_raw: Sat Oct 18 17:54:38 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76469 user=root fd=7u ip_version=4 dvc_id=88979 transport=UDP


_raw: Sat Oct 18 17:54:38 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=1519 transport=UDP


_raw: Sat Oct 18 17:54:38 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=619 user=root fd=7u ip_version=4 dvc_id=4230 transport=UDP


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       80
tcp       22
tcp     8889
tcp       53
tcp       22

_sourcetype: openPorts

source: openPorts

sourcetype: openPorts


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     5432
tcp     8889
tcp       22
tcp     3350
tcp     3389
tcp     7474
tcp       22
tcp     7687
tcp     5432


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       22
tcp       80
tcp       53
tcp     8889
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3389
tcp     3350


_raw: Sat Oct 18 17:54:24 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=752403 user=root fd=13u ip_version=4 dvc_id=1107433 transport=TCP


_raw: Sat Oct 18 17:54:24 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77970 user=xrdp fd=11u ip_version=6 dvc_id=94557 transport=TCP


_raw: Sat Oct 18 17:54:24 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76656 user=root fd=7u ip_version=6 dvc_id=90699 transport=TCP


_raw: Sat Oct 18 17:54:24 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76656 user=root fd=6u ip_version=4 dvc_id=90697 transport=TCP


_raw: Sat Oct 18 17:54:24 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76555 user=root fd=7u ip_version=4 dvc_id=90619 transport=UDP


_raw: Sat Oct 18 17:54:24 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=698 user=root fd=7u ip_version=4 dvc_id=592 transport=UDP


_raw: Sat Oct 18 17:54:24 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=616 user=root fd=7u ip_version=4 dvc_id=3595 transport=UDP


_raw: Sat Oct 18 17:54:21 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=778093 user=pentester fd=37u ip_version=6 dvc_id=1092285 transport=TCP


_raw: Sat Oct 18 17:54:21 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=37503 pid=778093 user=pentester fd=16u ip_version=6 dvc_id=1091435 transport=TCP


_raw: Sat Oct 18 17:54:21 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=737278 user=root fd=13u ip_version=4 dvc_id=964662 transport=TCP


_raw: Sat Oct 18 17:54:21 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77918 user=xrdp fd=11u ip_version=6 dvc_id=96359 transport=TCP


_raw: Sat Oct 18 17:54:21 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76678 user=root fd=7u ip_version=6 dvc_id=90627 transport=TCP


_raw: Sat Oct 18 17:54:21 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76678 user=root fd=6u ip_version=4 dvc_id=90617 transport=TCP


_raw: Sat Oct 18 17:54:21 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76562 user=root fd=7u ip_version=4 dvc_id=91321 transport=UDP


_raw: Sat Oct 18 17:54:21 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=699 user=root fd=7u ip_version=4 dvc_id=711 transport=UDP


_raw: Sat Oct 18 17:54:21 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=619 user=root fd=7u ip_version=4 dvc_id=1626 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp    37503
tcp     8080
tcp       22
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp     3350
tcp     8080
tcp    43313
tcp       22
tcp     3389


_raw: Sat Oct 18 17:54:20 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=826606 user=pentester fd=37u ip_version=6 dvc_id=1792140 transport=TCP


_raw: Sat Oct 18 17:54:20 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=43313 pid=826606 user=pentester fd=16u ip_version=6 dvc_id=1792120 transport=TCP


_raw: Sat Oct 18 17:54:20 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=745554 user=root fd=13u ip_version=4 dvc_id=1184646 transport=TCP


_raw: Sat Oct 18 17:54:20 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78160 user=xrdp fd=11u ip_version=6 dvc_id=94017 transport=TCP


_raw: Sat Oct 18 17:54:20 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76906 user=root fd=7u ip_version=6 dvc_id=91328 transport=TCP


_raw: Sat Oct 18 17:54:20 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76906 user=root fd=6u ip_version=4 dvc_id=91326 transport=TCP


_raw: Sat Oct 18 17:54:20 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76805 user=root fd=7u ip_version=4 dvc_id=92243 transport=UDP


_raw: Sat Oct 18 17:54:20 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=4112 transport=UDP


_raw: Sat Oct 18 17:54:20 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=619 user=root fd=7u ip_version=4 dvc_id=1973 transport=UDP


_raw: Sat Oct 18 17:54:20 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=749574 user=pentester fd=37u ip_version=6 dvc_id=980488 transport=TCP


_raw: Sat Oct 18 17:54:20 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=40281 pid=749574 user=pentester fd=16u ip_version=6 dvc_id=981338 transport=TCP


_raw: Sat Oct 18 17:54:20 EDT 2025 app=x-www-browser dest_ip=* dest_port=55505 pid=736292 user=pentester fd=66u ip_version=4 dvc_id=1342525 transport=UDP


_raw: Sat Oct 18 17:54:20 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=732132 user=root fd=13u ip_version=4 dvc_id=882726 transport=TCP


_raw: Sat Oct 18 17:54:20 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78045 user=xrdp fd=11u ip_version=6 dvc_id=95486 transport=TCP


_raw: Sat Oct 18 17:54:20 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76775 user=root fd=7u ip_version=6 dvc_id=91616 transport=TCP


_raw: Sat Oct 18 17:54:20 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76775 user=root fd=6u ip_version=4 dvc_id=91614 transport=TCP


_raw: Sat Oct 18 17:54:20 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76670 user=root fd=7u ip_version=4 dvc_id=91533 transport=UDP


_raw: Sat Oct 18 17:54:20 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=2016 transport=UDP


_raw: Sat Oct 18 17:54:20 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=623 user=root fd=7u ip_version=4 dvc_id=2782 transport=UDP


_raw:
Proto   Port
udp    55505
udp    36584
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp    40281
tcp     8080
tcp       22


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       53
tcp     8889
tcp       80
tcp       22
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3350
tcp       22
tcp     8080
tcp     3389
tcp    44343


_raw: Sat Oct 18 17:54:06 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=742441 user=root fd=13u ip_version=4 dvc_id=1151762 transport=TCP


_raw: Sat Oct 18 17:54:06 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=701492 user=pentester fd=37u ip_version=6 dvc_id=863228 transport=TCP


_raw: Sat Oct 18 17:54:06 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=44343 pid=701492 user=pentester fd=16u ip_version=6 dvc_id=839389 transport=TCP


_raw: Sat Oct 18 17:54:06 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78087 user=xrdp fd=11u ip_version=6 dvc_id=93987 transport=TCP


_raw: Sat Oct 18 17:54:06 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76769 user=root fd=7u ip_version=6 dvc_id=89901 transport=TCP


_raw: Sat Oct 18 17:54:06 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76769 user=root fd=6u ip_version=4 dvc_id=89899 transport=TCP


_raw: Sat Oct 18 17:54:06 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76668 user=root fd=7u ip_version=4 dvc_id=90939 transport=UDP


_raw: Sat Oct 18 17:54:06 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=3758 transport=UDP


_raw: Sat Oct 18 17:54:06 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=397 transport=UDP


_raw: Sat Oct 18 17:54:03 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=39736 user=root fd=13u ip_version=4 dvc_id=374282 transport=TCP


_raw: Sat Oct 18 17:54:03 EDT 2025 app=firefox-esr dest_ip=* dest_port=39038 pid=18954 user=pentester fd=230u ip_version=4 dvc_id=1155179 transport=UDP


_raw: Sat Oct 18 17:54:03 EDT 2025 app=firefox-esr dest_ip=* dest_port=60248 pid=18954 user=pentester fd=186u ip_version=4 dvc_id=1149422 transport=UDP


_raw: Sat Oct 18 17:54:03 EDT 2025 app=kdeconnectd dest_ip=* dest_port=53879 pid=2183 user=pentester fd=23u ip_version=6 dvc_id=11661 transport=UDP


_raw: Sat Oct 18 17:54:03 EDT 2025 app=kdeconnectd dest_ip=* dest_port=33773 pid=2183 user=pentester fd=22u ip_version=4 dvc_id=11660 transport=UDP


_raw: Sat Oct 18 17:54:03 EDT 2025 app=kdeconnectd dest_ip=* dest_port=5353 pid=2183 user=pentester fd=21u ip_version=6 dvc_id=11658 transport=UDP


_raw: Sat Oct 18 17:54:03 EDT 2025 app=kdeconnectd dest_ip=* dest_port=5353 pid=2183 user=pentester fd=20u ip_version=4 dvc_id=11657 transport=UDP


_raw: Sat Oct 18 17:54:03 EDT 2025 app=kdeconnectd dest_ip=* dest_port=1716 pid=2183 user=pentester fd=19u ip_version=6 dvc_id=12794 transport=TCP


_raw: Sat Oct 18 17:54:03 EDT 2025 app=kdeconnectd dest_ip=* dest_port=1716 pid=2183 user=pentester fd=18u ip_version=6 dvc_id=12793 transport=UDP


_raw: Sat Oct 18 17:54:03 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=934 user=xrdp fd=11u ip_version=6 dvc_id=5378 transport=TCP


_raw: Sat Oct 18 17:54:03 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=905 user=root fd=7u ip_version=6 dvc_id=4586 transport=TCP


_raw: Sat Oct 18 17:54:03 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=905 user=root fd=6u ip_version=4 dvc_id=4576 transport=TCP


_raw: Sat Oct 18 17:54:03 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=667 user=root fd=7u ip_version=4 dvc_id=760 transport=UDP


_raw: Sat Oct 18 17:54:02 EDT 2025 file_hash=SHA2-256(stdin)= c2133aab7de39cdccff5410d52a9fce9eaf99a1d2b3a35f5cab7c7ca8a44942f


_raw: Sat Oct 18 17:54:02 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=40764 user=root fd=13u ip_version=4 dvc_id=326817 transport=TCP


_raw: Sat Oct 18 17:54:02 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=9836 user=pentester fd=37u ip_version=6 dvc_id=65446 transport=TCP


_raw: Sat Oct 18 17:54:02 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=38057 pid=9836 user=pentester fd=16u ip_version=6 dvc_id=63384 transport=TCP


_raw: Sat Oct 18 17:54:02 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=940 user=xrdp fd=11u ip_version=6 dvc_id=824 transport=TCP


_raw: Sat Oct 18 17:54:02 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=910 user=root fd=7u ip_version=6 dvc_id=4605 transport=TCP


_raw: Sat Oct 18 17:54:02 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=910 user=root fd=6u ip_version=4 dvc_id=4603 transport=TCP


_raw: Sat Oct 18 17:54:02 EDT 2025 app=containerd dest_ip=127.0.0.1 dest_port=39763 pid=892 user=root fd=9u ip_version=4 dvc_id=4661 transport=TCP


_raw: Sat Oct 18 17:54:02 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=664 user=root fd=7u ip_version=4 dvc_id=3825 transport=UDP


_raw:
Proto   Port
udp       68
tcp     8889
tcp       22
tcp    39763
tcp    38057
tcp       22
tcp     3350
tcp     3389
tcp     8080


_raw: Sat Oct 18 17:54:00 EDT 2025 app=postgres dest_ip=127.0.0.1 dest_port=5432 pid=742533 user=postgres fd=7u ip_version=4 dvc_id=1011239 transport=TCP


_raw: Sat Oct 18 17:54:00 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=739806 user=root fd=13u ip_version=4 dvc_id=997743 transport=TCP


_raw: Sat Oct 18 17:54:00 EDT 2025 app=x-www-browser dest_ip=* dest_port=59674 pid=710986 user=pentester fd=67u ip_version=4 dvc_id=1482427 transport=UDP


_raw: Sat Oct 18 17:54:00 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78178 user=xrdp fd=11u ip_version=6 dvc_id=94976 transport=TCP


_raw: Sat Oct 18 17:54:00 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76918 user=root fd=7u ip_version=6 dvc_id=89067 transport=TCP


_raw: Sat Oct 18 17:54:00 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76918 user=root fd=6u ip_version=4 dvc_id=89065 transport=TCP


_raw: Sat Oct 18 17:54:00 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76817 user=root fd=7u ip_version=4 dvc_id=89871 transport=UDP


_raw: Sat Oct 18 17:54:00 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=698 user=root fd=7u ip_version=4 dvc_id=664 transport=UDP


_raw: Sat Oct 18 17:54:00 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=615 user=root fd=7u ip_version=4 dvc_id=2016 transport=UDP


_raw:
Proto   Port
udp    59674
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp     5432
tcp     3350
tcp     3389
tcp       22
tcp     5432


_raw:
Proto   Port
udp    35146
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw: Sat Oct 18 17:53:53 EDT 2025 app=netcat dest_ip=* dest_port=8003 pid=777123 user=pentester fd=3u ip_version=4 dvc_id=1407459 transport=TCP


_raw: Sat Oct 18 17:53:53 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=732102 user=root fd=13u ip_version=4 dvc_id=1052765 transport=TCP


_raw: Sat Oct 18 17:53:53 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=7474 pid=695565 user=root fd=282u ip_version=6 dvc_id=836895 transport=TCP


_raw: Sat Oct 18 17:53:53 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=7687 pid=695565 user=root fd=281u ip_version=6 dvc_id=836889 transport=TCP


_raw: Sat Oct 18 17:53:53 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78051 user=xrdp fd=11u ip_version=6 dvc_id=96593 transport=TCP


_raw: Sat Oct 18 17:53:53 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76672 user=root fd=7u ip_version=6 dvc_id=90751 transport=TCP


_raw: Sat Oct 18 17:53:53 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76672 user=root fd=6u ip_version=4 dvc_id=90749 transport=TCP


_raw: Sat Oct 18 17:53:53 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76571 user=root fd=7u ip_version=4 dvc_id=90698 transport=UDP


_raw: Sat Oct 18 17:53:53 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=3656 transport=UDP


_raw: Sat Oct 18 17:53:53 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=1563 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8003
tcp     8889
tcp     7687
tcp     7474
tcp       22
tcp     3350
tcp     3389


_raw: Sat Oct 18 17:53:52 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=740418 user=root fd=13u ip_version=4 dvc_id=1077519 transport=TCP


_raw: Sat Oct 18 17:53:52 EDT 2025 app=firefox-esr dest_ip=* dest_port=35146 pid=698126 user=pentester fd=66u ip_version=4 dvc_id=1447326 transport=UDP


_raw: Sat Oct 18 17:53:52 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77946 user=xrdp fd=11u ip_version=6 dvc_id=93897 transport=TCP


_raw: Sat Oct 18 17:53:52 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76694 user=root fd=7u ip_version=6 dvc_id=89034 transport=TCP


_raw: Sat Oct 18 17:53:52 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76694 user=root fd=6u ip_version=4 dvc_id=89032 transport=TCP


_raw: Sat Oct 18 17:53:52 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76571 user=root fd=7u ip_version=4 dvc_id=91451 transport=UDP


_raw: Sat Oct 18 17:53:52 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=703 user=root fd=7u ip_version=4 dvc_id=4350 transport=UDP


_raw: Sat Oct 18 17:53:52 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=621 user=root fd=7u ip_version=4 dvc_id=1804 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp      443
udp       53
udp       88
udp      137
udp      161
udp      389
udp     5353
udp     5355
udp     1434
tcp       22
tcp     8889
tcp     7687
tcp     8080
tcp     7474
tcp      139
tcp      143
tcp      135
tcp       25
tcp       22
tcp       21
tcp       53
tcp       88
tcp       80
tcp      110
tcp      389
tcp      443
tcp      445
tcp      587
tcp      636
tcp     3350
tcp     1433
tcp    46604
tcp     1883
tcp     5986
tcp     5985
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp    42482
tcp     7474
tcp     7687
tcp       22
tcp     8080
tcp     8889
tcp     3350
tcp       22
tcp     3389


_raw: Sat Oct 18 17:53:45 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=773850 user=root fd=13u ip_version=4 dvc_id=1115778 transport=TCP


_raw: Sat Oct 18 17:53:45 EDT 2025 app=docker-proxy dest_ip=127.0.0.1 dest_port=8080 pid=700460 user=root fd=7u ip_version=4 dvc_id=848461 transport=TCP


_raw: Sat Oct 18 17:53:45 EDT 2025 app=docker-proxy dest_ip=127.0.0.1 dest_port=7687 pid=699854 user=root fd=7u ip_version=4 dvc_id=843589 transport=TCP


_raw: Sat Oct 18 17:53:45 EDT 2025 app=docker-proxy dest_ip=127.0.0.1 dest_port=7474 pid=699844 user=root fd=7u ip_version=4 dvc_id=845242 transport=TCP


_raw: Sat Oct 18 17:53:45 EDT 2025 app=x-www-browser dest_ip=* dest_port=42482 pid=694495 user=pentester fd=85u ip_version=4 dvc_id=1609034 transport=UDP


_raw: Sat Oct 18 17:53:45 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78023 user=xrdp fd=11u ip_version=6 dvc_id=92144 transport=TCP


_raw: Sat Oct 18 17:53:45 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76720 user=root fd=7u ip_version=6 dvc_id=90926 transport=TCP


_raw: Sat Oct 18 17:53:45 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76720 user=root fd=6u ip_version=4 dvc_id=90924 transport=TCP


_raw: Sat Oct 18 17:53:45 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76603 user=root fd=7u ip_version=4 dvc_id=92188 transport=UDP


_raw: Sat Oct 18 17:53:45 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=697 user=root fd=7u ip_version=4 dvc_id=3583 transport=UDP


_raw: Sat Oct 18 17:53:45 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=614 user=root fd=7u ip_version=4 dvc_id=2675 transport=UDP


_raw: Sat Oct 18 17:53:43 EDT 2025 app=postgres dest_ip=127.0.0.1 dest_port=5432 pid=800603 user=postgres fd=7u ip_version=4 dvc_id=1069934 transport=TCP


_raw: Sat Oct 18 17:53:43 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=757169 user=root fd=13u ip_version=4 dvc_id=944015 transport=TCP


_raw: Sat Oct 18 17:53:43 EDT 2025 app=chrome dest_ip=224.0.0.251 dest_port=5353 pid=715526 user=pentester fd=240u ip_version=4 dvc_id=1198923 transport=UDP


_raw: Sat Oct 18 17:53:43 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=715238 user=pentester fd=37u ip_version=6 dvc_id=845960 transport=TCP


_raw: Sat Oct 18 17:53:43 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=38329 pid=715238 user=pentester fd=16u ip_version=6 dvc_id=845191 transport=TCP


_raw: Sat Oct 18 17:53:43 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77957 user=xrdp fd=11u ip_version=6 dvc_id=94678 transport=TCP


_raw: Sat Oct 18 17:53:43 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76699 user=root fd=7u ip_version=6 dvc_id=93212 transport=TCP


_raw: Sat Oct 18 17:53:43 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76699 user=root fd=6u ip_version=4 dvc_id=93210 transport=TCP


_raw: Sat Oct 18 17:53:43 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76597 user=root fd=7u ip_version=4 dvc_id=90691 transport=UDP


_raw: Sat Oct 18 17:53:43 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=3591 transport=UDP


_raw: Sat Oct 18 17:53:43 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=1780 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp     5353
tcp     8889
tcp       22
tcp     5432
tcp       22
tcp    38329
tcp     3350
tcp     8080
tcp     3389
tcp     5432


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp    59780
udp    35341
tcp     8889
tcp       22
tcp     3350
tcp       22
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3389
tcp     3350


_raw: Sat Oct 18 17:53:36 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=780201 user=root fd=13u ip_version=4 dvc_id=994808 transport=TCP


_raw: Sat Oct 18 17:53:36 EDT 2025 app=x-www-browser dest_ip=* dest_port=59780 pid=700014 user=pentester fd=108u ip_version=4 dvc_id=1161660 transport=UDP


_raw: Sat Oct 18 17:53:36 EDT 2025 app=x-www-browser dest_ip=* dest_port=35341 pid=700014 user=pentester fd=66u ip_version=4 dvc_id=1162322 transport=UDP


_raw: Sat Oct 18 17:53:36 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77974 user=xrdp fd=11u ip_version=6 dvc_id=93705 transport=TCP


_raw: Sat Oct 18 17:53:36 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76674 user=root fd=7u ip_version=6 dvc_id=92193 transport=TCP


_raw: Sat Oct 18 17:53:36 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76674 user=root fd=6u ip_version=4 dvc_id=92191 transport=TCP


_raw: Sat Oct 18 17:53:36 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76573 user=root fd=7u ip_version=4 dvc_id=89070 transport=UDP


_raw: Sat Oct 18 17:53:36 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=703 user=root fd=7u ip_version=4 dvc_id=4280 transport=UDP


_raw: Sat Oct 18 17:53:36 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=620 user=root fd=7u ip_version=4 dvc_id=3762 transport=UDP


_raw: Sat Oct 18 17:53:36 EDT 2025 file_hash=SHA2-256(stdin)= dec083952d4ff3b56b5cc2ad7540ea6cc3be36c8f4a9bb3146aade72ac69acde


_raw: Sat Oct 18 17:53:36 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=741489 user=root fd=13u ip_version=4 dvc_id=976746 transport=TCP


_raw: Sat Oct 18 17:53:36 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77961 user=xrdp fd=11u ip_version=6 dvc_id=93129 transport=TCP


_raw: Sat Oct 18 17:53:36 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76700 user=root fd=7u ip_version=6 dvc_id=91091 transport=TCP


_raw: Sat Oct 18 17:53:36 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76700 user=root fd=6u ip_version=4 dvc_id=91089 transport=TCP


_raw: Sat Oct 18 17:53:36 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76599 user=root fd=7u ip_version=4 dvc_id=91751 transport=UDP


_raw: Sat Oct 18 17:53:36 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=3650 transport=UDP


_raw: Sat Oct 18 17:53:36 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=551 transport=UDP


_raw: Sat Oct 18 17:53:32 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=741654 user=root fd=13u ip_version=4 dvc_id=945661 transport=TCP


_raw: Sat Oct 18 17:53:32 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77794 user=xrdp fd=11u ip_version=6 dvc_id=92156 transport=TCP


_raw: Sat Oct 18 17:53:32 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76505 user=root fd=7u ip_version=6 dvc_id=89950 transport=TCP


_raw: Sat Oct 18 17:53:32 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76505 user=root fd=6u ip_version=4 dvc_id=89948 transport=TCP


_raw: Sat Oct 18 17:53:32 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76404 user=root fd=7u ip_version=4 dvc_id=89912 transport=UDP


_raw: Sat Oct 18 17:53:32 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=698 user=root fd=7u ip_version=4 dvc_id=905 transport=UDP


_raw: Sat Oct 18 17:53:32 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=614 user=root fd=7u ip_version=4 dvc_id=4175 transport=UDP


_raw: Sat Oct 18 17:53:31 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=730643 user=root fd=13u ip_version=4 dvc_id=1037906 transport=TCP


_raw: Sat Oct 18 17:53:31 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77925 user=xrdp fd=11u ip_version=6 dvc_id=93793 transport=TCP


_raw: Sat Oct 18 17:53:31 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76580 user=root fd=7u ip_version=6 dvc_id=90586 transport=TCP


_raw: Sat Oct 18 17:53:31 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76580 user=root fd=6u ip_version=4 dvc_id=90584 transport=TCP


_raw: Sat Oct 18 17:53:31 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76479 user=root fd=7u ip_version=4 dvc_id=90009 transport=UDP


_raw: Sat Oct 18 17:53:31 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=697 user=root fd=7u ip_version=4 dvc_id=2849 transport=UDP


_raw: Sat Oct 18 17:53:31 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=613 user=root fd=7u ip_version=4 dvc_id=533 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3350
tcp     3389
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       80
tcp     1883
tcp     5432
tcp     9392
tcp       22
tcp     3389
tcp     3350
tcp     5432
tcp     1883
tcp       22


_raw: Sat Oct 18 17:53:29 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=725573 user=root fd=13u ip_version=4 dvc_id=884186 transport=TCP


_raw: Sat Oct 18 17:53:29 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77929 user=xrdp fd=11u ip_version=6 dvc_id=95177 transport=TCP


_raw: Sat Oct 18 17:53:29 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76661 user=root fd=7u ip_version=6 dvc_id=92362 transport=TCP


_raw: Sat Oct 18 17:53:29 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76661 user=root fd=6u ip_version=4 dvc_id=92360 transport=TCP


_raw: Sat Oct 18 17:53:29 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76530 user=root fd=7u ip_version=4 dvc_id=91417 transport=UDP


_raw: Sat Oct 18 17:53:29 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=703 user=root fd=7u ip_version=4 dvc_id=1629 transport=UDP


_raw: Sat Oct 18 17:53:29 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=621 user=root fd=7u ip_version=4 dvc_id=2879 transport=UDP


_raw: Sat Oct 18 17:53:29 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=740329 user=root fd=13u ip_version=4 dvc_id=975927 transport=TCP


_raw: Sat Oct 18 17:53:29 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78253 user=xrdp fd=11u ip_version=6 dvc_id=94909 transport=TCP


_raw: Sat Oct 18 17:53:29 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76995 user=root fd=7u ip_version=6 dvc_id=89930 transport=TCP


_raw: Sat Oct 18 17:53:29 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76995 user=root fd=6u ip_version=4 dvc_id=89928 transport=TCP


_raw: Sat Oct 18 17:53:29 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76890 user=root fd=7u ip_version=4 dvc_id=89862 transport=UDP


_raw: Sat Oct 18 17:53:29 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=697 user=root fd=7u ip_version=4 dvc_id=3570 transport=UDP


_raw: Sat Oct 18 17:53:29 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=613 user=root fd=7u ip_version=4 dvc_id=3067 transport=UDP


_raw: Sat Oct 18 17:53:29 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=731379 user=root fd=13u ip_version=4 dvc_id=856269 transport=TCP


_raw: Sat Oct 18 17:53:29 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77870 user=xrdp fd=11u ip_version=6 dvc_id=94192 transport=TCP


_raw: Sat Oct 18 17:53:29 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76616 user=root fd=7u ip_version=6 dvc_id=90439 transport=TCP


_raw: Sat Oct 18 17:53:29 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76616 user=root fd=6u ip_version=4 dvc_id=90437 transport=TCP


_raw: Sat Oct 18 17:53:29 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76516 user=root fd=7u ip_version=4 dvc_id=91289 transport=UDP


_raw: Sat Oct 18 17:53:29 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=894 transport=UDP


_raw: Sat Oct 18 17:53:29 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=1770 transport=UDP


_raw: Sat Oct 18 17:53:27 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=753678 user=root fd=13u ip_version=4 dvc_id=982545 transport=TCP


_raw: Sat Oct 18 17:53:27 EDT 2025 app=gsad dest_ip=127.0.0.1 dest_port=80 pid=735279 user=_gvm fd=4u ip_version=4 dvc_id=925447 transport=TCP


_raw: Sat Oct 18 17:53:27 EDT 2025 app=gsad dest_ip=127.0.0.1 dest_port=9392 pid=735276 user=_gvm fd=4u ip_version=4 dvc_id=925925 transport=TCP


_raw: Sat Oct 18 17:53:27 EDT 2025 app=postgres dest_ip=127.0.0.1 dest_port=5432 pid=715682 user=postgres fd=7u ip_version=4 dvc_id=838335 transport=TCP


_raw: Sat Oct 18 17:53:27 EDT 2025 app=mosquitto dest_ip=127.0.0.1 dest_port=1883 pid=715667 user=mosquitto fd=5u ip_version=4 dvc_id=836029 transport=TCP


_raw: Sat Oct 18 17:53:27 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78006 user=xrdp fd=11u ip_version=6 dvc_id=94671 transport=TCP


_raw: Sat Oct 18 17:53:27 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76767 user=root fd=7u ip_version=6 dvc_id=91660 transport=TCP


_raw: Sat Oct 18 17:53:27 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76767 user=root fd=6u ip_version=4 dvc_id=91658 transport=TCP


_raw: Sat Oct 18 17:53:27 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76666 user=root fd=7u ip_version=4 dvc_id=92296 transport=UDP


_raw: Sat Oct 18 17:53:27 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=702 user=root fd=7u ip_version=4 dvc_id=2635 transport=UDP


_raw: Sat Oct 18 17:53:27 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=619 user=root fd=7u ip_version=4 dvc_id=2620 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp      443
udp     5353
udp     5355
udp     1434
udp       53
udp       88
udp      137
udp      161
udp      389
tcp     8889
tcp       22
tcp    40057
tcp     5985
tcp     5986
tcp     1883
tcp     1433
tcp    41637
tcp     3350
tcp    45900
tcp      636
tcp      587
tcp      445
tcp      443
tcp      389
tcp      143
tcp      139
tcp      135
tcp       53
tcp       25
tcp       21
tcp       22
tcp      110
tcp       88
tcp       80
tcp     3389
tcp     8080


_raw: Sat Oct 18 17:53:23 EDT 2025 app=python3 dest_ip=* dest_port=161 pid=753827 user=root fd=36u ip_version=6 dvc_id=1138122 transport=UDP


_raw: Sat Oct 18 17:53:23 EDT 2025 app=python3 dest_ip=* dest_port=53 pid=753827 user=root fd=35u ip_version=6 dvc_id=1138121 transport=TCP


_raw: Sat Oct 18 17:53:23 EDT 2025 app=python3 dest_ip=* dest_port=53 pid=753827 user=root fd=34u ip_version=6 dvc_id=1139039 transport=UDP


_raw: Sat Oct 18 17:53:23 EDT 2025 app=python3 dest_ip=* dest_port=143 pid=753827 user=root fd=33u ip_version=6 dvc_id=1139781 transport=TCP


_raw: Sat Oct 18 17:53:23 EDT 2025 app=python3 dest_ip=* dest_port=636 pid=753827 user=root fd=32u ip_version=6 dvc_id=1139780 transport=TCP


_raw: Sat Oct 18 17:53:23 EDT 2025 app=python3 dest_ip=* dest_port=25 pid=753827 user=root fd=31u ip_version=6 dvc_id=1138119 transport=TCP


_raw: Sat Oct 18 17:53:23 EDT 2025 app=python3 dest_ip=* dest_port=587 pid=753827 user=root fd=30u ip_version=6 dvc_id=1138120 transport=TCP


_raw: Sat Oct 18 17:53:23 EDT 2025 app=python3 dest_ip=* dest_port=1883 pid=753827 user=root fd=29u ip_version=6 dvc_id=1138118 transport=TCP


_raw: Sat Oct 18 17:53:23 EDT 2025 app=python3 dest_ip=* dest_port=389 pid=753827 user=root fd=28u ip_version=6 dvc_id=1139038 transport=UDP


_raw: Sat Oct 18 17:53:23 EDT 2025 app=python3 dest_ip=* dest_port=389 pid=753827 user=root fd=27u ip_version=6 dvc_id=1139037 transport=TCP


_raw: Sat Oct 18 17:53:23 EDT 2025 app=python3 dest_ip=* dest_port=110 pid=753827 user=root fd=26u ip_version=6 dvc_id=1139779 transport=TCP


_raw: Sat Oct 18 17:53:23 EDT 2025 app=python3 dest_ip=* dest_port=21 pid=753827 user=root fd=25u ip_version=6 dvc_id=1139778 transport=TCP


_raw: Sat Oct 18 17:53:23 EDT 2025 app=python3 dest_ip=* dest_port=1434 pid=753827 user=root fd=24u ip_version=6 dvc_id=1139036 transport=UDP


_raw: Sat Oct 18 17:53:23 EDT 2025 app=python3 dest_ip=* dest_port=443 pid=753827 user=root fd=23u ip_version=6 dvc_id=1139777 transport=TCP


_raw: Sat Oct 18 17:53:23 EDT 2025 app=python3 dest_ip=* dest_port=88 pid=753827 user=root fd=22u ip_version=6 dvc_id=1138115 transport=TCP


_raw: Sat Oct 18 17:53:23 EDT 2025 app=python3 dest_ip=* dest_port=88 pid=753827 user=root fd=21u ip_version=6 dvc_id=1138114 transport=UDP


_raw: Sat Oct 18 17:53:23 EDT 2025 app=python3 dest_ip=* dest_port=1433 pid=753827 user=root fd=20u ip_version=6 dvc_id=1138116 transport=TCP


_raw: Sat Oct 18 17:53:23 EDT 2025 app=python3 dest_ip=* dest_port=5986 pid=753827 user=root fd=19u ip_version=6 dvc_id=1140988 transport=TCP


_raw: Sat Oct 18 17:53:23 EDT 2025 app=python3 dest_ip=10.0.254.204 dest_port=443 pid=753827 user=root fd=18u ip_version=4 dvc_id=1138117 transport=UDP


_raw: Sat Oct 18 17:53:23 EDT 2025 app=python3 dest_ip=* dest_port=139 pid=753827 user=root fd=14u ip_version=6 dvc_id=1138111 transport=TCP


_raw: Sat Oct 18 17:53:23 EDT 2025 app=python3 dest_ip=* dest_port=445 pid=753827 user=root fd=13u ip_version=6 dvc_id=1138110 transport=TCP


_raw: Sat Oct 18 17:53:23 EDT 2025 app=python3 dest_ip=* dest_port=45900 pid=753827 user=root fd=12u ip_version=6 dvc_id=1139035 transport=TCP


_raw: Sat Oct 18 17:53:23 EDT 2025 app=python3 dest_ip=* dest_port=135 pid=753827 user=root fd=11u ip_version=6 dvc_id=1139776 transport=TCP


_raw: Sat Oct 18 17:53:23 EDT 2025 app=python3 dest_ip=* dest_port=5985 pid=753827 user=root fd=10u ip_version=6 dvc_id=1139775 transport=TCP


_raw: Sat Oct 18 17:53:23 EDT 2025 app=python3 dest_ip=* dest_port=80 pid=753827 user=root fd=9u ip_version=6 dvc_id=1139033 transport=TCP


_raw: Sat Oct 18 17:53:23 EDT 2025 app=python3 dest_ip=* dest_port=5353 pid=753827 user=root fd=8u ip_version=6 dvc_id=1139773 transport=UDP


_raw: Sat Oct 18 17:53:23 EDT 2025 app=python3 dest_ip=* dest_port=137 pid=753827 user=root fd=7u ip_version=6 dvc_id=1140987 transport=UDP


_raw: Sat Oct 18 17:53:23 EDT 2025 app=python3 dest_ip=* dest_port=5355 pid=753827 user=root fd=6u ip_version=6 dvc_id=1139771 transport=UDP


_raw: Sat Oct 18 17:53:23 EDT 2025 app=chrome dest_ip=127.0.0.1 dest_port=40057 pid=746493 user=pentester fd=40u ip_version=4 dvc_id=1088917 transport=TCP


_raw: Sat Oct 18 17:53:23 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=729165 user=root fd=13u ip_version=4 dvc_id=980142 transport=TCP


_raw: Sat Oct 18 17:53:23 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=702484 user=pentester fd=37u ip_version=6 dvc_id=844998 transport=TCP


_raw: Sat Oct 18 17:53:23 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=41637 pid=702484 user=pentester fd=16u ip_version=6 dvc_id=835590 transport=TCP


_raw: Sat Oct 18 17:53:23 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78320 user=xrdp fd=11u ip_version=6 dvc_id=96596 transport=TCP


_raw: Sat Oct 18 17:53:23 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76956 user=root fd=7u ip_version=6 dvc_id=89734 transport=TCP


_raw: Sat Oct 18 17:53:23 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76956 user=root fd=6u ip_version=4 dvc_id=89732 transport=TCP


_raw: Sat Oct 18 17:53:23 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76840 user=root fd=7u ip_version=4 dvc_id=91666 transport=UDP


_raw: Sat Oct 18 17:53:23 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=697 user=root fd=7u ip_version=4 dvc_id=4032 transport=UDP


_raw: Sat Oct 18 17:53:23 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=613 user=root fd=7u ip_version=4 dvc_id=2773 transport=UDP


_raw: Sat Oct 18 17:53:19 EDT 2025 app=python3 dest_ip=* dest_port=161 pid=885174 user=root fd=36u ip_version=6 dvc_id=1930803 transport=UDP


_raw: Sat Oct 18 17:53:19 EDT 2025 app=python3 dest_ip=* dest_port=443 pid=885174 user=root fd=35u ip_version=6 dvc_id=1932853 transport=TCP


_raw: Sat Oct 18 17:53:19 EDT 2025 app=python3 dest_ip=* dest_port=53 pid=885174 user=root fd=34u ip_version=6 dvc_id=1930802 transport=TCP


_raw: Sat Oct 18 17:53:19 EDT 2025 app=python3 dest_ip=* dest_port=636 pid=885174 user=root fd=33u ip_version=6 dvc_id=1932852 transport=TCP


_raw: Sat Oct 18 17:53:19 EDT 2025 app=python3 dest_ip=10.0.254.206 dest_port=443 pid=885174 user=root fd=32u ip_version=4 dvc_id=1931601 transport=UDP


_raw: Sat Oct 18 17:53:19 EDT 2025 app=python3 dest_ip=* dest_port=53 pid=885174 user=root fd=31u ip_version=6 dvc_id=1929986 transport=UDP


_raw: Sat Oct 18 17:53:19 EDT 2025 app=python3 dest_ip=* dest_port=143 pid=885174 user=root fd=30u ip_version=6 dvc_id=1932850 transport=TCP


_raw: Sat Oct 18 17:53:19 EDT 2025 app=python3 dest_ip=* dest_port=587 pid=885174 user=root fd=29u ip_version=6 dvc_id=1932849 transport=TCP


_raw: Sat Oct 18 17:53:19 EDT 2025 app=python3 dest_ip=* dest_port=25 pid=885174 user=root fd=28u ip_version=6 dvc_id=1932848 transport=TCP


_raw: Sat Oct 18 17:53:19 EDT 2025 app=python3 dest_ip=* dest_port=1883 pid=885174 user=root fd=27u ip_version=6 dvc_id=1932847 transport=TCP


_raw: Sat Oct 18 17:53:19 EDT 2025 app=python3 dest_ip=* dest_port=389 pid=885174 user=root fd=26u ip_version=6 dvc_id=1929985 transport=UDP


_raw: Sat Oct 18 17:53:19 EDT 2025 app=python3 dest_ip=* dest_port=389 pid=885174 user=root fd=25u ip_version=6 dvc_id=1929984 transport=TCP


_raw: Sat Oct 18 17:53:19 EDT 2025 app=python3 dest_ip=* dest_port=110 pid=885174 user=root fd=24u ip_version=6 dvc_id=1929983 transport=TCP


_raw: Sat Oct 18 17:53:19 EDT 2025 app=python3 dest_ip=* dest_port=21 pid=885174 user=root fd=23u ip_version=6 dvc_id=1932846 transport=TCP


_raw: Sat Oct 18 17:53:19 EDT 2025 app=python3 dest_ip=* dest_port=1434 pid=885174 user=root fd=22u ip_version=6 dvc_id=1932845 transport=UDP


_raw: Sat Oct 18 17:53:19 EDT 2025 app=python3 dest_ip=* dest_port=1433 pid=885174 user=root fd=21u ip_version=6 dvc_id=1932844 transport=TCP


_raw: Sat Oct 18 17:53:19 EDT 2025 app=python3 dest_ip=* dest_port=88 pid=885174 user=root fd=20u ip_version=6 dvc_id=1929982 transport=TCP


_raw: Sat Oct 18 17:53:19 EDT 2025 app=python3 dest_ip=* dest_port=88 pid=885174 user=root fd=19u ip_version=6 dvc_id=1929981 transport=UDP


_raw: Sat Oct 18 17:53:19 EDT 2025 app=python3 dest_ip=* dest_port=5986 pid=885174 user=root fd=18u ip_version=6 dvc_id=1932851 transport=TCP


_raw: Sat Oct 18 17:53:19 EDT 2025 app=python3 dest_ip=* dest_port=139 pid=885174 user=root fd=14u ip_version=6 dvc_id=1931598 transport=TCP


_raw: Sat Oct 18 17:53:19 EDT 2025 app=python3 dest_ip=* dest_port=445 pid=885174 user=root fd=13u ip_version=6 dvc_id=1930801 transport=TCP


_raw: Sat Oct 18 17:53:19 EDT 2025 app=python3 dest_ip=* dest_port=46604 pid=885174 user=root fd=12u ip_version=6 dvc_id=1930800 transport=TCP


_raw: Sat Oct 18 17:53:19 EDT 2025 app=python3 dest_ip=* dest_port=135 pid=885174 user=root fd=11u ip_version=6 dvc_id=1932843 transport=TCP


_raw: Sat Oct 18 17:53:19 EDT 2025 app=python3 dest_ip=* dest_port=5985 pid=885174 user=root fd=10u ip_version=6 dvc_id=1930798 transport=TCP


_raw: Sat Oct 18 17:53:19 EDT 2025 app=python3 dest_ip=* dest_port=80 pid=885174 user=root fd=9u ip_version=6 dvc_id=1932842 transport=TCP


_raw: Sat Oct 18 17:53:19 EDT 2025 app=python3 dest_ip=* dest_port=5353 pid=885174 user=root fd=8u ip_version=6 dvc_id=1929979 transport=UDP


_raw: Sat Oct 18 17:53:19 EDT 2025 app=python3 dest_ip=* dest_port=137 pid=885174 user=root fd=7u ip_version=6 dvc_id=1930797 transport=UDP


_raw: Sat Oct 18 17:53:19 EDT 2025 app=python3 dest_ip=* dest_port=5355 pid=885174 user=root fd=6u ip_version=6 dvc_id=1932840 transport=UDP


_raw: Sat Oct 18 17:53:19 EDT 2025 app=docker-proxy dest_ip=127.0.0.1 dest_port=8080 pid=802723 user=root fd=7u ip_version=4 dvc_id=1539587 transport=TCP


_raw: Sat Oct 18 17:53:19 EDT 2025 app=docker-proxy dest_ip=127.0.0.1 dest_port=7687 pid=802214 user=root fd=7u ip_version=4 dvc_id=1536663 transport=TCP


_raw: Sat Oct 18 17:53:19 EDT 2025 app=docker-proxy dest_ip=127.0.0.1 dest_port=7474 pid=802208 user=root fd=7u ip_version=4 dvc_id=1536638 transport=TCP


_raw: Sat Oct 18 17:53:19 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=765049 user=root fd=13u ip_version=4 dvc_id=1276759 transport=TCP


_raw: Sat Oct 18 17:53:19 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78038 user=xrdp fd=11u ip_version=6 dvc_id=96478 transport=TCP


_raw: Sat Oct 18 17:53:19 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76780 user=root fd=7u ip_version=6 dvc_id=92354 transport=TCP


_raw: Sat Oct 18 17:53:19 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76780 user=root fd=6u ip_version=4 dvc_id=92352 transport=TCP


_raw: Sat Oct 18 17:53:19 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76679 user=root fd=7u ip_version=4 dvc_id=90433 transport=UDP


_raw: Sat Oct 18 17:53:19 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=4163 transport=UDP


_raw: Sat Oct 18 17:53:19 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=820 transport=UDP


_raw: Sat Oct 18 17:53:17 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=763498 user=pentester fd=37u ip_version=6 dvc_id=1397309 transport=TCP


_raw: Sat Oct 18 17:53:17 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=41375 pid=763498 user=pentester fd=16u ip_version=6 dvc_id=1396413 transport=TCP


_raw: Sat Oct 18 17:53:17 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=730606 user=root fd=13u ip_version=4 dvc_id=989964 transport=TCP


_raw: Sat Oct 18 17:53:17 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78363 user=xrdp fd=11u ip_version=6 dvc_id=94672 transport=TCP


_raw: Sat Oct 18 17:53:17 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=77062 user=root fd=7u ip_version=6 dvc_id=90053 transport=TCP


_raw: Sat Oct 18 17:53:17 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=77062 user=root fd=6u ip_version=4 dvc_id=90051 transport=TCP


_raw: Sat Oct 18 17:53:17 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76946 user=root fd=7u ip_version=4 dvc_id=92362 transport=UDP


_raw: Sat Oct 18 17:53:17 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=704 user=root fd=7u ip_version=4 dvc_id=2845 transport=UDP


_raw: Sat Oct 18 17:53:17 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=621 user=root fd=7u ip_version=4 dvc_id=1583 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp    41375
tcp     8080
tcp     3350
tcp     3389


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp     3350
tcp       22
tcp     3389


_raw: Sat Oct 18 17:53:13 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=730152 user=root fd=13u ip_version=4 dvc_id=918460 transport=TCP


_raw: Sat Oct 18 17:53:13 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77935 user=xrdp fd=11u ip_version=6 dvc_id=95384 transport=TCP


_raw: Sat Oct 18 17:53:13 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76651 user=root fd=7u ip_version=6 dvc_id=90832 transport=TCP


_raw: Sat Oct 18 17:53:13 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76651 user=root fd=6u ip_version=4 dvc_id=90830 transport=TCP


_raw: Sat Oct 18 17:53:13 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76529 user=root fd=7u ip_version=4 dvc_id=89061 transport=UDP


_raw: Sat Oct 18 17:53:13 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=699 user=root fd=7u ip_version=4 dvc_id=533 transport=UDP


_raw: Sat Oct 18 17:53:13 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=615 user=root fd=7u ip_version=4 dvc_id=2954 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp       22
tcp     3350


_raw: Sat Oct 18 17:53:09 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=733122 user=root fd=13u ip_version=4 dvc_id=891807 transport=TCP


_raw: Sat Oct 18 17:53:09 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77935 user=xrdp fd=11u ip_version=6 dvc_id=95733 transport=TCP


_raw: Sat Oct 18 17:53:09 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76635 user=root fd=7u ip_version=6 dvc_id=90801 transport=TCP


_raw: Sat Oct 18 17:53:09 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76635 user=root fd=6u ip_version=4 dvc_id=90799 transport=TCP


_raw: Sat Oct 18 17:53:09 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76534 user=root fd=7u ip_version=4 dvc_id=90719 transport=UDP


_raw: Sat Oct 18 17:53:09 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=704 user=root fd=7u ip_version=4 dvc_id=5139 transport=UDP


_raw: Sat Oct 18 17:53:09 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=621 user=root fd=7u ip_version=4 dvc_id=3054 transport=UDP


_raw:
Proto   Port
udp    38972
udp    51988
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp     5432
tcp     5432
tcp     3389
tcp       22
tcp     3350


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp     8889
tcp       80
tcp       53
tcp       22
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp     3389
tcp       22
tcp     3350


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw: Sat Oct 18 17:53:05 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=736207 user=root fd=13u ip_version=4 dvc_id=1039875 transport=TCP


_raw: Sat Oct 18 17:53:05 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78042 user=xrdp fd=11u ip_version=6 dvc_id=93000 transport=TCP


_raw: Sat Oct 18 17:53:05 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76725 user=root fd=7u ip_version=6 dvc_id=91353 transport=TCP


_raw: Sat Oct 18 17:53:05 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76725 user=root fd=6u ip_version=4 dvc_id=91351 transport=TCP


_raw: Sat Oct 18 17:53:05 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76608 user=root fd=7u ip_version=4 dvc_id=89771 transport=UDP


_raw: Sat Oct 18 17:53:05 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=4250 transport=UDP


_raw: Sat Oct 18 17:53:05 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=4228 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3350
tcp       22
tcp    38361
tcp     3389
tcp     8080


_raw:
Proto   Port
udp    58033
udp       68
udp       68
udp       68
tcp     8889
tcp     4444
tcp       22
tcp     3350
tcp     3389
tcp     8080
tcp    36345
tcp       22


_raw: Sat Oct 18 17:53:02 EDT 2025 app=nc dest_ip=* dest_port=4444 pid=830904 user=pentester fd=3u ip_version=4 dvc_id=2310942 transport=TCP


_raw: Sat Oct 18 17:53:02 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=778815 user=pentester fd=37u ip_version=6 dvc_id=1356824 transport=TCP


_raw: Sat Oct 18 17:53:02 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=36345 pid=778815 user=pentester fd=16u ip_version=6 dvc_id=1355969 transport=TCP


_raw: Sat Oct 18 17:53:02 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=747218 user=root fd=13u ip_version=4 dvc_id=1086511 transport=TCP


_raw: Sat Oct 18 17:53:02 EDT 2025 app=x-www-browser dest_ip=* dest_port=58033 pid=698706 user=pentester fd=9u ip_version=4 dvc_id=2321056 transport=UDP


_raw: Sat Oct 18 17:53:02 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77926 user=xrdp fd=11u ip_version=6 dvc_id=93098 transport=TCP


_raw: Sat Oct 18 17:53:02 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76636 user=root fd=7u ip_version=6 dvc_id=90878 transport=TCP


_raw: Sat Oct 18 17:53:02 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76636 user=root fd=6u ip_version=4 dvc_id=90876 transport=TCP


_raw: Sat Oct 18 17:53:02 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76533 user=root fd=7u ip_version=4 dvc_id=90833 transport=UDP


_raw: Sat Oct 18 17:53:02 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=628 transport=UDP


_raw: Sat Oct 18 17:53:02 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=603 transport=UDP


_raw: Sat Oct 18 17:53:02 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=739561 user=root fd=13u ip_version=4 dvc_id=939368 transport=TCP


_raw: Sat Oct 18 17:53:02 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77950 user=xrdp fd=11u ip_version=6 dvc_id=93072 transport=TCP


_raw: Sat Oct 18 17:53:02 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76691 user=root fd=7u ip_version=6 dvc_id=90669 transport=TCP


_raw: Sat Oct 18 17:53:02 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76691 user=root fd=6u ip_version=4 dvc_id=90667 transport=TCP


_raw: Sat Oct 18 17:53:02 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76590 user=root fd=7u ip_version=4 dvc_id=90586 transport=UDP


_raw: Sat Oct 18 17:53:02 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=698 user=root fd=7u ip_version=4 dvc_id=3765 transport=UDP


_raw: Sat Oct 18 17:53:02 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=615 user=root fd=7u ip_version=4 dvc_id=1720 transport=UDP


_raw: Sat Oct 18 17:53:00 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=727380 user=root fd=13u ip_version=4 dvc_id=883757 transport=TCP


_raw: Sat Oct 18 17:53:00 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78262 user=xrdp fd=11u ip_version=6 dvc_id=95790 transport=TCP


_raw: Sat Oct 18 17:53:00 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76956 user=root fd=7u ip_version=6 dvc_id=92331 transport=TCP


_raw: Sat Oct 18 17:53:00 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76956 user=root fd=6u ip_version=4 dvc_id=92329 transport=TCP


_raw: Sat Oct 18 17:53:00 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76855 user=root fd=7u ip_version=4 dvc_id=92248 transport=UDP


_raw: Sat Oct 18 17:53:00 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=698 user=root fd=7u ip_version=4 dvc_id=3597 transport=UDP


_raw: Sat Oct 18 17:53:00 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=615 user=root fd=7u ip_version=4 dvc_id=4296 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp     3389
tcp       22
tcp     3350


_raw: Sat Oct 18 17:53:00 EDT 2025 app=postgres dest_ip=127.0.0.1 dest_port=5432 pid=750948 user=postgres fd=7u ip_version=4 dvc_id=1115202 transport=TCP


_raw: Sat Oct 18 17:53:00 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=745112 user=root fd=13u ip_version=4 dvc_id=1081962 transport=TCP


_raw: Sat Oct 18 17:53:00 EDT 2025 app=firefox-esr dest_ip=* dest_port=38972 pid=706827 user=pentester fd=119u ip_version=4 dvc_id=1452986 transport=UDP


_raw: Sat Oct 18 17:53:00 EDT 2025 app=firefox-esr dest_ip=* dest_port=51988 pid=706827 user=pentester fd=96u ip_version=4 dvc_id=1453987 transport=UDP


_raw: Sat Oct 18 17:53:00 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77982 user=xrdp fd=11u ip_version=6 dvc_id=93138 transport=TCP


_raw: Sat Oct 18 17:53:00 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76643 user=root fd=7u ip_version=6 dvc_id=91432 transport=TCP


_raw: Sat Oct 18 17:53:00 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76643 user=root fd=6u ip_version=4 dvc_id=91430 transport=TCP


_raw: Sat Oct 18 17:53:00 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76508 user=root fd=7u ip_version=4 dvc_id=91367 transport=UDP


_raw: Sat Oct 18 17:53:00 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=702 user=root fd=7u ip_version=4 dvc_id=4341 transport=UDP


_raw: Sat Oct 18 17:53:00 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=620 user=root fd=7u ip_version=4 dvc_id=4317 transport=UDP


_raw: Sat Oct 18 17:52:58 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=780525 user=pentester fd=37u ip_version=6 dvc_id=1245643 transport=TCP


_raw: Sat Oct 18 17:52:58 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=38361 pid=780525 user=pentester fd=16u ip_version=6 dvc_id=1243231 transport=TCP


_raw: Sat Oct 18 17:52:58 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=749474 user=root fd=13u ip_version=4 dvc_id=1089100 transport=TCP


_raw: Sat Oct 18 17:52:58 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77820 user=xrdp fd=11u ip_version=6 dvc_id=94694 transport=TCP


_raw: Sat Oct 18 17:52:58 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76568 user=root fd=7u ip_version=6 dvc_id=89688 transport=TCP


_raw: Sat Oct 18 17:52:58 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76568 user=root fd=6u ip_version=4 dvc_id=89686 transport=TCP


_raw: Sat Oct 18 17:52:58 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76467 user=root fd=7u ip_version=4 dvc_id=89631 transport=UDP


_raw: Sat Oct 18 17:52:58 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=699 user=root fd=7u ip_version=4 dvc_id=546 transport=UDP


_raw: Sat Oct 18 17:52:58 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=4153 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Sat Oct 18 17:52:55 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=742049 user=root fd=13u ip_version=4 dvc_id=901990 transport=TCP


_raw: Sat Oct 18 17:52:55 EDT 2025 app=python3 dest_ip=* dest_port=636 pid=718339 user=root fd=36u ip_version=6 dvc_id=840612 transport=TCP


_raw: Sat Oct 18 17:52:55 EDT 2025 app=python3 dest_ip=* dest_port=161 pid=718339 user=root fd=35u ip_version=6 dvc_id=842627 transport=UDP


_raw: Sat Oct 18 17:52:55 EDT 2025 app=python3 dest_ip=* dest_port=53 pid=718339 user=root fd=34u ip_version=6 dvc_id=844798 transport=UDP


_raw: Sat Oct 18 17:52:55 EDT 2025 app=python3 dest_ip=* dest_port=53 pid=718339 user=root fd=33u ip_version=6 dvc_id=842626 transport=TCP


_raw: Sat Oct 18 17:52:55 EDT 2025 app=python3 dest_ip=* dest_port=143 pid=718339 user=root fd=32u ip_version=6 dvc_id=840611 transport=TCP


_raw: Sat Oct 18 17:52:55 EDT 2025 app=python3 dest_ip=* dest_port=587 pid=718339 user=root fd=31u ip_version=6 dvc_id=840610 transport=TCP


_raw: Sat Oct 18 17:52:55 EDT 2025 app=python3 dest_ip=* dest_port=25 pid=718339 user=root fd=30u ip_version=6 dvc_id=842625 transport=TCP


_raw: Sat Oct 18 17:52:55 EDT 2025 app=python3 dest_ip=* dest_port=1883 pid=718339 user=root fd=29u ip_version=6 dvc_id=842624 transport=TCP


_raw: Sat Oct 18 17:52:55 EDT 2025 app=python3 dest_ip=* dest_port=389 pid=718339 user=root fd=28u ip_version=6 dvc_id=842623 transport=UDP


_raw: Sat Oct 18 17:52:55 EDT 2025 app=python3 dest_ip=* dest_port=389 pid=718339 user=root fd=27u ip_version=6 dvc_id=840609 transport=TCP


_raw: Sat Oct 18 17:52:55 EDT 2025 app=python3 dest_ip=* dest_port=110 pid=718339 user=root fd=26u ip_version=6 dvc_id=844797 transport=TCP


_raw: Sat Oct 18 17:52:55 EDT 2025 app=python3 dest_ip=* dest_port=21 pid=718339 user=root fd=25u ip_version=6 dvc_id=840608 transport=TCP


_raw: Sat Oct 18 17:52:55 EDT 2025 app=python3 dest_ip=* dest_port=1434 pid=718339 user=root fd=24u ip_version=6 dvc_id=840607 transport=UDP


_raw: Sat Oct 18 17:52:55 EDT 2025 app=python3 dest_ip=* dest_port=443 pid=718339 user=root fd=23u ip_version=6 dvc_id=843078 transport=TCP


_raw: Sat Oct 18 17:52:55 EDT 2025 app=python3 dest_ip=* dest_port=88 pid=718339 user=root fd=22u ip_version=6 dvc_id=840606 transport=TCP


_raw: Sat Oct 18 17:52:55 EDT 2025 app=python3 dest_ip=* dest_port=5986 pid=718339 user=root fd=21u ip_version=6 dvc_id=844795 transport=TCP


_raw: Sat Oct 18 17:52:55 EDT 2025 app=python3 dest_ip=* dest_port=1433 pid=718339 user=root fd=20u ip_version=6 dvc_id=844796 transport=TCP


_raw: Sat Oct 18 17:52:55 EDT 2025 app=python3 dest_ip=10.0.254.205 dest_port=443 pid=718339 user=root fd=19u ip_version=4 dvc_id=842622 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp    35253
tcp    45661
tcp     3389
tcp     3350
tcp       22
tcp     8080


_raw: Sat Oct 18 17:52:55 EDT 2025 app=python3 dest_ip=* dest_port=88 pid=718339 user=root fd=18u ip_version=6 dvc_id=842621 transport=UDP


_raw: Sat Oct 18 17:52:55 EDT 2025 app=python3 dest_ip=* dest_port=139 pid=718339 user=root fd=14u ip_version=6 dvc_id=844794 transport=TCP


_raw: Sat Oct 18 17:52:55 EDT 2025 app=python3 dest_ip=* dest_port=445 pid=718339 user=root fd=13u ip_version=6 dvc_id=843077 transport=TCP


_raw: Sat Oct 18 17:52:55 EDT 2025 app=python3 dest_ip=* dest_port=45495 pid=718339 user=root fd=12u ip_version=6 dvc_id=842618 transport=TCP


_raw: Sat Oct 18 17:52:55 EDT 2025 app=python3 dest_ip=* dest_port=135 pid=718339 user=root fd=11u ip_version=6 dvc_id=843076 transport=TCP


_raw: Sat Oct 18 17:52:55 EDT 2025 app=python3 dest_ip=* dest_port=5985 pid=718339 user=root fd=10u ip_version=6 dvc_id=842616 transport=TCP


_raw: Sat Oct 18 17:52:55 EDT 2025 app=python3 dest_ip=* dest_port=80 pid=718339 user=root fd=9u ip_version=6 dvc_id=843075 transport=TCP


_raw: Sat Oct 18 17:52:55 EDT 2025 app=python3 dest_ip=* dest_port=5353 pid=718339 user=root fd=8u ip_version=6 dvc_id=842614 transport=UDP


_raw: Sat Oct 18 17:52:55 EDT 2025 app=python3 dest_ip=* dest_port=137 pid=718339 user=root fd=7u ip_version=6 dvc_id=844793 transport=UDP


_raw: Sat Oct 18 17:52:55 EDT 2025 app=python3 dest_ip=* dest_port=5355 pid=718339 user=root fd=6u ip_version=6 dvc_id=843073 transport=UDP


_raw: Sat Oct 18 17:52:55 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78193 user=xrdp fd=11u ip_version=6 dvc_id=95559 transport=TCP


_raw: Sat Oct 18 17:52:55 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76921 user=root fd=7u ip_version=6 dvc_id=89076 transport=TCP


_raw: Sat Oct 18 17:52:55 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76921 user=root fd=6u ip_version=4 dvc_id=89074 transport=TCP


_raw: Sat Oct 18 17:52:55 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76818 user=root fd=7u ip_version=4 dvc_id=91367 transport=UDP


_raw: Sat Oct 18 17:52:55 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=697 user=root fd=7u ip_version=4 dvc_id=3667 transport=UDP


_raw: Sat Oct 18 17:52:55 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=614 user=root fd=7u ip_version=4 dvc_id=4216 transport=UDP


_raw: Sat Oct 18 17:52:55 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=726144 user=root fd=13u ip_version=4 dvc_id=957148 transport=TCP


_raw: Sat Oct 18 17:52:55 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78242 user=xrdp fd=11u ip_version=6 dvc_id=95969 transport=TCP


_raw: Sat Oct 18 17:52:55 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76945 user=root fd=7u ip_version=6 dvc_id=90108 transport=TCP


_raw: Sat Oct 18 17:52:55 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76945 user=root fd=6u ip_version=4 dvc_id=90098 transport=TCP


_raw: Sat Oct 18 17:52:55 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76812 user=root fd=7u ip_version=4 dvc_id=91280 transport=UDP


_raw: Sat Oct 18 17:52:55 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=3707 transport=UDP


_raw: Sat Oct 18 17:52:55 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=3681 transport=UDP


_raw: Sat Oct 18 17:52:54 EDT 2025 app=chrome dest_ip=127.0.0.1 dest_port=35253 pid=791023 user=pentester fd=40u ip_version=4 dvc_id=1160125 transport=TCP


_raw: Sat Oct 18 17:52:54 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=738760 user=root fd=13u ip_version=4 dvc_id=954905 transport=TCP


_raw: Sat Oct 18 17:52:54 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=715926 user=pentester fd=37u ip_version=6 dvc_id=854060 transport=TCP


_raw: Sat Oct 18 17:52:54 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=45661 pid=715926 user=pentester fd=16u ip_version=6 dvc_id=854051 transport=TCP


_raw: Sat Oct 18 17:52:54 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77938 user=xrdp fd=11u ip_version=6 dvc_id=96351 transport=TCP


_raw: Sat Oct 18 17:52:54 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76683 user=root fd=7u ip_version=6 dvc_id=91458 transport=TCP


_raw: Sat Oct 18 17:52:54 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76683 user=root fd=6u ip_version=4 dvc_id=91456 transport=TCP


_raw: Sat Oct 18 17:52:54 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76582 user=root fd=7u ip_version=4 dvc_id=90805 transport=UDP


_raw: Sat Oct 18 17:52:54 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=702 user=root fd=7u ip_version=4 dvc_id=3573 transport=UDP


_raw: Sat Oct 18 17:52:54 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=619 user=root fd=7u ip_version=4 dvc_id=5146 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp      443
udp       53
udp       88
udp      137
udp      161
udp      389
udp     5353
udp     5355
udp     1434
tcp     8889
tcp       22
tcp     3389
tcp     1433
tcp     1883
tcp     5985
tcp     5986
tcp      139
tcp      143
tcp      135
tcp       25
tcp       21
tcp       22
tcp       53
tcp       88
tcp       80
tcp      110
tcp      389
tcp      443
tcp      445
tcp    45495
tcp     3350
tcp      587
tcp      636


_raw:
Proto   Port
udp       68
udp       68
udp       68
udp    42725
tcp       22
tcp     8889
tcp     3389
tcp     3350
tcp       22


_raw: Sat Oct 18 17:52:53 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=729521 user=root fd=13u ip_version=4 dvc_id=943521 transport=TCP


_raw: Sat Oct 18 17:52:53 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77975 user=xrdp fd=11u ip_version=6 dvc_id=93110 transport=TCP


_raw: Sat Oct 18 17:52:53 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76674 user=root fd=7u ip_version=6 dvc_id=90711 transport=TCP


_raw: Sat Oct 18 17:52:53 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76674 user=root fd=6u ip_version=4 dvc_id=90709 transport=TCP


_raw: Sat Oct 18 17:52:53 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76558 user=root fd=7u ip_version=4 dvc_id=91467 transport=UDP


_raw: Sat Oct 18 17:52:53 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=703 user=root fd=7u ip_version=4 dvc_id=3853 transport=UDP


_raw: Sat Oct 18 17:52:53 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=620 user=root fd=7u ip_version=4 dvc_id=2782 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Sat Oct 18 17:52:52 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=756259 user=root fd=13u ip_version=4 dvc_id=1122326 transport=TCP


_raw: Sat Oct 18 17:52:52 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=726263 user=pentester fd=37u ip_version=6 dvc_id=967490 transport=TCP


_raw: Sat Oct 18 17:52:52 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=38003 pid=726263 user=pentester fd=16u ip_version=6 dvc_id=965488 transport=TCP


_raw: Sat Oct 18 17:52:52 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77878 user=xrdp fd=11u ip_version=6 dvc_id=91957 transport=TCP


_raw: Sat Oct 18 17:52:52 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76589 user=root fd=7u ip_version=6 dvc_id=89945 transport=TCP


_raw: Sat Oct 18 17:52:52 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76589 user=root fd=6u ip_version=4 dvc_id=89943 transport=TCP


_raw: Sat Oct 18 17:52:52 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76488 user=root fd=7u ip_version=4 dvc_id=90481 transport=UDP


_raw: Sat Oct 18 17:52:52 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=4267 transport=UDP


_raw: Sat Oct 18 17:52:52 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=1011 transport=UDP


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       22
tcp       80
tcp       53
tcp     8889
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp    35359
tcp     3389
tcp     3350
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3350
tcp    38003
tcp     3389
tcp       22
tcp     8080


_raw: Sat Oct 18 17:52:49 EDT 2025 app=docker-proxy dest_ip=* dest_port=8000 pid=794050 user=root fd=7u ip_version=6 dvc_id=1115679 transport=TCP


_raw: Sat Oct 18 17:52:49 EDT 2025 app=docker-proxy dest_ip=* dest_port=8000 pid=794043 user=root fd=7u ip_version=4 dvc_id=1115678 transport=TCP


_raw: Sat Oct 18 17:52:49 EDT 2025 app=docker-proxy dest_ip=* dest_port=8001 pid=793940 user=root fd=7u ip_version=6 dvc_id=1115577 transport=TCP


_raw: Sat Oct 18 17:52:49 EDT 2025 app=docker-proxy dest_ip=* dest_port=8001 pid=793932 user=root fd=7u ip_version=4 dvc_id=1115576 transport=TCP


_raw: Sat Oct 18 17:52:49 EDT 2025 app=docker-proxy dest_ip=* dest_port=5432 pid=793564 user=root fd=7u ip_version=6 dvc_id=1114203 transport=TCP


_raw: Sat Oct 18 17:52:49 EDT 2025 app=docker-proxy dest_ip=* dest_port=5432 pid=793558 user=root fd=7u ip_version=4 dvc_id=1114202 transport=TCP


_raw: Sat Oct 18 17:52:49 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=789774 user=root fd=13u ip_version=4 dvc_id=1102451 transport=TCP


_raw: Sat Oct 18 17:52:49 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77913 user=xrdp fd=11u ip_version=6 dvc_id=93015 transport=TCP


_raw: Sat Oct 18 17:52:49 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76612 user=root fd=7u ip_version=6 dvc_id=92300 transport=TCP


_raw: Sat Oct 18 17:52:49 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76612 user=root fd=6u ip_version=4 dvc_id=92298 transport=TCP


_raw: Sat Oct 18 17:52:49 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76511 user=root fd=7u ip_version=4 dvc_id=88033 transport=UDP


_raw: Sat Oct 18 17:52:49 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=698 user=root fd=7u ip_version=4 dvc_id=4225 transport=UDP


_raw: Sat Oct 18 17:52:49 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=616 user=root fd=7u ip_version=4 dvc_id=2686 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8000
tcp     8001
tcp     5432
tcp     8889
tcp       22
tcp     8000
tcp     8001
tcp     3389
tcp     3350
tcp     5432
tcp       22


_raw: Sat Oct 18 17:52:48 EDT 2025 app=containerd dest_ip=127.0.0.1 dest_port=35359 pid=781214 user=root fd=10u ip_version=4 dvc_id=1193898 transport=TCP


_raw: Sat Oct 18 17:52:48 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=742690 user=root fd=13u ip_version=4 dvc_id=1019313 transport=TCP


_raw: Sat Oct 18 17:52:48 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78140 user=xrdp fd=11u ip_version=6 dvc_id=95507 transport=TCP


_raw: Sat Oct 18 17:52:48 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76850 user=root fd=7u ip_version=6 dvc_id=88954 transport=TCP


_raw: Sat Oct 18 17:52:48 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76850 user=root fd=6u ip_version=4 dvc_id=88952 transport=TCP


_raw: Sat Oct 18 17:52:48 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76749 user=root fd=7u ip_version=4 dvc_id=88879 transport=UDP


_raw: Sat Oct 18 17:52:48 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=696 user=root fd=7u ip_version=4 dvc_id=2040 transport=UDP


_raw: Sat Oct 18 17:52:48 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=614 user=root fd=7u ip_version=4 dvc_id=2024 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp    38307
tcp     3350
tcp       22
tcp     8080


_raw: Sat Oct 18 17:52:48 EDT 2025 app=python3 dest_ip=* dest_port=6666 pid=916620 user=pentester fd=6u ip_version=4 dvc_id=1928343 transport=TCP


_raw: Sat Oct 18 17:52:48 EDT 2025 app=python3 dest_ip=* dest_port=9389 pid=916620 user=pentester fd=5u ip_version=4 dvc_id=1928342 transport=TCP


_raw: Sat Oct 18 17:52:48 EDT 2025 app=python3 dest_ip=* dest_port=80 pid=916620 user=pentester fd=4u ip_version=4 dvc_id=1928341 transport=TCP


_raw: Sat Oct 18 17:52:48 EDT 2025 app=python3 dest_ip=* dest_port=445 pid=916620 user=pentester fd=3u ip_version=4 dvc_id=1921986 transport=TCP


_raw: Sat Oct 18 17:52:48 EDT 2025 app=python3 dest_ip=* dest_port=161 pid=916525 user=root fd=34u ip_version=6 dvc_id=1921917 transport=UDP


_raw: Sat Oct 18 17:52:48 EDT 2025 app=python3 dest_ip=* dest_port=53 pid=916525 user=root fd=33u ip_version=6 dvc_id=1928211 transport=TCP


_raw: Sat Oct 18 17:52:48 EDT 2025 app=python3 dest_ip=* dest_port=53 pid=916525 user=root fd=32u ip_version=6 dvc_id=1921916 transport=UDP


_raw: Sat Oct 18 17:52:48 EDT 2025 app=python3 dest_ip=* dest_port=443 pid=916525 user=root fd=31u ip_version=6 dvc_id=1921915 transport=TCP


_raw: Sat Oct 18 17:52:48 EDT 2025 app=python3 dest_ip=* dest_port=143 pid=916525 user=root fd=30u ip_version=6 dvc_id=1928210 transport=TCP


_raw: Sat Oct 18 17:52:48 EDT 2025 app=python3 dest_ip=* dest_port=587 pid=916525 user=root fd=29u ip_version=6 dvc_id=1927236 transport=TCP


_raw: Sat Oct 18 17:52:48 EDT 2025 app=python3 dest_ip=* dest_port=636 pid=916525 user=root fd=28u ip_version=6 dvc_id=1921914 transport=TCP


_raw: Sat Oct 18 17:52:48 EDT 2025 app=python3 dest_ip=* dest_port=5986 pid=916525 user=root fd=27u ip_version=6 dvc_id=1926305 transport=TCP


_raw: Sat Oct 18 17:52:48 EDT 2025 app=python3 dest_ip=* dest_port=25 pid=916525 user=root fd=26u ip_version=6 dvc_id=1927235 transport=TCP


_raw: Sat Oct 18 17:52:48 EDT 2025 app=python3 dest_ip=* dest_port=1883 pid=916525 user=root fd=25u ip_version=6 dvc_id=1921913 transport=TCP


_raw: Sat Oct 18 17:52:48 EDT 2025 app=python3 dest_ip=* dest_port=389 pid=916525 user=root fd=24u ip_version=6 dvc_id=1926304 transport=UDP


_raw: Sat Oct 18 17:52:48 EDT 2025 app=python3 dest_ip=* dest_port=389 pid=916525 user=root fd=23u ip_version=6 dvc_id=1926303 transport=TCP


_raw: Sat Oct 18 17:52:48 EDT 2025 app=python3 dest_ip=* dest_port=110 pid=916525 user=root fd=22u ip_version=6 dvc_id=1927234 transport=TCP


_raw: Sat Oct 18 17:52:48 EDT 2025 app=python3 dest_ip=* dest_port=21 pid=916525 user=root fd=21u ip_version=6 dvc_id=1921912 transport=TCP


_raw: Sat Oct 18 17:52:48 EDT 2025 app=python3 dest_ip=* dest_port=1434 pid=916525 user=root fd=20u ip_version=6 dvc_id=1921911 transport=UDP


_raw: Sat Oct 18 17:52:48 EDT 2025 app=python3 dest_ip=* dest_port=1433 pid=916525 user=root fd=19u ip_version=6 dvc_id=1921910 transport=TCP


_raw: Sat Oct 18 17:52:48 EDT 2025 app=python3 dest_ip=* dest_port=88 pid=916525 user=root fd=18u ip_version=6 dvc_id=1921909 transport=TCP


_raw: Sat Oct 18 17:52:48 EDT 2025 app=python3 dest_ip=* dest_port=88 pid=916525 user=root fd=17u ip_version=6 dvc_id=1921908 transport=UDP


_raw: Sat Oct 18 17:52:48 EDT 2025 app=python3 dest_ip=10.0.254.201 dest_port=443 pid=916525 user=root fd=16u ip_version=4 dvc_id=1928209 transport=UDP


_raw: Sat Oct 18 17:52:48 EDT 2025 app=python3 dest_ip=* dest_port=3128 pid=916525 user=root fd=13u ip_version=6 dvc_id=1926302 transport=TCP


_raw: Sat Oct 18 17:52:48 EDT 2025 app=python3 dest_ip=* dest_port=46832 pid=916525 user=root fd=12u ip_version=6 dvc_id=1921905 transport=TCP


_raw: Sat Oct 18 17:52:48 EDT 2025 app=python3 dest_ip=* dest_port=135 pid=916525 user=root fd=11u ip_version=6 dvc_id=1926301 transport=TCP


_raw: Sat Oct 18 17:52:48 EDT 2025 app=python3 dest_ip=* dest_port=5985 pid=916525 user=root fd=9u ip_version=6 dvc_id=1927233 transport=TCP


_raw: Sat Oct 18 17:52:48 EDT 2025 app=python3 dest_ip=* dest_port=5353 pid=916525 user=root fd=8u ip_version=6 dvc_id=1921902 transport=UDP


_raw: Sat Oct 18 17:52:48 EDT 2025 app=python3 dest_ip=* dest_port=137 pid=916525 user=root fd=7u ip_version=6 dvc_id=1926300 transport=UDP


_raw: Sat Oct 18 17:52:48 EDT 2025 app=python3 dest_ip=* dest_port=5355 pid=916525 user=root fd=6u ip_version=6 dvc_id=1927231 transport=UDP


_raw: Sat Oct 18 17:52:48 EDT 2025 app=postgres dest_ip=127.0.0.1 dest_port=5432 pid=788040 user=postgres fd=7u ip_version=4 dvc_id=1217224 transport=TCP


_raw: Sat Oct 18 17:52:48 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=772278 user=root fd=13u ip_version=4 dvc_id=1156143 transport=TCP


_raw: Sat Oct 18 17:52:48 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8081 pid=715265 user=pentester fd=37u ip_version=6 dvc_id=889430 transport=TCP


_raw: Sat Oct 18 17:52:48 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=45363 pid=715265 user=pentester fd=16u ip_version=6 dvc_id=886615 transport=TCP


_raw: Sat Oct 18 17:52:48 EDT 2025 app=x-www-browser dest_ip=* dest_port=41657 pid=701914 user=pentester fd=131u ip_version=4 dvc_id=1947906 transport=UDP


_raw: Sat Oct 18 17:52:48 EDT 2025 app=x-www-browser dest_ip=* dest_port=60346 pid=701914 user=pentester fd=114u ip_version=4 dvc_id=1947905 transport=UDP


_raw: Sat Oct 18 17:52:48 EDT 2025 app=docker-proxy dest_ip=127.0.0.1 dest_port=8080 pid=700806 user=root fd=7u ip_version=4 dvc_id=837927 transport=TCP


_raw: Sat Oct 18 17:52:48 EDT 2025 app=docker-proxy dest_ip=127.0.0.1 dest_port=7687 pid=700188 user=root fd=7u ip_version=4 dvc_id=836249 transport=TCP


_raw: Sat Oct 18 17:52:48 EDT 2025 app=docker-proxy dest_ip=127.0.0.1 dest_port=7474 pid=700182 user=root fd=7u ip_version=4 dvc_id=834393 transport=TCP


_raw: Sat Oct 18 17:52:48 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78276 user=xrdp fd=11u ip_version=6 dvc_id=95575 transport=TCP


_raw: Sat Oct 18 17:52:48 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76927 user=root fd=7u ip_version=6 dvc_id=90743 transport=TCP


_raw: Sat Oct 18 17:52:48 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76927 user=root fd=6u ip_version=4 dvc_id=90741 transport=TCP


_raw: Sat Oct 18 17:52:48 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76811 user=root fd=7u ip_version=4 dvc_id=92347 transport=UDP


_raw: Sat Oct 18 17:52:48 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=699 user=root fd=7u ip_version=4 dvc_id=3599 transport=UDP


_raw: Sat Oct 18 17:52:48 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=616 user=root fd=7u ip_version=4 dvc_id=587 transport=UDP


_raw: Sat Oct 18 17:52:46 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=775569 user=pentester fd=37u ip_version=6 dvc_id=1117732 transport=TCP


_raw: Sat Oct 18 17:52:46 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=38307 pid=775569 user=pentester fd=16u ip_version=6 dvc_id=1118573 transport=TCP


_raw: Sat Oct 18 17:52:46 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=742116 user=root fd=13u ip_version=4 dvc_id=964583 transport=TCP


_raw: Sat Oct 18 17:52:46 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77752 user=xrdp fd=11u ip_version=6 dvc_id=95601 transport=TCP


_raw: Sat Oct 18 17:52:46 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76469 user=root fd=7u ip_version=6 dvc_id=88828 transport=TCP


_raw: Sat Oct 18 17:52:46 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76469 user=root fd=6u ip_version=4 dvc_id=88818 transport=TCP


_raw: Sat Oct 18 17:52:46 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76367 user=root fd=7u ip_version=4 dvc_id=89616 transport=UDP


_raw: Sat Oct 18 17:52:46 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=696 user=root fd=7u ip_version=4 dvc_id=717 transport=UDP


_raw: Sat Oct 18 17:52:46 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=612 user=root fd=7u ip_version=4 dvc_id=4035 transport=UDP


_raw: Sat Oct 18 17:52:44 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=734023 user=root fd=13u ip_version=4 dvc_id=1067205 transport=TCP


_raw: Sat Oct 18 17:52:44 EDT 2025 app=firefox-esr dest_ip=* dest_port=35852 pid=693214 user=pentester fd=211u ip_version=4 dvc_id=1404378 transport=UDP


_raw: Sat Oct 18 17:52:44 EDT 2025 app=firefox-esr dest_ip=* dest_port=42725 pid=693214 user=pentester fd=110u ip_version=4 dvc_id=1406232 transport=UDP


_raw: Sat Oct 18 17:52:44 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78038 user=xrdp fd=11u ip_version=6 dvc_id=96393 transport=TCP


_raw: Sat Oct 18 17:52:44 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76705 user=root fd=7u ip_version=6 dvc_id=88878 transport=TCP


_raw: Sat Oct 18 17:52:44 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76705 user=root fd=6u ip_version=4 dvc_id=88876 transport=TCP


_raw: Sat Oct 18 17:52:44 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76573 user=root fd=7u ip_version=4 dvc_id=88833 transport=UDP


_raw: Sat Oct 18 17:52:44 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=692 user=root fd=7u ip_version=4 dvc_id=560 transport=UDP


_raw: Sat Oct 18 17:52:44 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=610 user=root fd=7u ip_version=4 dvc_id=2748 transport=UDP


_raw:
Proto   Port
udp    38561
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp    37169
tcp       22
tcp    43409
tcp     8080
tcp     3350
tcp     3389


_raw: Sat Oct 18 17:52:40 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=25891 user=root fd=13u ip_version=4 dvc_id=103321 transport=TCP


_raw: Sat Oct 18 17:52:40 EDT 2025 app=docker-proxy dest_ip=* dest_port=443 pid=21244 user=root fd=7u ip_version=4 dvc_id=83601 transport=TCP


_raw: Sat Oct 18 17:52:40 EDT 2025 app=docker-proxy dest_ip=* dest_port=80 pid=21234 user=root fd=7u ip_version=4 dvc_id=84283 transport=TCP


_raw: Sat Oct 18 17:52:40 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=945 user=xrdp fd=11u ip_version=6 dvc_id=885 transport=TCP


_raw: Sat Oct 18 17:52:40 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=903 user=root fd=7u ip_version=6 dvc_id=5516 transport=TCP


_raw: Sat Oct 18 17:52:40 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=903 user=root fd=6u ip_version=4 dvc_id=5514 transport=TCP


_raw: Sat Oct 18 17:52:40 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=667 user=root fd=7u ip_version=4 dvc_id=4855 transport=UDP


_raw:
Proto   Port
udp       68
tcp     8889
tcp       22
tcp       80
tcp      443
tcp     3350
tcp     3389
tcp       22


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3350
tcp       22
tcp     8080
tcp     3389
tcp    35879


_raw: Sat Oct 18 17:52:37 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=7474 pid=789469 user=root fd=282u ip_version=6 dvc_id=1041450 transport=TCP


_raw: Sat Oct 18 17:52:37 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=7687 pid=789469 user=root fd=281u ip_version=6 dvc_id=1039322 transport=TCP


_raw: Sat Oct 18 17:52:37 EDT 2025 app=postgres dest_ip=127.0.0.1 dest_port=5432 pid=789379 user=postgres fd=7u ip_version=4 dvc_id=1038752 transport=TCP


_raw: Sat Oct 18 17:52:37 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=736554 user=root fd=13u ip_version=4 dvc_id=900496 transport=TCP


_raw: Sat Oct 18 17:52:37 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=730110 user=pentester fd=37u ip_version=6 dvc_id=866272 transport=TCP


_raw: Sat Oct 18 17:52:37 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=39717 pid=730110 user=pentester fd=16u ip_version=6 dvc_id=867619 transport=TCP


_raw: Sat Oct 18 17:52:37 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78212 user=xrdp fd=11u ip_version=6 dvc_id=92976 transport=TCP


_raw: Sat Oct 18 17:52:37 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76954 user=root fd=7u ip_version=6 dvc_id=91320 transport=TCP


_raw: Sat Oct 18 17:52:37 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76954 user=root fd=6u ip_version=4 dvc_id=91310 transport=TCP


_raw: Sat Oct 18 17:52:37 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76852 user=root fd=7u ip_version=4 dvc_id=90020 transport=UDP


_raw: Sat Oct 18 17:52:37 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=699 user=root fd=7u ip_version=4 dvc_id=934 transport=UDP


_raw: Sat Oct 18 17:52:37 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=913 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     5432
tcp     5432
tcp       22
tcp    39717
tcp     3350
tcp     8080
tcp     7687
tcp     3389
tcp     7474


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       53
tcp       80
tcp       22
tcp     8889
tcp       22


_raw: Sat Oct 18 17:52:32 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=792753 user=pentester fd=37u ip_version=6 dvc_id=1242569 transport=TCP


_raw: Sat Oct 18 17:52:32 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=35879 pid=792753 user=pentester fd=16u ip_version=6 dvc_id=1244353 transport=TCP


_raw: Sat Oct 18 17:52:32 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=736880 user=root fd=13u ip_version=4 dvc_id=939962 transport=TCP


_raw: Sat Oct 18 17:52:32 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78068 user=xrdp fd=11u ip_version=6 dvc_id=94812 transport=TCP


_raw: Sat Oct 18 17:52:32 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76810 user=root fd=7u ip_version=6 dvc_id=91452 transport=TCP


_raw: Sat Oct 18 17:52:32 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76810 user=root fd=6u ip_version=4 dvc_id=91442 transport=TCP


_raw: Sat Oct 18 17:52:32 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76709 user=root fd=7u ip_version=4 dvc_id=90683 transport=UDP


_raw: Sat Oct 18 17:52:32 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=4436 transport=UDP


_raw: Sat Oct 18 17:52:32 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=572 transport=UDP


_raw: Sat Oct 18 17:52:31 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=779088 user=root fd=13u ip_version=4 dvc_id=1514381 transport=TCP


_raw: Sat Oct 18 17:52:31 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78348 user=xrdp fd=11u ip_version=6 dvc_id=96419 transport=TCP


_raw: Sat Oct 18 17:52:31 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=77049 user=root fd=7u ip_version=6 dvc_id=91957 transport=TCP


_raw: Sat Oct 18 17:52:31 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=77049 user=root fd=6u ip_version=4 dvc_id=91955 transport=TCP


_raw: Sat Oct 18 17:52:31 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76947 user=root fd=7u ip_version=4 dvc_id=91911 transport=UDP


_raw: Sat Oct 18 17:52:31 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=694 user=root fd=7u ip_version=4 dvc_id=810 transport=UDP


_raw: Sat Oct 18 17:52:31 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=611 user=root fd=7u ip_version=4 dvc_id=3584 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3389
tcp     3350


_raw: Sat Oct 18 17:52:28 EDT 2025 app=docker-proxy dest_ip=* dest_port=8000 pid=752278 user=root fd=7u ip_version=6 dvc_id=993474 transport=TCP


_raw: Sat Oct 18 17:52:28 EDT 2025 app=docker-proxy dest_ip=* dest_port=8000 pid=752271 user=root fd=7u ip_version=4 dvc_id=993473 transport=TCP


_raw: Sat Oct 18 17:52:28 EDT 2025 app=docker-proxy dest_ip=* dest_port=8001 pid=752170 user=root fd=7u ip_version=6 dvc_id=992800 transport=TCP


_raw: Sat Oct 18 17:52:28 EDT 2025 app=docker-proxy dest_ip=* dest_port=8001 pid=752161 user=root fd=7u ip_version=4 dvc_id=992799 transport=TCP


_raw: Sat Oct 18 17:52:28 EDT 2025 app=docker-proxy dest_ip=* dest_port=9691 pid=752076 user=root fd=7u ip_version=6 dvc_id=991650 transport=TCP


_raw: Sat Oct 18 17:52:28 EDT 2025 app=docker-proxy dest_ip=* dest_port=9691 pid=752069 user=root fd=7u ip_version=4 dvc_id=991649 transport=TCP


_raw: Sat Oct 18 17:52:28 EDT 2025 app=docker-proxy dest_ip=* dest_port=8080 pid=752062 user=root fd=7u ip_version=6 dvc_id=992592 transport=TCP


_raw: Sat Oct 18 17:52:28 EDT 2025 app=docker-proxy dest_ip=* dest_port=8080 pid=752054 user=root fd=7u ip_version=4 dvc_id=992591 transport=TCP


_raw: Sat Oct 18 17:52:28 EDT 2025 app=docker-proxy dest_ip=* dest_port=5432 pid=751781 user=root fd=7u ip_version=6 dvc_id=988867 transport=TCP


_raw: Sat Oct 18 17:52:28 EDT 2025 app=docker-proxy dest_ip=* dest_port=5432 pid=751772 user=root fd=7u ip_version=4 dvc_id=988866 transport=TCP


_raw: Sat Oct 18 17:52:28 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=744007 user=root fd=13u ip_version=4 dvc_id=950568 transport=TCP


_raw: Sat Oct 18 17:52:28 EDT 2025 app=chromium dest_ip=224.0.0.251 dest_port=5353 pid=727862 user=pentester fd=213u ip_version=4 dvc_id=992234 transport=UDP


_raw: Sat Oct 18 17:52:28 EDT 2025 app=chromium dest_ip=224.0.0.251 dest_port=5353 pid=727862 user=pentester fd=211u ip_version=4 dvc_id=992232 transport=UDP


_raw: Sat Oct 18 17:52:28 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77944 user=xrdp fd=11u ip_version=6 dvc_id=93050 transport=TCP


_raw: Sat Oct 18 17:52:28 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76644 user=root fd=7u ip_version=6 dvc_id=91534 transport=TCP


_raw: Sat Oct 18 17:52:28 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76644 user=root fd=6u ip_version=4 dvc_id=91532 transport=TCP


_raw: Sat Oct 18 17:52:28 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76543 user=root fd=7u ip_version=4 dvc_id=92212 transport=UDP


_raw: Sat Oct 18 17:52:28 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=2685 transport=UDP


_raw: Sat Oct 18 17:52:28 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=3640 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp       22


_raw: Sat Oct 18 17:52:25 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=721843 user=root fd=13u ip_version=4 dvc_id=883264 transport=TCP


_raw: Sat Oct 18 17:52:25 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78391 user=xrdp fd=11u ip_version=6 dvc_id=97450 transport=TCP


_raw: Sat Oct 18 17:52:25 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76987 user=root fd=7u ip_version=6 dvc_id=91381 transport=TCP


_raw: Sat Oct 18 17:52:25 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76987 user=root fd=6u ip_version=4 dvc_id=91379 transport=TCP


_raw: Sat Oct 18 17:52:25 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76839 user=root fd=7u ip_version=4 dvc_id=89016 transport=UDP


_raw: Sat Oct 18 17:52:25 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=3891 transport=UDP


_raw: Sat Oct 18 17:52:25 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=537 transport=UDP


_raw: Sat Oct 18 17:52:24 EDT 2025 app=postgres dest_ip=127.0.0.1 dest_port=5432 pid=770093 user=postgres fd=7u ip_version=4 dvc_id=1240631 transport=TCP


_raw: Sat Oct 18 17:52:24 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=739465 user=root fd=13u ip_version=4 dvc_id=969954 transport=TCP


_raw: Sat Oct 18 17:52:24 EDT 2025 app=x-www-browser dest_ip=* dest_port=52712 pid=719189 user=pentester fd=175u ip_version=4 dvc_id=1589616 transport=UDP


_raw: Sat Oct 18 17:52:24 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78025 user=xrdp fd=11u ip_version=6 dvc_id=93161 transport=TCP


_raw: Sat Oct 18 17:52:24 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76745 user=root fd=7u ip_version=6 dvc_id=89950 transport=TCP


_raw: Sat Oct 18 17:52:24 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76745 user=root fd=6u ip_version=4 dvc_id=89948 transport=TCP


_raw: Sat Oct 18 17:52:24 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76638 user=root fd=7u ip_version=4 dvc_id=91378 transport=UDP


_raw: Sat Oct 18 17:52:24 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=693 user=root fd=7u ip_version=4 dvc_id=3681 transport=UDP


_raw: Sat Oct 18 17:52:24 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=611 user=root fd=7u ip_version=4 dvc_id=1887 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp    34067
tcp       22
tcp     8080
tcp     3350
tcp     3389


_raw:
Proto   Port
udp    52712
udp       68
udp       68
udp       68
tcp     5432
tcp     8889
tcp       22
tcp     3389
tcp     3350
tcp     5432
tcp       22


_raw: Sat Oct 18 17:52:23 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=8080 pid=761517 user=pentester fd=37u ip_version=6 dvc_id=951086 transport=TCP


_raw: Sat Oct 18 17:52:23 EDT 2025 app=java dest_ip=127.0.0.1 dest_port=34067 pid=761517 user=pentester fd=16u ip_version=6 dvc_id=951716 transport=TCP


_raw: Sat Oct 18 17:52:23 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=731670 user=root fd=13u ip_version=4 dvc_id=858374 transport=TCP


_raw: Sat Oct 18 17:52:23 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77856 user=xrdp fd=11u ip_version=6 dvc_id=95414 transport=TCP


_raw: Sat Oct 18 17:52:23 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76598 user=root fd=7u ip_version=6 dvc_id=89956 transport=TCP


_raw: Sat Oct 18 17:52:23 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76598 user=root fd=6u ip_version=4 dvc_id=89954 transport=TCP


_raw: Sat Oct 18 17:52:23 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76497 user=root fd=7u ip_version=4 dvc_id=91466 transport=UDP


_raw: Sat Oct 18 17:52:23 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=705 user=root fd=7u ip_version=4 dvc_id=2707 transport=UDP


_raw: Sat Oct 18 17:52:23 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=624 user=root fd=7u ip_version=4 dvc_id=1834 transport=UDP


_raw:
Proto   Port
udp     5353
udp    47691
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw: Sat Oct 18 17:52:18 EDT 2025 app=chromium dest_ip=224.0.0.251 dest_port=5353 pid=773997 user=pentester fd=207u ip_version=4 dvc_id=1201774 transport=UDP


_raw: Sat Oct 18 17:52:18 EDT 2025 app=chromium dest_ip=10.0.254.202 dest_port=47691 pid=773997 user=pentester fd=144u ip_version=4 dvc_id=1294535 transport=UDP


_raw: Sat Oct 18 17:52:18 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=737968 user=root fd=13u ip_version=4 dvc_id=953384 transport=TCP


_raw: Sat Oct 18 17:52:18 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77922 user=xrdp fd=11u ip_version=6 dvc_id=96368 transport=TCP


_raw: Sat Oct 18 17:52:18 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76665 user=root fd=7u ip_version=6 dvc_id=90933 transport=TCP


_raw: Sat Oct 18 17:52:18 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76665 user=root fd=6u ip_version=4 dvc_id=90931 transport=TCP


_raw: Sat Oct 18 17:52:18 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76564 user=root fd=7u ip_version=4 dvc_id=92313 transport=UDP


_raw: Sat Oct 18 17:52:18 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=706 user=root fd=7u ip_version=4 dvc_id=693 transport=UDP


_raw: Sat Oct 18 17:52:18 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=623 user=root fd=7u ip_version=4 dvc_id=2945 transport=UDP


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp       22
tcp       80
tcp     8889
tcp       53
tcp       22


_raw:
Proto   Port
udp       53
udp       68
udp       68
udp       68
tcp     8889
tcp       53
tcp       22
tcp       80
tcp       22


_raw:
Proto   Port
udp    33896
udp    34504
udp    39263
udp    43782
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp       22
tcp     3389
tcp     3350


_raw: Sat Oct 18 17:52:05 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=740083 user=root fd=13u ip_version=4 dvc_id=942157 transport=TCP


_raw: Sat Oct 18 17:52:05 EDT 2025 app=x-www-browser dest_ip=* dest_port=34504 pid=716798 user=pentester fd=107u ip_version=4 dvc_id=1132634 transport=UDP


_raw: Sat Oct 18 17:52:05 EDT 2025 app=x-www-browser dest_ip=* dest_port=43782 pid=716798 user=pentester fd=106u ip_version=4 dvc_id=1130412 transport=UDP


_raw: Sat Oct 18 17:52:05 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=77818 user=xrdp fd=11u ip_version=6 dvc_id=95506 transport=TCP


_raw: Sat Oct 18 17:52:05 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76565 user=root fd=7u ip_version=6 dvc_id=92220 transport=TCP


_raw: Sat Oct 18 17:52:05 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76565 user=root fd=6u ip_version=4 dvc_id=92218 transport=TCP


_raw: Sat Oct 18 17:52:05 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76434 user=root fd=7u ip_version=4 dvc_id=91175 transport=UDP


_raw: Sat Oct 18 17:52:05 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=699 user=root fd=7u ip_version=4 dvc_id=3619 transport=UDP


_raw: Sat Oct 18 17:52:05 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=492 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp       22
tcp     8889
tcp       22
tcp     3350
tcp     3389


_raw: Sat Oct 18 17:51:59 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=722310 user=root fd=13u ip_version=4 dvc_id=900874 transport=TCP


_raw: Sat Oct 18 17:51:59 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78003 user=xrdp fd=11u ip_version=6 dvc_id=96479 transport=TCP


_raw: Sat Oct 18 17:51:59 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76655 user=root fd=7u ip_version=6 dvc_id=93207 transport=TCP


_raw: Sat Oct 18 17:51:59 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76655 user=root fd=6u ip_version=4 dvc_id=93205 transport=TCP


_raw: Sat Oct 18 17:51:59 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76523 user=root fd=7u ip_version=4 dvc_id=92167 transport=UDP


_raw: Sat Oct 18 17:51:59 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=699 user=root fd=7u ip_version=4 dvc_id=1730 transport=UDP


_raw: Sat Oct 18 17:51:59 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=616 user=root fd=7u ip_version=4 dvc_id=4097 transport=UDP


_raw:
Proto   Port
udp       68
udp       68
udp       68
tcp     8889
tcp       22
tcp     4444
tcp     3350
tcp     3389
tcp       22


_raw: Sat Oct 18 17:51:55 EDT 2025 app=nc dest_ip=* dest_port=4444 pid=747711 user=kali fd=3u ip_version=4 dvc_id=964959 transport=TCP


_raw: Sat Oct 18 17:51:55 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=734020 user=root fd=13u ip_version=4 dvc_id=935003 transport=TCP


_raw: Sat Oct 18 17:51:55 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78238 user=xrdp fd=11u ip_version=6 dvc_id=96589 transport=TCP


_raw: Sat Oct 18 17:51:55 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76939 user=root fd=7u ip_version=6 dvc_id=89045 transport=TCP


_raw: Sat Oct 18 17:51:55 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76939 user=root fd=6u ip_version=4 dvc_id=89043 transport=TCP


_raw: Sat Oct 18 17:51:55 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76838 user=root fd=7u ip_version=4 dvc_id=91492 transport=UDP


_raw: Sat Oct 18 17:51:55 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=697 user=root fd=7u ip_version=4 dvc_id=2032 transport=UDP


_raw: Sat Oct 18 17:51:55 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=614 user=root fd=7u ip_version=4 dvc_id=4160 transport=UDP


_raw: Sat Oct 18 17:51:55 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=735657 user=root fd=13u ip_version=4 dvc_id=898205 transport=TCP


_raw: Sat Oct 18 17:51:55 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78201 user=xrdp fd=11u ip_version=6 dvc_id=96489 transport=TCP


_raw: Sat Oct 18 17:51:55 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76944 user=root fd=7u ip_version=6 dvc_id=90905 transport=TCP


_raw: Sat Oct 18 17:51:55 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76944 user=root fd=6u ip_version=4 dvc_id=90903 transport=TCP


_raw: Sat Oct 18 17:51:55 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76842 user=root fd=7u ip_version=4 dvc_id=92211 transport=UDP


_raw: Sat Oct 18 17:51:55 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=701 user=root fd=7u ip_version=4 dvc_id=3919 transport=UDP


_raw: Sat Oct 18 17:51:55 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=618 user=root fd=7u ip_version=4 dvc_id=3904 transport=UDP


_raw: Sat Oct 18 17:51:55 EDT 2025 file_hash=SHA2-256(stdin)= 30aeb3cafe6edae0eb13840ab96a2c183f1a29f3ee4cd057b38fbaab04599cd0


_raw: Sat Oct 18 17:51:55 EDT 2025 app=firefox-esr dest_ip=* dest_port=34967 pid=831851 user=pentester fd=202u ip_version=4 dvc_id=1951968 transport=UDP


_raw: Sat Oct 18 17:51:55 EDT 2025 app=firefox-esr dest_ip=* dest_port=43689 pid=831851 user=pentester fd=198u ip_version=4 dvc_id=1952849 transport=UDP


_raw: Sat Oct 18 17:51:55 EDT 2025 app=firefox-esr dest_ip=* dest_port=32949 pid=831851 user=pentester fd=191u ip_version=4 dvc_id=1951044 transport=UDP


_raw: Sat Oct 18 17:51:55 EDT 2025 app=firefox-esr dest_ip=* dest_port=55182 pid=831851 user=pentester fd=185u ip_version=4 dvc_id=1950838 transport=UDP


_raw: Sat Oct 18 17:51:55 EDT 2025 app=firefox-esr dest_ip=* dest_port=52322 pid=831851 user=pentester fd=179u ip_version=4 dvc_id=1951955 transport=UDP


_raw: Sat Oct 18 17:51:55 EDT 2025 app=firefox-esr dest_ip=* dest_port=54150 pid=831851 user=pentester fd=178u ip_version=4 dvc_id=1950821 transport=UDP


_raw: Sat Oct 18 17:51:55 EDT 2025 app=firefox-esr dest_ip=* dest_port=48377 pid=831851 user=pentester fd=171u ip_version=4 dvc_id=1951954 transport=UDP


_raw: Sat Oct 18 17:51:55 EDT 2025 app=firefox-esr dest_ip=* dest_port=59489 pid=831851 user=pentester fd=164u ip_version=4 dvc_id=1949314 transport=UDP


_raw: Sat Oct 18 17:51:55 EDT 2025 app=firefox-esr dest_ip=* dest_port=34021 pid=831851 user=pentester fd=163u ip_version=4 dvc_id=1949313 transport=UDP


_raw: Sat Oct 18 17:51:55 EDT 2025 app=firefox-esr dest_ip=* dest_port=47446 pid=831851 user=pentester fd=157u ip_version=4 dvc_id=1949312 transport=UDP


_raw: Sat Oct 18 17:51:55 EDT 2025 app=firefox-esr dest_ip=* dest_port=50011 pid=831851 user=pentester fd=107u ip_version=4 dvc_id=1949199 transport=UDP


_raw: Sat Oct 18 17:51:55 EDT 2025 app=firefox-esr dest_ip=* dest_port=50837 pid=831851 user=pentester fd=89u ip_version=4 dvc_id=1947583 transport=UDP


_raw: Sat Oct 18 17:51:55 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=765953 user=root fd=13u ip_version=4 dvc_id=1278745 transport=TCP


_raw: Sat Oct 18 17:51:55 EDT 2025 app=gsad dest_ip=127.0.0.1 dest_port=80 pid=722952 user=_gvm fd=4u ip_version=4 dvc_id=952324 transport=TCP


_raw: Sat Oct 18 17:51:55 EDT 2025 app=gsad dest_ip=127.0.0.1 dest_port=9392 pid=722949 user=_gvm fd=4u ip_version=4 dvc_id=950797 transport=TCP


_raw: Sat Oct 18 17:51:55 EDT 2025 app=postgres dest_ip=127.0.0.1 dest_port=5432 pid=716015 user=postgres fd=7u ip_version=4 dvc_id=838228 transport=TCP


_raw: Sat Oct 18 17:51:55 EDT 2025 app=mosquitto dest_ip=127.0.0.1 dest_port=1883 pid=716001 user=mosquitto fd=5u ip_version=4 dvc_id=840739 transport=TCP


_raw: Sat Oct 18 17:51:55 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78005 user=xrdp fd=11u ip_version=6 dvc_id=96314 transport=TCP


_raw: Sat Oct 18 17:51:55 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76750 user=root fd=7u ip_version=6 dvc_id=92238 transport=TCP


_raw: Sat Oct 18 17:51:55 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76750 user=root fd=6u ip_version=4 dvc_id=92236 transport=TCP


_raw: Sat Oct 18 17:51:55 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76648 user=root fd=7u ip_version=4 dvc_id=88061 transport=UDP


_raw: Sat Oct 18 17:51:55 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=700 user=root fd=7u ip_version=4 dvc_id=2969 transport=UDP


_raw: Sat Oct 18 17:51:55 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=617 user=root fd=7u ip_version=4 dvc_id=3787 transport=UDP


_raw: Sat Oct 18 17:51:53 EDT 2025 app=streamfwd dest_ip=127.0.0.1 dest_port=8889 pid=729036 user=root fd=13u ip_version=4 dvc_id=918473 transport=TCP


_raw: Sat Oct 18 17:51:53 EDT 2025 app=python3 dest_ip=* dest_port=8000 pid=703023 user=pentester fd=3u ip_version=4 dvc_id=848284 transport=TCP


_raw: Sat Oct 18 17:51:53 EDT 2025 app=xrdp dest_ip=* dest_port=3389 pid=78362 user=xrdp fd=11u ip_version=6 dvc_id=95572 transport=TCP


_raw: Sat Oct 18 17:51:53 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76983 user=root fd=7u ip_version=6 dvc_id=91756 transport=TCP


_raw: Sat Oct 18 17:51:53 EDT 2025 app=sshd dest_ip=* dest_port=22 pid=76983 user=root fd=6u ip_version=4 dvc_id=91754 transport=TCP


_raw: Sat Oct 18 17:51:53 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=76880 user=root fd=7u ip_version=4 dvc_id=92274 transport=UDP


_raw: Sat Oct 18 17:51:53 EDT 2025 app=dhclient dest_ip=* dest_port=68 pid=696 user=root fd=7u ip_version=4 dvc_id=2733 transport=UDP