Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-02 13:55:05.506 00:05:01.990 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-08-02 13:55:05.506 00:05:01.117 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-08-02 13:59:46.474 00:00:00.000 UDP 28.104.0.1:34046 -> 198.28.0.2:53 1 64 1 2025-08-02 13:59:46.475 00:00:00.000 UDP 28.104.0.1:56808 -> 198.28.0.2:53 1 64 1 2025-08-02 13:59:46.484 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56808 1 109 1 2025-08-02 13:59:46.484 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34046 1 80 1 2025-08-02 13:56:06.504 00:05:00.982 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-08-02 14:00:46.778 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42567 1 80 1 2025-08-02 14:00:46.778 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44489 1 109 1 2025-08-02 14:00:46.768 00:00:00.000 UDP 28.104.0.1:42567 -> 198.28.0.2:53 1 64 1 2025-08-02 14:00:46.768 00:00:00.000 UDP 28.104.0.1:44489 -> 198.28.0.2:53 1 64 1 2025-08-02 13:57:05.558 00:05:01.054 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-08-02 13:57:06.659 00:05:00.826 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-08-02 14:01:47.079 00:00:00.000 UDP 28.104.0.1:53611 -> 198.28.0.2:53 1 64 1 2025-08-02 14:01:47.079 00:00:00.000 UDP 28.104.0.1:51289 -> 198.28.0.2:53 1 64 1 2025-08-02 14:01:47.091 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51289 1 80 1 2025-08-02 14:01:47.091 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53611 1 109 1 2025-08-02 13:58:05.518 00:05:01.978 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-08-02 14:02:14.721 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-02 13:58:18.704 00:05:10.007 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2480 1 2025-08-02 14:02:47.367 00:00:00.000 UDP 28.104.0.1:42165 -> 198.28.0.2:53 1 64 1 2025-08-02 14:02:47.367 00:00:00.000 UDP 28.104.0.1:35557 -> 198.28.0.2:53 1 64 1 2025-08-02 14:02:47.378 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35557 1 109 1 2025-08-02 14:02:47.378 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42165 1 80 1 2025-08-02 14:03:47.665 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39070 1 109 1 2025-08-02 14:03:47.665 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41723 1 80 1 2025-08-02 14:03:47.654 00:00:00.000 UDP 28.104.0.1:41723 -> 198.28.0.2:53 1 64 1 2025-08-02 14:03:47.654 00:00:00.000 UDP 28.104.0.1:39070 -> 198.28.0.2:53 1 64 1 2025-08-02 14:04:47.960 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47879 1 80 1 2025-08-02 14:04:47.960 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58778 1 109 1 2025-08-02 14:04:47.951 00:00:00.000 UDP 28.104.0.1:47879 -> 198.28.0.2:53 1 64 1 2025-08-02 14:04:47.951 00:00:00.000 UDP 28.104.0.1:58778 -> 198.28.0.2:53 1 64 1 2025-08-02 14:01:05.507 00:05:01.998 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-08-02 14:01:05.507 00:05:01.126 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-08-02 14:05:48.246 00:00:00.000 UDP 28.104.0.1:59609 -> 198.28.0.2:53 1 64 1 2025-08-02 14:05:48.246 00:00:00.000 UDP 28.104.0.1:59205 -> 198.28.0.2:53 1 64 1 2025-08-02 14:05:48.257 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59205 1 80 1 2025-08-02 14:05:48.257 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59609 1 109 1 2025-08-02 14:02:06.505 00:05:00.991 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-08-02 14:06:48.561 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39830 1 109 1 2025-08-02 14:06:48.560 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60490 1 80 1 2025-08-02 14:06:48.549 00:00:00.000 UDP 28.104.0.1:60490 -> 198.28.0.2:53 1 64 1 2025-08-02 14:06:48.550 00:00:00.000 UDP 28.104.0.1:39830 -> 198.28.0.2:53 1 64 1 2025-08-02 14:03:05.566 00:05:01.058 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-08-02 14:03:06.661 00:05:00.835 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-08-02 14:07:14.250 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-02 14:07:48.819 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39735 1 109 1 2025-08-02 14:07:48.819 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58394 1 80 1 2025-08-02 14:07:48.810 00:00:00.000 UDP 28.104.0.1:58394 -> 198.28.0.2:53 1 64 1 2025-08-02 14:07:48.810 00:00:00.000 UDP 28.104.0.1:39735 -> 198.28.0.2:53 1 64 1 2025-08-02 14:03:38.712 00:05:10.007 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2584 1 2025-08-02 14:04:05.526 00:05:01.970 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-08-02 14:08:49.103 00:00:00.000 UDP 28.104.0.1:55782 -> 198.28.0.2:53 1 64 1 2025-08-02 14:08:49.103 00:00:00.000 UDP 28.104.0.1:43169 -> 198.28.0.2:53 1 64 1 2025-08-02 14:08:49.115 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55782 1 109 1 2025-08-02 14:08:49.115 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43169 1 80 1 2025-08-02 14:09:49.394 00:00:00.000 UDP 28.104.0.1:51572 -> 198.28.0.2:53 1 64 1 2025-08-02 14:09:49.394 00:00:00.000 UDP 28.104.0.1:60412 -> 198.28.0.2:53 1 64 1 2025-08-02 14:09:49.404 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51572 1 109 1 2025-08-02 14:09:49.404 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60412 1 80 1 2025-08-02 14:10:49.652 00:00:00.000 UDP 28.104.0.1:42756 -> 198.28.0.2:53 1 64 1 2025-08-02 14:10:49.652 00:00:00.000 UDP 28.104.0.1:54964 -> 198.28.0.2:53 1 64 1 2025-08-02 14:10:49.662 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54964 1 80 1 2025-08-02 14:10:49.662 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42756 1 109 1 2025-08-02 14:07:05.517 00:05:01.990 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-08-02 14:07:05.517 00:05:01.118 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-08-02 14:11:49.951 00:00:00.000 UDP 28.104.0.1:50840 -> 198.28.0.2:53 1 64 1 2025-08-02 14:11:49.951 00:00:00.000 UDP 28.104.0.1:50821 -> 198.28.0.2:53 1 64 1 2025-08-02 14:11:49.961 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50840 1 80 1 2025-08-02 14:11:49.961 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50821 1 109 1 2025-08-02 14:08:06.507 00:05:00.990 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-08-02 14:12:14.290 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-02 14:12:50.245 00:00:00.000 UDP 28.104.0.1:48741 -> 198.28.0.2:53 1 64 1 2025-08-02 14:12:50.245 00:00:00.000 UDP 28.104.0.1:44238 -> 198.28.0.2:53 1 64 1 2025-08-02 14:12:50.254 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48741 1 109 1 2025-08-02 14:12:50.254 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44238 1 80 1 2025-08-02 14:09:05.569 00:05:01.057 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-08-02 14:09:06.666 00:05:00.836 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-08-02 14:08:58.720 00:05:10.012 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2536 1 2025-08-02 14:13:50.534 00:00:00.000 UDP 28.104.0.1:54280 -> 198.28.0.2:53 1 64 1 2025-08-02 14:13:50.534 00:00:00.000 UDP 28.104.0.1:56591 -> 198.28.0.2:53 1 64 1 2025-08-02 14:13:50.545 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56591 1 80 1 2025-08-02 14:13:50.545 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54280 1 109 1 2025-08-02 14:10:05.532 00:05:01.966 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-08-02 14:14:50.825 00:00:00.000 UDP 28.104.0.1:43730 -> 198.28.0.2:53 1 64 1 2025-08-02 14:14:50.825 00:00:00.000 UDP 28.104.0.1:45742 -> 198.28.0.2:53 1 64 1 2025-08-02 14:14:50.837 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43730 1 109 1 2025-08-02 14:14:50.837 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45742 1 80 1 2025-08-02 14:15:51.125 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35900 1 109 1 2025-08-02 14:15:51.124 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37113 1 80 1 2025-08-02 14:15:51.116 00:00:00.000 UDP 28.104.0.1:35900 -> 198.28.0.2:53 1 64 1 2025-08-02 14:15:51.115 00:00:00.000 UDP 28.104.0.1:37113 -> 198.28.0.2:53 1 64 1 2025-08-02 14:16:51.413 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38912 1 109 1 2025-08-02 14:16:51.413 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37378 1 80 1 2025-08-02 14:16:51.403 00:00:00.000 UDP 28.104.0.1:37378 -> 198.28.0.2:53 1 64 1 2025-08-02 14:16:51.403 00:00:00.000 UDP 28.104.0.1:38912 -> 198.28.0.2:53 1 64 1 2025-08-02 14:13:05.521 00:05:01.987 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-08-02 14:13:05.521 00:05:01.115 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-08-02 14:17:14.324 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-02 14:17:51.695 00:00:00.000 UDP 28.104.0.1:56036 -> 198.28.0.2:53 1 64 1 2025-08-02 14:17:51.695 00:00:00.000 UDP 28.104.0.1:34280 -> 198.28.0.2:53 1 64 1 2025-08-02 14:17:51.705 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56036 1 80 1 2025-08-02 14:17:51.704 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34280 1 109 1 2025-08-02 14:14:06.509 00:05:00.990 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-08-02 14:14:18.732 00:05:10.007 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2668 1 2025-08-02 14:18:51.998 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59412 1 109 1 2025-08-02 14:18:51.998 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40089 1 80 1 2025-08-02 14:18:51.987 00:00:00.000 UDP 28.104.0.1:59412 -> 198.28.0.2:53 1 64 1 2025-08-02 14:18:51.987 00:00:00.000 UDP 28.104.0.1:40089 -> 198.28.0.2:53 1 64 1 2025-08-02 14:15:05.571 00:05:01.055 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-08-02 14:15:06.666 00:05:00.832 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-08-02 14:19:52.243 00:00:00.000 UDP 28.104.0.1:43553 -> 198.28.0.2:53 1 64 1 2025-08-02 14:19:52.244 00:00:00.000 UDP 28.104.0.1:50019 -> 198.28.0.2:53 1 64 1 2025-08-02 14:19:52.253 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50019 1 109 1 2025-08-02 14:19:52.252 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43553 1 80 1 2025-08-02 14:16:05.531 00:05:01.968 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-08-02 14:20:52.535 00:00:00.000 UDP 28.104.0.1:53389 -> 198.28.0.2:53 1 64 1 2025-08-02 14:20:52.536 00:00:00.000 UDP 28.104.0.1:53633 -> 198.28.0.2:53 1 64 1 2025-08-02 14:20:52.547 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53389 1 109 1 2025-08-02 14:20:52.547 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53633 1 80 1 2025-08-02 14:21:52.822 00:00:00.000 UDP 28.104.0.1:35853 -> 198.28.0.2:53 1 64 1 2025-08-02 14:21:52.823 00:00:00.000 UDP 28.104.0.1:53054 -> 198.28.0.2:53 1 64 1 2025-08-02 14:21:52.833 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53054 1 109 1 2025-08-02 14:21:52.832 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35853 1 80 1 2025-08-02 14:22:14.619 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-02 14:22:53.113 00:00:00.000 UDP 28.104.0.1:46307 -> 198.28.0.2:53 1 64 1 2025-08-02 14:22:53.112 00:00:00.000 UDP 28.104.0.1:36468 -> 198.28.0.2:53 1 64 1 2025-08-02 14:22:53.122 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36468 1 80 1 2025-08-02 14:22:53.122 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46307 1 109 1 2025-08-02 14:19:05.532 00:05:01.977 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-08-02 14:19:05.532 00:05:01.105 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-08-02 14:19:38.738 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 38 2740 1 2025-08-02 14:23:53.419 00:00:00.000 UDP 28.104.0.1:41863 -> 198.28.0.2:53 1 64 1 2025-08-02 14:23:53.419 00:00:00.000 UDP 28.104.0.1:57241 -> 198.28.0.2:53 1 64 1 2025-08-02 14:23:53.430 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57241 1 80 1 2025-08-02 14:23:53.430 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41863 1 109 1 2025-08-02 14:20:06.512 00:05:00.987 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-08-02 14:24:53.719 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46351 1 80 1 2025-08-02 14:24:53.719 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35093 1 109 1 2025-08-02 14:24:53.710 00:00:00.000 UDP 28.104.0.1:46351 -> 198.28.0.2:53 1 64 1 2025-08-02 14:24:53.710 00:00:00.000 UDP 28.104.0.1:35093 -> 198.28.0.2:53 1 64 1 2025-08-02 14:21:05.582 00:05:01.045 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-08-02 14:21:06.668 00:05:00.831 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-08-02 14:25:54.014 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57660 1 80 1 2025-08-02 14:25:54.020 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42696 1 109 1 2025-08-02 14:25:54.004 00:00:00.000 UDP 28.104.0.1:57660 -> 198.28.0.2:53 1 64 1 2025-08-02 14:25:54.004 00:00:00.000 UDP 28.104.0.1:42696 -> 198.28.0.2:53 1 64 1 2025-08-02 14:22:05.541 00:05:01.958 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-08-02 14:26:54.315 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59368 1 109 1 2025-08-02 14:26:54.315 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33685 1 80 1 2025-08-02 14:26:54.305 00:00:00.000 UDP 28.104.0.1:59368 -> 198.28.0.2:53 1 64 1 2025-08-02 14:26:54.304 00:00:00.000 UDP 28.104.0.1:33685 -> 198.28.0.2:53 1 64 1 2025-08-02 14:27:14.793 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-02 14:27:54.602 00:00:00.000 UDP 28.104.0.1:54999 -> 198.28.0.2:53 1 64 1 2025-08-02 14:27:54.602 00:00:00.000 UDP 28.104.0.1:42294 -> 198.28.0.2:53 1 64 1 2025-08-02 14:27:54.614 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54999 1 80 1 2025-08-02 14:27:54.614 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42294 1 109 1 2025-08-02 14:28:54.908 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49963 1 109 1 2025-08-02 14:28:54.909 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57494 1 80 1 2025-08-02 14:28:54.898 00:00:00.000 UDP 28.104.0.1:57494 -> 198.28.0.2:53 1 64 1 2025-08-02 14:28:54.898 00:00:00.000 UDP 28.104.0.1:49963 -> 198.28.0.2:53 1 64 1 2025-08-02 14:25:05.533 00:05:01.977 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-08-02 14:25:05.533 00:05:01.104 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-08-02 14:24:58.745 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 33 2256 1 2025-08-02 14:29:55.163 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35902 1 109 1 2025-08-02 14:29:55.163 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60196 1 80 1 2025-08-02 14:29:55.152 00:00:00.000 UDP 28.104.0.1:60196 -> 198.28.0.2:53 1 64 1 2025-08-02 14:29:55.152 00:00:00.000 UDP 28.104.0.1:35902 -> 198.28.0.2:53 1 64 1 2025-08-02 14:26:06.512 00:05:00.988 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-08-02 14:30:55.461 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40411 1 80 1 2025-08-02 14:30:55.461 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53065 1 109 1 2025-08-02 14:30:55.451 00:00:00.000 UDP 28.104.0.1:53065 -> 198.28.0.2:53 1 64 1 2025-08-02 14:30:55.451 00:00:00.000 UDP 28.104.0.1:40411 -> 198.28.0.2:53 1 64 1 2025-08-02 14:27:05.585 00:05:01.044 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-08-02 14:27:06.671 00:05:00.830 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-08-02 14:31:55.740 00:00:00.000 UDP 28.104.0.1:34622 -> 198.28.0.2:53 1 64 1 2025-08-02 14:31:55.739 00:00:00.000 UDP 28.104.0.1:37510 -> 198.28.0.2:53 1 64 1 2025-08-02 14:31:55.750 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37510 1 109 1 2025-08-02 14:31:55.750 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34622 1 80 1 2025-08-02 14:28:05.544 00:05:01.956 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-08-02 14:32:14.881 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-02 14:32:56.054 00:00:00.000 UDP 28.104.0.1:51835 -> 198.28.0.2:53 1 64 1 2025-08-02 14:32:56.055 00:00:00.000 UDP 28.104.0.1:51892 -> 198.28.0.2:53 1 64 1 2025-08-02 14:32:56.065 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51835 1 80 1 2025-08-02 14:32:56.066 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51892 1 109 1 2025-08-02 14:33:56.330 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57772 1 80 1 2025-08-02 14:33:56.330 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43958 1 109 1 2025-08-02 14:33:56.319 00:00:00.000 UDP 28.104.0.1:43958 -> 198.28.0.2:53 1 64 1 2025-08-02 14:33:56.319 00:00:00.000 UDP 28.104.0.1:57772 -> 198.28.0.2:53 1 64 1 2025-08-02 14:30:18.750 00:05:10.008 OSPF 28.0.2.2:0 -> 224.0.0.5:0 38 2824 1 2025-08-02 14:34:56.643 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55367 1 109 1 2025-08-02 14:34:56.643 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47594 1 80 1 2025-08-02 14:34:56.632 00:00:00.000 UDP 28.104.0.1:47594 -> 198.28.0.2:53 1 64 1 2025-08-02 14:34:56.632 00:00:00.000 UDP 28.104.0.1:55367 -> 198.28.0.2:53 1 64 1 2025-08-02 14:31:05.535 00:05:01.977 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-08-02 14:31:05.535 00:05:01.104 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-08-02 14:35:56.944 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41412 1 109 1 2025-08-02 14:35:56.944 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49762 1 80 1 2025-08-02 14:35:56.935 00:00:00.000 UDP 28.104.0.1:41412 -> 198.28.0.2:53 1 64 1 2025-08-02 14:35:56.934 00:00:00.000 UDP 28.104.0.1:49762 -> 198.28.0.2:53 1 64 1 2025-08-02 14:32:06.514 00:05:00.990 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-08-02 14:36:57.246 00:00:00.000 UDP 28.104.0.1:49719 -> 198.28.0.2:53 1 64 1 2025-08-02 14:36:57.245 00:00:00.000 UDP 28.104.0.1:37998 -> 198.28.0.2:53 1 64 1 2025-08-02 14:36:57.256 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37998 1 109 1 2025-08-02 14:36:57.256 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49719 1 80 1 2025-08-02 14:33:05.586 00:05:01.043 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-08-02 14:33:06.671 00:05:00.832 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-08-02 14:37:15.327 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-02 14:37:57.555 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41127 1 109 1 2025-08-02 14:37:57.555 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44459 1 80 1 2025-08-02 14:37:57.546 00:00:00.000 UDP 28.104.0.1:44459 -> 198.28.0.2:53 1 64 1 2025-08-02 14:37:57.546 00:00:00.000 UDP 28.104.0.1:41127 -> 198.28.0.2:53 1 64 1 2025-08-02 14:34:05.545 00:05:01.957 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-08-02 14:38:57.851 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52154 1 109 1 2025-08-02 14:38:57.851 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57996 1 80 1 2025-08-02 14:38:57.842 00:00:00.000 UDP 28.104.0.1:57996 -> 198.28.0.2:53 1 64 1 2025-08-02 14:38:57.842 00:00:00.000 UDP 28.104.0.1:52154 -> 198.28.0.2:53 1 64 1 2025-08-02 14:35:38.759 00:05:10.012 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2416 1 2025-08-02 14:39:58.137 00:00:00.000 UDP 28.104.0.1:38911 -> 198.28.0.2:53 1 64 1 2025-08-02 14:39:58.137 00:00:00.000 UDP 28.104.0.1:54515 -> 198.28.0.2:53 1 64 1 2025-08-02 14:39:58.146 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54515 1 109 1 2025-08-02 14:39:58.146 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38911 1 80 1 2025-08-02 14:40:58.429 00:00:00.000 UDP 28.104.0.1:38250 -> 198.28.0.2:53 1 64 1 2025-08-02 14:40:58.429 00:00:00.000 UDP 28.104.0.1:57305 -> 198.28.0.2:53 1 64 1 2025-08-02 14:40:58.440 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57305 1 80 1 2025-08-02 14:40:58.440 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38250 1 109 1 2025-08-02 14:37:05.536 00:05:01.977 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-08-02 14:37:05.536 00:05:01.108 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-08-02 14:41:58.695 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57046 1 109 1 2025-08-02 14:41:58.694 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34897 1 80 1 2025-08-02 14:41:58.684 00:00:00.000 UDP 28.104.0.1:34897 -> 198.28.0.2:53 1 64 1 2025-08-02 14:41:58.685 00:00:00.000 UDP 28.104.0.1:57046 -> 198.28.0.2:53 1 64 1 2025-08-02 14:38:06.515 00:05:00.988 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-08-02 14:42:14.960 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-02 14:42:58.978 00:00:00.000 UDP 28.104.0.1:48970 -> 198.28.0.2:53 1 64 1 2025-08-02 14:42:58.978 00:00:00.000 UDP 28.104.0.1:48919 -> 198.28.0.2:53 1 64 1 2025-08-02 14:42:58.989 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48970 1 80 1 2025-08-02 14:42:58.989 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48919 1 109 1 2025-08-02 14:39:05.587 00:05:01.047 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-08-02 14:39:06.672 00:05:00.831 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-08-02 14:43:59.229 00:00:00.000 UDP 28.104.0.1:38417 -> 198.28.0.2:53 1 64 1 2025-08-02 14:43:59.229 00:00:00.000 UDP 28.104.0.1:40665 -> 198.28.0.2:53 1 64 1 2025-08-02 14:43:59.239 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38417 1 80 1 2025-08-02 14:43:59.239 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40665 1 109 1 2025-08-02 14:40:05.548 00:05:01.955 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-08-02 14:44:59.482 00:00:00.000 UDP 28.104.0.1:46499 -> 198.28.0.2:53 1 64 1 2025-08-02 14:44:59.481 00:00:00.000 UDP 28.104.0.1:47232 -> 198.28.0.2:53 1 64 1 2025-08-02 14:44:59.492 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46499 1 80 1 2025-08-02 14:44:59.492 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47232 1 109 1 2025-08-02 14:40:58.771 00:05:10.007 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2520 1 2025-08-02 14:45:59.781 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53866 1 80 1 2025-08-02 14:45:59.781 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58172 1 109 1 2025-08-02 14:45:59.771 00:00:00.000 UDP 28.104.0.1:58172 -> 198.28.0.2:53 1 64 1 2025-08-02 14:45:59.771 00:00:00.000 UDP 28.104.0.1:53866 -> 198.28.0.2:53 1 64 1 2025-08-02 14:47:00.088 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56428 1 80 1 2025-08-02 14:47:00.087 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46892 1 109 1 2025-08-02 14:47:00.079 00:00:00.000 UDP 28.104.0.1:56428 -> 198.28.0.2:53 1 64 1 2025-08-02 14:47:00.079 00:00:00.000 UDP 28.104.0.1:46892 -> 198.28.0.2:53 1 64 1 2025-08-02 14:43:05.539 00:05:01.977 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-08-02 14:43:05.539 00:05:01.107 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-08-02 14:47:15.866 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-02 14:48:00.329 00:00:00.000 UDP 28.104.0.1:60350 -> 198.28.0.2:53 1 64 1 2025-08-02 14:48:00.329 00:00:00.000 UDP 28.104.0.1:50746 -> 198.28.0.2:53 1 64 1 2025-08-02 14:48:00.339 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50746 1 80 1 2025-08-02 14:48:00.339 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60350 1 109 1 2025-08-02 14:44:06.515 00:05:00.992 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-08-02 14:49:00.624 00:00:00.000 UDP 28.104.0.1:44598 -> 198.28.0.2:53 1 64 1 2025-08-02 14:49:00.624 00:00:00.000 UDP 28.104.0.1:36669 -> 198.28.0.2:53 1 64 1 2025-08-02 14:49:00.634 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36669 1 109 1 2025-08-02 14:49:00.633 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44598 1 80 1 2025-08-02 14:45:05.590 00:05:01.047 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-08-02 14:45:06.678 00:05:00.829 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-08-02 14:50:00.936 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45070 1 109 1 2025-08-02 14:50:00.936 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52562 1 80 1 2025-08-02 14:50:00.925 00:00:00.000 UDP 28.104.0.1:45070 -> 198.28.0.2:53 1 64 1 2025-08-02 14:50:00.925 00:00:00.000 UDP 28.104.0.1:52562 -> 198.28.0.2:53 1 64 1 2025-08-02 14:46:05.550 00:05:01.957 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-08-02 14:46:18.778 00:05:10.010 OSPF 28.0.2.2:0 -> 224.0.0.5:0 38 2732 1 2025-08-02 14:51:01.195 00:00:00.000 UDP 28.104.0.1:45929 -> 198.28.0.2:53 1 64 1 2025-08-02 14:51:01.195 00:00:00.000 UDP 28.104.0.1:41577 -> 198.28.0.2:53 1 64 1 2025-08-02 14:51:01.206 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41577 1 80 1 2025-08-02 14:51:01.206 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45929 1 109 1 2025-08-02 14:52:01.461 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60978 1 109 1 2025-08-02 14:52:01.462 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49098 1 80 1 2025-08-02 14:52:01.452 00:00:00.000 UDP 28.104.0.1:49098 -> 198.28.0.2:53 1 64 1 2025-08-02 14:52:01.452 00:00:00.000 UDP 28.104.0.1:60978 -> 198.28.0.2:53 1 64 1 2025-08-02 14:52:15.126 00:00:00.030 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-02 14:53:01.755 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54014 1 109 1 2025-08-02 14:53:01.755 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36152 1 80 1 2025-08-02 14:53:01.745 00:00:00.000 UDP 28.104.0.1:36152 -> 198.28.0.2:53 1 64 1 2025-08-02 14:53:01.745 00:00:00.000 UDP 28.104.0.1:54014 -> 198.28.0.2:53 1 64 1 2025-08-02 14:49:05.540 00:05:01.977 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-08-02 14:49:05.540 00:05:01.107 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-08-02 14:54:02.054 00:00:00.000 UDP 28.104.0.1:54124 -> 198.28.0.2:53 1 64 1 2025-08-02 14:54:02.053 00:00:00.000 UDP 28.104.0.1:52481 -> 198.28.0.2:53 1 64 1 2025-08-02 14:54:02.064 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52481 1 80 1 2025-08-02 14:54:02.064 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54124 1 109 1 2025-08-02 14:50:06.520 00:05:00.988 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-08-02 14:55:02.362 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51385 1 109 1 2025-08-02 14:55:02.362 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34814 1 80 1 2025-08-02 14:55:02.352 00:00:00.000 UDP 28.104.0.1:34814 -> 198.28.0.2:53 1 64 1 2025-08-02 14:55:02.352 00:00:00.000 UDP 28.104.0.1:51385 -> 198.28.0.2:53 1 64 1 2025-08-02 14:51:05.593 00:05:01.046 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-08-02 14:51:06.680 00:05:00.829 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-08-02 14:51:38.787 00:05:10.012 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2548 1 2025-08-02 14:56:02.666 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33074 1 80 1 2025-08-02 14:56:02.666 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49206 1 109 1 2025-08-02 14:56:02.655 00:00:00.000 UDP 28.104.0.1:33074 -> 198.28.0.2:53 1 64 1 2025-08-02 14:56:02.655 00:00:00.000 UDP 28.104.0.1:49206 -> 198.28.0.2:53 1 64 1 2025-08-02 14:52:05.551 00:05:01.956 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-08-02 14:57:02.965 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38528 1 109 1 2025-08-02 14:57:02.965 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35383 1 80 1 2025-08-02 14:57:02.953 00:00:00.000 UDP 28.104.0.1:35383 -> 198.28.0.2:53 1 64 1 2025-08-02 14:57:02.953 00:00:00.000 UDP 28.104.0.1:38528 -> 198.28.0.2:53 1 64 1 2025-08-02 14:57:15.315 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-02 14:58:03.245 00:00:00.000 UDP 28.104.0.1:58883 -> 198.28.0.2:53 1 64 1 2025-08-02 14:58:03.245 00:00:00.000 UDP 28.104.0.1:45596 -> 198.28.0.2:53 1 64 1 2025-08-02 14:58:03.256 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58883 1 80 1 2025-08-02 14:58:03.256 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45596 1 109 1 Summary: total flows: 319, total bytes: 94311, total packets: 1389, avg bps: 199, avg pps: 0, avg bpp: 67 Time window: 2025-08-02 13:55:05 - 2025-08-02 14:58:03 Total flows processed: 319, passed: 319, Blocks skipped: 0, Bytes read: 33240 Sys: 0.0035s User: 0.0026s Wall: 0.0041s flows/second: 77559.7 Runtime: 0.0041s