13.486",
"192.168.0.30:80",
"192.168.0.20:50668",
"TCP",
"Transport",
"SEQ: 1.000.001, ACK: 2.000.044"
],
[
"12",
"08:34:13.542",
"02:00:00:00:02:13",
"02:00:00:00:02:11",
"",
"Netzzugang",
"0x800"
],
[
"12",
"08:34:13.542",
"192.168.0.30",
"192.168.0.20",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"12",
"08:34:13.542",
"192.168.0.30:80",
"192.168.0.20:50668",
"TCP",
"Transport",
"SEQ: 1.000.001"
],
[
"12",
"08:34:13.542",
"192.168.0.30:80",
"192.168.0.20:50668",
"HTTP",
"Anwendung",
"HTTP/1.1 200 OK\nContent-type: text/plain\n\nNur Text\nzwei Zeilen"
],
[
"13",
"08:34:13.543",
"02:00:00:00:02:11",
"02:00:00:00:02:13",
"",
"Netzzugang",
"0x800"
],
[
"13",
"08:34:13.543",
"192.168.0.20",
"192.168.0.30",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"13",
"08:34:13.543",
"192.168.0.20:50668",
"192.168.0.30:80",
"TCP",
"Transport",
"SEQ: 2.000.044, ACK: 1.000.063"
],
[
"14",
"08:34:13.598",
"02:00:00:00:02:11",
"02:00:00:00:02:13",
"",
"Netzzugang",
"0x800"
],
[
"14",
"08:34:13.598",
"192.168.0.20",
"192.168.0.30",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"14",
"08:34:13.598",
"192.168.0.20:50668",
"192.168.0.30:80",
"TCP",
"Transport",
"FIN, SEQ: 2.000.044"
],
[
"15",
"08:34:13.821",
"02:00:00:00:02:13",
"02:00:00:00:02:11",
"",
"Netzzugang",
"0x800"
],
[
"15",
"08:34:13.821",
"192.168.0.30",
"192.168.0.20",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"15",
"08:34:13.821",
"192.168.0.30:80",
"192.168.0.20:50668",
"TCP",
"Transport",
"SEQ: 1.000.063, ACK: 2.000.045"
],
[
"16",
"08:34:13.877",
"02:00:00:00:02:13",
"02:00:00:00:02:11",
"",
"Netzzugang",
"0x800"
],
[
"16",
"08:34:13.877",
"192.168.0.30",
"192.168.0.20",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"16",
"08:34:13.877",
"192.168.0.30:80",
"192.168.0.20:50668",
"TCP",
"Transport",
"FIN, SEQ: 1.000.063"
],
[
"17",
"08:34:13.878",
"02:00:00:00:02:11",
"02:00:00:00:02:13",
"",
"Netzzugang",
"0x800"
],
[
"17",
"08:34:13.878",
"192.168.0.20",
"192.168.0.30",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"17",
"08:34:13.878",
"192.168.0.20:50668",
"192.168.0.30:80",
"TCP",
"Transport",
"SEQ: 2.000.045, ACK: 1.000.064"
]
]
}
},
"details": [
[
[
0,
"Nr.: 1 / Zeit: 08:34:12.286"
],
[
1,
"Netzzugang"
],
[
2,
"Quelle: 02:00:00:00:02:11"
],
[
2,
"Ziel: FF:FF:FF:FF:FF:FF"
],
[
2,
"Bemerkungen / Details: 0x806"
],
[
1,
"Vermittlung"
],
[
2,
"Quelle: 192.168.0.20"
],
[
2,
"Ziel: 192.168.0.10"
],
[
2,
"Protokoll: ARP"
],
[
2,
"Bemerkungen / Details: "
],
[
3,
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
]
],
[
[
0,
"Nr.: 2 / Zeit: 08:34:12.523"
],
[
1,
"Netzzugang"
],
[
2,
"Quelle: 02:00:00:00:02:12"
],
[
2,
"Ziel: 02:00:00:00:02:11"
],
[
2,
"Bemerkungen / Details: 0x806"
],
[
1,
"Vermittlung"
],
[
2,
"Quelle: 192.168.0.10"
],
[
2,
"Ziel: 192.168.0.20"
],
[
2,
"Protokoll: ARP"
],
[
2,
"Bemerkungen / Details: "
],
[
3,
"MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:11|192.168.0.20]"
]
],
[
[
0,
"Nr.: 3 / Zeit: 08:34:12.526"
],
[
1,
"Netzzugang"
],
[
2,
"Quelle: 02:00:00:00:02:11"
],
[
2,
"Ziel: 02:00:00:00:02:12"
],
[
2,
"Bemerkungen / Details: 0x800"
],
[
1,
"Vermittlung"
],
[
2,
"Quelle: 192.168.0.20"
],
[
2,
"Ziel: 192.168.0.10"
],
[
2,
"Protokoll: IP"
],
[
2,
"Bemerkungen / Details: Protokoll: 17, TTL: 64"
],
[
1,
"Transport"
],
[
2,
"Quelle: 61663"
],
[
2,
"Ziel: 53"
],
[
2,
"Protokoll: UDP"
],
[
1,
"Anwendung"
],
[
2,
"Protokoll: DNS"
],
[
2,
"Bemerkungen / Details (83 Bytes): "
],
[
3,
"ID=26498 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n"
]
],
[
[
0,
"Nr.: 4 / Zeit: 08:34:12.756"
],
[
1,
"Netzzugang"
],
[
2,
"Quelle: 02:00:00:00:02:12"
],
[
2,
"Ziel: 02:00:00:00:02:11"
],
[
2,
"Bemerkungen / Details: 0x800"
],
[
1,
"Vermittlung"
],
[
2,
"Quelle: 192.168.0.10"
],
[
2,
"Ziel: 192.168.0.20"
],
[
2,
"Protokoll: IP"
],
[
2,
"Bemerkungen / Details: Protokoll: 17, TTL: 64"
],
[
1,
"Transport"
],
[
2,
"Quelle: 53"
],
[
2,
"Ziel: 61663"
],
[
2,
"Protokoll: UDP"
],
[
1,
"Anwendung"
],
[
2,
"Protokoll: DNS"
],
[
2,
"Bemerkungen / Details (98 Bytes): "
],
[
3,
"ID=26498 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n"
]
],
[
[
0,
"Nr.: 5 / Zeit: 08:34:12.760"
],
[
1,
"Netzzugang"
],
[
2,
"Quelle: 02:00:00:00:02:11"
],
[
2,
"Ziel: FF:FF:FF:FF:FF:FF"
],
[
2,
"Bemerkungen / Details: 0x806"
],
[
1,
"Vermittlung"
],
[
2,
"Quelle: 192.168.0.20"
],
[
2,
"Ziel: 192.168.0.30"
],
[
2,
"Protokoll: ARP"
],
[
2,
"Bemerkungen / Details: "
],
[
3,
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
]
],
[
[
0,
"Nr.: 6 / Zeit: 08:34:12.983"
],
[
1,
"Netzzugang"
],
[
2,
"Quelle: 02:00:00:00:02:13"
],
[
2,
"Ziel: 02:00:00:00:02:11"
],
[
2,
"Bemerkungen / Details: 0x806"
],
[
1,
"Vermittlung"
],
[
2,
"Quelle: 192.168.0.30"
],
[
2,
"Ziel: 192.168.0.20"
],
[
2,
"Protokoll: ARP"
],
[
2,
"Bemerkungen / Details: "
],
[
3,
"MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]"
]
],
[
[
0,
"Nr.: 7 / Zeit: 08:34:12.984"
],
[
1,
"Netzzugang"
],
[
2,
"Quelle: 02:00:00:00:02:11"
],
[
2,
"Ziel: 02:00:00:00:02:13"
],
[
2,
"Bemerkungen / Details: 0x800"
],
[
1,
"Vermittlung"
],
[
2,
"Quelle: 192.168.0.20"
],
[
2,
"Ziel: 192.168.0.30"
],
[
2,
"Protokoll: IP"
],
[
2,
"Bemerkungen / Details: Protokoll: 6, TTL: 64"
],
[
1,
"Transport"
],
[
2,
"Quelle: 50668"
],
[
2,
"Ziel: 80"
],
[
2,
"Protokoll: TCP"
],
[
2,
"Bemerkungen / Details: SYN, SEQ: 2.000.000"
]
],
[
[
0,
"Nr.: 8 / Zeit: 08:34:13.207"
],
[
1,
"Netzzugang"
],
[
2,
"Quelle: 02:00:00:00:02:13"
],
[
2,
"Ziel: 02:00:00:00:02:11"
],
[
2,
"Bemerkungen / Details: 0x800"
],
[
1,
"Vermittlung"
],
[
2,
"Quelle: 192.168.0.30"
],
[
2,
"Ziel: 192.168.0.20"
],
[
2,
"Protokoll: IP"
],
[
2,
"Bemerkungen / Details: Protokoll: 6, TTL: 64"
],
[
1,
"Transport"
],
[
2,
"Quelle: 80"
],
[
2,
"Ziel: 50668"
],
[
2,
"Protokoll: TCP"
],
[
2,
"Bemerkungen / Details: SYN, SEQ: 1.000.000, ACK: 2.000.001"
]
],
[
[
0,
"Nr.: 9 / Zeit: 08:34:13.208"
],
[
1,
"Netzzugang"
],
[
2,
"Quelle: 02:00:00:00:02:11"
],
[
2,
"Ziel: 02:00:00:00:02:13"
],
[
2,
"Bemerkungen / Details: 0x800"
],
[
1,
"Vermittlung"
],
[
2,
"Quelle: 192.168.0.20"
],
[
2,
"Ziel: 192.168.0.30"
],
[
2,
"Protokoll: IP"
],
[
2,
"Bemerkungen / Details: Protokoll: 6, TTL: 64"
],
[
1,
"Transport"
],
[
2,
"Quelle: 50668"
],
[
2,
"Ziel: 80"
],
[
2,
"Protokoll: TCP"
],
[
2,
"Bemerkungen / Details: SEQ: 2.000.001, ACK: 1.000.001"
]
],
[
[
0,
"Nr.: 10 / Zeit: 08:34:13.264"
],
[
1,
"Netzzugang"
],
[
2,
"Quelle: 02:00:00:00:02:11"
],
[
2,
"Ziel: 02:00:00:00:02:13"
],
[
2,
"Bemerkungen / Details: 0x800"
],
[
1,
"Vermittlung"
],
[
2,
"Quelle: 192.168.0.20"
],
[
2,
"Ziel: 192.168.0.30"
],
[
2,
"Protokoll: IP"
],
[
2,
"Bemerkungen / Details: Protokoll: 6, TTL: 64"
],
[
1,
"Transport"
],
[
2,
"Quelle: 50668"
],
[
2,
"Ziel: 80"
],
[
2,
"Protokoll: TCP"
],
[
2,
"Bemerkungen / Details: SEQ: 2.000.001"
],
[
1,
"Anwendung"
],
[
2,
"Protokoll: HTTP"
],
[
2,
"Bemerkungen / Details (43 Bytes): "
],
[
3,
"GET /text.txt HTTP/1.1\nHost: www.filius.de\n"
]
],
[
[
0,
"Nr.: 11 / Zeit: 08:34:13.486"
],
[
1,
"Netzzugang"
],
[
2,
"Quelle: 02:00:00:00:02:13"
],
[
2,
"Ziel: 02:00:00:00:02:11"
],
[
2,
"Bemerkungen / Details: 0x800"
],
[
1,
"Vermittlung"
],
[
2,
"Quelle: 192.168.0.30"
],
[
2,
"Ziel: 192.168.0.20"
],
[
2,
"Protokoll: IP"
],
[
2,
"Bemerkungen / Details: Protokoll: 6, TTL: 64"
],
[
1,
"Transport"
],
[
2,
"Quelle: 80"
],
[
2,
"Ziel: 50668"
],
[
2,
"Protokoll: TCP"
],
[
2,
"Bemerkungen / Details: SEQ: 1.000.001, ACK: 2.000.044"
]
],
[
[
0,
"Nr.: 12 / Zeit: 08:34:13.542"
],
[
1,
"Netzzugang"
],
[
2,
"Quelle: 02:00:00:00:02:13"
],
[
2,
"Ziel: 02:00:00:00:02:11"
],
[
2,
"Bemerkungen / Details: 0x800"
],
[
1,
"Vermittlung"
],
[
2,
"Quelle: 192.168.0.30"
],
[
2,
"Ziel: 192.168.0.20"
],
[
2,
"Protokoll: IP"
],
[
2,
"Bemerkungen / Details: Protokoll: 6, TTL: 64"
],
[
1,
"Transport"
],
[
2,
"Quelle: 80"
],
[
2,
"Ziel: 50668"
],
[
2,
"Protokoll: TCP"
],
[
2,
"Bemerkungen / Details: SEQ: 1.000.001"
],
[
1,
"Anwendung"
],
[
2,
"Protokoll: HTTP"
],
[
2,
"Bemerkungen / Details (62 Bytes): "
],
[
3,
"HTTP/1.1 200 OK\nContent-type: text/plain\n\nNur Text\nzwei Zeilen"
]
],
[
[
0,
"Nr.: 13 / Zeit: 08:34:13.543"
],
[
1,
"Netzzugang"
],
[
2,
"Quelle: 02:00:00:00:02:11"
],
[
2,
"Ziel: 02:00:00:00:02:13"
],
[
2,
"Bemerkungen / Details: 0x800"
],
[
1,
"Vermittlung"
],
[
2,
"Quelle: 192.168.0.20"
],
[
2,
"Ziel: 192.168.0.30"
],
[
2,
"Protokoll: IP"
],
[
2,
"Bemerkungen / Details: Protokoll: 6, TTL: 64"
],
[
1,
"Transport"
],
[
2,
"Quelle: 50668"
],
[
2,
"Ziel: 80"
],
[
2,
"Protokoll: TCP"
],
[
2,
"Bemerkungen / Details: SEQ: 2.000.044, ACK: 1.000.063"
]
],
[
[
0,
"Nr.: 14 / Zeit: 08:34:13.598"
],
[
1,
"Netzzugang"
],
[
2,
"Quelle: 02:00:00:00:02:11"
],
[
2,
"Ziel: 02:00:00:00:02:13"
],
[
2,
"Bemerkungen / Details: 0x800"
],
[
1,
"Vermittlung"
],
[
2,
"Quelle: 192.168.0.20"
],
[
2,
"Ziel: 192.168.0.30"
],
[
2,
"Protokoll: IP"
],
[
2,
"Bemerkungen / Details: Protokoll: 6, TTL: 64"
],
[
1,
"Transport"
],
[
2,
"Quelle: 50668"
],
[
2,
"Ziel: 80"
],
[
2,
"Protokoll: TCP"
],
[
2,
"Bemerkungen / Details: FIN, SEQ: 2.000.044"
]
],
[
[
0,
"Nr.: 15 / Zeit: 08:34:13.821"
],
[
1,
"Netzzugang"
],
[
2,
"Quelle: 02:00:00:00:02:13"
],
[
2,
"Ziel: 02:00:00:00:02:11"
],
[
2,
"Bemerkungen / Details: 0x800"
],
[
1,
"Vermittlung"
],
[
2,
"Quelle: 192.168.0.30"
],
[
2,
"Ziel: 192.168.0.20"
],
[
2,
"Protokoll: IP"
],
[
2,
"Bemerkungen / Details: Protokoll: 6, TTL: 64"
],
[
1,
"Transport"
],
[
2,
"Quelle: 80"
],
[
2,
"Ziel: 50668"
],
[
2,
"Protokoll: TCP"
],
[
2,
"Bemerkungen / Details: SEQ: 1.000.063, ACK: 2.000.045"
]
],
[
[
0,
"Nr.: 16 / Zeit: 08:34:13.877"
],
[
1,
"Netzzugang"
],
[
2,
"Quelle: 02:00:00:00:02:13"
],
[
2,
"Ziel: 02:00:00:00:02:11"
],
[
2,
"Bemerkungen / Details: 0x800"
],
[
1,
"Vermittlung"
],
[
2,
"Quelle: 192.168.0.30"
],
[
2,
"Ziel: 192.168.0.20"
],
[
2,
"Protokoll: IP"
],
[
2,
"Bemerkungen / Details: Protokoll: 6, TTL: 64"
],
[
1,
"Transport"
],
[
2,
"Quelle: 80"
],
[
2,
"Ziel: 50668"
],
[
2,
"Protokoll: TCP"
],
[
2,
"Bemerkungen / Details: FIN, SEQ: 1.000.063"
]
],
[
[
0,
"Nr.: 17 / Zeit: 08:34:13.878"
],
[
1,
"Netzzugang"
],
[
2,
"Quelle: 02:00:00:00:02:11"
],
[
2,
"Ziel: 02:00:00:00:02:13"
],
[
2,
"Bemerkungen / Details: 0x800"
],
[
1,
"Vermittlung"
],
[
2,
"Quelle: 192.168.0.20"
],
[
2,
"Ziel: 192.168.0.30"
],
[
2,
"Protokoll: IP"
],
[
2,
"Bemerkungen / Details: Protokoll: 6, TTL: 64"
],
[
1,
"Transport"
],
[
2,
"Quelle: 50668"
],
[
2,
"Ziel: 80"
],
[
2,
"Protokoll: TCP"
],
[
2,
"Bemerkungen / Details: SEQ: 2.000.045, ACK: 1.000.064"
]
]
],
"layered": [
[
"1",
"08:34:12.286",
"02:00:00:00:02:11",
"FF:FF:FF:FF:FF:FF",
"",
"Netzzugang",
"0x806"
],
[
"1",
"08:34:12.286",
"192.168.0.20",
"192.168.0.10",
"ARP",
"Vermittlung",
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
],
[
"2",
"08:34:12.523",
"02:00:00:00:02:12",
"02:00:00:00:02:11",
"",
"Netzzugang",
"0x806"
],
[
"2",
"08:34:12.523",
"192.168.0.10",
"192.168.0.20",
"ARP",
"Vermittlung",
"MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:11|192.168.0.20]"
],
[
"3",
"08:34:12.526",
"02:00:00:00:02:11",
"02:00:00:00:02:12",
"",
"Netzzugang",
"0x800"
],
[
"3",
"08:34:12.526",
"192.168.0.20",
"192.168.0.10",
"IP",
"Vermittlung",
"Protokoll: 17, TTL: 64"
],
[
"3",
"08:34:12.526",
"61663",
"53",
"UDP",
"Transport",
""
],
[
"3",
"08:34:12.526",
null,
null,
"DNS",
"Anwendung",
"ID=26498 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n"
],
[
"4",
"08:34:12.756",
"02:00:00:00:02:12",
"02:00:00:00:02:11",
"",
"Netzzugang",
"0x800"
],
[
"4",
"08:34:12.756",
"192.168.0.10",
"192.168.0.20",
"IP",
"Vermittlung",
"Protokoll: 17, TTL: 64"
],
[
"4",
"08:34:12.756",
"53",
"61663",
"UDP",
"Transport",
""
],
[
"4",
"08:34:12.756",
null,
null,
"DNS",
"Anwendung",
"ID=26498 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n"
],
[
"5",
"08:34:12.760",
"02:00:00:00:02:11",
"FF:FF:FF:FF:FF:FF",
"",
"Netzzugang",
"0x806"
],
[
"5",
"08:34:12.760",
"192.168.0.20",
"192.168.0.30",
"ARP",
"Vermittlung",
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
],
[
"6",
"08:34:12.983",
"02:00:00:00:02:13",
"02:00:00:00:02:11",
"",
"Netzzugang",
"0x806"
],
[
"6",
"08:34:12.983",
"192.168.0.30",
"192.168.0.20",
"ARP",
"Vermittlung",
"MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]"
],
[
"7",
"08:34:12.984",
"02:00:00:00:02:11",
"02:00:00:00:02:13",
"",
"Netzzugang",
"0x800"
],
[
"7",
"08:34:12.984",
"192.168.0.20",
"192.168.0.30",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"7",
"08:34:12.984",
"50668",
"80",
"TCP",
"Transport",
"SYN, SEQ: 2.000.000"
],
[
"8",
"08:34:13.207",
"02:00:00:00:02:13",
"02:00:00:00:02:11",
"",
"Netzzugang",
"0x800"
],
[
"8",
"08:34:13.207",
"192.168.0.30",
"192.168.0.20",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"8",
"08:34:13.207",
"80",
"50668",
"TCP",
"Transport",
"SYN, SEQ: 1.000.000, ACK: 2.000.001"
],
[
"9",
"08:34:13.208",
"02:00:00:00:02:11",
"02:00:00:00:02:13",
"",
"Netzzugang",
"0x800"
],
[
"9",
"08:34:13.208",
"192.168.0.20",
"192.168.0.30",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"9",
"08:34:13.208",
"50668",
"80",
"TCP",
"Transport",
"SEQ: 2.000.001, ACK: 1.000.001"
],
[
"10",
"08:34:13.264",
"02:00:00:00:02:11",
"02:00:00:00:02:13",
"",
"Netzzugang",
"0x800"
],
[
"10",
"08:34:13.264",
"192.168.0.20",
"192.168.0.30",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"10",
"08:34:13.264",
"50668",
"80",
"TCP",
"Transport",
"SEQ: 2.000.001"
],
[
"10",
"08:34:13.264",
null,
null,
"HTTP",
"Anwendung",
"GET /text.txt HTTP/1.1\nHost: www.filius.de\n"
],
[
"11",
"08:34:13.486",
"02:00:00:00:02:13",
"02:00:00:00:02:11",
"",
"Netzzugang",
"0x800"
],
[
"11",
"08:34:13.486",
"192.168.0.30",
"192.168.0.20",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"11",
"08:34:13.486",
"80",
"50668",
"TCP",
"Transport",
"SEQ: 1.000.001, ACK: 2.000.044"
],
[
"12",
"08:34:13.542",
"02:00:00:00:02:13",
"02:00:00:00:02:11",
"",
"Netzzugang",
"0x800"
],
[
"12",
"08:34:13.542",
"192.168.0.30",
"192.168.0.20",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"12",
"08:34:13.542",
"80",
"50668",
"TCP",
"Transport",
"SEQ: 1.000.001"
],
[
"12",
"08:34:13.542",
null,
null,
"HTTP",
"Anwendung",
"HTTP/1.1 200 OK\nContent-type: text/plain\n\nNur Text\nzwei Zeilen"
],
[
"13",
"08:34:13.543",
"02:00:00:00:02:11",
"02:00:00:00:02:13",
"",
"Netzzugang",
"0x800"
],
[
"13",
"08:34:13.543",
"192.168.0.20",
"192.168.0.30",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"13",
"08:34:13.543",
"50668",
"80",
"TCP",
"Transport",
"SEQ: 2.000.044, ACK: 1.000.063"
],
[
"14",
"08:34:13.598",
"02:00:00:00:02:11",
"02:00:00:00:02:13",
"",
"Netzzugang",
"0x800"
],
[
"14",
"08:34:13.598",
"192.168.0.20",
"192.168.0.30",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"14",
"08:34:13.598",
"50668",
"80",
"TCP",
"Transport",
"FIN, SEQ: 2.000.044"
],
[
"15",
"08:34:13.821",
"02:00:00:00:02:13",
"02:00:00:00:02:11",
"",
"Netzzugang",
"0x800"
],
[
"15",
"08:34:13.821",
"192.168.0.30",
"192.168.0.20",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"15",
"08:34:13.821",
"80",
"50668",
"TCP",
"Transport",
"SEQ: 1.000.063, ACK: 2.000.045"
],
[
"16",
"08:34:13.877",
"02:00:00:00:02:13",
"02:00:00:00:02:11",
"",
"Netzzugang",
"0x800"
],
[
"16",
"08:34:13.877",
"192.168.0.30",
"192.168.0.20",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"16",
"08:34:13.877",
"80",
"50668",
"TCP",
"Transport",
"FIN, SEQ: 1.000.063"
],
[
"17",
"08:34:13.878",
"02:00:00:00:02:11",
"02:00:00:00:02:13",
"",
"Netzzugang",
"0x800"
],
[
"17",
"08:34:13.878",
"192.168.0.20",
"192.168.0.30",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"17",
"08:34:13.878",
"50668",
"80",
"TCP",
"Transport",
"SEQ: 2.000.045, ACK: 1.000.064"
]
],
"export": "+============+======================+======================+======================+======================+======================+==========================================+\r\n| Nr. | Zeit | Quelle | Ziel | Protokoll | Schicht | Bemerkungen / Details | \r\n+============+======================+======================+======================+======================+======================+==========================================+\r\n| 1 | 08:34:12.286 | 192.168.0.20 | 192.168.0.10 | ARP | Vermittlung | Suche nach MAC für 192.168.0.10 | \r\n| | | | | | | [op=REQUEST, | \r\n| | | | | | | sender=02:00:00:00:02:11|192.168.0.20, | \r\n| | | | | | | target=FF:FF:FF:FF:FF:FF|192.168.0.10] | \r\n+------------+----------------------+----------------------+----------------------+----------------------+----------------------+------------------------------------------+\r\n| 2 | 08:34:12.523 | 192.168.0.10 | 192.168.0.20 | ARP | Vermittlung | MAC ist 02:00:00:00:02:12 [op=REPLY, | \r\n| | | | | | | sender=02:00:00:00:02:12|192.168.0.10, | \r\n| | | | | | | target=02:00:00:00:02:11|192.168.0.20] | \r\n+------------+----------------------+----------------------+----------------------+----------------------+----------------------+------------------------------------------+\r\n| 3 | 08:34:12.526 | 192.168.0.20:61663 | 192.168.0.10:53 | DNS | Anwendung | ID=26498 QR=0 RCODE=0 QDCOUNT=1 | \r\n| | | | | | | ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 | \r\n| | | | | | | www.filius.de. A IN | \r\n+------------+----------------------+----------------------+----------------------+----------------------+----------------------+------------------------------------------+\r\n| 4 | 08:34:12.756 | 192.168.0.10:53 | 192.168.0.20:61663 | DNS | Anwendung | ID=26498 QR=1 RCODE=0 QDCOUNT=0 | \r\n| | | | | | | ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 | \r\n| | | | | | | www.filius.de. A 3600 192.168.0.30 | \r\n+------------+----------------------+----------------------+----------------------+----------------------+----------------------+------------------------------------------+\r\n| 5 | 08:34:12.760 | 192.168.0.20 | 192.168.0.30 | ARP | Vermittlung | Suche nach MAC für 192.168.0.30 | \r\n| | | | | | | [op=REQUEST, | \r\n| | | | | | | sender=02:00:00:00:02:11|192.168.0.20, | \r\n| | | | | | | target=FF:FF:FF:FF:FF:FF|192.168.0.30] | \r\n+------------+----------------------+----------------------+----------------------+----------------------+----------------------+------------------------------------------+\r\n| 6 | 08:34:12.983 | 192.168.0.30 | 192.168.0.20 | ARP | Vermittlung | MAC ist 02:00:00:00:02:13 [op=REPLY, | \r\n| | | | | | | sender=02:00:00:00:02:13|192.168.0.30, | \r\n| | | | | | | target=02:00:00:00:02:11|192.168.0.20] | \r\n+------------+----------------------+----------------------+----------------------+----------------------+----------------------+------------------------------------------+\r\n| 7 | 08:34:12.984 | 192.168.0.20:50668 | 192.168.0.30:80 | TCP | Transport | SYN, SEQ: 2.000.000 | \r\n+------------+----------------------+----------------------+----------------------+----------------------+----------------------+------------------------------------------+\r\n| 8 | 08:34:13.207 | 192.168.0.30:80 | 192.168.0.20:50668 | TCP | Transport | SYN, SEQ: 1.000.000, ACK: 2.000.001 | \r\n+------------+----------------------+----------------------+----------------------+----------------------+----------------------+------------------------------------------+\r\n| 9 | 08:34:13.208 | 192.168.0.20:50668 | 192.168.0.30:80 | TCP | Transport | SEQ: 2.000.001, ACK: 1.000.001 | \r\n+------------+----------------------+----------------------+----------------------+----------------------+----------------------+------------------------------------------+\r\n| 10 | 08:34:13.264 | 192.168.0.20:50668 | 192.168.0.30:80 | HTTP | Anwendung | GET /text.txt HTTP/1.1 Host: | \r\n| | | | | | | www.filius.de | \r\n+------------+----------------------+----------------------+----------------------+----------------------+----------------------+------------------------------------------+\r\n| 11 | 08:34:13.486 | 192.168.0.30:80 | 192.168.0.20:50668 | TCP | Transport | SEQ: 1.000.001, ACK: 2.000.044 | \r\n+------------+----------------------+----------------------+----------------------+----------------------+----------------------+------------------------------------------+\r\n| 12 | 08:34:13.542 | 192.168.0.30:80 | 192.168.0.20:50668 | HTTP | Anwendung | HTTP/1.1 200 OK Content-type: text/plain | \r\n| | | | | | | Nur Text zwei Zeilen | \r\n+------------+----------------------+----------------------+----------------------+----------------------+----------------------+------------------------------------------+\r\n| 13 | 08:34:13.543 | 192.168.0.20:50668 | 192.168.0.30:80 | TCP | Transport | SEQ: 2.000.044, ACK: 1.000.063 | \r\n+------------+----------------------+----------------------+----------------------+----------------------+----------------------+------------------------------------------+\r\n| 14 | 08:34:13.598 | 192.168.0.20:50668 | 192.168.0.30:80 | TCP | Transport | FIN, SEQ: 2.000.044 | \r\n+------------+----------------------+----------------------+----------------------+----------------------+----------------------+------------------------------------------+\r\n| 15 | 08:34:13.821 | 192.168.0.30:80 | 192.168.0.20:50668 | TCP | Transport | SEQ: 1.000.063, ACK: 2.000.045 | \r\n+------------+----------------------+----------------------+----------------------+----------------------+----------------------+------------------------------------------+\r\n| 16 | 08:34:13.877 | 192.168.0.30:80 | 192.168.0.20:50668 | TCP | Transport | FIN, SEQ: 1.000.063 | \r\n+------------+----------------------+----------------------+----------------------+----------------------+----------------------+------------------------------------------+\r\n| 17 | 08:34:13.878 | 192.168.0.20:50668 | 192.168.0.30:80 | TCP | Transport | SEQ: 2.000.045, ACK: 1.000.064 | \r\n+------------+----------------------+----------------------+----------------------+----------------------+----------------------+------------------------------------------+\r\n"
},
{
"step": "the server's card beside it",
"at": 15584,
"titles": [
"Anna - 192.168.0.20",
"192.168.0.30"
],
"selected": 1,
"visible": true,
"tables": {
"00000000-0000-0000-0000-000000000201": {
"rows": [
[
"1",
"08:34:12.286",
"192.168.0.20",
"192.168.0.10",
"ARP",
"Vermittlung",
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
],
[
"2",
"08:34:12.523",
"192.168.0.10",
"192.168.0.20",
"ARP",
"Vermittlung",
"MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:11|192.168.0.20]"
],
[
"3",
"08:34:12.526",
"192.168.0.20:61663",
"192.168.0.10:53",
"DNS",
"Anwendung",
"ID=26498 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n"
],
[
"4",
"08:34:12.756",
"192.168.0.10:53",
"192.168.0.20:61663",
"DNS",
"Anwendung",
"ID=26498 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n"
],
[
"5",
"08:34:12.760",
"192.168.0.20",
"192.168.0.30",
"ARP",
"Vermittlung",
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
],
[
"6",
"08:34:12.983",
"192.168.0.30",
"192.168.0.20",
"ARP",
"Vermittlung",
"MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]"
],
[
"7",
"08:34:12.984",
"192.168.0.20:50668",
"192.168.0.30:80",
"TCP",
"Transport",
"SYN, SEQ: 2.000.000"
],
[
"8",
"08:34:13.207",
"192.168.0.30:80",
"192.168.0.20:50668",
"TCP",
"Transport",
"SYN, SEQ: 1.000.000, ACK: 2.000.001"
],
[
"9",
"08:34:13.208",
"192.168.0.20:50668",
"192.168.0.30:80",
"TCP",
"Transport",
"SEQ: 2.000.001, ACK: 1.000.001"
],
[
"10",
"08:34:13.264",
"192.168.0.20:50668",
"192.168.0.30:80",
"HTTP",
"Anwendung",
"GET /text.txt HTTP/1.1\nHost: www.filius.de\n"
],
[
"11",
"08:34:13.486",
"192.168.0.30:80",
"192.168.0.20:50668",
"TCP",
"Transport",
"SEQ: 1.000.001, ACK: 2.000.044"
],
[
"12",
"08:34:13.542",
"192.168.0.30:80",
"192.168.0.20:50668",
"HTTP",
"Anwendung",
"HTTP/1.1 200 OK\nContent-type: text/plain\n\nNur Text\nzwei Zeilen"
],
[
"13",
"08:34:13.543",
"192.168.0.20:50668",
"192.168.0.30:80",
"TCP",
"Transport",
"SEQ: 2.000.044, ACK: 1.000.063"
],
[
"14",
"08:34:13.598",
"192.168.0.20:50668",
"192.168.0.30:80",
"TCP",
"Transport",
"FIN, SEQ: 2.000.044"
],
[
"15",
"08:34:13.821",
"192.168.0.30:80",
"192.168.0.20:50668",
"TCP",
"Transport",
"SEQ: 1.000.063, ACK: 2.000.045"
],
[
"16",
"08:34:13.877",
"192.168.0.30:80",
"192.168.0.20:50668",
"TCP",
"Transport",
"FIN, SEQ: 1.000.063"
],
[
"17",
"08:34:13.878",
"192.168.0.20:50668",
"192.168.0.30:80",
"TCP",
"Transport",
"SEQ: 2.000.045, ACK: 1.000.064"
]
],
"layerRows": [
[
"1",
"08:34:12.286",
"02:00:00:00:02:11",
"FF:FF:FF:FF:FF:FF",
"",
"Netzzugang",
"0x806"
],
[
"1",
"08:34:12.286",
"192.168.0.20",
"192.168.0.10",
"ARP",
"Vermittlung",
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
],
[
"2",
"08:34:12.523",
"02:00:00:00:02:12",
"02:00:00:00:02:11",
"",
"Netzzugang",
"0x806"
],
[
"2",
"08:34:12.523",
"192.168.0.10",
"192.168.0.20",
"ARP",
"Vermittlung",
"MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:11|192.168.0.20]"
],
[
"3",
"08:34:12.526",
"02:00:00:00:02:11",
"02:00:00:00:02:12",
"",
"Netzzugang",
"0x800"
],
[
"3",
"08:34:12.526",
"192.168.0.20",
"192.168.0.10",
"IP",
"Vermittlung",
"Protokoll: 17, TTL: 64"
],
[
"3",
"08:34:12.526",
"192.168.0.20:61663",
"192.168.0.10:53",
"UDP",
"Transport",
""
],
[
"3",
"08:34:12.526",
"192.168.0.20:61663",
"192.168.0.10:53",
"DNS",
"Anwendung",
"ID=26498 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n"
],
[
"4",
"08:34:12.756",
"02:00:00:00:02:12",
"02:00:00:00:02:11",
"",
"Netzzugang",
"0x800"
],
[
"4",
"08:34:12.756",
"192.168.0.10",
"192.168.0.20",
"IP",
"Vermittlung",
"Protokoll: 17, TTL: 64"
],
[
"4",
"08:34:12.756",
"192.168.0.10:53",
"192.168.0.20:61663",
"UDP",
"Transport",
""
],
[
"4",
"08:34:12.756",
"192.168.0.10:53",
"192.168.0.20:61663",
"DNS",
"Anwendung",
"ID=26498 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n"
],
[
"5",
"08:34:12.760",
"02:00:00:00:02:11",
"FF:FF:FF:FF:FF:FF",
"",
"Netzzugang",
"0x806"
],
[
"5",
"08:34:12.760",
"192.168.0.20",
"192.168.0.30",
"ARP",
"Vermittlung",
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
],
[
"6",
"08:34:12.983",
"02:00:00:00:02:13",
"02:00:00:00:02:11",
"",
"Netzzugang",
"0x806"
],
[
"6",
"08:34:12.983",
"192.168.0.30",
"192.168.0.20",
"ARP",
"Vermittlung",
"MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]"
],
[
"7",
"08:34:12.984",
"02:00:00:00:02:11",
"02:00:00:00:02:13",
"",
"Netzzugang",
"0x800"
],
[
"7",
"08:34:12.984",
"192.168.0.20",
"192.168.0.30",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"7",
"08:34:12.984",
"192.168.0.20:50668",
"192.168.0.30:80",
"TCP",
"Transport",
"SYN, SEQ: 2.000.000"
],
[
"8",
"08:34:13.207",
"02:00:00:00:02:13",
"02:00:00:00:02:11",
"",
"Netzzugang",
"0x800"
],
[
"8",
"08:34:13.207",
"192.168.0.30",
"192.168.0.20",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"8",
"08:34:13.207",
"192.168.0.30:80",
"192.168.0.20:50668",
"TCP",
"Transport",
"SYN, SEQ: 1.000.000, ACK: 2.000.001"
],
[
"9",
"08:34:13.208",
"02:00:00:00:02:11",
"02:00:00:00:02:13",
"",
"Netzzugang",
"0x800"
],
[
"9",
"08:34:13.208",
"192.168.0.20",
"192.168.0.30",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"9",
"08:34:13.208",
"192.168.0.20:50668",
"192.168.0.30:80",
"TCP",
"Transport",
"SEQ: 2.000.001, ACK: 1.000.001"
],
[
"10",
"08:34:13.264",
"02:00:00:00:02:11",
"02:00:00:00:02:13",
"",
"Netzzugang",
"0x800"
],
[
"10",
"08:34:13.264",
"192.168.0.20",
"192.168.0.30",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"10",
"08:34:13.264",
"192.168.0.20:50668",
"192.168.0.30:80",
"TCP",
"Transport",
"SEQ: 2.000.001"
],
[
"10",
"08:34:13.264",
"192.168.0.20:50668",
"192.168.0.30:80",
"HTTP",
"Anwendung",
"GET /text.txt HTTP/1.1\nHost: www.filius.de\n"
],
[
"11",
"08:34:13.486",
"02:00:00:00:02:13",
"02:00:00:00:02:11",
"",
"Netzzugang",
"0x800"
],
[
"11",
"08:34:13.486",
"192.168.0.30",
"192.168.0.20",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"11",
"08:34:13.486",
"192.168.0.30:80",
"192.168.0.20:50668",
"TCP",
"Transport",
"SEQ: 1.000.001, ACK: 2.000.044"
],
[
"12",
"08:34:13.542",
"02:00:00:00:02:13",
"02:00:00:00:02:11",
"",
"Netzzugang",
"0x800"
],
[
"12",
"08:34:13.542",
"192.168.0.30",
"192.168.0.20",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"12",
"08:34:13.542",
"192.168.0.30:80",
"192.168.0.20:50668",
"TCP",
"Transport",
"SEQ: 1.000.001"
],
[
"12",
"08:34:13.542",
"192.168.0.30:80",
"192.168.0.20:50668",
"HTTP",
"Anwendung",
"HTTP/1.1 200 OK\nContent-type: text/plain\n\nNur Text\nzwei Zeilen"
],
[
"13",
"08:34:13.543",
"02:00:00:00:02:11",
"02:00:00:00:02:13",
"",
"Netzzugang",
"0x800"
],
[
"13",
"08:34:13.543",
"192.168.0.20",
"192.168.0.30",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"13",
"08:34:13.543",
"192.168.0.20:50668",
"192.168.0.30:80",
"TCP",
"Transport",
"SEQ: 2.000.044, ACK: 1.000.063"
],
[
"14",
"08:34:13.598",
"02:00:00:00:02:11",
"02:00:00:00:02:13",
"",
"Netzzugang",
"0x800"
],
[
"14",
"08:34:13.598",
"192.168.0.20",
"192.168.0.30",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"14",
"08:34:13.598",
"192.168.0.20:50668",
"192.168.0.30:80",
"TCP",
"Transport",
"FIN, SEQ: 2.000.044"
],
[
"15",
"08:34:13.821",
"02:00:00:00:02:13",
"02:00:00:00:02:11",
"",
"Netzzugang",
"0x800"
],
[
"15",
"08:34:13.821",
"192.168.0.30",
"192.168.0.20",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"15",
"08:34:13.821",
"192.168.0.30:80",
"192.168.0.20:50668",
"TCP",
"Transport",
"SEQ: 1.000.063, ACK: 2.000.045"
],
[
"16",
"08:34:13.877",
"02:00:00:00:02:13",
"02:00:00:00:02:11",
"",
"Netzzugang",
"0x800"
],
[
"16",
"08:34:13.877",
"192.168.0.30",
"192.168.0.20",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"16",
"08:34:13.877",
"192.168.0.30:80",
"192.168.0.20:50668",
"TCP",
"Transport",
"FIN, SEQ: 1.000.063"
],
[
"17",
"08:34:13.878",
"02:00:00:00:02:11",
"02:00:00:00:02:13",
"",
"Netzzugang",
"0x800"
],
[
"17",
"08:34:13.878",
"192.168.0.20",
"192.168.0.30",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"17",
"08:34:13.878",
"192.168.0.20:50668",
"192.168.0.30:80",
"TCP",
"Transport",
"SEQ: 2.000.045, ACK: 1.000.064"
]
]
},
"00000000-0000-0000-0000-000000000203": {
"rows": [
[
"1",
"08:34:12.410",
"192.168.0.20",
"192.168.0.10",
"ARP",
"Vermittlung",
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
],
[
"2",
"08:34:12.872",
"192.168.0.20",
"192.168.0.30",
"ARP",
"Vermittlung",
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
],
[
"3",
"08:34:12.872",
"192.168.0.30",
"192.168.0.20",
"ARP",
"Vermittlung",
"MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]"
],
[
"4",
"08:34:13.095",
"192.168.0.20:50668",
"192.168.0.30:80",
"TCP",
"Transport",
"SYN, SEQ: 2.000.000"
],
[
"5",
"08:34:13.096",
"192.168.0.30:80",
"192.168.0.20:50668",
"TCP",
"Transport",
"SYN, SEQ: 1.000.000, ACK: 2.000.001"
],
[
"6",
"08:34:13.319",
"192.168.0.20:50668",
"192.168.0.30:80",
"TCP",
"Transport",
"SEQ: 2.000.001, ACK: 1.000.001"
],
[
"7",
"08:34:13.375",
"192.168.0.20:50668",
"192.168.0.30:80",
"HTTP",
"Anwendung",
"GET /text.txt HTTP/1.1\nHost: www.filius.de\n"
],
[
"8",
"08:34:13.375",
"192.168.0.30:80",
"192.168.0.20:50668",
"TCP",
"Transport",
"SEQ: 1.000.001, ACK: 2.000.044"
],
[
"9",
"08:34:13.431",
"192.168.0.30:80",
"192.168.0.20:50668",
"HTTP",
"Anwendung",
"HTTP/1.1 200 OK\nContent-type: text/plain\n\nNur Text\nzwei Zeilen"
],
[
"10",
"08:34:13.654",
"192.168.0.20:50668",
"192.168.0.30:80",
"TCP",
"Transport",
"SEQ: 2.000.044, ACK: 1.000.063"
],
[
"11",
"08:34:13.709",
"192.168.0.20:50668",
"192.168.0.30:80",
"TCP",
"Transport",
"FIN, SEQ: 2.000.044"
],
[
"12",
"08:34:13.710",
"192.168.0.30:80",
"192.168.0.20:50668",
"TCP",
"Transport",
"SEQ: 1.000.063, ACK: 2.000.045"
],
[
"13",
"08:34:13.765",
"192.168.0.30:80",
"192.168.0.20:50668",
"TCP",
"Transport",
"FIN, SEQ: 1.000.063"
],
[
"14",
"08:34:13.989",
"192.168.0.20:50668",
"192.168.0.30:80",
"TCP",
"Transport",
"SEQ: 2.000.045, ACK: 1.000.064"
]
],
"layerRows": [
[
"1",
"08:34:12.410",
"02:00:00:00:02:11",
"FF:FF:FF:FF:FF:FF",
"",
"Netzzugang",
"0x806"
],
[
"1",
"08:34:12.410",
"192.168.0.20",
"192.168.0.10",
"ARP",
"Vermittlung",
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
],
[
"2",
"08:34:12.872",
"02:00:00:00:02:11",
"FF:FF:FF:FF:FF:FF",
"",
"Netzzugang",
"0x806"
],
[
"2",
"08:34:12.872",
"192.168.0.20",
"192.168.0.30",
"ARP",
"Vermittlung",
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
],
[
"3",
"08:34:12.872",
"02:00:00:00:02:13",
"02:00:00:00:02:11",
"",
"Netzzugang",
"0x806"
],
[
"3",
"08:34:12.872",
"192.168.0.30",
"192.168.0.20",
"ARP",
"Vermittlung",
"MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]"
],
[
"4",
"08:34:13.095",
"02:00:00:00:02:11",
"02:00:00:00:02:13",
"",
"Netzzugang",
"0x800"
],
[
"4",
"08:34:13.095",
"192.168.0.20",
"192.168.0.30",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"4",
"08:34:13.095",
"192.168.0.20:50668",
"192.168.0.30:80",
"TCP",
"Transport",
"SYN, SEQ: 2.000.000"
],
[
"5",
"08:34:13.096",
"02:00:00:00:02:13",
"02:00:00:00:02:11",
"",
"Netzzugang",
"0x800"
],
[
"5",
"08:34:13.096",
"192.168.0.30",
"192.168.0.20",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"5",
"08:34:13.096",
"192.168.0.30:80",
"192.168.0.20:50668",
"TCP",
"Transport",
"SYN, SEQ: 1.000.000, ACK: 2.000.001"
],
[
"6",
"08:34:13.319",
"02:00:00:00:02:11",
"02:00:00:00:02:13",
"",
"Netzzugang",
"0x800"
],
[
"6",
"08:34:13.319",
"192.168.0.20",
"192.168.0.30",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"6",
"08:34:13.319",
"192.168.0.20:50668",
"192.168.0.30:80",
"TCP",
"Transport",
"SEQ: 2.000.001, ACK: 1.000.001"
],
[
"7",
"08:34:13.375",
"02:00:00:00:02:11",
"02:00:00:00:02:13",
"",
"Netzzugang",
"0x800"
],
[
"7",
"08:34:13.375",
"192.168.0.20",
"192.168.0.30",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"7",
"08:34:13.375",
"192.168.0.20:50668",
"192.168.0.30:80",
"TCP",
"Transport",
"SEQ: 2.000.001"
],
[
"7",
"08:34:13.375",
"192.168.0.20:50668",
"192.168.0.30:80",
"HTTP",
"Anwendung",
"GET /text.txt HTTP/1.1\nHost: www.filius.de\n"
],
[
"8",
"08:34:13.375",
"02:00:00:00:02:13",
"02:00:00:00:02:11",
"",
"Netzzugang",
"0x800"
],
[
"8",
"08:34:13.375",
"192.168.0.30",
"192.168.0.20",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"8",
"08:34:13.375",
"192.168.0.30:80",
"192.168.0.20:50668",
"TCP",
"Transport",
"SEQ: 1.000.001, ACK: 2.000.044"
],
[
"9",
"08:34:13.431",
"02:00:00:00:02:13",
"02:00:00:00:02:11",
"",
"Netzzugang",
"0x800"
],
[
"9",
"08:34:13.431",
"192.168.0.30",
"192.168.0.20",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"9",
"08:34:13.431",
"192.168.0.30:80",
"192.168.0.20:50668",
"TCP",
"Transport",
"SEQ: 1.000.001"
],
[
"9",
"08:34:13.431",
"192.168.0.30:80",
"192.168.0.20:50668",
"HTTP",
"Anwendung",
"HTTP/1.1 200 OK\nContent-type: text/plain\n\nNur Text\nzwei Zeilen"
],
[
"10",
"08:34:13.654",
"02:00:00:00:02:11",
"02:00:00:00:02:13",
"",
"Netzzugang",
"0x800"
],
[
"10",
"08:34:13.654",
"192.168.0.20",
"192.168.0.30",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"10",
"08:34:13.654",
"192.168.0.20:50668",
"192.168.0.30:80",
"TCP",
"Transport",
"SEQ: 2.000.044, ACK: 1.000.063"
],
[
"11",
"08:34:13.709",
"02:00:00:00:02:11",
"02:00:00:00:02:13",
"",
"Netzzugang",
"0x800"
],
[
"11",
"08:34:13.709",
"192.168.0.20",
"192.168.0.30",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"11",
"08:34:13.709",
"192.168.0.20:50668",
"192.168.0.30:80",
"TCP",
"Transport",
"FIN, SEQ: 2.000.044"
],
[
"12",
"08:34:13.710",
"02:00:00:00:02:13",
"02:00:00:00:02:11",
"",
"Netzzugang",
"0x800"
],
[
"12",
"08:34:13.710",
"192.168.0.30",
"192.168.0.20",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"12",
"08:34:13.710",
"192.168.0.30:80",
"192.168.0.20:50668",
"TCP",
"Transport",
"SEQ: 1.000.063, ACK: 2.000.045"
],
[
"13",
"08:34:13.765",
"02:00:00:00:02:13",
"02:00:00:00:02:11",
"",
"Netzzugang",
"0x800"
],
[
"13",
"08:34:13.765",
"192.168.0.30",
"192.168.0.20",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"13",
"08:34:13.765",
"192.168.0.30:80",
"192.168.0.20:50668",
"TCP",
"Transport",
"FIN, SEQ: 1.000.063"
],
[
"14",
"08:34:13.989",
"02:00:00:00:02:11",
"02:00:00:00:02:13",
"",
"Netzzugang",
"0x800"
],
[
"14",
"08:34:13.989",
"192.168.0.20",
"192.168.0.30",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"14",
"08:34:13.989",
"192.168.0.20:50668",
"192.168.0.30:80",
"TCP",
"Transport",
"SEQ: 2.000.045, ACK: 1.000.064"
]
]
}
}
},
{
"step": "the browser's card again",
"at": 15889,
"titles": [
"Anna - 192.168.0.20",
"192.168.0.30"
],
"selected": 0,
"visible": true,
"tables": {
"00000000-0000-0000-0000-000000000201": {
"rows": [
[
"1",
"08:34:12.286",
"192.168.0.20",
"192.168.0.10",
"ARP",
"Vermittlung",
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
],
[
"2",
"08:34:12.523",
"192.168.0.10",
"192.168.0.20",
"ARP",
"Vermittlung",
"MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:11|192.168.0.20]"
],
[
"3",
"08:34:12.526",
"192.168.0.20:61663",
"192.168.0.10:53",
"DNS",
"Anwendung",
"ID=26498 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n"
],
[
"4",
"08:34:12.756",
"192.168.0.10:53",
"192.168.0.20:61663",
"DNS",
"Anwendung",
"ID=26498 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n"
],
[
"5",
"08:34:12.760",
"192.168.0.20",
"192.168.0.30",
"ARP",
"Vermittlung",
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
],
[
"6",
"08:34:12.983",
"192.168.0.30",
"192.168.0.20",
"ARP",
"Vermittlung",
"MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]"
],
[
"7",
"08:34:12.984",
"192.168.0.20:50668",
"192.168.0.30:80",
"TCP",
"Transport",
"SYN, SEQ: 2.000.000"
],
[
"8",
"08:34:13.207",
"192.168.0.30:80",
"192.168.0.20:50668",
"TCP",
"Transport",
"SYN, SEQ: 1.000.000, ACK: 2.000.001"
],
[
"9",
"08:34:13.208",
"192.168.0.20:50668",
"192.168.0.30:80",
"TCP",
"Transport",
"SEQ: 2.000.001, ACK: 1.000.001"
],
[
"10",
"08:34:13.264",
"192.168.0.20:50668",
"192.168.0.30:80",
"HTTP",
"Anwendung",
"GET /text.txt HTTP/1.1\nHost: www.filius.de\n"
],
[
"11",
"08:34:13.486",
"192.168.0.30:80",
"192.168.0.20:50668",
"TCP",
"Transport",
"SEQ: 1.000.001, ACK: 2.000.044"
],
[
"12",
"08:34:13.542",
"192.168.0.30:80",
"192.168.0.20:50668",
"HTTP",
"Anwendung",
"HTTP/1.1 200 OK\nContent-type: text/plain\n\nNur Text\nzwei Zeilen"
],
[
"13",
"08:34:13.543",
"192.168.0.20:50668",
"192.168.0.30:80",
"TCP",
"Transport",
"SEQ: 2.000.044, ACK: 1.000.063"
],
[
"14",
"08:34:13.598",
"192.168.0.20:50668",
"192.168.0.30:80",
"TCP",
"Transport",
"FIN, SEQ: 2.000.044"
],
[
"15",
"08:34:13.821",
"192.168.0.30:80",
"192.168.0.20:50668",
"TCP",
"Transport",
"SEQ: 1.000.063, ACK: 2.000.045"
],
[
"16",
"08:34:13.877",
"192.168.0.30:80",
"192.168.0.20:50668",
"TCP",
"Transport",
"FIN, SEQ: 1.000.063"
],
[
"17",
"08:34:13.878",
"192.168.0.20:50668",
"192.168.0.30:80",
"TCP",
"Transport",
"SEQ: 2.000.045, ACK: 1.000.064"
]
],
"layerRows": [
[
"1",
"08:34:12.286",
"02:00:00:00:02:11",
"FF:FF:FF:FF:FF:FF",
"",
"Netzzugang",
"0x806"
],
[
"1",
"08:34:12.286",
"192.168.0.20",
"192.168.0.10",
"ARP",
"Vermittlung",
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
],
[
"2",
"08:34:12.523",
"02:00:00:00:02:12",
"02:00:00:00:02:11",
"",
"Netzzugang",
"0x806"
],
[
"2",
"08:34:12.523",
"192.168.0.10",
"192.168.0.20",
"ARP",
"Vermittlung",
"MAC ist 02:00:00:00:02:12 [op=REPLY, sender=02:00:00:00:02:12|192.168.0.10, target=02:00:00:00:02:11|192.168.0.20]"
],
[
"3",
"08:34:12.526",
"02:00:00:00:02:11",
"02:00:00:00:02:12",
"",
"Netzzugang",
"0x800"
],
[
"3",
"08:34:12.526",
"192.168.0.20",
"192.168.0.10",
"IP",
"Vermittlung",
"Protokoll: 17, TTL: 64"
],
[
"3",
"08:34:12.526",
"192.168.0.20:61663",
"192.168.0.10:53",
"UDP",
"Transport",
""
],
[
"3",
"08:34:12.526",
"192.168.0.20:61663",
"192.168.0.10:53",
"DNS",
"Anwendung",
"ID=26498 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n"
],
[
"4",
"08:34:12.756",
"02:00:00:00:02:12",
"02:00:00:00:02:11",
"",
"Netzzugang",
"0x800"
],
[
"4",
"08:34:12.756",
"192.168.0.10",
"192.168.0.20",
"IP",
"Vermittlung",
"Protokoll: 17, TTL: 64"
],
[
"4",
"08:34:12.756",
"192.168.0.10:53",
"192.168.0.20:61663",
"UDP",
"Transport",
""
],
[
"4",
"08:34:12.756",
"192.168.0.10:53",
"192.168.0.20:61663",
"DNS",
"Anwendung",
"ID=26498 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n"
],
[
"5",
"08:34:12.760",
"02:00:00:00:02:11",
"FF:FF:FF:FF:FF:FF",
"",
"Netzzugang",
"0x806"
],
[
"5",
"08:34:12.760",
"192.168.0.20",
"192.168.0.30",
"ARP",
"Vermittlung",
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
],
[
"6",
"08:34:12.983",
"02:00:00:00:02:13",
"02:00:00:00:02:11",
"",
"Netzzugang",
"0x806"
],
[
"6",
"08:34:12.983",
"192.168.0.30",
"192.168.0.20",
"ARP",
"Vermittlung",
"MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]"
],
[
"7",
"08:34:12.984",
"02:00:00:00:02:11",
"02:00:00:00:02:13",
"",
"Netzzugang",
"0x800"
],
[
"7",
"08:34:12.984",
"192.168.0.20",
"192.168.0.30",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"7",
"08:34:12.984",
"192.168.0.20:50668",
"192.168.0.30:80",
"TCP",
"Transport",
"SYN, SEQ: 2.000.000"
],
[
"8",
"08:34:13.207",
"02:00:00:00:02:13",
"02:00:00:00:02:11",
"",
"Netzzugang",
"0x800"
],
[
"8",
"08:34:13.207",
"192.168.0.30",
"192.168.0.20",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"8",
"08:34:13.207",
"192.168.0.30:80",
"192.168.0.20:50668",
"TCP",
"Transport",
"SYN, SEQ: 1.000.000, ACK: 2.000.001"
],
[
"9",
"08:34:13.208",
"02:00:00:00:02:11",
"02:00:00:00:02:13",
"",
"Netzzugang",
"0x800"
],
[
"9",
"08:34:13.208",
"192.168.0.20",
"192.168.0.30",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"9",
"08:34:13.208",
"192.168.0.20:50668",
"192.168.0.30:80",
"TCP",
"Transport",
"SEQ: 2.000.001, ACK: 1.000.001"
],
[
"10",
"08:34:13.264",
"02:00:00:00:02:11",
"02:00:00:00:02:13",
"",
"Netzzugang",
"0x800"
],
[
"10",
"08:34:13.264",
"192.168.0.20",
"192.168.0.30",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"10",
"08:34:13.264",
"192.168.0.20:50668",
"192.168.0.30:80",
"TCP",
"Transport",
"SEQ: 2.000.001"
],
[
"10",
"08:34:13.264",
"192.168.0.20:50668",
"192.168.0.30:80",
"HTTP",
"Anwendung",
"GET /text.txt HTTP/1.1\nHost: www.filius.de\n"
],
[
"11",
"08:34:13.486",
"02:00:00:00:02:13",
"02:00:00:00:02:11",
"",
"Netzzugang",
"0x800"
],
[
"11",
"08:34:13.486",
"192.168.0.30",
"192.168.0.20",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"11",
"08:34:13.486",
"192.168.0.30:80",
"192.168.0.20:50668",
"TCP",
"Transport",
"SEQ: 1.000.001, ACK: 2.000.044"
],
[
"12",
"08:34:13.542",
"02:00:00:00:02:13",
"02:00:00:00:02:11",
"",
"Netzzugang",
"0x800"
],
[
"12",
"08:34:13.542",
"192.168.0.30",
"192.168.0.20",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"12",
"08:34:13.542",
"192.168.0.30:80",
"192.168.0.20:50668",
"TCP",
"Transport",
"SEQ: 1.000.001"
],
[
"12",
"08:34:13.542",
"192.168.0.30:80",
"192.168.0.20:50668",
"HTTP",
"Anwendung",
"HTTP/1.1 200 OK\nContent-type: text/plain\n\nNur Text\nzwei Zeilen"
],
[
"13",
"08:34:13.543",
"02:00:00:00:02:11",
"02:00:00:00:02:13",
"",
"Netzzugang",
"0x800"
],
[
"13",
"08:34:13.543",
"192.168.0.20",
"192.168.0.30",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"13",
"08:34:13.543",
"192.168.0.20:50668",
"192.168.0.30:80",
"TCP",
"Transport",
"SEQ: 2.000.044, ACK: 1.000.063"
],
[
"14",
"08:34:13.598",
"02:00:00:00:02:11",
"02:00:00:00:02:13",
"",
"Netzzugang",
"0x800"
],
[
"14",
"08:34:13.598",
"192.168.0.20",
"192.168.0.30",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"14",
"08:34:13.598",
"192.168.0.20:50668",
"192.168.0.30:80",
"TCP",
"Transport",
"FIN, SEQ: 2.000.044"
],
[
"15",
"08:34:13.821",
"02:00:00:00:02:13",
"02:00:00:00:02:11",
"",
"Netzzugang",
"0x800"
],
[
"15",
"08:34:13.821",
"192.168.0.30",
"192.168.0.20",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"15",
"08:34:13.821",
"192.168.0.30:80",
"192.168.0.20:50668",
"TCP",
"Transport",
"SEQ: 1.000.063, ACK: 2.000.045"
],
[
"16",
"08:34:13.877",
"02:00:00:00:02:13",
"02:00:00:00:02:11",
"",
"Netzzugang",
"0x800"
],
[
"16",
"08:34:13.877",
"192.168.0.30",
"192.168.0.20",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"16",
"08:34:13.877",
"192.168.0.30:80",
"192.168.0.20:50668",
"TCP",
"Transport",
"FIN, SEQ: 1.000.063"
],
[
"17",
"08:34:13.878",
"02:00:00:00:02:11",
"02:00:00:00:02:13",
"",
"Netzzugang",
"0x800"
],
[
"17",
"08:34:13.878",
"192.168.0.20",
"192.168.0.30",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"17",
"08:34:13.878",
"192.168.0.20:50668",
"192.168.0.30:80",
"TCP",
"Transport",
"SEQ: 2.000.045, ACK: 1.000.064"
]
]
},
"00000000-0000-0000-0000-000000000203": {
"rows": [
[
"1",
"08:34:12.410",
"192.168.0.20",
"192.168.0.10",
"ARP",
"Vermittlung",
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
],
[
"2",
"08:34:12.872",
"192.168.0.20",
"192.168.0.30",
"ARP",
"Vermittlung",
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
],
[
"3",
"08:34:12.872",
"192.168.0.30",
"192.168.0.20",
"ARP",
"Vermittlung",
"MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]"
],
[
"4",
"08:34:13.095",
"192.168.0.20:50668",
"192.168.0.30:80",
"TCP",
"Transport",
"SYN, SEQ: 2.000.000"
],
[
"5",
"08:34:13.096",
"192.168.0.30:80",
"192.168.0.20:50668",
"TCP",
"Transport",
"SYN, SEQ: 1.000.000, ACK: 2.000.001"
],
[
"6",
"08:34:13.319",
"192.168.0.20:50668",
"192.168.0.30:80",
"TCP",
"Transport",
"SEQ: 2.000.001, ACK: 1.000.001"
],
[
"7",
"08:34:13.375",
"192.168.0.20:50668",
"192.168.0.30:80",
"HTTP",
"Anwendung",
"GET /text.txt HTTP/1.1\nHost: www.filius.de\n"
],
[
"8",
"08:34:13.375",
"192.168.0.30:80",
"192.168.0.20:50668",
"TCP",
"Transport",
"SEQ: 1.000.001, ACK: 2.000.044"
],
[
"9",
"08:34:13.431",
"192.168.0.30:80",
"192.168.0.20:50668",
"HTTP",
"Anwendung",
"HTTP/1.1 200 OK\nContent-type: text/plain\n\nNur Text\nzwei Zeilen"
],
[
"10",
"08:34:13.654",
"192.168.0.20:50668",
"192.168.0.30:80",
"TCP",
"Transport",
"SEQ: 2.000.044, ACK: 1.000.063"
],
[
"11",
"08:34:13.709",
"192.168.0.20:50668",
"192.168.0.30:80",
"TCP",
"Transport",
"FIN, SEQ: 2.000.044"
],
[
"12",
"08:34:13.710",
"192.168.0.30:80",
"192.168.0.20:50668",
"TCP",
"Transport",
"SEQ: 1.000.063, ACK: 2.000.045"
],
[
"13",
"08:34:13.765",
"192.168.0.30:80",
"192.168.0.20:50668",
"TCP",
"Transport",
"FIN, SEQ: 1.000.063"
],
[
"14",
"08:34:13.989",
"192.168.0.20:50668",
"192.168.0.30:80",
"TCP",
"Transport",
"SEQ: 2.000.045, ACK: 1.000.064"
]
],
"layerRows": [
[
"1",
"08:34:12.410",
"02:00:00:00:02:11",
"FF:FF:FF:FF:FF:FF",
"",
"Netzzugang",
"0x806"
],
[
"1",
"08:34:12.410",
"192.168.0.20",
"192.168.0.10",
"ARP",
"Vermittlung",
"Suche nach MAC für 192.168.0.10 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.10]"
],
[
"2",
"08:34:12.872",
"02:00:00:00:02:11",
"FF:FF:FF:FF:FF:FF",
"",
"Netzzugang",
"0x806"
],
[
"2",
"08:34:12.872",
"192.168.0.20",
"192.168.0.30",
"ARP",
"Vermittlung",
"Suche nach MAC für 192.168.0.30 [op=REQUEST, sender=02:00:00:00:02:11|192.168.0.20, target=FF:FF:FF:FF:FF:FF|192.168.0.30]"
],
[
"3",
"08:34:12.872",
"02:00:00:00:02:13",
"02:00:00:00:02:11",
"",
"Netzzugang",
"0x806"
],
[
"3",
"08:34:12.872",
"192.168.0.30",
"192.168.0.20",
"ARP",
"Vermittlung",
"MAC ist 02:00:00:00:02:13 [op=REPLY, sender=02:00:00:00:02:13|192.168.0.30, target=02:00:00:00:02:11|192.168.0.20]"
],
[
"4",
"08:34:13.095",
"02:00:00:00:02:11",
"02:00:00:00:02:13",
"",
"Netzzugang",
"0x800"
],
[
"4",
"08:34:13.095",
"192.168.0.20",
"192.168.0.30",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"4",
"08:34:13.095",
"192.168.0.20:50668",
"192.168.0.30:80",
"TCP",
"Transport",
"SYN, SEQ: 2.000.000"
],
[
"5",
"08:34:13.096",
"02:00:00:00:02:13",
"02:00:00:00:02:11",
"",
"Netzzugang",
"0x800"
],
[
"5",
"08:34:13.096",
"192.168.0.30",
"192.168.0.20",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"5",
"08:34:13.096",
"192.168.0.30:80",
"192.168.0.20:50668",
"TCP",
"Transport",
"SYN, SEQ: 1.000.000, ACK: 2.000.001"
],
[
"6",
"08:34:13.319",
"02:00:00:00:02:11",
"02:00:00:00:02:13",
"",
"Netzzugang",
"0x800"
],
[
"6",
"08:34:13.319",
"192.168.0.20",
"192.168.0.30",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"6",
"08:34:13.319",
"192.168.0.20:50668",
"192.168.0.30:80",
"TCP",
"Transport",
"SEQ: 2.000.001, ACK: 1.000.001"
],
[
"7",
"08:34:13.375",
"02:00:00:00:02:11",
"02:00:00:00:02:13",
"",
"Netzzugang",
"0x800"
],
[
"7",
"08:34:13.375",
"192.168.0.20",
"192.168.0.30",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"7",
"08:34:13.375",
"192.168.0.20:50668",
"192.168.0.30:80",
"TCP",
"Transport",
"SEQ: 2.000.001"
],
[
"7",
"08:34:13.375",
"192.168.0.20:50668",
"192.168.0.30:80",
"HTTP",
"Anwendung",
"GET /text.txt HTTP/1.1\nHost: www.filius.de\n"
],
[
"8",
"08:34:13.375",
"02:00:00:00:02:13",
"02:00:00:00:02:11",
"",
"Netzzugang",
"0x800"
],
[
"8",
"08:34:13.375",
"192.168.0.30",
"192.168.0.20",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"8",
"08:34:13.375",
"192.168.0.30:80",
"192.168.0.20:50668",
"TCP",
"Transport",
"SEQ: 1.000.001, ACK: 2.000.044"
],
[
"9",
"08:34:13.431",
"02:00:00:00:02:13",
"02:00:00:00:02:11",
"",
"Netzzugang",
"0x800"
],
[
"9",
"08:34:13.431",
"192.168.0.30",
"192.168.0.20",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"9",
"08:34:13.431",
"192.168.0.30:80",
"192.168.0.20:50668",
"TCP",
"Transport",
"SEQ: 1.000.001"
],
[
"9",
"08:34:13.431",
"192.168.0.30:80",
"192.168.0.20:50668",
"HTTP",
"Anwendung",
"HTTP/1.1 200 OK\nContent-type: text/plain\n\nNur Text\nzwei Zeilen"
],
[
"10",
"08:34:13.654",
"02:00:00:00:02:11",
"02:00:00:00:02:13",
"",
"Netzzugang",
"0x800"
],
[
"10",
"08:34:13.654",
"192.168.0.20",
"192.168.0.30",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"10",
"08:34:13.654",
"192.168.0.20:50668",
"192.168.0.30:80",
"TCP",
"Transport",
"SEQ: 2.000.044, ACK: 1.000.063"
],
[
"11",
"08:34:13.709",
"02:00:00:00:02:11",
"02:00:00:00:02:13",
"",
"Netzzugang",
"0x800"
],
[
"11",
"08:34:13.709",
"192.168.0.20",
"192.168.0.30",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"11",
"08:34:13.709",
"192.168.0.20:50668",
"192.168.0.30:80",
"TCP",
"Transport",
"FIN, SEQ: 2.000.044"
],
[
"12",
"08:34:13.710",
"02:00:00:00:02:13",
"02:00:00:00:02:11",
"",
"Netzzugang",
"0x800"
],
[
"12",
"08:34:13.710",
"192.168.0.30",
"192.168.0.20",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"12",
"08:34:13.710",
"192.168.0.30:80",
"192.168.0.20:50668",
"TCP",
"Transport",
"SEQ: 1.000.063, ACK: 2.000.045"
],
[
"13",
"08:34:13.765",
"02:00:00:00:02:13",
"02:00:00:00:02:11",
"",
"Netzzugang",
"0x800"
],
[
"13",
"08:34:13.765",
"192.168.0.30",
"192.168.0.20",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"13",
"08:34:13.765",
"192.168.0.30:80",
"192.168.0.20:50668",
"TCP",
"Transport",
"FIN, SEQ: 1.000.063"
],
[
"14",
"08:34:13.989",
"02:00:00:00:02:11",
"02:00:00:00:02:13",
"",
"Netzzugang",
"0x800"
],
[
"14",
"08:34:13.989",
"192.168.0.20",
"192.168.0.30",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"14",
"08:34:13.989",
"192.168.0.20:50668",
"192.168.0.30:80",
"TCP",
"Transport",
"SEQ: 2.000.045, ACK: 1.000.064"
]
]
}
}
},
{
"step": "cleared",
"at": 16192,
"titles": [
"Anna - 192.168.0.20",
"192.168.0.30"
],
"selected": 0,
"visible": true,
"tables": {
"00000000-0000-0000-0000-000000000201": {
"rows": [],
"layerRows": []
},
"00000000-0000-0000-0000-000000000203": {
"rows": [],
"layerRows": []
}
},
"menu": [
"Tabellen löschen",
"Als Textdatei exportieren",
"Automatisches Scrollen"
]
},
{
"step": "fetched again",
"at": 25192,
"titles": [
"Anna - 192.168.0.20",
"192.168.0.30"
],
"selected": 0,
"visible": true,
"tables": {
"00000000-0000-0000-0000-000000000201": {
"rows": [
[
"1",
"08:34:27.391",
"192.168.0.20:49509",
"192.168.0.10:53",
"DNS",
"Anwendung",
"ID=10916 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n"
],
[
"2",
"08:34:27.615",
"192.168.0.10:53",
"192.168.0.20:49509",
"DNS",
"Anwendung",
"ID=10916 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n"
],
[
"3",
"08:34:27.616",
"192.168.0.20:60031",
"192.168.0.30:80",
"TCP",
"Transport",
"SYN, SEQ: 4.000.000"
],
[
"4",
"08:34:27.838",
"192.168.0.30:80",
"192.168.0.20:60031",
"TCP",
"Transport",
"SYN, SEQ: 3.000.000, ACK: 4.000.001"
],
[
"5",
"08:34:27.839",
"192.168.0.20:60031",
"192.168.0.30:80",
"TCP",
"Transport",
"SEQ: 4.000.001, ACK: 3.000.001"
],
[
"6",
"08:34:27.916",
"192.168.0.20:60031",
"192.168.0.30:80",
"HTTP",
"Anwendung",
"GET /text.txt HTTP/1.1\nHost: www.filius.de\n"
],
[
"7",
"08:34:28.139",
"192.168.0.30:80",
"192.168.0.20:60031",
"TCP",
"Transport",
"SEQ: 3.000.001, ACK: 4.000.044"
],
[
"8",
"08:34:28.194",
"192.168.0.30:80",
"192.168.0.20:60031",
"HTTP",
"Anwendung",
"HTTP/1.1 200 OK\nContent-type: text/plain\n\nNur Text\nzwei Zeilen"
],
[
"9",
"08:34:28.195",
"192.168.0.20:60031",
"192.168.0.30:80",
"TCP",
"Transport",
"SEQ: 4.000.044, ACK: 3.000.063"
],
[
"10",
"08:34:28.250",
"192.168.0.20:60031",
"192.168.0.30:80",
"TCP",
"Transport",
"FIN, SEQ: 4.000.044"
],
[
"11",
"08:34:28.473",
"192.168.0.30:80",
"192.168.0.20:60031",
"TCP",
"Transport",
"SEQ: 3.000.063, ACK: 4.000.045"
],
[
"12",
"08:34:28.528",
"192.168.0.30:80",
"192.168.0.20:60031",
"TCP",
"Transport",
"FIN, SEQ: 3.000.063"
],
[
"13",
"08:34:28.529",
"192.168.0.20:60031",
"192.168.0.30:80",
"TCP",
"Transport",
"SEQ: 4.000.045, ACK: 3.000.064"
]
],
"layerRows": [
[
"1",
"08:34:27.391",
"02:00:00:00:02:11",
"02:00:00:00:02:12",
"",
"Netzzugang",
"0x800"
],
[
"1",
"08:34:27.391",
"192.168.0.20",
"192.168.0.10",
"IP",
"Vermittlung",
"Protokoll: 17, TTL: 64"
],
[
"1",
"08:34:27.391",
"192.168.0.20:49509",
"192.168.0.10:53",
"UDP",
"Transport",
""
],
[
"1",
"08:34:27.391",
"192.168.0.20:49509",
"192.168.0.10:53",
"DNS",
"Anwendung",
"ID=10916 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n"
],
[
"2",
"08:34:27.615",
"02:00:00:00:02:12",
"02:00:00:00:02:11",
"",
"Netzzugang",
"0x800"
],
[
"2",
"08:34:27.615",
"192.168.0.10",
"192.168.0.20",
"IP",
"Vermittlung",
"Protokoll: 17, TTL: 64"
],
[
"2",
"08:34:27.615",
"192.168.0.10:53",
"192.168.0.20:49509",
"UDP",
"Transport",
""
],
[
"2",
"08:34:27.615",
"192.168.0.10:53",
"192.168.0.20:49509",
"DNS",
"Anwendung",
"ID=10916 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n"
],
[
"3",
"08:34:27.616",
"02:00:00:00:02:11",
"02:00:00:00:02:13",
"",
"Netzzugang",
"0x800"
],
[
"3",
"08:34:27.616",
"192.168.0.20",
"192.168.0.30",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"3",
"08:34:27.616",
"192.168.0.20:60031",
"192.168.0.30:80",
"TCP",
"Transport",
"SYN, SEQ: 4.000.000"
],
[
"4",
"08:34:27.838",
"02:00:00:00:02:13",
"02:00:00:00:02:11",
"",
"Netzzugang",
"0x800"
],
[
"4",
"08:34:27.838",
"192.168.0.30",
"192.168.0.20",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"4",
"08:34:27.838",
"192.168.0.30:80",
"192.168.0.20:60031",
"TCP",
"Transport",
"SYN, SEQ: 3.000.000, ACK: 4.000.001"
],
[
"5",
"08:34:27.839",
"02:00:00:00:02:11",
"02:00:00:00:02:13",
"",
"Netzzugang",
"0x800"
],
[
"5",
"08:34:27.839",
"192.168.0.20",
"192.168.0.30",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"5",
"08:34:27.839",
"192.168.0.20:60031",
"192.168.0.30:80",
"TCP",
"Transport",
"SEQ: 4.000.001, ACK: 3.000.001"
],
[
"6",
"08:34:27.916",
"02:00:00:00:02:11",
"02:00:00:00:02:13",
"",
"Netzzugang",
"0x800"
],
[
"6",
"08:34:27.916",
"192.168.0.20",
"192.168.0.30",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"6",
"08:34:27.916",
"192.168.0.20:60031",
"192.168.0.30:80",
"TCP",
"Transport",
"SEQ: 4.000.001"
],
[
"6",
"08:34:27.916",
"192.168.0.20:60031",
"192.168.0.30:80",
"HTTP",
"Anwendung",
"GET /text.txt HTTP/1.1\nHost: www.filius.de\n"
],
[
"7",
"08:34:28.139",
"02:00:00:00:02:13",
"02:00:00:00:02:11",
"",
"Netzzugang",
"0x800"
],
[
"7",
"08:34:28.139",
"192.168.0.30",
"192.168.0.20",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"7",
"08:34:28.139",
"192.168.0.30:80",
"192.168.0.20:60031",
"TCP",
"Transport",
"SEQ: 3.000.001, ACK: 4.000.044"
],
[
"8",
"08:34:28.194",
"02:00:00:00:02:13",
"02:00:00:00:02:11",
"",
"Netzzugang",
"0x800"
],
[
"8",
"08:34:28.194",
"192.168.0.30",
"192.168.0.20",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"8",
"08:34:28.194",
"192.168.0.30:80",
"192.168.0.20:60031",
"TCP",
"Transport",
"SEQ: 3.000.001"
],
[
"8",
"08:34:28.194",
"192.168.0.30:80",
"192.168.0.20:60031",
"HTTP",
"Anwendung",
"HTTP/1.1 200 OK\nContent-type: text/plain\n\nNur Text\nzwei Zeilen"
],
[
"9",
"08:34:28.195",
"02:00:00:00:02:11",
"02:00:00:00:02:13",
"",
"Netzzugang",
"0x800"
],
[
"9",
"08:34:28.195",
"192.168.0.20",
"192.168.0.30",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"9",
"08:34:28.195",
"192.168.0.20:60031",
"192.168.0.30:80",
"TCP",
"Transport",
"SEQ: 4.000.044, ACK: 3.000.063"
],
[
"10",
"08:34:28.250",
"02:00:00:00:02:11",
"02:00:00:00:02:13",
"",
"Netzzugang",
"0x800"
],
[
"10",
"08:34:28.250",
"192.168.0.20",
"192.168.0.30",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"10",
"08:34:28.250",
"192.168.0.20:60031",
"192.168.0.30:80",
"TCP",
"Transport",
"FIN, SEQ: 4.000.044"
],
[
"11",
"08:34:28.473",
"02:00:00:00:02:13",
"02:00:00:00:02:11",
"",
"Netzzugang",
"0x800"
],
[
"11",
"08:34:28.473",
"192.168.0.30",
"192.168.0.20",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"11",
"08:34:28.473",
"192.168.0.30:80",
"192.168.0.20:60031",
"TCP",
"Transport",
"SEQ: 3.000.063, ACK: 4.000.045"
],
[
"12",
"08:34:28.528",
"02:00:00:00:02:13",
"02:00:00:00:02:11",
"",
"Netzzugang",
"0x800"
],
[
"12",
"08:34:28.528",
"192.168.0.30",
"192.168.0.20",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"12",
"08:34:28.528",
"192.168.0.30:80",
"192.168.0.20:60031",
"TCP",
"Transport",
"FIN, SEQ: 3.000.063"
],
[
"13",
"08:34:28.529",
"02:00:00:00:02:11",
"02:00:00:00:02:13",
"",
"Netzzugang",
"0x800"
],
[
"13",
"08:34:28.529",
"192.168.0.20",
"192.168.0.30",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"13",
"08:34:28.529",
"192.168.0.20:60031",
"192.168.0.30:80",
"TCP",
"Transport",
"SEQ: 4.000.045, ACK: 3.000.064"
]
]
},
"00000000-0000-0000-0000-000000000203": {
"rows": [
[
"1",
"08:34:27.726",
"192.168.0.20:60031",
"192.168.0.30:80",
"TCP",
"Transport",
"SYN, SEQ: 4.000.000"
],
[
"2",
"08:34:27.727",
"192.168.0.30:80",
"192.168.0.20:60031",
"TCP",
"Transport",
"SYN, SEQ: 3.000.000, ACK: 4.000.001"
],
[
"3",
"08:34:27.950",
"192.168.0.20:60031",
"192.168.0.30:80",
"TCP",
"Transport",
"SEQ: 4.000.001, ACK: 3.000.001"
],
[
"4",
"08:34:28.027",
"192.168.0.20:60031",
"192.168.0.30:80",
"HTTP",
"Anwendung",
"GET /text.txt HTTP/1.1\nHost: www.filius.de\n"
],
[
"5",
"08:34:28.028",
"192.168.0.30:80",
"192.168.0.20:60031",
"TCP",
"Transport",
"SEQ: 3.000.001, ACK: 4.000.044"
],
[
"6",
"08:34:28.083",
"192.168.0.30:80",
"192.168.0.20:60031",
"HTTP",
"Anwendung",
"HTTP/1.1 200 OK\nContent-type: text/plain\n\nNur Text\nzwei Zeilen"
],
[
"7",
"08:34:28.306",
"192.168.0.20:60031",
"192.168.0.30:80",
"TCP",
"Transport",
"SEQ: 4.000.044, ACK: 3.000.063"
],
[
"8",
"08:34:28.362",
"192.168.0.20:60031",
"192.168.0.30:80",
"TCP",
"Transport",
"FIN, SEQ: 4.000.044"
],
[
"9",
"08:34:28.362",
"192.168.0.30:80",
"192.168.0.20:60031",
"TCP",
"Transport",
"SEQ: 3.000.063, ACK: 4.000.045"
],
[
"10",
"08:34:28.418",
"192.168.0.30:80",
"192.168.0.20:60031",
"TCP",
"Transport",
"FIN, SEQ: 3.000.063"
],
[
"11",
"08:34:28.640",
"192.168.0.20:60031",
"192.168.0.30:80",
"TCP",
"Transport",
"SEQ: 4.000.045, ACK: 3.000.064"
]
],
"layerRows": [
[
"1",
"08:34:27.726",
"02:00:00:00:02:11",
"02:00:00:00:02:13",
"",
"Netzzugang",
"0x800"
],
[
"1",
"08:34:27.726",
"192.168.0.20",
"192.168.0.30",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"1",
"08:34:27.726",
"192.168.0.20:60031",
"192.168.0.30:80",
"TCP",
"Transport",
"SYN, SEQ: 4.000.000"
],
[
"2",
"08:34:27.727",
"02:00:00:00:02:13",
"02:00:00:00:02:11",
"",
"Netzzugang",
"0x800"
],
[
"2",
"08:34:27.727",
"192.168.0.30",
"192.168.0.20",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"2",
"08:34:27.727",
"192.168.0.30:80",
"192.168.0.20:60031",
"TCP",
"Transport",
"SYN, SEQ: 3.000.000, ACK: 4.000.001"
],
[
"3",
"08:34:27.950",
"02:00:00:00:02:11",
"02:00:00:00:02:13",
"",
"Netzzugang",
"0x800"
],
[
"3",
"08:34:27.950",
"192.168.0.20",
"192.168.0.30",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"3",
"08:34:27.950",
"192.168.0.20:60031",
"192.168.0.30:80",
"TCP",
"Transport",
"SEQ: 4.000.001, ACK: 3.000.001"
],
[
"4",
"08:34:28.027",
"02:00:00:00:02:11",
"02:00:00:00:02:13",
"",
"Netzzugang",
"0x800"
],
[
"4",
"08:34:28.027",
"192.168.0.20",
"192.168.0.30",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"4",
"08:34:28.027",
"192.168.0.20:60031",
"192.168.0.30:80",
"TCP",
"Transport",
"SEQ: 4.000.001"
],
[
"4",
"08:34:28.027",
"192.168.0.20:60031",
"192.168.0.30:80",
"HTTP",
"Anwendung",
"GET /text.txt HTTP/1.1\nHost: www.filius.de\n"
],
[
"5",
"08:34:28.028",
"02:00:00:00:02:13",
"02:00:00:00:02:11",
"",
"Netzzugang",
"0x800"
],
[
"5",
"08:34:28.028",
"192.168.0.30",
"192.168.0.20",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"5",
"08:34:28.028",
"192.168.0.30:80",
"192.168.0.20:60031",
"TCP",
"Transport",
"SEQ: 3.000.001, ACK: 4.000.044"
],
[
"6",
"08:34:28.083",
"02:00:00:00:02:13",
"02:00:00:00:02:11",
"",
"Netzzugang",
"0x800"
],
[
"6",
"08:34:28.083",
"192.168.0.30",
"192.168.0.20",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"6",
"08:34:28.083",
"192.168.0.30:80",
"192.168.0.20:60031",
"TCP",
"Transport",
"SEQ: 3.000.001"
],
[
"6",
"08:34:28.083",
"192.168.0.30:80",
"192.168.0.20:60031",
"HTTP",
"Anwendung",
"HTTP/1.1 200 OK\nContent-type: text/plain\n\nNur Text\nzwei Zeilen"
],
[
"7",
"08:34:28.306",
"02:00:00:00:02:11",
"02:00:00:00:02:13",
"",
"Netzzugang",
"0x800"
],
[
"7",
"08:34:28.306",
"192.168.0.20",
"192.168.0.30",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"7",
"08:34:28.306",
"192.168.0.20:60031",
"192.168.0.30:80",
"TCP",
"Transport",
"SEQ: 4.000.044, ACK: 3.000.063"
],
[
"8",
"08:34:28.362",
"02:00:00:00:02:11",
"02:00:00:00:02:13",
"",
"Netzzugang",
"0x800"
],
[
"8",
"08:34:28.362",
"192.168.0.20",
"192.168.0.30",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"8",
"08:34:28.362",
"192.168.0.20:60031",
"192.168.0.30:80",
"TCP",
"Transport",
"FIN, SEQ: 4.000.044"
],
[
"9",
"08:34:28.362",
"02:00:00:00:02:13",
"02:00:00:00:02:11",
"",
"Netzzugang",
"0x800"
],
[
"9",
"08:34:28.362",
"192.168.0.30",
"192.168.0.20",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"9",
"08:34:28.362",
"192.168.0.30:80",
"192.168.0.20:60031",
"TCP",
"Transport",
"SEQ: 3.000.063, ACK: 4.000.045"
],
[
"10",
"08:34:28.418",
"02:00:00:00:02:13",
"02:00:00:00:02:11",
"",
"Netzzugang",
"0x800"
],
[
"10",
"08:34:28.418",
"192.168.0.30",
"192.168.0.20",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"10",
"08:34:28.418",
"192.168.0.30:80",
"192.168.0.20:60031",
"TCP",
"Transport",
"FIN, SEQ: 3.000.063"
],
[
"11",
"08:34:28.640",
"02:00:00:00:02:11",
"02:00:00:00:02:13",
"",
"Netzzugang",
"0x800"
],
[
"11",
"08:34:28.640",
"192.168.0.20",
"192.168.0.30",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"11",
"08:34:28.640",
"192.168.0.20:60031",
"192.168.0.30:80",
"TCP",
"Transport",
"SEQ: 4.000.045, ACK: 3.000.064"
]
]
}
}
},
{
"step": "started again without the server",
"at": 26499,
"titles": [
"Anna - 192.168.0.20"
],
"selected": 0,
"visible": true,
"tables": {
"00000000-0000-0000-0000-000000000201": {
"rows": [
[
"1",
"08:34:27.391",
"192.168.0.20:49509",
"192.168.0.10:53",
"DNS",
"Anwendung",
"ID=10916 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n"
],
[
"2",
"08:34:27.615",
"192.168.0.10:53",
"192.168.0.20:49509",
"DNS",
"Anwendung",
"ID=10916 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n"
],
[
"3",
"08:34:27.616",
"192.168.0.20:60031",
"192.168.0.30:80",
"TCP",
"Transport",
"SYN, SEQ: 4.000.000"
],
[
"4",
"08:34:27.838",
"192.168.0.30:80",
"192.168.0.20:60031",
"TCP",
"Transport",
"SYN, SEQ: 3.000.000, ACK: 4.000.001"
],
[
"5",
"08:34:27.839",
"192.168.0.20:60031",
"192.168.0.30:80",
"TCP",
"Transport",
"SEQ: 4.000.001, ACK: 3.000.001"
],
[
"6",
"08:34:27.916",
"192.168.0.20:60031",
"192.168.0.30:80",
"HTTP",
"Anwendung",
"GET /text.txt HTTP/1.1\nHost: www.filius.de\n"
],
[
"7",
"08:34:28.139",
"192.168.0.30:80",
"192.168.0.20:60031",
"TCP",
"Transport",
"SEQ: 3.000.001, ACK: 4.000.044"
],
[
"8",
"08:34:28.194",
"192.168.0.30:80",
"192.168.0.20:60031",
"HTTP",
"Anwendung",
"HTTP/1.1 200 OK\nContent-type: text/plain\n\nNur Text\nzwei Zeilen"
],
[
"9",
"08:34:28.195",
"192.168.0.20:60031",
"192.168.0.30:80",
"TCP",
"Transport",
"SEQ: 4.000.044, ACK: 3.000.063"
],
[
"10",
"08:34:28.250",
"192.168.0.20:60031",
"192.168.0.30:80",
"TCP",
"Transport",
"FIN, SEQ: 4.000.044"
],
[
"11",
"08:34:28.473",
"192.168.0.30:80",
"192.168.0.20:60031",
"TCP",
"Transport",
"SEQ: 3.000.063, ACK: 4.000.045"
],
[
"12",
"08:34:28.528",
"192.168.0.30:80",
"192.168.0.20:60031",
"TCP",
"Transport",
"FIN, SEQ: 3.000.063"
],
[
"13",
"08:34:28.529",
"192.168.0.20:60031",
"192.168.0.30:80",
"TCP",
"Transport",
"SEQ: 4.000.045, ACK: 3.000.064"
]
],
"layerRows": [
[
"1",
"08:34:27.391",
"02:00:00:00:02:11",
"02:00:00:00:02:12",
"",
"Netzzugang",
"0x800"
],
[
"1",
"08:34:27.391",
"192.168.0.20",
"192.168.0.10",
"IP",
"Vermittlung",
"Protokoll: 17, TTL: 64"
],
[
"1",
"08:34:27.391",
"192.168.0.20:49509",
"192.168.0.10:53",
"UDP",
"Transport",
""
],
[
"1",
"08:34:27.391",
"192.168.0.20:49509",
"192.168.0.10:53",
"DNS",
"Anwendung",
"ID=10916 QR=0 RCODE=0 QDCOUNT=1 ANCOUNT=0 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A IN\n"
],
[
"2",
"08:34:27.615",
"02:00:00:00:02:12",
"02:00:00:00:02:11",
"",
"Netzzugang",
"0x800"
],
[
"2",
"08:34:27.615",
"192.168.0.10",
"192.168.0.20",
"IP",
"Vermittlung",
"Protokoll: 17, TTL: 64"
],
[
"2",
"08:34:27.615",
"192.168.0.10:53",
"192.168.0.20:49509",
"UDP",
"Transport",
""
],
[
"2",
"08:34:27.615",
"192.168.0.10:53",
"192.168.0.20:49509",
"DNS",
"Anwendung",
"ID=10916 QR=1 RCODE=0 QDCOUNT=0 ANCOUNT=1 NSCOUNT=0 ARCOUNT=0 \nwww.filius.de. A 3600 192.168.0.30\n"
],
[
"3",
"08:34:27.616",
"02:00:00:00:02:11",
"02:00:00:00:02:13",
"",
"Netzzugang",
"0x800"
],
[
"3",
"08:34:27.616",
"192.168.0.20",
"192.168.0.30",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"3",
"08:34:27.616",
"192.168.0.20:60031",
"192.168.0.30:80",
"TCP",
"Transport",
"SYN, SEQ: 4.000.000"
],
[
"4",
"08:34:27.838",
"02:00:00:00:02:13",
"02:00:00:00:02:11",
"",
"Netzzugang",
"0x800"
],
[
"4",
"08:34:27.838",
"192.168.0.30",
"192.168.0.20",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"4",
"08:34:27.838",
"192.168.0.30:80",
"192.168.0.20:60031",
"TCP",
"Transport",
"SYN, SEQ: 3.000.000, ACK: 4.000.001"
],
[
"5",
"08:34:27.839",
"02:00:00:00:02:11",
"02:00:00:00:02:13",
"",
"Netzzugang",
"0x800"
],
[
"5",
"08:34:27.839",
"192.168.0.20",
"192.168.0.30",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"5",
"08:34:27.839",
"192.168.0.20:60031",
"192.168.0.30:80",
"TCP",
"Transport",
"SEQ: 4.000.001, ACK: 3.000.001"
],
[
"6",
"08:34:27.916",
"02:00:00:00:02:11",
"02:00:00:00:02:13",
"",
"Netzzugang",
"0x800"
],
[
"6",
"08:34:27.916",
"192.168.0.20",
"192.168.0.30",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"6",
"08:34:27.916",
"192.168.0.20:60031",
"192.168.0.30:80",
"TCP",
"Transport",
"SEQ: 4.000.001"
],
[
"6",
"08:34:27.916",
"192.168.0.20:60031",
"192.168.0.30:80",
"HTTP",
"Anwendung",
"GET /text.txt HTTP/1.1\nHost: www.filius.de\n"
],
[
"7",
"08:34:28.139",
"02:00:00:00:02:13",
"02:00:00:00:02:11",
"",
"Netzzugang",
"0x800"
],
[
"7",
"08:34:28.139",
"192.168.0.30",
"192.168.0.20",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"7",
"08:34:28.139",
"192.168.0.30:80",
"192.168.0.20:60031",
"TCP",
"Transport",
"SEQ: 3.000.001, ACK: 4.000.044"
],
[
"8",
"08:34:28.194",
"02:00:00:00:02:13",
"02:00:00:00:02:11",
"",
"Netzzugang",
"0x800"
],
[
"8",
"08:34:28.194",
"192.168.0.30",
"192.168.0.20",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"8",
"08:34:28.194",
"192.168.0.30:80",
"192.168.0.20:60031",
"TCP",
"Transport",
"SEQ: 3.000.001"
],
[
"8",
"08:34:28.194",
"192.168.0.30:80",
"192.168.0.20:60031",
"HTTP",
"Anwendung",
"HTTP/1.1 200 OK\nContent-type: text/plain\n\nNur Text\nzwei Zeilen"
],
[
"9",
"08:34:28.195",
"02:00:00:00:02:11",
"02:00:00:00:02:13",
"",
"Netzzugang",
"0x800"
],
[
"9",
"08:34:28.195",
"192.168.0.20",
"192.168.0.30",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"9",
"08:34:28.195",
"192.168.0.20:60031",
"192.168.0.30:80",
"TCP",
"Transport",
"SEQ: 4.000.044, ACK: 3.000.063"
],
[
"10",
"08:34:28.250",
"02:00:00:00:02:11",
"02:00:00:00:02:13",
"",
"Netzzugang",
"0x800"
],
[
"10",
"08:34:28.250",
"192.168.0.20",
"192.168.0.30",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"10",
"08:34:28.250",
"192.168.0.20:60031",
"192.168.0.30:80",
"TCP",
"Transport",
"FIN, SEQ: 4.000.044"
],
[
"11",
"08:34:28.473",
"02:00:00:00:02:13",
"02:00:00:00:02:11",
"",
"Netzzugang",
"0x800"
],
[
"11",
"08:34:28.473",
"192.168.0.30",
"192.168.0.20",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"11",
"08:34:28.473",
"192.168.0.30:80",
"192.168.0.20:60031",
"TCP",
"Transport",
"SEQ: 3.000.063, ACK: 4.000.045"
],
[
"12",
"08:34:28.528",
"02:00:00:00:02:13",
"02:00:00:00:02:11",
"",
"Netzzugang",
"0x800"
],
[
"12",
"08:34:28.528",
"192.168.0.30",
"192.168.0.20",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"12",
"08:34:28.528",
"192.168.0.30:80",
"192.168.0.20:60031",
"TCP",
"Transport",
"FIN, SEQ: 3.000.063"
],
[
"13",
"08:34:28.529",
"02:00:00:00:02:11",
"02:00:00:00:02:13",
"",
"Netzzugang",
"0x800"
],
[
"13",
"08:34:28.529",
"192.168.0.20",
"192.168.0.30",
"IP",
"Vermittlung",
"Protokoll: 6, TTL: 64"
],
[
"13",
"08:34:28.529",
"192.168.0.20:60031",
"192.168.0.30:80",
"TCP",
"Transport",
"SEQ: 4.000.045, ACK: 3.000.064"
]
]
}
}
}
]
}