Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-03 18:55:36.740 00:05:09.521 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-03 18:55:36.740 00:05:09.384 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-03 18:59:43.752 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35959 1 80 1 2025-10-03 18:59:43.752 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58023 1 109 1 2025-10-03 18:59:43.743 00:00:00.000 UDP 28.104.0.1:35959 -> 198.28.0.2:53 1 64 1 2025-10-03 18:55:36.791 00:05:09.324 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-03 18:59:43.743 00:00:00.000 UDP 28.104.0.1:58023 -> 198.28.0.2:53 1 64 1 2025-10-03 18:59:46.250 00:01:00.000 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 142 1 2025-10-03 18:56:46.118 00:04:00.132 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-03 19:00:50.422 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45403 1 80 1 2025-10-03 19:00:50.423 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41764 1 109 1 2025-10-03 19:00:50.412 00:00:00.000 UDP 28.104.0.1:45403 -> 198.28.0.2:53 1 64 1 2025-10-03 19:00:50.413 00:00:00.000 UDP 28.104.0.1:41764 -> 198.28.0.2:53 1 64 1 2025-10-03 18:57:36.751 00:05:09.500 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-03 19:01:50.711 00:00:00.000 UDP 28.104.0.1:49798 -> 198.28.0.2:53 1 64 1 2025-10-03 19:01:50.710 00:00:00.000 UDP 28.104.0.1:58085 -> 198.28.0.2:53 1 64 1 2025-10-03 19:01:50.720 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58085 1 80 1 2025-10-03 19:01:50.721 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49798 1 109 1 2025-10-03 19:02:18.432 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-03 19:02:51.084 00:00:00.000 UDP 28.104.0.1:40276 -> 198.28.0.2:53 1 64 1 2025-10-03 19:02:51.084 00:00:00.000 UDP 28.104.0.1:37234 -> 198.28.0.2:53 1 64 1 2025-10-03 19:02:51.094 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40276 1 80 1 2025-10-03 19:02:51.094 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37234 1 109 1 2025-10-03 19:03:51.402 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41157 1 109 1 2025-10-03 19:03:51.401 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50773 1 80 1 2025-10-03 19:03:51.391 00:00:00.000 UDP 28.104.0.1:50773 -> 198.28.0.2:53 1 64 1 2025-10-03 19:03:51.391 00:00:00.000 UDP 28.104.0.1:41157 -> 198.28.0.2:53 1 64 1 2025-10-03 18:59:42.756 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2832 1 2025-10-03 19:04:51.706 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37862 1 80 1 2025-10-03 19:04:51.704 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42861 1 109 1 2025-10-03 19:04:51.693 00:00:00.000 UDP 28.104.0.1:42861 -> 198.28.0.2:53 1 64 1 2025-10-03 19:04:51.693 00:00:00.000 UDP 28.104.0.1:37862 -> 198.28.0.2:53 1 64 1 2025-10-03 19:01:36.744 00:05:09.519 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-03 19:01:36.744 00:05:09.383 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-03 19:01:46.251 00:04:00.001 TCP 28.154.0.1:179 -> 28.157.0.1:37077 5 355 1 2025-10-03 19:01:46.120 00:04:00.132 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-03 19:01:36.794 00:05:09.322 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-03 19:05:51.998 00:00:00.000 UDP 28.104.0.1:37194 -> 198.28.0.2:53 1 64 1 2025-10-03 19:05:51.998 00:00:00.000 UDP 28.104.0.1:38846 -> 198.28.0.2:53 1 64 1 2025-10-03 19:05:52.009 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37194 1 109 1 2025-10-03 19:05:52.010 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38846 1 80 1 2025-10-03 19:06:52.283 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49112 1 80 1 2025-10-03 19:06:52.282 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55835 1 109 1 2025-10-03 19:06:52.270 00:00:00.000 UDP 28.104.0.1:55835 -> 198.28.0.2:53 1 64 1 2025-10-03 19:06:52.270 00:00:00.000 UDP 28.104.0.1:49112 -> 198.28.0.2:53 1 64 1 2025-10-03 19:07:18.547 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-03 19:03:36.755 00:05:09.498 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-03 19:07:52.571 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58180 1 80 1 2025-10-03 19:07:52.571 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45447 1 109 1 2025-10-03 19:07:52.561 00:00:00.000 UDP 28.104.0.1:58180 -> 198.28.0.2:53 1 64 1 2025-10-03 19:07:52.561 00:00:00.000 UDP 28.104.0.1:45447 -> 198.28.0.2:53 1 64 1 2025-10-03 19:08:52.915 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60333 1 80 1 2025-10-03 19:08:52.915 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33543 1 109 1 2025-10-03 19:08:52.905 00:00:00.000 UDP 28.104.0.1:33543 -> 198.28.0.2:53 1 64 1 2025-10-03 19:08:52.905 00:00:00.000 UDP 28.104.0.1:60333 -> 198.28.0.2:53 1 64 1 2025-10-03 19:05:02.762 00:05:10.012 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2688 1 2025-10-03 19:09:53.203 00:00:00.000 UDP 28.104.0.1:50198 -> 198.28.0.2:53 1 64 1 2025-10-03 19:09:53.203 00:00:00.000 UDP 28.104.0.1:37089 -> 198.28.0.2:53 1 64 1 2025-10-03 19:09:53.214 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37089 1 80 1 2025-10-03 19:09:53.214 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50198 1 109 1 2025-10-03 19:06:46.252 00:04:00.000 TCP 28.154.0.1:179 -> 28.157.0.1:37077 5 355 1 2025-10-03 19:06:46.120 00:04:00.132 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-03 19:10:53.494 00:00:00.000 UDP 28.104.0.1:54176 -> 198.28.0.2:53 1 64 1 2025-10-03 19:10:53.494 00:00:00.000 UDP 28.104.0.1:50005 -> 198.28.0.2:53 1 64 1 2025-10-03 19:10:53.505 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54176 1 80 1 2025-10-03 19:10:53.505 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50005 1 109 1 2025-10-03 19:07:36.795 00:05:09.323 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-03 19:07:36.745 00:05:09.518 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-03 19:07:36.745 00:05:09.383 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-03 19:11:53.751 00:00:00.000 UDP 28.104.0.1:38031 -> 198.28.0.2:53 1 64 1 2025-10-03 19:11:53.751 00:00:00.000 UDP 28.104.0.1:36243 -> 198.28.0.2:53 1 64 1 2025-10-03 19:11:53.763 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38031 1 80 1 2025-10-03 19:11:53.763 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36243 1 109 1 2025-10-03 19:12:18.561 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-03 19:13:02.378 00:00:00.000 UDP 28.104.0.1:51117 -> 198.28.0.2:53 1 64 1 2025-10-03 19:13:02.378 00:00:00.000 UDP 28.104.0.1:51116 -> 198.28.0.2:53 1 64 1 2025-10-03 19:13:02.389 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51117 1 109 1 2025-10-03 19:13:02.389 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51116 1 80 1 2025-10-03 19:09:36.756 00:05:09.498 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-03 19:14:02.669 00:00:00.000 UDP 28.104.0.1:55975 -> 198.28.0.2:53 1 64 1 2025-10-03 19:14:02.669 00:00:00.000 UDP 28.104.0.1:37114 -> 198.28.0.2:53 1 64 1 2025-10-03 19:14:02.680 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37114 1 80 1 2025-10-03 19:14:02.680 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55975 1 109 1 2025-10-03 19:10:22.773 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2644 1 2025-10-03 19:15:02.981 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58890 1 80 1 2025-10-03 19:15:02.981 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34075 1 109 1 2025-10-03 19:15:02.972 00:00:00.000 UDP 28.104.0.1:58890 -> 198.28.0.2:53 1 64 1 2025-10-03 19:15:02.972 00:00:00.000 UDP 28.104.0.1:34075 -> 198.28.0.2:53 1 64 1 2025-10-03 19:11:46.253 00:04:00.000 TCP 28.154.0.1:179 -> 28.157.0.1:37077 5 355 1 2025-10-03 19:16:03.293 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52331 1 109 1 2025-10-03 19:16:03.293 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54709 1 80 1 2025-10-03 19:16:03.283 00:00:00.000 UDP 28.104.0.1:52331 -> 198.28.0.2:53 1 64 1 2025-10-03 19:16:03.283 00:00:00.000 UDP 28.104.0.1:54709 -> 198.28.0.2:53 1 64 1 2025-10-03 19:11:46.122 00:06:00.132 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-03 19:17:03.586 00:00:00.000 UDP 28.104.0.1:54683 -> 198.28.0.2:53 1 64 1 2025-10-03 19:17:03.586 00:00:00.000 UDP 28.104.0.1:36210 -> 198.28.0.2:53 1 64 1 2025-10-03 19:17:03.596 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54683 1 80 1 2025-10-03 19:17:03.596 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36210 1 109 1 2025-10-03 19:17:18.875 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-03 19:13:36.797 00:05:09.323 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-03 19:13:36.748 00:05:09.518 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-03 19:13:36.748 00:05:09.383 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-03 19:18:04.498 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58024 1 80 1 2025-10-03 19:18:04.498 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56149 1 109 1 2025-10-03 19:18:04.488 00:00:00.000 UDP 28.104.0.1:56149 -> 198.28.0.2:53 1 64 1 2025-10-03 19:18:04.488 00:00:00.000 UDP 28.104.0.1:58024 -> 198.28.0.2:53 1 64 1 2025-10-03 19:19:04.794 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34944 1 109 1 2025-10-03 19:19:04.793 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56829 1 80 1 2025-10-03 19:19:04.782 00:00:00.000 UDP 28.104.0.1:34944 -> 198.28.0.2:53 1 64 1 2025-10-03 19:19:04.782 00:00:00.000 UDP 28.104.0.1:56829 -> 198.28.0.2:53 1 64 1 2025-10-03 19:15:36.758 00:05:09.497 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-03 19:15:42.782 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 3008 1 2025-10-03 19:20:05.110 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54735 1 109 1 2025-10-03 19:20:05.110 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56214 1 80 1 2025-10-03 19:20:05.099 00:00:00.000 UDP 28.104.0.1:54735 -> 198.28.0.2:53 1 64 1 2025-10-03 19:20:05.099 00:00:00.000 UDP 28.104.0.1:56214 -> 198.28.0.2:53 1 64 1 2025-10-03 19:16:46.254 00:04:00.002 TCP 28.154.0.1:179 -> 28.157.0.1:37077 5 355 1 2025-10-03 19:21:05.414 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55729 1 80 1 2025-10-03 19:21:05.414 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44810 1 109 1 2025-10-03 19:21:05.405 00:00:00.000 UDP 28.104.0.1:44810 -> 198.28.0.2:53 1 64 1 2025-10-03 19:21:05.405 00:00:00.000 UDP 28.104.0.1:55729 -> 198.28.0.2:53 1 64 1 2025-10-03 19:22:05.703 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55299 1 109 1 2025-10-03 19:22:05.703 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49014 1 80 1 2025-10-03 19:22:05.694 00:00:00.000 UDP 28.104.0.1:49014 -> 198.28.0.2:53 1 64 1 2025-10-03 19:22:05.693 00:00:00.000 UDP 28.104.0.1:55299 -> 198.28.0.2:53 1 64 1 2025-10-03 19:22:18.824 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-03 19:21:46.255 00:01:00.000 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 142 1 2025-10-03 19:18:46.122 00:04:00.133 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-03 19:23:06.221 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37532 1 109 1 2025-10-03 19:23:06.221 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33630 1 80 1 2025-10-03 19:23:06.210 00:00:00.000 UDP 28.104.0.1:33630 -> 198.28.0.2:53 1 64 1 2025-10-03 19:23:06.211 00:00:00.000 UDP 28.104.0.1:37532 -> 198.28.0.2:53 1 64 1 2025-10-03 19:19:36.798 00:05:09.321 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-03 19:19:36.748 00:05:09.517 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-03 19:19:36.748 00:05:09.381 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-03 19:24:06.514 00:00:00.000 UDP 28.104.0.1:44879 -> 198.28.0.2:53 1 64 1 2025-10-03 19:24:06.514 00:00:00.000 UDP 28.104.0.1:55818 -> 198.28.0.2:53 1 64 1 2025-10-03 19:24:06.524 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55818 1 80 1 2025-10-03 19:24:06.524 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44879 1 109 1 2025-10-03 19:25:06.829 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54852 1 109 1 2025-10-03 19:25:06.829 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55087 1 80 1 2025-10-03 19:25:06.820 00:00:00.000 UDP 28.104.0.1:55087 -> 198.28.0.2:53 1 64 1 2025-10-03 19:25:06.820 00:00:00.000 UDP 28.104.0.1:54852 -> 198.28.0.2:53 1 64 1 2025-10-03 19:21:02.787 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2652 1 2025-10-03 19:23:46.255 00:02:00.001 TCP 28.154.0.1:179 -> 28.157.0.1:37077 3 213 1 2025-10-03 19:21:36.758 00:05:09.498 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-03 19:26:07.118 00:00:00.000 UDP 28.104.0.1:53123 -> 198.28.0.2:53 1 64 1 2025-10-03 19:26:07.118 00:00:00.000 UDP 28.104.0.1:45115 -> 198.28.0.2:53 1 64 1 2025-10-03 19:26:07.129 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53123 1 80 1 2025-10-03 19:26:07.129 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45115 1 109 1 2025-10-03 19:27:07.418 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35357 1 109 1 2025-10-03 19:27:07.418 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42691 1 80 1 2025-10-03 19:27:07.409 00:00:00.000 UDP 28.104.0.1:42691 -> 198.28.0.2:53 1 64 1 2025-10-03 19:27:07.409 00:00:00.000 UDP 28.104.0.1:35357 -> 198.28.0.2:53 1 64 1 2025-10-03 19:27:18.732 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-03 19:26:46.257 00:01:00.000 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 142 1 2025-10-03 19:23:46.124 00:04:00.133 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-03 19:28:07.700 00:00:00.000 UDP 28.104.0.1:34557 -> 198.28.0.2:53 1 64 1 2025-10-03 19:28:07.700 00:00:00.000 UDP 28.104.0.1:39935 -> 198.28.0.2:53 1 64 1 2025-10-03 19:28:07.712 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39935 1 109 1 2025-10-03 19:28:07.711 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34557 1 80 1 2025-10-03 19:29:08.124 00:00:00.000 UDP 28.104.0.1:36675 -> 198.28.0.2:53 1 64 1 2025-10-03 19:29:08.124 00:00:00.000 UDP 28.104.0.1:35927 -> 198.28.0.2:53 1 64 1 2025-10-03 19:29:08.134 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35927 1 109 1 2025-10-03 19:29:08.134 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36675 1 80 1 2025-10-03 19:25:36.801 00:05:09.319 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-03 19:25:36.750 00:05:09.516 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-03 19:25:36.750 00:05:09.380 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-03 19:30:08.415 00:00:00.000 UDP 28.104.0.1:56614 -> 198.28.0.2:53 1 64 1 2025-10-03 19:30:08.415 00:00:00.000 UDP 28.104.0.1:54855 -> 198.28.0.2:53 1 64 1 2025-10-03 19:30:08.425 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54855 1 109 1 2025-10-03 19:30:08.425 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56614 1 80 1 2025-10-03 19:26:22.792 00:05:10.012 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2480 1 2025-10-03 19:28:46.256 00:02:00.000 TCP 28.154.0.1:179 -> 28.157.0.1:37077 3 213 1 2025-10-03 19:31:08.709 00:00:00.000 UDP 28.104.0.1:40242 -> 198.28.0.2:53 1 64 1 2025-10-03 19:31:08.709 00:00:00.000 UDP 28.104.0.1:43761 -> 198.28.0.2:53 1 64 1 2025-10-03 19:31:08.718 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43761 1 80 1 2025-10-03 19:31:08.718 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40242 1 109 1 2025-10-03 19:27:36.762 00:05:09.497 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-03 19:32:08.966 00:00:00.000 UDP 28.104.0.1:56366 -> 198.28.0.2:53 1 64 1 2025-10-03 19:32:08.966 00:00:00.000 UDP 28.104.0.1:34508 -> 198.28.0.2:53 1 64 1 2025-10-03 19:32:08.977 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34508 1 109 1 2025-10-03 19:32:08.977 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56366 1 80 1 2025-10-03 19:32:18.814 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-03 19:31:46.258 00:01:00.000 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 142 1 2025-10-03 19:28:46.124 00:04:00.134 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-03 19:33:09.273 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38833 1 109 1 2025-10-03 19:33:09.273 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34220 1 80 1 2025-10-03 19:33:09.265 00:00:00.000 UDP 28.104.0.1:38833 -> 198.28.0.2:53 1 64 1 2025-10-03 19:33:09.264 00:00:00.000 UDP 28.104.0.1:34220 -> 198.28.0.2:53 1 64 1 2025-10-03 19:34:09.574 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37467 1 109 1 2025-10-03 19:34:09.573 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41917 1 80 1 2025-10-03 19:34:09.562 00:00:00.000 UDP 28.104.0.1:41917 -> 198.28.0.2:53 1 64 1 2025-10-03 19:34:09.562 00:00:00.000 UDP 28.104.0.1:37467 -> 198.28.0.2:53 1 64 1 2025-10-03 19:35:09.827 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41387 1 109 1 2025-10-03 19:35:09.827 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39289 1 80 1 2025-10-03 19:35:09.817 00:00:00.000 UDP 28.104.0.1:39289 -> 198.28.0.2:53 1 64 1 2025-10-03 19:35:09.817 00:00:00.000 UDP 28.104.0.1:41387 -> 198.28.0.2:53 1 64 1 2025-10-03 19:31:36.803 00:05:09.319 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-03 19:31:36.752 00:05:09.380 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-03 19:31:36.752 00:05:09.517 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-03 19:31:42.803 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 43 3000 1 2025-10-03 19:36:10.135 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57058 1 109 1 2025-10-03 19:36:10.136 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60294 1 80 1 2025-10-03 19:36:10.125 00:00:00.000 UDP 28.104.0.1:57058 -> 198.28.0.2:53 1 64 1 2025-10-03 19:36:10.126 00:00:00.000 UDP 28.104.0.1:60294 -> 198.28.0.2:53 1 64 1 2025-10-03 19:37:10.446 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55476 1 109 1 2025-10-03 19:37:10.446 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35095 1 80 1 2025-10-03 19:37:10.435 00:00:00.000 UDP 28.104.0.1:35095 -> 198.28.0.2:53 1 64 1 2025-10-03 19:37:10.435 00:00:00.000 UDP 28.104.0.1:55476 -> 198.28.0.2:53 1 64 1 2025-10-03 19:37:19.220 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-03 19:33:46.257 00:04:00.001 TCP 28.154.0.1:179 -> 28.157.0.1:37077 5 355 1 2025-10-03 19:33:46.124 00:04:00.134 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-03 19:33:36.764 00:05:09.496 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-03 19:38:10.737 00:00:00.000 UDP 28.104.0.1:58079 -> 198.28.0.2:53 1 64 1 2025-10-03 19:38:10.736 00:00:00.000 UDP 28.104.0.1:38539 -> 198.28.0.2:53 1 64 1 2025-10-03 19:38:10.747 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58079 1 109 1 2025-10-03 19:38:10.747 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38539 1 80 1 2025-10-03 19:39:11.142 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36766 1 109 1 2025-10-03 19:39:11.142 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32922 1 80 1 2025-10-03 19:39:11.132 00:00:00.000 UDP 28.104.0.1:36766 -> 198.28.0.2:53 1 64 1 2025-10-03 19:39:11.132 00:00:00.000 UDP 28.104.0.1:32922 -> 198.28.0.2:53 1 64 1 2025-10-03 19:40:11.386 00:00:00.000 UDP 28.104.0.1:41854 -> 198.28.0.2:53 1 64 1 2025-10-03 19:40:11.387 00:00:00.000 UDP 28.104.0.1:46907 -> 198.28.0.2:53 1 64 1 2025-10-03 19:40:11.398 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41854 1 109 1 2025-10-03 19:40:11.398 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46907 1 80 1 2025-10-03 19:41:11.680 00:00:00.000 UDP 28.104.0.1:35897 -> 198.28.0.2:53 1 64 1 2025-10-03 19:41:11.681 00:00:00.000 UDP 28.104.0.1:51033 -> 198.28.0.2:53 1 64 1 2025-10-03 19:41:11.692 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51033 1 80 1 2025-10-03 19:41:11.692 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35897 1 109 1 2025-10-03 19:37:02.811 00:05:10.013 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2840 1 2025-10-03 19:37:36.754 00:05:09.517 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-03 19:37:36.754 00:05:09.379 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-03 19:37:36.804 00:05:09.319 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-03 19:42:11.989 00:00:00.000 UDP 28.104.0.1:49373 -> 198.28.0.2:53 1 64 1 2025-10-03 19:42:11.989 00:00:00.000 UDP 28.104.0.1:58263 -> 198.28.0.2:53 1 64 1 2025-10-03 19:42:12.001 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58263 1 109 1 2025-10-03 19:42:12.001 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49373 1 80 1 2025-10-03 19:42:19.160 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-03 19:38:46.261 00:04:00.000 TCP 28.154.0.1:179 -> 28.157.0.1:37077 5 355 1 2025-10-03 19:38:46.126 00:04:00.135 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-03 19:43:12.303 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41777 1 109 1 2025-10-03 19:43:12.303 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49593 1 80 1 2025-10-03 19:43:12.294 00:00:00.000 UDP 28.104.0.1:41777 -> 198.28.0.2:53 1 64 1 2025-10-03 19:43:12.294 00:00:00.000 UDP 28.104.0.1:49593 -> 198.28.0.2:53 1 64 1 2025-10-03 19:39:36.765 00:05:09.496 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-03 19:44:12.604 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56382 1 80 1 2025-10-03 19:44:12.604 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56802 1 109 1 2025-10-03 19:44:12.595 00:00:00.000 UDP 28.104.0.1:56802 -> 198.28.0.2:53 1 64 1 2025-10-03 19:44:12.595 00:00:00.000 UDP 28.104.0.1:56382 -> 198.28.0.2:53 1 64 1 2025-10-03 19:45:12.907 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57391 1 80 1 2025-10-03 19:45:12.907 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34199 1 109 1 2025-10-03 19:45:12.896 00:00:00.000 UDP 28.104.0.1:34199 -> 198.28.0.2:53 1 64 1 2025-10-03 19:45:12.896 00:00:00.000 UDP 28.104.0.1:57391 -> 198.28.0.2:53 1 64 1 2025-10-03 19:46:13.198 00:00:00.000 UDP 28.104.0.1:45780 -> 198.28.0.2:53 1 64 1 2025-10-03 19:46:13.198 00:00:00.000 UDP 28.104.0.1:53337 -> 198.28.0.2:53 1 64 1 2025-10-03 19:46:13.209 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53337 1 80 1 2025-10-03 19:46:13.208 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45780 1 109 1 2025-10-03 19:42:22.824 00:05:10.009 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2684 1 2025-10-03 19:47:13.496 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45993 1 109 1 2025-10-03 19:47:13.497 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56424 1 80 1 2025-10-03 19:47:13.486 00:00:00.000 UDP 28.104.0.1:56424 -> 198.28.0.2:53 1 64 1 2025-10-03 19:47:13.486 00:00:00.000 UDP 28.104.0.1:45993 -> 198.28.0.2:53 1 64 1 2025-10-03 19:47:19.251 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-03 19:43:36.806 00:05:09.324 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-03 19:43:46.261 00:04:00.002 TCP 28.154.0.1:179 -> 28.157.0.1:37077 5 355 1 2025-10-03 19:43:36.755 00:05:09.518 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-03 19:43:36.755 00:05:09.385 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-03 19:48:13.805 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40825 1 109 1 2025-10-03 19:48:13.805 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52675 1 80 1 2025-10-03 19:48:13.797 00:00:00.000 UDP 28.104.0.1:40825 -> 198.28.0.2:53 1 64 1 2025-10-03 19:48:13.796 00:00:00.000 UDP 28.104.0.1:52675 -> 198.28.0.2:53 1 64 1 2025-10-03 19:43:46.128 00:06:00.135 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-03 19:49:14.110 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43599 1 109 1 2025-10-03 19:49:14.110 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47712 1 80 1 2025-10-03 19:49:14.100 00:00:00.000 UDP 28.104.0.1:43599 -> 198.28.0.2:53 1 64 1 2025-10-03 19:49:14.099 00:00:00.000 UDP 28.104.0.1:47712 -> 198.28.0.2:53 1 64 1 2025-10-03 19:45:36.767 00:05:09.497 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-03 19:50:14.401 00:00:00.000 UDP 28.104.0.1:38781 -> 198.28.0.2:53 1 64 1 2025-10-03 19:50:14.401 00:00:00.000 UDP 28.104.0.1:40190 -> 198.28.0.2:53 1 64 1 2025-10-03 19:50:14.411 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38781 1 109 1 2025-10-03 19:50:14.411 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40190 1 80 1 2025-10-03 19:51:14.709 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33049 1 109 1 2025-10-03 19:51:14.709 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49465 1 80 1 2025-10-03 19:51:14.698 00:00:00.000 UDP 28.104.0.1:49465 -> 198.28.0.2:53 1 64 1 2025-10-03 19:51:14.698 00:00:00.000 UDP 28.104.0.1:33049 -> 198.28.0.2:53 1 64 1 2025-10-03 19:47:42.833 00:05:10.001 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2368 1 2025-10-03 19:52:15.676 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33181 1 80 1 2025-10-03 19:52:15.676 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35118 1 109 1 2025-10-03 19:52:15.665 00:00:00.000 UDP 28.104.0.1:33181 -> 198.28.0.2:53 1 64 1 2025-10-03 19:52:15.665 00:00:00.000 UDP 28.104.0.1:35118 -> 198.28.0.2:53 1 64 1 2025-10-03 19:52:19.324 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-03 19:48:46.262 00:04:00.001 TCP 28.154.0.1:179 -> 28.157.0.1:37077 5 355 1 2025-10-03 19:53:17.229 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48751 1 80 1 2025-10-03 19:53:17.229 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36763 1 109 1 2025-10-03 19:53:17.217 00:00:00.000 UDP 28.104.0.1:36763 -> 198.28.0.2:53 1 64 1 2025-10-03 19:53:17.217 00:00:00.000 UDP 28.104.0.1:48751 -> 198.28.0.2:53 1 64 1 2025-10-03 19:49:36.756 00:05:09.518 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-03 19:49:36.756 00:05:09.384 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-03 19:49:36.807 00:05:09.323 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-03 19:54:17.568 00:00:00.000 UDP 28.104.0.1:39465 -> 198.28.0.2:53 1 64 1 2025-10-03 19:54:17.568 00:00:00.000 UDP 28.104.0.1:52179 -> 198.28.0.2:53 1 64 1 2025-10-03 19:54:17.577 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52179 1 80 1 2025-10-03 19:54:17.577 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39465 1 109 1 2025-10-03 19:53:46.263 00:01:00.001 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 142 1 2025-10-03 19:50:46.129 00:04:00.135 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-03 19:55:17.860 00:00:00.000 UDP 28.104.0.1:54622 -> 198.28.0.2:53 1 64 1 2025-10-03 19:55:17.860 00:00:00.000 UDP 28.104.0.1:34131 -> 198.28.0.2:53 1 64 1 2025-10-03 19:55:17.871 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34131 1 80 1 2025-10-03 19:55:17.871 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54622 1 109 1 2025-10-03 19:51:36.767 00:05:09.497 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-03 19:56:18.183 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52269 1 109 1 2025-10-03 19:56:18.183 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47288 1 80 1 2025-10-03 19:56:18.173 00:00:00.000 UDP 28.104.0.1:47288 -> 198.28.0.2:53 1 64 1 2025-10-03 19:56:18.173 00:00:00.000 UDP 28.104.0.1:52269 -> 198.28.0.2:53 1 64 1 2025-10-03 19:57:18.469 00:00:00.000 UDP 28.104.0.1:59032 -> 198.28.0.2:53 1 64 1 2025-10-03 19:57:18.469 00:00:00.000 UDP 28.104.0.1:49524 -> 198.28.0.2:53 1 64 1 2025-10-03 19:53:02.836 00:05:10.009 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2668 1 2025-10-03 19:57:19.519 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-03 19:57:18.480 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59032 1 109 1 2025-10-03 19:57:18.480 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49524 1 80 1 2025-10-03 19:55:46.265 00:01:59.998 TCP 28.154.0.1:179 -> 28.157.0.1:37077 3 213 1 2025-10-03 19:58:18.764 00:00:00.000 UDP 28.104.0.1:35062 -> 198.28.0.2:53 1 64 1 2025-10-03 19:58:18.764 00:00:00.000 UDP 28.104.0.1:47223 -> 198.28.0.2:53 1 64 1 2025-10-03 19:58:18.776 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35062 1 80 1 2025-10-03 19:58:18.776 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47223 1 109 1 Summary: total flows: 326, total bytes: 92557, total packets: 1351, avg bps: 196, avg pps: 0, avg bpp: 68 Time window: 2025-10-03 18:55:36 - 2025-10-03 19:58:18 Total flows processed: 326, passed: 326, Blocks skipped: 0, Bytes read: 33968 Sys: 0.0043s User: 0.0026s Wall: 0.0053s flows/second: 61764.5 Runtime: 0.0053s