09:37:40.219623 IP 10.250.22.4.9955 > 10.240.22.10.445: S 193995217:193995217(0) win 8192 <mss 1380,nop,wscale 8,nop,nop,sackOK>
09:37:40.219729 IP 10.240.22.10.445 > 10.250.22.4.9955: S 2294396144:2294396144(0) ack 193995218 win 8192 <mss 1460,nop,wscale 8,nop,nop,sackOK>
09:37:43.230120 IP 10.250.22.4.9955 > 10.240.22.10.445: S 193995217:193995217(0) win 8192 <mss 1380,nop,wscale 8,nop,nop,sackOK>
09:37:43.235868 IP 10.240.22.10.445 > 10.250.22.4.9955: S 2294396144:2294396144(0) ack 193995218 win 8192 <mss 1460,nop,wscale 8,nop,nop,sackOK>
09:37:44.998705 arp who-has 10.240.22.254 (00:1a:8c:17:e5:d0) tell 10.240.22.10
09:37:44.998711 arp reply 10.240.22.254 is-at 00:1a:8c:17:e5:d0
09:37:49.236259 IP 10.250.22.4.9955 > 10.240.22.10.445: S 193995217:193995217(0) win 8192 <mss 1380,nop,nop,sackOK>
09:37:49.241908 IP 10.240.22.10.445 > 10.250.22.4.9955: S 2294396144:2294396144(0) ack 193995218 win 65535 <mss 1460,nop,nop,sackOK>
09:38:01.253941 IP 10.240.22.10.445 > 10.250.22.4.9955: R 2294396145:2294396145(0) win 0
09:38:02.365751 arp who-has 10.240.22.10 tell 10.240.22.254
09:38:02.365833 arp reply 10.240.22.10 is-at 90:b1:1c:10:60:e6






00:1a:8c:17:e5:d0 ist Mac-Adresse des Default-Gateway LAN-UTM

90:b1:1c:10:60:e6 ist die Mac-Adresse des Servers 10.240.22.10