Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-06-26 10:39:17.992 00:00:00.000 UDP 30.104.0.1:39472 -> 198.30.0.2:53 1 64 1 2025-06-26 10:39:17.992 00:00:00.000 UDP 30.104.0.1:33582 -> 198.30.0.2:53 1 64 1 2025-06-26 10:39:18.027 00:00:00.000 UDP 198.30.0.2:53 -> 30.104.0.1:39472 1 109 1 2025-06-26 10:39:18.016 00:00:00.000 UDP 198.30.0.2:53 -> 30.104.0.1:33582 1 80 1 2025-06-26 10:39:18.332 00:00:13.272 TCP 1.101.0.1:3000 -> 30.104.0.1:59918 81 153851 1 2025-06-26 10:39:18.031 00:00:13.527 TCP 30.104.0.1:59918 -> 1.101.0.1:3000 80 6062 1 2025-06-26 10:40:26.443 00:00:00.000 UDP 30.104.0.1:37863 -> 198.30.0.2:53 1 64 1 2025-06-26 10:40:26.443 00:00:00.000 UDP 30.104.0.1:50853 -> 198.30.0.2:53 1 64 1 2025-06-26 10:40:26.463 00:00:00.000 UDP 198.30.0.2:53 -> 30.104.0.1:50853 1 80 1 2025-06-26 10:40:26.463 00:00:00.000 UDP 198.30.0.2:53 -> 30.104.0.1:37863 1 109 1 2025-06-26 10:40:26.464 00:00:10.208 TCP 30.104.0.1:59116 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:40:26.510 00:00:10.208 TCP 1.101.0.1:3000 -> 30.104.0.1:59116 11 9346 1 2025-06-26 10:41:26.695 00:00:00.000 UDP 30.104.0.1:46870 -> 198.30.0.2:53 1 64 1 2025-06-26 10:41:26.695 00:00:00.000 UDP 30.104.0.1:36294 -> 198.30.0.2:53 1 64 1 2025-06-26 10:41:26.715 00:00:00.000 UDP 198.30.0.2:53 -> 30.104.0.1:46870 1 109 1 2025-06-26 10:41:26.715 00:00:00.000 UDP 198.30.0.2:53 -> 30.104.0.1:36294 1 80 1 2025-06-26 10:41:26.761 00:00:10.245 TCP 1.101.0.1:3000 -> 30.104.0.1:41172 11 9346 1 2025-06-26 10:41:26.716 00:00:10.244 TCP 30.104.0.1:41172 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:42:27.002 00:00:00.000 UDP 198.30.0.2:53 -> 30.104.0.1:38755 1 80 1 2025-06-26 10:42:27.002 00:00:00.000 UDP 198.30.0.2:53 -> 30.104.0.1:37040 1 109 1 2025-06-26 10:42:26.980 00:00:00.000 UDP 30.104.0.1:37040 -> 198.30.0.2:53 1 64 1 2025-06-26 10:42:26.980 00:00:00.000 UDP 30.104.0.1:38755 -> 198.30.0.2:53 1 64 1 2025-06-26 10:42:27.008 00:00:10.240 TCP 30.104.0.1:55468 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:42:27.054 00:00:10.240 TCP 1.101.0.1:3000 -> 30.104.0.1:55468 11 9346 1 2025-06-26 10:38:24.388 00:05:10.004 OSPF 30.104.0.2:0 -> 224.0.0.5:0 32 2048 1 2025-06-26 10:43:27.265 00:00:00.000 UDP 30.104.0.1:52189 -> 198.30.0.2:53 1 64 1 2025-06-26 10:43:27.265 00:00:00.000 UDP 30.104.0.1:52798 -> 198.30.0.2:53 1 64 1 2025-06-26 10:43:27.286 00:00:00.000 UDP 198.30.0.2:53 -> 30.104.0.1:52189 1 109 1 2025-06-26 10:43:27.286 00:00:00.000 UDP 198.30.0.2:53 -> 30.104.0.1:52798 1 80 1 2025-06-26 10:43:27.287 00:00:10.244 TCP 30.104.0.1:52458 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:43:27.332 00:00:10.244 TCP 1.101.0.1:3000 -> 30.104.0.1:52458 11 9346 1 2025-06-26 10:44:27.569 00:00:00.000 UDP 198.30.0.2:53 -> 30.104.0.1:55273 1 80 1 2025-06-26 10:44:27.570 00:00:00.000 UDP 198.30.0.2:53 -> 30.104.0.1:41348 1 109 1 2025-06-26 10:44:27.550 00:00:00.000 UDP 30.104.0.1:55273 -> 198.30.0.2:53 1 64 1 2025-06-26 10:44:27.550 00:00:00.000 UDP 30.104.0.1:41348 -> 198.30.0.2:53 1 64 1 2025-06-26 10:44:27.571 00:00:10.243 TCP 30.104.0.1:47122 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:44:27.616 00:00:10.243 TCP 1.101.0.1:3000 -> 30.104.0.1:47122 11 9346 1 2025-06-26 10:45:27.838 00:00:00.000 UDP 30.104.0.1:36499 -> 198.30.0.2:53 1 64 1 2025-06-26 10:45:27.839 00:00:00.000 UDP 30.104.0.1:42765 -> 198.30.0.2:53 1 64 1 2025-06-26 10:45:27.858 00:00:00.000 UDP 198.30.0.2:53 -> 30.104.0.1:36499 1 80 1 2025-06-26 10:45:27.858 00:00:00.000 UDP 198.30.0.2:53 -> 30.104.0.1:42765 1 109 1 2025-06-26 10:45:27.859 00:00:10.243 TCP 30.104.0.1:48308 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:45:27.905 00:00:10.244 TCP 1.101.0.1:3000 -> 30.104.0.1:48308 11 9346 1 2025-06-26 10:46:28.121 00:00:00.000 UDP 30.104.0.1:47701 -> 198.30.0.2:53 1 64 1 2025-06-26 10:46:28.121 00:00:00.000 UDP 30.104.0.1:39286 -> 198.30.0.2:53 1 64 1 2025-06-26 10:46:28.142 00:00:00.000 UDP 198.30.0.2:53 -> 30.104.0.1:39286 1 80 1 2025-06-26 10:46:28.142 00:00:00.000 UDP 198.30.0.2:53 -> 30.104.0.1:47701 1 109 1 2025-06-26 10:46:28.188 00:00:10.243 TCP 1.101.0.1:3000 -> 30.104.0.1:43402 11 9346 1 2025-06-26 10:46:28.142 00:00:10.244 TCP 30.104.0.1:43402 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:47:28.408 00:00:00.000 UDP 30.104.0.1:51203 -> 198.30.0.2:53 1 64 1 2025-06-26 10:47:28.408 00:00:00.000 UDP 30.104.0.1:59479 -> 198.30.0.2:53 1 64 1 2025-06-26 10:47:28.429 00:00:00.000 UDP 198.30.0.2:53 -> 30.104.0.1:51203 1 109 1 2025-06-26 10:47:28.429 00:00:00.000 UDP 198.30.0.2:53 -> 30.104.0.1:59479 1 80 1 2025-06-26 10:47:28.429 00:00:10.203 TCP 30.104.0.1:40506 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:47:28.475 00:00:10.203 TCP 1.101.0.1:3000 -> 30.104.0.1:40506 11 9346 1 2025-06-26 10:43:44.393 00:05:10.002 OSPF 30.104.0.2:0 -> 224.0.0.5:0 32 2048 1 2025-06-26 10:48:28.652 00:00:00.000 UDP 30.104.0.1:36875 -> 198.30.0.2:53 1 64 1 2025-06-26 10:48:28.652 00:00:00.000 UDP 30.104.0.1:40825 -> 198.30.0.2:53 1 64 1 2025-06-26 10:48:28.672 00:00:00.000 UDP 198.30.0.2:53 -> 30.104.0.1:40825 1 109 1 2025-06-26 10:48:28.672 00:00:00.000 UDP 198.30.0.2:53 -> 30.104.0.1:36875 1 80 1 2025-06-26 10:48:28.719 00:00:10.257 TCP 1.101.0.1:3000 -> 30.104.0.1:53174 11 9346 1 2025-06-26 10:48:28.675 00:00:10.257 TCP 30.104.0.1:53174 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:49:28.969 00:00:00.000 UDP 198.30.0.2:53 -> 30.104.0.1:53556 1 80 1 2025-06-26 10:49:28.968 00:00:00.000 UDP 198.30.0.2:53 -> 30.104.0.1:33362 1 109 1 2025-06-26 10:49:28.947 00:00:00.000 UDP 30.104.0.1:33362 -> 198.30.0.2:53 1 64 1 2025-06-26 10:49:28.947 00:00:00.000 UDP 30.104.0.1:53556 -> 198.30.0.2:53 1 64 1 2025-06-26 10:49:29.015 00:00:10.202 TCP 1.101.0.1:3000 -> 30.104.0.1:35008 11 9346 1 2025-06-26 10:49:28.969 00:00:10.204 TCP 30.104.0.1:35008 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:50:29.210 00:00:00.000 UDP 198.30.0.2:53 -> 30.104.0.1:50081 1 109 1 2025-06-26 10:50:29.210 00:00:00.000 UDP 198.30.0.2:53 -> 30.104.0.1:45280 1 80 1 2025-06-26 10:50:29.188 00:00:00.000 UDP 30.104.0.1:45280 -> 198.30.0.2:53 1 64 1 2025-06-26 10:50:29.189 00:00:00.000 UDP 30.104.0.1:50081 -> 198.30.0.2:53 1 64 1 2025-06-26 10:50:29.209 00:00:10.259 TCP 30.104.0.1:49562 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:50:29.255 00:00:10.258 TCP 1.101.0.1:3000 -> 30.104.0.1:49562 11 9346 1 2025-06-26 10:51:29.507 00:00:00.000 UDP 198.30.0.2:53 -> 30.104.0.1:45564 1 80 1 2025-06-26 10:51:29.507 00:00:00.000 UDP 198.30.0.2:53 -> 30.104.0.1:40208 1 109 1 2025-06-26 10:51:29.486 00:00:00.000 UDP 30.104.0.1:40208 -> 198.30.0.2:53 1 64 1 2025-06-26 10:51:29.486 00:00:00.000 UDP 30.104.0.1:45564 -> 198.30.0.2:53 1 64 1 2025-06-26 10:51:29.553 00:00:10.202 TCP 1.101.0.1:3000 -> 30.104.0.1:49712 11 9346 1 2025-06-26 10:51:29.508 00:00:10.202 TCP 30.104.0.1:49712 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:52:29.747 00:00:00.000 UDP 198.30.0.2:53 -> 30.104.0.1:46285 1 109 1 2025-06-26 10:52:29.747 00:00:00.000 UDP 198.30.0.2:53 -> 30.104.0.1:45181 1 80 1 2025-06-26 10:52:29.727 00:00:00.000 UDP 30.104.0.1:46285 -> 198.30.0.2:53 1 64 1 2025-06-26 10:52:29.727 00:00:00.000 UDP 30.104.0.1:45181 -> 198.30.0.2:53 1 64 1 2025-06-26 10:52:29.753 00:00:10.243 TCP 30.104.0.1:34518 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:52:29.797 00:00:10.244 TCP 1.101.0.1:3000 -> 30.104.0.1:34518 11 9346 1 2025-06-26 10:49:04.397 00:05:10.006 OSPF 30.104.0.2:0 -> 224.0.0.5:0 32 2048 1 2025-06-26 10:53:30.062 00:00:00.000 UDP 198.30.0.2:53 -> 30.104.0.1:54955 1 109 1 2025-06-26 10:53:30.062 00:00:00.000 UDP 198.30.0.2:53 -> 30.104.0.1:49258 1 80 1 2025-06-26 10:53:30.043 00:00:00.000 UDP 30.104.0.1:54955 -> 198.30.0.2:53 1 64 1 2025-06-26 10:53:30.043 00:00:00.000 UDP 30.104.0.1:49258 -> 198.30.0.2:53 1 64 1 2025-06-26 10:53:30.110 00:00:10.246 TCP 1.101.0.1:3000 -> 30.104.0.1:36446 11 9346 1 2025-06-26 10:53:30.063 00:00:10.247 TCP 30.104.0.1:36446 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:54:30.347 00:00:00.000 UDP 198.30.0.2:53 -> 30.104.0.1:35109 1 109 1 2025-06-26 10:54:30.347 00:00:00.000 UDP 198.30.0.2:53 -> 30.104.0.1:34782 1 80 1 2025-06-26 10:54:30.327 00:00:00.000 UDP 30.104.0.1:35109 -> 198.30.0.2:53 1 64 1 2025-06-26 10:54:30.327 00:00:00.000 UDP 30.104.0.1:34782 -> 198.30.0.2:53 1 64 1 2025-06-26 10:54:30.348 00:00:10.245 TCP 30.104.0.1:49588 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:54:30.394 00:00:10.246 TCP 1.101.0.1:3000 -> 30.104.0.1:49588 11 9346 1 2025-06-26 10:55:30.611 00:00:00.000 UDP 30.104.0.1:33726 -> 198.30.0.2:53 1 64 1 2025-06-26 10:55:30.611 00:00:00.000 UDP 30.104.0.1:55242 -> 198.30.0.2:53 1 64 1 2025-06-26 10:55:30.631 00:00:00.000 UDP 198.30.0.2:53 -> 30.104.0.1:55242 1 109 1 2025-06-26 10:55:30.631 00:00:00.000 UDP 198.30.0.2:53 -> 30.104.0.1:33726 1 80 1 2025-06-26 10:55:30.678 00:00:10.246 TCP 1.101.0.1:3000 -> 30.104.0.1:45034 11 9346 1 2025-06-26 10:55:30.633 00:00:10.246 TCP 30.104.0.1:45034 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:56:30.917 00:00:00.000 UDP 198.30.0.2:53 -> 30.104.0.1:56465 1 109 1 2025-06-26 10:56:30.917 00:00:00.000 UDP 198.30.0.2:53 -> 30.104.0.1:44315 1 80 1 2025-06-26 10:56:30.895 00:00:00.000 UDP 30.104.0.1:56465 -> 198.30.0.2:53 1 64 1 2025-06-26 10:56:30.895 00:00:00.000 UDP 30.104.0.1:44315 -> 198.30.0.2:53 1 64 1 2025-06-26 10:56:30.917 00:00:10.262 TCP 30.104.0.1:57202 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:56:30.970 00:00:10.255 TCP 1.101.0.1:3000 -> 30.104.0.1:57202 11 9346 1 2025-06-26 10:57:31.196 00:00:00.000 UDP 30.104.0.1:34546 -> 198.30.0.2:53 1 64 1 2025-06-26 10:57:31.196 00:00:00.000 UDP 30.104.0.1:49997 -> 198.30.0.2:53 1 64 1 2025-06-26 10:57:31.217 00:00:00.000 UDP 198.30.0.2:53 -> 30.104.0.1:34546 1 109 1 2025-06-26 10:57:31.217 00:00:00.000 UDP 198.30.0.2:53 -> 30.104.0.1:49997 1 80 1 2025-06-26 10:57:31.262 00:00:10.211 TCP 1.101.0.1:3000 -> 30.104.0.1:57376 11 9346 1 2025-06-26 10:57:31.217 00:00:10.211 TCP 30.104.0.1:57376 -> 1.101.0.1:3000 12 1559 1 2025-06-26 10:58:31.463 00:00:00.000 UDP 198.30.0.2:53 -> 30.104.0.1:43765 1 109 1 2025-06-26 10:58:31.463 00:00:00.000 UDP 198.30.0.2:53 -> 30.104.0.1:36317 1 80 1 2025-06-26 10:58:31.442 00:00:00.000 UDP 30.104.0.1:43765 -> 198.30.0.2:53 1 64 1 2025-06-26 10:58:31.442 00:00:00.000 UDP 30.104.0.1:36317 -> 198.30.0.2:53 1 64 1 2025-06-26 10:54:24.401 00:05:10.014 OSPF 30.104.0.2:0 -> 224.0.0.5:0 32 2048 1 2025-06-26 10:58:31.509 00:00:10.207 TCP 1.101.0.1:3000 -> 30.104.0.1:47902 11 9346 1 2025-06-26 10:58:31.464 00:00:10.207 TCP 30.104.0.1:47902 -> 1.101.0.1:3000 12 1559 1 Summary: total flows: 124, total bytes: 381640, total packets: 806, avg bps: 2403, avg pps: 0, avg bpp: 473 Time window: 2025-06-26 10:38:24 - 2025-06-26 10:59:34 Total flows processed: 124, passed: 124, Blocks skipped: 0, Bytes read: 12960 Sys: 0.0028s User: 0.0007s Wall: 0.0029s flows/second: 42904.9 Runtime: 0.0029s