Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-04 08:59:26.118 00:00:00.000 UDP 28.104.0.1:43270 -> 198.28.0.2:53 1 64 1 2025-10-04 08:59:26.118 00:00:00.000 UDP 28.104.0.1:36572 -> 198.28.0.2:53 1 64 1 2025-10-04 08:55:23.996 00:05:00.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2848 1 2025-10-04 08:59:26.129 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43270 1 109 1 2025-10-04 08:59:26.130 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36572 1 80 1 2025-10-04 08:54:46.382 00:05:50.733 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-04 08:55:37.063 00:05:09.490 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-04 08:55:37.063 00:05:09.330 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-04 09:00:26.434 00:00:00.000 UDP 28.104.0.1:41274 -> 198.28.0.2:53 1 64 1 2025-10-04 09:00:26.434 00:00:00.000 UDP 28.104.0.1:54955 -> 198.28.0.2:53 1 64 1 2025-10-04 09:00:26.445 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54955 1 80 1 2025-10-04 09:00:26.445 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41274 1 109 1 2025-10-04 08:58:46.469 00:02:00.074 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-04 08:58:46.388 00:02:00.155 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-10-04 09:01:26.735 00:00:00.000 UDP 28.104.0.1:51203 -> 198.28.0.2:53 1 64 1 2025-10-04 09:01:26.734 00:00:00.000 UDP 28.104.0.1:55902 -> 198.28.0.2:53 1 64 1 2025-10-04 09:01:26.745 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51203 1 109 1 2025-10-04 09:01:26.745 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55902 1 80 1 2025-10-04 08:56:46.542 00:05:50.533 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-04 09:02:27.064 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38162 1 109 1 2025-10-04 09:02:27.064 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49456 1 80 1 2025-10-04 09:02:27.053 00:00:00.000 UDP 28.104.0.1:38162 -> 198.28.0.2:53 1 64 1 2025-10-04 09:02:27.053 00:00:00.000 UDP 28.104.0.1:49456 -> 198.28.0.2:53 1 64 1 2025-10-04 09:02:35.190 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-04 09:01:46.471 00:01:00.073 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-04 09:01:46.391 00:01:00.153 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-04 09:03:27.880 00:00:00.000 UDP 28.104.0.1:52706 -> 198.28.0.2:53 1 64 1 2025-10-04 09:03:27.880 00:00:00.000 UDP 28.104.0.1:60121 -> 198.28.0.2:53 1 64 1 2025-10-04 09:03:27.890 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52706 1 80 1 2025-10-04 09:03:27.890 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60121 1 109 1 2025-10-04 09:04:28.253 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59879 1 109 1 2025-10-04 09:04:28.253 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46695 1 80 1 2025-10-04 09:04:28.243 00:00:00.000 UDP 28.104.0.1:46695 -> 198.28.0.2:53 1 64 1 2025-10-04 09:04:28.243 00:00:00.000 UDP 28.104.0.1:59879 -> 198.28.0.2:53 1 64 1 2025-10-04 09:00:34.002 00:05:10.110 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2612 1 2025-10-04 09:05:28.548 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60192 1 80 1 2025-10-04 09:05:28.547 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44910 1 109 1 2025-10-04 09:05:28.536 00:00:00.000 UDP 28.104.0.1:44910 -> 198.28.0.2:53 1 64 1 2025-10-04 09:05:28.536 00:00:00.000 UDP 28.104.0.1:60192 -> 198.28.0.2:53 1 64 1 2025-10-04 09:00:46.384 00:05:50.732 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-04 09:03:46.471 00:02:00.073 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-04 09:03:46.391 00:02:00.153 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-10-04 09:01:37.064 00:05:09.489 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-04 09:01:37.064 00:05:09.329 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-04 09:06:28.829 00:00:00.000 UDP 28.104.0.1:59846 -> 198.28.0.2:53 1 64 1 2025-10-04 09:06:28.829 00:00:00.000 UDP 28.104.0.1:41052 -> 198.28.0.2:53 1 64 1 2025-10-04 09:06:28.839 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59846 1 109 1 2025-10-04 09:06:28.839 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41052 1 80 1 2025-10-04 09:07:29.132 00:00:00.000 UDP 28.104.0.1:55038 -> 198.28.0.2:53 1 64 1 2025-10-04 09:07:29.132 00:00:00.000 UDP 28.104.0.1:40699 -> 198.28.0.2:53 1 64 1 2025-10-04 09:07:29.144 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55038 1 80 1 2025-10-04 09:07:29.144 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40699 1 109 1 2025-10-04 09:07:35.057 00:00:00.045 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-04 09:02:46.543 00:05:50.533 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-04 09:06:46.473 00:01:00.071 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-04 09:06:46.390 00:01:00.154 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-04 09:08:31.790 00:00:00.000 UDP 28.104.0.1:43406 -> 198.28.0.2:53 1 64 1 2025-10-04 09:08:31.790 00:00:00.000 UDP 28.104.0.1:42057 -> 198.28.0.2:53 1 64 1 2025-10-04 09:08:31.801 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43406 1 80 1 2025-10-04 09:08:31.801 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42057 1 109 1 2025-10-04 09:09:32.104 00:00:00.000 UDP 28.104.0.1:33828 -> 198.28.0.2:53 1 64 1 2025-10-04 09:09:32.104 00:00:00.000 UDP 28.104.0.1:59324 -> 198.28.0.2:53 1 64 1 2025-10-04 09:09:32.115 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59324 1 80 1 2025-10-04 09:09:32.115 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33828 1 109 1 2025-10-04 09:05:54.009 00:05:10.045 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2568 1 2025-10-04 09:10:32.389 00:00:00.000 UDP 28.104.0.1:39776 -> 198.28.0.2:53 1 64 1 2025-10-04 09:10:32.389 00:00:00.000 UDP 28.104.0.1:37762 -> 198.28.0.2:53 1 64 1 2025-10-04 09:10:32.399 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37762 1 80 1 2025-10-04 09:10:32.399 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39776 1 109 1 2025-10-04 09:08:46.472 00:02:00.076 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-04 09:08:46.391 00:02:00.157 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-10-04 09:11:32.693 00:00:00.000 UDP 28.104.0.1:34452 -> 198.28.0.2:53 1 64 1 2025-10-04 09:11:32.693 00:00:00.000 UDP 28.104.0.1:60786 -> 198.28.0.2:53 1 64 1 2025-10-04 09:11:32.703 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60786 1 109 1 2025-10-04 09:11:32.702 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34452 1 80 1 2025-10-04 09:06:46.383 00:05:50.736 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-04 09:07:37.065 00:05:09.493 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-04 09:07:37.065 00:05:09.329 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-04 09:12:32.982 00:00:00.000 UDP 28.104.0.1:51214 -> 198.28.0.2:53 1 64 1 2025-10-04 09:12:32.982 00:00:00.000 UDP 28.104.0.1:33902 -> 198.28.0.2:53 1 64 1 2025-10-04 09:12:32.994 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33902 1 80 1 2025-10-04 09:12:35.383 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-04 09:12:32.994 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51214 1 109 1 2025-10-04 09:11:46.474 00:01:00.076 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-04 09:11:46.394 00:01:00.156 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-04 09:13:33.287 00:00:00.000 UDP 28.104.0.1:36084 -> 198.28.0.2:53 1 64 1 2025-10-04 09:13:33.287 00:00:00.000 UDP 28.104.0.1:48770 -> 198.28.0.2:53 1 64 1 2025-10-04 09:13:33.297 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36084 1 80 1 2025-10-04 09:13:33.297 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48770 1 109 1 2025-10-04 09:08:46.545 00:05:50.534 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-04 09:14:33.593 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54521 1 109 1 2025-10-04 09:14:33.594 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35721 1 80 1 2025-10-04 09:14:33.584 00:00:00.000 UDP 28.104.0.1:54521 -> 198.28.0.2:53 1 64 1 2025-10-04 09:14:33.584 00:00:00.000 UDP 28.104.0.1:35721 -> 198.28.0.2:53 1 64 1 2025-10-04 09:13:46.474 00:01:00.075 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-04 09:13:46.393 00:01:00.156 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-04 09:11:14.059 00:05:10.202 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2876 1 2025-10-04 09:15:33.843 00:00:00.000 UDP 28.104.0.1:52036 -> 198.28.0.2:53 1 64 1 2025-10-04 09:15:33.843 00:00:00.000 UDP 28.104.0.1:52370 -> 198.28.0.2:53 1 64 1 2025-10-04 09:15:33.853 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52036 1 109 1 2025-10-04 09:15:33.855 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52370 1 80 1 2025-10-04 09:15:46.474 00:00:00.074 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 123 1 2025-10-04 09:16:34.173 00:00:00.000 UDP 28.104.0.1:55005 -> 198.28.0.2:53 1 64 1 2025-10-04 09:16:34.172 00:00:00.000 UDP 28.104.0.1:34970 -> 198.28.0.2:53 1 64 1 2025-10-04 09:16:34.181 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34970 1 80 1 2025-10-04 09:16:34.183 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55005 1 109 1 2025-10-04 09:17:34.471 00:00:00.000 UDP 28.104.0.1:60767 -> 198.28.0.2:53 1 64 1 2025-10-04 09:17:34.471 00:00:00.000 UDP 28.104.0.1:54289 -> 198.28.0.2:53 1 64 1 2025-10-04 09:17:35.452 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-04 09:17:34.482 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60767 1 80 1 2025-10-04 09:17:34.485 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54289 1 109 1 2025-10-04 09:12:46.384 00:05:50.736 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-04 09:16:46.474 00:01:00.075 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-04 09:15:46.393 00:02:00.156 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-10-04 09:13:37.070 00:05:09.490 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-04 09:13:37.070 00:05:09.326 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-04 09:18:34.793 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53323 1 109 1 2025-10-04 09:18:34.793 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53510 1 80 1 2025-10-04 09:18:34.783 00:00:00.000 UDP 28.104.0.1:53323 -> 198.28.0.2:53 1 64 1 2025-10-04 09:18:34.783 00:00:00.000 UDP 28.104.0.1:53510 -> 198.28.0.2:53 1 64 1 2025-10-04 09:19:35.101 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37794 1 109 1 2025-10-04 09:19:35.100 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50991 1 80 1 2025-10-04 09:19:35.090 00:00:00.000 UDP 28.104.0.1:37794 -> 198.28.0.2:53 1 64 1 2025-10-04 09:19:35.090 00:00:00.000 UDP 28.104.0.1:50991 -> 198.28.0.2:53 1 64 1 2025-10-04 09:14:46.549 00:05:50.532 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-04 09:18:46.474 00:01:00.076 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-04 09:18:46.394 00:01:00.155 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-04 09:20:35.390 00:00:00.000 UDP 28.104.0.1:60322 -> 198.28.0.2:53 1 64 1 2025-10-04 09:20:35.390 00:00:00.000 UDP 28.104.0.1:55681 -> 198.28.0.2:53 1 64 1 2025-10-04 09:20:35.400 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55681 1 109 1 2025-10-04 09:20:35.402 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60322 1 80 1 2025-10-04 09:20:46.477 00:00:00.073 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 123 1 2025-10-04 09:16:34.066 00:05:10.009 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2752 1 2025-10-04 09:21:35.718 00:00:00.000 UDP 28.104.0.1:44185 -> 198.28.0.2:53 1 64 1 2025-10-04 09:21:35.718 00:00:00.000 UDP 28.104.0.1:38627 -> 198.28.0.2:53 1 64 1 2025-10-04 09:21:35.727 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38627 1 80 1 2025-10-04 09:21:35.727 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44185 1 109 1 2025-10-04 09:22:36.037 00:00:00.000 UDP 28.104.0.1:52961 -> 198.28.0.2:53 1 64 1 2025-10-04 09:22:36.038 00:00:00.000 UDP 28.104.0.1:33832 -> 198.28.0.2:53 1 64 1 2025-10-04 09:22:35.627 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-04 09:22:36.048 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33832 1 109 1 2025-10-04 09:22:36.047 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52961 1 80 1 2025-10-04 09:21:46.478 00:01:00.072 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-04 09:20:46.394 00:02:00.156 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-10-04 09:23:36.329 00:00:00.000 UDP 28.104.0.1:58923 -> 198.28.0.2:53 1 64 1 2025-10-04 09:23:36.329 00:00:00.000 UDP 28.104.0.1:59551 -> 198.28.0.2:53 1 64 1 2025-10-04 09:23:36.339 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58923 1 109 1 2025-10-04 09:23:36.339 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59551 1 80 1 2025-10-04 09:18:46.386 00:05:50.739 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-04 09:19:37.071 00:05:09.326 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-04 09:19:37.071 00:05:09.490 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-04 09:24:36.643 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37450 1 109 1 2025-10-04 09:24:36.643 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57857 1 80 1 2025-10-04 09:24:36.633 00:00:00.000 UDP 28.104.0.1:37450 -> 198.28.0.2:53 1 64 1 2025-10-04 09:24:36.633 00:00:00.000 UDP 28.104.0.1:57857 -> 198.28.0.2:53 1 64 1 2025-10-04 09:23:46.478 00:01:00.073 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-04 09:23:46.394 00:01:00.157 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-04 09:25:36.935 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33888 1 109 1 2025-10-04 09:25:36.934 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36656 1 80 1 2025-10-04 09:25:36.924 00:00:00.000 UDP 28.104.0.1:33888 -> 198.28.0.2:53 1 64 1 2025-10-04 09:25:36.924 00:00:00.000 UDP 28.104.0.1:36656 -> 198.28.0.2:53 1 64 1 2025-10-04 09:20:46.550 00:05:50.534 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-04 09:25:46.481 00:00:00.069 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 123 1 2025-10-04 09:21:54.075 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2644 1 2025-10-04 09:26:37.231 00:00:00.000 UDP 28.104.0.1:41626 -> 198.28.0.2:53 1 64 1 2025-10-04 09:26:37.231 00:00:00.000 UDP 28.104.0.1:32873 -> 198.28.0.2:53 1 64 1 2025-10-04 09:26:37.243 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41626 1 109 1 2025-10-04 09:26:37.243 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32873 1 80 1 2025-10-04 09:27:35.630 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-04 09:27:37.519 00:00:00.000 UDP 28.104.0.1:34936 -> 198.28.0.2:53 1 64 1 2025-10-04 09:27:37.519 00:00:00.000 UDP 28.104.0.1:52965 -> 198.28.0.2:53 1 64 1 2025-10-04 09:27:37.529 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52965 1 80 1 2025-10-04 09:27:37.529 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34936 1 109 1 2025-10-04 09:26:46.481 00:01:00.069 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-04 09:25:46.394 00:02:00.156 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-10-04 09:28:37.810 00:00:00.000 UDP 28.104.0.1:40004 -> 198.28.0.2:53 1 64 1 2025-10-04 09:28:37.810 00:00:00.000 UDP 28.104.0.1:49024 -> 198.28.0.2:53 1 64 1 2025-10-04 09:28:37.820 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40004 1 80 1 2025-10-04 09:28:37.820 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49024 1 109 1 2025-10-04 09:24:46.388 00:05:50.738 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-04 09:25:37.074 00:05:09.487 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-04 09:25:37.074 00:05:09.325 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-04 09:28:46.482 00:01:00.070 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-04 09:28:46.396 00:01:00.156 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-04 09:29:53.552 00:00:00.000 UDP 28.104.0.1:52738 -> 198.28.0.2:53 1 64 1 2025-10-04 09:29:53.552 00:00:00.000 UDP 28.104.0.1:51961 -> 198.28.0.2:53 1 64 1 2025-10-04 09:29:53.562 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51961 1 109 1 2025-10-04 09:29:53.562 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52738 1 80 1 2025-10-04 09:30:53.850 00:00:00.000 UDP 28.104.0.1:38036 -> 198.28.0.2:53 1 64 1 2025-10-04 09:30:53.850 00:00:00.000 UDP 28.104.0.1:55405 -> 198.28.0.2:53 1 64 1 2025-10-04 09:30:53.860 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38036 1 80 1 2025-10-04 09:30:53.860 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55405 1 109 1 2025-10-04 09:27:14.080 00:05:10.010 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2720 1 2025-10-04 09:26:46.551 00:05:50.534 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-04 09:31:54.143 00:00:00.000 UDP 28.104.0.1:42285 -> 198.28.0.2:53 1 64 1 2025-10-04 09:31:54.143 00:00:00.000 UDP 28.104.0.1:39027 -> 198.28.0.2:53 1 64 1 2025-10-04 09:31:54.153 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42285 1 80 1 2025-10-04 09:31:54.153 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39027 1 109 1 2025-10-04 09:32:36.105 00:00:00.025 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-04 09:30:46.483 00:02:00.069 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-04 09:30:46.396 00:02:00.156 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-10-04 09:32:54.440 00:00:00.000 UDP 28.104.0.1:51059 -> 198.28.0.2:53 1 64 1 2025-10-04 09:32:54.440 00:00:00.000 UDP 28.104.0.1:48687 -> 198.28.0.2:53 1 64 1 2025-10-04 09:32:54.450 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51059 1 109 1 2025-10-04 09:32:54.450 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48687 1 80 1 2025-10-04 09:33:54.738 00:00:00.000 UDP 28.104.0.1:40409 -> 198.28.0.2:53 1 64 1 2025-10-04 09:33:54.738 00:00:00.000 UDP 28.104.0.1:55008 -> 198.28.0.2:53 1 64 1 2025-10-04 09:33:54.748 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55008 1 80 1 2025-10-04 09:33:54.748 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40409 1 109 1 2025-10-04 09:33:46.482 00:01:00.070 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-04 09:33:46.395 00:01:00.157 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-04 09:35:00.778 00:00:00.000 UDP 28.104.0.1:50416 -> 198.28.0.2:53 1 64 1 2025-10-04 09:35:00.778 00:00:00.000 UDP 28.104.0.1:50589 -> 198.28.0.2:53 1 64 1 2025-10-04 09:35:00.789 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50589 1 109 1 2025-10-04 09:35:00.789 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50416 1 80 1 2025-10-04 09:30:46.389 00:05:50.738 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-04 09:31:37.075 00:05:09.325 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-04 09:31:37.075 00:05:09.488 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-04 09:36:01.100 00:00:00.000 UDP 28.104.0.1:46081 -> 198.28.0.2:53 1 64 1 2025-10-04 09:36:01.099 00:00:00.000 UDP 28.104.0.1:45206 -> 198.28.0.2:53 1 64 1 2025-10-04 09:36:01.109 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45206 1 80 1 2025-10-04 09:36:01.109 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46081 1 109 1 2025-10-04 09:35:46.397 00:01:00.156 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-04 09:32:34.091 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2900 1 2025-10-04 09:37:01.369 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45965 1 109 1 2025-10-04 09:37:01.369 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52091 1 80 1 2025-10-04 09:37:01.359 00:00:00.000 UDP 28.104.0.1:52091 -> 198.28.0.2:53 1 64 1 2025-10-04 09:37:01.359 00:00:00.000 UDP 28.104.0.1:45965 -> 198.28.0.2:53 1 64 1 2025-10-04 09:37:36.308 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-04 09:32:46.552 00:05:50.536 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-04 09:35:46.484 00:02:00.069 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-04 09:38:01.658 00:00:00.000 UDP 28.104.0.1:57000 -> 198.28.0.2:53 1 64 1 2025-10-04 09:38:01.657 00:00:00.000 UDP 28.104.0.1:49635 -> 198.28.0.2:53 1 64 1 2025-10-04 09:38:01.667 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49635 1 109 1 2025-10-04 09:38:01.667 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57000 1 80 1 2025-10-04 09:39:02.512 00:00:00.000 UDP 28.104.0.1:34332 -> 198.28.0.2:53 1 64 1 2025-10-04 09:39:02.512 00:00:00.000 UDP 28.104.0.1:56450 -> 198.28.0.2:53 1 64 1 2025-10-04 09:39:02.522 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34332 1 109 1 2025-10-04 09:39:02.522 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56450 1 80 1 2025-10-04 09:38:46.484 00:01:00.069 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-04 09:37:46.396 00:02:00.157 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-10-04 09:40:02.822 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47131 1 109 1 2025-10-04 09:40:02.822 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60428 1 80 1 2025-10-04 09:40:02.812 00:00:00.000 UDP 28.104.0.1:60428 -> 198.28.0.2:53 1 64 1 2025-10-04 09:40:02.812 00:00:00.000 UDP 28.104.0.1:47131 -> 198.28.0.2:53 1 64 1 2025-10-04 09:41:03.117 00:00:00.000 UDP 28.104.0.1:38824 -> 198.28.0.2:53 1 64 1 2025-10-04 09:41:03.117 00:00:00.000 UDP 28.104.0.1:37694 -> 198.28.0.2:53 1 64 1 2025-10-04 09:41:03.127 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38824 1 109 1 2025-10-04 09:41:03.127 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37694 1 80 1 2025-10-04 09:36:46.391 00:05:50.738 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-04 09:40:46.485 00:01:00.068 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-04 09:40:46.397 00:01:00.156 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-04 09:37:37.075 00:05:09.488 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-04 09:37:37.075 00:05:09.327 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-04 09:42:03.382 00:00:00.000 UDP 28.104.0.1:44784 -> 198.28.0.2:53 1 64 1 2025-10-04 09:42:03.382 00:00:00.000 UDP 28.104.0.1:60427 -> 198.28.0.2:53 1 64 1 2025-10-04 09:42:03.393 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60427 1 80 1 2025-10-04 09:37:54.094 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2652 1 2025-10-04 09:42:03.392 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44784 1 109 1 2025-10-04 09:42:35.905 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-04 09:42:46.485 00:00:00.068 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 123 1 2025-10-04 09:43:03.645 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52906 1 80 1 2025-10-04 09:43:03.645 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42049 1 109 1 2025-10-04 09:43:03.634 00:00:00.000 UDP 28.104.0.1:42049 -> 198.28.0.2:53 1 64 1 2025-10-04 09:43:03.635 00:00:00.000 UDP 28.104.0.1:52906 -> 198.28.0.2:53 1 64 1 2025-10-04 09:38:46.552 00:05:50.537 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-04 09:44:03.929 00:00:00.000 UDP 28.104.0.1:47450 -> 198.28.0.2:53 1 64 1 2025-10-04 09:44:03.928 00:00:00.000 UDP 28.104.0.1:47879 -> 198.28.0.2:53 1 64 1 2025-10-04 09:44:03.939 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47450 1 80 1 2025-10-04 09:44:03.939 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47879 1 109 1 2025-10-04 09:43:46.485 00:01:00.069 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-04 09:42:46.398 00:02:00.156 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-10-04 09:45:04.229 00:00:00.000 UDP 28.104.0.1:42498 -> 198.28.0.2:53 1 64 1 2025-10-04 09:45:04.229 00:00:00.000 UDP 28.104.0.1:47520 -> 198.28.0.2:53 1 64 1 2025-10-04 09:45:04.238 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47520 1 109 1 2025-10-04 09:45:04.239 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42498 1 80 1 2025-10-04 09:46:04.522 00:00:00.000 UDP 28.104.0.1:34733 -> 198.28.0.2:53 1 64 1 2025-10-04 09:46:04.522 00:00:00.000 UDP 28.104.0.1:42197 -> 198.28.0.2:53 1 64 1 2025-10-04 09:46:04.534 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42197 1 80 1 2025-10-04 09:46:04.534 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34733 1 109 1 2025-10-04 09:45:46.486 00:01:00.068 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-04 09:45:46.398 00:01:00.156 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-04 09:47:04.767 00:00:00.000 UDP 28.104.0.1:39436 -> 198.28.0.2:53 1 64 1 2025-10-04 09:47:04.767 00:00:00.000 UDP 28.104.0.1:60004 -> 198.28.0.2:53 1 64 1 2025-10-04 09:47:04.778 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60004 1 80 1 2025-10-04 09:47:04.778 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39436 1 109 1 2025-10-04 09:43:14.099 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2400 1 2025-10-04 09:47:35.795 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-04 09:42:46.393 00:05:50.737 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-04 09:47:46.487 00:00:00.069 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 123 1 2025-10-04 09:43:37.078 00:05:09.487 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-04 09:43:37.078 00:05:09.325 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-04 09:48:05.064 00:00:00.000 UDP 28.104.0.1:53796 -> 198.28.0.2:53 1 64 1 2025-10-04 09:48:05.064 00:00:00.000 UDP 28.104.0.1:50622 -> 198.28.0.2:53 1 64 1 2025-10-04 09:48:05.074 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53796 1 80 1 2025-10-04 09:48:05.074 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50622 1 109 1 2025-10-04 09:49:05.374 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36012 1 109 1 2025-10-04 09:49:05.373 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43692 1 80 1 2025-10-04 09:49:05.364 00:00:00.000 UDP 28.104.0.1:43692 -> 198.28.0.2:53 1 64 1 2025-10-04 09:49:05.364 00:00:00.000 UDP 28.104.0.1:36012 -> 198.28.0.2:53 1 64 1 2025-10-04 09:44:46.554 00:05:50.536 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-04 09:48:46.488 00:01:00.068 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-04 09:47:46.399 00:02:00.157 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-10-04 09:50:05.669 00:00:00.000 UDP 28.104.0.1:40722 -> 198.28.0.2:53 1 64 1 2025-10-04 09:50:05.669 00:00:00.000 UDP 28.104.0.1:44604 -> 198.28.0.2:53 1 64 1 2025-10-04 09:50:05.680 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40722 1 109 1 2025-10-04 09:50:05.680 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44604 1 80 1 2025-10-04 09:51:05.974 00:00:00.000 UDP 28.104.0.1:33167 -> 198.28.0.2:53 1 64 1 2025-10-04 09:51:05.974 00:00:00.000 UDP 28.104.0.1:43109 -> 198.28.0.2:53 1 64 1 2025-10-04 09:51:05.985 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33167 1 109 1 2025-10-04 09:51:05.985 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43109 1 80 1 2025-10-04 09:50:46.487 00:01:00.068 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-04 09:50:46.398 00:01:00.157 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-04 09:52:10.698 00:00:00.000 UDP 28.104.0.1:42146 -> 198.28.0.2:53 1 64 1 2025-10-04 09:52:10.698 00:00:00.000 UDP 28.104.0.1:51091 -> 198.28.0.2:53 1 64 1 2025-10-04 09:52:10.709 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51091 1 109 1 2025-10-04 09:52:10.709 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42146 1 80 1 2025-10-04 09:52:36.167 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-04 09:48:34.097 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2832 1 2025-10-04 09:53:11.205 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50232 1 80 1 2025-10-04 09:53:11.206 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45867 1 109 1 2025-10-04 09:53:11.195 00:00:00.000 UDP 28.104.0.1:50232 -> 198.28.0.2:53 1 64 1 2025-10-04 09:53:11.196 00:00:00.000 UDP 28.104.0.1:45867 -> 198.28.0.2:53 1 64 1 2025-10-04 09:48:46.393 00:05:50.739 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-04 09:49:37.079 00:05:09.486 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-04 09:49:37.079 00:05:09.325 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-04 09:54:11.487 00:00:00.000 UDP 28.104.0.1:50422 -> 198.28.0.2:53 1 64 1 2025-10-04 09:54:11.487 00:00:00.000 UDP 28.104.0.1:44706 -> 198.28.0.2:53 1 64 1 2025-10-04 09:54:11.498 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50422 1 109 1 2025-10-04 09:54:11.498 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44706 1 80 1 2025-10-04 09:52:46.489 00:02:00.067 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-04 09:52:46.400 00:02:00.156 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-10-04 09:55:11.793 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36703 1 109 1 2025-10-04 09:55:11.794 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57841 1 80 1 2025-10-04 09:55:11.782 00:00:00.000 UDP 28.104.0.1:36703 -> 198.28.0.2:53 1 64 1 2025-10-04 09:55:11.783 00:00:00.000 UDP 28.104.0.1:57841 -> 198.28.0.2:53 1 64 1 2025-10-04 09:50:46.556 00:05:50.537 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-04 09:56:12.109 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60706 1 109 1 2025-10-04 09:56:12.109 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51917 1 80 1 2025-10-04 09:56:12.098 00:00:00.000 UDP 28.104.0.1:51917 -> 198.28.0.2:53 1 64 1 2025-10-04 09:56:12.098 00:00:00.000 UDP 28.104.0.1:60706 -> 198.28.0.2:53 1 64 1 2025-10-04 09:55:46.489 00:01:00.067 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-04 09:55:46.400 00:01:00.156 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-04 09:57:12.393 00:00:00.000 UDP 28.104.0.1:43102 -> 198.28.0.2:53 1 64 1 2025-10-04 09:57:12.393 00:00:00.000 UDP 28.104.0.1:45371 -> 198.28.0.2:53 1 64 1 2025-10-04 09:57:12.403 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43102 1 80 1 2025-10-04 09:57:12.403 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45371 1 109 1 2025-10-04 09:57:36.419 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-04 09:53:54.103 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 44 3168 1 2025-10-04 09:58:12.826 00:00:00.000 UDP 28.104.0.1:54796 -> 198.28.0.2:53 1 64 1 2025-10-04 09:58:12.826 00:00:00.000 UDP 28.104.0.1:53860 -> 198.28.0.2:53 1 64 1 2025-10-04 09:58:12.834 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54796 1 109 1 2025-10-04 09:58:12.834 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53860 1 80 1 Summary: total flows: 353, total bytes: 98733, total packets: 1453, avg bps: 204, avg pps: 0, avg bpp: 67 Time window: 2025-10-04 08:54:46 - 2025-10-04 09:59:04 Total flows processed: 353, passed: 353, Blocks skipped: 0, Bytes read: 36776 Sys: 0.0051s User: 0.0010s Wall: 0.0033s flows/second: 105779.0 Runtime: 0.0034s