Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-02 08:55:05.408 00:05:01.977 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-08-02 08:55:05.408 00:05:01.126 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-08-02 08:59:11.121 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49411 1 80 1 2025-08-02 08:59:11.121 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36808 1 109 1 2025-08-02 08:59:11.111 00:00:00.000 UDP 28.104.0.1:36808 -> 198.28.0.2:53 1 64 1 2025-08-02 08:59:11.111 00:00:00.000 UDP 28.104.0.1:49411 -> 198.28.0.2:53 1 64 1 2025-08-02 08:56:06.409 00:05:00.967 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-08-02 09:00:11.433 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40313 1 80 1 2025-08-02 09:00:11.433 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41966 1 109 1 2025-08-02 09:00:11.424 00:00:00.000 UDP 28.104.0.1:40313 -> 198.28.0.2:53 1 64 1 2025-08-02 09:00:11.424 00:00:00.000 UDP 28.104.0.1:41966 -> 198.28.0.2:53 1 64 1 2025-08-02 08:57:05.459 00:05:01.067 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-08-02 08:57:06.566 00:05:00.811 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-08-02 09:01:11.745 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54377 1 80 1 2025-08-02 09:01:11.745 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51249 1 109 1 2025-08-02 09:01:11.736 00:00:00.000 UDP 28.104.0.1:51249 -> 198.28.0.2:53 1 64 1 2025-08-02 09:01:11.736 00:00:00.000 UDP 28.104.0.1:54377 -> 198.28.0.2:53 1 64 1 2025-08-02 08:58:05.419 00:05:01.958 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-08-02 09:02:08.579 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-02 09:02:12.065 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49328 1 80 1 2025-08-02 09:02:12.065 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42310 1 109 1 2025-08-02 09:02:12.054 00:00:00.000 UDP 28.104.0.1:49328 -> 198.28.0.2:53 1 64 1 2025-08-02 09:02:12.054 00:00:00.000 UDP 28.104.0.1:42310 -> 198.28.0.2:53 1 64 1 2025-08-02 09:03:12.320 00:00:00.000 UDP 28.104.0.1:53974 -> 198.28.0.2:53 1 64 1 2025-08-02 09:03:12.319 00:00:00.000 UDP 28.104.0.1:51142 -> 198.28.0.2:53 1 64 1 2025-08-02 09:03:12.330 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51142 1 109 1 2025-08-02 09:03:12.330 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53974 1 80 1 2025-08-02 08:59:58.285 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2508 1 2025-08-02 09:04:12.630 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41476 1 80 1 2025-08-02 09:04:12.630 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52932 1 109 1 2025-08-02 09:04:12.620 00:00:00.000 UDP 28.104.0.1:52932 -> 198.28.0.2:53 1 64 1 2025-08-02 09:04:12.620 00:00:00.000 UDP 28.104.0.1:41476 -> 198.28.0.2:53 1 64 1 2025-08-02 09:05:12.877 00:00:00.000 UDP 28.104.0.1:58714 -> 198.28.0.2:53 1 64 1 2025-08-02 09:05:12.876 00:00:00.000 UDP 28.104.0.1:47857 -> 198.28.0.2:53 1 64 1 2025-08-02 09:01:05.409 00:05:01.977 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-08-02 09:01:05.410 00:05:01.125 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-08-02 09:05:12.885 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47857 1 109 1 2025-08-02 09:05:12.886 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58714 1 80 1 2025-08-02 09:02:06.411 00:05:00.966 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-08-02 09:06:13.195 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57184 1 109 1 2025-08-02 09:06:13.195 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45163 1 80 1 2025-08-02 09:06:13.186 00:00:00.000 UDP 28.104.0.1:57184 -> 198.28.0.2:53 1 64 1 2025-08-02 09:06:13.186 00:00:00.000 UDP 28.104.0.1:45163 -> 198.28.0.2:53 1 64 1 2025-08-02 09:03:05.461 00:05:01.065 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-08-02 09:03:06.567 00:05:00.811 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-08-02 09:07:08.230 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-02 09:07:13.490 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56927 1 80 1 2025-08-02 09:07:13.491 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46188 1 109 1 2025-08-02 09:07:13.481 00:00:00.000 UDP 28.104.0.1:46188 -> 198.28.0.2:53 1 64 1 2025-08-02 09:07:13.481 00:00:00.000 UDP 28.104.0.1:56927 -> 198.28.0.2:53 1 64 1 2025-08-02 09:04:05.420 00:05:01.958 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-08-02 09:08:13.791 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47306 1 80 1 2025-08-02 09:08:13.791 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44589 1 109 1 2025-08-02 09:08:13.780 00:00:00.000 UDP 28.104.0.1:44589 -> 198.28.0.2:53 1 64 1 2025-08-02 09:08:13.780 00:00:00.000 UDP 28.104.0.1:47306 -> 198.28.0.2:53 1 64 1 2025-08-02 09:09:14.086 00:00:00.000 UDP 28.104.0.1:49843 -> 198.28.0.2:53 1 64 1 2025-08-02 09:09:14.086 00:00:00.000 UDP 28.104.0.1:58219 -> 198.28.0.2:53 1 64 1 2025-08-02 09:09:14.096 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58219 1 109 1 2025-08-02 09:09:14.096 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49843 1 80 1 2025-08-02 09:05:18.267 00:05:10.028 OSPF 28.0.2.2:0 -> 224.0.0.5:0 39 2820 1 2025-08-02 09:10:14.377 00:00:00.000 UDP 28.104.0.1:43420 -> 198.28.0.2:53 1 64 1 2025-08-02 09:10:14.378 00:00:00.000 UDP 28.104.0.1:32789 -> 198.28.0.2:53 1 64 1 2025-08-02 09:10:14.387 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32789 1 80 1 2025-08-02 09:10:14.386 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43420 1 109 1 2025-08-02 09:07:05.412 00:05:01.976 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-08-02 09:07:05.412 00:05:01.126 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-08-02 09:11:14.679 00:00:00.000 UDP 28.104.0.1:60203 -> 198.28.0.2:53 1 64 1 2025-08-02 09:11:14.679 00:00:00.000 UDP 28.104.0.1:37006 -> 198.28.0.2:53 1 64 1 2025-08-02 09:11:14.690 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60203 1 109 1 2025-08-02 09:11:14.690 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37006 1 80 1 2025-08-02 09:12:08.276 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-02 09:08:06.414 00:05:00.966 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-08-02 09:12:14.991 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37986 1 80 1 2025-08-02 09:12:14.991 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53499 1 109 1 2025-08-02 09:12:14.980 00:00:00.000 UDP 28.104.0.1:53499 -> 198.28.0.2:53 1 64 1 2025-08-02 09:12:14.979 00:00:00.000 UDP 28.104.0.1:37986 -> 198.28.0.2:53 1 64 1 2025-08-02 09:09:05.463 00:05:01.064 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-08-02 09:09:06.569 00:05:00.810 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-08-02 09:13:15.254 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40526 1 80 1 2025-08-02 09:13:15.254 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60733 1 109 1 2025-08-02 09:13:15.244 00:00:00.000 UDP 28.104.0.1:60733 -> 198.28.0.2:53 1 64 1 2025-08-02 09:13:15.244 00:00:00.000 UDP 28.104.0.1:40526 -> 198.28.0.2:53 1 64 1 2025-08-02 09:10:05.422 00:05:01.956 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-08-02 09:14:15.551 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40582 1 109 1 2025-08-02 09:14:15.551 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46770 1 80 1 2025-08-02 09:14:15.540 00:00:00.000 UDP 28.104.0.1:46770 -> 198.28.0.2:53 1 64 1 2025-08-02 09:14:15.540 00:00:00.000 UDP 28.104.0.1:40582 -> 198.28.0.2:53 1 64 1 2025-08-02 09:10:38.294 00:05:10.004 OSPF 28.0.2.2:0 -> 224.0.0.5:0 33 2256 1 2025-08-02 09:15:15.801 00:00:00.000 UDP 28.104.0.1:38693 -> 198.28.0.2:53 1 64 1 2025-08-02 09:15:15.801 00:00:00.000 UDP 28.104.0.1:52271 -> 198.28.0.2:53 1 64 1 2025-08-02 09:15:15.813 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38693 1 80 1 2025-08-02 09:15:15.813 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52271 1 109 1 2025-08-02 09:16:16.104 00:00:00.000 UDP 28.104.0.1:38731 -> 198.28.0.2:53 1 64 1 2025-08-02 09:16:16.104 00:00:00.000 UDP 28.104.0.1:44382 -> 198.28.0.2:53 1 64 1 2025-08-02 09:16:16.116 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38731 1 109 1 2025-08-02 09:16:16.116 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44382 1 80 1 2025-08-02 09:17:08.802 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-02 09:13:05.414 00:05:01.979 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-08-02 09:13:05.414 00:05:01.129 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-08-02 09:17:16.405 00:00:00.000 UDP 28.104.0.1:60092 -> 198.28.0.2:53 1 64 1 2025-08-02 09:17:16.405 00:00:00.000 UDP 28.104.0.1:37016 -> 198.28.0.2:53 1 64 1 2025-08-02 09:17:16.413 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37016 1 109 1 2025-08-02 09:17:16.413 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60092 1 80 1 2025-08-02 09:14:06.417 00:05:00.967 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-08-02 09:18:16.706 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33105 1 109 1 2025-08-02 09:18:16.706 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49286 1 80 1 2025-08-02 09:18:16.696 00:00:00.000 UDP 28.104.0.1:49286 -> 198.28.0.2:53 1 64 1 2025-08-02 09:18:16.696 00:00:00.000 UDP 28.104.0.1:33105 -> 198.28.0.2:53 1 64 1 2025-08-02 09:15:05.465 00:05:01.069 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-08-02 09:15:06.571 00:05:00.813 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-08-02 09:19:17.004 00:00:00.000 UDP 28.104.0.1:51389 -> 198.28.0.2:53 1 64 1 2025-08-02 09:19:17.004 00:00:00.000 UDP 28.104.0.1:42265 -> 198.28.0.2:53 1 64 1 2025-08-02 09:19:17.020 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51389 1 109 1 2025-08-02 09:19:17.014 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42265 1 80 1 2025-08-02 09:16:05.428 00:05:01.955 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-08-02 09:15:58.299 00:05:10.008 OSPF 28.0.2.2:0 -> 224.0.0.5:0 38 2824 1 2025-08-02 09:20:17.321 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47127 1 80 1 2025-08-02 09:20:17.321 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47617 1 109 1 2025-08-02 09:20:17.311 00:00:00.000 UDP 28.104.0.1:47617 -> 198.28.0.2:53 1 64 1 2025-08-02 09:20:17.311 00:00:00.000 UDP 28.104.0.1:47127 -> 198.28.0.2:53 1 64 1 2025-08-02 09:21:17.608 00:00:00.000 UDP 28.104.0.1:38667 -> 198.28.0.2:53 1 64 1 2025-08-02 09:21:17.608 00:00:00.000 UDP 28.104.0.1:35064 -> 198.28.0.2:53 1 64 1 2025-08-02 09:21:17.617 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38667 1 109 1 2025-08-02 09:21:17.617 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35064 1 80 1 2025-08-02 09:22:08.521 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-02 09:22:17.905 00:00:00.000 UDP 28.104.0.1:36055 -> 198.28.0.2:53 1 64 1 2025-08-02 09:22:17.905 00:00:00.000 UDP 28.104.0.1:59019 -> 198.28.0.2:53 1 64 1 2025-08-02 09:22:17.915 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59019 1 80 1 2025-08-02 09:22:17.915 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36055 1 109 1 2025-08-02 09:19:05.419 00:05:01.975 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-08-02 09:19:05.419 00:05:01.125 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-08-02 09:23:18.205 00:00:00.000 UDP 28.104.0.1:58538 -> 198.28.0.2:53 1 64 1 2025-08-02 09:23:18.205 00:00:00.000 UDP 28.104.0.1:57238 -> 198.28.0.2:53 1 64 1 2025-08-02 09:23:18.216 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57238 1 109 1 2025-08-02 09:23:18.216 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58538 1 80 1 2025-08-02 09:20:06.416 00:05:00.967 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-08-02 09:24:18.562 00:00:00.000 UDP 28.104.0.1:34681 -> 198.28.0.2:53 1 64 1 2025-08-02 09:24:18.563 00:00:00.000 UDP 28.104.0.1:60414 -> 198.28.0.2:53 1 64 1 2025-08-02 09:24:18.574 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60414 1 109 1 2025-08-02 09:24:18.573 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34681 1 80 1 2025-08-02 09:21:05.468 00:05:01.065 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-08-02 09:21:06.572 00:05:00.811 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-08-02 09:25:18.852 00:00:00.000 UDP 28.104.0.1:51229 -> 198.28.0.2:53 1 64 1 2025-08-02 09:25:18.852 00:00:00.000 UDP 28.104.0.1:34996 -> 198.28.0.2:53 1 64 1 2025-08-02 09:25:18.862 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51229 1 109 1 2025-08-02 09:25:18.864 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34996 1 80 1 2025-08-02 09:21:18.308 00:05:10.004 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2616 1 2025-08-02 09:22:05.428 00:05:01.955 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-08-02 09:26:19.176 00:00:00.000 UDP 28.104.0.1:47234 -> 198.28.0.2:53 1 64 1 2025-08-02 09:26:19.177 00:00:00.000 UDP 28.104.0.1:53253 -> 198.28.0.2:53 1 64 1 2025-08-02 09:26:19.190 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53253 1 109 1 2025-08-02 09:26:19.190 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47234 1 80 1 2025-08-02 09:27:08.584 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-02 09:27:19.488 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51464 1 109 1 2025-08-02 09:27:19.488 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59040 1 80 1 2025-08-02 09:27:19.479 00:00:00.000 UDP 28.104.0.1:59040 -> 198.28.0.2:53 1 64 1 2025-08-02 09:27:19.478 00:00:00.000 UDP 28.104.0.1:51464 -> 198.28.0.2:53 1 64 1 2025-08-02 09:28:19.777 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32873 1 80 1 2025-08-02 09:28:19.776 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38973 1 109 1 2025-08-02 09:28:19.767 00:00:00.000 UDP 28.104.0.1:38973 -> 198.28.0.2:53 1 64 1 2025-08-02 09:28:19.767 00:00:00.000 UDP 28.104.0.1:32873 -> 198.28.0.2:53 1 64 1 2025-08-02 09:25:05.421 00:05:01.974 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-08-02 09:25:05.421 00:05:01.124 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-08-02 09:29:20.080 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55680 1 109 1 2025-08-02 09:29:20.080 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60718 1 80 1 2025-08-02 09:29:20.071 00:00:00.000 UDP 28.104.0.1:60718 -> 198.28.0.2:53 1 64 1 2025-08-02 09:29:20.071 00:00:00.000 UDP 28.104.0.1:55680 -> 198.28.0.2:53 1 64 1 2025-08-02 09:26:06.419 00:05:00.966 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-08-02 09:30:20.384 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55267 1 80 1 2025-08-02 09:30:20.384 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44541 1 109 1 2025-08-02 09:30:20.374 00:00:00.000 UDP 28.104.0.1:44541 -> 198.28.0.2:53 1 64 1 2025-08-02 09:30:20.374 00:00:00.000 UDP 28.104.0.1:55267 -> 198.28.0.2:53 1 64 1 2025-08-02 09:26:38.312 00:05:10.016 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2320 1 2025-08-02 09:27:05.473 00:05:01.062 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-08-02 09:27:06.575 00:05:00.810 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-08-02 09:31:20.668 00:00:00.000 UDP 28.104.0.1:43003 -> 198.28.0.2:53 1 64 1 2025-08-02 09:31:20.668 00:00:00.000 UDP 28.104.0.1:36147 -> 198.28.0.2:53 1 64 1 2025-08-02 09:31:20.679 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36147 1 80 1 2025-08-02 09:31:20.679 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43003 1 109 1 2025-08-02 09:28:05.433 00:05:01.952 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-08-02 09:32:08.888 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-02 09:32:20.971 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44706 1 80 1 2025-08-02 09:32:20.971 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38107 1 109 1 2025-08-02 09:32:20.961 00:00:00.000 UDP 28.104.0.1:44706 -> 198.28.0.2:53 1 64 1 2025-08-02 09:32:20.961 00:00:00.000 UDP 28.104.0.1:38107 -> 198.28.0.2:53 1 64 1 2025-08-02 09:33:21.233 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45248 1 80 1 2025-08-02 09:33:21.233 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44936 1 109 1 2025-08-02 09:33:21.220 00:00:00.000 UDP 28.104.0.1:45248 -> 198.28.0.2:53 1 64 1 2025-08-02 09:33:21.220 00:00:00.000 UDP 28.104.0.1:44936 -> 198.28.0.2:53 1 64 1 2025-08-02 09:34:21.509 00:00:00.000 UDP 28.104.0.1:52724 -> 198.28.0.2:53 1 64 1 2025-08-02 09:34:21.509 00:00:00.000 UDP 28.104.0.1:36803 -> 198.28.0.2:53 1 64 1 2025-08-02 09:34:21.523 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52724 1 109 1 2025-08-02 09:34:21.519 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36803 1 80 1 2025-08-02 09:31:05.424 00:05:01.122 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-08-02 09:31:05.424 00:05:01.972 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-08-02 09:35:21.813 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60396 1 109 1 2025-08-02 09:35:21.813 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35177 1 80 1 2025-08-02 09:35:21.802 00:00:00.000 UDP 28.104.0.1:35177 -> 198.28.0.2:53 1 64 1 2025-08-02 09:35:21.802 00:00:00.000 UDP 28.104.0.1:60396 -> 198.28.0.2:53 1 64 1 2025-08-02 09:31:58.329 00:05:10.003 OSPF 28.0.2.2:0 -> 224.0.0.5:0 39 2756 1 2025-08-02 09:32:06.423 00:05:00.963 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-08-02 09:36:22.108 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44531 1 109 1 2025-08-02 09:36:22.108 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40346 1 80 1 2025-08-02 09:36:22.099 00:00:00.000 UDP 28.104.0.1:44531 -> 198.28.0.2:53 1 64 1 2025-08-02 09:36:22.099 00:00:00.000 UDP 28.104.0.1:40346 -> 198.28.0.2:53 1 64 1 2025-08-02 09:33:05.475 00:05:01.062 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-08-02 09:33:06.577 00:05:00.813 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-08-02 09:37:10.145 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-02 09:37:22.389 00:00:00.000 UDP 28.104.0.1:40998 -> 198.28.0.2:53 1 64 1 2025-08-02 09:37:22.389 00:00:00.000 UDP 28.104.0.1:46908 -> 198.28.0.2:53 1 64 1 2025-08-02 09:37:22.401 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46908 1 109 1 2025-08-02 09:37:22.401 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40998 1 80 1 2025-08-02 09:34:05.435 00:05:01.953 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-08-02 09:38:22.692 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46664 1 109 1 2025-08-02 09:38:22.693 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41478 1 80 1 2025-08-02 09:38:22.682 00:00:00.000 UDP 28.104.0.1:41478 -> 198.28.0.2:53 1 64 1 2025-08-02 09:38:22.682 00:00:00.000 UDP 28.104.0.1:46664 -> 198.28.0.2:53 1 64 1 2025-08-02 09:39:22.976 00:00:00.000 UDP 28.104.0.1:42861 -> 198.28.0.2:53 1 64 1 2025-08-02 09:39:22.976 00:00:00.000 UDP 28.104.0.1:53827 -> 198.28.0.2:53 1 64 1 2025-08-02 09:39:22.987 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42861 1 109 1 2025-08-02 09:39:22.988 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53827 1 80 1 2025-08-02 09:40:23.272 00:00:00.000 UDP 28.104.0.1:51406 -> 198.28.0.2:53 1 64 1 2025-08-02 09:40:23.272 00:00:00.000 UDP 28.104.0.1:35066 -> 198.28.0.2:53 1 64 1 2025-08-02 09:40:23.284 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51406 1 109 1 2025-08-02 09:40:23.283 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35066 1 80 1 2025-08-02 09:37:05.427 00:05:01.972 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-08-02 09:37:05.427 00:05:01.120 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-08-02 09:41:23.569 00:00:00.000 UDP 28.104.0.1:50802 -> 198.28.0.2:53 1 64 1 2025-08-02 09:41:23.569 00:00:00.000 UDP 28.104.0.1:51689 -> 198.28.0.2:53 1 64 1 2025-08-02 09:41:23.578 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51689 1 80 1 2025-08-02 09:41:23.579 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50802 1 109 1 2025-08-02 09:37:18.332 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2468 1 2025-08-02 09:38:06.423 00:05:00.965 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-08-02 09:42:08.795 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-02 09:42:23.828 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56869 1 80 1 2025-08-02 09:42:23.828 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58117 1 109 1 2025-08-02 09:42:23.816 00:00:00.000 UDP 28.104.0.1:56869 -> 198.28.0.2:53 1 64 1 2025-08-02 09:42:23.816 00:00:00.000 UDP 28.104.0.1:58117 -> 198.28.0.2:53 1 64 1 2025-08-02 09:39:05.478 00:05:01.060 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-08-02 09:39:06.579 00:05:00.811 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-08-02 09:43:24.118 00:00:00.000 UDP 28.104.0.1:57331 -> 198.28.0.2:53 1 64 1 2025-08-02 09:43:24.118 00:00:00.000 UDP 28.104.0.1:46782 -> 198.28.0.2:53 1 64 1 2025-08-02 09:43:24.127 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57331 1 109 1 2025-08-02 09:43:24.127 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46782 1 80 1 2025-08-02 09:40:05.438 00:05:01.953 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-08-02 09:44:24.440 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40641 1 109 1 2025-08-02 09:44:24.440 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59597 1 80 1 2025-08-02 09:44:24.428 00:00:00.000 UDP 28.104.0.1:59597 -> 198.28.0.2:53 1 64 1 2025-08-02 09:44:24.428 00:00:00.000 UDP 28.104.0.1:40641 -> 198.28.0.2:53 1 64 1 2025-08-02 09:45:24.744 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42160 1 80 1 2025-08-02 09:45:24.744 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45205 1 109 1 2025-08-02 09:45:24.734 00:00:00.000 UDP 28.104.0.1:45205 -> 198.28.0.2:53 1 64 1 2025-08-02 09:45:24.734 00:00:00.000 UDP 28.104.0.1:42160 -> 198.28.0.2:53 1 64 1 2025-08-02 09:46:25.064 00:00:00.000 UDP 28.104.0.1:46519 -> 198.28.0.2:53 1 64 1 2025-08-02 09:46:25.064 00:00:00.000 UDP 28.104.0.1:33351 -> 198.28.0.2:53 1 64 1 2025-08-02 09:46:25.075 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33351 1 109 1 2025-08-02 09:46:25.075 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46519 1 80 1 2025-08-02 09:42:38.337 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2688 1 2025-08-02 09:43:05.427 00:05:01.973 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-08-02 09:43:05.427 00:05:01.120 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-08-02 09:47:08.977 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-02 09:47:25.356 00:00:00.000 UDP 28.104.0.1:44908 -> 198.28.0.2:53 1 64 1 2025-08-02 09:47:25.356 00:00:00.000 UDP 28.104.0.1:57524 -> 198.28.0.2:53 1 64 1 2025-08-02 09:47:25.366 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44908 1 109 1 2025-08-02 09:47:25.366 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57524 1 80 1 2025-08-02 09:44:06.426 00:05:00.966 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-08-02 09:48:25.655 00:00:00.000 UDP 28.104.0.1:56100 -> 198.28.0.2:53 1 64 1 2025-08-02 09:48:25.655 00:00:00.000 UDP 28.104.0.1:42332 -> 198.28.0.2:53 1 64 1 2025-08-02 09:48:25.664 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56100 1 80 1 2025-08-02 09:48:25.664 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42332 1 109 1 2025-08-02 09:45:05.478 00:05:01.061 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-08-02 09:45:06.578 00:05:00.813 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-08-02 09:49:25.969 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53867 1 109 1 2025-08-02 09:49:25.969 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40321 1 80 1 2025-08-02 09:49:25.959 00:00:00.000 UDP 28.104.0.1:40321 -> 198.28.0.2:53 1 64 1 2025-08-02 09:49:25.959 00:00:00.000 UDP 28.104.0.1:53867 -> 198.28.0.2:53 1 64 1 2025-08-02 09:46:05.439 00:05:01.954 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-08-02 09:50:26.224 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32839 1 109 1 2025-08-02 09:50:26.224 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47348 1 80 1 2025-08-02 09:50:26.214 00:00:00.000 UDP 28.104.0.1:47348 -> 198.28.0.2:53 1 64 1 2025-08-02 09:50:26.214 00:00:00.000 UDP 28.104.0.1:32839 -> 198.28.0.2:53 1 64 1 2025-08-02 09:51:26.530 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46328 1 109 1 2025-08-02 09:51:26.527 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46437 1 80 1 2025-08-02 09:51:26.517 00:00:00.000 UDP 28.104.0.1:46328 -> 198.28.0.2:53 1 64 1 2025-08-02 09:51:26.515 00:00:00.000 UDP 28.104.0.1:46437 -> 198.28.0.2:53 1 64 1 2025-08-02 09:47:58.343 00:05:10.002 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2320 1 2025-08-02 09:52:09.036 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-02 09:52:26.850 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49430 1 109 1 2025-08-02 09:52:26.850 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60784 1 80 1 2025-08-02 09:52:26.840 00:00:00.000 UDP 28.104.0.1:60784 -> 198.28.0.2:53 1 64 1 2025-08-02 09:52:26.840 00:00:00.000 UDP 28.104.0.1:49430 -> 198.28.0.2:53 1 64 1 2025-08-02 09:49:05.428 00:05:01.974 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-08-02 09:49:05.428 00:05:01.122 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-08-02 09:53:27.152 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36290 1 109 1 2025-08-02 09:53:27.154 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44829 1 80 1 2025-08-02 09:53:27.142 00:00:00.000 UDP 28.104.0.1:36290 -> 198.28.0.2:53 1 64 1 2025-08-02 09:53:27.142 00:00:00.000 UDP 28.104.0.1:44829 -> 198.28.0.2:53 1 64 1 2025-08-02 09:50:06.426 00:05:00.966 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-08-02 09:54:27.455 00:00:00.000 UDP 28.104.0.1:37487 -> 198.28.0.2:53 1 64 1 2025-08-02 09:54:27.455 00:00:00.000 UDP 28.104.0.1:52981 -> 198.28.0.2:53 1 64 1 2025-08-02 09:54:27.465 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37487 1 80 1 2025-08-02 09:54:27.465 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52981 1 109 1 2025-08-02 09:51:05.478 00:05:01.062 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-08-02 09:51:06.579 00:05:00.813 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-08-02 09:55:27.737 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40152 1 80 1 2025-08-02 09:55:27.737 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44574 1 109 1 2025-08-02 09:55:27.727 00:00:00.000 UDP 28.104.0.1:40152 -> 198.28.0.2:53 1 64 1 2025-08-02 09:55:27.727 00:00:00.000 UDP 28.104.0.1:44574 -> 198.28.0.2:53 1 64 1 2025-08-02 09:52:05.439 00:05:01.954 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-08-02 09:56:28.071 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57965 1 80 1 2025-08-02 09:56:28.071 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59365 1 109 1 2025-08-02 09:56:28.060 00:00:00.000 UDP 28.104.0.1:59365 -> 198.28.0.2:53 1 64 1 2025-08-02 09:56:28.060 00:00:00.000 UDP 28.104.0.1:57965 -> 198.28.0.2:53 1 64 1 2025-08-02 09:57:09.201 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-02 09:53:18.345 00:05:10.008 OSPF 28.0.2.2:0 -> 224.0.0.5:0 38 2696 1 2025-08-02 09:57:28.370 00:00:00.000 UDP 28.104.0.1:48858 -> 198.28.0.2:53 1 64 1 2025-08-02 09:57:28.370 00:00:00.000 UDP 28.104.0.1:35019 -> 198.28.0.2:53 1 64 1 2025-08-02 09:57:28.382 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48858 1 109 1 2025-08-02 09:57:28.382 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35019 1 80 1 2025-08-02 09:58:28.628 00:00:00.000 UDP 28.104.0.1:41544 -> 198.28.0.2:53 1 64 1 2025-08-02 09:58:28.628 00:00:00.000 UDP 28.104.0.1:33851 -> 198.28.0.2:53 1 64 1 2025-08-02 09:58:28.640 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33851 1 80 1 2025-08-02 09:58:28.640 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41544 1 109 1 Summary: total flows: 323, total bytes: 94596, total packets: 1394, avg bps: 198, avg pps: 0, avg bpp: 67 Time window: 2025-08-02 08:55:05 - 2025-08-02 09:58:28 Total flows processed: 323, passed: 323, Blocks skipped: 0, Bytes read: 33656 Sys: 0.0033s User: 0.0033s Wall: 0.0040s flows/second: 80049.6 Runtime: 0.0041s