_raw:
Proto   Port
udp    52346
udp       68
udp      546
tcp     8889
tcp     3389
tcp    42955
tcp     3350
tcp     8080


_raw:
Proto   Port
udp    39711
udp    36775
udp       68
udp    45946
udp      546
tcp     8889
tcp     3389
tcp     3350

_sourcetype: openPorts

source: openPorts

sourcetype: openPorts


_raw:
Proto   Port
udp    54352
udp     5353
udp       68
udp      546
tcp     8889
tcp     8080
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp     5353
udp     5353
udp      546
tcp     8889
tcp     3350
tcp    45883
tcp     3389
tcp     8080


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw: Fri Jan  9 11:06:12 AM EST 2026 app=firefox-esr dest_ip=* dest_port=43714 pid=236685 user=pentester fd=134u ip_version=4 dvc_id=329788 transport=UDP


_raw: Fri Jan  9 11:06:12 AM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=233374 user=pentester fd=37u ip_version=6 dvc_id=311604 transport=TCP


_raw: Fri Jan  9 11:06:12 AM EST 2026 app=java dest_ip=127.0.0.1 dest_port=34413 pid=233374 user=pentester fd=18u ip_version=6 dvc_id=309820 transport=TCP


_raw: Fri Jan  9 11:06:12 AM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1956 user=root fd=13u ip_version=4 dvc_id=11067 transport=TCP


_raw: Fri Jan  9 11:06:12 AM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=879 user=xrdp fd=11u ip_version=6 dvc_id=9927 transport=TCP


_raw: Fri Jan  9 11:06:12 AM EST 2026 app=dhcpcd dest_ip=10.0.254.203 dest_port=68 pid=651 user=dhcpcd fd=3u ip_version=4 dvc_id=7636 transport=UDP


_raw: Fri Jan  9 11:06:12 AM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=262918 user=pentester fd=37u ip_version=6 dvc_id=447377 transport=TCP


_raw: Fri Jan  9 11:06:12 AM EST 2026 app=java dest_ip=127.0.0.1 dest_port=35857 pid=262918 user=pentester fd=18u ip_version=6 dvc_id=448906 transport=TCP


_raw: Fri Jan  9 11:06:12 AM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1955 user=root fd=13u ip_version=4 dvc_id=15411 transport=TCP


_raw: Fri Jan  9 11:06:12 AM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=878 user=xrdp fd=11u ip_version=6 dvc_id=9808 transport=TCP


_raw: Fri Jan  9 11:06:12 AM EST 2026 app=dhcpcd dest_ip=10.0.254.206 dest_port=68 pid=649 user=dhcpcd fd=3u ip_version=4 dvc_id=8509 transport=UDP


_raw: Fri Jan  9 11:06:11 AM EST 2026 app=node dest_ip=* dest_port=3001 pid=279781 user=pentester fd=26u ip_version=6 dvc_id=479418 transport=TCP


_raw: Fri Jan  9 11:06:11 AM EST 2026 app=firefox-esr dest_ip=* dest_port=32836 pid=244705 user=pentester fd=136u ip_version=4 dvc_id=335948 transport=UDP


_raw: Fri Jan  9 11:06:11 AM EST 2026 app=node dest_ip=* dest_port=1337 pid=244572 user=planka fd=26u ip_version=6 dvc_id=326092 transport=TCP


_raw: Fri Jan  9 11:06:11 AM EST 2026 app=postgres dest_ip=127.0.0.1 dest_port=5432 pid=235049 user=postgres fd=7u ip_version=4 dvc_id=310915 transport=TCP


_raw: Fri Jan  9 11:06:11 AM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1951 user=root fd=13u ip_version=4 dvc_id=12795 transport=TCP


_raw: Fri Jan  9 11:06:11 AM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=872 user=xrdp fd=11u ip_version=6 dvc_id=12335 transport=TCP


_raw: Fri Jan  9 11:06:11 AM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1954 user=root fd=13u ip_version=4 dvc_id=10802 transport=TCP


_raw: Fri Jan  9 11:06:11 AM EST 2026 app=dhcpcd dest_ip=10.0.254.201 dest_port=68 pid=647 user=dhcpcd fd=3u ip_version=4 dvc_id=8644 transport=UDP


_raw: Fri Jan  9 11:06:11 AM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=875 user=xrdp fd=11u ip_version=6 dvc_id=11437 transport=TCP


_raw: Fri Jan  9 11:06:11 AM EST 2026 app=dhcpcd dest_ip=10.0.254.204 dest_port=68 pid=650 user=dhcpcd fd=3u ip_version=4 dvc_id=7752 transport=UDP


_raw: Fri Jan  9 11:06:11 AM EST 2026 file_hash=SHA2-256(stdin)= f7db335d373c85af06e64e1d987c2dfb049ccdefdce3bd0c18b4c12ac425df57


_raw: Fri Jan  9 11:06:11 AM EST 2026 app=firefox-esr dest_ip=* dest_port=47710 pid=231925 user=pentester fd=156u ip_version=4 dvc_id=319590 transport=UDP


_raw: Fri Jan  9 11:06:11 AM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1907 user=root fd=13u ip_version=4 dvc_id=10858 transport=TCP


_raw: Fri Jan  9 11:06:11 AM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=883 user=xrdp fd=11u ip_version=6 dvc_id=11609 transport=TCP


_raw: Fri Jan  9 11:06:11 AM EST 2026 app=dhcpcd dest_ip=10.0.254.205 dest_port=68 pid=646 user=dhcpcd fd=3u ip_version=4 dvc_id=7962 transport=UDP


_raw:
Proto   Port
udp    43714
udp       68
udp      546
tcp     8889
tcp    34413
tcp     3389
tcp     8080
tcp     3350


_raw:
Proto   Port
udp    47710
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389
tcp    35857
tcp     8080


_raw: Fri Jan  9 11:06:10 AM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1953 user=root fd=13u ip_version=4 dvc_id=12159 transport=TCP


_raw: Fri Jan  9 11:06:10 AM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=877 user=xrdp fd=11u ip_version=6 dvc_id=9566 transport=TCP


_raw: Fri Jan  9 11:06:10 AM EST 2026 app=dhcpcd dest_ip=10.0.254.202 dest_port=68 pid=648 user=dhcpcd fd=3u ip_version=4 dvc_id=848 transport=UDP


_raw:
Proto   Port
udp    32836
udp       68
udp      546
tcp     8889
tcp     5432
tcp     3350
tcp     3001
tcp     3389
tcp     5432
tcp     1337


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp    53624
udp    39606
udp    47800
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw: Fri Jan  9 11:05:47 AM EST 2026 app=firefox-esr dest_ip=* dest_port=53624 pid=266587 user=pentester fd=116u ip_version=4 dvc_id=814499 transport=UDP


_raw: Fri Jan  9 11:05:47 AM EST 2026 app=firefox-esr dest_ip=* dest_port=39606 pid=266587 user=pentester fd=92u ip_version=4 dvc_id=814495 transport=UDP


_raw: Fri Jan  9 11:05:47 AM EST 2026 app=firefox-esr dest_ip=* dest_port=47800 pid=266587 user=pentester fd=48u ip_version=4 dvc_id=814580 transport=UDP


_raw: Fri Jan  9 11:05:47 AM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1909 user=root fd=13u ip_version=4 dvc_id=15513 transport=TCP


_raw: Fri Jan  9 11:05:47 AM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=883 user=xrdp fd=11u ip_version=6 dvc_id=10739 transport=TCP


_raw: Fri Jan  9 11:05:47 AM EST 2026 app=dhcpcd dest_ip=10.0.254.205 dest_port=68 pid=650 user=dhcpcd fd=3u ip_version=4 dvc_id=8244 transport=UDP


_raw: Fri Jan  9 11:05:44 AM EST 2026 app=firefox-esr dest_ip=* dest_port=60954 pid=251625 user=pentester fd=219u ip_version=4 dvc_id=415549 transport=UDP


_raw: Fri Jan  9 11:05:44 AM EST 2026 app=firefox-esr dest_ip=* dest_port=34541 pid=251625 user=pentester fd=210u ip_version=4 dvc_id=417660 transport=UDP


_raw: Fri Jan  9 11:05:44 AM EST 2026 app=firefox-esr dest_ip=* dest_port=49295 pid=251625 user=pentester fd=169u ip_version=4 dvc_id=413686 transport=UDP


_raw: Fri Jan  9 11:05:44 AM EST 2026 app=firefox-esr dest_ip=* dest_port=48557 pid=251625 user=pentester fd=82u ip_version=4 dvc_id=411599 transport=UDP


_raw: Fri Jan  9 11:05:44 AM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1957 user=root fd=13u ip_version=4 dvc_id=15506 transport=TCP


_raw: Fri Jan  9 11:05:44 AM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=880 user=xrdp fd=11u ip_version=6 dvc_id=10745 transport=TCP


_raw: Fri Jan  9 11:05:44 AM EST 2026 app=dhcpcd dest_ip=10.0.254.206 dest_port=68 pid=646 user=dhcpcd fd=3u ip_version=4 dvc_id=7654 transport=UDP


_raw: Fri Jan  9 11:05:44 AM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1955 user=root fd=13u ip_version=4 dvc_id=12094 transport=TCP


_raw: Fri Jan  9 11:05:44 AM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=874 user=xrdp fd=11u ip_version=6 dvc_id=10605 transport=TCP


_raw: Fri Jan  9 11:05:44 AM EST 2026 app=dhcpcd dest_ip=10.0.254.201 dest_port=68 pid=649 user=dhcpcd fd=3u ip_version=4 dvc_id=6028 transport=UDP


_raw: Fri Jan  9 11:05:44 AM EST 2026 app=conmon dest_ip=* dest_port=3080 pid=266776 user=root fd=5u ip_version=4 dvc_id=390968 transport=TCP


_raw: Fri Jan  9 11:05:44 AM EST 2026 app=aardvark-dns dest_ip=10.89.0.1 dest_port=53 pid=266767 user=root fd=12u ip_version=4 dvc_id=391921 transport=TCP


_raw: Fri Jan  9 11:05:44 AM EST 2026 app=aardvark-dns dest_ip=10.89.0.1 dest_port=53 pid=266767 user=root fd=11u ip_version=4 dvc_id=391920 transport=UDP


_raw: Fri Jan  9 11:05:44 AM EST 2026 app=firefox-esr dest_ip=* dest_port=55001 pid=229816 user=pentester fd=262u ip_version=4 dvc_id=439601 transport=UDP


_raw: Fri Jan  9 11:05:44 AM EST 2026 app=firefox-esr dest_ip=* dest_port=53891 pid=229816 user=pentester fd=256u ip_version=4 dvc_id=440980 transport=UDP


_raw: Fri Jan  9 11:05:44 AM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1951 user=root fd=13u ip_version=4 dvc_id=15524 transport=TCP


_raw: Fri Jan  9 11:05:44 AM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=872 user=xrdp fd=11u ip_version=6 dvc_id=10738 transport=TCP


_raw: Fri Jan  9 11:05:44 AM EST 2026 app=dhcpcd dest_ip=10.0.254.202 dest_port=68 pid=646 user=dhcpcd fd=3u ip_version=4 dvc_id=9382 transport=UDP


_raw:
Proto   Port
udp    53891
udp    55001
udp       53
udp       68
udp      546
tcp     8889
tcp       53
tcp     3080
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw: Fri Jan  9 11:05:43 AM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1951 user=root fd=13u ip_version=4 dvc_id=12796 transport=TCP


_raw: Fri Jan  9 11:05:43 AM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=877 user=xrdp fd=11u ip_version=6 dvc_id=9888 transport=TCP


_raw: Fri Jan  9 11:05:43 AM EST 2026 app=dhcpcd dest_ip=10.0.254.204 dest_port=68 pid=646 user=dhcpcd fd=3u ip_version=4 dvc_id=8351 transport=UDP


_raw: Fri Jan  9 11:05:42 AM EST 2026 app=firefox-esr dest_ip=* dest_port=57484 pid=249816 user=pentester fd=92u ip_version=4 dvc_id=419440 transport=UDP


_raw: Fri Jan  9 11:05:42 AM EST 2026 app=firefox-esr dest_ip=* dest_port=43153 pid=249816 user=pentester fd=77u ip_version=4 dvc_id=419432 transport=UDP


_raw: Fri Jan  9 11:05:42 AM EST 2026 app=firefox-esr dest_ip=* dest_port=45959 pid=249816 user=pentester fd=18u ip_version=4 dvc_id=419434 transport=UDP


_raw: Fri Jan  9 11:05:42 AM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1895 user=root fd=13u ip_version=4 dvc_id=15463 transport=TCP


_raw: Fri Jan  9 11:05:42 AM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=871 user=xrdp fd=11u ip_version=6 dvc_id=10675 transport=TCP


_raw: Fri Jan  9 11:05:42 AM EST 2026 app=dhcpcd dest_ip=10.0.254.203 dest_port=68 pid=646 user=dhcpcd fd=3u ip_version=4 dvc_id=9493 transport=UDP


_raw:
Proto   Port
udp       68
udp    57484
udp    45959
udp    43153
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw: Fri Jan  9 11:05:18 AM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1909 user=root fd=13u ip_version=4 dvc_id=18041 transport=TCP


_raw: Fri Jan  9 11:05:18 AM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=876 user=xrdp fd=11u ip_version=6 dvc_id=11538 transport=TCP


_raw: Fri Jan  9 11:05:18 AM EST 2026 app=dhcpcd dest_ip=10.0.254.202 dest_port=68 pid=648 user=dhcpcd fd=3u ip_version=4 dvc_id=9411 transport=UDP


_raw: Fri Jan  9 11:05:17 AM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1957 user=root fd=13u ip_version=4 dvc_id=12852 transport=TCP


_raw: Fri Jan  9 11:05:17 AM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=877 user=xrdp fd=11u ip_version=6 dvc_id=9064 transport=TCP


_raw: Fri Jan  9 11:05:17 AM EST 2026 app=dhcpcd dest_ip=10.0.254.205 dest_port=68 pid=647 user=dhcpcd fd=3u ip_version=4 dvc_id=9567 transport=UDP


_raw: Fri Jan  9 11:05:16 AM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=246729 user=pentester fd=37u ip_version=6 dvc_id=342197 transport=TCP


_raw: Fri Jan  9 11:05:16 AM EST 2026 app=java dest_ip=127.0.0.1 dest_port=36519 pid=246729 user=pentester fd=18u ip_version=6 dvc_id=342159 transport=TCP


_raw: Fri Jan  9 11:05:16 AM EST 2026 app=firefox-esr dest_ip=* dest_port=47158 pid=245634 user=pentester fd=165u ip_version=4 dvc_id=410047 transport=UDP


_raw: Fri Jan  9 11:05:16 AM EST 2026 app=firefox-esr dest_ip=* dest_port=50663 pid=245634 user=pentester fd=142u ip_version=4 dvc_id=410045 transport=UDP


_raw: Fri Jan  9 11:05:16 AM EST 2026 app=firefox-esr dest_ip=* dest_port=47531 pid=245634 user=pentester fd=100u ip_version=4 dvc_id=410948 transport=UDP


_raw: Fri Jan  9 11:05:16 AM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1907 user=root fd=13u ip_version=4 dvc_id=11932 transport=TCP


_raw: Fri Jan  9 11:05:16 AM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=875 user=xrdp fd=11u ip_version=6 dvc_id=11563 transport=TCP


_raw: Fri Jan  9 11:05:16 AM EST 2026 app=dhcpcd dest_ip=10.0.254.204 dest_port=68 pid=650 user=dhcpcd fd=3u ip_version=4 dvc_id=9359 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw: Fri Jan  9 11:05:16 AM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=253531 user=pentester fd=37u ip_version=6 dvc_id=355041 transport=TCP


_raw: Fri Jan  9 11:05:16 AM EST 2026 app=java dest_ip=127.0.0.1 dest_port=32889 pid=253531 user=pentester fd=18u ip_version=6 dvc_id=346631 transport=TCP


_raw: Fri Jan  9 11:05:16 AM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1899 user=root fd=13u ip_version=4 dvc_id=15702 transport=TCP


_raw: Fri Jan  9 11:05:16 AM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=869 user=xrdp fd=11u ip_version=6 dvc_id=10977 transport=TCP


_raw: Fri Jan  9 11:05:16 AM EST 2026 app=dhcpcd dest_ip=10.0.254.206 dest_port=68 pid=646 user=dhcpcd fd=3u ip_version=4 dvc_id=10255 transport=UDP


_raw: Fri Jan  9 11:05:15 AM EST 2026 app=firefox-esr dest_ip=* dest_port=34999 pid=265420 user=pentester fd=76u ip_version=4 dvc_id=373610 transport=UDP


_raw: Fri Jan  9 11:05:15 AM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1908 user=root fd=13u ip_version=4 dvc_id=13486 transport=TCP


_raw: Fri Jan  9 11:05:15 AM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=878 user=xrdp fd=11u ip_version=6 dvc_id=11436 transport=TCP


_raw: Fri Jan  9 11:05:15 AM EST 2026 app=dhcpcd dest_ip=10.0.254.203 dest_port=68 pid=652 user=dhcpcd fd=3u ip_version=4 dvc_id=5107 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3389
tcp    32889
tcp     8080
tcp     3350


_raw: Fri Jan  9 11:05:13 AM EST 2026 app=firefox-esr dest_ip=* dest_port=54933 pid=245644 user=pentester fd=142u ip_version=4 dvc_id=358229 transport=UDP


_raw: Fri Jan  9 11:05:13 AM EST 2026 app=firefox-esr dest_ip=* dest_port=59597 pid=245644 user=pentester fd=141u ip_version=4 dvc_id=476265 transport=UDP


_raw: Fri Jan  9 11:05:13 AM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1901 user=root fd=13u ip_version=4 dvc_id=11771 transport=TCP


_raw: Fri Jan  9 11:05:13 AM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=873 user=xrdp fd=11u ip_version=6 dvc_id=12365 transport=TCP


_raw: Fri Jan  9 11:05:13 AM EST 2026 app=dhcpcd dest_ip=10.0.254.201 dest_port=68 pid=648 user=dhcpcd fd=3u ip_version=4 dvc_id=999 transport=UDP


_raw:
Proto   Port
udp       68
udp    34999
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp    54933
udp    59597
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw: Fri Jan  9 11:04:52 AM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1913 user=root fd=13u ip_version=4 dvc_id=12457 transport=TCP


_raw: Fri Jan  9 11:04:52 AM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=882 user=xrdp fd=11u ip_version=6 dvc_id=9794 transport=TCP


_raw: Fri Jan  9 11:04:52 AM EST 2026 app=dhcpcd dest_ip=10.0.254.201 dest_port=68 pid=651 user=dhcpcd fd=3u ip_version=4 dvc_id=5935 transport=UDP


_raw: Fri Jan  9 11:04:51 AM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=256337 user=pentester fd=37u ip_version=6 dvc_id=359037 transport=TCP


_raw: Fri Jan  9 11:04:51 AM EST 2026 app=java dest_ip=127.0.0.1 dest_port=36977 pid=256337 user=pentester fd=18u ip_version=6 dvc_id=357094 transport=TCP


_raw: Fri Jan  9 11:04:51 AM EST 2026 app=firefox-esr dest_ip=* dest_port=56005 pid=231959 user=pentester fd=141u ip_version=4 dvc_id=414818 transport=UDP


_raw: Fri Jan  9 11:04:51 AM EST 2026 app=firefox-esr dest_ip=* dest_port=35534 pid=231959 user=pentester fd=76u ip_version=4 dvc_id=414839 transport=UDP


_raw: Fri Jan  9 11:04:51 AM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1904 user=root fd=13u ip_version=4 dvc_id=17484 transport=TCP


_raw: Fri Jan  9 11:04:51 AM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=876 user=xrdp fd=11u ip_version=6 dvc_id=11439 transport=TCP


_raw: Fri Jan  9 11:04:51 AM EST 2026 app=dhcpcd dest_ip=10.0.254.206 dest_port=68 pid=648 user=dhcpcd fd=3u ip_version=4 dvc_id=7777 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw: Fri Jan  9 11:04:51 AM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1897 user=root fd=13u ip_version=4 dvc_id=12698 transport=TCP


_raw: Fri Jan  9 11:04:51 AM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=861 user=xrdp fd=11u ip_version=6 dvc_id=9717 transport=TCP


_raw: Fri Jan  9 11:04:51 AM EST 2026 app=dhcpcd dest_ip=10.0.254.204 dest_port=68 pid=645 user=dhcpcd fd=3u ip_version=4 dvc_id=8233 transport=UDP


_raw:
Proto   Port
udp       68
udp    56005
udp    35534
udp      546
tcp     8889
tcp     3350
tcp    36977
tcp     8080
tcp     3389


_raw: Fri Jan  9 11:04:50 AM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1905 user=root fd=13u ip_version=4 dvc_id=16943 transport=TCP


_raw: Fri Jan  9 11:04:50 AM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=877 user=xrdp fd=11u ip_version=6 dvc_id=11499 transport=TCP


_raw: Fri Jan  9 11:04:50 AM EST 2026 app=dhcpcd dest_ip=10.0.254.203 dest_port=68 pid=650 user=dhcpcd fd=3u ip_version=4 dvc_id=7573 transport=UDP


_raw: Fri Jan  9 11:04:50 AM EST 2026 file_hash=SHA2-256(stdin)= 2e984299a546d40c22c7ec9bcc34a4ff033e9e1afdb0fdd60b90e4bfeb3ffe76


_raw: Fri Jan  9 11:04:50 AM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1900 user=root fd=13u ip_version=4 dvc_id=16660 transport=TCP


_raw: Fri Jan  9 11:04:50 AM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=872 user=xrdp fd=11u ip_version=6 dvc_id=11576 transport=TCP


_raw: Fri Jan  9 11:04:50 AM EST 2026 app=dhcpcd dest_ip=10.0.254.202 dest_port=68 pid=645 user=dhcpcd fd=3u ip_version=4 dvc_id=6806 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw: Fri Jan  9 11:04:48 AM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1910 user=root fd=13u ip_version=4 dvc_id=17990 transport=TCP


_raw: Fri Jan  9 11:04:48 AM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=870 user=xrdp fd=11u ip_version=6 dvc_id=11787 transport=TCP


_raw: Fri Jan  9 11:04:48 AM EST 2026 app=dhcpcd dest_ip=10.0.254.205 dest_port=68 pid=647 user=dhcpcd fd=3u ip_version=4 dvc_id=8323 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw: Fri Jan  9 11:04:18 AM EST 2026 app=luftweht-viewer dest_ip=* dest_port=8080 pid=256099 user=pentester fd=6u ip_version=6 dvc_id=377468 transport=TCP


_raw: Fri Jan  9 11:04:18 AM EST 2026 app=sshd dest_ip=* dest_port=22 pid=246192 user=root fd=7u ip_version=6 dvc_id=351468 transport=TCP


_raw: Fri Jan  9 11:04:18 AM EST 2026 app=sshd dest_ip=* dest_port=22 pid=246192 user=root fd=6u ip_version=4 dvc_id=351466 transport=TCP


_raw: Fri Jan  9 11:04:18 AM EST 2026 app=socat dest_ip=* dest_port=8000 pid=234221 user=pentester fd=5u ip_version=4 dvc_id=316787 transport=TCP


_raw: Fri Jan  9 11:04:18 AM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1900 user=root fd=13u ip_version=4 dvc_id=11053 transport=TCP


_raw: Fri Jan  9 11:04:18 AM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=877 user=xrdp fd=11u ip_version=6 dvc_id=10780 transport=TCP


_raw: Fri Jan  9 11:04:18 AM EST 2026 app=dhcpcd dest_ip=10.0.254.201 dest_port=68 pid=648 user=dhcpcd fd=3u ip_version=4 dvc_id=9556 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp     8000
tcp       22
tcp     3350
tcp     3389
tcp     8080


_raw: Fri Jan  9 11:04:14 AM EST 2026 file_hash=SHA2-256(stdin)= f1b0a8783553663ab3b8dd98a59353ccadcb1c4beadd6a33488b78fc8facbf6c


_raw: Fri Jan  9 11:04:14 AM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=262836 user=pentester fd=37u ip_version=6 dvc_id=375948 transport=TCP


_raw: Fri Jan  9 11:04:14 AM EST 2026 app=java dest_ip=127.0.0.1 dest_port=39031 pid=262836 user=pentester fd=18u ip_version=6 dvc_id=374803 transport=TCP


_raw: Fri Jan  9 11:04:14 AM EST 2026 app=firefox-esr dest_ip=* dest_port=60076 pid=259897 user=pentester fd=194u ip_version=4 dvc_id=424611 transport=UDP


_raw: Fri Jan  9 11:04:14 AM EST 2026 app=firefox-esr dest_ip=* dest_port=41808 pid=259897 user=pentester fd=121u ip_version=4 dvc_id=424615 transport=UDP


_raw: Fri Jan  9 11:04:14 AM EST 2026 app=sshd dest_ip=* dest_port=22 pid=241845 user=root fd=7u ip_version=6 dvc_id=333492 transport=TCP


_raw: Fri Jan  9 11:04:14 AM EST 2026 app=sshd dest_ip=* dest_port=22 pid=241845 user=root fd=6u ip_version=4 dvc_id=333490 transport=TCP


_raw: Fri Jan  9 11:04:14 AM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1949 user=root fd=13u ip_version=4 dvc_id=13559 transport=TCP


_raw: Fri Jan  9 11:04:14 AM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=869 user=xrdp fd=11u ip_version=6 dvc_id=9153 transport=TCP


_raw: Fri Jan  9 11:04:14 AM EST 2026 app=dhcpcd dest_ip=10.0.254.206 dest_port=68 pid=646 user=dhcpcd fd=3u ip_version=4 dvc_id=9266 transport=UDP


_raw: Fri Jan  9 11:04:14 AM EST 2026 app=python3 dest_ip=* dest_port=8000 pid=285240 user=pentester fd=3u ip_version=4 dvc_id=414559 transport=TCP


_raw: Fri Jan  9 11:04:14 AM EST 2026 app=nc dest_ip=* dest_port=42042 pid=261234 user=pentester fd=3u ip_version=4 dvc_id=377973 transport=TCP


_raw: Fri Jan  9 11:04:14 AM EST 2026 app=sshd dest_ip=* dest_port=22 pid=244945 user=root fd=7u ip_version=6 dvc_id=340328 transport=TCP


_raw: Fri Jan  9 11:04:14 AM EST 2026 app=sshd dest_ip=* dest_port=22 pid=244945 user=root fd=6u ip_version=4 dvc_id=340326 transport=TCP


_raw: Fri Jan  9 11:04:14 AM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1903 user=root fd=13u ip_version=4 dvc_id=11100 transport=TCP


_raw: Fri Jan  9 11:04:14 AM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=874 user=xrdp fd=11u ip_version=6 dvc_id=11398 transport=TCP


_raw: Fri Jan  9 11:04:14 AM EST 2026 app=dhcpcd dest_ip=10.0.254.205 dest_port=68 pid=650 user=dhcpcd fd=3u ip_version=4 dvc_id=9368 transport=UDP


_raw: Fri Jan  9 11:04:13 AM EST 2026 app=sshd dest_ip=* dest_port=22 pid=251166 user=root fd=7u ip_version=6 dvc_id=411401 transport=TCP


_raw: Fri Jan  9 11:04:13 AM EST 2026 app=sshd dest_ip=* dest_port=22 pid=251166 user=root fd=6u ip_version=4 dvc_id=411399 transport=TCP


_raw: Fri Jan  9 11:04:13 AM EST 2026 app=docker-proxy dest_ip=127.0.0.1 dest_port=8080 pid=243989 user=root fd=4u ip_version=4 dvc_id=378478 transport=TCP


_raw: Fri Jan  9 11:04:13 AM EST 2026 app=docker-proxy dest_ip=127.0.0.1 dest_port=7687 pid=243349 user=root fd=4u ip_version=4 dvc_id=377368 transport=TCP


_raw: Fri Jan  9 11:04:13 AM EST 2026 app=docker-proxy dest_ip=127.0.0.1 dest_port=7474 pid=243342 user=root fd=4u ip_version=4 dvc_id=377947 transport=TCP


_raw: Fri Jan  9 11:04:13 AM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=39943 pid=237975 user=root fd=7u ip_version=4 dvc_id=340760 transport=TCP


_raw: Fri Jan  9 11:04:13 AM EST 2026 app=firefox-esr dest_ip=* dest_port=55250 pid=230428 user=pentester fd=334u ip_version=4 dvc_id=612408 transport=UDP


_raw: Fri Jan  9 11:04:13 AM EST 2026 app=firefox-esr dest_ip=* dest_port=50971 pid=230428 user=pentester fd=316u ip_version=4 dvc_id=611453 transport=UDP


_raw: Fri Jan  9 11:04:13 AM EST 2026 app=firefox-esr dest_ip=* dest_port=59156 pid=230428 user=pentester fd=298u ip_version=4 dvc_id=610024 transport=UDP


_raw: Fri Jan  9 11:04:13 AM EST 2026 app=firefox-esr dest_ip=* dest_port=47943 pid=230428 user=pentester fd=296u ip_version=4 dvc_id=611455 transport=UDP


_raw: Fri Jan  9 11:04:13 AM EST 2026 app=firefox-esr dest_ip=* dest_port=53385 pid=230428 user=pentester fd=257u ip_version=4 dvc_id=612456 transport=UDP


_raw: Fri Jan  9 11:04:13 AM EST 2026 app=firefox-esr dest_ip=* dest_port=54068 pid=230428 user=pentester fd=219u ip_version=4 dvc_id=608051 transport=UDP


_raw: Fri Jan  9 11:04:13 AM EST 2026 app=firefox-esr dest_ip=* dest_port=59716 pid=230428 user=pentester fd=208u ip_version=4 dvc_id=509084 transport=UDP


_raw: Fri Jan  9 11:04:13 AM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1898 user=root fd=13u ip_version=4 dvc_id=11011 transport=TCP


_raw: Fri Jan  9 11:04:13 AM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=880 user=xrdp fd=11u ip_version=6 dvc_id=10726 transport=TCP


_raw: Fri Jan  9 11:04:13 AM EST 2026 app=dhcpcd dest_ip=10.0.254.203 dest_port=68 pid=647 user=dhcpcd fd=3u ip_version=4 dvc_id=7951 transport=UDP


_raw:
Proto   Port
udp    60076
udp       68
udp    41808
udp      546
tcp       22
tcp     8889
tcp     8080
tcp    39031
tcp     3389
tcp       22
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp    42042
tcp       22
tcp     8000
tcp     8889
tcp     3350
tcp       22
tcp     3389


_raw: Fri Jan  9 11:04:12 AM EST 2026 app=sshd dest_ip=* dest_port=22 pid=246424 user=root fd=7u ip_version=6 dvc_id=355109 transport=TCP


_raw: Fri Jan  9 11:04:12 AM EST 2026 app=sshd dest_ip=* dest_port=22 pid=246424 user=root fd=6u ip_version=4 dvc_id=355107 transport=TCP


_raw: Fri Jan  9 11:04:12 AM EST 2026 app=firefox-esr dest_ip=* dest_port=47214 pid=230084 user=pentester fd=116u ip_version=4 dvc_id=309806 transport=UDP


_raw: Fri Jan  9 11:04:12 AM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1900 user=root fd=13u ip_version=4 dvc_id=15639 transport=TCP


_raw: Fri Jan  9 11:04:12 AM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=873 user=xrdp fd=11u ip_version=6 dvc_id=11472 transport=TCP


_raw: Fri Jan  9 11:04:12 AM EST 2026 app=dhcpcd dest_ip=10.0.254.202 dest_port=68 pid=649 user=dhcpcd fd=3u ip_version=4 dvc_id=7760 transport=UDP


_raw: Fri Jan  9 11:04:11 AM EST 2026 app=sshd dest_ip=* dest_port=22 pid=256378 user=root fd=7u ip_version=6 dvc_id=390629 transport=TCP


_raw: Fri Jan  9 11:04:11 AM EST 2026 app=sshd dest_ip=* dest_port=22 pid=256378 user=root fd=6u ip_version=4 dvc_id=390627 transport=TCP


_raw: Fri Jan  9 11:04:11 AM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1900 user=root fd=13u ip_version=4 dvc_id=11717 transport=TCP


_raw: Fri Jan  9 11:04:11 AM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=878 user=xrdp fd=11u ip_version=6 dvc_id=12314 transport=TCP


_raw: Fri Jan  9 11:04:11 AM EST 2026 app=dhcpcd dest_ip=10.0.254.204 dest_port=68 pid=648 user=dhcpcd fd=3u ip_version=4 dvc_id=7093 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp    47214
udp       68
udp      546
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw: Fri Jan  9 11:03:39 AM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=239763 user=pentester fd=37u ip_version=6 dvc_id=332227 transport=TCP


_raw: Fri Jan  9 11:03:39 AM EST 2026 app=java dest_ip=127.0.0.1 dest_port=43819 pid=239763 user=pentester fd=18u ip_version=6 dvc_id=332159 transport=TCP


_raw: Fri Jan  9 11:03:39 AM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=34391 pid=236134 user=root fd=9u ip_version=4 dvc_id=317963 transport=TCP


_raw: Fri Jan  9 11:03:39 AM EST 2026 app=firefox-esr dest_ip=* dest_port=33646 pid=230880 user=pentester fd=185u ip_version=4 dvc_id=584807 transport=UDP


_raw: Fri Jan  9 11:03:39 AM EST 2026 app=firefox-esr dest_ip=* dest_port=58867 pid=230880 user=pentester fd=173u ip_version=4 dvc_id=580438 transport=UDP


_raw: Fri Jan  9 11:03:39 AM EST 2026 app=firefox-esr dest_ip=* dest_port=35554 pid=230880 user=pentester fd=171u ip_version=4 dvc_id=583463 transport=UDP


_raw: Fri Jan  9 11:03:39 AM EST 2026 app=firefox-esr dest_ip=* dest_port=58890 pid=230880 user=pentester fd=170u ip_version=4 dvc_id=582304 transport=UDP


_raw: Fri Jan  9 11:03:39 AM EST 2026 app=firefox-esr dest_ip=* dest_port=57187 pid=230880 user=pentester fd=165u ip_version=4 dvc_id=583455 transport=UDP


_raw: Fri Jan  9 11:03:39 AM EST 2026 app=firefox-esr dest_ip=* dest_port=36764 pid=230880 user=pentester fd=164u ip_version=4 dvc_id=584742 transport=UDP


_raw: Fri Jan  9 11:03:39 AM EST 2026 app=firefox-esr dest_ip=* dest_port=56160 pid=230880 user=pentester fd=157u ip_version=4 dvc_id=583465 transport=UDP


_raw: Fri Jan  9 11:03:39 AM EST 2026 app=firefox-esr dest_ip=* dest_port=37823 pid=230880 user=pentester fd=156u ip_version=4 dvc_id=581367 transport=UDP


_raw: Fri Jan  9 11:03:39 AM EST 2026 app=firefox-esr dest_ip=* dest_port=37359 pid=230880 user=pentester fd=154u ip_version=4 dvc_id=582132 transport=UDP


_raw: Fri Jan  9 11:03:39 AM EST 2026 app=firefox-esr dest_ip=* dest_port=57730 pid=230880 user=pentester fd=153u ip_version=4 dvc_id=581295 transport=UDP


_raw: Fri Jan  9 11:03:39 AM EST 2026 app=firefox-esr dest_ip=* dest_port=55829 pid=230880 user=pentester fd=151u ip_version=4 dvc_id=581293 transport=UDP


_raw: Fri Jan  9 11:03:39 AM EST 2026 app=firefox-esr dest_ip=* dest_port=39511 pid=230880 user=pentester fd=150u ip_version=4 dvc_id=581037 transport=UDP


_raw: Fri Jan  9 11:03:39 AM EST 2026 app=firefox-esr dest_ip=* dest_port=48980 pid=230880 user=pentester fd=149u ip_version=4 dvc_id=581047 transport=UDP


_raw: Fri Jan  9 11:03:39 AM EST 2026 app=firefox-esr dest_ip=* dest_port=33534 pid=230880 user=pentester fd=140u ip_version=4 dvc_id=581991 transport=UDP


_raw: Fri Jan  9 11:03:39 AM EST 2026 app=firefox-esr dest_ip=* dest_port=39302 pid=230880 user=pentester fd=133u ip_version=4 dvc_id=581035 transport=UDP


_raw: Fri Jan  9 11:03:39 AM EST 2026 app=firefox-esr dest_ip=* dest_port=59306 pid=230880 user=pentester fd=129u ip_version=4 dvc_id=581049 transport=UDP


_raw: Fri Jan  9 11:03:39 AM EST 2026 app=firefox-esr dest_ip=* dest_port=46711 pid=230880 user=pentester fd=113u ip_version=4 dvc_id=583090 transport=UDP


_raw: Fri Jan  9 11:03:39 AM EST 2026 app=firefox-esr dest_ip=* dest_port=60218 pid=230880 user=pentester fd=99u ip_version=4 dvc_id=583058 transport=UDP


_raw: Fri Jan  9 11:03:39 AM EST 2026 app=firefox-esr dest_ip=* dest_port=55026 pid=230880 user=pentester fd=81u ip_version=4 dvc_id=582998 transport=UDP


_raw: Fri Jan  9 11:03:39 AM EST 2026 app=firefox-esr dest_ip=* dest_port=50817 pid=230880 user=pentester fd=63u ip_version=4 dvc_id=579487 transport=UDP


_raw: Fri Jan  9 11:03:39 AM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1898 user=root fd=13u ip_version=4 dvc_id=15719 transport=TCP


_raw: Fri Jan  9 11:03:39 AM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=877 user=xrdp fd=11u ip_version=6 dvc_id=12334 transport=TCP


_raw: Fri Jan  9 11:03:39 AM EST 2026 app=dhcpcd dest_ip=10.0.254.205 dest_port=68 pid=645 user=dhcpcd fd=3u ip_version=4 dvc_id=9264 transport=UDP


_raw: Fri Jan  9 11:03:39 AM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=282737 user=pentester fd=37u ip_version=6 dvc_id=573738 transport=TCP


_raw: Fri Jan  9 11:03:39 AM EST 2026 app=java dest_ip=127.0.0.1 dest_port=45273 pid=282737 user=pentester fd=18u ip_version=6 dvc_id=573609 transport=TCP


_raw: Fri Jan  9 11:03:39 AM EST 2026 app=python3 dest_ip=* dest_port=4444 pid=266223 user=pentester fd=7u ip_version=4 dvc_id=495706 transport=TCP


_raw: Fri Jan  9 11:03:39 AM EST 2026 app=docker-proxy dest_ip=* dest_port=8000 pid=246329 user=root fd=4u ip_version=6 dvc_id=414127 transport=TCP


_raw: Fri Jan  9 11:03:39 AM EST 2026 app=docker-proxy dest_ip=* dest_port=8000 pid=246322 user=root fd=4u ip_version=4 dvc_id=415449 transport=TCP


_raw: Fri Jan  9 11:03:39 AM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=39343 pid=239069 user=root fd=7u ip_version=4 dvc_id=367654 transport=TCP


_raw: Fri Jan  9 11:03:39 AM EST 2026 app=firefox-esr dest_ip=* dest_port=54016 pid=228992 user=pentester fd=298u ip_version=4 dvc_id=613389 transport=UDP


_raw: Fri Jan  9 11:03:39 AM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1897 user=root fd=13u ip_version=4 dvc_id=11894 transport=TCP


_raw: Fri Jan  9 11:03:39 AM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=869 user=xrdp fd=11u ip_version=6 dvc_id=10999 transport=TCP


_raw: Fri Jan  9 11:03:39 AM EST 2026 app=dhcpcd dest_ip=10.0.254.206 dest_port=68 pid=645 user=dhcpcd fd=3u ip_version=4 dvc_id=8528 transport=UDP


_raw: Fri Jan  9 11:03:38 AM EST 2026 app=docker-proxy dest_ip=127.0.0.1 dest_port=8080 pid=248439 user=root fd=4u ip_version=4 dvc_id=356202 transport=TCP


_raw: Fri Jan  9 11:03:38 AM EST 2026 app=docker-proxy dest_ip=127.0.0.1 dest_port=7687 pid=247692 user=root fd=4u ip_version=4 dvc_id=356429 transport=TCP


_raw: Fri Jan  9 11:03:38 AM EST 2026 app=docker-proxy dest_ip=127.0.0.1 dest_port=7474 pid=247685 user=root fd=4u ip_version=4 dvc_id=356425 transport=TCP


_raw: Fri Jan  9 11:03:38 AM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=39371 pid=232438 user=root fd=9u ip_version=4 dvc_id=312835 transport=TCP


_raw: Fri Jan  9 11:03:38 AM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1950 user=root fd=13u ip_version=4 dvc_id=17576 transport=TCP


_raw: Fri Jan  9 11:03:38 AM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=873 user=xrdp fd=11u ip_version=6 dvc_id=10964 transport=TCP


_raw: Fri Jan  9 11:03:38 AM EST 2026 app=dhcpcd dest_ip=10.0.254.202 dest_port=68 pid=644 user=dhcpcd fd=3u ip_version=4 dvc_id=8386 transport=UDP


_raw: Fri Jan  9 11:03:38 AM EST 2026 app=docker-proxy dest_ip=127.0.0.1 dest_port=8080 pid=268301 user=root fd=4u ip_version=4 dvc_id=390041 transport=TCP


_raw: Fri Jan  9 11:03:38 AM EST 2026 app=docker-proxy dest_ip=127.0.0.1 dest_port=7687 pid=267643 user=root fd=4u ip_version=4 dvc_id=390363 transport=TCP


_raw: Fri Jan  9 11:03:38 AM EST 2026 app=docker-proxy dest_ip=127.0.0.1 dest_port=7474 pid=267635 user=root fd=4u ip_version=4 dvc_id=390359 transport=TCP


_raw: Fri Jan  9 11:03:38 AM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=46167 pid=239046 user=root fd=7u ip_version=4 dvc_id=323333 transport=TCP


_raw: Fri Jan  9 11:03:38 AM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1902 user=root fd=13u ip_version=4 dvc_id=15424 transport=TCP


_raw: Fri Jan  9 11:03:38 AM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=876 user=xrdp fd=11u ip_version=6 dvc_id=11308 transport=TCP


_raw: Fri Jan  9 11:03:38 AM EST 2026 app=dhcpcd dest_ip=10.0.254.204 dest_port=68 pid=650 user=dhcpcd fd=3u ip_version=4 dvc_id=7652 transport=UDP


_raw: Fri Jan  9 11:03:38 AM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=43007 pid=242932 user=root fd=10u ip_version=4 dvc_id=354166 transport=TCP


_raw: Fri Jan  9 11:03:38 AM EST 2026 app=firefox-esr dest_ip=* dest_port=39110 pid=228769 user=pentester fd=185u ip_version=4 dvc_id=554968 transport=UDP


_raw: Fri Jan  9 11:03:38 AM EST 2026 app=firefox-esr dest_ip=* dest_port=45529 pid=228769 user=pentester fd=182u ip_version=4 dvc_id=556374 transport=UDP


_raw: Fri Jan  9 11:03:38 AM EST 2026 app=firefox-esr dest_ip=* dest_port=32950 pid=228769 user=pentester fd=176u ip_version=4 dvc_id=556372 transport=UDP


_raw: Fri Jan  9 11:03:38 AM EST 2026 app=firefox-esr dest_ip=* dest_port=57668 pid=228769 user=pentester fd=174u ip_version=4 dvc_id=553704 transport=UDP


_raw: Fri Jan  9 11:03:38 AM EST 2026 app=firefox-esr dest_ip=* dest_port=37006 pid=228769 user=pentester fd=172u ip_version=4 dvc_id=554957 transport=UDP


_raw: Fri Jan  9 11:03:38 AM EST 2026 app=firefox-esr dest_ip=* dest_port=47030 pid=228769 user=pentester fd=137u ip_version=4 dvc_id=553698 transport=UDP


_raw: Fri Jan  9 11:03:38 AM EST 2026 app=firefox-esr dest_ip=* dest_port=39643 pid=228769 user=pentester fd=135u ip_version=4 dvc_id=554955 transport=UDP


_raw: Fri Jan  9 11:03:38 AM EST 2026 app=firefox-esr dest_ip=* dest_port=57928 pid=228769 user=pentester fd=102u ip_version=4 dvc_id=362076 transport=UDP


_raw: Fri Jan  9 11:03:38 AM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1900 user=root fd=13u ip_version=4 dvc_id=17757 transport=TCP


_raw: Fri Jan  9 11:03:38 AM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=877 user=xrdp fd=11u ip_version=6 dvc_id=11654 transport=TCP


_raw: Fri Jan  9 11:03:38 AM EST 2026 app=dhcpcd dest_ip=10.0.254.203 dest_port=68 pid=649 user=dhcpcd fd=3u ip_version=4 dvc_id=8573 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp    39371
tcp     7474
tcp     8080
tcp     7687
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp     7687
tcp     8080
tcp     7474
tcp     8889
tcp    46167
tcp     3350
tcp     3389


_raw: Fri Jan  9 11:03:36 AM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=274427 user=pentester fd=37u ip_version=6 dvc_id=400879 transport=TCP


_raw: Fri Jan  9 11:03:36 AM EST 2026 app=java dest_ip=127.0.0.1 dest_port=44033 pid=274427 user=pentester fd=18u ip_version=6 dvc_id=400682 transport=TCP


_raw: Fri Jan  9 11:03:36 AM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=34829 pid=238097 user=root fd=9u ip_version=4 dvc_id=323344 transport=TCP


_raw: Fri Jan  9 11:03:36 AM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1896 user=root fd=13u ip_version=4 dvc_id=11124 transport=TCP


_raw: Fri Jan  9 11:03:36 AM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=870 user=xrdp fd=11u ip_version=6 dvc_id=11634 transport=TCP


_raw: Fri Jan  9 11:03:36 AM EST 2026 app=dhcpcd dest_ip=10.0.254.201 dest_port=68 pid=647 user=dhcpcd fd=3u ip_version=4 dvc_id=8517 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp    34829
tcp     3350
tcp     8080
tcp     3389
tcp    44033


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp     3350
tcp       22
tcp     3389


_raw: Fri Jan  9 11:03:05 AM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=244564 user=pentester fd=37u ip_version=6 dvc_id=339586 transport=TCP


_raw: Fri Jan  9 11:03:05 AM EST 2026 app=java dest_ip=127.0.0.1 dest_port=41905 pid=244564 user=pentester fd=18u ip_version=6 dvc_id=339551 transport=TCP


_raw: Fri Jan  9 11:03:05 AM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1898 user=root fd=13u ip_version=4 dvc_id=14462 transport=TCP


_raw: Fri Jan  9 11:03:05 AM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=876 user=xrdp fd=11u ip_version=6 dvc_id=8864 transport=TCP


_raw: Fri Jan  9 11:03:05 AM EST 2026 app=dhcpcd dest_ip=10.0.254.206 dest_port=68 pid=644 user=dhcpcd fd=3u ip_version=4 dvc_id=8272 transport=UDP


_raw: Fri Jan  9 11:03:04 AM EST 2026 app=python3 dest_ip=* dest_port=999 pid=287250 user=pentester fd=3u ip_version=4 dvc_id=481081 transport=TCP


_raw: Fri Jan  9 11:03:04 AM EST 2026 app=docker-proxy dest_ip=127.0.0.1 dest_port=8000 pid=244152 user=root fd=4u ip_version=4 dvc_id=360555 transport=TCP


_raw: Fri Jan  9 11:03:04 AM EST 2026 app=caddy dest_ip=* dest_port=1337 pid=243869 user=root fd=7u ip_version=6 dvc_id=359617 transport=TCP


_raw: Fri Jan  9 11:03:04 AM EST 2026 app=caddy dest_ip=127.0.0.1 dest_port=2019 pid=243869 user=root fd=4u ip_version=4 dvc_id=359612 transport=TCP


_raw: Fri Jan  9 11:03:04 AM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=44719 pid=237321 user=root fd=8u ip_version=4 dvc_id=318416 transport=TCP


_raw: Fri Jan  9 11:03:04 AM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1897 user=root fd=13u ip_version=4 dvc_id=17099 transport=TCP


_raw: Fri Jan  9 11:03:04 AM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=871 user=xrdp fd=11u ip_version=6 dvc_id=10081 transport=TCP


_raw: Fri Jan  9 11:03:04 AM EST 2026 app=dhcpcd dest_ip=10.0.254.202 dest_port=68 pid=646 user=dhcpcd fd=3u ip_version=4 dvc_id=8446 transport=UDP


_raw: Fri Jan  9 11:03:03 AM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=34409 pid=253416 user=root fd=10u ip_version=4 dvc_id=342533 transport=TCP


_raw: Fri Jan  9 11:03:03 AM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1900 user=root fd=13u ip_version=4 dvc_id=14166 transport=TCP


_raw: Fri Jan  9 11:03:03 AM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=872 user=xrdp fd=11u ip_version=6 dvc_id=9058 transport=TCP


_raw: Fri Jan  9 11:03:03 AM EST 2026 app=dhcpcd dest_ip=10.0.254.203 dest_port=68 pid=646 user=dhcpcd fd=3u ip_version=4 dvc_id=8416 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp      999
tcp     2019
tcp    44719
tcp     8000
tcp     1337
tcp     3350
tcp     3389


_raw: Fri Jan  9 11:03:03 AM EST 2026 file_hash=SHA2-256(stdin)= 05f02e9ea65acebfab1685b282e59b032107aa6ee19cefedac4b916ed0bfea47


_raw: Fri Jan  9 11:03:03 AM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1897 user=root fd=13u ip_version=4 dvc_id=12000 transport=TCP


_raw: Fri Jan  9 11:03:03 AM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=873 user=xrdp fd=11u ip_version=6 dvc_id=12470 transport=TCP


_raw: Fri Jan  9 11:03:03 AM EST 2026 app=dhcpcd dest_ip=10.0.254.205 dest_port=68 pid=646 user=dhcpcd fd=3u ip_version=4 dvc_id=6849 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp    41905
tcp     3389
tcp     8080


_raw: Fri Jan  9 11:03:03 AM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1951 user=root fd=13u ip_version=4 dvc_id=13704 transport=TCP


_raw: Fri Jan  9 11:03:03 AM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=882 user=xrdp fd=11u ip_version=6 dvc_id=10933 transport=TCP


_raw: Fri Jan  9 11:03:03 AM EST 2026 app=dhcpcd dest_ip=10.0.254.201 dest_port=68 pid=647 user=dhcpcd fd=3u ip_version=4 dvc_id=7619 transport=UDP


_raw: Fri Jan  9 11:03:03 AM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1956 user=root fd=13u ip_version=4 dvc_id=11151 transport=TCP


_raw: Fri Jan  9 11:03:03 AM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=872 user=xrdp fd=11u ip_version=6 dvc_id=10773 transport=TCP


_raw: Fri Jan  9 11:03:03 AM EST 2026 app=dhcpcd dest_ip=10.0.254.204 dest_port=68 pid=649 user=dhcpcd fd=3u ip_version=4 dvc_id=8491 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp    34409
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw: Fri Jan  9 11:02:43 AM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1892 user=root fd=13u ip_version=4 dvc_id=15219 transport=TCP


_raw: Fri Jan  9 11:02:43 AM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=876 user=xrdp fd=11u ip_version=6 dvc_id=10710 transport=TCP


_raw: Fri Jan  9 11:02:43 AM EST 2026 app=dhcpcd dest_ip=10.0.254.203 dest_port=68 pid=652 user=dhcpcd fd=3u ip_version=4 dvc_id=8604 transport=UDP


_raw: Fri Jan  9 11:02:41 AM EST 2026 app=docker-proxy dest_ip=* dest_port=8888 pid=237945 user=root fd=7u ip_version=4 dvc_id=328219 transport=TCP


_raw: Fri Jan  9 11:02:41 AM EST 2026 app=docker-proxy dest_ip=127.0.0.1 dest_port=7687 pid=237382 user=root fd=7u ip_version=4 dvc_id=327255 transport=TCP


_raw: Fri Jan  9 11:02:41 AM EST 2026 app=docker-proxy dest_ip=127.0.0.1 dest_port=7474 pid=237359 user=root fd=7u ip_version=4 dvc_id=327745 transport=TCP


_raw: Fri Jan  9 11:02:41 AM EST 2026 app=firefox-esr dest_ip=* dest_port=41793 pid=230415 user=pentester fd=136u ip_version=4 dvc_id=932342 transport=UDP


_raw: Fri Jan  9 11:02:41 AM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1953 user=root fd=13u ip_version=4 dvc_id=10159 transport=TCP


_raw: Fri Jan  9 11:02:41 AM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=884 user=xrdp fd=11u ip_version=6 dvc_id=10649 transport=TCP


_raw: Fri Jan  9 11:02:41 AM EST 2026 app=dhcpcd dest_ip=10.0.254.201 dest_port=68 pid=648 user=dhcpcd fd=3u ip_version=4 dvc_id=8623 transport=UDP


_raw:
Proto   Port
udp       68
udp    41793
udp      546
tcp     8889
tcp     7474
tcp     7687
tcp     8888
tcp     3389
tcp     3350


_raw: Fri Jan  9 11:02:40 AM EST 2026 app=firefox-esr dest_ip=* dest_port=48050 pid=238049 user=pentester fd=164u ip_version=4 dvc_id=449202 transport=UDP


_raw: Fri Jan  9 11:02:40 AM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1902 user=root fd=13u ip_version=4 dvc_id=12162 transport=TCP


_raw: Fri Jan  9 11:02:40 AM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=882 user=xrdp fd=11u ip_version=6 dvc_id=11824 transport=TCP


_raw: Fri Jan  9 11:02:40 AM EST 2026 app=dhcpcd dest_ip=10.0.254.202 dest_port=68 pid=651 user=dhcpcd fd=3u ip_version=4 dvc_id=5048 transport=UDP


_raw: Fri Jan  9 11:02:39 AM EST 2026 file_hash=SHA2-256(stdin)= 9b57b7546bef6fe55e2c1de4df64afbcc9fd1dbf87613622bf55f5b117fe7c3a


_raw: Fri Jan  9 11:02:39 AM EST 2026 app=firefox-esr dest_ip=* dest_port=60814 pid=235634 user=pentester fd=127u ip_version=4 dvc_id=327960 transport=UDP


_raw: Fri Jan  9 11:02:39 AM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=235364 user=pentester fd=37u ip_version=6 dvc_id=322892 transport=TCP


_raw: Fri Jan  9 11:02:39 AM EST 2026 app=java dest_ip=127.0.0.1 dest_port=37215 pid=235364 user=pentester fd=18u ip_version=6 dvc_id=309006 transport=TCP


_raw: Fri Jan  9 11:02:39 AM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1895 user=root fd=13u ip_version=4 dvc_id=10892 transport=TCP


_raw: Fri Jan  9 11:02:39 AM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=868 user=xrdp fd=11u ip_version=6 dvc_id=11549 transport=TCP


_raw: Fri Jan  9 11:02:39 AM EST 2026 app=dhcpcd dest_ip=10.0.254.205 dest_port=68 pid=643 user=dhcpcd fd=3u ip_version=4 dvc_id=702 transport=UDP


_raw: Fri Jan  9 11:02:38 AM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1903 user=root fd=13u ip_version=4 dvc_id=16780 transport=TCP


_raw: Fri Jan  9 11:02:38 AM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=870 user=xrdp fd=11u ip_version=6 dvc_id=11675 transport=TCP


_raw: Fri Jan  9 11:02:38 AM EST 2026 app=dhcpcd dest_ip=10.0.254.204 dest_port=68 pid=650 user=dhcpcd fd=3u ip_version=4 dvc_id=7094 transport=UDP


_raw:
Proto   Port
udp       68
udp    48050
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp    60814
udp       68
udp      546
tcp     8889
tcp    37215
tcp     3389
tcp     3350
tcp     8080


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw: Fri Jan  9 11:02:33 AM EST 2026 app=firefox-esr dest_ip=* dest_port=38968 pid=244039 user=pentester fd=244u ip_version=4 dvc_id=368417 transport=UDP


_raw: Fri Jan  9 11:02:33 AM EST 2026 app=firefox-esr dest_ip=* dest_port=38797 pid=244039 user=pentester fd=182u ip_version=4 dvc_id=408853 transport=UDP


_raw: Fri Jan  9 11:02:33 AM EST 2026 app=firefox-esr dest_ip=* dest_port=37859 pid=244039 user=pentester fd=163u ip_version=4 dvc_id=408849 transport=UDP


_raw: Fri Jan  9 11:02:33 AM EST 2026 app=firefox-esr dest_ip=* dest_port=43982 pid=244039 user=pentester fd=141u ip_version=4 dvc_id=408846 transport=UDP


_raw: Fri Jan  9 11:02:33 AM EST 2026 app=firefox-esr dest_ip=* dest_port=59182 pid=244039 user=pentester fd=78u ip_version=4 dvc_id=409984 transport=UDP


_raw: Fri Jan  9 11:02:33 AM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1816 user=root fd=13u ip_version=4 dvc_id=14685 transport=TCP


_raw: Fri Jan  9 11:02:33 AM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=955 user=xrdp fd=11u ip_version=6 dvc_id=9949 transport=TCP


_raw: Fri Jan  9 11:02:33 AM EST 2026 app=dhcpcd dest_ip=10.0.254.206 dest_port=68 pid=833 user=dhcpcd fd=3u ip_version=4 dvc_id=8707 transport=UDP


_raw: Fri Jan  9 11:02:11 AM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=266083 user=pentester fd=37u ip_version=6 dvc_id=387836 transport=TCP


_raw: Fri Jan  9 11:02:11 AM EST 2026 app=java dest_ip=127.0.0.1 dest_port=45365 pid=266083 user=pentester fd=18u ip_version=6 dvc_id=384707 transport=TCP


_raw: Fri Jan  9 11:02:11 AM EST 2026 app=sshd dest_ip=* dest_port=22 pid=236343 user=root fd=7u ip_version=6 dvc_id=321771 transport=TCP


_raw: Fri Jan  9 11:02:11 AM EST 2026 app=sshd dest_ip=* dest_port=22 pid=236343 user=root fd=6u ip_version=4 dvc_id=321769 transport=TCP


_raw: Fri Jan  9 11:02:11 AM EST 2026 app=chromium dest_ip=224.0.0.251 dest_port=5353 pid=230845 user=pentester fd=284u ip_version=4 dvc_id=316926 transport=UDP


_raw: Fri Jan  9 11:02:11 AM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1961 user=root fd=13u ip_version=4 dvc_id=16029 transport=TCP


_raw: Fri Jan  9 11:02:11 AM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=880 user=xrdp fd=11u ip_version=6 dvc_id=11589 transport=TCP


_raw: Fri Jan  9 11:02:11 AM EST 2026 app=dhcpcd dest_ip=10.0.254.203 dest_port=68 pid=649 user=dhcpcd fd=3u ip_version=4 dvc_id=6995 transport=UDP


_raw: Fri Jan  9 11:02:11 AM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=41739 pid=245803 user=root fd=9u ip_version=4 dvc_id=334765 transport=TCP


_raw: Fri Jan  9 11:02:11 AM EST 2026 app=sshd dest_ip=* dest_port=22 pid=236381 user=root fd=7u ip_version=6 dvc_id=311986 transport=TCP


_raw: Fri Jan  9 11:02:11 AM EST 2026 app=sshd dest_ip=* dest_port=22 pid=236381 user=root fd=6u ip_version=4 dvc_id=311984 transport=TCP


_raw: Fri Jan  9 11:02:11 AM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1960 user=root fd=13u ip_version=4 dvc_id=11113 transport=TCP


_raw: Fri Jan  9 11:02:11 AM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=872 user=xrdp fd=11u ip_version=6 dvc_id=10697 transport=TCP


_raw: Fri Jan  9 11:02:11 AM EST 2026 app=dhcpcd dest_ip=10.0.254.201 dest_port=68 pid=648 user=dhcpcd fd=3u ip_version=4 dvc_id=7973 transport=UDP


_raw: Fri Jan  9 11:02:10 AM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=241920 user=pentester fd=37u ip_version=6 dvc_id=331558 transport=TCP


_raw: Fri Jan  9 11:02:10 AM EST 2026 app=java dest_ip=127.0.0.1 dest_port=34981 pid=241920 user=pentester fd=18u ip_version=6 dvc_id=330759 transport=TCP


_raw: Fri Jan  9 11:02:10 AM EST 2026 app=sshd dest_ip=* dest_port=22 pid=233411 user=root fd=7u ip_version=6 dvc_id=311032 transport=TCP


_raw: Fri Jan  9 11:02:10 AM EST 2026 app=sshd dest_ip=* dest_port=22 pid=233411 user=root fd=6u ip_version=4 dvc_id=311030 transport=TCP


_raw: Fri Jan  9 11:02:10 AM EST 2026 app=firefox-esr dest_ip=* dest_port=53533 pid=230497 user=pentester fd=140u ip_version=4 dvc_id=431029 transport=UDP


_raw: Fri Jan  9 11:02:10 AM EST 2026 app=firefox-esr dest_ip=* dest_port=52259 pid=230497 user=pentester fd=114u ip_version=4 dvc_id=351624 transport=UDP


_raw: Fri Jan  9 11:02:10 AM EST 2026 app=firefox-esr dest_ip=* dest_port=38777 pid=230497 user=pentester fd=98u ip_version=4 dvc_id=453512 transport=UDP


_raw: Fri Jan  9 11:02:10 AM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1955 user=root fd=13u ip_version=4 dvc_id=12701 transport=TCP


_raw: Fri Jan  9 11:02:10 AM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=876 user=xrdp fd=11u ip_version=6 dvc_id=11455 transport=TCP


_raw: Fri Jan  9 11:02:10 AM EST 2026 app=docker-proxy dest_ip=* dest_port=7777 pid=242178 user=root fd=4u ip_version=6 dvc_id=336895 transport=TCP


_raw: Fri Jan  9 11:02:10 AM EST 2026 app=dhcpcd dest_ip=10.0.254.204 dest_port=68 pid=651 user=dhcpcd fd=3u ip_version=4 dvc_id=8370 transport=UDP


_raw: Fri Jan  9 11:02:10 AM EST 2026 app=docker-proxy dest_ip=* dest_port=7777 pid=242162 user=root fd=4u ip_version=4 dvc_id=337706 transport=TCP


_raw: Fri Jan  9 11:02:10 AM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=36919 pid=239314 user=root fd=8u ip_version=4 dvc_id=327075 transport=TCP


_raw: Fri Jan  9 11:02:10 AM EST 2026 app=sshd dest_ip=* dest_port=22 pid=234922 user=root fd=7u ip_version=6 dvc_id=318034 transport=TCP


_raw: Fri Jan  9 11:02:10 AM EST 2026 app=sshd dest_ip=* dest_port=22 pid=234922 user=root fd=6u ip_version=4 dvc_id=318026 transport=TCP


_raw: Fri Jan  9 11:02:10 AM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1903 user=root fd=13u ip_version=4 dvc_id=15406 transport=TCP


_raw: Fri Jan  9 11:02:10 AM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=860 user=xrdp fd=11u ip_version=6 dvc_id=10034 transport=TCP


_raw: Fri Jan  9 11:02:10 AM EST 2026 app=dhcpcd dest_ip=10.0.254.202 dest_port=68 pid=648 user=dhcpcd fd=3u ip_version=4 dvc_id=7596 transport=UDP


_raw: Fri Jan  9 11:02:10 AM EST 2026 app=sshd dest_ip=* dest_port=22 pid=233401 user=root fd=7u ip_version=6 dvc_id=310487 transport=TCP


_raw: Fri Jan  9 11:02:10 AM EST 2026 app=sshd dest_ip=* dest_port=22 pid=233401 user=root fd=6u ip_version=4 dvc_id=310485 transport=TCP


_raw: Fri Jan  9 11:02:10 AM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1900 user=root fd=13u ip_version=4 dvc_id=16410 transport=TCP


_raw: Fri Jan  9 11:02:10 AM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=875 user=xrdp fd=11u ip_version=6 dvc_id=9637 transport=TCP


_raw: Fri Jan  9 11:02:10 AM EST 2026 app=dhcpcd dest_ip=10.0.254.205 dest_port=68 pid=647 user=dhcpcd fd=3u ip_version=4 dvc_id=8557 transport=UDP


_raw:
Proto   Port
udp       68
udp     5353
udp      546
tcp     8889
tcp       22
tcp     8080
tcp     3350
tcp     3389
tcp       22
tcp    45365


_raw: Fri Jan  9 11:02:09 AM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1898 user=root fd=13u ip_version=4 dvc_id=17745 transport=TCP


_raw: Fri Jan  9 11:02:09 AM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=873 user=xrdp fd=11u ip_version=6 dvc_id=8192 transport=TCP


_raw: Fri Jan  9 11:02:09 AM EST 2026 app=dhcpcd dest_ip=10.0.254.206 dest_port=68 pid=646 user=dhcpcd fd=3u ip_version=4 dvc_id=8633 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp    41739
tcp     8889
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp    38777
udp    52259
udp       68
udp    53533
udp      546
tcp     8889
tcp       22
tcp     3350
tcp     3389
tcp     8080
tcp       22
tcp    34981


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp    36919
tcp     7777
tcp       22
tcp     3350
tcp     7777
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp       22
tcp     3389
tcp       22
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3389
tcp    37961
tcp     8080
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp    41727
tcp     8889
tcp       80
tcp     3389
tcp     3350


_raw:
Proto   Port
udp    39119
udp    39711
udp       68
udp    45946
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp    45879
tcp     3350
tcp     3389
tcp     8080


_raw:
Proto   Port
udp    59627
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3389
tcp     8080
tcp    41765
tcp     3350


_raw: Fri Jan  9 11:01:34 AM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=245957 user=pentester fd=37u ip_version=6 dvc_id=340457 transport=TCP


_raw: Fri Jan  9 11:01:34 AM EST 2026 app=java dest_ip=127.0.0.1 dest_port=45883 pid=245957 user=pentester fd=18u ip_version=6 dvc_id=340325 transport=TCP


_raw: Fri Jan  9 11:01:34 AM EST 2026 app=chrome dest_ip=224.0.0.251 dest_port=5353 pid=239966 user=pentester fd=195u ip_version=4 dvc_id=328460 transport=UDP


_raw: Fri Jan  9 11:01:34 AM EST 2026 app=chromium dest_ip=224.0.0.251 dest_port=5353 pid=248055 user=pentester fd=259u ip_version=4 dvc_id=404724 transport=UDP


_raw: Fri Jan  9 11:01:34 AM EST 2026 app=chromium dest_ip=224.0.0.251 dest_port=5353 pid=231113 user=pentester fd=194u ip_version=4 dvc_id=307073 transport=UDP


_raw: Fri Jan  9 11:01:34 AM EST 2026 app=firefox-esr dest_ip=* dest_port=35578 pid=241118 user=pentester fd=198u ip_version=4 dvc_id=467783 transport=UDP


_raw: Fri Jan  9 11:01:34 AM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1898 user=root fd=13u ip_version=4 dvc_id=17045 transport=TCP


_raw: Fri Jan  9 11:01:34 AM EST 2026 app=firefox-esr dest_ip=* dest_port=48356 pid=241118 user=pentester fd=188u ip_version=4 dvc_id=467766 transport=UDP


_raw: Fri Jan  9 11:01:34 AM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=874 user=xrdp fd=11u ip_version=6 dvc_id=8912 transport=TCP


_raw: Fri Jan  9 11:01:34 AM EST 2026 app=firefox-esr dest_ip=* dest_port=41604 pid=241118 user=pentester fd=187u ip_version=4 dvc_id=468534 transport=UDP


_raw: Fri Jan  9 11:01:34 AM EST 2026 app=dhcpcd dest_ip=10.0.254.205 dest_port=68 pid=647 user=dhcpcd fd=3u ip_version=4 dvc_id=8211 transport=UDP


_raw: Fri Jan  9 11:01:34 AM EST 2026 app=firefox-esr dest_ip=* dest_port=59976 pid=241118 user=pentester fd=185u ip_version=4 dvc_id=467656 transport=UDP


_raw: Fri Jan  9 11:01:34 AM EST 2026 app=firefox-esr dest_ip=* dest_port=40064 pid=241118 user=pentester fd=184u ip_version=4 dvc_id=466908 transport=UDP


_raw: Fri Jan  9 11:01:34 AM EST 2026 app=firefox-esr dest_ip=* dest_port=47744 pid=241118 user=pentester fd=157u ip_version=4 dvc_id=466889 transport=UDP


_raw: Fri Jan  9 11:01:34 AM EST 2026 app=firefox-esr dest_ip=* dest_port=54513 pid=241118 user=pentester fd=144u ip_version=4 dvc_id=466887 transport=UDP


_raw: Fri Jan  9 11:01:34 AM EST 2026 app=firefox-esr dest_ip=* dest_port=42486 pid=241118 user=pentester fd=111u ip_version=4 dvc_id=469130 transport=UDP


_raw: Fri Jan  9 11:01:34 AM EST 2026 app=caido-cli dest_ip=127.0.0.1 dest_port=8080 pid=239427 user=pentester fd=36u ip_version=4 dvc_id=320664 transport=TCP


_raw: Fri Jan  9 11:01:34 AM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1904 user=root fd=13u ip_version=4 dvc_id=16465 transport=TCP


_raw: Fri Jan  9 11:01:34 AM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=876 user=xrdp fd=11u ip_version=6 dvc_id=9605 transport=TCP


_raw: Fri Jan  9 11:01:34 AM EST 2026 app=dhcpcd dest_ip=10.0.254.206 dest_port=68 pid=646 user=dhcpcd fd=3u ip_version=4 dvc_id=8852 transport=UDP


_raw:
Proto   Port
udp    42035
udp    52346
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw: Fri Jan  9 11:01:33 AM EST 2026 app=firefox-esr dest_ip=* dest_port=52525 pid=229997 user=pentester fd=180u ip_version=4 dvc_id=502147 transport=UDP


_raw: Fri Jan  9 11:01:33 AM EST 2026 app=firefox-esr dest_ip=* dest_port=41319 pid=229997 user=pentester fd=176u ip_version=4 dvc_id=502145 transport=UDP


_raw: Fri Jan  9 11:01:33 AM EST 2026 app=firefox-esr dest_ip=* dest_port=42483 pid=229997 user=pentester fd=169u ip_version=4 dvc_id=502921 transport=UDP


_raw: Fri Jan  9 11:01:33 AM EST 2026 app=firefox-esr dest_ip=* dest_port=39609 pid=229997 user=pentester fd=138u ip_version=4 dvc_id=501386 transport=UDP


_raw: Fri Jan  9 11:01:33 AM EST 2026 file_hash=SHA2-256(stdin)= cb8ad5f49d3e7401f2ffefabb9ff23a03fc1d5c9ad60f84c505aa322f434ec9e


_raw: Fri Jan  9 11:01:33 AM EST 2026 app=firefox-esr dest_ip=* dest_port=41137 pid=229997 user=pentester fd=79u ip_version=4 dvc_id=502923 transport=UDP


_raw: Fri Jan  9 11:01:33 AM EST 2026 app=docker-proxy dest_ip=127.0.0.1 dest_port=8080 pid=244517 user=root fd=4u ip_version=4 dvc_id=361352 transport=TCP


_raw: Fri Jan  9 11:01:33 AM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1898 user=root fd=13u ip_version=4 dvc_id=16381 transport=TCP


_raw: Fri Jan  9 11:01:33 AM EST 2026 app=docker-proxy dest_ip=127.0.0.1 dest_port=7687 pid=243743 user=root fd=4u ip_version=4 dvc_id=359336 transport=TCP


_raw: Fri Jan  9 11:01:33 AM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=870 user=xrdp fd=11u ip_version=6 dvc_id=11545 transport=TCP


_raw: Fri Jan  9 11:01:33 AM EST 2026 app=docker-proxy dest_ip=127.0.0.1 dest_port=7474 pid=243736 user=root fd=4u ip_version=4 dvc_id=359331 transport=TCP


_raw: Fri Jan  9 11:01:33 AM EST 2026 app=dhcpcd dest_ip=10.0.254.201 dest_port=68 pid=646 user=dhcpcd fd=3u ip_version=4 dvc_id=7886 transport=UDP


_raw: Fri Jan  9 11:01:33 AM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=42705 pid=236964 user=root fd=9u ip_version=4 dvc_id=331640 transport=TCP


_raw: Fri Jan  9 11:01:33 AM EST 2026 app=firefox-esr dest_ip=* dest_port=38842 pid=231589 user=pentester fd=128u ip_version=4 dvc_id=522245 transport=UDP


_raw: Fri Jan  9 11:01:33 AM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1900 user=root fd=13u ip_version=4 dvc_id=13652 transport=TCP


_raw: Fri Jan  9 11:01:33 AM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=877 user=xrdp fd=11u ip_version=6 dvc_id=13335 transport=TCP


_raw: Fri Jan  9 11:01:33 AM EST 2026 app=dhcpcd dest_ip=10.0.254.202 dest_port=68 pid=648 user=dhcpcd fd=3u ip_version=4 dvc_id=9240 transport=UDP


_raw: Fri Jan  9 11:01:33 AM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=35623 pid=232347 user=root fd=9u ip_version=4 dvc_id=310302 transport=TCP


_raw: Fri Jan  9 11:01:33 AM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1903 user=root fd=13u ip_version=4 dvc_id=14680 transport=TCP


_raw: Fri Jan  9 11:01:33 AM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=880 user=xrdp fd=11u ip_version=6 dvc_id=11631 transport=TCP


_raw: Fri Jan  9 11:01:33 AM EST 2026 app=dhcpcd dest_ip=10.0.254.203 dest_port=68 pid=651 user=dhcpcd fd=3u ip_version=4 dvc_id=8793 transport=UDP


_raw: Fri Jan  9 11:01:33 AM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1897 user=root fd=13u ip_version=4 dvc_id=8154 transport=TCP


_raw: Fri Jan  9 11:01:33 AM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=870 user=xrdp fd=11u ip_version=6 dvc_id=9101 transport=TCP


_raw: Fri Jan  9 11:01:33 AM EST 2026 app=dhcpcd dest_ip=10.0.254.204 dest_port=68 pid=645 user=dhcpcd fd=3u ip_version=4 dvc_id=8564 transport=UDP


_raw:
Proto   Port
udp       68
udp     5353
udp     5353
udp      546
tcp     8889
tcp     3350
tcp    45883
tcp     3389
tcp     8080


_raw:
Proto   Port
udp       68
udp    38842
udp      546
tcp     8889
tcp    42705
tcp     7474
tcp     8080
tcp     7687
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp    35623
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp    48820
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389
tcp    35857
tcp     8080


_raw:
Proto   Port
udp    43714
udp       68
udp      546
tcp     8889
tcp    34413
tcp     3389
tcp     8080
tcp     3350


_raw:
Proto   Port
udp    47710
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp    37738
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp    41821
udp    42470
udp    59435
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp    52463
udp       53
udp       68
udp      546
tcp     8889
tcp       53
tcp     3080
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389
tcp    33175
tcp     8080


_raw:
Proto   Port
udp       68
udp    53696
udp    46293
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3389
tcp    32889
tcp     8080
tcp     3350


_raw:
Proto   Port
udp       68
udp    34999
udp    43694
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp    46598
udp    54933
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp    39104
udp    40743
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp    36977
tcp     8080
tcp     3389


_raw:
Proto   Port
udp    60930
udp    41018
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp     8000
tcp       22
tcp     3350
tcp     3389
tcp     8080


_raw:
Proto   Port
udp       68
udp      546
tcp    42042
tcp       22
tcp     8000
tcp     8889
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp    44812
udp       68
udp    37939
udp    46782
udp      546
tcp       22
tcp     8889
tcp     8080
tcp    39031
tcp     3389
tcp       22
tcp     3350


_raw:
Proto   Port
udp       68
udp    59716
udp      546
tcp     7474
tcp    39943
tcp     8080
tcp     7687
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp    47214
udp       68
udp      546
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp    57928
udp      546
tcp     8889
tcp    43007
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      443
udp       53
udp       88
udp      137
udp      161
udp      389
udp      546
udp     5353
udp     5355
udp     1434
tcp     8889
tcp    39371
tcp     7474
tcp     8080
tcp     7687
tcp     3389
tcp      445
tcp      443
tcp      389
tcp       53
tcp       25
tcp       21
tcp      110
tcp       88
tcp       80
tcp      143
tcp      139
tcp      135
tcp      636
tcp      587
tcp     1433
tcp     5986
tcp     5985
tcp     1883
tcp     3350
tcp    46827


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp    34829
tcp     3350
tcp     8080
tcp     3389
tcp    44033


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     5432
tcp     8080
tcp     3350
tcp     3389
tcp     7687
tcp     5432
tcp     2112
tcp     7474


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp    41905
tcp     3389
tcp     8080


_raw:
Proto   Port
udp    59167
udp       68
udp      546
tcp    34409
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp      999
tcp     2019
tcp    44719
tcp     8000
tcp     1337
tcp     3350
tcp     3389


_raw:
Proto   Port
udp    36610
udp       68
udp    54172
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp    60814
udp       68
udp      546
tcp     8889
tcp    37215
tcp     3389
tcp     3350
tcp     8080


_raw:
Proto   Port
udp       68
udp      546
tcp    41739
tcp     8889
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp    36919
tcp     7777
tcp       22
tcp     3350
tcp     7777
tcp     3389


_raw:
Proto   Port
udp    52259
udp       68
udp    53533
udp      546
tcp     8889
tcp       22
tcp     3350
tcp     3389
tcp     8080
tcp       22
tcp    34981


_raw:
Proto   Port
udp       68
udp     5353
udp      546
tcp     8889
tcp       22
tcp     8080
tcp     3350
tcp     3389
tcp       22
tcp    45365


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp       22
tcp     3389
tcp       22
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3389
tcp    37961
tcp     8080
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp    41727
tcp     8889
tcp       80
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp    45879
tcp     3350
tcp     3389
tcp     8080


_raw:
Proto   Port
udp    59627
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3389
tcp     8080
tcp    41765
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp    35623
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp     5353
udp       68
udp      546
tcp     8889
tcp     8080
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp     5353
udp     5353
udp      546
tcp     8889
tcp     3350
tcp    45883
tcp     3389
tcp     8080


_raw:
Proto   Port
udp    43714
udp       68
udp      546
tcp     8889
tcp    34413
tcp     3389
tcp     8080
tcp     3350


_raw:
Proto   Port
udp    47710
udp    53126
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389
tcp    35857
tcp     8080


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp    52087
udp       53
udp       68
udp      546
tcp     8889
tcp       53
tcp     3080
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp    43254
udp      546
tcp     8889
tcp     3350
tcp     3389
tcp    33175
tcp     8080


_raw:
Proto   Port
udp       68
udp    37198
udp    46026
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp    38632
udp    60354
udp       68
udp    49234
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3389
tcp    32889
tcp     8080
tcp     3350


_raw:
Proto   Port
udp       68
udp    34999
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp    52998
udp    53086
udp       68
udp    54933
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp    41816
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp    46742
udp    47258
udp    52266
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp     8000
tcp       22
tcp     3350
tcp     3389
tcp     8080


_raw:
Proto   Port
udp       68
udp      546
tcp    42042
tcp       22
tcp     8000
tcp     8889
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp       68
udp    57461
udp    42167
udp      546
tcp       22
tcp     8889
tcp     8080
tcp    39031
tcp     3389
tcp       22
tcp     3350


_raw:
Proto   Port
udp       68
udp      443
udp    46835
udp       53
udp       88
udp      137
udp      161
udp      389
udp      546
udp     5353
udp     5355
udp     1434
tcp       22
tcp     8889
tcp     3350
tcp      445
tcp      443
tcp      389
tcp      110
tcp       80
tcp       88
tcp       53
tcp       21
tcp       22
tcp       25
tcp      135
tcp      143
tcp      139
tcp      636
tcp      587
tcp     1433
tcp     5985
tcp     5986
tcp     1883
tcp     3389
tcp    48861


_raw:
Proto   Port
udp    47214
udp    53316
udp       68
udp      546
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp    34391
tcp    43819
tcp     8080
tcp     3350
tcp     3389


_raw:
Proto   Port
udp    32827
udp       68
udp    57928
udp      546
tcp     8889
tcp    43007
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      443
udp       53
udp       88
udp      137
udp      161
udp      389
udp      546
udp     5353
udp     5355
udp     1434
tcp     8889
tcp    39371
tcp     7474
tcp     8080
tcp     7687
tcp     3389
tcp      445
tcp      443
tcp      389
tcp       53
tcp       25
tcp       21
tcp      110
tcp       88
tcp       80
tcp      143
tcp      139
tcp      135
tcp      636
tcp      587
tcp     1433
tcp     5986
tcp     5985
tcp     1883
tcp     3350
tcp    46827


_raw:
Proto   Port
udp       68
udp      546
tcp     7687
tcp     8080
tcp     7474
tcp     8889
tcp    46167
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp    34829
tcp     3350
tcp     8080
tcp     3389
tcp    44033


_raw: Fri Jan  9 10:53:06 AM EST 2026 app=bhapi dest_ip=127.0.0.1 dest_port=8080 pid=52481 user=_bloodhound fd=9u ip_version=4 dvc_id=108528 transport=TCP


_raw: Fri Jan  9 10:53:06 AM EST 2026 app=bhapi dest_ip=* dest_port=2112 pid=52481 user=_bloodhound fd=6u ip_version=6 dvc_id=113297 transport=TCP


_raw: Fri Jan  9 10:53:06 AM EST 2026 app=java dest_ip=127.0.0.1 dest_port=7474 pid=46203 user=root fd=282u ip_version=6 dvc_id=100897 transport=TCP


_raw: Fri Jan  9 10:53:06 AM EST 2026 app=java dest_ip=127.0.0.1 dest_port=7687 pid=46203 user=root fd=281u ip_version=6 dvc_id=100891 transport=TCP


_raw: Fri Jan  9 10:53:06 AM EST 2026 app=postgres dest_ip=127.0.0.1 dest_port=5432 pid=46066 user=postgres fd=7u ip_version=4 dvc_id=98798 transport=TCP


_raw: Fri Jan  9 10:53:06 AM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1905 user=root fd=13u ip_version=4 dvc_id=14397 transport=TCP


_raw: Fri Jan  9 10:53:06 AM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=880 user=xrdp fd=11u ip_version=6 dvc_id=12115 transport=TCP


_raw: Fri Jan  9 10:53:06 AM EST 2026 app=dhcpcd dest_ip=10.0.254.206 dest_port=68 pid=650 user=dhcpcd fd=3u ip_version=4 dvc_id=6940 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     5432
tcp     8080
tcp     3350
tcp     3389
tcp     7687
tcp     5432
tcp     2112
tcp     7474


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp    41905
tcp     3389
tcp     8080


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp    34409
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     2019
tcp    44719
tcp     8000
tcp     1337
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp    53096
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp    60814
udp       68
udp      546
tcp     8889
tcp    37215
tcp     3389
tcp     3350
tcp     8080


_raw:
Proto   Port
udp    38968
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp    36919
tcp     7777
tcp       22
tcp     3350
tcp     7777
tcp     3389


_raw:
Proto   Port
udp       68
udp     5353
udp      546
tcp     8889
tcp       22
tcp     8080
tcp     3350
tcp     3389
tcp       22
tcp    45365


_raw:
Proto   Port
udp       68
udp      546
tcp    41739
tcp     8889
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp       22
tcp     3389
tcp       22
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3389
tcp    37961
tcp     8080
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp    41727
tcp     8889
tcp       80
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp    45879
tcp     3350
tcp     3389
tcp     8080


_raw:
Proto   Port
udp    59627
udp    44751
udp    49062
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3389
tcp     8080
tcp    41765
tcp     3350


_raw:
Proto   Port
udp    52346
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp    39711
udp       68
udp    45946
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp     5353
udp     5353
udp      546
tcp     8889
tcp     3350
tcp    45883
tcp     3389
tcp     8080


_raw:
Proto   Port
udp     5353
udp       68
udp      546
tcp     8889
tcp     8080
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp    35623
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp    59454
udp    59999
udp    48717
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389
tcp    35857
tcp     8080


_raw:
Proto   Port
udp    43714
udp       68
udp      546
tcp     8889
tcp    34413
tcp     3389
tcp     8080
tcp     3350


_raw:
Proto   Port
udp    32836
udp       68
udp      546
tcp     8889
tcp     5432
tcp     3350
tcp     3001
tcp     3389
tcp     5432
tcp     1337


_raw:
Proto   Port
udp    47710
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp    45899
udp    41873
udp    35976
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       53
udp       68
udp      546
tcp     8889
tcp       53
tcp     3080
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389
tcp    33175
tcp     8080


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3389
tcp    32889
tcp     8080
tcp     3350


_raw:
Proto   Port
udp       68
udp    34999
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp    36577
udp       68
udp    54933
udp    39449
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp    36977
tcp     8080
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp     8000
tcp       22
tcp     3350
tcp     3389
tcp     8080


_raw:
Proto   Port
udp       68
udp      546
tcp    42042
tcp       22
tcp     8000
tcp     8889
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp     8080
tcp    39031
tcp     3389
tcp       22
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp      445
tcp       80
tcp       22
tcp      135
tcp     8889
tcp     9389
tcp     5985
tcp     5986
tcp     6666
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp    47214
udp       68
udp      546
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp      546
tcp    39343
tcp     4444
tcp     8000
tcp     8889
tcp     3350
tcp     3389
tcp     8000


_raw:
Proto   Port
udp       68
udp      443
udp       53
udp       88
udp      137
udp      161
udp      389
udp      546
udp     5353
udp     5355
udp     1434
tcp     8889
tcp    39371
tcp     7474
tcp     8080
tcp     7687
tcp     3389
tcp      445
tcp      443
tcp      389
tcp       53
tcp       25
tcp       21
tcp      110
tcp       88
tcp       80
tcp      143
tcp      139
tcp      135
tcp      636
tcp      587
tcp    46354
tcp     1433
tcp     5986
tcp     5985
tcp     1883
tcp     3350


_raw:
Proto   Port
udp    48489
udp       68
udp    57928
udp      546
tcp     8889
tcp    43007
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp    58543
udp      546
tcp     8889
tcp    34391
tcp    43819
tcp     8080
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     7687
tcp     8080
tcp     7474
tcp     8889
tcp    46167
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp    34829
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     5432
tcp     8080
tcp     3350
tcp     3389
tcp     7687
tcp     5432
tcp     2112
tcp     7474


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp    41905
tcp     3389
tcp     8080


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     2019
tcp    44719
tcp     8000
tcp     1337
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp    34409
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp    41793
udp      546
tcp     8889
tcp     7474
tcp     7687
tcp     8888
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp    54178
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp    60814
udp       68
udp      546
tcp     8889
tcp    37215
tcp     3389
tcp     3350
tcp     8080


_raw:
Proto   Port
udp       68
udp      546
tcp    41739
tcp     8889
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp     5353
udp      546
tcp     8889
tcp       22
tcp     8080
tcp     3350
tcp     3389
tcp       22
tcp    45365


_raw:
Proto   Port
udp    50707
udp    52259
udp       68
udp    45254
udp      546
tcp     8889
tcp       22
tcp     3350
tcp     3389
tcp     8080
tcp       22
tcp    34981


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp    36919
tcp     7777
tcp       22
tcp     3350
tcp     7777
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp       22
tcp     3389
tcp       22
tcp     3350


_raw:
Proto   Port
udp    48141
udp       68
udp    37471
udp      546
tcp     8889
tcp     3389
tcp    37961
tcp     8080
tcp     3350


_raw:
Proto   Port
udp       68
udp    49354
udp      546
tcp    41727
tcp     8889
tcp       80
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp    45879
tcp     3350
tcp     3389
tcp     8080


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3389
tcp     8080
tcp    41765
tcp     3350


_raw:
Proto   Port
udp    35901
udp    52346
udp    60582
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp    39711
udp       68
udp    45946
udp    50144
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp     5353
udp    43098
udp    45086
udp       68
udp      546
tcp     8889
tcp     8080
tcp     3350
tcp     3389


_raw:
Proto   Port
udp    46072
udp    42203
udp       68
udp      546
tcp    35623
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp     5353
udp     5353
udp      546
tcp     8889
tcp     3350
tcp    45883
tcp     3389
tcp     8080


_raw:
Proto   Port
udp       68
udp    35263
udp      546
tcp     8889
tcp    42705
tcp     7474
tcp     8080
tcp     7687
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp    43714
udp       68
udp      546
tcp     8889
tcp    34413
tcp     3389
tcp     8080
tcp     3350


_raw:
Proto   Port
udp    32836
udp       68
udp      546
tcp     8889
tcp     5432
tcp     3350
tcp     3001
tcp     3389
tcp     5432
tcp     1337


_raw:
Proto   Port
udp    47710
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       53
udp       68
udp      546
tcp     8889
tcp       53
tcp     3080
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389
tcp    33175
tcp     8080


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3389
tcp    32889
tcp     8080
tcp     3350


_raw:
Proto   Port
udp       68
udp    54933
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp    36977
tcp     8080
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp     8000
tcp       22
tcp     3350
tcp     3389
tcp     8080


_raw:
Proto   Port
udp       68
udp      546
tcp    42042
tcp       22
tcp     8000
tcp     8889
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp     8080
tcp    39031
tcp     3389
tcp       22
tcp     3350


_raw:
Proto   Port
udp       68
udp    44208
udp      546
tcp      445
tcp       80
tcp       22
tcp      135
tcp     8889
tcp     9389
tcp     5985
tcp     5986
tcp     6666
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp    47214
udp    48512
udp       68
udp      546
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Fri Jan  9 10:44:02 AM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=7545 user=root fd=13u ip_version=4 dvc_id=26791 transport=TCP


_raw: Fri Jan  9 10:44:02 AM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=5163 user=xrdp fd=11u ip_version=6 dvc_id=19513 transport=TCP


_raw: Fri Jan  9 10:44:02 AM EST 2026 app=sshd dest_ip=* dest_port=22 pid=3873 user=root fd=7u ip_version=6 dvc_id=14958 transport=TCP


_raw: Fri Jan  9 10:44:02 AM EST 2026 app=sshd dest_ip=* dest_port=22 pid=3873 user=root fd=6u ip_version=4 dvc_id=14956 transport=TCP


_raw: Fri Jan  9 10:44:02 AM EST 2026 app=dhcpcd dest_ip=10.0.254.203 dest_port=68 pid=663 user=dhcpcd fd=3u ip_version=4 dvc_id=9433 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp    39371
tcp     7474
tcp     8080
tcp     7687
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp    34391
tcp    43819
tcp     8080
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp    57928
udp    35990
udp      546
tcp     8889
tcp    43007
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp     7687
tcp     8080
tcp     7474
tcp     8889
tcp    46167
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp    34829
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     5432
tcp     8080
tcp     3350
tcp     3389
tcp     7687
tcp     5432
tcp     2112
tcp     7474


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp    41905
tcp     3389
tcp     8080


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     2019
tcp    44719
tcp     8000
tcp     1337
tcp     3350
tcp     3389


_raw:
Proto   Port
udp    34251
udp       68
udp      546
tcp    34409
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp    39417
udp       68
udp    41793
udp      546
tcp     8889
tcp     7474
tcp     7687
tcp     8888
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp    39233
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp    60814
udp       68
udp      546
tcp     8889
tcp    37215
tcp     3389
tcp     3350
tcp     8080


_raw:
Proto   Port
udp    52259
udp       68
udp      546
tcp     8889
tcp       22
tcp     3350
tcp     3389
tcp     8080
tcp       22
tcp    34981


_raw:
Proto   Port
udp       68
udp     5353
udp      546
tcp     8889
tcp       22
tcp     8080
tcp     3350
tcp     3389
tcp       22
tcp    45365


_raw:
Proto   Port
udp       68
udp      546
tcp    41739
tcp     8889
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp    36919
tcp     7777
tcp       22
tcp     3350
tcp     7777
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp       22
tcp     3389
tcp       22
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3389
tcp    37961
tcp     8080
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp    41727
tcp     8889
tcp       80
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp    45879
tcp     3350
tcp     3389
tcp     8080


_raw:
Proto   Port
udp    42922
udp    39160
udp    48867
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp    39711
udp    48106
udp       68
udp    45946
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3389
tcp     8080
tcp    41765
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp    35623
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp     5353
udp       68
udp      546
tcp     8889
tcp     8080
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp     5353
udp     5353
udp      546
tcp     8889
tcp     3350
tcp    45883
tcp     3389
tcp     8080


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp    47710
udp       68
udp    51172
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp    32836
udp       68
udp      546
tcp     8889
tcp     5432
tcp     3350
tcp     3001
tcp     3389
tcp     5432
tcp     1337


_raw:
Proto   Port
udp    43714
udp       68
udp      546
tcp     8889
tcp    34413
tcp     3389
tcp     8080
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       53
udp       68
udp      546
tcp     8889
tcp       53
tcp     3080
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389
tcp    36881
tcp     8080


_raw:
Proto   Port
udp    39792
udp    45066
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw: Fri Jan  9 10:40:39 AM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=7558 user=root fd=13u ip_version=4 dvc_id=23973 transport=TCP


_raw: Fri Jan  9 10:40:39 AM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=5179 user=xrdp fd=11u ip_version=6 dvc_id=20647 transport=TCP


_raw: Fri Jan  9 10:40:39 AM EST 2026 app=sshd dest_ip=* dest_port=22 pid=3890 user=root fd=7u ip_version=6 dvc_id=16030 transport=TCP


_raw: Fri Jan  9 10:40:39 AM EST 2026 app=sshd dest_ip=* dest_port=22 pid=3890 user=root fd=6u ip_version=4 dvc_id=16028 transport=TCP


_raw: Fri Jan  9 10:40:39 AM EST 2026 app=dhcpcd dest_ip=10.0.254.204 dest_port=68 pid=666 user=dhcpcd fd=3u ip_version=4 dvc_id=7580 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3389
tcp    32889
tcp     8080
tcp     3350


_raw:
Proto   Port
udp       68
udp    54933
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw: Fri Jan  9 10:40:02 AM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=7177 user=root fd=13u ip_version=4 dvc_id=23194 transport=TCP


_raw: Fri Jan  9 10:40:02 AM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=5141 user=xrdp fd=11u ip_version=6 dvc_id=20551 transport=TCP


_raw: Fri Jan  9 10:40:02 AM EST 2026 app=sshd dest_ip=* dest_port=22 pid=3869 user=root fd=7u ip_version=6 dvc_id=15797 transport=TCP


_raw: Fri Jan  9 10:40:02 AM EST 2026 app=sshd dest_ip=* dest_port=22 pid=3869 user=root fd=6u ip_version=4 dvc_id=15789 transport=TCP


_raw: Fri Jan  9 10:40:02 AM EST 2026 app=dhcpcd dest_ip=10.0.254.206 dest_port=68 pid=666 user=dhcpcd fd=3u ip_version=4 dvc_id=8705 transport=UDP


_raw: Fri Jan  9 10:39:52 AM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=7387 user=root fd=13u ip_version=4 dvc_id=24183 transport=TCP


_raw: Fri Jan  9 10:39:52 AM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=5186 user=xrdp fd=11u ip_version=6 dvc_id=16086 transport=TCP


_raw: Fri Jan  9 10:39:52 AM EST 2026 app=sshd dest_ip=* dest_port=22 pid=3883 user=root fd=7u ip_version=6 dvc_id=17477 transport=TCP


_raw: Fri Jan  9 10:39:52 AM EST 2026 app=sshd dest_ip=* dest_port=22 pid=3883 user=root fd=6u ip_version=4 dvc_id=17469 transport=TCP


_raw: Fri Jan  9 10:39:52 AM EST 2026 app=dhcpcd dest_ip=10.0.254.202 dest_port=68 pid=661 user=dhcpcd fd=3u ip_version=4 dvc_id=7060 transport=UDP


_raw:
Proto   Port
udp    51127
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp    36977
tcp     8080
tcp     3389


_raw:
Proto   Port
udp    46214
udp    60158
udp    56615
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp     8000
tcp       22
tcp     3350
tcp     3389
tcp     8080


_raw:
Proto   Port
udp       68
udp      546
tcp    42042
tcp       22
tcp     8000
tcp     8889
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp     3389
tcp       22
tcp     3350


_raw:
Proto   Port
udp    47214
udp       68
udp    49535
udp    51264
udp      546
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp      546
tcp      445
tcp       80
tcp       22
tcp      135
tcp     8889
tcp     9389
tcp     5985
tcp     5986
tcp     6666
tcp     3350
tcp       22
tcp     3389


_raw: Fri Jan  9 10:39:02 AM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=7496 user=root fd=13u ip_version=4 dvc_id=21146 transport=TCP


_raw: Fri Jan  9 10:39:02 AM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=5203 user=xrdp fd=11u ip_version=6 dvc_id=20481 transport=TCP


_raw: Fri Jan  9 10:39:02 AM EST 2026 app=sshd dest_ip=* dest_port=22 pid=3894 user=root fd=7u ip_version=6 dvc_id=12897 transport=TCP


_raw: Fri Jan  9 10:39:02 AM EST 2026 app=sshd dest_ip=* dest_port=22 pid=3894 user=root fd=6u ip_version=4 dvc_id=12895 transport=TCP


_raw: Fri Jan  9 10:39:02 AM EST 2026 app=dhcpcd dest_ip=10.0.254.205 dest_port=68 pid=665 user=dhcpcd fd=3u ip_version=4 dvc_id=9431 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp    34391
tcp    43819
tcp     8080
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp    39371
tcp     7474
tcp     8080
tcp     7687
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp    39343
tcp     4444
tcp     8000
tcp     8889
tcp     3350
tcp     3389
tcp     8000


_raw:
Proto   Port
udp       68
udp    57928
udp      546
tcp     8889
tcp    43007
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp     7687
tcp     8080
tcp     7474
tcp     8889
tcp    46167
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp    34829
tcp     3350
tcp     3389


_raw: Fri Jan  9 10:38:21 AM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=7331 user=root fd=13u ip_version=4 dvc_id=24350 transport=TCP


_raw: Fri Jan  9 10:38:21 AM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=5177 user=xrdp fd=11u ip_version=6 dvc_id=20540 transport=TCP


_raw: Fri Jan  9 10:38:21 AM EST 2026 app=sshd dest_ip=* dest_port=22 pid=3886 user=root fd=7u ip_version=6 dvc_id=15709 transport=TCP


_raw: Fri Jan  9 10:38:21 AM EST 2026 app=sshd dest_ip=* dest_port=22 pid=3886 user=root fd=6u ip_version=4 dvc_id=15707 transport=TCP


_raw: Fri Jan  9 10:38:21 AM EST 2026 app=dhcpcd dest_ip=10.0.254.201 dest_port=68 pid=666 user=dhcpcd fd=3u ip_version=4 dvc_id=7057 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     5432
tcp     8080
tcp     3350
tcp     3389
tcp     7687
tcp     5432
tcp     2112
tcp     7474


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp    41905
tcp     3389
tcp     8080


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     2019
tcp    44719
tcp     8000
tcp     1337
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp    52309
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp    60814
udp       68
udp      546
tcp     8889
tcp    37215
tcp     3389
tcp     3350
tcp     8080


_raw:
Proto   Port
udp       68
udp     5353
udp      546
tcp     8889
tcp       22
tcp     3350
tcp     3389
tcp       22


_raw:
Proto   Port
udp       68
udp      546
tcp    41739
tcp     8889
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp    36919
tcp     7777
tcp       22
tcp     3350
tcp     7777
tcp     3389


_raw:
Proto   Port
udp    52259
udp       68
udp      546
tcp     8889
tcp       22
tcp     3350
tcp     3389
tcp     8080
tcp       22
tcp    34981