Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-18 23:59:37.471 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-18 23:54:53.414 00:05:51.010 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-18 23:59:54.230 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57566 1 109 1 2025-10-18 23:59:54.230 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55994 1 80 1 2025-10-18 23:59:54.219 00:00:00.000 UDP 28.104.0.1:57566 -> 198.28.0.2:53 1 64 1 2025-10-18 23:59:54.219 00:00:00.000 UDP 28.104.0.1:55994 -> 198.28.0.2:53 1 64 1 2025-10-18 23:55:53.432 00:05:50.944 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-19 00:00:54.524 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34282 1 80 1 2025-10-19 00:00:54.524 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57579 1 109 1 2025-10-19 00:00:54.515 00:00:00.000 UDP 28.104.0.1:34282 -> 198.28.0.2:53 1 64 1 2025-10-19 00:00:54.515 00:00:00.000 UDP 28.104.0.1:57579 -> 198.28.0.2:53 1 64 1 2025-10-18 23:56:53.424 00:05:50.953 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-19 00:01:54.814 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58261 1 109 1 2025-10-19 00:01:54.814 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43230 1 80 1 2025-10-18 23:59:53.423 00:02:00.090 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-19 00:01:54.803 00:00:00.000 UDP 28.104.0.1:58261 -> 198.28.0.2:53 1 64 1 2025-10-19 00:01:54.804 00:00:00.000 UDP 28.104.0.1:43230 -> 198.28.0.2:53 1 64 1 2025-10-18 23:58:43.367 00:05:10.009 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2580 1 2025-10-19 00:02:55.098 00:00:00.000 UDP 28.104.0.1:34900 -> 198.28.0.2:53 1 64 1 2025-10-19 00:02:55.098 00:00:00.000 UDP 28.104.0.1:45850 -> 198.28.0.2:53 1 64 1 2025-10-19 00:02:55.108 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45850 1 80 1 2025-10-19 00:02:55.108 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34900 1 109 1 2025-10-19 00:02:53.423 00:01:00.091 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-18 23:59:53.227 00:04:00.197 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-19 00:03:55.407 00:00:00.000 UDP 28.104.0.1:33268 -> 198.28.0.2:53 1 64 1 2025-10-19 00:03:55.407 00:00:00.000 UDP 28.104.0.1:49104 -> 198.28.0.2:53 1 64 1 2025-10-19 00:03:55.418 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49104 1 109 1 2025-10-19 00:03:55.419 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33268 1 80 1 2025-10-19 00:04:37.479 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-18 23:59:53.423 00:05:50.965 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-19 00:04:55.729 00:00:00.000 UDP 28.104.0.1:34100 -> 198.28.0.2:53 1 64 1 2025-10-19 00:04:55.729 00:00:00.000 UDP 28.104.0.1:43283 -> 198.28.0.2:53 1 64 1 2025-10-19 00:04:55.739 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34100 1 109 1 2025-10-19 00:04:55.739 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43283 1 80 1 2025-10-19 00:00:53.415 00:05:51.013 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-19 00:04:53.425 00:01:00.090 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-19 00:04:53.229 00:01:00.196 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-19 00:05:56.056 00:00:00.000 UDP 28.104.0.1:34115 -> 198.28.0.2:53 1 64 1 2025-10-19 00:05:56.055 00:00:00.000 UDP 28.104.0.1:47462 -> 198.28.0.2:53 1 64 1 2025-10-19 00:05:56.067 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34115 1 80 1 2025-10-19 00:05:56.066 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47462 1 109 1 2025-10-19 00:01:53.433 00:05:50.944 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-19 00:06:53.424 00:00:00.090 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 123 1 2025-10-19 00:06:56.432 00:00:00.000 UDP 28.104.0.1:53782 -> 198.28.0.2:53 1 64 1 2025-10-19 00:06:56.432 00:00:00.000 UDP 28.104.0.1:50333 -> 198.28.0.2:53 1 64 1 2025-10-19 00:06:56.442 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50333 1 80 1 2025-10-19 00:06:56.442 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53782 1 109 1 2025-10-19 00:02:53.424 00:05:50.955 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-19 00:07:56.754 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48635 1 109 1 2025-10-19 00:07:56.754 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50347 1 80 1 2025-10-19 00:07:56.745 00:00:00.000 UDP 28.104.0.1:48635 -> 198.28.0.2:53 1 64 1 2025-10-19 00:07:56.745 00:00:00.000 UDP 28.104.0.1:50347 -> 198.28.0.2:53 1 64 1 2025-10-19 00:04:03.375 00:05:10.007 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2456 1 2025-10-19 00:07:53.425 00:01:00.090 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-19 00:06:53.229 00:02:00.196 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-10-19 00:08:57.062 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32896 1 80 1 2025-10-19 00:08:57.062 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58406 1 109 1 2025-10-19 00:08:57.053 00:00:00.000 UDP 28.104.0.1:32896 -> 198.28.0.2:53 1 64 1 2025-10-19 00:08:57.052 00:00:00.000 UDP 28.104.0.1:58406 -> 198.28.0.2:53 1 64 1 2025-10-19 00:09:37.846 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-19 00:09:57.396 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38935 1 109 1 2025-10-19 00:09:57.395 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46248 1 80 1 2025-10-19 00:09:57.384 00:00:00.000 UDP 28.104.0.1:46248 -> 198.28.0.2:53 1 64 1 2025-10-19 00:09:57.384 00:00:00.000 UDP 28.104.0.1:38935 -> 198.28.0.2:53 1 64 1 2025-10-19 00:05:53.424 00:05:50.966 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-19 00:09:53.424 00:01:00.092 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-19 00:09:53.229 00:01:00.195 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-19 00:10:57.676 00:00:00.000 UDP 28.104.0.1:55442 -> 198.28.0.2:53 1 64 1 2025-10-19 00:10:57.676 00:00:00.000 UDP 28.104.0.1:39330 -> 198.28.0.2:53 1 64 1 2025-10-19 00:10:57.688 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39330 1 80 1 2025-10-19 00:10:57.689 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55442 1 109 1 2025-10-19 00:06:53.415 00:05:51.015 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-19 00:11:57.944 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35003 1 80 1 2025-10-19 00:11:57.944 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38165 1 109 1 2025-10-19 00:11:57.935 00:00:00.000 UDP 28.104.0.1:38165 -> 198.28.0.2:53 1 64 1 2025-10-19 00:11:57.935 00:00:00.000 UDP 28.104.0.1:35003 -> 198.28.0.2:53 1 64 1 2025-10-19 00:07:53.435 00:05:50.946 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-19 00:12:58.247 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48495 1 80 1 2025-10-19 00:12:58.247 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42855 1 109 1 2025-10-19 00:12:58.238 00:00:00.000 UDP 28.104.0.1:48495 -> 198.28.0.2:53 1 64 1 2025-10-19 00:12:58.239 00:00:00.000 UDP 28.104.0.1:42855 -> 198.28.0.2:53 1 64 1 2025-10-19 00:09:23.383 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2536 1 2025-10-19 00:08:53.427 00:05:50.954 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-19 00:11:53.424 00:02:00.092 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-19 00:13:58.830 00:00:00.000 UDP 28.104.0.1:38939 -> 198.28.0.2:53 1 64 1 2025-10-19 00:13:58.831 00:00:00.000 UDP 28.104.0.1:50540 -> 198.28.0.2:53 1 64 1 2025-10-19 00:13:58.840 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38939 1 109 1 2025-10-19 00:13:58.840 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50540 1 80 1 2025-10-19 00:14:38.259 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-19 00:14:59.131 00:00:00.000 UDP 28.104.0.1:56334 -> 198.28.0.2:53 1 64 1 2025-10-19 00:14:59.131 00:00:00.000 UDP 28.104.0.1:42240 -> 198.28.0.2:53 1 64 1 2025-10-19 00:14:59.141 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42240 1 109 1 2025-10-19 00:14:59.141 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56334 1 80 1 2025-10-19 00:14:53.425 00:01:00.092 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-19 00:11:53.230 00:04:00.195 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-19 00:15:59.426 00:00:00.000 UDP 28.104.0.1:47320 -> 198.28.0.2:53 1 64 1 2025-10-19 00:15:59.426 00:00:00.000 UDP 28.104.0.1:60971 -> 198.28.0.2:53 1 64 1 2025-10-19 00:15:59.441 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60971 1 80 1 2025-10-19 00:15:59.438 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47320 1 109 1 2025-10-19 00:11:53.424 00:05:50.967 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-19 00:16:59.718 00:00:00.000 UDP 28.104.0.1:47690 -> 198.28.0.2:53 1 64 1 2025-10-19 00:16:59.718 00:00:00.000 UDP 28.104.0.1:47383 -> 198.28.0.2:53 1 64 1 2025-10-19 00:16:59.728 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47383 1 80 1 2025-10-19 00:16:59.728 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47690 1 109 1 2025-10-19 00:12:53.417 00:05:51.014 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-19 00:18:00.031 00:00:00.000 UDP 28.104.0.1:42515 -> 198.28.0.2:53 1 64 1 2025-10-19 00:18:00.034 00:00:00.000 UDP 28.104.0.1:45725 -> 198.28.0.2:53 1 64 1 2025-10-19 00:18:00.045 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45725 1 109 1 2025-10-19 00:18:00.041 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42515 1 80 1 2025-10-19 00:13:53.435 00:05:50.946 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-19 00:16:53.425 00:02:00.092 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-19 00:14:43.388 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 38 2760 1 2025-10-19 00:19:00.324 00:00:00.000 UDP 28.104.0.1:48201 -> 198.28.0.2:53 1 64 1 2025-10-19 00:19:00.324 00:00:00.000 UDP 28.104.0.1:60558 -> 198.28.0.2:53 1 64 1 2025-10-19 00:19:00.335 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48201 1 80 1 2025-10-19 00:19:00.335 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60558 1 109 1 2025-10-19 00:19:37.970 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-19 00:14:53.427 00:05:50.955 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-19 00:20:00.616 00:00:00.000 UDP 28.104.0.1:35460 -> 198.28.0.2:53 1 64 1 2025-10-19 00:20:00.616 00:00:00.000 UDP 28.104.0.1:36528 -> 198.28.0.2:53 1 64 1 2025-10-19 00:20:00.627 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36528 1 109 1 2025-10-19 00:20:00.627 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35460 1 80 1 2025-10-19 00:19:53.434 00:01:00.085 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-19 00:16:53.231 00:04:00.203 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-19 00:21:00.920 00:00:00.000 UDP 28.104.0.1:56308 -> 198.28.0.2:53 1 64 1 2025-10-19 00:21:00.920 00:00:00.000 UDP 28.104.0.1:45209 -> 198.28.0.2:53 1 64 1 2025-10-19 00:21:00.930 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45209 1 80 1 2025-10-19 00:21:00.930 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56308 1 109 1 2025-10-19 00:22:01.230 00:00:00.000 UDP 28.104.0.1:42576 -> 198.28.0.2:53 1 64 1 2025-10-19 00:22:01.230 00:00:00.000 UDP 28.104.0.1:37380 -> 198.28.0.2:53 1 64 1 2025-10-19 00:22:01.241 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42576 1 109 1 2025-10-19 00:22:01.244 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37380 1 80 1 2025-10-19 00:17:53.425 00:05:50.966 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-19 00:23:01.526 00:00:00.000 UDP 28.104.0.1:42719 -> 198.28.0.2:53 1 64 1 2025-10-19 00:23:01.526 00:00:00.000 UDP 28.104.0.1:38585 -> 198.28.0.2:53 1 64 1 2025-10-19 00:23:01.536 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42719 1 109 1 2025-10-19 00:23:01.536 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38585 1 80 1 2025-10-19 00:18:53.418 00:05:51.015 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-19 00:21:53.433 00:02:00.086 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-19 00:24:01.833 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46074 1 80 1 2025-10-19 00:24:01.834 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55438 1 109 1 2025-10-19 00:24:01.823 00:00:00.000 UDP 28.104.0.1:55438 -> 198.28.0.2:53 1 64 1 2025-10-19 00:24:01.822 00:00:00.000 UDP 28.104.0.1:46074 -> 198.28.0.2:53 1 64 1 2025-10-19 00:20:03.394 00:05:10.009 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2612 1 2025-10-19 00:24:37.886 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-19 00:19:53.444 00:05:50.939 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-19 00:25:02.150 00:00:00.000 UDP 28.104.0.1:38214 -> 198.28.0.2:53 1 64 1 2025-10-19 00:25:02.150 00:00:00.000 UDP 28.104.0.1:59874 -> 198.28.0.2:53 1 64 1 2025-10-19 00:25:02.160 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38214 1 109 1 2025-10-19 00:25:02.160 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59874 1 80 1 2025-10-19 00:20:53.429 00:05:50.955 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-19 00:24:53.434 00:01:00.085 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-19 00:21:53.233 00:04:00.201 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-19 00:26:02.554 00:00:00.000 UDP 28.104.0.1:33128 -> 198.28.0.2:53 1 64 1 2025-10-19 00:26:02.554 00:00:00.000 UDP 28.104.0.1:57042 -> 198.28.0.2:53 1 64 1 2025-10-19 00:26:02.565 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33128 1 109 1 2025-10-19 00:26:02.565 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57042 1 80 1 2025-10-19 00:27:02.875 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53339 1 109 1 2025-10-19 00:27:02.875 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54090 1 80 1 2025-10-19 00:27:02.863 00:00:00.000 UDP 28.104.0.1:54090 -> 198.28.0.2:53 1 64 1 2025-10-19 00:27:02.862 00:00:00.000 UDP 28.104.0.1:53339 -> 198.28.0.2:53 1 64 1 2025-10-19 00:28:03.187 00:00:00.000 UDP 28.104.0.1:54949 -> 198.28.0.2:53 1 64 1 2025-10-19 00:28:03.187 00:00:00.000 UDP 28.104.0.1:42012 -> 198.28.0.2:53 1 64 1 2025-10-19 00:28:03.200 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42012 1 80 1 2025-10-19 00:28:03.200 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54949 1 109 1 2025-10-19 00:23:53.434 00:05:50.959 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-19 00:26:53.434 00:02:00.085 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-19 00:29:03.511 00:00:00.000 UDP 28.104.0.1:49458 -> 198.28.0.2:53 1 64 1 2025-10-19 00:29:03.511 00:00:00.000 UDP 28.104.0.1:45275 -> 198.28.0.2:53 1 64 1 2025-10-19 00:29:03.521 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49458 1 109 1 2025-10-19 00:29:03.521 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45275 1 80 1 2025-10-19 00:25:23.401 00:05:10.009 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2580 1 2025-10-19 00:29:38.269 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-19 00:24:53.420 00:05:51.013 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-19 00:30:03.808 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54771 1 80 1 2025-10-19 00:30:03.809 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47521 1 109 1 2025-10-19 00:30:03.800 00:00:00.000 UDP 28.104.0.1:54771 -> 198.28.0.2:53 1 64 1 2025-10-19 00:30:03.801 00:00:00.000 UDP 28.104.0.1:47521 -> 198.28.0.2:53 1 64 1 2025-10-19 00:25:53.445 00:05:50.939 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-19 00:29:53.436 00:01:00.083 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-19 00:26:53.234 00:04:00.202 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-19 00:31:04.510 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36177 1 109 1 2025-10-19 00:31:04.510 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53048 1 80 1 2025-10-19 00:31:04.499 00:00:00.000 UDP 28.104.0.1:36177 -> 198.28.0.2:53 1 64 1 2025-10-19 00:31:04.499 00:00:00.000 UDP 28.104.0.1:53048 -> 198.28.0.2:53 1 64 1 2025-10-19 00:26:53.432 00:05:50.953 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-19 00:32:04.814 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43713 1 109 1 2025-10-19 00:32:04.814 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36658 1 80 1 2025-10-19 00:32:04.804 00:00:00.000 UDP 28.104.0.1:36658 -> 198.28.0.2:53 1 64 1 2025-10-19 00:32:04.804 00:00:00.000 UDP 28.104.0.1:43713 -> 198.28.0.2:53 1 64 1 2025-10-19 00:33:05.093 00:00:00.000 UDP 28.104.0.1:47628 -> 198.28.0.2:53 1 64 1 2025-10-19 00:33:05.093 00:00:00.000 UDP 28.104.0.1:36382 -> 198.28.0.2:53 1 64 1 2025-10-19 00:33:05.103 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47628 1 109 1 2025-10-19 00:33:05.103 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36382 1 80 1 2025-10-19 00:31:53.437 00:02:00.083 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-19 00:34:05.395 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50714 1 80 1 2025-10-19 00:34:05.395 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49762 1 109 1 2025-10-19 00:34:05.385 00:00:00.000 UDP 28.104.0.1:50714 -> 198.28.0.2:53 1 64 1 2025-10-19 00:34:05.385 00:00:00.000 UDP 28.104.0.1:49762 -> 198.28.0.2:53 1 64 1 2025-10-19 00:34:38.295 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-19 00:29:53.436 00:05:50.972 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-19 00:30:43.412 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2464 1 2025-10-19 00:35:05.691 00:00:00.000 UDP 28.104.0.1:51872 -> 198.28.0.2:53 1 64 1 2025-10-19 00:35:05.691 00:00:00.000 UDP 28.104.0.1:41702 -> 198.28.0.2:53 1 64 1 2025-10-19 00:35:05.700 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51872 1 109 1 2025-10-19 00:35:05.700 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41702 1 80 1 2025-10-19 00:30:53.421 00:05:51.027 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-19 00:34:53.438 00:01:00.083 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-19 00:31:53.242 00:04:00.196 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-19 00:36:05.991 00:00:00.000 UDP 28.104.0.1:48162 -> 198.28.0.2:53 1 64 1 2025-10-19 00:36:05.991 00:00:00.000 UDP 28.104.0.1:58823 -> 198.28.0.2:53 1 64 1 2025-10-19 00:36:06.003 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58823 1 109 1 2025-10-19 00:36:06.002 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48162 1 80 1 2025-10-19 00:31:53.447 00:05:50.951 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-19 00:37:06.309 00:00:00.000 UDP 28.104.0.1:49102 -> 198.28.0.2:53 1 64 1 2025-10-19 00:37:06.309 00:00:00.000 UDP 28.104.0.1:39503 -> 198.28.0.2:53 1 64 1 2025-10-19 00:37:06.319 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39503 1 80 1 2025-10-19 00:37:06.320 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49102 1 109 1 2025-10-19 00:32:53.432 00:05:50.967 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-19 00:36:53.237 00:01:00.202 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-19 00:36:53.438 00:01:00.083 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-19 00:38:06.622 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33068 1 109 1 2025-10-19 00:38:06.621 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56378 1 80 1 2025-10-19 00:38:06.611 00:00:00.000 UDP 28.104.0.1:33068 -> 198.28.0.2:53 1 64 1 2025-10-19 00:38:06.611 00:00:00.000 UDP 28.104.0.1:56378 -> 198.28.0.2:53 1 64 1 2025-10-19 00:38:53.439 00:00:00.083 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 123 1 2025-10-19 00:39:06.913 00:00:00.000 UDP 28.104.0.1:33895 -> 198.28.0.2:53 1 64 1 2025-10-19 00:39:06.913 00:00:00.000 UDP 28.104.0.1:43805 -> 198.28.0.2:53 1 64 1 2025-10-19 00:39:06.925 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33895 1 109 1 2025-10-19 00:39:06.925 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43805 1 80 1 2025-10-19 00:39:38.342 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-19 00:40:07.258 00:00:00.000 UDP 28.104.0.1:55306 -> 198.28.0.2:53 1 64 1 2025-10-19 00:40:07.259 00:00:00.000 UDP 28.104.0.1:57780 -> 198.28.0.2:53 1 64 1 2025-10-19 00:40:07.268 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57780 1 80 1 2025-10-19 00:40:07.268 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55306 1 109 1 2025-10-19 00:36:03.416 00:05:10.012 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2400 1 2025-10-19 00:35:53.437 00:05:50.971 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-19 00:38:53.239 00:02:00.203 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-10-19 00:39:53.440 00:01:00.083 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-19 00:41:07.530 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35781 1 80 1 2025-10-19 00:41:07.530 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48980 1 109 1 2025-10-19 00:41:07.519 00:00:00.000 UDP 28.104.0.1:35781 -> 198.28.0.2:53 1 64 1 2025-10-19 00:41:07.519 00:00:00.000 UDP 28.104.0.1:48980 -> 198.28.0.2:53 1 64 1 2025-10-19 00:36:53.423 00:05:51.026 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-19 00:42:07.808 00:00:00.000 UDP 28.104.0.1:47633 -> 198.28.0.2:53 1 64 1 2025-10-19 00:42:07.808 00:00:00.000 UDP 28.104.0.1:39407 -> 198.28.0.2:53 1 64 1 2025-10-19 00:42:07.819 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39407 1 80 1 2025-10-19 00:42:07.819 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47633 1 109 1 2025-10-19 00:37:53.449 00:05:50.950 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-19 00:41:53.240 00:01:00.202 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-19 00:41:53.442 00:01:00.081 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-19 00:43:08.110 00:00:00.000 UDP 28.104.0.1:35372 -> 198.28.0.2:53 1 64 1 2025-10-19 00:43:08.110 00:00:00.000 UDP 28.104.0.1:44910 -> 198.28.0.2:53 1 64 1 2025-10-19 00:43:08.120 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44910 1 80 1 2025-10-19 00:43:08.120 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35372 1 109 1 2025-10-19 00:38:53.434 00:05:50.965 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-19 00:44:08.366 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49895 1 109 1 2025-10-19 00:44:08.366 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46984 1 80 1 2025-10-19 00:44:08.356 00:00:00.000 UDP 28.104.0.1:49895 -> 198.28.0.2:53 1 64 1 2025-10-19 00:44:08.356 00:00:00.000 UDP 28.104.0.1:46984 -> 198.28.0.2:53 1 64 1 2025-10-19 00:44:38.333 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-19 00:45:08.664 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60029 1 80 1 2025-10-19 00:45:08.663 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52791 1 109 1 2025-10-19 00:45:08.654 00:00:00.000 UDP 28.104.0.1:52791 -> 198.28.0.2:53 1 64 1 2025-10-19 00:45:08.654 00:00:00.000 UDP 28.104.0.1:60029 -> 198.28.0.2:53 1 64 1 2025-10-19 00:41:23.428 00:05:10.007 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2704 1 2025-10-19 00:43:53.444 00:02:00.079 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-19 00:46:08.947 00:00:00.000 UDP 28.104.0.1:60466 -> 198.28.0.2:53 1 64 1 2025-10-19 00:46:08.947 00:00:00.000 UDP 28.104.0.1:41121 -> 198.28.0.2:53 1 64 1 2025-10-19 00:46:08.959 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60466 1 80 1 2025-10-19 00:46:08.959 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41121 1 109 1 2025-10-19 00:41:53.442 00:05:50.969 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-19 00:47:09.219 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49931 1 80 1 2025-10-19 00:47:09.219 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41830 1 109 1 2025-10-19 00:47:09.210 00:00:00.000 UDP 28.104.0.1:49931 -> 198.28.0.2:53 1 64 1 2025-10-19 00:47:09.210 00:00:00.000 UDP 28.104.0.1:41830 -> 198.28.0.2:53 1 64 1 2025-10-19 00:42:53.425 00:05:51.026 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-19 00:43:53.247 00:04:00.197 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-19 00:46:53.443 00:01:00.080 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-19 00:48:09.513 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57611 1 109 1 2025-10-19 00:48:09.513 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48405 1 80 1 2025-10-19 00:48:09.504 00:00:00.000 UDP 28.104.0.1:48405 -> 198.28.0.2:53 1 64 1 2025-10-19 00:48:09.504 00:00:00.000 UDP 28.104.0.1:57611 -> 198.28.0.2:53 1 64 1 2025-10-19 00:43:53.453 00:05:50.948 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-19 00:49:09.962 00:00:00.000 UDP 28.104.0.1:53148 -> 198.28.0.2:53 1 64 1 2025-10-19 00:49:09.962 00:00:00.000 UDP 28.104.0.1:35852 -> 198.28.0.2:53 1 64 1 2025-10-19 00:49:09.973 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35852 1 80 1 2025-10-19 00:49:09.973 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53148 1 109 1 2025-10-19 00:49:38.526 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-19 00:44:53.435 00:05:50.967 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-19 00:50:10.816 00:00:00.000 UDP 28.104.0.1:36072 -> 198.28.0.2:53 1 64 1 2025-10-19 00:50:10.816 00:00:00.000 UDP 28.104.0.1:51499 -> 198.28.0.2:53 1 64 1 2025-10-19 00:50:10.829 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51499 1 80 1 2025-10-19 00:50:10.829 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36072 1 109 1 2025-10-19 00:48:53.444 00:02:00.079 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-19 00:46:43.436 00:05:10.025 OSPF 28.0.2.2:0 -> 224.0.0.5:0 38 2692 1 2025-10-19 00:51:11.111 00:00:00.000 UDP 28.104.0.1:46355 -> 198.28.0.2:53 1 64 1 2025-10-19 00:51:11.111 00:00:00.000 UDP 28.104.0.1:51239 -> 198.28.0.2:53 1 64 1 2025-10-19 00:51:11.122 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51239 1 80 1 2025-10-19 00:51:11.122 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46355 1 109 1 2025-10-19 00:52:11.365 00:00:00.000 UDP 28.104.0.1:49098 -> 198.28.0.2:53 1 64 1 2025-10-19 00:52:11.365 00:00:00.000 UDP 28.104.0.1:45607 -> 198.28.0.2:53 1 64 1 2025-10-19 00:52:11.375 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45607 1 109 1 2025-10-19 00:52:11.375 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49098 1 80 1 2025-10-19 00:47:53.443 00:05:50.968 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-19 00:51:53.446 00:01:00.077 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-19 00:48:53.249 00:04:00.197 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-19 00:53:11.660 00:00:00.000 UDP 28.104.0.1:53597 -> 198.28.0.2:53 1 64 1 2025-10-19 00:53:11.660 00:00:00.000 UDP 28.104.0.1:47007 -> 198.28.0.2:53 1 64 1 2025-10-19 00:53:11.671 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53597 1 80 1 2025-10-19 00:53:11.671 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47007 1 109 1 2025-10-19 00:48:53.424 00:05:51.027 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-19 00:54:11.912 00:00:00.000 UDP 28.104.0.1:43052 -> 198.28.0.2:53 1 64 1 2025-10-19 00:54:11.912 00:00:00.000 UDP 28.104.0.1:37259 -> 198.28.0.2:53 1 64 1 2025-10-19 00:54:11.923 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43052 1 109 1 2025-10-19 00:54:11.923 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37259 1 80 1 2025-10-19 00:54:38.405 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-19 00:49:53.456 00:05:50.947 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-19 00:55:12.190 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54536 1 109 1 2025-10-19 00:55:12.190 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45992 1 80 1 2025-10-19 00:55:12.180 00:00:00.000 UDP 28.104.0.1:54536 -> 198.28.0.2:53 1 64 1 2025-10-19 00:55:12.180 00:00:00.000 UDP 28.104.0.1:45992 -> 198.28.0.2:53 1 64 1 2025-10-19 00:50:53.436 00:05:50.967 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-19 00:53:53.456 00:02:00.069 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-19 00:56:12.447 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44167 1 109 1 2025-10-19 00:56:12.447 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60319 1 80 1 2025-10-19 00:52:03.460 00:05:10.004 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2480 1 2025-10-19 00:56:12.436 00:00:00.000 UDP 28.104.0.1:44167 -> 198.28.0.2:53 1 64 1 2025-10-19 00:56:12.436 00:00:00.000 UDP 28.104.0.1:60319 -> 198.28.0.2:53 1 64 1 2025-10-19 00:57:12.724 00:00:00.000 UDP 28.104.0.1:40661 -> 198.28.0.2:53 1 64 1 2025-10-19 00:57:12.724 00:00:00.000 UDP 28.104.0.1:52312 -> 198.28.0.2:53 1 64 1 2025-10-19 00:57:12.734 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40661 1 80 1 2025-10-19 00:57:12.734 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52312 1 109 1 2025-10-19 00:56:53.446 00:01:00.078 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-19 00:53:53.249 00:04:00.198 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-19 00:58:13.044 00:00:00.000 UDP 28.104.0.1:56975 -> 198.28.0.2:53 1 64 1 2025-10-19 00:58:13.044 00:00:00.000 UDP 28.104.0.1:60519 -> 198.28.0.2:53 1 64 1 2025-10-19 00:58:13.055 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60519 1 109 1 2025-10-19 00:58:13.056 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56975 1 80 1 2025-10-19 00:53:53.446 00:05:50.967 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 Summary: total flows: 340, total bytes: 94025, total packets: 1386, avg bps: 193, avg pps: 0, avg bpp: 67 Time window: 2025-10-18 23:54:53 - 2025-10-19 00:59:44 Total flows processed: 340, passed: 340, Blocks skipped: 0, Bytes read: 35424 Sys: 0.0051s User: 0.0020s Wall: 0.0038s flows/second: 89548.7 Runtime: 0.0038s