_raw: Fri Jan  9 01:15:21 PM EST 2026 app=firefox-esr dest_ip=* dest_port=45158 pid=230497 user=pentester fd=117u ip_version=4 dvc_id=746361 transport=UDP


_raw: Fri Jan  9 01:15:21 PM EST 2026 app=firefox-esr dest_ip=* dest_port=40027 pid=230497 user=pentester fd=114u ip_version=4 dvc_id=646332 transport=UDP


_raw: Fri Jan  9 01:15:21 PM EST 2026 app=firefox-esr dest_ip=* dest_port=46969 pid=230497 user=pentester fd=110u ip_version=4 dvc_id=746254 transport=UDP


_raw: Fri Jan  9 01:15:21 PM EST 2026 app=firefox-esr dest_ip=* dest_port=54295 pid=230497 user=pentester fd=86u ip_version=4 dvc_id=746251 transport=UDP


_raw: Fri Jan  9 01:15:21 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=876 user=xrdp fd=11u ip_version=6 dvc_id=11455 transport=TCP


_raw: Fri Jan  9 01:15:21 PM EST 2026 app=dhcpcd dest_ip=10.0.254.204 dest_port=68 pid=651 user=dhcpcd fd=3u ip_version=4 dvc_id=8370 transport=UDP


_raw:
Proto   Port
udp       68
udp    37375
udp      546
tcp     8889
tcp     3350
tcp     3389

_sourcetype: openPorts

source: openPorts

sourcetype: openPorts


_raw:
Proto   Port
udp       68
udp      546
tcp     2626
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp    48702
udp       68
udp    34999
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp    54933
udp      546
tcp     8889
tcp    45447
tcp     4444
tcp     8096
tcp     3350
tcp     4444
tcp     3389


_raw: Fri Jan  9 01:15:01 PM EST 2026 app=firefox-esr dest_ip=* dest_port=40166 pid=233571 user=pentester fd=191u ip_version=4 dvc_id=537728 transport=UDP


_raw: Fri Jan  9 01:15:01 PM EST 2026 app=firefox-esr dest_ip=* dest_port=39423 pid=233571 user=pentester fd=184u ip_version=4 dvc_id=537672 transport=UDP


_raw: Fri Jan  9 01:15:01 PM EST 2026 app=firefox-esr dest_ip=* dest_port=37519 pid=233571 user=pentester fd=182u ip_version=4 dvc_id=537682 transport=UDP


_raw: Fri Jan  9 01:15:01 PM EST 2026 app=firefox-esr dest_ip=* dest_port=56506 pid=233571 user=pentester fd=181u ip_version=4 dvc_id=537676 transport=UDP


_raw: Fri Jan  9 01:15:01 PM EST 2026 app=firefox-esr dest_ip=* dest_port=52841 pid=233571 user=pentester fd=180u ip_version=4 dvc_id=535020 transport=UDP


_raw: Fri Jan  9 01:15:01 PM EST 2026 app=firefox-esr dest_ip=* dest_port=57477 pid=233571 user=pentester fd=178u ip_version=4 dvc_id=535016 transport=UDP


_raw: Fri Jan  9 01:15:01 PM EST 2026 app=firefox-esr dest_ip=* dest_port=35878 pid=233571 user=pentester fd=164u ip_version=4 dvc_id=537678 transport=UDP


_raw: Fri Jan  9 01:15:01 PM EST 2026 app=firefox-esr dest_ip=* dest_port=33375 pid=233571 user=pentester fd=163u ip_version=4 dvc_id=537684 transport=UDP


_raw: Fri Jan  9 01:15:01 PM EST 2026 app=firefox-esr dest_ip=* dest_port=39164 pid=233571 user=pentester fd=162u ip_version=4 dvc_id=535035 transport=UDP


_raw: Fri Jan  9 01:15:01 PM EST 2026 app=firefox-esr dest_ip=* dest_port=49906 pid=233571 user=pentester fd=156u ip_version=4 dvc_id=533336 transport=UDP


_raw: Fri Jan  9 01:15:01 PM EST 2026 app=firefox-esr dest_ip=* dest_port=44953 pid=233571 user=pentester fd=153u ip_version=4 dvc_id=533328 transport=UDP


_raw: Fri Jan  9 01:15:01 PM EST 2026 app=firefox-esr dest_ip=* dest_port=51183 pid=233571 user=pentester fd=138u ip_version=4 dvc_id=537725 transport=UDP


_raw: Fri Jan  9 01:15:01 PM EST 2026 app=firefox-esr dest_ip=* dest_port=37409 pid=233571 user=pentester fd=128u ip_version=4 dvc_id=537723 transport=UDP


_raw: Fri Jan  9 01:15:01 PM EST 2026 app=firefox-esr dest_ip=* dest_port=46066 pid=233571 user=pentester fd=92u ip_version=4 dvc_id=536610 transport=UDP


_raw: Fri Jan  9 01:15:01 PM EST 2026 app=firefox-esr dest_ip=* dest_port=60196 pid=233571 user=pentester fd=56u ip_version=4 dvc_id=537732 transport=UDP


_raw: Fri Jan  9 01:15:01 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=861 user=xrdp fd=11u ip_version=6 dvc_id=9717 transport=TCP


_raw: Fri Jan  9 01:15:01 PM EST 2026 app=dhcpcd dest_ip=10.0.254.204 dest_port=68 pid=645 user=dhcpcd fd=3u ip_version=4 dvc_id=8233 transport=UDP


_raw:
Proto   Port
udp    48323
udp       68
udp    41736
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp       68
udp    32943
udp    54577
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw: Fri Jan  9 01:14:43 PM EST 2026 app=firefox-esr dest_ip=* dest_port=38931 pid=230151 user=pentester fd=231u ip_version=4 dvc_id=439157 transport=UDP


_raw: Fri Jan  9 01:14:43 PM EST 2026 app=firefox-esr dest_ip=* dest_port=46332 pid=230151 user=pentester fd=41u ip_version=4 dvc_id=656318 transport=UDP


_raw: Fri Jan  9 01:14:43 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=870 user=xrdp fd=11u ip_version=6 dvc_id=9101 transport=TCP


_raw: Fri Jan  9 01:14:43 PM EST 2026 app=dhcpcd dest_ip=10.0.254.204 dest_port=68 pid=645 user=dhcpcd fd=3u ip_version=4 dvc_id=8564 transport=UDP


_raw:
Proto   Port
udp    46332
udp    38931
udp       68
udp      546
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp    38070
udp      546
tcp     8889
tcp     3350
tcp     3389
tcp    35857
tcp     8080


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp    41905
tcp     3389
tcp     8080


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw: Fri Jan  9 01:14:26 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=246729 user=pentester fd=37u ip_version=6 dvc_id=342197 transport=TCP


_raw: Fri Jan  9 01:14:26 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=36519 pid=246729 user=pentester fd=18u ip_version=6 dvc_id=342159 transport=TCP


_raw: Fri Jan  9 01:14:26 PM EST 2026 app=firefox-esr dest_ip=* dest_port=55497 pid=245634 user=pentester fd=162u ip_version=4 dvc_id=9194811 transport=UDP


_raw: Fri Jan  9 01:14:26 PM EST 2026 app=firefox-esr dest_ip=* dest_port=56308 pid=245634 user=pentester fd=119u ip_version=4 dvc_id=9194813 transport=UDP


_raw: Fri Jan  9 01:14:26 PM EST 2026 app=firefox-esr dest_ip=* dest_port=44320 pid=245634 user=pentester fd=48u ip_version=4 dvc_id=9194808 transport=UDP


_raw: Fri Jan  9 01:14:26 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=875 user=xrdp fd=11u ip_version=6 dvc_id=11563 transport=TCP


_raw: Fri Jan  9 01:14:26 PM EST 2026 app=dhcpcd dest_ip=10.0.254.204 dest_port=68 pid=650 user=dhcpcd fd=3u ip_version=4 dvc_id=9359 transport=UDP


_raw:
Proto   Port
udp       68
udp    38581
udp      546
tcp     8889
tcp     3350
tcp    36977
tcp     8080
tcp    15611
tcp     3389


_raw:
Proto   Port
udp    56316
udp    44547
udp       68
udp      546
tcp       22
tcp     4444
tcp     8889
tcp     8000
tcp       22
tcp     3350
tcp     3389
tcp     8080


_raw: Fri Jan  9 01:14:14 PM EST 2026 app=firefox-esr dest_ip=* dest_port=44669 pid=231538 user=pentester fd=170u ip_version=4 dvc_id=777500 transport=UDP


_raw: Fri Jan  9 01:14:14 PM EST 2026 app=firefox-esr dest_ip=* dest_port=55904 pid=231538 user=pentester fd=144u ip_version=4 dvc_id=777039 transport=UDP


_raw: Fri Jan  9 01:14:14 PM EST 2026 app=firefox-esr dest_ip=* dest_port=43041 pid=231538 user=pentester fd=86u ip_version=4 dvc_id=776185 transport=UDP


_raw: Fri Jan  9 01:14:14 PM EST 2026 app=firefox-esr dest_ip=* dest_port=52581 pid=231538 user=pentester fd=54u ip_version=4 dvc_id=778410 transport=UDP


_raw: Fri Jan  9 01:14:14 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=872 user=xrdp fd=11u ip_version=6 dvc_id=10773 transport=TCP


_raw: Fri Jan  9 01:14:14 PM EST 2026 app=dhcpcd dest_ip=10.0.254.204 dest_port=68 pid=649 user=dhcpcd fd=3u ip_version=4 dvc_id=8491 transport=UDP


_raw:
Proto   Port
udp    52581
udp    44669
udp       68
udp    43041
udp    55904
udp      546
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp    43551
udp      546
tcp     7474
tcp    39943
tcp     8080
tcp     7687
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Fri Jan  9 01:14:08 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=311441 user=pentester fd=37u ip_version=6 dvc_id=483879 transport=TCP


_raw: Fri Jan  9 01:14:08 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=46021 pid=311441 user=pentester fd=18u ip_version=6 dvc_id=485378 transport=TCP


_raw: Fri Jan  9 01:14:08 PM EST 2026 app=firefox-esr dest_ip=* dest_port=59927 pid=237320 user=pentester fd=295u ip_version=4 dvc_id=653899 transport=UDP


_raw: Fri Jan  9 01:14:08 PM EST 2026 app=firefox-esr dest_ip=* dest_port=35365 pid=237320 user=pentester fd=271u ip_version=4 dvc_id=657171 transport=UDP


_raw: Fri Jan  9 01:14:08 PM EST 2026 app=firefox-esr dest_ip=* dest_port=40499 pid=237320 user=pentester fd=256u ip_version=4 dvc_id=657169 transport=UDP


_raw: Fri Jan  9 01:14:08 PM EST 2026 app=firefox-esr dest_ip=* dest_port=57400 pid=237320 user=pentester fd=253u ip_version=4 dvc_id=653944 transport=UDP


_raw: Fri Jan  9 01:14:08 PM EST 2026 app=firefox-esr dest_ip=* dest_port=34399 pid=237320 user=pentester fd=249u ip_version=4 dvc_id=653934 transport=UDP


_raw: Fri Jan  9 01:14:08 PM EST 2026 app=firefox-esr dest_ip=* dest_port=43622 pid=237320 user=pentester fd=246u ip_version=4 dvc_id=657173 transport=UDP


_raw: Fri Jan  9 01:14:08 PM EST 2026 app=firefox-esr dest_ip=* dest_port=50947 pid=237320 user=pentester fd=235u ip_version=4 dvc_id=653932 transport=UDP


_raw: Fri Jan  9 01:14:08 PM EST 2026 app=firefox-esr dest_ip=* dest_port=44341 pid=237320 user=pentester fd=217u ip_version=4 dvc_id=657417 transport=UDP


_raw: Fri Jan  9 01:14:08 PM EST 2026 app=firefox-esr dest_ip=* dest_port=48648 pid=237320 user=pentester fd=216u ip_version=4 dvc_id=657165 transport=UDP


_raw: Fri Jan  9 01:14:08 PM EST 2026 app=firefox-esr dest_ip=* dest_port=56055 pid=237320 user=pentester fd=195u ip_version=4 dvc_id=655557 transport=UDP


_raw: Fri Jan  9 01:14:08 PM EST 2026 app=firefox-esr dest_ip=* dest_port=40598 pid=237320 user=pentester fd=176u ip_version=4 dvc_id=654764 transport=UDP


_raw: Fri Jan  9 01:14:08 PM EST 2026 app=firefox-esr dest_ip=* dest_port=57080 pid=237320 user=pentester fd=175u ip_version=4 dvc_id=654762 transport=UDP


_raw: Fri Jan  9 01:14:08 PM EST 2026 app=firefox-esr dest_ip=* dest_port=53144 pid=237320 user=pentester fd=174u ip_version=4 dvc_id=654758 transport=UDP


_raw: Fri Jan  9 01:14:08 PM EST 2026 app=firefox-esr dest_ip=* dest_port=54688 pid=237320 user=pentester fd=162u ip_version=4 dvc_id=656482 transport=UDP


_raw: Fri Jan  9 01:14:08 PM EST 2026 app=firefox-esr dest_ip=* dest_port=54081 pid=237320 user=pentester fd=157u ip_version=4 dvc_id=656474 transport=UDP


_raw: Fri Jan  9 01:14:08 PM EST 2026 app=firefox-esr dest_ip=* dest_port=53036 pid=237320 user=pentester fd=155u ip_version=4 dvc_id=654076 transport=UDP


_raw: Fri Jan  9 01:14:08 PM EST 2026 app=firefox-esr dest_ip=* dest_port=59172 pid=237320 user=pentester fd=151u ip_version=4 dvc_id=656462 transport=UDP


_raw: Fri Jan  9 01:14:08 PM EST 2026 app=firefox-esr dest_ip=* dest_port=54491 pid=237320 user=pentester fd=141u ip_version=4 dvc_id=656472 transport=UDP


_raw: Fri Jan  9 01:14:08 PM EST 2026 app=firefox-esr dest_ip=* dest_port=60778 pid=237320 user=pentester fd=108u ip_version=4 dvc_id=647062 transport=UDP


_raw: Fri Jan  9 01:14:08 PM EST 2026 app=firefox-esr dest_ip=* dest_port=42166 pid=237320 user=pentester fd=107u ip_version=4 dvc_id=653788 transport=UDP


_raw: Fri Jan  9 01:14:08 PM EST 2026 app=firefox-esr dest_ip=* dest_port=60533 pid=237320 user=pentester fd=62u ip_version=4 dvc_id=656468 transport=UDP


_raw: Fri Jan  9 01:14:08 PM EST 2026 app=firefox-esr dest_ip=* dest_port=35191 pid=237320 user=pentester fd=41u ip_version=4 dvc_id=657574 transport=UDP


_raw: Fri Jan  9 01:14:08 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=873 user=xrdp fd=11u ip_version=6 dvc_id=10833 transport=TCP


_raw: Fri Jan  9 01:14:08 PM EST 2026 app=dhcpcd dest_ip=10.0.254.205 dest_port=68 pid=648 user=dhcpcd fd=3u ip_version=4 dvc_id=6713 transport=UDP


_raw:
Proto   Port
udp    47214
udp    57133
udp       68
udp    49946
udp    58408
udp      546
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw: Fri Jan  9 01:13:53 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=5179 user=xrdp fd=11u ip_version=6 dvc_id=20647 transport=TCP


_raw: Fri Jan  9 01:13:53 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=3890 user=root fd=7u ip_version=6 dvc_id=16030 transport=TCP


_raw: Fri Jan  9 01:13:53 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=3890 user=root fd=6u ip_version=4 dvc_id=16028 transport=TCP


_raw: Fri Jan  9 01:13:53 PM EST 2026 app=dhcpcd dest_ip=10.0.254.204 dest_port=68 pid=666 user=dhcpcd fd=3u ip_version=4 dvc_id=7580 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw: Fri Jan  9 01:13:50 PM EST 2026 app=chrome dest_ip=127.0.0.1 dest_port=45631 pid=291551 user=pentester fd=40u ip_version=4 dvc_id=488461 transport=TCP


_raw: Fri Jan  9 01:13:50 PM EST 2026 app=firefox-esr dest_ip=* dest_port=60814 pid=235634 user=pentester fd=127u ip_version=4 dvc_id=327960 transport=UDP


_raw: Fri Jan  9 01:13:50 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=235364 user=pentester fd=37u ip_version=6 dvc_id=322892 transport=TCP


_raw: Fri Jan  9 01:13:50 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=37215 pid=235364 user=pentester fd=18u ip_version=6 dvc_id=309006 transport=TCP


_raw: Fri Jan  9 01:13:50 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=868 user=xrdp fd=11u ip_version=6 dvc_id=11549 transport=TCP


_raw: Fri Jan  9 01:13:50 PM EST 2026 app=dhcpcd dest_ip=10.0.254.205 dest_port=68 pid=643 user=dhcpcd fd=3u ip_version=4 dvc_id=702 transport=UDP


_raw:
Proto   Port
udp    60814
udp       68
udp      546
tcp    45631
tcp    37215
tcp     3389
tcp     3350
tcp     8080


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp    34391
tcp    43819
tcp     8080
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp    49828
udp      546
tcp     8889
tcp    43007
tcp     4444
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp     7687
tcp     8080
tcp     7474
tcp     8889
tcp    46167
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw: Fri Jan  9 01:13:31 PM EST 2026 app=python3 dest_ip=* dest_port=8000 pid=139383 user=pentester fd=3u ip_version=4 dvc_id=281410 transport=TCP


_raw: Fri Jan  9 01:13:31 PM EST 2026 app=bhapi dest_ip=127.0.0.1 dest_port=8080 pid=52481 user=_bloodhound fd=9u ip_version=4 dvc_id=108528 transport=TCP


_raw: Fri Jan  9 01:13:31 PM EST 2026 app=bhapi dest_ip=* dest_port=2112 pid=52481 user=_bloodhound fd=6u ip_version=6 dvc_id=113297 transport=TCP


_raw: Fri Jan  9 01:13:31 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=7474 pid=46203 user=root fd=282u ip_version=6 dvc_id=100897 transport=TCP


_raw: Fri Jan  9 01:13:31 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=7687 pid=46203 user=root fd=281u ip_version=6 dvc_id=100891 transport=TCP


_raw: Fri Jan  9 01:13:31 PM EST 2026 app=postgres dest_ip=127.0.0.1 dest_port=5432 pid=46066 user=postgres fd=7u ip_version=4 dvc_id=98798 transport=TCP


_raw: Fri Jan  9 01:13:31 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=880 user=xrdp fd=11u ip_version=6 dvc_id=12115 transport=TCP


_raw: Fri Jan  9 01:13:31 PM EST 2026 app=dhcpcd dest_ip=10.0.254.206 dest_port=68 pid=650 user=dhcpcd fd=3u ip_version=4 dvc_id=6940 transport=UDP


_raw: Fri Jan  9 01:13:25 PM EST 2026 app=nc dest_ip=* dest_port=42065 pid=338018 user=pentester fd=3u ip_version=4 dvc_id=523649 transport=TCP


_raw: Fri Jan  9 01:13:25 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=43801 pid=325821 user=root fd=10u ip_version=4 dvc_id=489090 transport=TCP


_raw: Fri Jan  9 01:13:25 PM EST 2026 app=nc dest_ip=* dest_port=42045 pid=312532 user=pentester fd=3u ip_version=4 dvc_id=464352 transport=TCP


_raw: Fri Jan  9 01:13:25 PM EST 2026 app=python3 dest_ip=* dest_port=8000 pid=296135 user=pentester fd=3u ip_version=4 dvc_id=435429 transport=TCP


_raw: Fri Jan  9 01:13:25 PM EST 2026 app=nc dest_ip=* dest_port=42042 pid=295650 user=pentester fd=3u ip_version=4 dvc_id=434483 transport=TCP


_raw: Fri Jan  9 01:13:25 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=244945 user=root fd=7u ip_version=6 dvc_id=340328 transport=TCP


_raw: Fri Jan  9 01:13:25 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=244945 user=root fd=6u ip_version=4 dvc_id=340326 transport=TCP


_raw: Fri Jan  9 01:13:25 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=874 user=xrdp fd=11u ip_version=6 dvc_id=11398 transport=TCP


_raw: Fri Jan  9 01:13:25 PM EST 2026 app=dhcpcd dest_ip=10.0.254.205 dest_port=68 pid=650 user=dhcpcd fd=3u ip_version=4 dvc_id=9368 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp    42065
tcp    42045
tcp    42042
tcp    43801
tcp       22
tcp     8000
tcp     3350
tcp       22
tcp     3389


_raw: Fri Jan  9 01:13:24 PM EST 2026 app=firefox-esr dest_ip=* dest_port=47710 pid=231925 user=pentester fd=156u ip_version=4 dvc_id=319590 transport=UDP


_raw: Fri Jan  9 01:13:24 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=883 user=xrdp fd=11u ip_version=6 dvc_id=11609 transport=TCP


_raw: Fri Jan  9 01:13:24 PM EST 2026 app=dhcpcd dest_ip=10.0.254.205 dest_port=68 pid=646 user=dhcpcd fd=3u ip_version=4 dvc_id=7962 transport=UDP


_raw: Fri Jan  9 01:13:23 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=364092 user=pentester fd=37u ip_version=6 dvc_id=701842 transport=TCP


_raw: Fri Jan  9 01:13:23 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=41651 pid=364092 user=pentester fd=18u ip_version=6 dvc_id=701717 transport=TCP


_raw: Fri Jan  9 01:13:23 PM EST 2026 app=python3 dest_ip=* dest_port=8000 pid=343826 user=pentester fd=3u ip_version=4 dvc_id=627914 transport=TCP


_raw: Fri Jan  9 01:13:23 PM EST 2026 app=nc dest_ip=* dest_port=5555 pid=341044 user=pentester fd=3u ip_version=4 dvc_id=617421 transport=TCP


_raw: Fri Jan  9 01:13:23 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=256378 user=root fd=7u ip_version=6 dvc_id=390629 transport=TCP


_raw: Fri Jan  9 01:13:23 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=256378 user=root fd=6u ip_version=4 dvc_id=390627 transport=TCP


_raw: Fri Jan  9 01:13:23 PM EST 2026 app=firefox-esr dest_ip=* dest_port=60639 pid=231423 user=pentester fd=233u ip_version=4 dvc_id=750412 transport=UDP


_raw: Fri Jan  9 01:13:23 PM EST 2026 app=firefox-esr dest_ip=* dest_port=45397 pid=231423 user=pentester fd=186u ip_version=4 dvc_id=819289 transport=UDP


_raw: Fri Jan  9 01:13:23 PM EST 2026 app=firefox-esr dest_ip=* dest_port=40975 pid=231423 user=pentester fd=170u ip_version=4 dvc_id=817525 transport=UDP


_raw: Fri Jan  9 01:13:23 PM EST 2026 app=firefox-esr dest_ip=* dest_port=57866 pid=231423 user=pentester fd=140u ip_version=4 dvc_id=817135 transport=UDP


_raw: Fri Jan  9 01:13:23 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=878 user=xrdp fd=11u ip_version=6 dvc_id=12314 transport=TCP


_raw: Fri Jan  9 01:13:23 PM EST 2026 app=dhcpcd dest_ip=10.0.254.204 dest_port=68 pid=648 user=dhcpcd fd=3u ip_version=4 dvc_id=7093 transport=UDP


_raw:
Proto   Port
udp    47710
udp       68
udp      546
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350
tcp     7474
tcp     7687


_raw: Fri Jan  9 01:13:01 PM EST 2026 app=firefox-esr dest_ip=* dest_port=42927 pid=244039 user=pentester fd=246u ip_version=4 dvc_id=700092 transport=UDP


_raw: Fri Jan  9 01:13:01 PM EST 2026 app=firefox-esr dest_ip=* dest_port=37681 pid=244039 user=pentester fd=204u ip_version=4 dvc_id=701490 transport=UDP


_raw: Fri Jan  9 01:13:01 PM EST 2026 app=firefox-esr dest_ip=* dest_port=58969 pid=244039 user=pentester fd=178u ip_version=4 dvc_id=701454 transport=UDP


_raw: Fri Jan  9 01:13:01 PM EST 2026 app=firefox-esr dest_ip=* dest_port=50517 pid=244039 user=pentester fd=177u ip_version=4 dvc_id=701457 transport=UDP


_raw: Fri Jan  9 01:13:01 PM EST 2026 app=firefox-esr dest_ip=* dest_port=39696 pid=244039 user=pentester fd=150u ip_version=4 dvc_id=700150 transport=UDP


_raw: Fri Jan  9 01:13:01 PM EST 2026 app=firefox-esr dest_ip=* dest_port=44813 pid=244039 user=pentester fd=145u ip_version=4 dvc_id=699249 transport=UDP


_raw: Fri Jan  9 01:13:01 PM EST 2026 app=firefox-esr dest_ip=* dest_port=33496 pid=244039 user=pentester fd=131u ip_version=4 dvc_id=529279 transport=UDP


_raw: Fri Jan  9 01:13:01 PM EST 2026 app=firefox-esr dest_ip=* dest_port=35762 pid=244039 user=pentester fd=122u ip_version=4 dvc_id=700975 transport=UDP


_raw: Fri Jan  9 01:13:01 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=955 user=xrdp fd=11u ip_version=6 dvc_id=9949 transport=TCP


_raw: Fri Jan  9 01:13:01 PM EST 2026 app=dhcpcd dest_ip=10.0.254.206 dest_port=68 pid=833 user=dhcpcd fd=3u ip_version=4 dvc_id=8707 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp    34409
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp      999
tcp     2019
tcp    44719
tcp     8000
tcp     1337
tcp     3350
tcp     3389


_raw: Fri Jan  9 01:12:44 PM EST 2026 app=python3 dest_ip=* dest_port=8000 pid=312488 user=pentester fd=3u ip_version=4 dvc_id=551792 transport=TCP


_raw: Fri Jan  9 01:12:44 PM EST 2026 app=nc dest_ip=* dest_port=4444 pid=295497 user=pentester fd=3u ip_version=4 dvc_id=499544 transport=TCP


_raw: Fri Jan  9 01:12:44 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=262836 user=pentester fd=37u ip_version=6 dvc_id=375948 transport=TCP


_raw: Fri Jan  9 01:12:44 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=39031 pid=262836 user=pentester fd=18u ip_version=6 dvc_id=374803 transport=TCP


_raw: Fri Jan  9 01:12:44 PM EST 2026 app=firefox-esr dest_ip=* dest_port=58698 pid=259897 user=pentester fd=315u ip_version=4 dvc_id=862546 transport=UDP


_raw: Fri Jan  9 01:12:44 PM EST 2026 app=firefox-esr dest_ip=* dest_port=50165 pid=259897 user=pentester fd=297u ip_version=4 dvc_id=860718 transport=UDP


_raw: Fri Jan  9 01:12:44 PM EST 2026 app=firefox-esr dest_ip=* dest_port=60164 pid=259897 user=pentester fd=258u ip_version=4 dvc_id=862537 transport=UDP


_raw: Fri Jan  9 01:12:44 PM EST 2026 app=firefox-esr dest_ip=* dest_port=34383 pid=259897 user=pentester fd=215u ip_version=4 dvc_id=862357 transport=UDP


_raw: Fri Jan  9 01:12:44 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=241845 user=root fd=7u ip_version=6 dvc_id=333492 transport=TCP


_raw: Fri Jan  9 01:12:44 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=241845 user=root fd=6u ip_version=4 dvc_id=333490 transport=TCP


_raw: Fri Jan  9 01:12:44 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=869 user=xrdp fd=11u ip_version=6 dvc_id=9153 transport=TCP


_raw: Fri Jan  9 01:12:44 PM EST 2026 app=dhcpcd dest_ip=10.0.254.206 dest_port=68 pid=646 user=dhcpcd fd=3u ip_version=4 dvc_id=9266 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp    60814
udp       68
udp      546
tcp     8889
tcp    45631
tcp    37215
tcp     3389
tcp     3350
tcp     8080


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp     5353
udp      546
tcp     8889
tcp       22
tcp     8080
tcp     3350
tcp     3389
tcp       22
tcp    45365


_raw:
Proto   Port
udp       68
udp      546
tcp    41739
tcp     8889
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp       22
tcp     3389
tcp       22
tcp     3350


_raw: Fri Jan  9 01:12:04 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=386625 user=pentester fd=37u ip_version=6 dvc_id=1473291 transport=TCP


_raw: Fri Jan  9 01:12:04 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=42321 pid=386625 user=pentester fd=18u ip_version=6 dvc_id=1472820 transport=TCP


_raw: Fri Jan  9 01:12:04 PM EST 2026 app=firefox-esr dest_ip=* dest_port=49202 pid=228905 user=pentester fd=263u ip_version=4 dvc_id=1530630 transport=UDP


_raw: Fri Jan  9 01:12:04 PM EST 2026 app=firefox-esr dest_ip=* dest_port=45946 pid=228905 user=pentester fd=225u ip_version=4 dvc_id=324343 transport=UDP


_raw: Fri Jan  9 01:12:04 PM EST 2026 app=firefox-esr dest_ip=* dest_port=36438 pid=228905 user=pentester fd=221u ip_version=4 dvc_id=1534735 transport=UDP


_raw: Fri Jan  9 01:12:04 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=876 user=xrdp fd=11u ip_version=6 dvc_id=9130 transport=TCP


_raw: Fri Jan  9 01:12:04 PM EST 2026 app=dhcpcd dest_ip=10.0.254.206 dest_port=68 pid=647 user=dhcpcd fd=3u ip_version=4 dvc_id=6892 transport=UDP


_raw:
Proto   Port
udp    49202
udp       68
udp    45946
udp      546
tcp     3389
tcp    42321
tcp     3350
tcp     8080


_raw: Fri Jan  9 01:12:01 PM EST 2026 app=chromium dest_ip=224.0.0.251 dest_port=5353 pid=248055 user=pentester fd=259u ip_version=4 dvc_id=404724 transport=UDP


_raw: Fri Jan  9 01:12:01 PM EST 2026 app=firefox-esr dest_ip=* dest_port=58722 pid=241118 user=pentester fd=111u ip_version=4 dvc_id=569649 transport=UDP


_raw: Fri Jan  9 01:12:01 PM EST 2026 app=caido-cli dest_ip=127.0.0.1 dest_port=8080 pid=239427 user=pentester fd=36u ip_version=4 dvc_id=320664 transport=TCP


_raw: Fri Jan  9 01:12:01 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=876 user=xrdp fd=11u ip_version=6 dvc_id=9605 transport=TCP


_raw: Fri Jan  9 01:12:01 PM EST 2026 app=dhcpcd dest_ip=10.0.254.206 dest_port=68 pid=646 user=dhcpcd fd=3u ip_version=4 dvc_id=8852 transport=UDP


_raw:
Proto   Port
udp     5353
udp    58722
udp       68
udp      546
tcp     8080
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp    51166
udp    35784
udp       68
udp      546
tcp     8889
tcp     3350
tcp     8080
tcp     3389
tcp    46021


_raw: Fri Jan  9 01:11:43 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=253531 user=pentester fd=37u ip_version=6 dvc_id=355041 transport=TCP


_raw: Fri Jan  9 01:11:43 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=32889 pid=253531 user=pentester fd=18u ip_version=6 dvc_id=346631 transport=TCP


_raw: Fri Jan  9 01:11:43 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=869 user=xrdp fd=11u ip_version=6 dvc_id=10977 transport=TCP


_raw: Fri Jan  9 01:11:43 PM EST 2026 app=dhcpcd dest_ip=10.0.254.206 dest_port=68 pid=646 user=dhcpcd fd=3u ip_version=4 dvc_id=10255 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     3389
tcp    32889
tcp     8080
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     4444
tcp    45879
tcp     3350
tcp     3389
tcp     8080


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3389
tcp     8080
tcp    41765
tcp     3350


_raw:
Proto   Port
udp    44007
udp    39945
udp       68
udp    41042
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp    57481
udp    49937
udp       68
udp      546
tcp    35623
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp     5353
udp     5353
udp      546
tcp     8889
tcp     3350
tcp    45883
tcp     3389
tcp     8080


_raw:
Proto   Port
udp    38931
udp    44300
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp    43714
udp       68
udp      546
tcp     8889
tcp    34413
tcp     3389
tcp     8080
tcp     3350


_raw: Fri Jan  9 01:11:10 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=880 user=xrdp fd=11u ip_version=6 dvc_id=10745 transport=TCP


_raw: Fri Jan  9 01:11:10 PM EST 2026 app=dhcpcd dest_ip=10.0.254.206 dest_port=68 pid=646 user=dhcpcd fd=3u ip_version=4 dvc_id=7654 transport=UDP


_raw:
Proto   Port
udp    47710
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     3350
tcp     3389


_raw:
Proto   Port
udp    47088
udp    51415
udp       68
udp      443
udp     5353
udp     5355
udp     1434
udp       53
udp       88
udp      137
udp      161
udp      389
udp      546
tcp     8889
tcp     5985
tcp     5986
tcp     1883
tcp     1433
tcp      636
tcp      587
tcp       53
tcp       21
tcp       25
tcp      110
tcp       80
tcp       88
tcp      135
tcp      143
tcp      139
tcp      445
tcp      443
tcp      389
tcp     3389
tcp    48515
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp    39004
udp       53
udp       68
udp      546
tcp     8889
tcp       53
tcp     3080
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp    41034
udp    49333
udp    42714
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp    54933
udp      546
tcp     8889
tcp    45447
tcp     4444
tcp     8096
tcp     3350
tcp     4444
tcp     3389


_raw:
Proto   Port
udp       68
udp    37375
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     2626
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp    48702
udp       68
udp    34999
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp    48323
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp    48745
udp       68
udp    41558
udp    33372
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp    46174
udp    39228
udp    60119
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp    54577
udp    52715
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw: Fri Jan  9 01:09:39 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=262918 user=pentester fd=37u ip_version=6 dvc_id=447377 transport=TCP


_raw: Fri Jan  9 01:09:39 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=35857 pid=262918 user=pentester fd=18u ip_version=6 dvc_id=448906 transport=TCP


_raw: Fri Jan  9 01:09:39 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=878 user=xrdp fd=11u ip_version=6 dvc_id=9808 transport=TCP


_raw: Fri Jan  9 01:09:39 PM EST 2026 app=dhcpcd dest_ip=10.0.254.206 dest_port=68 pid=649 user=dhcpcd fd=3u ip_version=4 dvc_id=8509 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     3350
tcp     3389
tcp    35857
tcp     8080


_raw:
Proto   Port
udp    35658
udp       68
udp    32995
udp      546
tcp     8000
tcp       22
tcp     4444
tcp     8889
tcp     8080
tcp    39031
tcp     3389
tcp       22
tcp     3350


_raw: Fri Jan  9 01:09:33 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=5141 user=xrdp fd=11u ip_version=6 dvc_id=20551 transport=TCP


_raw: Fri Jan  9 01:09:33 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=3869 user=root fd=7u ip_version=6 dvc_id=15797 transport=TCP


_raw: Fri Jan  9 01:09:33 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=3869 user=root fd=6u ip_version=4 dvc_id=15789 transport=TCP


_raw: Fri Jan  9 01:09:33 PM EST 2026 app=dhcpcd dest_ip=10.0.254.206 dest_port=68 pid=666 user=dhcpcd fd=3u ip_version=4 dvc_id=8705 transport=UDP


_raw: Fri Jan  9 01:09:33 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=244564 user=pentester fd=37u ip_version=6 dvc_id=339586 transport=TCP


_raw: Fri Jan  9 01:09:33 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=41905 pid=244564 user=pentester fd=18u ip_version=6 dvc_id=339551 transport=TCP


_raw: Fri Jan  9 01:09:33 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=876 user=xrdp fd=11u ip_version=6 dvc_id=8864 transport=TCP


_raw: Fri Jan  9 01:09:33 PM EST 2026 app=dhcpcd dest_ip=10.0.254.206 dest_port=68 pid=644 user=dhcpcd fd=3u ip_version=4 dvc_id=8272 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     3350
tcp    41905
tcp     3389
tcp     8080


_raw: Fri Jan  9 01:09:21 PM EST 2026 app=postman dest_ip=* dest_port=15611 pid=273280 user=pentester fd=139u ip_version=6 dvc_id=424192 transport=TCP


_raw: Fri Jan  9 01:09:21 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=256337 user=pentester fd=37u ip_version=6 dvc_id=359037 transport=TCP


_raw: Fri Jan  9 01:09:21 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=36977 pid=256337 user=pentester fd=18u ip_version=6 dvc_id=357094 transport=TCP


_raw: Fri Jan  9 01:09:21 PM EST 2026 app=firefox-esr dest_ip=* dest_port=38581 pid=231959 user=pentester fd=143u ip_version=4 dvc_id=777675 transport=UDP


_raw: Fri Jan  9 01:09:21 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=876 user=xrdp fd=11u ip_version=6 dvc_id=11439 transport=TCP


_raw: Fri Jan  9 01:09:21 PM EST 2026 app=dhcpcd dest_ip=10.0.254.206 dest_port=68 pid=648 user=dhcpcd fd=3u ip_version=4 dvc_id=7777 transport=UDP


_raw:
Proto   Port
udp       68
udp    38581
udp      546
tcp     3350
tcp    36977
tcp     8080
tcp    15611
tcp     3389


_raw:
Proto   Port
udp    56316
udp       68
udp      546
tcp       22
tcp     4444
tcp     8889
tcp     8000
tcp       22
tcp     3350
tcp     3389
tcp     8080


_raw:
Proto   Port
udp       68
udp      546
tcp    42065
tcp    42045
tcp    42042
tcp    43801
tcp       22
tcp     8000
tcp     8889
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp    47214
udp    55999
udp    53133
udp       68
udp    41437
udp      546
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp    41346
udp      546
tcp     7474
tcp    39943
tcp     8080
tcp     7687
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp     5353
udp    58722
udp    38766
udp       68
udp      546
tcp     8889
tcp     8080
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp    34391
tcp    43819
tcp     8080
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp    49828
udp      546
tcp     8889
tcp    43007
tcp     4444
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp     7687
tcp     8080
tcp     7474
tcp     8889
tcp    46167
tcp     3350
tcp     3389


_raw: Fri Jan  9 01:08:35 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=873 user=xrdp fd=11u ip_version=6 dvc_id=8192 transport=TCP


_raw: Fri Jan  9 01:08:35 PM EST 2026 app=dhcpcd dest_ip=10.0.254.206 dest_port=68 pid=646 user=dhcpcd fd=3u ip_version=4 dvc_id=8633 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp       68
udp    38581
udp      546
tcp     8889
tcp     3350
tcp    36977
tcp     8080
tcp    15611
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp      999
tcp     2019
tcp    44719
tcp     8000
tcp     1337
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp    34409
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp    33496
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp    45198
udp    41793
udp      546
tcp     8889
tcp     7474
tcp     7687
tcp     8888
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp    47568
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp    60814
udp       68
udp      546
tcp     8889
tcp    45631
tcp    37215
tcp     3389
tcp     3350
tcp     8080


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3389
tcp    32889
tcp     8080
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp    41905
tcp     3389
tcp     8080


_raw:
Proto   Port
udp       68
udp     5353
udp      546
tcp     8889
tcp       22
tcp     8080
tcp     3350
tcp     3389
tcp       22
tcp    45365


_raw:
Proto   Port
udp       68
udp      546
tcp    41739
tcp     8889
tcp       22
tcp       22
tcp     3350
tcp     3389


_raw: Fri Jan  9 01:07:08 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=282737 user=pentester fd=37u ip_version=6 dvc_id=573738 transport=TCP


_raw: Fri Jan  9 01:07:08 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=45273 pid=282737 user=pentester fd=18u ip_version=6 dvc_id=573609 transport=TCP


_raw: Fri Jan  9 01:07:08 PM EST 2026 app=python3 dest_ip=* dest_port=4444 pid=266223 user=pentester fd=7u ip_version=4 dvc_id=495706 transport=TCP


_raw: Fri Jan  9 01:07:08 PM EST 2026 app=docker-proxy dest_ip=* dest_port=8000 pid=246329 user=root fd=4u ip_version=6 dvc_id=414127 transport=TCP


_raw: Fri Jan  9 01:07:08 PM EST 2026 app=docker-proxy dest_ip=* dest_port=8000 pid=246322 user=root fd=4u ip_version=4 dvc_id=415449 transport=TCP


_raw: Fri Jan  9 01:07:08 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=39343 pid=239069 user=root fd=7u ip_version=4 dvc_id=367654 transport=TCP


_raw: Fri Jan  9 01:07:08 PM EST 2026 app=firefox-esr dest_ip=* dest_port=38235 pid=228992 user=pentester fd=331u ip_version=4 dvc_id=974295 transport=UDP


_raw: Fri Jan  9 01:07:08 PM EST 2026 app=firefox-esr dest_ip=* dest_port=57129 pid=228992 user=pentester fd=317u ip_version=4 dvc_id=973066 transport=UDP


_raw: Fri Jan  9 01:07:08 PM EST 2026 app=firefox-esr dest_ip=* dest_port=58657 pid=228992 user=pentester fd=311u ip_version=4 dvc_id=975205 transport=UDP


_raw: Fri Jan  9 01:07:08 PM EST 2026 app=firefox-esr dest_ip=* dest_port=34828 pid=228992 user=pentester fd=306u ip_version=4 dvc_id=973068 transport=UDP


_raw: Fri Jan  9 01:07:08 PM EST 2026 app=firefox-esr dest_ip=* dest_port=54016 pid=228992 user=pentester fd=298u ip_version=4 dvc_id=613389 transport=UDP


_raw: Fri Jan  9 01:07:08 PM EST 2026 app=firefox-esr dest_ip=* dest_port=51635 pid=228992 user=pentester fd=290u ip_version=4 dvc_id=974859 transport=UDP


_raw: Fri Jan  9 01:07:08 PM EST 2026 app=firefox-esr dest_ip=* dest_port=44704 pid=228992 user=pentester fd=283u ip_version=4 dvc_id=968683 transport=UDP


_raw: Fri Jan  9 01:07:08 PM EST 2026 app=firefox-esr dest_ip=* dest_port=56314 pid=228992 user=pentester fd=111u ip_version=4 dvc_id=974403 transport=UDP


_raw: Fri Jan  9 01:07:08 PM EST 2026 app=firefox-esr dest_ip=* dest_port=48918 pid=228992 user=pentester fd=18u ip_version=4 dvc_id=973102 transport=UDP


_raw: Fri Jan  9 01:07:08 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=869 user=xrdp fd=11u ip_version=6 dvc_id=10999 transport=TCP


_raw: Fri Jan  9 01:07:08 PM EST 2026 app=dhcpcd dest_ip=10.0.254.206 dest_port=68 pid=645 user=dhcpcd fd=3u ip_version=4 dvc_id=8528 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp       22
tcp     3389
tcp       22
tcp     3350


_raw: Fri Jan  9 01:06:58 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1900 user=root fd=13u ip_version=4 dvc_id=15427 transport=TCP


_raw: Fri Jan  9 01:06:58 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=876 user=xrdp fd=11u ip_version=6 dvc_id=11485 transport=TCP


_raw: Fri Jan  9 01:06:58 PM EST 2026 app=dhcpcd dest_ip=10.0.254.202 dest_port=68 pid=648 user=dhcpcd fd=3u ip_version=4 dvc_id=7383 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw: Fri Jan  9 01:06:56 PM EST 2026 app=bhapi dest_ip=127.0.0.1 dest_port=8080 pid=252866 user=_bloodhound fd=8u ip_version=4 dvc_id=377185 transport=TCP


_raw: Fri Jan  9 01:06:56 PM EST 2026 app=bhapi dest_ip=* dest_port=2112 pid=252866 user=_bloodhound fd=6u ip_version=6 dvc_id=375767 transport=TCP


_raw: Fri Jan  9 01:06:56 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=7474 pid=250825 user=root fd=282u ip_version=6 dvc_id=370230 transport=TCP


_raw: Fri Jan  9 01:06:56 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=7687 pid=250825 user=root fd=281u ip_version=6 dvc_id=369192 transport=TCP


_raw: Fri Jan  9 01:06:56 PM EST 2026 app=postgres dest_ip=127.0.0.1 dest_port=5432 pid=250631 user=postgres fd=7u ip_version=4 dvc_id=370784 transport=TCP


_raw: Fri Jan  9 01:06:56 PM EST 2026 app=firefox-esr dest_ip=* dest_port=59720 pid=234677 user=pentester fd=185u ip_version=4 dvc_id=622923 transport=UDP


_raw: Fri Jan  9 01:06:56 PM EST 2026 app=firefox-esr dest_ip=* dest_port=60901 pid=234677 user=pentester fd=180u ip_version=4 dvc_id=622926 transport=UDP


_raw: Fri Jan  9 01:06:56 PM EST 2026 app=firefox-esr dest_ip=* dest_port=37668 pid=234677 user=pentester fd=167u ip_version=4 dvc_id=624003 transport=UDP


_raw: Fri Jan  9 01:06:56 PM EST 2026 app=firefox-esr dest_ip=* dest_port=42837 pid=234677 user=pentester fd=151u ip_version=4 dvc_id=621919 transport=UDP


_raw: Fri Jan  9 01:06:56 PM EST 2026 app=firefox-esr dest_ip=* dest_port=51288 pid=234677 user=pentester fd=138u ip_version=4 dvc_id=624836 transport=UDP


_raw: Fri Jan  9 01:06:56 PM EST 2026 app=firefox-esr dest_ip=* dest_port=41749 pid=234677 user=pentester fd=136u ip_version=4 dvc_id=619489 transport=UDP


_raw: Fri Jan  9 01:06:56 PM EST 2026 app=firefox-esr dest_ip=* dest_port=56845 pid=234677 user=pentester fd=128u ip_version=4 dvc_id=622819 transport=UDP


_raw: Fri Jan  9 01:06:56 PM EST 2026 app=firefox-esr dest_ip=* dest_port=53653 pid=234677 user=pentester fd=126u ip_version=4 dvc_id=619485 transport=UDP


_raw: Fri Jan  9 01:06:56 PM EST 2026 app=firefox-esr dest_ip=* dest_port=46228 pid=234677 user=pentester fd=125u ip_version=4 dvc_id=621563 transport=UDP


_raw: Fri Jan  9 01:06:56 PM EST 2026 app=firefox-esr dest_ip=* dest_port=34127 pid=234677 user=pentester fd=87u ip_version=4 dvc_id=619467 transport=UDP


_raw: Fri Jan  9 01:06:56 PM EST 2026 app=docker-proxy dest_ip=* dest_port=8000 pid=234321 user=root fd=4u ip_version=6 dvc_id=311018 transport=TCP


_raw: Fri Jan  9 01:06:56 PM EST 2026 app=docker-proxy dest_ip=* dest_port=8000 pid=234315 user=root fd=4u ip_version=4 dvc_id=311009 transport=TCP


_raw: Fri Jan  9 01:06:56 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=46469 pid=232947 user=root fd=9u ip_version=4 dvc_id=307670 transport=TCP


_raw: Fri Jan  9 01:06:56 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1902 user=root fd=13u ip_version=4 dvc_id=16853 transport=TCP


_raw: Fri Jan  9 01:06:56 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=875 user=xrdp fd=11u ip_version=6 dvc_id=11603 transport=TCP


_raw: Fri Jan  9 01:06:56 PM EST 2026 app=dhcpcd dest_ip=10.0.254.204 dest_port=68 pid=649 user=dhcpcd fd=3u ip_version=4 dvc_id=5984 transport=UDP


_raw: Fri Jan  9 01:06:56 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=311441 user=pentester fd=37u ip_version=6 dvc_id=483879 transport=TCP


_raw: Fri Jan  9 01:06:56 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=46021 pid=311441 user=pentester fd=18u ip_version=6 dvc_id=485378 transport=TCP


_raw: Fri Jan  9 01:06:56 PM EST 2026 app=firefox-esr dest_ip=* dest_port=47854 pid=237320 user=pentester fd=175u ip_version=4 dvc_id=620002 transport=UDP


_raw: Fri Jan  9 01:06:56 PM EST 2026 app=firefox-esr dest_ip=* dest_port=49950 pid=237320 user=pentester fd=174u ip_version=4 dvc_id=620819 transport=UDP


_raw: Fri Jan  9 01:06:56 PM EST 2026 app=firefox-esr dest_ip=* dest_port=34928 pid=237320 user=pentester fd=173u ip_version=4 dvc_id=619896 transport=UDP


_raw: Fri Jan  9 01:06:56 PM EST 2026 app=firefox-esr dest_ip=* dest_port=58149 pid=237320 user=pentester fd=169u ip_version=4 dvc_id=619894 transport=UDP


_raw: Fri Jan  9 01:06:56 PM EST 2026 app=firefox-esr dest_ip=* dest_port=40605 pid=237320 user=pentester fd=167u ip_version=4 dvc_id=621793 transport=UDP


_raw: Fri Jan  9 01:06:56 PM EST 2026 app=firefox-esr dest_ip=* dest_port=39944 pid=237320 user=pentester fd=166u ip_version=4 dvc_id=621788 transport=UDP


_raw: Fri Jan  9 01:06:56 PM EST 2026 app=firefox-esr dest_ip=* dest_port=59467 pid=237320 user=pentester fd=157u ip_version=4 dvc_id=621786 transport=UDP


_raw: Fri Jan  9 01:06:56 PM EST 2026 app=firefox-esr dest_ip=* dest_port=40199 pid=237320 user=pentester fd=155u ip_version=4 dvc_id=621780 transport=UDP


_raw: Fri Jan  9 01:06:56 PM EST 2026 app=firefox-esr dest_ip=* dest_port=47545 pid=237320 user=pentester fd=151u ip_version=4 dvc_id=621791 transport=UDP


_raw: Fri Jan  9 01:06:56 PM EST 2026 app=firefox-esr dest_ip=* dest_port=36052 pid=237320 user=pentester fd=141u ip_version=4 dvc_id=621778 transport=UDP


_raw: Fri Jan  9 01:06:56 PM EST 2026 app=firefox-esr dest_ip=* dest_port=53480 pid=237320 user=pentester fd=111u ip_version=4 dvc_id=619486 transport=UDP


_raw: Fri Jan  9 01:06:56 PM EST 2026 app=firefox-esr dest_ip=* dest_port=42199 pid=237320 user=pentester fd=62u ip_version=4 dvc_id=619484 transport=UDP


_raw: Fri Jan  9 01:06:56 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1900 user=root fd=13u ip_version=4 dvc_id=11096 transport=TCP


_raw: Fri Jan  9 01:06:56 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=873 user=xrdp fd=11u ip_version=6 dvc_id=10833 transport=TCP


_raw: Fri Jan  9 01:06:56 PM EST 2026 app=dhcpcd dest_ip=10.0.254.205 dest_port=68 pid=648 user=dhcpcd fd=3u ip_version=4 dvc_id=6713 transport=UDP


_raw: Fri Jan  9 01:06:56 PM EST 2026 app=docker-proxy dest_ip=* dest_port=8000 pid=346377 user=root fd=4u ip_version=6 dvc_id=547689 transport=TCP


_raw: Fri Jan  9 01:06:56 PM EST 2026 app=docker-proxy dest_ip=* dest_port=8000 pid=346371 user=root fd=4u ip_version=4 dvc_id=546665 transport=TCP


_raw: Fri Jan  9 01:06:56 PM EST 2026 app=docker-proxy dest_ip=* dest_port=32769 pid=345824 user=root fd=4u ip_version=6 dvc_id=545158 transport=TCP


_raw: Fri Jan  9 01:06:56 PM EST 2026 app=docker-proxy dest_ip=* dest_port=32769 pid=345817 user=root fd=4u ip_version=4 dvc_id=543644 transport=TCP


_raw: Fri Jan  9 01:06:56 PM EST 2026 app=docker-proxy dest_ip=* dest_port=32768 pid=345809 user=root fd=4u ip_version=6 dvc_id=543640 transport=TCP


_raw: Fri Jan  9 01:06:56 PM EST 2026 app=docker-proxy dest_ip=* dest_port=32768 pid=345801 user=root fd=4u ip_version=4 dvc_id=546974 transport=TCP


_raw: Fri Jan  9 01:06:56 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=39035 pid=345056 user=root fd=9u ip_version=4 dvc_id=542090 transport=TCP


_raw: Fri Jan  9 01:06:56 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=248254 user=pentester fd=37u ip_version=6 dvc_id=348115 transport=TCP


_raw: Fri Jan  9 01:06:56 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=37961 pid=248254 user=pentester fd=18u ip_version=6 dvc_id=348893 transport=TCP


_raw: Fri Jan  9 01:06:56 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1953 user=root fd=13u ip_version=4 dvc_id=16407 transport=TCP


_raw: Fri Jan  9 01:06:56 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=878 user=xrdp fd=11u ip_version=6 dvc_id=8833 transport=TCP


_raw: Fri Jan  9 01:06:56 PM EST 2026 app=dhcpcd dest_ip=10.0.254.201 dest_port=68 pid=649 user=dhcpcd fd=3u ip_version=4 dvc_id=7900 transport=UDP


_raw: Fri Jan  9 01:06:54 PM EST 2026 app=docker-proxy dest_ip=* dest_port=8000 pid=293834 user=root fd=4u ip_version=6 dvc_id=458419 transport=TCP


_raw: Fri Jan  9 01:06:54 PM EST 2026 app=docker-proxy dest_ip=* dest_port=8000 pid=293827 user=root fd=4u ip_version=4 dvc_id=458411 transport=TCP


_raw: Fri Jan  9 01:06:54 PM EST 2026 app=docker-proxy dest_ip=* dest_port=32771 pid=293244 user=root fd=4u ip_version=6 dvc_id=458003 transport=TCP


_raw: Fri Jan  9 01:06:54 PM EST 2026 app=docker-proxy dest_ip=* dest_port=32771 pid=293237 user=root fd=4u ip_version=4 dvc_id=451580 transport=TCP


_raw: Fri Jan  9 01:06:54 PM EST 2026 app=docker-proxy dest_ip=* dest_port=32770 pid=293229 user=root fd=4u ip_version=6 dvc_id=451576 transport=TCP


_raw: Fri Jan  9 01:06:54 PM EST 2026 app=docker-proxy dest_ip=* dest_port=32770 pid=293219 user=root fd=4u ip_version=4 dvc_id=451569 transport=TCP


_raw: Fri Jan  9 01:06:54 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=41727 pid=248513 user=root fd=9u ip_version=4 dvc_id=345512 transport=TCP


_raw: Fri Jan  9 01:06:54 PM EST 2026 app=slorpin dest_ip=* dest_port=80 pid=239584 user=pentester fd=6u ip_version=6 dvc_id=326050 transport=TCP


_raw: Fri Jan  9 01:06:54 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1897 user=root fd=13u ip_version=4 dvc_id=11030 transport=TCP


_raw: Fri Jan  9 01:06:54 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=875 user=xrdp fd=11u ip_version=6 dvc_id=10640 transport=TCP


_raw: Fri Jan  9 01:06:54 PM EST 2026 app=dhcpcd dest_ip=10.0.254.203 dest_port=68 pid=647 user=dhcpcd fd=3u ip_version=4 dvc_id=9426 transport=UDP


_raw:
Proto   Port
udp       68
udp    45946
udp      546
tcp     8889
tcp     3389
tcp    42321
tcp     3350
tcp     8080


_raw: Fri Jan  9 01:06:38 PM EST 2026 app=nc dest_ip=* dest_port=4444 pid=289211 user=pentester fd=3u ip_version=4 dvc_id=441047 transport=TCP


_raw: Fri Jan  9 01:06:38 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=264537 user=pentester fd=37u ip_version=6 dvc_id=382820 transport=TCP


_raw: Fri Jan  9 01:06:38 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=45879 pid=264537 user=pentester fd=18u ip_version=6 dvc_id=382695 transport=TCP


_raw: Fri Jan  9 01:06:38 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1901 user=root fd=13u ip_version=4 dvc_id=11744 transport=TCP


_raw: Fri Jan  9 01:06:38 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=878 user=xrdp fd=11u ip_version=6 dvc_id=12356 transport=TCP


_raw: Fri Jan  9 01:06:38 PM EST 2026 app=dhcpcd dest_ip=10.0.254.204 dest_port=68 pid=649 user=dhcpcd fd=3u ip_version=4 dvc_id=7783 transport=UDP


_raw: Fri Jan  9 01:06:38 PM EST 2026 app=firefox-esr dest_ip=* dest_port=47610 pid=229091 user=pentester fd=104u ip_version=4 dvc_id=590996 transport=UDP


_raw: Fri Jan  9 01:06:38 PM EST 2026 app=firefox-esr dest_ip=* dest_port=44468 pid=229091 user=pentester fd=79u ip_version=4 dvc_id=588431 transport=UDP


_raw: Fri Jan  9 01:06:38 PM EST 2026 app=firefox-esr dest_ip=* dest_port=57852 pid=229091 user=pentester fd=78u ip_version=4 dvc_id=590173 transport=UDP


_raw: Fri Jan  9 01:06:38 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1951 user=root fd=13u ip_version=4 dvc_id=12635 transport=TCP


_raw: Fri Jan  9 01:06:38 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=871 user=xrdp fd=11u ip_version=6 dvc_id=9991 transport=TCP


_raw: Fri Jan  9 01:06:38 PM EST 2026 app=dhcpcd dest_ip=10.0.254.205 dest_port=68 pid=647 user=dhcpcd fd=3u ip_version=4 dvc_id=9368 transport=UDP


_raw: Fri Jan  9 01:06:37 PM EST 2026 app=chrome dest_ip=127.0.0.1 dest_port=41097 pid=268748 user=pentester fd=41u ip_version=4 dvc_id=468803 transport=TCP


_raw: Fri Jan  9 01:06:37 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=267547 user=pentester fd=37u ip_version=6 dvc_id=466192 transport=TCP


_raw: Fri Jan  9 01:06:37 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=33693 pid=267547 user=pentester fd=18u ip_version=6 dvc_id=466148 transport=TCP


_raw: Fri Jan  9 01:06:37 PM EST 2026 app=firefox-esr dest_ip=* dest_port=43896 pid=236994 user=pentester fd=264u ip_version=4 dvc_id=348853 transport=UDP


_raw: Fri Jan  9 01:06:37 PM EST 2026 app=firefox-esr dest_ip=* dest_port=41170 pid=236994 user=pentester fd=193u ip_version=4 dvc_id=1020241 transport=UDP


_raw: Fri Jan  9 01:06:37 PM EST 2026 app=firefox-esr dest_ip=* dest_port=47826 pid=236994 user=pentester fd=79u ip_version=4 dvc_id=1020238 transport=UDP


_raw: Fri Jan  9 01:06:37 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1910 user=root fd=13u ip_version=4 dvc_id=14450 transport=TCP


_raw: Fri Jan  9 01:06:37 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=874 user=xrdp fd=11u ip_version=6 dvc_id=11649 transport=TCP


_raw: Fri Jan  9 01:06:37 PM EST 2026 app=dhcpcd dest_ip=10.0.254.201 dest_port=68 pid=652 user=dhcpcd fd=3u ip_version=4 dvc_id=5052 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     4444
tcp    45879
tcp     3350
tcp     3389
tcp     8080


_raw:
Proto   Port
udp    57852
udp    47610
udp    44468
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw: Fri Jan  9 01:06:37 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=260709 user=pentester fd=37u ip_version=6 dvc_id=378248 transport=TCP


_raw: Fri Jan  9 01:06:37 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=41765 pid=260709 user=pentester fd=18u ip_version=6 dvc_id=373424 transport=TCP


_raw: Fri Jan  9 01:06:37 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1904 user=root fd=13u ip_version=4 dvc_id=15393 transport=TCP


_raw: Fri Jan  9 01:06:37 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=881 user=xrdp fd=11u ip_version=6 dvc_id=11364 transport=TCP


_raw: Fri Jan  9 01:06:37 PM EST 2026 app=dhcpcd dest_ip=10.0.254.203 dest_port=68 pid=652 user=dhcpcd fd=3u ip_version=4 dvc_id=10273 transport=UDP


_raw: Fri Jan  9 01:06:36 PM EST 2026 app=firefox-esr dest_ip=* dest_port=39945 pid=231564 user=pentester fd=170u ip_version=4 dvc_id=845931 transport=UDP


_raw: Fri Jan  9 01:06:36 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1908 user=root fd=13u ip_version=4 dvc_id=11089 transport=TCP


_raw: Fri Jan  9 01:06:36 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=880 user=xrdp fd=11u ip_version=6 dvc_id=10825 transport=TCP


_raw: Fri Jan  9 01:06:36 PM EST 2026 app=dhcpcd dest_ip=10.0.254.202 dest_port=68 pid=651 user=dhcpcd fd=3u ip_version=4 dvc_id=5060 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3389
tcp     8080
tcp    41765
tcp     3350


_raw:
Proto   Port
udp    39945
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp     5353
udp     5353
udp      546
tcp     8889
tcp     3350
tcp    45883
tcp     3389
tcp     8080


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw: Fri Jan  9 01:06:13 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=392067 user=pentester fd=37u ip_version=6 dvc_id=833751 transport=TCP


_raw: Fri Jan  9 01:06:13 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=41751 pid=392067 user=pentester fd=18u ip_version=6 dvc_id=833618 transport=TCP


_raw: Fri Jan  9 01:06:13 PM EST 2026 app=node dest_ip=* dest_port=3001 pid=279781 user=pentester fd=26u ip_version=6 dvc_id=479418 transport=TCP


_raw: Fri Jan  9 01:06:13 PM EST 2026 app=firefox-esr dest_ip=* dest_port=33551 pid=244705 user=pentester fd=112u ip_version=4 dvc_id=757853 transport=UDP


_raw: Fri Jan  9 01:06:13 PM EST 2026 app=node dest_ip=* dest_port=1337 pid=244572 user=planka fd=26u ip_version=6 dvc_id=326092 transport=TCP


_raw: Fri Jan  9 01:06:13 PM EST 2026 app=postgres dest_ip=127.0.0.1 dest_port=5432 pid=235049 user=postgres fd=7u ip_version=4 dvc_id=310915 transport=TCP


_raw: Fri Jan  9 01:06:13 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1951 user=root fd=13u ip_version=4 dvc_id=12795 transport=TCP


_raw: Fri Jan  9 01:06:13 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=872 user=xrdp fd=11u ip_version=6 dvc_id=12335 transport=TCP


_raw: Fri Jan  9 01:06:13 PM EST 2026 app=dhcpcd dest_ip=10.0.254.201 dest_port=68 pid=647 user=dhcpcd fd=3u ip_version=4 dvc_id=8644 transport=UDP


_raw: Fri Jan  9 01:06:12 PM EST 2026 app=firefox-esr dest_ip=* dest_port=43714 pid=236685 user=pentester fd=134u ip_version=4 dvc_id=329788 transport=UDP


_raw: Fri Jan  9 01:06:12 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=233374 user=pentester fd=37u ip_version=6 dvc_id=311604 transport=TCP


_raw: Fri Jan  9 01:06:12 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=34413 pid=233374 user=pentester fd=18u ip_version=6 dvc_id=309820 transport=TCP


_raw: Fri Jan  9 01:06:12 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1956 user=root fd=13u ip_version=4 dvc_id=11067 transport=TCP


_raw: Fri Jan  9 01:06:12 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=879 user=xrdp fd=11u ip_version=6 dvc_id=9927 transport=TCP


_raw: Fri Jan  9 01:06:12 PM EST 2026 app=dhcpcd dest_ip=10.0.254.203 dest_port=68 pid=651 user=dhcpcd fd=3u ip_version=4 dvc_id=7636 transport=UDP


_raw: Fri Jan  9 01:06:12 PM EST 2026 app=firefox-esr dest_ip=* dest_port=34821 pid=231925 user=pentester fd=181u ip_version=4 dvc_id=825962 transport=UDP


_raw: Fri Jan  9 01:06:12 PM EST 2026 app=firefox-esr dest_ip=* dest_port=47710 pid=231925 user=pentester fd=156u ip_version=4 dvc_id=319590 transport=UDP


_raw: Fri Jan  9 01:06:12 PM EST 2026 app=firefox-esr dest_ip=* dest_port=59880 pid=231925 user=pentester fd=148u ip_version=4 dvc_id=826465 transport=UDP


_raw: Fri Jan  9 01:06:12 PM EST 2026 app=firefox-esr dest_ip=* dest_port=56431 pid=231925 user=pentester fd=143u ip_version=4 dvc_id=824710 transport=UDP


_raw: Fri Jan  9 01:06:12 PM EST 2026 app=firefox-esr dest_ip=* dest_port=54463 pid=231925 user=pentester fd=130u ip_version=4 dvc_id=826463 transport=UDP


_raw: Fri Jan  9 01:06:12 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1907 user=root fd=13u ip_version=4 dvc_id=10858 transport=TCP


_raw: Fri Jan  9 01:06:12 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=883 user=xrdp fd=11u ip_version=6 dvc_id=11609 transport=TCP


_raw: Fri Jan  9 01:06:12 PM EST 2026 app=dhcpcd dest_ip=10.0.254.205 dest_port=68 pid=646 user=dhcpcd fd=3u ip_version=4 dvc_id=7962 transport=UDP


_raw: Fri Jan  9 01:06:12 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1954 user=root fd=13u ip_version=4 dvc_id=10802 transport=TCP


_raw: Fri Jan  9 01:06:12 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=875 user=xrdp fd=11u ip_version=6 dvc_id=11437 transport=TCP


_raw: Fri Jan  9 01:06:12 PM EST 2026 app=dhcpcd dest_ip=10.0.254.204 dest_port=68 pid=650 user=dhcpcd fd=3u ip_version=4 dvc_id=7752 transport=UDP


_raw:
Proto   Port
udp    43714
udp       68
udp      546
tcp     8889
tcp    34413
tcp     3389
tcp     8080
tcp     3350


_raw: Fri Jan  9 01:06:10 PM EST 2026 app=python3 dest_ip=* dest_port=161 pid=369048 user=root fd=36u ip_version=6 dvc_id=687776 transport=UDP


_raw: Fri Jan  9 01:06:10 PM EST 2026 app=python3 dest_ip=* dest_port=53 pid=369048 user=root fd=35u ip_version=6 dvc_id=688500 transport=TCP


_raw: Fri Jan  9 01:06:10 PM EST 2026 app=python3 dest_ip=* dest_port=53 pid=369048 user=root fd=34u ip_version=6 dvc_id=687775 transport=UDP


_raw: Fri Jan  9 01:06:10 PM EST 2026 app=python3 dest_ip=* dest_port=143 pid=369048 user=root fd=33u ip_version=6 dvc_id=687774 transport=TCP


_raw: Fri Jan  9 01:06:10 PM EST 2026 app=python3 dest_ip=* dest_port=587 pid=369048 user=root fd=32u ip_version=6 dvc_id=686917 transport=TCP


_raw: Fri Jan  9 01:06:10 PM EST 2026 app=python3 dest_ip=* dest_port=25 pid=369048 user=root fd=31u ip_version=6 dvc_id=687773 transport=TCP


_raw: Fri Jan  9 01:06:10 PM EST 2026 app=python3 dest_ip=* dest_port=1883 pid=369048 user=root fd=30u ip_version=6 dvc_id=685892 transport=TCP


_raw: Fri Jan  9 01:06:10 PM EST 2026 app=python3 dest_ip=* dest_port=636 pid=369048 user=root fd=29u ip_version=6 dvc_id=687772 transport=TCP


_raw: Fri Jan  9 01:06:10 PM EST 2026 app=python3 dest_ip=* dest_port=443 pid=369048 user=root fd=28u ip_version=6 dvc_id=687771 transport=TCP


_raw: Fri Jan  9 01:06:10 PM EST 2026 app=python3 dest_ip=* dest_port=5986 pid=369048 user=root fd=27u ip_version=6 dvc_id=686916 transport=TCP


_raw: Fri Jan  9 01:06:10 PM EST 2026 app=python3 dest_ip=* dest_port=389 pid=369048 user=root fd=26u ip_version=6 dvc_id=687770 transport=TCP


_raw: Fri Jan  9 01:06:10 PM EST 2026 app=python3 dest_ip=* dest_port=21 pid=369048 user=root fd=25u ip_version=6 dvc_id=687768 transport=TCP


_raw: Fri Jan  9 01:06:10 PM EST 2026 app=python3 dest_ip=* dest_port=389 pid=369048 user=root fd=24u ip_version=6 dvc_id=685891 transport=UDP


_raw: Fri Jan  9 01:06:10 PM EST 2026 app=python3 dest_ip=* dest_port=1434 pid=369048 user=root fd=23u ip_version=6 dvc_id=688498 transport=UDP


_raw: Fri Jan  9 01:06:10 PM EST 2026 app=python3 dest_ip=* dest_port=110 pid=369048 user=root fd=22u ip_version=6 dvc_id=687769 transport=TCP


_raw: Fri Jan  9 01:06:10 PM EST 2026 app=python3 dest_ip=* dest_port=1433 pid=369048 user=root fd=21u ip_version=6 dvc_id=687767 transport=TCP


_raw: Fri Jan  9 01:06:10 PM EST 2026 app=python3 dest_ip=* dest_port=88 pid=369048 user=root fd=20u ip_version=6 dvc_id=688497 transport=TCP


_raw: Fri Jan  9 01:06:10 PM EST 2026 app=python3 dest_ip=10.0.254.202 dest_port=443 pid=369048 user=root fd=19u ip_version=4 dvc_id=688499 transport=UDP


_raw: Fri Jan  9 01:06:10 PM EST 2026 app=python3 dest_ip=* dest_port=88 pid=369048 user=root fd=18u ip_version=6 dvc_id=688496 transport=UDP


_raw: Fri Jan  9 01:06:10 PM EST 2026 app=python3 dest_ip=* dest_port=139 pid=369048 user=root fd=14u ip_version=6 dvc_id=687766 transport=TCP


_raw: Fri Jan  9 01:06:10 PM EST 2026 app=python3 dest_ip=* dest_port=445 pid=369048 user=root fd=13u ip_version=6 dvc_id=687765 transport=TCP


_raw: Fri Jan  9 01:06:10 PM EST 2026 app=python3 dest_ip=* dest_port=48515 pid=369048 user=root fd=12u ip_version=6 dvc_id=687764 transport=TCP


_raw: Fri Jan  9 01:06:10 PM EST 2026 app=python3 dest_ip=* dest_port=135 pid=369048 user=root fd=11u ip_version=6 dvc_id=686915 transport=TCP


_raw: Fri Jan  9 01:06:10 PM EST 2026 app=python3 dest_ip=* dest_port=5985 pid=369048 user=root fd=10u ip_version=6 dvc_id=687762 transport=TCP


_raw: Fri Jan  9 01:06:10 PM EST 2026 app=python3 dest_ip=* dest_port=80 pid=369048 user=root fd=9u ip_version=6 dvc_id=688493 transport=TCP


_raw: Fri Jan  9 01:06:10 PM EST 2026 app=python3 dest_ip=* dest_port=5353 pid=369048 user=root fd=8u ip_version=6 dvc_id=686913 transport=UDP


_raw: Fri Jan  9 01:06:10 PM EST 2026 app=python3 dest_ip=* dest_port=137 pid=369048 user=root fd=7u ip_version=6 dvc_id=687761 transport=UDP


_raw: Fri Jan  9 01:06:10 PM EST 2026 app=python3 dest_ip=* dest_port=5355 pid=369048 user=root fd=6u ip_version=6 dvc_id=688491 transport=UDP


_raw: Fri Jan  9 01:06:10 PM EST 2026 app=firefox-esr dest_ip=* dest_port=51415 pid=238617 user=pentester fd=334u ip_version=4 dvc_id=497957 transport=UDP


_raw: Fri Jan  9 01:06:10 PM EST 2026 app=firefox-esr dest_ip=* dest_port=47088 pid=238617 user=pentester fd=114u ip_version=4 dvc_id=583939 transport=UDP


_raw: Fri Jan  9 01:06:10 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1953 user=root fd=13u ip_version=4 dvc_id=12159 transport=TCP


_raw: Fri Jan  9 01:06:10 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=877 user=xrdp fd=11u ip_version=6 dvc_id=9566 transport=TCP


_raw: Fri Jan  9 01:06:10 PM EST 2026 app=dhcpcd dest_ip=10.0.254.202 dest_port=68 pid=648 user=dhcpcd fd=3u ip_version=4 dvc_id=848 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp    47088
udp    51415
udp       68
udp      443
udp     5353
udp     5355
udp     1434
udp       53
udp       88
udp      137
udp      161
udp      389
udp      546
tcp     8889
tcp     5985
tcp     5986
tcp     1883
tcp     1433
tcp      636
tcp      587
tcp       53
tcp       21
tcp       25
tcp      110
tcp       80
tcp       88
tcp      135
tcp      143
tcp      139
tcp      445
tcp      443
tcp      389
tcp     3389
tcp    48515
tcp     3350


_raw: Fri Jan  9 01:05:44 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1909 user=root fd=13u ip_version=4 dvc_id=15513 transport=TCP


_raw: Fri Jan  9 01:05:44 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=883 user=xrdp fd=11u ip_version=6 dvc_id=10739 transport=TCP


_raw: Fri Jan  9 01:05:44 PM EST 2026 app=dhcpcd dest_ip=10.0.254.205 dest_port=68 pid=650 user=dhcpcd fd=3u ip_version=4 dvc_id=8244 transport=UDP


_raw: Fri Jan  9 01:05:44 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1955 user=root fd=13u ip_version=4 dvc_id=12094 transport=TCP


_raw: Fri Jan  9 01:05:44 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=874 user=xrdp fd=11u ip_version=6 dvc_id=10605 transport=TCP


_raw: Fri Jan  9 01:05:44 PM EST 2026 app=dhcpcd dest_ip=10.0.254.201 dest_port=68 pid=649 user=dhcpcd fd=3u ip_version=4 dvc_id=6028 transport=UDP


_raw: Fri Jan  9 01:05:44 PM EST 2026 app=conmon dest_ip=* dest_port=3080 pid=365257 user=root fd=5u ip_version=4 dvc_id=698656 transport=TCP


_raw: Fri Jan  9 01:05:44 PM EST 2026 app=aardvark-dns dest_ip=10.89.0.1 dest_port=53 pid=323112 user=root fd=12u ip_version=4 dvc_id=572135 transport=TCP


_raw: Fri Jan  9 01:05:44 PM EST 2026 app=aardvark-dns dest_ip=10.89.0.1 dest_port=53 pid=323112 user=root fd=11u ip_version=4 dvc_id=572134 transport=UDP


_raw: Fri Jan  9 01:05:44 PM EST 2026 app=firefox-esr dest_ip=* dest_port=39004 pid=229816 user=pentester fd=136u ip_version=4 dvc_id=699153 transport=UDP


_raw: Fri Jan  9 01:05:44 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1951 user=root fd=13u ip_version=4 dvc_id=15524 transport=TCP


_raw: Fri Jan  9 01:05:44 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=872 user=xrdp fd=11u ip_version=6 dvc_id=10738 transport=TCP


_raw: Fri Jan  9 01:05:44 PM EST 2026 app=dhcpcd dest_ip=10.0.254.202 dest_port=68 pid=646 user=dhcpcd fd=3u ip_version=4 dvc_id=9382 transport=UDP


_raw: Fri Jan  9 01:05:43 PM EST 2026 app=firefox-esr dest_ip=* dest_port=40410 pid=361308 user=pentester fd=75u ip_version=4 dvc_id=558175 transport=UDP


_raw: Fri Jan  9 01:05:43 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1951 user=root fd=13u ip_version=4 dvc_id=12796 transport=TCP


_raw: Fri Jan  9 01:05:43 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=877 user=xrdp fd=11u ip_version=6 dvc_id=9888 transport=TCP


_raw: Fri Jan  9 01:05:43 PM EST 2026 app=dhcpcd dest_ip=10.0.254.204 dest_port=68 pid=646 user=dhcpcd fd=3u ip_version=4 dvc_id=8351 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp    39004
udp       53
udp       68
udp      546
tcp     8889
tcp       53
tcp     3080
tcp     3350
tcp     3389


_raw: Fri Jan  9 01:05:42 PM EST 2026 file_hash=SHA2-256(stdin)= 4687e5bdcbc3d255fc5e72ec09b781c18cae239c1b86f35ada03c06e1fb22cda


_raw: Fri Jan  9 01:05:42 PM EST 2026 app=firefox-esr dest_ip=* dest_port=49599 pid=249816 user=pentester fd=103u ip_version=4 dvc_id=605770 transport=UDP


_raw: Fri Jan  9 01:05:42 PM EST 2026 app=firefox-esr dest_ip=* dest_port=42690 pid=249816 user=pentester fd=96u ip_version=4 dvc_id=605767 transport=UDP


_raw: Fri Jan  9 01:05:42 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1895 user=root fd=13u ip_version=4 dvc_id=15463 transport=TCP


_raw: Fri Jan  9 01:05:42 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=871 user=xrdp fd=11u ip_version=6 dvc_id=10675 transport=TCP


_raw: Fri Jan  9 01:05:42 PM EST 2026 app=dhcpcd dest_ip=10.0.254.203 dest_port=68 pid=646 user=dhcpcd fd=3u ip_version=4 dvc_id=9493 transport=UDP


_raw:
Proto   Port
udp    40410
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp    49599
udp    42690
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp    47875
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389
tcp    35857
tcp     8080


_raw: Fri Jan  9 01:05:18 PM EST 2026 app=firefox-esr dest_ip=* dest_port=37375 pid=246013 user=pentester fd=241u ip_version=4 dvc_id=636110 transport=UDP


_raw: Fri Jan  9 01:05:18 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1909 user=root fd=13u ip_version=4 dvc_id=18041 transport=TCP


_raw: Fri Jan  9 01:05:18 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=876 user=xrdp fd=11u ip_version=6 dvc_id=11538 transport=TCP


_raw: Fri Jan  9 01:05:18 PM EST 2026 app=dhcpcd dest_ip=10.0.254.202 dest_port=68 pid=648 user=dhcpcd fd=3u ip_version=4 dvc_id=9411 transport=UDP


_raw:
Proto   Port
udp       68
udp    37375
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw: Fri Jan  9 01:05:17 PM EST 2026 app=nc dest_ip=* dest_port=2626 pid=356718 user=pentester fd=3u ip_version=4 dvc_id=563389 transport=TCP


_raw: Fri Jan  9 01:05:17 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1957 user=root fd=13u ip_version=4 dvc_id=12852 transport=TCP


_raw: Fri Jan  9 01:05:17 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=877 user=xrdp fd=11u ip_version=6 dvc_id=9064 transport=TCP


_raw: Fri Jan  9 01:05:17 PM EST 2026 app=dhcpcd dest_ip=10.0.254.205 dest_port=68 pid=647 user=dhcpcd fd=3u ip_version=4 dvc_id=9567 transport=UDP


_raw: Fri Jan  9 01:05:16 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=246729 user=pentester fd=37u ip_version=6 dvc_id=342197 transport=TCP


_raw: Fri Jan  9 01:05:16 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=36519 pid=246729 user=pentester fd=18u ip_version=6 dvc_id=342159 transport=TCP


_raw: Fri Jan  9 01:05:16 PM EST 2026 app=firefox-esr dest_ip=* dest_port=54351 pid=245634 user=pentester fd=142u ip_version=4 dvc_id=8323822 transport=UDP


_raw: Fri Jan  9 01:05:16 PM EST 2026 app=firefox-esr dest_ip=* dest_port=44743 pid=245634 user=pentester fd=58u ip_version=4 dvc_id=8321837 transport=UDP


_raw: Fri Jan  9 01:05:16 PM EST 2026 app=firefox-esr dest_ip=* dest_port=48271 pid=245634 user=pentester fd=33u ip_version=4 dvc_id=8322813 transport=UDP


_raw: Fri Jan  9 01:05:16 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1907 user=root fd=13u ip_version=4 dvc_id=11932 transport=TCP


_raw: Fri Jan  9 01:05:16 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=875 user=xrdp fd=11u ip_version=6 dvc_id=11563 transport=TCP


_raw: Fri Jan  9 01:05:16 PM EST 2026 app=dhcpcd dest_ip=10.0.254.204 dest_port=68 pid=650 user=dhcpcd fd=3u ip_version=4 dvc_id=9359 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     2626
tcp     8889
tcp     3350
tcp     3389


_raw: Fri Jan  9 01:05:15 PM EST 2026 app=firefox-esr dest_ip=* dest_port=48702 pid=265420 user=pentester fd=95u ip_version=4 dvc_id=416162 transport=UDP


_raw: Fri Jan  9 01:05:15 PM EST 2026 app=firefox-esr dest_ip=* dest_port=34999 pid=265420 user=pentester fd=76u ip_version=4 dvc_id=373610 transport=UDP


_raw: Fri Jan  9 01:05:15 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1908 user=root fd=13u ip_version=4 dvc_id=13486 transport=TCP


_raw: Fri Jan  9 01:05:15 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=878 user=xrdp fd=11u ip_version=6 dvc_id=11436 transport=TCP


_raw: Fri Jan  9 01:05:15 PM EST 2026 app=dhcpcd dest_ip=10.0.254.203 dest_port=68 pid=652 user=dhcpcd fd=3u ip_version=4 dvc_id=5107 transport=UDP


_raw:
Proto   Port
udp    48702
udp       68
udp    34999
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp    36519
tcp     8080
tcp     3350
tcp     3389


_raw: Fri Jan  9 01:05:13 PM EST 2026 app=nc dest_ip=* dest_port=8096 pid=357731 user=pentester fd=3u ip_version=4 dvc_id=686714 transport=TCP


_raw: Fri Jan  9 01:05:13 PM EST 2026 app=docker-proxy dest_ip=* dest_port=4444 pid=354352 user=root fd=4u ip_version=6 dvc_id=671616 transport=TCP


_raw: Fri Jan  9 01:05:13 PM EST 2026 app=docker-proxy dest_ip=* dest_port=4444 pid=354345 user=root fd=4u ip_version=4 dvc_id=671610 transport=TCP


_raw: Fri Jan  9 01:05:13 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=45447 pid=352062 user=root fd=7u ip_version=4 dvc_id=664561 transport=TCP


_raw: Fri Jan  9 01:05:13 PM EST 2026 app=firefox-esr dest_ip=* dest_port=38461 pid=245644 user=pentester fd=207u ip_version=4 dvc_id=747214 transport=UDP


_raw: Fri Jan  9 01:05:13 PM EST 2026 app=firefox-esr dest_ip=* dest_port=54430 pid=245644 user=pentester fd=189u ip_version=4 dvc_id=747177 transport=UDP


_raw: Fri Jan  9 01:05:13 PM EST 2026 app=firefox-esr dest_ip=* dest_port=54933 pid=245644 user=pentester fd=142u ip_version=4 dvc_id=358229 transport=UDP


_raw: Fri Jan  9 01:05:13 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1901 user=root fd=13u ip_version=4 dvc_id=11771 transport=TCP


_raw: Fri Jan  9 01:05:13 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=873 user=xrdp fd=11u ip_version=6 dvc_id=12365 transport=TCP


_raw: Fri Jan  9 01:05:13 PM EST 2026 app=dhcpcd dest_ip=10.0.254.201 dest_port=68 pid=648 user=dhcpcd fd=3u ip_version=4 dvc_id=999 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw: Fri Jan  9 01:04:52 PM EST 2026 app=firefox-esr dest_ip=* dest_port=48323 pid=229884 user=pentester fd=269u ip_version=4 dvc_id=489218 transport=UDP


_raw: Fri Jan  9 01:04:52 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1913 user=root fd=13u ip_version=4 dvc_id=12457 transport=TCP


_raw: Fri Jan  9 01:04:52 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=882 user=xrdp fd=11u ip_version=6 dvc_id=9794 transport=TCP


_raw: Fri Jan  9 01:04:52 PM EST 2026 app=dhcpcd dest_ip=10.0.254.201 dest_port=68 pid=651 user=dhcpcd fd=3u ip_version=4 dvc_id=5935 transport=UDP


_raw: Fri Jan  9 01:04:51 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1905 user=root fd=13u ip_version=4 dvc_id=16943 transport=TCP


_raw: Fri Jan  9 01:04:51 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=877 user=xrdp fd=11u ip_version=6 dvc_id=11499 transport=TCP


_raw: Fri Jan  9 01:04:51 PM EST 2026 app=dhcpcd dest_ip=10.0.254.203 dest_port=68 pid=650 user=dhcpcd fd=3u ip_version=4 dvc_id=7573 transport=UDP


_raw: Fri Jan  9 01:04:51 PM EST 2026 app=firefox-esr dest_ip=* dest_port=58421 pid=233571 user=pentester fd=92u ip_version=4 dvc_id=523761 transport=UDP


_raw: Fri Jan  9 01:04:51 PM EST 2026 app=firefox-esr dest_ip=* dest_port=52167 pid=233571 user=pentester fd=90u ip_version=4 dvc_id=523759 transport=UDP


_raw: Fri Jan  9 01:04:51 PM EST 2026 app=firefox-esr dest_ip=* dest_port=57517 pid=233571 user=pentester fd=56u ip_version=4 dvc_id=523755 transport=UDP


_raw: Fri Jan  9 01:04:51 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1897 user=root fd=13u ip_version=4 dvc_id=12698 transport=TCP


_raw: Fri Jan  9 01:04:51 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=861 user=xrdp fd=11u ip_version=6 dvc_id=9717 transport=TCP


_raw: Fri Jan  9 01:04:51 PM EST 2026 app=dhcpcd dest_ip=10.0.254.204 dest_port=68 pid=645 user=dhcpcd fd=3u ip_version=4 dvc_id=8233 transport=UDP


_raw:
Proto   Port
udp    48323
udp       68
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw: Fri Jan  9 01:04:50 PM EST 2026 file_hash=SHA2-256(stdin)= 2e984299a546d40c22c7ec9bcc34a4ff033e9e1afdb0fdd60b90e4bfeb3ffe76


_raw: Fri Jan  9 01:04:50 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1900 user=root fd=13u ip_version=4 dvc_id=16660 transport=TCP


_raw: Fri Jan  9 01:04:50 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=872 user=xrdp fd=11u ip_version=6 dvc_id=11576 transport=TCP


_raw: Fri Jan  9 01:04:50 PM EST 2026 app=dhcpcd dest_ip=10.0.254.202 dest_port=68 pid=645 user=dhcpcd fd=3u ip_version=4 dvc_id=6806 transport=UDP


_raw:
Proto   Port
udp    52167
udp       68
udp    57517
udp    58421
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp     3389
tcp     3350


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp     3350
tcp       22
tcp     3389


_raw: Fri Jan  9 01:04:48 PM EST 2026 app=firefox-esr dest_ip=* dest_port=54577 pid=229907 user=pentester fd=172u ip_version=4 dvc_id=443514 transport=UDP


_raw: Fri Jan  9 01:04:48 PM EST 2026 app=firefox-esr dest_ip=* dest_port=41674 pid=229907 user=pentester fd=80u ip_version=4 dvc_id=600189 transport=UDP


_raw: Fri Jan  9 01:04:48 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1910 user=root fd=13u ip_version=4 dvc_id=17990 transport=TCP


_raw: Fri Jan  9 01:04:48 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=870 user=xrdp fd=11u ip_version=6 dvc_id=11787 transport=TCP


_raw: Fri Jan  9 01:04:48 PM EST 2026 app=dhcpcd dest_ip=10.0.254.205 dest_port=68 pid=647 user=dhcpcd fd=3u ip_version=4 dvc_id=8323 transport=UDP


_raw:
Proto   Port
udp       68
udp    41674
udp    54577
udp      546
tcp     8889
tcp     3350
tcp     3389


_raw: Fri Jan  9 01:04:35 PM EST 2026 app=python3 dest_ip=* dest_port=8000 pid=312488 user=pentester fd=3u ip_version=4 dvc_id=551792 transport=TCP


_raw: Fri Jan  9 01:04:35 PM EST 2026 app=nc dest_ip=* dest_port=4444 pid=295497 user=pentester fd=3u ip_version=4 dvc_id=499544 transport=TCP


_raw: Fri Jan  9 01:04:35 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=262836 user=pentester fd=37u ip_version=6 dvc_id=375948 transport=TCP


_raw: Fri Jan  9 01:04:35 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=39031 pid=262836 user=pentester fd=18u ip_version=6 dvc_id=374803 transport=TCP


_raw: Fri Jan  9 01:04:35 PM EST 2026 app=firefox-esr dest_ip=* dest_port=42576 pid=259897 user=pentester fd=287u ip_version=4 dvc_id=813627 transport=UDP


_raw: Fri Jan  9 01:04:35 PM EST 2026 app=firefox-esr dest_ip=* dest_port=38676 pid=259897 user=pentester fd=251u ip_version=4 dvc_id=812701 transport=UDP


_raw: Fri Jan  9 01:04:35 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=241845 user=root fd=7u ip_version=6 dvc_id=333492 transport=TCP


_raw: Fri Jan  9 01:04:35 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=241845 user=root fd=6u ip_version=4 dvc_id=333490 transport=TCP


_raw: Fri Jan  9 01:04:35 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=869 user=xrdp fd=11u ip_version=6 dvc_id=9153 transport=TCP


_raw: Fri Jan  9 01:04:35 PM EST 2026 app=dhcpcd dest_ip=10.0.254.206 dest_port=68 pid=646 user=dhcpcd fd=3u ip_version=4 dvc_id=9266 transport=UDP


_raw:
Proto   Port
udp       68
udp    42576
udp    38676
udp      546
tcp     8000
tcp       22
tcp     4444
tcp     8080
tcp    39031
tcp     3389
tcp       22
tcp     3350


_raw: Fri Jan  9 01:04:18 PM EST 2026 app=nc dest_ip=* dest_port=4444 pid=339724 user=pentester fd=3u ip_version=4 dvc_id=664837 transport=TCP


_raw: Fri Jan  9 01:04:18 PM EST 2026 app=luftweht-viewer dest_ip=* dest_port=8080 pid=256099 user=pentester fd=6u ip_version=6 dvc_id=377468 transport=TCP


_raw: Fri Jan  9 01:04:18 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=246192 user=root fd=7u ip_version=6 dvc_id=351468 transport=TCP


_raw: Fri Jan  9 01:04:18 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=246192 user=root fd=6u ip_version=4 dvc_id=351466 transport=TCP


_raw: Fri Jan  9 01:04:18 PM EST 2026 app=socat dest_ip=* dest_port=8000 pid=234221 user=pentester fd=5u ip_version=4 dvc_id=316787 transport=TCP


_raw: Fri Jan  9 01:04:18 PM EST 2026 app=firefox-esr dest_ip=* dest_port=56316 pid=229938 user=pentester fd=245u ip_version=4 dvc_id=545126 transport=UDP


_raw: Fri Jan  9 01:04:18 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1900 user=root fd=13u ip_version=4 dvc_id=11053 transport=TCP


_raw: Fri Jan  9 01:04:18 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=877 user=xrdp fd=11u ip_version=6 dvc_id=10780 transport=TCP


_raw: Fri Jan  9 01:04:18 PM EST 2026 app=dhcpcd dest_ip=10.0.254.201 dest_port=68 pid=648 user=dhcpcd fd=3u ip_version=4 dvc_id=9556 transport=UDP


_raw:
Proto   Port
udp    56316
udp       68
udp      546
tcp       22
tcp     4444
tcp     8889
tcp     8000
tcp       22
tcp     3350
tcp     3389
tcp     8080


_raw: Fri Jan  9 01:04:14 PM EST 2026 app=nc dest_ip=* dest_port=42065 pid=338018 user=pentester fd=3u ip_version=4 dvc_id=523649 transport=TCP


_raw: Fri Jan  9 01:04:14 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=43801 pid=325821 user=root fd=10u ip_version=4 dvc_id=489090 transport=TCP


_raw: Fri Jan  9 01:04:14 PM EST 2026 app=nc dest_ip=* dest_port=42045 pid=312532 user=pentester fd=3u ip_version=4 dvc_id=464352 transport=TCP


_raw: Fri Jan  9 01:04:14 PM EST 2026 app=python3 dest_ip=* dest_port=8000 pid=296135 user=pentester fd=3u ip_version=4 dvc_id=435429 transport=TCP


_raw: Fri Jan  9 01:04:14 PM EST 2026 app=nc dest_ip=* dest_port=42042 pid=295650 user=pentester fd=3u ip_version=4 dvc_id=434483 transport=TCP


_raw: Fri Jan  9 01:04:14 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=244945 user=root fd=7u ip_version=6 dvc_id=340328 transport=TCP


_raw: Fri Jan  9 01:04:14 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=244945 user=root fd=6u ip_version=4 dvc_id=340326 transport=TCP


_raw: Fri Jan  9 01:04:14 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1903 user=root fd=13u ip_version=4 dvc_id=11100 transport=TCP


_raw: Fri Jan  9 01:04:14 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=874 user=xrdp fd=11u ip_version=6 dvc_id=11398 transport=TCP


_raw: Fri Jan  9 01:04:14 PM EST 2026 app=dhcpcd dest_ip=10.0.254.205 dest_port=68 pid=650 user=dhcpcd fd=3u ip_version=4 dvc_id=9368 transport=UDP


_raw: Fri Jan  9 01:04:13 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=251166 user=root fd=7u ip_version=6 dvc_id=411401 transport=TCP


_raw: Fri Jan  9 01:04:13 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=251166 user=root fd=6u ip_version=4 dvc_id=411399 transport=TCP


_raw: Fri Jan  9 01:04:13 PM EST 2026 app=docker-proxy dest_ip=127.0.0.1 dest_port=8080 pid=243989 user=root fd=4u ip_version=4 dvc_id=378478 transport=TCP


_raw: Fri Jan  9 01:04:13 PM EST 2026 app=docker-proxy dest_ip=127.0.0.1 dest_port=7687 pid=243349 user=root fd=4u ip_version=4 dvc_id=377368 transport=TCP


_raw: Fri Jan  9 01:04:13 PM EST 2026 app=docker-proxy dest_ip=127.0.0.1 dest_port=7474 pid=243342 user=root fd=4u ip_version=4 dvc_id=377947 transport=TCP


_raw: Fri Jan  9 01:04:13 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=39943 pid=237975 user=root fd=7u ip_version=4 dvc_id=340760 transport=TCP


_raw: Fri Jan  9 01:04:13 PM EST 2026 app=firefox-esr dest_ip=* dest_port=56656 pid=230428 user=pentester fd=398u ip_version=4 dvc_id=1115613 transport=UDP


_raw: Fri Jan  9 01:04:13 PM EST 2026 app=firefox-esr dest_ip=* dest_port=54744 pid=230428 user=pentester fd=394u ip_version=4 dvc_id=1114361 transport=UDP


_raw: Fri Jan  9 01:04:13 PM EST 2026 app=firefox-esr dest_ip=* dest_port=50270 pid=230428 user=pentester fd=392u ip_version=4 dvc_id=1115606 transport=UDP


_raw: Fri Jan  9 01:04:13 PM EST 2026 app=firefox-esr dest_ip=* dest_port=49467 pid=230428 user=pentester fd=375u ip_version=4 dvc_id=1116708 transport=UDP


_raw: Fri Jan  9 01:04:13 PM EST 2026 app=firefox-esr dest_ip=* dest_port=38370 pid=230428 user=pentester fd=374u ip_version=4 dvc_id=1116706 transport=UDP


_raw: Fri Jan  9 01:04:13 PM EST 2026 app=firefox-esr dest_ip=* dest_port=49069 pid=230428 user=pentester fd=372u ip_version=4 dvc_id=1116683 transport=UDP


_raw: Fri Jan  9 01:04:13 PM EST 2026 app=firefox-esr dest_ip=* dest_port=52591 pid=230428 user=pentester fd=358u ip_version=4 dvc_id=1116685 transport=UDP


_raw: Fri Jan  9 01:04:13 PM EST 2026 app=firefox-esr dest_ip=* dest_port=39791 pid=230428 user=pentester fd=349u ip_version=4 dvc_id=1116658 transport=UDP


_raw: Fri Jan  9 01:04:13 PM EST 2026 app=firefox-esr dest_ip=* dest_port=57201 pid=230428 user=pentester fd=342u ip_version=4 dvc_id=1113934 transport=UDP


_raw: Fri Jan  9 01:04:13 PM EST 2026 app=firefox-esr dest_ip=* dest_port=44206 pid=230428 user=pentester fd=338u ip_version=4 dvc_id=1113915 transport=UDP


_raw: Fri Jan  9 01:04:13 PM EST 2026 app=firefox-esr dest_ip=* dest_port=56212 pid=230428 user=pentester fd=331u ip_version=4 dvc_id=1115450 transport=UDP


_raw: Fri Jan  9 01:04:13 PM EST 2026 app=firefox-esr dest_ip=* dest_port=39024 pid=230428 user=pentester fd=319u ip_version=4 dvc_id=1116626 transport=UDP


_raw: Fri Jan  9 01:04:13 PM EST 2026 app=firefox-esr dest_ip=* dest_port=56725 pid=230428 user=pentester fd=315u ip_version=4 dvc_id=1116646 transport=UDP


_raw: Fri Jan  9 01:04:13 PM EST 2026 app=firefox-esr dest_ip=* dest_port=55532 pid=230428 user=pentester fd=310u ip_version=4 dvc_id=1116649 transport=UDP


_raw: Fri Jan  9 01:04:13 PM EST 2026 app=firefox-esr dest_ip=* dest_port=55375 pid=230428 user=pentester fd=294u ip_version=4 dvc_id=1113917 transport=UDP


_raw: Fri Jan  9 01:04:13 PM EST 2026 app=firefox-esr dest_ip=* dest_port=59529 pid=230428 user=pentester fd=262u ip_version=4 dvc_id=1116681 transport=UDP


_raw: Fri Jan  9 01:04:13 PM EST 2026 app=firefox-esr dest_ip=* dest_port=44380 pid=230428 user=pentester fd=258u ip_version=4 dvc_id=1115468 transport=UDP


_raw: Fri Jan  9 01:04:13 PM EST 2026 app=firefox-esr dest_ip=* dest_port=47769 pid=230428 user=pentester fd=223u ip_version=4 dvc_id=1115594 transport=UDP


_raw: Fri Jan  9 01:04:13 PM EST 2026 app=firefox-esr dest_ip=* dest_port=44945 pid=230428 user=pentester fd=213u ip_version=4 dvc_id=1111910 transport=UDP


_raw: Fri Jan  9 01:04:13 PM EST 2026 app=firefox-esr dest_ip=* dest_port=39655 pid=230428 user=pentester fd=205u ip_version=4 dvc_id=1113842 transport=UDP


_raw: Fri Jan  9 01:04:13 PM EST 2026 app=firefox-esr dest_ip=* dest_port=58060 pid=230428 user=pentester fd=199u ip_version=4 dvc_id=1113840 transport=UDP


_raw: Fri Jan  9 01:04:13 PM EST 2026 app=firefox-esr dest_ip=* dest_port=48094 pid=230428 user=pentester fd=192u ip_version=4 dvc_id=1111892 transport=UDP


_raw: Fri Jan  9 01:04:13 PM EST 2026 app=firefox-esr dest_ip=* dest_port=58958 pid=230428 user=pentester fd=152u ip_version=4 dvc_id=1116690 transport=UDP


_raw: Fri Jan  9 01:04:13 PM EST 2026 app=firefox-esr dest_ip=* dest_port=37810 pid=230428 user=pentester fd=146u ip_version=4 dvc_id=1113834 transport=UDP


_raw: Fri Jan  9 01:04:13 PM EST 2026 app=firefox-esr dest_ip=* dest_port=50129 pid=230428 user=pentester fd=136u ip_version=4 dvc_id=1113828 transport=UDP


_raw: Fri Jan  9 01:04:13 PM EST 2026 app=firefox-esr dest_ip=* dest_port=58316 pid=230428 user=pentester fd=78u ip_version=4 dvc_id=1112962 transport=UDP


_raw: Fri Jan  9 01:04:13 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1898 user=root fd=13u ip_version=4 dvc_id=11011 transport=TCP


_raw: Fri Jan  9 01:04:13 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=880 user=xrdp fd=11u ip_version=6 dvc_id=10726 transport=TCP


_raw: Fri Jan  9 01:04:13 PM EST 2026 app=dhcpcd dest_ip=10.0.254.203 dest_port=68 pid=647 user=dhcpcd fd=3u ip_version=4 dvc_id=7951 transport=UDP


_raw: Fri Jan  9 01:04:12 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=246424 user=root fd=7u ip_version=6 dvc_id=355109 transport=TCP


_raw: Fri Jan  9 01:04:12 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=246424 user=root fd=6u ip_version=4 dvc_id=355107 transport=TCP


_raw: Fri Jan  9 01:04:12 PM EST 2026 app=firefox-esr dest_ip=* dest_port=54006 pid=230084 user=pentester fd=209u ip_version=4 dvc_id=788264 transport=UDP


_raw: Fri Jan  9 01:04:12 PM EST 2026 app=firefox-esr dest_ip=* dest_port=43076 pid=230084 user=pentester fd=138u ip_version=4 dvc_id=844233 transport=UDP


_raw: Fri Jan  9 01:04:12 PM EST 2026 app=firefox-esr dest_ip=* dest_port=47214 pid=230084 user=pentester fd=116u ip_version=4 dvc_id=309806 transport=UDP


_raw: Fri Jan  9 01:04:12 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1900 user=root fd=13u ip_version=4 dvc_id=15639 transport=TCP


_raw: Fri Jan  9 01:04:12 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=873 user=xrdp fd=11u ip_version=6 dvc_id=11472 transport=TCP


_raw: Fri Jan  9 01:04:12 PM EST 2026 app=dhcpcd dest_ip=10.0.254.202 dest_port=68 pid=649 user=dhcpcd fd=3u ip_version=4 dvc_id=7760 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp    42065
tcp    42045
tcp    42042
tcp    43801
tcp       22
tcp     8000
tcp     8889
tcp     3350
tcp       22
tcp     3389


_raw: Fri Jan  9 01:04:11 PM EST 2026 file_hash=SHA2-256(stdin)= baad69c1becc36c00e3011f46ac6ed2f89b91b3426e64ab9de539adfe3a1fea7


_raw: Fri Jan  9 01:04:11 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=364092 user=pentester fd=37u ip_version=6 dvc_id=701842 transport=TCP


_raw: Fri Jan  9 01:04:11 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=41651 pid=364092 user=pentester fd=18u ip_version=6 dvc_id=701717 transport=TCP


_raw: Fri Jan  9 01:04:11 PM EST 2026 app=python3 dest_ip=* dest_port=8000 pid=343826 user=pentester fd=3u ip_version=4 dvc_id=627914 transport=TCP


_raw: Fri Jan  9 01:04:11 PM EST 2026 app=nc dest_ip=* dest_port=5555 pid=341044 user=pentester fd=3u ip_version=4 dvc_id=617421 transport=TCP


_raw: Fri Jan  9 01:04:11 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=256378 user=root fd=7u ip_version=6 dvc_id=390629 transport=TCP


_raw: Fri Jan  9 01:04:11 PM EST 2026 app=sshd dest_ip=* dest_port=22 pid=256378 user=root fd=6u ip_version=4 dvc_id=390627 transport=TCP


_raw: Fri Jan  9 01:04:11 PM EST 2026 app=firefox-esr dest_ip=* dest_port=35603 pid=231423 user=pentester fd=247u ip_version=4 dvc_id=776956 transport=UDP


_raw: Fri Jan  9 01:04:11 PM EST 2026 app=firefox-esr dest_ip=* dest_port=39341 pid=231423 user=pentester fd=246u ip_version=4 dvc_id=776953 transport=UDP


_raw: Fri Jan  9 01:04:11 PM EST 2026 app=firefox-esr dest_ip=* dest_port=58809 pid=231423 user=pentester fd=244u ip_version=4 dvc_id=780017 transport=UDP


_raw: Fri Jan  9 01:04:11 PM EST 2026 app=firefox-esr dest_ip=* dest_port=60012 pid=231423 user=pentester fd=235u ip_version=4 dvc_id=776951 transport=UDP


_raw: Fri Jan  9 01:04:11 PM EST 2026 app=firefox-esr dest_ip=* dest_port=60639 pid=231423 user=pentester fd=233u ip_version=4 dvc_id=750412 transport=UDP


_raw: Fri Jan  9 01:04:11 PM EST 2026 app=firefox-esr dest_ip=* dest_port=45276 pid=231423 user=pentester fd=225u ip_version=4 dvc_id=777818 transport=UDP


_raw: Fri Jan  9 01:04:11 PM EST 2026 app=firefox-esr dest_ip=* dest_port=38146 pid=231423 user=pentester fd=223u ip_version=4 dvc_id=777805 transport=UDP


_raw: Fri Jan  9 01:04:11 PM EST 2026 app=firefox-esr dest_ip=* dest_port=56911 pid=231423 user=pentester fd=219u ip_version=4 dvc_id=777807 transport=UDP


_raw: Fri Jan  9 01:04:11 PM EST 2026 app=firefox-esr dest_ip=* dest_port=44318 pid=231423 user=pentester fd=214u ip_version=4 dvc_id=779670 transport=UDP


_raw: Fri Jan  9 01:04:11 PM EST 2026 app=firefox-esr dest_ip=* dest_port=45977 pid=231423 user=pentester fd=206u ip_version=4 dvc_id=776542 transport=UDP


_raw: Fri Jan  9 01:04:11 PM EST 2026 app=firefox-esr dest_ip=* dest_port=37089 pid=231423 user=pentester fd=203u ip_version=4 dvc_id=777797 transport=UDP


_raw: Fri Jan  9 01:04:11 PM EST 2026 app=firefox-esr dest_ip=* dest_port=46618 pid=231423 user=pentester fd=196u ip_version=4 dvc_id=776539 transport=UDP


_raw: Fri Jan  9 01:04:11 PM EST 2026 app=firefox-esr dest_ip=* dest_port=44536 pid=231423 user=pentester fd=189u ip_version=4 dvc_id=777816 transport=UDP


_raw: Fri Jan  9 01:04:11 PM EST 2026 app=firefox-esr dest_ip=* dest_port=49541 pid=231423 user=pentester fd=187u ip_version=4 dvc_id=776533 transport=UDP


_raw: Fri Jan  9 01:04:11 PM EST 2026 app=firefox-esr dest_ip=* dest_port=34794 pid=231423 user=pentester fd=168u ip_version=4 dvc_id=776523 transport=UDP


_raw: Fri Jan  9 01:04:11 PM EST 2026 app=firefox-esr dest_ip=* dest_port=43652 pid=231423 user=pentester fd=138u ip_version=4 dvc_id=778746 transport=UDP


_raw: Fri Jan  9 01:04:11 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1900 user=root fd=13u ip_version=4 dvc_id=11717 transport=TCP


_raw: Fri Jan  9 01:04:11 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=878 user=xrdp fd=11u ip_version=6 dvc_id=12314 transport=TCP


_raw: Fri Jan  9 01:04:11 PM EST 2026 app=dhcpcd dest_ip=10.0.254.204 dest_port=68 pid=648 user=dhcpcd fd=3u ip_version=4 dvc_id=7093 transport=UDP


_raw:
Proto   Port
udp    47214
udp       68
udp    54006
udp    43076
udp      546
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Fri Jan  9 01:04:02 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=880 user=xrdp fd=11u ip_version=6 dvc_id=10745 transport=TCP


_raw: Fri Jan  9 01:04:02 PM EST 2026 app=dhcpcd dest_ip=10.0.254.206 dest_port=68 pid=646 user=dhcpcd fd=3u ip_version=4 dvc_id=7654 transport=UDP


_raw:
Proto   Port
udp       68
udp      546
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp      546
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw: Fri Jan  9 01:03:53 PM EST 2026 app=chromium dest_ip=224.0.0.251 dest_port=5353 pid=248055 user=pentester fd=259u ip_version=4 dvc_id=404724 transport=UDP


_raw: Fri Jan  9 01:03:53 PM EST 2026 app=firefox-esr dest_ip=* dest_port=58722 pid=241118 user=pentester fd=111u ip_version=4 dvc_id=569649 transport=UDP


_raw: Fri Jan  9 01:03:53 PM EST 2026 app=caido-cli dest_ip=127.0.0.1 dest_port=8080 pid=239427 user=pentester fd=36u ip_version=4 dvc_id=320664 transport=TCP


_raw: Fri Jan  9 01:03:53 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=876 user=xrdp fd=11u ip_version=6 dvc_id=9605 transport=TCP


_raw: Fri Jan  9 01:03:53 PM EST 2026 app=dhcpcd dest_ip=10.0.254.206 dest_port=68 pid=646 user=dhcpcd fd=3u ip_version=4 dvc_id=8852 transport=UDP


_raw:
Proto   Port
udp     5353
udp    58722
udp       68
udp      546
tcp     8080
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp      546
tcp     8889
tcp    34391
tcp    43819
tcp     8080
tcp     3350
tcp     3389


_raw: Fri Jan  9 01:03:39 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=8080 pid=239763 user=pentester fd=37u ip_version=6 dvc_id=332227 transport=TCP


_raw: Fri Jan  9 01:03:39 PM EST 2026 app=java dest_ip=127.0.0.1 dest_port=43819 pid=239763 user=pentester fd=18u ip_version=6 dvc_id=332159 transport=TCP


_raw: Fri Jan  9 01:03:39 PM EST 2026 app=containerd dest_ip=127.0.0.1 dest_port=34391 pid=236134 user=root fd=9u ip_version=4 dvc_id=317963 transport=TCP


_raw: Fri Jan  9 01:03:39 PM EST 2026 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=1898 user=root fd=13u ip_version=4 dvc_id=15719 transport=TCP


_raw: Fri Jan  9 01:03:39 PM EST 2026 app=xrdp dest_ip=* dest_port=3389 pid=877 user=xrdp fd=11u ip_version=6 dvc_id=12334 transport=TCP


_raw: Fri Jan  9 01:03:39 PM EST 2026 app=dhcpcd dest_ip=10.0.254.205 dest_port=68 pid=645 user=dhcpcd fd=3u ip_version=4 dvc_id=9264 transport=UDP


_raw: Fri Jan  9 01:03:38 PM EST 2026 app=python3 dest_ip=* dest_port=161 pid=305796 user=root fd=36u ip_version=6 dvc_id=512797 transport=UDP


_raw: Fri Jan  9 01:03:38 PM EST 2026 app=python3 dest_ip=* dest_port=53 pid=305796 user=root fd=35u ip_version=6 dvc_id=512796 transport=TCP


_raw: Fri Jan  9 01:03:38 PM EST 2026 app=python3 dest_ip=* dest_port=53 pid=305796 user=root fd=34u ip_version=6 dvc_id=521083 transport=UDP


_raw: Fri Jan  9 01:03:38 PM EST 2026 app=python3 dest_ip=* dest_port=143 pid=305796 user=root fd=33u ip_version=6 dvc_id=521082 transport=TCP


_raw: Fri Jan  9 01:03:38 PM EST 2026 app=python3 dest_ip=* dest_port=587 pid=305796 user=root fd=32u ip_version=6 dvc_id=521081 transport=TCP


_raw: Fri Jan  9 01:03:38 PM EST 2026 app=python3 dest_ip=* dest_port=25 pid=305796 user=root fd=31u ip_version=6 dvc_id=512795 transport=TCP


_raw: Fri Jan  9 01:03:38 PM EST 2026 app=python3 dest_ip=* dest_port=1883 pid=305796 user=root fd=30u ip_version=6 dvc_id=512794 transport=TCP


_raw: Fri Jan  9 01:03:38 PM EST 2026 app=python3 dest_ip=* dest_port=636 pid=305796 user=root fd=29u ip_version=6 dvc_id=521080 transport=TCP


_raw: Fri Jan  9 01:03:38 PM EST 2026 app=python3 dest_ip=* dest_port=389 pid=305796 user=root fd=28u ip_version=6 dvc_id=512793 transport=UDP


_raw: Fri Jan  9 01:03:38 PM EST 2026 app=python3 dest_ip=* dest_port=389 pid=305796 user=root fd=27u ip_version=6 dvc_id=512792 transport=TCP


_raw: Fri Jan  9 01:03:38 PM EST 2026 app=python3 dest_ip=* dest_port=5986 pid=305796 user=root fd=26u ip_version=6 dvc_id=521079 transport=TCP


_raw: Fri Jan  9 01:03:38 PM EST 2026 app=python3 dest_ip=* dest_port=110 pid=305796 user=root fd=25u ip_version=6 dvc_id=512791 transport=TCP


_raw: Fri Jan  9 01:03:38 PM EST 2026 app=python3 dest_ip=* dest_port=21 pid=305796 user=root fd=24u ip_version=6 dvc_id=521078 transport=TCP


_raw: Fri Jan  9 01:03:38 PM EST 2026 app=python3 dest_ip=* dest_port=1433 pid=305796 user=root fd=23u ip_version=6 dvc_id=521076 transport=TCP


_raw: Fri Jan  9 01:03:38 PM EST 2026 app=python3 dest_ip=* dest_port=88 pid=305796 user=root fd=22u ip_version=6 dvc_id=512790 transport=TCP


_raw: Fri Jan  9 01:03:38 PM EST 2026 app=python3 dest_ip=* dest_port=443 pid=305796 user=root fd=21u ip_version=6 dvc_id=521077 transport=TCP


_raw: Fri Jan  9 01:03:38 PM EST 2026 app=python3 dest_ip=* dest_port=1434 pid=305796 user=root fd=20u ip_version=6 dvc_id=521525 transport=UDP


_raw: Fri Jan  9 01:03:38 PM EST 2026 app=python3 dest_ip=* dest_port=88 pid=305796 user=root fd=19u ip_version=6 dvc_id=512789 transport=UDP


_raw: Fri Jan  9 01:03:38 PM EST 2026 app=python3 dest_ip=10.0.254.202 dest_port=443 pid=305796 user=root fd=18u ip_version=4 dvc_id=511592 transport=UDP


_raw: Fri Jan  9 01:03:38 PM EST 2026 app=python3 dest_ip=* dest_port=139 pid=305796 user=root fd=14u ip_version=6 dvc_id=521524 transport=TCP


_raw: Fri Jan  9 01:03:38 PM EST 2026 app=python3 dest_ip=* dest_port=445 pid=305796 user=root fd=13u ip_version=6 dvc_id=512786 transport=TCP


_raw: Fri Jan  9 01:03:38 PM EST 2026 app=python3 dest_ip=* dest_port=48690 pid=305796 user=root fd=12u ip_version=6 dvc_id=512785 transport=TCP


_raw: Fri Jan  9 01:03:38 PM EST 2026 app=python3 dest_ip=* dest_port=135 pid=305796 user=root fd=11u ip_version=6 dvc_id=521075 transport=TCP


_raw: Fri Jan  9 01:03:38 PM EST 2026 app=python3 dest_ip=* dest_port=5985 pid=305796 user=root fd=10u ip_version=6 dvc_id=512783 transport=TCP


_raw: Fri Jan  9 01:03:38 PM EST 2026 app=python3 dest_ip=* dest_port=80 pid=305796 user=root fd=9u ip_version=6 dvc_id=521074 transport=TCP