StartTime Dur Proto SrcAddr Sport Dir DstAddr Dport State sTos dTos TotPkts TotBytes Label 1970/01/01 01:00:00.000000 0.000000 llc 00:00:00:00:00:00 0 -> 00:00:00:00:00:00 0 INT 1 60 flow=Background 1970/01/01 01:00:24.593194 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 INT 0 1 147 flow=Background 1970/01/01 01:00:34.879472 1.971822 arp 0.0.0.0 who 10.0.2.110 INT 3 126 flow=Background-ARP 1970/01/01 01:00:34.879554 0.000000 ipv6-icmp :: 135 -> ff02::1:ffdf:b0f1 0 NNS 0 1 78 flow=Background 1970/01/01 01:00:34.879583 3.946039 ipv6-icmp fe80::31aa:edaf:e8df:b0f1 133 -> ff02::2 0 NRS 0 2 140 flow=Background 1970/01/01 01:00:34.879635 0.495127 ipv6-icmp fe80::31aa:edaf:e8df:b0f1 143 -> ff02::16 0 UNK 0 2 180 flow=Background 1970/01/01 01:00:35.083054 2.761615 arp 10.0.2.110 who 10.0.2.2 CON 6 252 flow=Background-ARP 1970/01/01 01:00:35.612997 1.977936 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 2 294 flow=Background 1970/01/01 01:00:41.538704 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 01:00:42.766377 0.000000 ipv6-icmp fe80::31aa:edaf:e8df:b0f1 133 -> ff02::2 0 NRS 0 1 70 flow=Background 1970/01/01 01:00:49.436070 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 01:01:05.224750 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 01:01:15.302909 0.000000 udp 10.0.2.110 60212 -> 8.8.8.8 53 INT 0 1 76 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 01:01:15.313108 0.000107 arp 10.0.2.2 who 10.0.2.110 CON 2 84 flow=Background-ARP 1970/01/01 01:01:16.290606 0.009746 udp 10.0.2.110 60212 <-> 8.8.4.4 53 CON 0 0 2 168 flow=From-Botnet-V1-DNS 1970/01/01 01:01:16.300906 0.009561 udp 10.0.2.110 56943 <-> 8.8.4.4 53 CON 0 0 2 180 flow=From-Botnet-V1-DNS 1970/01/01 01:01:19.767948 2.826724 arp 10.0.2.110 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 01:01:39.614337 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 01:07:39.123281 2.951135 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 01:07:46.029217 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 01:07:55.084498 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 01:08:10.873349 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 01:08:46.798833 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 01:14:45.789476 3.306116 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 01:14:53.037762 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 01:15:00.932123 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 01:15:16.714391 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 01:15:48.265493 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 01:21:48.542749 3.001052 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 01:21:55.549916 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 01:22:03.551763 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 01:22:19.554383 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 01:22:51.560499 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 01:28:55.565940 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 01:29:07.130543 2.042584 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 2 294 flow=Background 1970/01/01 01:29:13.178540 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 01:29:21.180657 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 01:29:37.183169 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 01:30:09.189163 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 01:36:17.398735 2.994329 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 01:36:24.398985 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 01:36:32.400644 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 01:36:48.403069 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 01:37:20.409590 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 01:43:29.496479 2.997961 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 01:43:36.500189 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 01:43:44.501809 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 01:44:00.504708 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 01:44:32.510690 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 01:50:36.516975 3.001159 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 01:50:43.524089 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 01:50:51.525330 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 01:51:07.528757 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 01:51:39.534308 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 01:57:43.540329 3.002245 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 01:57:50.548048 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 01:57:58.560157 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 01:58:14.562976 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 01:58:46.568655 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 02:04:50.574624 3.001745 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 02:04:57.581791 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 02:05:05.583312 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 02:05:21.586922 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 02:05:53.592590 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 02:11:57.598087 3.002119 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 02:12:04.606368 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 02:12:12.607308 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 02:12:18.747544 0.099030 udp fe80::31aa:edaf:e8df:b0f1 56645 -> ff02::1:3 5355 INT 0 2 168 flow=Background 1970/01/01 02:12:18.747814 0.098914 udp 10.0.2.110 62269 -> 224.0.0.252 5355 INT 0 2 128 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:12:18.747861 0.098867 icmp 10.0.2.2 0x000b -> 10.0.2.110 0x0000 TXD 192 2 184 flow=Background 1970/01/01 02:12:19.221665 1.497709 udp 10.0.2.110 137 -> 10.0.2.255 137 INT 0 3 276 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:12:19.221780 1.497594 icmp 10.0.2.2 0x0003 -> 10.0.2.110 0x0a00 URN 192 3 360 flow=Background 1970/01/01 02:12:22.866527 0.000058 arp 10.0.2.110 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:12:22.866680 0.340114 udp 10.0.2.110 61912 <-> 8.8.8.8 53 CON 0 0 2 158 flow=From-Botnet-V1-DNS 1970/01/01 02:12:23.207623 0.598773 tcp 10.0.2.110 49158 -> 61.147.82.83 80 SRPA* 0 0 9 2360 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:12:23.992081 0.913790 udp 10.0.2.110 57771 <-> 8.8.8.8 53 CON 0 0 2 219 flow=From-Botnet-V1-DNS 1970/01/01 02:12:24.906283 1.214563 tcp 10.0.2.110 49159 -> 61.158.145.141 80 SPA_* 0 0 28 22408 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:12:24.906495 0.908382 tcp 10.0.2.110 49160 -> 61.158.145.141 80 SPA_* 0 0 18 13690 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:12:28.610719 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 02:12:40.720833 0.000155 tcp 10.0.2.110 49159 -> 61.158.145.141 80 A_FA 0 0 2 108 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:12:40.727971 0.000156 tcp 10.0.2.110 49160 -> 61.158.145.141 80 A_FA 0 0 2 108 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:13:00.616807 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 02:19:04.622568 3.001307 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 02:19:11.629799 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 02:19:19.631393 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 02:19:43.923780 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 02:20:12.988397 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 02:22:04.244266 0.000053 arp 10.0.2.110 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:22:04.244409 2.231104 udp 10.0.2.110 50685 <-> 8.8.8.8 53 CON 0 0 2 219 flow=From-Botnet-V1-DNS 1970/01/01 02:22:05.239705 0.792799 udp 10.0.2.110 50685 <-> 8.8.4.4 53 CON 0 0 2 219 flow=From-Botnet-V1-DNS 1970/01/01 02:22:06.219262 4.598293 tcp 10.0.2.110 49161 -> 61.158.145.141 80 SPA_* 0 0 212 228738 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:22:06.475513 0.000000 icmp 10.0.2.110 0x0303 -> 8.8.8.8 0xfdc5 URP 0 1 175 flow=Background 1970/01/01 02:22:11.236905 4.588846 tcp 10.0.2.110 49161 -> 61.158.145.141 80 A_PA 0 0 256 284600 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:22:13.714221 0.475618 udp 10.0.2.110 60520 <-> 8.8.8.8 53 CON 0 0 2 164 flow=From-Botnet-V1-DNS 1970/01/01 02:22:14.484106 0.010616 udp 10.0.2.110 52646 <-> 8.8.8.8 53 CON 0 0 2 164 flow=From-Botnet-V1-DNS 1970/01/01 02:22:14.495417 1.369092 tcp 10.0.2.110 49162 -> 61.147.82.85 80 SPA_* 0 0 7 1622 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:22:16.246070 4.631734 tcp 10.0.2.110 49161 -> 61.158.145.141 80 A_PA 0 0 490 541948 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:22:21.267713 4.669306 tcp 10.0.2.110 49161 -> 61.158.145.141 80 A_PA 0 0 629 713078 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:22:26.361761 1.480422 tcp 10.0.2.110 49161 -> 61.158.145.141 80 A_PA 0 0 98 104220 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:22:30.671268 3.626006 tcp 10.0.2.110 49162 -> 61.147.82.85 80 A_FA 0 0 3 162 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:22:42.067677 0.000593 tcp 10.0.2.110 49162 -> 61.147.82.85 80 A_FA 0 0 2 108 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:22:42.067718 0.000604 tcp 10.0.2.110 49161 -> 61.158.145.141 80 A_FA 0 0 2 108 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:22:49.004433 0.000000 tcp 10.0.2.110 49160 ?> 61.158.145.141 80 RA_ 0 1 54 flow=Background 1970/01/01 02:22:49.004587 0.000000 tcp 10.0.2.110 49159 ?> 61.158.145.141 80 RA_ 0 1 54 flow=Background 1970/01/01 02:23:02.655997 0.000000 tcp 10.0.2.110 49162 -> 61.147.82.85 80 RA_ 0 0 1 54 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:23:03.371355 0.000070 tcp 10.0.2.110 49161 -> 61.158.145.141 80 FA_A 0 0 2 108 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:23:03.371697 3.316428 tcp 10.0.2.110 49163 -> 61.158.145.141 80 SPA_* 0 0 136 138769 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:23:05.374404 1.524122 udp 10.0.2.110 64565 <-> 8.8.8.8 53 CON 0 0 2 160 flow=From-Botnet-V1-DNS 1970/01/01 02:23:06.395912 0.363163 udp 10.0.2.110 64565 <-> 8.8.4.4 53 CON 0 0 2 160 flow=From-Botnet-V1-DNS 1970/01/01 02:23:06.714059 0.960243 udp 10.0.2.110 55447 <-> 8.8.8.8 53 CON 0 0 2 244 flow=From-Botnet-V1-DNS 1970/01/01 02:23:06.759565 1.287401 tcp 10.0.2.110 49164 -> 61.147.82.85 80 SPA_* 0 0 17 7523 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:23:06.898526 0.000000 icmp 10.0.2.110 0x0303 -> 8.8.8.8 0x35fc URP 0 1 116 flow=Background 1970/01/01 02:23:07.320316 0.009579 udp 10.0.2.110 54540 <-> 8.8.8.8 53 CON 0 0 2 209 flow=From-Botnet-V1-DNS 1970/01/01 02:23:07.337278 0.010302 udp 10.0.2.110 50870 <-> 8.8.8.8 53 CON 0 0 2 209 flow=From-Botnet-V1-DNS 1970/01/01 02:23:07.367640 4.458412 tcp 10.0.2.110 49165 -> 65.55.58.195 80 SPA_* 0 0 7 1145 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:23:07.639509 0.336939 udp 10.0.2.110 55447 <-> 8.8.4.4 53 CON 0 0 2 244 flow=From-Botnet-V1-DNS 1970/01/01 02:23:07.674833 4.998754 tcp 10.0.2.110 49166 -> 113.107.56.81 80 SPA_* 0 0 502 548949 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:23:07.976448 0.000000 icmp 10.0.2.110 0x0303 -> 8.8.4.4 0x97d8 URP 0 1 197 flow=Background 1970/01/01 02:23:12.684505 0.230674 tcp 10.0.2.110 49166 -> 113.107.56.81 80 A_PA 0 0 52 45540 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:23:19.189653 0.000201 tcp 10.0.2.110 49163 -> 61.158.145.141 80 A_FA 0 0 2 108 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:23:22.717508 0.635141 tcp 10.0.2.110 49164 -> 61.147.82.85 80 A_FA 0 0 2 108 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:23:34.896938 0.000000 tcp 10.0.2.110 49163 -> 61.158.145.141 80 RA_ 0 0 1 54 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:23:35.309031 4.952436 tcp 10.0.2.110 49167 -> 61.158.145.141 80 SPA_* 0 0 316 321242 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:23:35.733251 0.836282 udp 10.0.2.110 57564 <-> 8.8.8.8 53 CON 0 0 2 219 flow=From-Botnet-V1-DNS 1970/01/01 02:23:37.045166 0.377146 tcp 10.0.2.110 49165 -> 65.55.58.195 80 PA_PA 0 0 4 1147 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:23:37.059507 1.674415 tcp 10.0.2.110 49168 -> 61.158.145.140 80 SPA_* 0 0 44 37775 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:23:37.218558 0.011400 udp 10.0.2.110 63948 <-> 8.8.8.8 53 CON 0 0 2 260 flow=From-Botnet-V1-DNS 1970/01/01 02:23:37.231734 0.010075 udp 10.0.2.110 61954 <-> 8.8.8.8 53 CON 0 0 2 260 flow=From-Botnet-V1-DNS 1970/01/01 02:23:37.242241 0.195374 tcp 10.0.2.110 49169 -> 65.55.186.113 80 FSPA* 0 0 10 1742 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:23:39.244581 0.010560 udp 10.0.2.110 58618 <-> 8.8.8.8 53 CON 0 0 2 256 flow=From-Botnet-V1-DNS 1970/01/01 02:23:39.255719 4.206873 tcp 10.0.2.110 49170 -> 65.55.162.27 443 SPA_* 0 0 16 6818 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:23:40.678783 4.741702 tcp 10.0.2.110 49167 -> 61.158.145.141 80 A_PA 0 0 435 496986 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:23:42.431680 0.000151 tcp 10.0.2.110 49166 -> 113.107.56.81 80 A_FA 0 0 2 108 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:23:44.806384 0.000000 tcp 10.0.2.110 49170 -> 65.55.162.27 443 A_ 0 0 1 54 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:23:45.842297 4.916532 tcp 10.0.2.110 49167 -> 61.158.145.141 80 A_PA 0 0 552 582944 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:23:46.540523 0.009994 udp 10.0.2.110 62211 <-> 8.8.8.8 53 CON 0 0 2 368 flow=From-Botnet-V1-DNS 1970/01/01 02:23:46.551619 0.010039 udp 10.0.2.110 60622 <-> 8.8.8.8 53 CON 0 0 2 368 flow=From-Botnet-V1-DNS 1970/01/01 02:23:46.562004 0.096410 tcp 10.0.2.110 49171 -> 95.100.96.242 80 SPA_* 0 0 58 57795 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:23:46.567738 0.770541 tcp 10.0.2.110 49168 -> 61.158.145.140 80 PA_PA 0 0 26 24785 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:23:48.795059 0.733208 udp 10.0.2.110 50393 <-> 8.8.8.8 53 CON 0 0 2 232 flow=From-Botnet-V1-DNS 1970/01/01 02:23:49.528952 0.752016 tcp 10.0.2.110 49172 -> 119.134.251.172 80 SPA_* 0 0 10 4371 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:23:51.159420 4.928282 tcp 10.0.2.110 49167 -> 61.158.145.141 80 A_PA 0 0 710 795644 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:23:56.510684 4.973785 tcp 10.0.2.110 49167 -> 61.158.145.141 80 A_PA 0 0 1260 1379928 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:24:01.887006 4.956526 tcp 10.0.2.110 49167 -> 61.158.145.141 80 A_PA 0 0 1772 2009944 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:24:01.944432 0.000157 tcp 10.0.2.110 49168 -> 61.158.145.140 80 A_FA 0 0 2 108 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:24:07.258999 4.886147 tcp 10.0.2.110 49167 -> 61.158.145.141 80 A_PA 0 0 494 513204 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:24:12.561184 1.259682 tcp 10.0.2.110 49167 -> 61.158.145.141 80 A_PA 0 0 105 112794 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:24:50.584243 0.000000 tcp 10.0.2.110 49171 -> 95.100.96.242 80 RA_ 0 0 1 54 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:24:50.584330 4.933221 tcp 10.0.2.110 49167 -> 61.158.145.141 80 A_PA 0 0 902 1066512 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:24:50.584831 0.006252 tcp 65.55.162.27 443 10.0.2.110 49170 FA_A 0 0 2 108 flow=Background 1970/01/01 02:24:50.584864 0.006346 tcp 10.0.2.110 49172 -> 119.134.251.172 80 A_FA 0 0 2 108 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:24:50.595714 0.000000 tcp 10.0.2.110 49165 ?> 65.55.58.195 80 RA_ 0 1 54 flow=Background 1970/01/01 02:24:55.921979 4.590230 tcp 10.0.2.110 49167 -> 61.158.145.141 80 A_PA 0 0 516 570864 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:24:58.916552 0.207987 tcp 65.55.162.27 443 10.0.2.110 49170 R_PA 0 0 6 2187 flow=Background 1970/01/01 02:24:59.139833 0.965784 tcp 10.0.2.110 49173 -> 65.55.162.27 443 FSPA* 0 0 25 8070 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:24:59.256796 0.000000 tcp 10.0.2.110 49172 -> 119.134.251.172 80 RA_ 0 0 1 54 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:24:59.264025 0.724010 udp 10.0.2.110 64897 <-> 8.8.8.8 53 CON 0 0 2 236 flow=From-Botnet-V1-DNS 1970/01/01 02:24:59.988497 4.974927 tcp 10.0.2.110 49174 -> 120.31.132.193 80 SPA_* 0 0 30 18037 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:24:59.988728 4.896513 tcp 10.0.2.110 49175 -> 120.31.132.193 80 SPA_* 0 0 100 89769 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:25:00.681858 0.000000 tcp 10.0.2.110 49168 -> 61.158.145.140 80 RA_ 0 0 1 54 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:25:00.932727 4.976109 tcp 10.0.2.110 49167 -> 61.158.145.141 80 A_PA 0 0 887 1009370 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:25:03.079912 4.000004 tcp 10.0.2.110 49176 -> 61.158.145.140 80 SPA_* 0 0 170 180240 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:25:03.663070 1.551780 tcp 10.0.2.110 49177 -> 61.158.145.140 80 SPA_* 0 0 46 41290 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:25:03.663333 0.899623 tcp 10.0.2.110 49178 -> 61.158.145.140 80 SPA_* 0 0 21 14992 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:25:03.682038 0.800096 tcp 10.0.2.110 49179 -> 61.158.145.140 80 SPA_* 0 0 9 2699 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:25:04.570089 0.832852 udp 10.0.2.110 56626 <-> 8.8.8.8 53 CON 0 0 2 186 flow=From-Botnet-V1-DNS 1970/01/01 02:25:05.215757 1.338263 tcp 10.0.2.110 49175 -> 120.31.132.193 80 PA_PA 0 0 49 44417 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:25:05.298610 2.203144 tcp 10.0.2.110 49174 -> 120.31.132.193 80 PA_PA 0 0 41 32046 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:25:05.403372 3.300032 tcp 10.0.2.110 49180 -> 61.135.185.140 80 SPA_* 0 0 17 8006 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:25:05.798529 0.000000 tcp 10.0.2.110 49164 ?> 61.147.82.85 80 RA_ 0 1 54 flow=Background 1970/01/01 02:25:06.273963 0.416268 ipv6-icmp fe80::31aa:edaf:e8df:b0f1 143 -> ff02::16 0 UNK 0 2 180 flow=Background 1970/01/01 02:25:06.274977 0.000000 igmp 10.0.2.110 -> 0.0.0.1 INT 0 1 54 flow=Background 1970/01/01 02:25:06.314148 4.998455 tcp 10.0.2.110 49167 -> 61.158.145.141 80 A_PA 0 0 444 500368 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:25:06.690117 0.000000 igmp 10.0.2.110 -> 0.0.0.1 INT 0 1 54 flow=Background 1970/01/01 02:25:06.962473 3.956405 udp 10.0.2.110 56629 -> 239.255.255.250 1900 INT 0 4 700 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:25:06.962534 3.956344 icmp 10.0.2.2 0x000b -> 10.0.2.110 0x0000 TXD 192 4 812 flow=Background 1970/01/01 02:25:07.658540 0.346474 udp 10.0.2.110 50942 <-> 8.8.8.8 53 CON 0 0 2 162 flow=From-Botnet-V1-DNS 1970/01/01 02:25:08.005589 0.678655 tcp 10.0.2.110 49181 -> 119.146.201.161 80 FSPA* 0 0 10 2116 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:25:08.129143 2.402604 tcp 10.0.2.110 49176 -> 61.158.145.140 80 A_PA 0 0 205 206448 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:25:10.216521 0.479820 tcp 10.0.2.110 49182 -> 119.146.201.161 80 FSPA* 0 0 10 1410 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:25:11.703742 4.972609 tcp 10.0.2.110 49167 -> 61.158.145.141 80 A_PA 0 0 482 516900 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:25:12.701480 0.010006 udp 10.0.2.110 60924 <-> 8.8.8.8 53 CON 0 0 2 299 flow=From-Botnet-V1-DNS 1970/01/01 02:25:12.713124 0.009987 udp 10.0.2.110 51342 <-> 8.8.8.8 53 CON 0 0 2 299 flow=From-Botnet-V1-DNS 1970/01/01 02:25:12.723510 3.625874 tcp 10.0.2.110 49183 -> 94.245.70.28 80 FSPA* 0 0 65 51300 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:25:12.979534 0.941750 udp 10.0.2.110 56629 -> 239.255.255.250 1900 REQ 0 2 350 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:25:12.979590 0.941694 icmp 10.0.2.2 0x000b -> 10.0.2.110 0x0000 TXD 192 2 406 flow=Background 1970/01/01 02:25:17.089552 4.097044 tcp 10.0.2.110 49167 -> 61.158.145.141 80 A_PA 0 0 654 740464 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:25:18.507102 2.157583 tcp 10.0.2.110 49180 -> 61.135.185.140 80 RA_FA 0 0 3 162 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:25:19.438547 0.000167 tcp 10.0.2.110 49177 -> 61.158.145.140 80 A_FA 0 0 2 108 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:25:19.440048 0.000125 tcp 10.0.2.110 49178 -> 61.158.145.140 80 A_FA 0 0 2 108 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:25:19.481595 0.000258 tcp 10.0.2.110 49179 -> 61.158.145.140 80 A_FA 0 0 2 108 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:25:22.291392 2.326100 tcp 10.0.2.110 49167 -> 61.158.145.141 80 A_PA 0 0 801 960873 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:25:22.661141 0.035809 udp 10.0.2.110 54510 <-> 8.8.8.8 53 CON 0 0 2 323 flow=From-Botnet-V1-DNS 1970/01/01 02:25:22.698050 0.041154 tcp 10.0.2.110 49184 -> 80.150.192.90 80 SPA_* 0 0 8 2472 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:25:22.877877 4.867772 tcp 10.0.2.110 49176 -> 61.158.145.140 80 RA_FA 0 0 3 162 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:25:24.617882 0.000000 tcp 10.0.2.110 49166 ?> 113.107.56.81 80 RA_ 0 1 54 flow=Background 1970/01/01 02:25:27.745155 0.000000 tcp 10.0.2.110 49179 -> 61.158.145.140 80 RA_ 0 0 1 54 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:25:27.745321 0.000000 tcp 10.0.2.110 49178 -> 61.158.145.140 80 RA_ 0 0 1 54 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:25:27.745457 0.000000 tcp 10.0.2.110 49177 -> 61.158.145.140 80 RA_ 0 0 1 54 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:25:39.204009 0.000151 tcp 10.0.2.110 49167 -> 61.158.145.141 80 A_FA 0 0 2 108 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:26:05.831916 0.000000 tcp 10.0.2.110 49167 -> 61.158.145.141 80 RA_ 0 0 1 54 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:26:06.205398 4.701314 tcp 10.0.2.110 49175 -> 120.31.132.193 80 RA_FA 0 0 3 162 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:26:06.579152 4.327794 tcp 10.0.2.110 49174 -> 120.31.132.193 80 RA_FA 0 0 3 162 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:26:06.872754 0.769567 tcp 10.0.2.110 49185 -> 61.147.82.85 80 SPA_* 0 0 7 1065 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:26:07.437238 0.393609 udp 10.0.2.110 63529 <-> 8.8.8.8 53 CON 0 0 2 160 flow=From-Botnet-V1-DNS 1970/01/01 02:26:07.831310 1.597526 tcp 10.0.2.110 49186 -> 61.147.82.85 80 SPA_* 0 0 22 13421 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:26:22.434455 0.000000 tcp 10.0.2.110 49185 -> 61.147.82.85 80 _FA 0 0 1 54 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:26:32.626380 1.844264 tcp 10.0.2.110 49186 -> 61.147.82.85 80 RA_FA 0 0 6 324 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:26:32.626394 1.844445 tcp 10.0.2.110 49185 -> 61.147.82.85 80 RA_FA 0 0 5 270 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:26:37.335062 0.000059 arp 10.0.2.110 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:27:09.520806 0.000000 tcp 10.0.2.110 49184 ?> 80.150.192.90 80 RA_ 0 1 54 flow=Background 1970/01/01 02:27:14.337711 0.000000 arp 10.0.2.110 who 10.0.2.2 INT 1 42 flow=Background-ARP 1970/01/01 02:27:30.592917 0.000000 arp 10.0.2.110 who 10.0.2.2 RSP 1 42 flow=Background-ARP 1970/01/01 02:27:38.848512 2.984260 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 INT 0 3 441 flow=Background 1970/01/01 02:27:46.548739 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 02:27:54.451718 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 02:28:10.243628 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 02:28:41.837040 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 02:29:39.532645 0.000094 arp 10.0.2.110 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:29:39.532837 0.365374 udp 10.0.2.110 58847 <-> 8.8.8.8 53 CON 0 0 2 168 flow=From-Botnet-V1-DNS 1970/01/01 02:29:39.533193 0.414966 udp 10.0.2.110 59434 <-> 8.8.8.8 53 CON 0 0 2 164 flow=From-Botnet-V1-DNS 1970/01/01 02:29:39.898763 2.388985 tcp 10.0.2.110 49187 -> 61.147.82.182 80 SPA_* 0 0 8 1175 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:29:39.948696 0.800928 tcp 10.0.2.110 49188 -> 61.147.82.180 80 SRPA* 0 0 10 1938 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:29:40.485260 0.830843 udp 10.0.2.110 63615 <-> 8.8.8.8 53 CON 0 0 2 222 flow=From-Botnet-V1-DNS 1970/01/01 02:29:41.316576 3.807188 tcp 10.0.2.110 49189 -> 61.158.145.141 80 SRPA* 0 0 12 4170 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:29:44.911170 0.212969 tcp 10.0.2.110 49187 -> 61.147.82.182 80 RA_A 0 0 2 108 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:31:04.537055 0.000055 arp 10.0.2.110 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 02:31:04.537160 0.012325 udp 10.0.2.110 59567 <-> 8.8.8.8 53 CON 0 0 2 164 flow=From-Botnet-V1-DNS 1970/01/01 02:31:04.549995 0.887701 tcp 10.0.2.110 49190 -> 61.147.82.180 80 SRPA* 0 0 10 1890 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:31:07.663279 0.014993 udp 10.0.2.110 62623 <-> 8.8.8.8 53 CON 0 0 2 168 flow=From-Botnet-V1-DNS 1970/01/01 02:31:07.678873 0.732949 tcp 10.0.2.110 49191 -> 61.147.82.182 80 SPA_* 0 0 7 2122 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:31:07.768827 1.930529 udp 10.0.2.110 62624 -> 239.255.255.250 1900 INT 0 2 284 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:31:07.768876 1.930480 icmp 10.0.2.2 0x000b -> 10.0.2.110 0x0000 TXD 192 2 340 flow=Background 1970/01/01 02:31:07.769177 1.930450 udp 10.0.2.110 1900 -> 239.255.255.250 1900 INT 0 2 284 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:31:13.637572 0.000059 udp 10.0.2.110 62624 -> 239.255.255.250 1900 REQ 0 1 142 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:31:13.637631 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.110 0x0000 TXD 192 1 170 flow=Background 1970/01/01 02:31:13.637825 0.000000 udp 10.0.2.110 1900 -> 239.255.255.250 1900 REQ 0 1 142 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:31:19.571880 0.000062 udp 10.0.2.110 62624 -> 239.255.255.250 1900 REQ 0 1 142 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:31:19.571942 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.110 0x0000 TXD 192 1 170 flow=Background 1970/01/01 02:31:19.572122 0.000000 udp 10.0.2.110 1900 -> 239.255.255.250 1900 REQ 0 1 142 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:31:20.768840 1.652830 tcp 10.0.2.110 49191 -> 61.147.82.182 80 PA_PA 0 0 59 43066 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:31:27.407323 0.000095 udp 10.0.2.110 62624 -> 239.255.255.250 1900 REQ 0 1 142 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:31:27.407418 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.110 0x0000 TXD 192 1 170 flow=Background 1970/01/01 02:31:27.407576 0.000000 udp 10.0.2.110 1900 -> 239.255.255.250 1900 REQ 0 1 142 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:31:27.479889 0.609274 udp 10.0.2.110 49347 <-> 8.8.8.8 53 CON 0 0 2 225 flow=From-Botnet-V1-DNS 1970/01/01 02:31:28.089645 4.683537 tcp 10.0.2.110 49192 -> 61.158.145.140 80 SPA_* 0 0 100 80203 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:31:30.907163 0.011098 udp 10.0.2.110 54251 <-> 8.8.8.8 53 CON 0 0 2 164 flow=From-Botnet-V1-DNS 1970/01/01 02:31:30.954173 3.437029 tcp 10.0.2.110 49191 -> 61.147.82.182 80 PA_PA 0 0 8 1814 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:31:30.954776 0.666474 tcp 10.0.2.110 49193 -> 61.147.82.180 80 SPA_* 0 0 7 1021 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:31:31.276683 0.010014 udp 10.0.2.110 60205 <-> 8.8.8.8 53 CON 0 0 2 222 flow=From-Botnet-V1-DNS 1970/01/01 02:31:31.287248 4.705116 tcp 10.0.2.110 49194 -> 61.158.145.141 80 SPA_* 0 0 261 260350 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:31:33.116002 4.921152 tcp 10.0.2.110 49192 -> 61.158.145.140 80 PA_PA 0 0 126 115691 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:31:36.385257 4.916579 tcp 10.0.2.110 49194 -> 61.158.145.141 80 PA_PA 0 0 302 345701 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:31:37.290671 0.000118 udp 10.0.2.110 62624 -> 239.255.255.250 1900 REQ 0 1 142 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:31:37.290789 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.110 0x0000 TXD 192 1 170 flow=Background 1970/01/01 02:31:37.290997 0.000000 udp 10.0.2.110 1900 -> 239.255.255.250 1900 REQ 0 1 142 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:31:38.340417 4.979281 tcp 10.0.2.110 49192 -> 61.158.145.140 80 PA_PA 0 0 80 70595 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:31:40.504060 0.462273 tcp 10.0.2.110 49191 -> 61.147.82.182 80 PA_PA 0 0 4 765 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:31:41.739121 3.430717 tcp 10.0.2.110 49194 -> 61.158.145.141 80 A_PA 0 0 94 96300 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:31:43.663243 1.764198 tcp 10.0.2.110 49192 -> 61.158.145.140 80 PA_PA 0 0 50 44869 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:31:49.124781 4.863763 tcp 10.0.2.110 49192 -> 61.158.145.140 80 PA_PA 0 0 132 104425 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:31:49.124930 4.801836 tcp 10.0.2.110 49194 -> 61.158.145.141 80 PA_PA 0 0 501 581399 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:31:49.125609 0.002864 tcp 10.0.2.110 49193 -> 61.147.82.180 80 RA_FA 0 0 4 216 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:31:49.148760 0.000061 udp 10.0.2.110 62624 -> 239.255.255.250 1900 REQ 0 1 142 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:31:49.148821 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.110 0x0000 TXD 192 1 170 flow=Background 1970/01/01 02:31:49.149001 0.000000 udp 10.0.2.110 1900 -> 239.255.255.250 1900 REQ 0 1 142 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:31:51.394300 0.535730 tcp 10.0.2.110 49191 -> 61.147.82.182 80 PA_PA 0 0 4 775 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:31:54.332476 4.982857 tcp 10.0.2.110 49192 -> 61.158.145.140 80 PA_PA 0 0 109 82485 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:31:54.355021 4.640006 tcp 10.0.2.110 49194 -> 61.158.145.141 80 A_PA 0 0 562 642852 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:31:59.422757 4.779997 tcp 10.0.2.110 49194 -> 61.158.145.141 80 A_PA 0 0 427 424154 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:31:59.694461 4.966238 tcp 10.0.2.110 49192 -> 61.158.145.140 80 PA_PA 0 0 128 104750 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:32:02.962690 0.000077 udp 10.0.2.110 62624 -> 239.255.255.250 1900 REQ 0 1 142 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:32:02.962767 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.110 0x0000 TXD 192 1 170 flow=Background 1970/01/01 02:32:02.962976 0.000000 udp 10.0.2.110 1900 -> 239.255.255.250 1900 REQ 0 1 142 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:32:04.662701 4.710873 tcp 10.0.2.110 49194 -> 61.158.145.141 80 A_PA 0 0 310 309236 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:32:05.049070 4.906315 tcp 10.0.2.110 49192 -> 61.158.145.140 80 PA_PA 0 0 126 107472 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:32:09.809968 3.092468 tcp 10.0.2.110 49194 -> 61.158.145.141 80 PA_PA 0 0 156 157727 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:32:10.342344 4.974297 tcp 10.0.2.110 49192 -> 61.158.145.140 80 FPA_* 0 0 126 109170 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:32:11.219813 4.989359 tcp 10.0.2.110 49191 -> 61.147.82.182 80 PA_PA 0 0 32 6267 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:32:14.274131 4.972001 tcp 10.0.2.110 49195 -> 61.158.145.140 80 SPA_* 0 0 102 87555 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:32:15.318492 4.757225 tcp 10.0.2.110 49196 -> 61.158.145.140 80 SPA_* 0 0 93 80088 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:32:16.405635 3.230875 tcp 10.0.2.110 49191 -> 61.147.82.182 80 PA_PA 0 0 21 3943 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:32:18.763903 0.000065 udp 10.0.2.110 62624 -> 239.255.255.250 1900 REQ 0 1 142 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:32:18.763968 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.110 0x0000 TXD 192 1 170 flow=Background 1970/01/01 02:32:18.764220 0.000000 udp 10.0.2.110 1900 -> 239.255.255.250 1900 REQ 0 1 142 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:32:19.704451 4.884829 tcp 10.0.2.110 49195 -> 61.158.145.140 80 PA_PA 0 0 28 24157 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:32:23.769609 4.742020 tcp 10.0.2.110 49196 -> 61.158.145.140 80 PA_PA 0 0 110 98591 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:32:23.773965 4.931718 tcp 10.0.2.110 49191 -> 61.147.82.182 80 PA_PA 0 0 28 5445 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:32:24.973743 4.593628 tcp 10.0.2.110 49195 -> 61.158.145.140 80 PA_PA 0 0 90 84224 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:32:27.708314 2.113304 tcp 10.0.2.110 49194 -> 61.158.145.141 80 RA_FA 0 0 3 162 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:32:28.894243 4.909393 tcp 10.0.2.110 49196 -> 61.158.145.140 80 PA_PA 0 0 118 110181 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:32:28.930857 4.902853 tcp 10.0.2.110 49191 -> 61.147.82.182 80 PA_PA 0 0 28 5441 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:32:30.098398 4.866598 tcp 10.0.2.110 49195 -> 61.158.145.140 80 PA_PA 0 0 108 98075 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:32:34.050748 4.717906 tcp 10.0.2.110 49191 -> 61.147.82.182 80 PA_PA 0 0 28 5441 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:32:34.311654 4.823200 tcp 10.0.2.110 49196 -> 61.158.145.140 80 PA_PA 0 0 98 89521 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:32:35.348473 4.636886 tcp 10.0.2.110 49195 -> 61.158.145.140 80 PA_PA 0 0 98 91345 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:32:36.543782 0.000064 udp 10.0.2.110 62624 -> 239.255.255.250 1900 REQ 0 1 142 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:32:36.543846 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.110 0x0000 TXD 192 1 170 flow=Background 1970/01/01 02:32:36.544102 0.000000 udp 10.0.2.110 1900 -> 239.255.255.250 1900 REQ 0 1 142 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:32:39.597273 4.947172 tcp 10.0.2.110 49191 -> 61.147.82.182 80 PA_PA 0 0 28 5445 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:32:39.597326 4.842409 tcp 10.0.2.110 49196 -> 61.158.145.140 80 PA_PA 0 0 116 105421 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:32:40.363553 4.841226 tcp 10.0.2.110 49195 -> 61.158.145.140 80 PA_PA 0 0 100 87590 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:32:44.734427 4.246700 tcp 10.0.2.110 49191 -> 61.147.82.182 80 PA_PA 0 0 12 2738 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:32:44.822650 4.997147 tcp 10.0.2.110 49196 -> 61.158.145.140 80 PA_PA 0 0 40 39597 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:32:45.580325 4.969633 tcp 10.0.2.110 49195 -> 61.158.145.140 80 PA_PA 0 0 48 44160 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:32:49.827776 4.969438 tcp 10.0.2.110 49196 -> 61.158.145.140 80 PA_PA 0 0 108 96254 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:32:50.017057 4.891811 tcp 10.0.2.110 49191 -> 61.147.82.182 80 PA_PA 0 0 28 5445 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:32:50.939552 4.995389 tcp 10.0.2.110 49195 -> 61.158.145.140 80 PA_PA 0 0 110 101068 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:32:54.910369 4.837630 tcp 10.0.2.110 49196 -> 61.158.145.140 80 PA_PA 0 0 102 89380 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:32:55.106406 2.707302 tcp 10.0.2.110 49191 -> 61.147.82.182 80 PA_PA 0 0 13 2343 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:32:56.202437 2.067705 tcp 10.0.2.110 49197 -> 61.158.145.141 80 SPA_* 0 0 11 2007 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:32:56.217799 4.668502 tcp 10.0.2.110 49195 -> 61.158.145.140 80 PA_PA 0 0 196 196231 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:32:56.750573 0.000068 udp 10.0.2.110 62624 -> 239.255.255.250 1900 REQ 0 1 142 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:32:56.750641 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.110 0x0000 TXD 192 1 170 flow=Background 1970/01/01 02:32:56.750907 0.000000 udp 10.0.2.110 1900 -> 239.255.255.250 1900 REQ 0 1 142 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:33:00.101434 4.513671 tcp 10.0.2.110 49196 -> 61.158.145.140 80 PA_PA 0 0 89 80077 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:33:01.236538 3.750282 tcp 10.0.2.110 49195 -> 61.158.145.140 80 PA_PA 0 0 72 65332 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:33:04.793475 1.383328 tcp 10.0.2.110 49191 -> 61.147.82.182 80 PA_PA 0 0 41 33081 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:33:06.186939 1.851413 udp 10.0.2.110 51304 <-> 8.8.8.8 53 CON 0 0 2 219 flow=From-Botnet-V1-DNS 1970/01/01 02:33:07.163515 0.848836 udp 10.0.2.110 51304 <-> 8.8.4.4 53 CON 0 0 2 219 flow=From-Botnet-V1-DNS 1970/01/01 02:33:08.012844 4.766975 tcp 10.0.2.110 49198 -> 61.158.145.141 80 SPA_* 0 0 270 284017 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:33:08.038352 0.000000 icmp 10.0.2.110 0x0303 -> 8.8.8.8 0x68c8 URP 0 1 174 flow=Background 1970/01/01 02:33:13.063877 1.471080 tcp 10.0.2.110 49197 -> 61.158.145.141 80 RA_FA 0 0 3 162 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:33:13.213195 4.976779 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 560 649983 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:33:18.485277 0.000070 udp 10.0.2.110 62624 -> 239.255.255.250 1900 REQ 0 1 142 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:33:18.485347 0.000000 icmp 10.0.2.2 0x000b -> 10.0.2.110 0x0000 TXD 192 1 170 flow=Background 1970/01/01 02:33:18.485520 0.000000 udp 10.0.2.110 1900 -> 239.255.255.250 1900 REQ 0 1 142 flow=From-Botnet-V1-UDP-Attempt 1970/01/01 02:33:18.620824 3.835897 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 384 435000 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:33:19.417078 3.040067 tcp 10.0.2.110 49196 -> 61.158.145.140 80 RA_FA 0 0 3 162 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:33:19.781613 2.675701 tcp 10.0.2.110 49195 -> 61.158.145.140 80 RA_FA 0 0 3 162 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:33:32.532148 4.917127 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 320 357188 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:33:37.868858 4.749828 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 460 528375 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:33:43.044631 4.856323 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 786 934275 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:33:48.327384 4.613550 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 801 972860 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:33:53.370907 4.847078 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 456 538522 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:33:58.647756 4.611619 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 451 518822 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:34:03.683225 4.877417 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 644 781069 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:34:05.855441 0.000000 tcp 10.0.2.110 49191 -> 61.147.82.182 80 RA_ 0 0 1 54 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:34:08.897235 4.576972 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 516 607821 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:34:13.909693 4.682654 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 560 654861 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:34:19.022748 4.551625 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 530 617493 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:34:25.844142 4.875774 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 926 1103438 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:34:31.142998 4.854995 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 1358 1630151 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:34:36.416032 4.661195 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 1009 1193393 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:34:41.505509 4.427977 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 1400 1709215 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:34:46.560885 4.976030 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 997 1191599 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:34:47.978947 2.975030 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 INT 0 3 441 flow=Background 1970/01/01 02:34:51.967535 4.902701 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 865 1040408 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:34:54.926944 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 02:34:57.299541 4.817822 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 835 1007826 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:35:02.542338 4.662614 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 383 443692 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:35:02.829331 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 02:35:07.609673 4.649129 tcp 10.0.2.110 49198 -> 61.158.145.141 80 A_PA 0 0 194 214644 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:35:12.683594 4.736290 tcp 10.0.2.110 49198 -> 61.158.145.141 80 A_PA 0 0 310 335300 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:35:17.828509 4.808746 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 550 632734 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:35:18.621052 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 02:35:23.071974 4.815997 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 829 973989 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:35:28.282118 0.708410 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 44 45286 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:35:39.812592 4.741368 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 941 1107646 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:35:44.989689 4.778171 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 655 760968 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:35:50.177064 4.800011 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 1182 1402942 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:35:50.253466 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 02:35:55.405319 4.655222 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 792 948997 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:36:01.304148 4.870883 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 680 805310 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:36:06.606673 4.997765 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 415 477930 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:36:12.021555 4.658533 tcp 10.0.2.110 49198 -> 61.158.145.141 80 A_PA 0 0 536 602352 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:36:17.105388 4.533675 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 488 570440 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:36:30.109109 4.729652 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 827 974684 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:36:35.267437 4.743225 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 910 1067041 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:36:40.427289 4.685792 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 305 355412 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:36:45.527827 4.988160 tcp 10.0.2.110 49198 -> 61.158.145.141 80 A_PA 0 0 429 443086 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:36:50.945534 4.684197 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 350 372981 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:36:56.062414 4.807954 tcp 10.0.2.110 49198 -> 61.158.145.141 80 A_PA 0 0 421 474510 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:37:01.261251 4.845458 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 659 742068 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:37:06.530371 4.766485 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 1034 1211174 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:37:11.726638 4.574070 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 337 401163 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:37:16.736936 4.726724 tcp 10.0.2.110 49198 -> 61.158.145.141 80 A_PA 0 0 473 526550 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:37:21.896852 4.900635 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 766 900884 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:37:27.151894 4.894737 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 290 333790 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:37:32.478534 4.607240 tcp 10.0.2.110 49198 -> 61.158.145.141 80 A_PA 0 0 536 615384 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:37:37.506246 4.901306 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 315 372260 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:37:42.829423 4.639270 tcp 10.0.2.110 49198 -> 61.158.145.141 80 A_PA 0 0 498 546724 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:37:48.317409 4.718700 tcp 10.0.2.110 49198 -> 61.158.145.141 80 A_PA 0 0 234 241420 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:37:53.464507 4.707363 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 261 274778 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:37:58.606838 4.933750 tcp 10.0.2.110 49198 -> 61.158.145.141 80 A_PA 0 0 443 490150 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:38:03.632278 4.814981 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 715 786019 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:38:08.837647 4.810995 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 1011 1167953 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:38:14.067954 4.835953 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 885 1078508 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:38:19.346363 4.906418 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 702 829153 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:38:24.681805 4.895334 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 476 578211 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:38:30.008415 4.743655 tcp 10.0.2.110 49198 -> 61.158.145.141 80 A_PA 0 0 446 480204 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:38:35.137587 4.950606 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 961 1128828 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:38:40.508875 3.118613 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 940 1125125 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:38:47.072556 4.706113 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 345 385067 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:38:52.211569 4.779435 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 659 772966 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:38:57.424474 4.883412 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 1305 1561360 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:39:02.720049 0.886263 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 256 307254 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:39:15.175702 4.708269 tcp 10.0.2.110 49198 -> 61.158.145.141 80 A_PA 0 0 415 464050 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:39:20.294578 4.978873 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 280 310951 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:39:25.331697 4.634682 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 654 791481 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:39:30.388276 4.897323 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 679 794249 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:39:35.694607 2.954709 tcp 10.0.2.110 49198 -> 61.158.145.141 80 A_PA 0 0 189 207106 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:39:41.956480 4.706969 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 1172 1392116 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:39:47.085777 4.604647 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 502 579474 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:39:52.118545 4.617171 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 775 892883 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:39:57.156742 4.990001 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 789 939627 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:40:02.560141 1.293418 tcp 10.0.2.110 49198 -> 61.158.145.141 80 A_PA 0 0 226 274264 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:40:11.274535 4.793256 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 442 505365 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:40:16.505157 4.917154 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 377 431622 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:40:21.824234 4.800798 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 982 1173212 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:40:27.017982 4.586116 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 655 783141 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:40:32.038863 4.340146 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 514 612319 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:40:38.493905 4.785317 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 770 909098 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:40:43.712446 4.606803 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 695 818854 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:40:48.737894 4.910187 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 935 1098518 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:40:54.078857 4.944180 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 695 796976 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:40:59.458143 4.899933 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 811 950515 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:41:04.776262 4.785226 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 964 1150096 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:41:09.982698 4.635976 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 1251 1521832 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:41:15.057397 4.965228 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 1979 2386887 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:41:20.442758 3.644219 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 1527 1904857 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:41:25.677085 4.798495 tcp 10.0.2.110 49198 -> 61.158.145.141 80 PA_PA 0 0 578 682905 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:41:30.897960 0.807128 tcp 10.0.2.110 49198 -> 61.158.145.141 80 FA_F* 0 0 236 271896 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:41:32.437672 4.798437 tcp 10.0.2.110 49199 -> 61.158.145.141 80 SPA_* 0 0 247 252367 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:41:37.651907 4.022938 tcp 10.0.2.110 49199 -> 61.158.145.141 80 PA_PA 0 0 642 725503 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:41:43.428089 4.675674 tcp 10.0.2.110 49199 -> 61.158.145.141 80 PA_PA 0 0 994 1166214 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:41:48.549809 4.989489 tcp 10.0.2.110 49199 -> 61.158.145.141 80 PA_PA 0 0 856 1015181 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:41:53.975262 4.966076 tcp 10.0.2.110 49199 -> 61.158.145.141 80 PA_PA 0 0 794 956599 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:41:59.379528 3.033206 tcp 10.0.2.110 49199 -> 61.158.145.141 80 A_PA 0 0 608 714339 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:42:03.040349 2.960630 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 INT 0 3 441 flow=Background 1970/01/01 02:42:06.714895 4.801241 tcp 10.0.2.110 49199 -> 61.158.145.141 80 PA_PA 0 0 410 463875 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:42:09.954796 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 02:42:11.958811 4.922613 tcp 10.0.2.110 49199 -> 61.158.145.141 80 PA_PA 0 0 812 967227 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:42:18.118851 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 02:42:18.118886 4.747594 tcp 10.0.2.110 49199 -> 61.158.145.141 80 PA_PA 0 0 850 997502 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:42:23.302146 4.822969 tcp 10.0.2.110 49199 -> 61.158.145.141 80 PA_PA 0 0 1173 1383351 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:42:28.544836 4.939116 tcp 10.0.2.110 49199 -> 61.158.145.141 80 PA_PA 0 0 940 1135571 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:42:33.924130 4.780746 tcp 10.0.2.110 49199 -> 61.158.145.141 80 A_PA 0 0 637 719302 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:42:33.944374 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 02:42:39.133813 4.588933 tcp 10.0.2.110 49199 -> 61.158.145.141 80 PA_PA 0 0 714 844850 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:42:44.144564 4.726474 tcp 10.0.2.110 49199 -> 61.158.145.141 80 PA_PA 0 0 1194 1415494 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:42:49.301947 4.735464 tcp 10.0.2.110 49199 -> 61.158.145.141 80 PA_PA 0 0 1016 1228741 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:42:54.469342 4.852440 tcp 10.0.2.110 49199 -> 61.158.145.141 80 PA_PA 0 0 1328 1600572 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:42:59.738861 4.944286 tcp 10.0.2.110 49199 -> 61.158.145.141 80 PA_PA 0 0 1198 1420701 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:43:05.107917 4.892361 tcp 10.0.2.110 49199 -> 61.158.145.141 80 PA_PA 0 0 1495 1832444 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:43:05.581039 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 02:43:10.426405 4.777897 tcp 10.0.2.110 49199 -> 61.158.145.141 80 A_PA 0 0 148 152792 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:43:15.650906 4.707737 tcp 10.0.2.110 49199 -> 61.158.145.141 80 A_PA 0 0 358 433376 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:43:20.771735 4.923956 tcp 10.0.2.110 49199 -> 61.158.145.141 80 PA_PA 0 0 470 546298 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:43:27.324211 4.788425 tcp 10.0.2.110 49199 -> 61.158.145.141 80 A_PA 0 0 476 527964 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:43:32.502227 4.892511 tcp 10.0.2.110 49199 -> 61.158.145.141 80 PA_PA 0 0 360 398312 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:43:37.826959 4.689009 tcp 10.0.2.110 49199 -> 61.158.145.141 80 A_PA 0 0 590 696492 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:43:42.939663 4.882264 tcp 10.0.2.110 49199 -> 61.158.145.141 80 PA_PA 0 0 354 411152 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:43:48.255764 4.726268 tcp 10.0.2.110 49199 -> 61.158.145.141 80 A_PA 0 0 493 539214 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:43:53.402119 1.298515 tcp 10.0.2.110 49199 -> 61.158.145.141 80 A_PA 0 0 261 300567 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:43:55.253330 1.513520 tcp 10.0.2.110 49200 -> 61.147.82.182 80 SPA_* 0 0 38 20891 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:43:56.564936 4.822909 tcp 10.0.2.110 49201 -> 61.158.145.140 80 SPA_* 0 0 124 102462 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:44:01.731210 4.796528 tcp 10.0.2.110 49201 -> 61.158.145.140 80 PA_PA 0 0 145 128464 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:44:06.870610 4.873157 tcp 10.0.2.110 49201 -> 61.158.145.140 80 PA_PA 0 0 161 141735 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:44:08.402082 1.252206 tcp 10.0.2.110 49199 -> 61.158.145.141 80 RA_FA 0 0 3 162 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:44:12.086877 4.750271 tcp 10.0.2.110 49201 -> 61.158.145.140 80 PA_PA 0 0 130 120144 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:44:17.180242 3.474509 tcp 10.0.2.110 49201 -> 61.158.145.140 80 PA_PA 0 0 117 103156 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:44:48.087713 0.001996 tcp 10.0.2.110 49201 -> 61.158.145.140 80 RA_F* 0 0 24 18158 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:44:48.093757 4.232486 tcp 10.0.2.110 49202 -> 61.158.145.140 80 SPA_* 0 0 116 103062 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:44:54.772852 4.813931 tcp 10.0.2.110 49202 -> 61.158.145.140 80 PA_PA 0 0 144 126590 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:44:56.561040 3.404218 tcp 10.0.2.110 49200 -> 61.147.82.182 80 RA_FA 0 0 3 162 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:44:59.963930 3.424033 tcp 10.0.2.110 49202 -> 61.158.145.140 80 PA_PA 0 0 108 103158 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:45:18.387503 0.000145 tcp 10.0.2.110 49202 -> 61.158.145.140 80 A_FA 0 0 2 108 flow=From-Botnet-V1-TCP-Established 1970/01/01 02:49:05.200649 2.957118 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 INT 0 3 441 flow=Background 1970/01/01 02:49:12.113313 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 02:49:25.987224 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 02:49:42.256577 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 02:50:13.857394 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 02:56:13.080025 2.985272 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 02:56:20.007542 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 02:56:27.951099 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 02:56:43.739788 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 02:57:15.303485 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 03:03:14.516548 3.011082 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 03:03:21.482439 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 03:03:29.379336 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 03:03:45.164512 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 03:04:16.745466 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 03:10:15.951538 2.961506 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 03:10:23.014536 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 03:10:30.907160 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 03:10:46.720155 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 03:11:18.319762 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 03:17:18.460171 3.001392 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 03:17:25.467703 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 03:17:33.468991 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 03:17:49.472162 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 03:18:21.497828 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 03:24:25.503861 3.002812 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 03:24:32.511299 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 03:24:40.512772 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 03:24:56.515628 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 03:25:28.521526 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 03:31:07.101079 0.000085 arp 10.0.2.110 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 03:31:07.101252 0.718871 tcp 10.0.2.110 49203 -> 61.147.82.182 80 SPA_* 0 0 7 965 flow=From-Botnet-V1-TCP-Established 1970/01/01 03:31:07.101400 0.718790 tcp 10.0.2.110 49204 -> 61.147.82.182 80 SPA_* 0 0 7 940 flow=From-Botnet-V1-TCP-Established 1970/01/01 03:31:07.110018 0.719904 tcp 10.0.2.110 49205 -> 61.147.82.182 80 SPA_* 0 0 7 938 flow=From-Botnet-V1-TCP-Established 1970/01/01 03:31:07.618041 0.000071 tcp 10.0.2.110 49202 61.158.145.140 80 RA_ 0 0 2 108 flow=Background 1970/01/01 03:31:07.890665 0.951204 udp 10.0.2.110 50231 <-> 8.8.8.8 53 CON 0 0 2 222 flow=From-Botnet-V1-DNS 1970/01/01 03:31:08.954256 4.917750 tcp 10.0.2.110 49206 -> 61.158.145.140 80 SPA_* 0 0 286 293577 flow=From-Botnet-V1-TCP-Established 1970/01/01 03:31:08.954432 0.998250 tcp 10.0.2.110 49207 -> 61.158.145.140 80 SPA_* 0 0 10 3771 flow=From-Botnet-V1-TCP-Established 1970/01/01 03:31:08.954593 0.808423 tcp 10.0.2.110 49208 -> 61.158.145.140 80 SPA_* 0 0 8 2505 flow=From-Botnet-V1-TCP-Established 1970/01/01 03:31:14.281649 0.000840 tcp 10.0.2.110 49206 -> 61.158.145.140 80 A_PA 0 0 30 34902 flow=From-Botnet-V1-TCP-Established 1970/01/01 03:31:21.940168 0.720446 tcp 10.0.2.110 49203 -> 61.147.82.182 80 PA_PA 0 0 8 4706 flow=From-Botnet-V1-TCP-Established 1970/01/01 03:31:22.459412 0.760428 udp 10.0.2.110 55620 <-> 8.8.8.8 53 CON 0 0 2 225 flow=From-Botnet-V1-DNS 1970/01/01 03:31:23.220261 4.941149 tcp 10.0.2.110 49209 -> 61.158.145.141 80 SPA_* 0 0 38 30392 flow=From-Botnet-V1-TCP-Established 1970/01/01 03:31:24.759273 3.399141 tcp 10.0.2.110 49207 -> 61.158.145.140 80 RA_FA 0 0 3 162 flow=From-Botnet-V1-TCP-Established 1970/01/01 03:31:24.759366 3.399177 tcp 10.0.2.110 49208 -> 61.158.145.140 80 RA_FA 0 0 3 162 flow=From-Botnet-V1-TCP-Established 1970/01/01 03:31:26.818561 1.340086 tcp 10.0.2.110 49206 -> 61.158.145.140 80 RA_FA 0 0 3 162 flow=From-Botnet-V1-TCP-Established 1970/01/01 03:31:28.614907 1.401649 tcp 10.0.2.110 49209 -> 61.158.145.141 80 PA_PA 0 0 40 38519 flow=From-Botnet-V1-TCP-Established 1970/01/01 03:31:32.648191 3.031642 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 03:31:33.860953 2.240534 tcp 10.0.2.110 49209 -> 61.158.145.141 80 PA_PA 0 0 45 41027 flow=From-Botnet-V1-TCP-Established 1970/01/01 03:31:39.685836 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 03:31:45.110998 1.841883 tcp 10.0.2.110 49209 -> 61.158.145.141 80 PA_PA 0 0 40 36264 flow=From-Botnet-V1-TCP-Established 1970/01/01 03:31:47.698202 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 03:31:54.078357 2.323803 tcp 10.0.2.110 49209 -> 61.158.145.141 80 PA_PA 0 0 51 46669 flow=From-Botnet-V1-TCP-Established 1970/01/01 03:31:56.570688 0.267072 tcp 10.0.2.110 49204 -> 61.147.82.182 80 PA_PA 0 0 5 2131 flow=From-Botnet-V1-TCP-Established 1970/01/01 03:31:56.843729 0.768496 udp 10.0.2.110 64120 <-> 8.8.8.8 53 CON 0 0 2 219 flow=From-Botnet-V1-DNS 1970/01/01 03:31:57.612679 4.820463 tcp 10.0.2.110 49210 -> 61.158.145.141 80 SPA_* 0 0 212 212830 flow=From-Botnet-V1-TCP-Established 1970/01/01 03:32:02.908292 0.465420 tcp 10.0.2.110 49210 -> 61.158.145.141 80 A_PA 0 0 44 49416 flow=From-Botnet-V1-TCP-Established 1970/01/01 03:32:03.699913 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 03:32:03.827504 0.663436 tcp 10.0.2.110 49205 -> 61.147.82.182 80 FPA_* 0 0 7 925 flow=From-Botnet-V1-TCP-Established 1970/01/01 03:32:04.240805 0.795992 tcp 10.0.2.110 49203 -> 61.147.82.182 80 PA_PA 0 0 29 22305 flow=From-Botnet-V1-TCP-Established 1970/01/01 03:32:05.040394 4.676897 tcp 10.0.2.110 49209 -> 61.158.145.141 80 PA_PA 0 0 102 88074 flow=From-Botnet-V1-TCP-Established 1970/01/01 03:32:10.184109 4.695347 tcp 10.0.2.110 49209 -> 61.158.145.141 80 PA_PA 0 0 120 111477 flow=From-Botnet-V1-TCP-Established 1970/01/01 03:32:15.340446 4.713554 tcp 10.0.2.110 49209 -> 61.158.145.141 80 PA_PA 0 0 122 115342 flow=From-Botnet-V1-TCP-Established 1970/01/01 03:32:17.431241 4.960652 tcp 10.0.2.110 49210 -> 61.158.145.141 80 RA_FA 0 0 3 162 flow=From-Botnet-V1-TCP-Established 1970/01/01 03:32:20.516762 4.731588 tcp 10.0.2.110 49209 -> 61.158.145.141 80 PA_PA 0 0 119 112237 flow=From-Botnet-V1-TCP-Established 1970/01/01 03:32:25.708840 4.677722 tcp 10.0.2.110 49209 -> 61.158.145.141 80 PA_PA 0 0 118 114724 flow=From-Botnet-V1-TCP-Established 1970/01/01 03:32:30.848796 4.707915 tcp 10.0.2.110 49209 -> 61.158.145.141 80 PA_PA 0 0 121 109131 flow=From-Botnet-V1-TCP-Established 1970/01/01 03:32:35.708307 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 03:32:36.012240 4.661238 tcp 10.0.2.110 49209 -> 61.158.145.141 80 PA_PA 0 0 116 108327 flow=From-Botnet-V1-TCP-Established 1970/01/01 03:32:41.137610 1.410179 tcp 10.0.2.110 49209 -> 61.158.145.141 80 FPA_* 0 0 42 38106 flow=From-Botnet-V1-TCP-Established 1970/01/01 03:32:42.550049 4.651431 tcp 10.0.2.110 49211 -> 61.158.145.141 80 SPA_* 0 0 107 92943 flow=From-Botnet-V1-TCP-Established 1970/01/01 03:32:47.670510 4.834908 tcp 10.0.2.110 49211 -> 61.158.145.141 80 PA_PA 0 0 107 101813 flow=From-Botnet-V1-TCP-Established 1970/01/01 03:32:52.961710 2.928371 tcp 10.0.2.110 49211 -> 61.158.145.141 80 PA_PA 0 0 71 68090 flow=From-Botnet-V1-TCP-Established 1970/01/01 03:32:56.833532 0.000516 tcp 10.0.2.110 49204 -> 61.147.82.182 80 A_FA 0 0 2 108 flow=From-Botnet-V1-TCP-Established 1970/01/01 03:33:05.034303 0.000151 tcp 10.0.2.110 49203 -> 61.147.82.182 80 A_FA 0 0 2 108 flow=From-Botnet-V1-TCP-Established 1970/01/01 03:33:10.888907 0.000164 tcp 10.0.2.110 49211 -> 61.158.145.141 80 A_FA 0 0 2 108 flow=From-Botnet-V1-TCP-Established 1970/01/01 03:38:39.922477 3.001325 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 03:38:46.930007 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 03:38:54.931695 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 03:39:10.934588 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 03:39:42.940436 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 03:45:46.946129 3.001774 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 03:45:53.954056 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 03:46:01.955285 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 03:46:17.957943 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 03:46:49.964347 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 03:52:53.970629 3.001013 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 03:53:00.977786 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 03:53:08.979229 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 03:53:24.982087 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 03:53:56.988316 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 04:00:00.993722 3.001913 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 04:00:08.001485 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 04:00:16.004285 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 04:00:32.006675 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 04:01:04.011968 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 04:07:08.019497 3.000245 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 04:07:15.026033 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 04:07:23.027326 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 04:07:39.030042 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 04:08:11.037498 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 04:14:15.042119 3.001564 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 04:14:22.049990 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 04:14:30.051196 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 04:14:46.054302 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 04:15:18.060695 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 04:21:22.065972 3.001900 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 04:21:29.073763 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 04:21:37.075154 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 04:21:53.079701 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 04:22:25.084485 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 04:28:29.089800 3.002631 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 04:28:36.097512 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 04:28:44.099409 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 04:29:00.153056 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 04:29:32.158578 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 04:35:36.164891 3.001012 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 04:35:43.171951 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 04:35:51.172802 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 04:36:07.176570 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 04:36:39.182808 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 04:42:43.189490 3.000646 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 04:42:50.195795 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 04:42:58.236823 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 04:43:14.240078 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 04:43:46.247258 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 04:49:50.253321 3.001015 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 04:49:57.260846 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 04:50:05.260897 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 04:50:21.264158 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 04:50:53.270105 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 04:56:57.275979 3.001869 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 04:57:04.283615 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 04:57:12.284812 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 04:57:28.287977 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 04:58:00.294458 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 05:04:04.300061 3.001563 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 05:04:11.307551 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 05:04:19.308842 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 05:04:35.312402 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 05:05:07.317920 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 05:11:11.323856 3.001993 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 05:11:18.331937 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 05:11:26.332733 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 05:11:42.336079 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 05:12:14.341872 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 05:18:18.357342 3.002282 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 05:18:25.365460 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 05:18:33.366775 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 05:18:49.369798 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 05:19:21.375953 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 05:25:25.382848 3.060771 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 05:25:32.449505 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 05:25:40.451221 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 05:25:56.453761 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 05:26:28.459764 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 05:32:32.466498 3.001615 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 05:32:39.473164 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 05:32:47.475229 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 05:33:03.478165 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 05:33:35.483843 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 05:39:39.490855 3.000965 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 05:39:46.497417 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 05:39:54.498825 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 05:40:10.502255 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 05:40:42.568322 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 05:46:46.576025 2.999678 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 05:46:53.582225 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 05:47:01.582940 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 05:47:17.586089 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 05:47:49.593160 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 05:53:53.597554 3.002508 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 05:54:00.605186 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 05:54:08.606724 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 05:54:24.610199 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 05:54:56.615973 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 06:01:00.621847 3.001692 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 06:01:07.629855 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 06:01:15.631066 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 06:01:34.828849 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 06:02:06.834817 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 06:08:12.843310 3.001670 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 06:08:19.850777 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 06:08:27.852575 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 06:08:43.855072 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 06:09:15.861160 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 06:15:19.868186 3.031031 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 06:15:26.904871 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 06:15:34.906639 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 06:15:50.909179 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 06:16:22.915503 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 06:22:26.921580 3.001753 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 06:22:33.928933 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 06:22:41.930169 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 06:22:57.934297 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 06:23:29.939550 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 06:29:33.946065 3.000866 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 06:29:40.952872 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 06:29:48.954667 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 06:30:04.957466 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 06:30:36.963498 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 06:36:40.970132 3.001204 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 06:36:47.977628 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 06:36:55.978540 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 06:37:11.981196 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 06:37:43.988143 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 06:43:47.993155 3.002042 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 06:43:55.001048 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 06:44:03.002582 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 06:44:19.005025 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 06:44:51.011404 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 06:50:55.017305 3.001942 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 06:51:02.024932 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 06:51:10.025945 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 06:51:26.029142 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 06:51:58.035398 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 06:58:02.041830 3.001648 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 06:58:09.048836 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 06:58:17.050299 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 06:58:33.054395 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 06:59:05.059451 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 07:05:09.065533 3.001236 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 07:05:16.073017 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 07:05:24.074272 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 07:05:40.077042 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 07:06:12.083901 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 07:12:16.090975 3.000018 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 07:12:23.097173 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 07:12:31.098063 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 07:12:47.101026 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 07:13:19.106838 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 07:19:23.113682 3.001507 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 07:19:30.120658 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 07:19:38.121726 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 07:19:54.125541 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 07:20:26.131088 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 07:26:30.136982 3.002122 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 07:26:37.144776 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 07:26:45.146359 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 07:27:01.149957 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 07:27:33.155228 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 07:33:37.161037 3.001969 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 07:33:44.168587 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 07:33:52.170189 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 07:34:08.172851 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 07:34:40.178803 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 07:40:44.185503 3.001055 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 07:40:51.193655 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 07:40:59.193928 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 07:41:15.196706 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 07:41:47.204070 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 07:47:51.209865 3.000585 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 07:47:58.216186 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 07:48:06.217955 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 07:48:22.220791 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 07:48:54.227502 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 07:54:58.233365 3.001609 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 07:55:05.240511 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 07:55:13.242078 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 07:55:29.245099 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 07:56:01.250948 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 08:02:05.257104 3.001853 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 08:02:12.264567 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 08:02:20.266148 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 08:02:36.268753 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 08:03:08.274794 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 08:09:12.280662 3.001629 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 08:09:19.288665 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 08:09:27.289792 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 08:09:43.293189 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 08:10:15.329534 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 08:16:19.336237 3.000622 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 08:16:26.342162 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 08:16:34.344653 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 08:16:50.347057 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 08:17:22.353078 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 08:23:26.359361 3.000866 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 08:23:33.367492 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 08:23:42.019295 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 08:23:58.021571 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 08:24:30.027624 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 08:30:34.034016 3.001166 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 08:30:41.041170 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 08:30:49.044211 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 08:31:05.046072 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 08:31:37.052131 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 08:37:41.058553 3.000839 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 08:37:48.066059 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 08:37:56.066552 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 08:38:12.069646 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 08:38:44.076722 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 08:44:48.081213 3.002200 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 08:44:55.088869 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 08:45:03.090676 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 08:45:19.093511 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 08:45:51.099399 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 08:51:55.106174 3.001311 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 08:52:02.113076 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 08:52:10.114897 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 08:52:26.117386 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 08:52:58.123991 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 08:59:02.130000 3.007523 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 08:59:09.136741 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 08:59:17.138780 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 08:59:33.141718 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 09:00:05.147920 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 09:06:09.153252 3.001978 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 09:06:16.161058 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 09:06:24.162766 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 09:06:40.165570 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 09:07:12.172661 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 09:13:16.178560 3.000969 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 09:13:23.184953 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 09:13:31.186504 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 09:13:47.189621 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 09:14:19.195225 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 09:20:23.201984 3.000981 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 09:20:30.209264 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 09:20:38.210689 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 09:20:54.213232 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 09:21:26.219710 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 09:27:30.225455 3.001725 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 09:27:37.232789 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 09:27:45.234624 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 09:28:01.237936 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 09:28:33.243309 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 09:34:37.249053 3.002061 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 09:34:44.256922 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 09:34:52.328502 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 09:35:08.331203 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 09:35:40.337553 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 09:41:44.344763 3.711673 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 09:41:52.063019 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 09:42:00.063311 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 09:42:16.066139 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 09:42:48.073571 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 09:48:52.078556 3.001559 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 09:48:59.085922 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 09:49:07.087179 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 09:49:23.090548 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 09:49:55.096213 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 09:55:59.101860 3.001974 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 09:56:06.110069 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 09:56:14.111798 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 09:56:30.114291 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 09:57:02.120782 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 10:03:06.126405 3.002157 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 10:03:13.133946 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 10:03:21.135247 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 10:03:37.138212 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 10:04:09.144182 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 10:10:13.150860 3.001467 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 10:10:20.158014 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 10:10:28.159132 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 10:10:44.162520 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 10:11:16.169015 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 10:17:20.175531 3.000550 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 10:17:27.181880 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 10:17:35.183543 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 10:17:51.186549 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 10:18:23.192305 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 10:24:27.198353 3.001601 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 10:24:34.205447 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 10:24:42.207467 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 10:24:58.210224 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 10:25:30.216650 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 10:31:34.222206 3.182141 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 10:31:41.410910 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 10:31:49.411368 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 10:32:05.414448 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 10:32:37.421085 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 10:38:41.426307 3.002082 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 10:38:48.434136 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 10:38:56.435763 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 10:39:12.438427 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 10:39:44.444409 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 10:45:48.450057 3.002384 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 10:45:55.458105 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 10:46:03.459242 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 10:46:19.462503 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 10:46:51.468520 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 10:52:55.474183 3.002992 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 10:53:02.481918 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 10:53:10.483273 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 10:53:26.486182 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 10:53:58.492517 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 11:00:02.497982 3.002022 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 11:00:09.506243 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 11:00:17.507715 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 11:00:33.510627 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 11:01:05.517105 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 11:07:09.523018 3.000830 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 11:07:16.530256 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 11:07:24.531146 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 11:07:40.534646 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 11:08:12.540417 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 11:14:16.547712 3.000324 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 11:14:23.553658 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 11:14:31.554993 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 11:14:47.558446 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 11:15:19.564387 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 11:21:23.570413 3.001460 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 11:21:30.577873 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 11:21:38.579530 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 11:21:54.581951 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 11:22:26.588480 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 11:28:30.593885 3.001977 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 11:28:37.602061 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 11:28:45.602973 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 11:29:01.606483 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 11:29:33.612122 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 11:35:37.620598 2.999405 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 11:35:44.627015 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 11:35:52.627475 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 11:36:08.630230 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 11:36:40.636674 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 11:42:44.643233 3.000827 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 11:42:51.649935 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 11:42:59.651621 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 11:43:15.654183 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 11:43:47.660445 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 11:49:51.666267 3.001807 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 11:49:58.673747 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 11:50:06.675012 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 11:50:22.678141 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 11:50:55.114608 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 11:56:59.120381 3.002308 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 11:57:06.128311 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 11:57:14.130110 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 11:57:30.133044 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 11:58:02.139012 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 12:04:06.144486 3.001782 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 12:04:13.152507 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 12:04:21.153658 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 12:04:37.157690 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 12:05:09.162506 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 12:11:13.168328 3.002323 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 12:11:20.176215 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 12:11:28.177685 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 12:11:44.180360 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 12:12:16.186777 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 12:18:20.193944 3.000353 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 12:18:27.200170 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 12:18:35.201300 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 12:18:51.204723 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 12:19:23.211617 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 12:25:27.218102 3.000242 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 12:25:34.224147 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 12:25:42.225464 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 12:25:58.228274 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 12:26:30.234658 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 12:32:34.241316 3.000790 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 12:32:41.247680 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 12:32:49.249771 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 12:33:05.252454 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 12:33:37.258917 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 12:39:41.264517 3.071547 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 12:39:48.343126 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 12:39:56.344120 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 12:40:12.347505 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 12:40:44.352777 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 12:46:48.358234 3.002181 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 12:46:55.365974 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 12:47:03.367352 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 12:47:19.370363 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 12:47:51.376927 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 12:53:55.383718 3.000708 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 12:54:02.390956 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 12:54:10.391784 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 12:54:26.394749 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 12:54:58.401546 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 13:01:02.407540 3.000383 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 13:01:09.414242 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 13:01:17.415836 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 13:01:33.418288 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 13:02:05.424744 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 13:08:09.431501 3.071005 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 13:08:16.507759 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 13:08:24.509290 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 13:08:40.512877 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 13:09:12.518687 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 13:15:16.525108 3.000870 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 13:15:23.532433 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 13:15:31.533594 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 13:15:47.536974 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 13:16:19.542645 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 13:22:23.549102 3.001194 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 13:22:30.555913 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 13:22:38.557856 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 13:22:54.560641 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 13:23:26.606652 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 13:29:30.612863 3.001248 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 13:29:37.619922 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 13:29:45.622165 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 13:30:01.624309 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 13:30:33.630790 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 13:36:37.637516 3.000986 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 13:36:44.644686 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 13:36:52.645795 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 13:37:08.648865 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 13:37:40.655878 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 13:43:44.660562 3.001476 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 13:43:51.667733 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 13:43:59.669232 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 13:44:15.672189 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 13:44:47.678179 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 13:50:51.685400 3.000868 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 13:50:58.691986 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 13:51:06.693771 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 13:51:22.697317 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 13:51:54.702320 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 13:57:58.708387 3.002809 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 13:58:05.716114 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 13:58:13.717177 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 13:58:29.720580 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 13:59:01.726554 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 14:05:05.731857 3.002337 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 14:05:12.739512 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 14:05:20.741247 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 14:05:36.744789 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 14:06:08.751452 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 14:12:12.757224 3.000512 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 14:12:19.764004 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 14:12:27.765133 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 14:12:43.768185 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 14:13:15.774461 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 14:19:19.779882 3.002529 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 14:19:26.788006 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 14:19:34.789291 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 14:19:50.792294 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 14:20:22.798429 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 14:26:26.804612 3.001076 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 14:26:33.962187 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 14:26:41.963655 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 14:26:57.966335 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 14:27:29.972520 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 14:33:33.980080 3.000191 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 14:33:40.986788 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 14:33:48.987157 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 14:34:04.990461 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 14:34:36.997221 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 14:40:41.002939 3.001472 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 14:40:48.010243 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 14:40:56.041747 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 14:41:12.044847 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 14:41:44.051935 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 14:47:48.056398 3.002106 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 14:47:55.063765 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 14:48:03.065228 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 14:48:19.068382 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 14:48:51.075137 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 14:54:55.080453 3.001502 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 14:55:02.088355 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 14:55:10.089639 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 14:55:26.092626 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 14:55:58.098781 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 15:02:02.104253 3.001909 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 15:02:09.111974 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 15:02:17.113038 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 15:02:33.116739 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 15:03:05.122184 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 15:09:09.128582 3.001548 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 15:09:16.136043 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 15:09:24.137839 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 15:09:40.140291 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 15:10:12.146240 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 15:16:16.155321 2.998873 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 15:16:23.161105 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 15:16:31.161156 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 15:16:47.164296 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 15:17:19.171458 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 15:23:23.176369 3.001574 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 15:23:30.183782 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 15:23:38.185218 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 15:23:54.188323 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 15:24:26.194166 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 15:30:30.200510 3.001621 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 15:30:37.207988 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 15:30:45.208989 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 15:31:01.213421 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 15:31:09.589266 0.000076 arp 10.0.2.110 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 15:31:09.589427 0.000068 tcp 10.0.2.110 49204 61.147.82.182 80 FA_R 0 0 2 108 flow=Background 1970/01/01 15:31:09.589552 0.000046 tcp 10.0.2.110 49203 61.147.82.182 80 FA_R 0 0 2 108 flow=Background 1970/01/01 15:31:09.590099 0.714997 tcp 10.0.2.110 49212 -> 61.147.82.182 80 SPA_* 0 0 7 829 flow=From-Botnet-V1-TCP-Established 1970/01/01 15:31:09.590273 0.714955 tcp 10.0.2.110 49213 -> 61.147.82.182 80 SPA_* 0 0 7 820 flow=From-Botnet-V1-TCP-Established 1970/01/01 15:31:09.590424 0.714769 tcp 10.0.2.110 49214 -> 61.147.82.182 80 SPA_* 0 0 7 831 flow=From-Botnet-V1-TCP-Established 1970/01/01 15:31:10.217552 0.000057 tcp 10.0.2.110 49211 61.158.145.141 80 RA_ 0 0 2 108 flow=Background 1970/01/01 15:31:33.228222 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 15:32:10.098737 0.000181 tcp 10.0.2.110 49212 -> 61.147.82.182 80 A_FA 0 0 2 108 flow=From-Botnet-V1-TCP-Established 1970/01/01 15:32:10.105046 0.000107 tcp 10.0.2.110 49214 -> 61.147.82.182 80 A_FA 0 0 2 108 flow=From-Botnet-V1-TCP-Established 1970/01/01 15:32:10.107524 0.000136 tcp 10.0.2.110 49213 -> 61.147.82.182 80 A_FA 0 0 2 108 flow=From-Botnet-V1-TCP-Established 1970/01/01 15:32:15.088159 0.000054 arp 10.0.2.110 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 15:37:37.234645 3.002106 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 15:37:44.242041 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 15:37:52.243039 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 15:38:08.246022 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 15:38:40.251902 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 15:44:44.259990 3.000053 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 15:44:51.265503 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 15:44:59.267465 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 15:45:15.269875 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 15:45:47.277103 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 15:51:51.283037 3.000941 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 15:51:58.289957 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 15:52:06.290904 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 15:52:22.294512 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 15:52:54.300240 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 15:58:58.306171 3.002074 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 15:59:05.313228 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 15:59:13.315405 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 15:59:29.317827 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 16:00:01.324235 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 16:06:05.330311 3.001384 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 16:06:12.337233 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 16:06:20.339311 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 16:06:36.341727 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 16:07:08.348465 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 16:13:12.354070 3.001831 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 16:13:19.361775 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 16:13:27.364506 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 16:13:43.366209 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 16:14:15.372138 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 16:20:19.378823 3.001336 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 16:20:26.386833 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 16:20:34.386791 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 16:20:50.389714 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 16:21:22.396507 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 16:27:26.402232 3.001526 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 16:27:33.409569 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 16:27:41.410616 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 16:27:57.413595 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 16:28:29.420042 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 16:34:33.425500 3.002351 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 16:34:40.433695 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 16:34:48.435005 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 16:35:04.438657 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 16:35:36.454299 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 16:41:40.461315 3.000658 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 16:41:47.467343 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 16:41:55.469218 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 16:42:11.471843 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 16:42:43.478625 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 16:48:47.484299 3.001147 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 16:48:54.491271 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 16:49:02.492851 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 16:49:18.496001 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 16:49:50.502067 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 16:55:54.507684 3.212796 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 16:56:01.726841 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 16:56:09.726786 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 16:56:25.730299 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 16:56:57.736856 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 17:03:01.741982 3.001535 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 17:03:08.749821 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 17:03:16.750943 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 17:03:32.754502 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 17:04:04.760244 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 17:10:08.766200 3.001270 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 17:10:15.773602 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 17:10:23.785219 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 17:10:39.788012 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 17:11:11.793800 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 17:17:15.800782 3.001246 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 17:17:22.808490 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 17:17:30.808812 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 17:17:46.812507 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 17:18:18.918576 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 17:24:22.924105 3.002427 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 17:24:29.931739 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 17:24:37.933097 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 17:24:53.936133 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 17:25:25.942307 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 17:31:29.947816 3.001957 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 17:31:36.955652 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 17:31:44.957040 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 17:32:00.960104 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 17:32:32.967188 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 17:38:36.972456 3.001277 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 17:38:43.979503 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 17:38:51.980723 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 17:39:07.984002 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 17:39:39.990366 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 17:45:43.995851 3.002194 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 17:45:51.003207 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 17:45:59.005041 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 17:46:15.007845 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 17:46:47.014323 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 17:52:51.020858 3.000515 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 17:52:58.027815 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 17:53:06.028757 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 17:53:22.032566 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 17:53:54.037753 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 17:59:58.044447 3.001148 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 18:00:05.051793 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 18:00:13.052883 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 18:00:29.056167 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 18:01:01.062232 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 18:07:05.069299 3.000025 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 18:07:12.076515 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 18:07:20.076598 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 18:07:36.080005 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 18:08:08.087477 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 18:14:12.093357 3.000036 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 18:14:19.099112 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 18:14:27.100849 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 18:14:43.104389 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 18:15:15.110195 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 18:21:19.115858 3.001930 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 18:21:26.123701 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 18:21:34.125083 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 18:21:50.127812 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 18:22:22.134022 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 18:28:26.139944 3.001611 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 18:28:33.147114 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 18:28:41.149226 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 18:28:57.152943 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 18:29:29.158050 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 18:35:33.163391 3.002002 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 18:35:40.171296 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 18:35:48.172906 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 18:36:04.175821 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 18:36:36.182413 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 18:42:40.188179 3.001501 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 18:42:47.195871 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 18:42:55.196465 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 18:43:11.199580 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 18:43:43.466529 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 18:49:47.473427 3.000156 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 18:49:54.479719 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 18:50:02.481091 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 18:50:18.485087 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 18:50:50.490032 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 18:56:54.496828 3.001870 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 18:57:01.503710 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 18:57:09.505020 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 18:57:25.507846 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 18:57:57.514439 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 19:04:01.519943 3.101671 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 19:04:08.628025 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 19:04:16.629072 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 19:04:32.631909 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 19:05:04.638232 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 19:11:08.645145 3.001049 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 19:11:15.651671 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 19:11:23.652932 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 19:11:39.656274 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 19:12:11.661953 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 19:18:15.668033 3.001941 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 19:18:22.675252 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 19:18:30.678397 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 19:18:46.680368 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 19:19:18.686513 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 19:25:22.692652 3.001141 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 19:25:29.701085 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 19:25:37.700791 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 19:25:53.703930 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 19:26:25.710817 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 19:32:29.715749 3.002341 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 19:32:36.723860 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 19:32:44.724781 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 19:33:00.728067 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 19:33:32.734128 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 19:39:36.740477 3.001486 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 19:39:43.747461 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 19:39:51.748694 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 19:40:07.753460 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 19:40:39.758226 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 19:46:43.764298 3.003235 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 19:46:50.771902 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 19:46:58.772650 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 19:47:14.775798 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 19:47:46.782266 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 19:53:50.788123 3.001592 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 19:53:57.795675 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 19:54:05.796569 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 19:54:21.799911 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 19:54:53.806845 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 20:00:57.812261 3.001754 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 20:01:04.819104 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 20:01:12.821009 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 20:01:28.824395 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 20:02:00.830323 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 20:08:04.835532 3.002347 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 20:08:11.843746 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 20:08:19.844924 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 20:08:35.847973 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 20:09:07.854122 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 20:15:11.859789 3.002088 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 20:15:18.867085 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 20:15:26.869026 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 20:15:42.872201 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 20:16:14.877761 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 20:22:18.884146 3.001240 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 20:22:25.890972 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 20:22:33.893198 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 20:22:49.895831 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 20:23:21.901655 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 20:29:25.909685 2.999783 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 20:29:32.916388 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 20:29:40.916404 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 20:29:56.919864 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 20:30:28.926676 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 20:36:32.932346 3.000863 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 20:36:39.938897 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 20:36:47.940552 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 20:37:03.943420 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 20:37:35.949821 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 20:43:39.955756 3.001808 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 20:43:46.962925 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 20:43:54.964447 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 20:44:10.967872 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 20:44:42.974019 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 20:50:46.979700 3.003388 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 20:50:53.987470 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 20:51:01.988831 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 20:51:17.991572 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 20:51:49.997741 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 20:57:54.004005 3.001623 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 20:58:01.010794 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 20:58:09.012485 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 20:58:25.015603 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 20:58:57.022366 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 21:05:01.028474 3.000492 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 21:05:08.034755 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 21:05:16.036746 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 21:05:32.039395 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 21:06:04.045625 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 21:12:08.052461 3.060870 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 21:12:15.119016 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 21:12:23.120709 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 21:12:39.123890 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 21:13:11.129335 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 21:19:15.135652 3.001973 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 21:19:22.142829 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 21:19:30.145073 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 21:19:46.153899 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 21:20:18.153953 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 21:26:22.159289 3.001738 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 21:26:29.167061 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 21:26:37.168749 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 21:26:53.171468 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 21:27:25.177244 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 21:33:29.184723 3.000462 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 21:33:36.192024 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 21:33:44.192642 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 21:34:00.195504 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 21:34:32.201972 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 21:40:36.207601 3.001624 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 21:40:43.214777 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 21:40:51.216428 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 21:41:07.219212 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 21:41:39.225628 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 21:47:43.231400 3.001471 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 21:47:50.238593 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 21:47:58.240349 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 21:48:14.243909 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 21:48:49.013353 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 21:54:53.020264 3.000838 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 21:55:00.027088 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 21:55:08.028038 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 21:55:24.031400 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 21:55:56.037661 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 22:02:00.042920 3.002166 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 22:02:07.051165 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 22:02:15.052785 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 22:02:31.826697 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 22:03:03.832302 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 22:09:07.839456 3.000826 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 22:09:14.846190 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 22:09:22.847666 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 22:09:38.851059 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 22:10:10.856466 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 22:16:14.862341 3.001987 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 22:16:21.869646 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 22:16:29.871378 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 22:16:45.874641 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 22:17:17.880808 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 22:23:21.886547 3.001784 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 22:23:28.895461 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 22:23:36.895706 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 22:23:52.898541 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 22:24:24.904982 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 22:30:28.911201 3.001089 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 22:30:35.917991 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 22:30:43.919421 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 22:30:59.921994 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 22:31:31.928120 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 22:37:35.934220 3.001755 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 22:37:42.941459 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 22:37:50.943618 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 22:38:06.946134 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 22:38:38.952820 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 22:44:42.958833 3.001678 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 22:44:49.965850 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 22:44:57.967255 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 22:45:13.970576 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 22:45:45.976690 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 22:51:49.982600 3.001461 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 22:51:56.989565 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 22:52:04.991474 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 22:52:20.994340 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 22:52:53.001094 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 22:58:57.007218 3.001062 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 22:59:04.014675 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 22:59:12.014956 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 22:59:28.017866 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 23:00:00.026208 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 23:01:23.675303 0.000086 arp 10.0.2.110 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/01 23:01:23.675489 0.277823 udp 10.0.2.110 64279 <-> 8.8.8.8 53 CON 0 0 2 164 flow=From-Botnet-V1-DNS 1970/01/01 23:01:24.101405 0.734709 tcp 10.0.2.110 49215 -> 61.147.82.180 80 SPA_* 0 0 7 1053 flow=From-Botnet-V1-TCP-Established 1970/01/01 23:01:24.642626 0.000055 tcp 10.0.2.110 49212 61.147.82.182 80 RA_ 0 0 2 108 flow=Background 1970/01/01 23:01:24.642795 0.000055 tcp 10.0.2.110 49214 61.147.82.182 80 RA_ 0 0 2 108 flow=Background 1970/01/01 23:01:24.642916 0.000031 tcp 10.0.2.110 49213 61.147.82.182 80 RA_ 0 0 2 108 flow=Background 1970/01/01 23:01:39.639572 0.000157 tcp 10.0.2.110 49215 -> 61.147.82.180 80 A_FA 0 0 2 108 flow=From-Botnet-V1-TCP-Established 1970/01/01 23:06:04.030008 3.001728 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 23:06:11.037982 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 23:06:19.038928 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 23:06:35.042064 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 23:07:07.048508 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 23:13:11.053787 3.002250 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 23:13:18.061594 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 23:13:26.062851 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 23:13:42.067115 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 23:14:14.072269 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 23:20:18.108737 3.001040 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 23:20:25.119607 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 23:20:33.116931 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 23:20:49.120257 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 23:21:21.126451 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 23:27:25.134251 2.999463 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 23:27:32.140210 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 23:27:40.141091 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 23:27:56.144291 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 23:28:28.151281 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 23:34:32.155590 3.002556 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 23:34:39.163269 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 23:34:47.164761 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 23:35:03.168326 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 23:35:35.174175 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 23:41:39.179940 3.012049 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 23:41:46.197853 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 23:41:54.199225 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 23:42:10.202165 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 23:42:42.208474 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 23:48:46.214461 3.001212 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 23:48:53.221780 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 23:49:01.223464 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 23:49:17.225733 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 23:49:49.238593 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 23:55:53.238699 3.000683 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/01 23:56:00.245844 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 23:56:08.246642 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 23:56:24.250361 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/01 23:56:56.256432 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 00:03:00.262266 3.001698 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 00:03:07.269181 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 00:03:15.271110 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 00:03:31.274149 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 00:04:03.279673 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 00:10:07.286360 3.001175 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 00:10:14.293215 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 00:10:22.294641 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 00:10:38.298491 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 00:11:10.303947 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 00:17:14.310490 3.001319 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 00:17:21.317562 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 00:17:29.318557 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 00:17:45.322150 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 00:18:17.327983 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 00:24:21.334131 3.001348 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 00:24:28.342282 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 00:24:36.342775 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 00:24:52.345902 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 00:25:24.353144 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 00:31:28.357532 3.002150 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 00:31:35.365461 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 00:31:43.366653 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 00:31:59.369839 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 00:32:31.375575 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 00:38:35.381433 3.001744 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 00:38:42.389481 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 00:38:50.391082 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 00:39:06.393898 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 00:39:38.400241 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 00:45:42.405185 3.002341 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 00:45:49.412914 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 00:45:57.414507 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 00:46:13.418032 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 00:46:45.423515 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 00:52:49.429819 3.002648 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 00:52:56.437381 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 00:53:04.438478 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 00:53:20.441783 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 00:53:52.448652 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 00:59:56.455270 3.000358 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 01:00:03.461816 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 01:00:11.462348 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 01:00:27.465819 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 01:00:59.471763 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 01:07:03.477475 3.001940 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 01:07:10.485103 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 01:07:18.486378 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 01:07:34.489406 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 01:08:06.495708 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 01:14:10.502476 3.141243 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 01:14:17.649485 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 01:14:25.650456 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 01:14:41.653732 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 01:15:13.660031 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 01:21:17.665511 3.010812 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 01:21:24.673146 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 01:21:32.674741 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 01:21:48.677993 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 01:22:20.684088 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 01:28:24.689456 3.001698 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 01:28:31.697176 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 01:28:39.698856 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 01:28:55.701420 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 01:29:27.709676 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 01:35:31.713945 3.001577 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 01:35:38.721478 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 01:35:46.722888 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 01:36:02.725989 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 01:36:34.732140 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 01:42:38.737596 3.001685 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 01:42:45.745019 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 01:42:53.747359 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 01:43:09.749760 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 01:43:41.755607 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 01:49:45.761562 3.002180 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 01:49:52.769147 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 01:50:00.770548 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 01:50:16.773666 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 01:50:48.779741 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 01:56:52.786495 3.090915 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 01:56:59.883170 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 01:57:07.885094 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 01:57:23.887408 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 01:57:55.893409 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 02:03:59.899811 3.001686 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 02:04:06.907373 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 02:04:14.908388 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 02:04:30.911718 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 02:05:02.918136 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 02:11:06.923688 3.002231 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 02:11:13.930956 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 02:11:21.932531 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 02:11:37.935695 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 02:12:09.941385 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 02:18:13.948174 3.001012 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 02:18:20.955002 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 02:18:28.956466 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 02:18:44.959882 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 02:19:16.967031 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 02:25:20.973110 3.000009 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 02:25:27.978909 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 02:25:35.980870 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 02:25:51.983680 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 02:26:23.989463 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 02:32:27.995382 3.001700 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 02:32:35.003769 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 02:32:43.004801 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 02:32:59.008015 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 02:33:31.103843 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 02:39:35.109644 3.001797 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 02:39:42.116904 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 02:39:50.119751 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 02:40:06.121917 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 02:40:38.127551 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 02:46:42.135447 3.000098 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 02:46:49.141938 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 02:46:57.142533 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 02:47:13.145892 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 02:47:45.152558 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 02:53:49.157823 3.001236 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 02:53:56.205702 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 02:54:04.206433 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 02:54:20.209815 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 02:54:52.216419 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 03:00:56.222689 3.000582 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 03:01:03.228816 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 03:01:11.230682 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 03:01:27.233554 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 03:01:59.239330 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 03:08:03.245215 3.001713 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 03:08:10.253104 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 03:08:18.254516 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 03:08:34.257221 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 03:09:06.263830 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 03:15:10.269830 3.001505 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 03:15:17.277013 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 03:15:25.278180 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 03:15:41.281908 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 03:16:13.287385 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 03:22:17.293614 3.091571 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 03:22:24.391734 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 03:22:32.392496 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 03:22:48.395547 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 03:23:20.402390 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 03:29:24.407878 3.001647 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 03:29:31.415226 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 03:29:39.416726 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 03:29:55.419299 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 03:30:27.425453 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 03:31:12.896419 0.000083 arp 10.0.2.110 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 03:31:12.896586 0.475284 udp 10.0.2.110 53675 <-> 8.8.8.8 53 CON 0 0 2 168 flow=From-Botnet-V1-DNS 1970/01/02 03:31:13.419695 0.712745 tcp 10.0.2.110 49216 -> 61.147.82.182 80 SPA_* 0 0 7 820 flow=From-Botnet-V1-TCP-Established 1970/01/02 03:31:13.419887 0.722465 tcp 10.0.2.110 49217 -> 61.147.82.182 80 SPA_* 0 0 7 829 flow=From-Botnet-V1-TCP-Established 1970/01/02 03:31:13.420046 0.712325 tcp 10.0.2.110 49218 -> 61.147.82.182 80 SPA_* 0 0 7 831 flow=From-Botnet-V1-TCP-Established 1970/01/02 03:31:14.078635 0.000057 tcp 10.0.2.110 49215 61.147.82.180 80 RA_ 0 0 2 108 flow=Background 1970/01/02 03:32:13.936123 0.000152 tcp 10.0.2.110 49218 -> 61.147.82.182 80 A_FA 0 0 2 108 flow=From-Botnet-V1-TCP-Established 1970/01/02 03:32:13.939577 0.000168 tcp 10.0.2.110 49216 -> 61.147.82.182 80 A_FA 0 0 2 108 flow=From-Botnet-V1-TCP-Established 1970/01/02 03:32:13.943897 0.000099 tcp 10.0.2.110 49217 -> 61.147.82.182 80 A_FA 0 0 2 108 flow=From-Botnet-V1-TCP-Established 1970/01/02 03:32:18.846086 0.000055 arp 10.0.2.110 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 03:36:31.442453 3.001092 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 INT 0 3 441 flow=Background 1970/01/02 03:36:38.448885 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 03:36:46.450584 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 03:37:02.454498 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 03:37:34.459527 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 03:43:38.465272 3.002135 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 03:43:45.472928 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 03:43:53.474741 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 03:44:09.477213 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 03:44:41.483803 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 03:50:45.491427 3.000305 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 03:50:52.496973 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 03:51:00.498530 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 03:51:16.501608 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 03:51:48.508332 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 03:57:52.514324 3.000727 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 03:57:59.520929 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 03:58:07.522308 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 03:58:23.525190 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 03:58:55.531199 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 04:04:59.537367 3.001886 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 04:05:06.545162 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 04:05:14.546657 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 04:05:30.549096 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 04:06:02.555672 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 04:12:06.561737 3.001837 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 04:12:13.568821 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 04:12:21.570631 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 04:12:37.573541 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 04:13:09.579312 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 04:19:13.585669 3.001190 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 04:19:20.593005 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 04:19:28.595545 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 04:19:44.597045 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 04:20:16.603212 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 04:26:20.609949 3.001182 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 04:26:27.618474 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 04:26:35.618199 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 04:26:51.621431 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 04:27:23.628616 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 04:33:27.633427 3.001910 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 04:33:34.640636 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 04:33:42.642158 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 04:33:58.645527 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 04:34:30.651074 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 04:40:34.657637 3.083531 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 04:40:41.745563 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 04:40:49.746404 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 04:41:05.749305 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 04:41:37.755336 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 04:47:41.761947 3.001108 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 04:47:48.769016 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 04:47:56.770498 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 04:48:12.773667 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 04:48:44.787488 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 04:54:48.786126 3.001130 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 04:54:55.792788 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 04:55:03.793973 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 04:55:19.797117 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 04:55:51.803272 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 05:01:55.809431 3.001867 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 05:02:02.816737 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 05:02:10.818533 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 05:02:26.821114 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 05:02:58.827500 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 05:09:02.833538 3.001301 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 05:09:09.841136 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 05:09:17.842539 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 05:09:33.845089 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 05:10:05.953094 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 05:16:09.958081 3.000731 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 05:16:16.964883 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 05:16:24.966462 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 05:16:40.969077 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 05:17:13.045290 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 05:23:17.050868 3.003331 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 05:23:24.058738 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 05:23:32.060440 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 05:23:48.063229 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 05:24:20.069470 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 05:30:24.077250 2.999765 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 05:30:31.082676 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 05:30:39.084435 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 05:30:55.087575 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 05:31:27.095000 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 05:37:31.101046 3.000049 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 05:37:38.106611 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 05:37:46.108404 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 05:38:02.111810 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 05:38:34.117677 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 05:44:38.124632 3.000134 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 05:44:45.131198 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 05:44:53.132683 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 05:45:09.135384 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 05:45:41.141125 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 05:51:45.146809 3.002365 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 05:51:52.155001 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 05:52:00.156251 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 05:52:16.159154 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 05:52:48.165445 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 05:58:52.172407 3.181329 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 05:58:59.439011 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 05:59:07.440709 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 05:59:23.444529 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 05:59:55.450104 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 06:05:59.455683 3.002199 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 06:06:06.463331 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 06:06:14.824828 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 06:06:30.828515 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 06:07:02.835513 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 06:13:06.840969 3.001111 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 06:13:13.848270 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 06:13:21.849029 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 06:13:37.852390 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 06:14:09.859068 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 06:20:13.864021 3.001394 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 06:20:20.871493 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 06:20:28.872869 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 06:20:44.876197 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 06:21:16.881932 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 06:27:21.829891 3.001255 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 06:27:28.857579 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 06:27:36.858040 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 06:27:52.861469 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 06:28:24.868679 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 06:34:28.873332 3.001405 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 06:34:35.881197 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 06:34:43.882466 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 06:34:59.885140 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 06:35:31.891543 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 06:41:35.897952 3.000782 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 06:41:42.904881 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 06:41:50.906372 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 06:42:06.908953 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 06:42:38.915636 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 06:48:42.922112 3.001170 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 06:48:49.928666 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 06:48:57.930075 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 06:49:13.933116 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 06:49:45.939464 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 06:55:49.945422 3.001391 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 06:55:57.182768 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 06:56:05.184529 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 06:56:21.187766 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 06:56:53.194003 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 07:02:57.199995 3.000949 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 07:03:04.208540 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 07:03:12.208541 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 07:03:28.211832 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 07:04:00.257754 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 07:10:04.265636 2.999893 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 07:10:11.271757 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 07:10:19.443113 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 07:10:35.446067 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 07:11:07.452021 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 07:17:11.457708 3.001752 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 07:17:18.465073 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 07:17:26.466673 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 07:17:42.469687 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 07:18:14.476074 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 07:24:18.481629 3.002006 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 07:24:25.489495 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 07:24:33.490813 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 07:24:49.493482 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 07:25:21.499945 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 07:31:25.506072 3.001320 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 07:31:32.512889 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 07:31:40.515324 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 07:31:56.517816 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 07:32:28.523978 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 07:38:32.532736 2.999027 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 07:38:39.537815 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 07:38:47.538481 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 07:39:03.541473 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 07:39:35.549102 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 07:45:39.553774 3.001506 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 07:45:46.561537 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 07:45:54.562857 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 07:46:10.565302 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 07:46:42.571795 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 07:52:46.577451 3.001739 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 07:52:53.584730 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 07:53:02.728816 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 07:53:18.730903 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 07:53:51.219038 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 07:59:55.224703 3.001043 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 08:00:02.231308 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 08:00:10.232759 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 08:00:26.235611 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 08:00:58.241888 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 08:07:02.248547 3.191118 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 08:07:09.445374 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 08:07:17.447300 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 08:07:33.449853 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 08:08:05.457007 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 08:14:09.462275 3.001284 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 08:14:16.469272 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 08:14:24.471291 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 08:14:40.474254 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 08:15:12.479928 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 08:21:16.486249 3.001772 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 08:21:23.494567 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 08:21:31.495019 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 08:21:47.498265 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 08:22:19.504286 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 08:28:23.509946 3.002219 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 08:28:30.517964 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 08:28:38.518776 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 08:28:54.522794 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 08:29:26.528267 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 08:35:30.534143 3.001683 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 08:35:37.541198 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 08:35:45.543005 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 08:36:01.545660 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 08:36:33.552388 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 08:42:37.558775 3.001574 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 08:42:44.566962 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 08:42:52.566630 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 08:43:08.570042 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 08:43:40.576663 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 08:49:44.582176 3.001643 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 08:49:51.589589 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 08:49:59.591188 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 08:50:15.593783 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 08:50:47.600154 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 08:56:51.653655 3.164092 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 08:56:58.863679 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 08:57:06.865146 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 08:57:22.868136 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 08:57:54.874170 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 09:03:58.880291 3.001595 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 09:04:05.888034 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 09:04:13.890397 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 09:04:29.892014 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 09:05:01.898870 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 09:11:05.908915 2.996870 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 09:11:12.913181 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 09:11:20.913232 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 09:11:36.916111 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 09:12:08.922923 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 09:18:12.928493 3.001667 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 09:18:19.935450 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 09:18:27.937140 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 09:18:43.939802 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 09:19:15.946203 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 09:25:19.952237 3.001473 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 09:25:26.959554 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 09:25:34.961354 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 09:25:50.964363 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 09:26:22.970221 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 09:32:26.975997 3.002401 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 09:32:33.984078 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 09:32:41.984856 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 09:32:57.988469 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 09:33:29.993937 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 09:39:34.000513 3.000940 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 09:39:41.007628 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 09:39:49.009245 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 09:40:05.011726 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 09:40:37.018354 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 09:46:41.025171 3.000807 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 09:46:48.031306 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 09:46:56.032793 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 09:47:12.036498 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 09:47:44.042499 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 09:53:48.047598 3.001895 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 09:53:55.055388 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 09:54:03.056817 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 09:54:19.060192 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 09:54:51.066167 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 10:00:55.071819 3.192013 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 10:01:02.269926 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 10:01:10.271430 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 10:01:26.274180 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 10:01:58.280063 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 10:08:02.286716 3.001116 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 10:08:09.293342 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 10:08:17.294949 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 10:08:33.628692 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 10:09:05.634686 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 10:15:09.640437 3.001904 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 10:15:16.648090 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 10:15:24.649513 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 10:15:40.652603 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 10:16:12.658646 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 10:22:16.665124 3.001092 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 10:22:23.672310 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 10:22:31.674175 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 10:22:47.676559 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 10:23:19.682888 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 10:29:23.689813 3.000781 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 10:29:30.697012 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 10:29:38.697783 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 10:29:54.700775 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 10:30:26.707224 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 10:36:30.713591 3.000576 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 10:36:37.720418 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 10:36:45.721596 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 10:37:01.724908 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 10:37:33.730439 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 10:43:37.736640 3.001651 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 10:43:44.743915 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 10:43:52.745806 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 10:44:08.748761 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 10:44:40.754237 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 10:50:44.760741 3.002126 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 10:50:51.768324 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 10:50:59.769569 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 10:51:15.772284 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 10:51:47.778474 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 10:57:51.783908 3.002153 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 10:57:58.791596 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 10:58:06.793353 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 10:58:22.796707 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 10:58:54.932972 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 11:04:58.938674 3.001463 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 11:05:05.946242 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 11:05:13.948821 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 11:05:29.950735 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 11:06:01.957907 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 11:12:05.964647 2.999823 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 11:12:12.971979 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 11:12:20.971615 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 11:12:36.974289 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 11:13:08.981920 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 11:19:12.986169 3.001867 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 11:19:19.994289 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 11:19:27.995389 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 11:19:43.998531 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 11:20:16.004816 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 11:26:20.011848 3.000431 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 11:26:27.129083 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 11:26:35.129595 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 11:26:51.132905 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 11:27:23.139323 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 11:33:27.144280 3.001808 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 11:33:34.152321 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 11:33:42.153365 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 11:33:58.156741 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 11:34:30.162646 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 11:40:34.168948 3.001749 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 11:40:41.176090 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 11:40:49.177920 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 11:41:05.180811 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 11:41:37.186739 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 11:47:41.192707 3.001748 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 11:47:48.320083 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 11:47:56.321647 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 11:48:12.324815 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 11:48:44.331066 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 11:54:48.337203 3.011490 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 11:54:55.354029 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 11:55:03.356786 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 11:55:19.359012 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 11:55:51.365010 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 12:01:55.371482 3.000811 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 12:02:02.378708 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 12:02:10.379837 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 12:02:26.382544 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 12:02:58.390409 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 12:09:02.394316 3.001959 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 12:09:09.401955 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 12:09:17.403833 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 12:09:33.406755 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 12:10:05.412877 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 12:16:09.418320 3.001833 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 12:16:16.426240 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 12:16:24.427937 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 12:16:40.501099 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 12:17:12.506928 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 12:23:16.513293 3.002355 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 12:23:23.520344 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 12:23:31.521459 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 12:23:47.524747 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 12:24:19.530557 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 12:30:23.536405 3.001607 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 12:30:30.543787 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 12:30:38.545566 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 12:30:54.548858 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 12:31:26.554896 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 12:37:30.561487 3.000768 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 12:37:37.567839 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 12:37:45.569212 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 12:38:01.572980 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 12:38:34.249528 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 12:44:38.256210 3.000836 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 12:44:45.263180 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 12:44:53.264133 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 12:45:09.267613 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 12:45:41.273492 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 12:51:45.279493 3.001656 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 12:51:52.286877 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 12:52:00.288752 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 12:52:16.291323 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 12:52:48.297413 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 12:58:52.303273 3.021815 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 12:58:59.330840 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 12:59:07.332516 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 12:59:23.335758 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 12:59:55.341476 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 13:05:59.347134 3.001833 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 13:06:06.354664 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 13:06:14.356730 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 13:06:30.359795 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 13:07:02.365586 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 13:13:06.371692 3.001303 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 13:13:13.379224 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 13:13:21.380031 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 13:13:37.383360 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 13:14:09.389102 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 13:20:13.397456 2.999251 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 13:20:20.403909 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 13:20:28.404823 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 13:20:44.407381 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 13:21:16.413795 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 13:27:20.419234 3.001764 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 13:27:27.426967 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 13:27:35.428644 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 13:27:51.431291 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 13:28:23.437085 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 13:34:27.444146 3.000883 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 13:34:34.450789 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 13:34:42.451967 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 13:34:58.455080 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 13:35:30.460954 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 13:41:34.468544 3.000563 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 13:41:41.475088 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 13:41:49.476974 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 13:42:05.479333 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 13:42:37.485056 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 13:48:41.491308 3.001816 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 13:48:48.499138 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 13:48:59.614699 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 13:49:15.618023 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 13:49:47.623455 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 13:55:53.633409 3.000538 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 13:56:00.640337 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 13:56:08.661556 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 13:56:24.664863 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 13:56:56.670620 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 14:03:00.806443 3.112253 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 14:03:07.924176 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 14:03:15.926161 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 14:03:31.929397 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 14:04:03.934586 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 14:10:07.940577 3.001676 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 14:10:14.947949 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 14:10:22.969982 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 14:10:38.973119 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 14:11:10.978797 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 14:17:15.174623 3.001891 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 14:17:22.182565 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 14:17:30.184133 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 14:17:46.188426 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 14:18:18.384477 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 14:24:22.389219 3.001742 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 14:24:29.396798 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 14:24:37.398275 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 14:24:53.401501 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 14:25:25.407531 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 14:31:29.414458 3.000495 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 14:31:36.421065 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 14:31:44.422448 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 14:32:00.425103 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 14:32:32.431166 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 14:38:36.437349 3.001601 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 14:38:43.445114 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 14:38:51.446004 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 14:39:07.449283 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 14:39:39.455415 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 14:45:43.461956 3.000983 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 14:45:50.468906 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 14:45:58.469931 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 14:46:14.473599 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 14:46:46.480313 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 14:52:50.485824 3.001384 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 14:52:57.493853 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 14:53:05.493848 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 14:53:21.496983 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 14:53:53.504081 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 14:59:57.509388 3.001774 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 15:00:04.516630 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 15:00:12.517872 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 15:00:28.521227 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 15:01:00.527742 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 15:07:04.533444 3.001224 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 15:07:11.540498 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 15:07:19.542402 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 15:07:35.545937 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 15:08:07.551239 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 15:14:11.557826 3.001074 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 15:14:18.564972 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 15:14:26.566145 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 15:14:42.569092 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 15:15:14.574859 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 15:21:18.582333 3.070405 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 15:21:25.658526 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 15:21:33.660061 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 15:21:49.663005 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 15:22:21.749128 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 15:28:25.755735 3.001217 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 15:28:32.762945 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 15:28:40.764729 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 15:28:56.766952 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 15:29:28.773266 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 15:31:16.623918 0.000061 arp 10.0.2.110 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 15:31:16.624149 0.000049 tcp 10.0.2.110 49217 61.147.82.182 80 FA_R 0 0 2 108 flow=Background 1970/01/02 15:31:16.624558 1.926697 tcp 10.0.2.110 49219 -> 61.147.82.182 80 SPA_* 0 0 7 829 flow=From-Botnet-V1-TCP-Established 1970/01/02 15:31:16.624736 2.937969 tcp 10.0.2.110 49220 -> 61.147.82.182 80 SPA_* 0 0 7 831 flow=From-Botnet-V1-TCP-Established 1970/01/02 15:31:16.758751 0.901340 tcp 10.0.2.110 49221 -> 61.147.82.182 80 SPA_* 0 0 7 820 flow=From-Botnet-V1-TCP-Established 1970/01/02 15:31:17.469552 0.000048 tcp 10.0.2.110 49218 61.147.82.182 80 FA_R 0 0 2 108 flow=Background 1970/01/02 15:31:17.469648 0.000048 tcp 10.0.2.110 49216 61.147.82.182 80 FA_R 0 0 2 108 flow=Background 1970/01/02 15:32:17.458785 0.000149 tcp 10.0.2.110 49221 -> 61.147.82.182 80 A_FA 0 0 2 108 flow=From-Botnet-V1-TCP-Established 1970/01/02 15:32:18.326001 0.000163 tcp 10.0.2.110 49219 -> 61.147.82.182 80 A_FA 0 0 2 108 flow=From-Botnet-V1-TCP-Established 1970/01/02 15:32:18.326195 0.000100 tcp 10.0.2.110 49220 -> 61.147.82.182 80 A_FA 0 0 2 108 flow=From-Botnet-V1-TCP-Established 1970/01/02 15:32:22.032007 0.000060 arp 10.0.2.110 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 15:35:32.819975 3.001130 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 INT 0 3 441 flow=Background 1970/01/02 15:35:39.826914 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 15:35:47.829005 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 15:36:03.831059 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 15:36:35.837490 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 15:42:39.843979 3.001471 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 15:42:46.851929 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 15:42:54.852232 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 15:43:10.855482 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 15:43:42.861841 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 15:49:46.866849 3.001830 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 15:49:53.874661 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 15:50:01.875896 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 15:50:17.879667 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 15:50:49.885165 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 15:56:53.891801 3.001159 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 15:57:00.898747 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 15:57:08.900300 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 15:57:24.903705 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 15:57:56.909015 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 16:04:00.915466 3.002278 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 16:04:07.922776 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 16:04:15.923899 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 16:04:31.926881 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 16:05:03.932851 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 16:11:07.939551 3.002230 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 16:11:14.946569 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 16:11:22.947971 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 16:11:38.950995 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 16:12:10.957737 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 16:18:14.963494 3.001663 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 16:18:21.970432 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 16:18:29.971889 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 16:18:45.975102 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 16:19:17.980874 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 16:25:21.987316 3.001456 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 16:25:28.994358 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 16:25:36.996167 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 16:25:52.998990 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 16:26:25.055362 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 16:32:29.062198 3.000412 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 16:32:36.068820 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 16:32:44.070018 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 16:33:00.073065 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 16:33:32.078742 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 16:39:36.085273 3.001351 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 16:39:43.092969 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 16:39:51.094053 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 16:40:07.097713 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 16:40:39.102757 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 16:46:43.108385 3.002118 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 16:46:50.116543 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 16:46:58.117953 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 16:47:14.120680 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 16:47:46.127438 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 16:53:50.133533 3.001391 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 16:53:57.141687 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 16:54:05.141614 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 16:54:21.145093 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 16:54:53.151843 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 17:00:57.156709 3.002126 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 17:01:04.164485 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 17:01:12.165861 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 17:01:28.168586 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 17:02:00.174610 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 17:08:04.180989 3.142350 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 17:08:11.329009 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 17:08:19.329896 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 17:08:35.332767 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 17:09:07.339520 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 17:15:11.345316 3.001525 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 17:15:18.352803 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 17:15:26.354305 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 17:15:42.356886 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 17:16:14.362878 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 17:22:18.369966 3.001055 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 17:22:25.376797 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 17:22:33.378856 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 17:22:49.380805 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 17:23:21.387085 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 17:29:25.393759 3.001170 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 17:29:32.401530 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 17:29:40.401899 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 17:29:56.404705 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 17:30:28.412637 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 17:36:32.418051 3.000900 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 17:36:39.424597 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 17:36:47.426243 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 17:37:03.428771 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 17:37:35.435202 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 17:43:39.440738 3.002268 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 17:43:46.448455 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 17:43:54.449596 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 17:44:10.454050 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 17:44:42.459026 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 17:50:46.465182 3.002374 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 17:50:53.472575 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 17:51:01.474094 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 17:51:17.477169 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 17:51:49.483693 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 17:57:53.488670 3.002151 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 17:58:00.496054 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 17:58:08.502361 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 17:58:24.506571 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 17:58:56.508007 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 18:05:00.513668 3.000880 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 18:05:07.520576 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 18:05:15.521546 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 18:05:31.524871 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 18:06:03.530618 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 18:12:07.536682 3.002109 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 18:12:14.544469 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 18:12:22.546042 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 18:12:38.548964 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 18:13:10.554882 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 18:19:14.561353 3.041489 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 18:19:21.609556 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 18:19:29.609833 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 18:19:45.612943 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 18:20:17.619031 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 18:26:21.625284 3.001121 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 18:26:28.632330 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 18:26:36.633927 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 18:26:52.636878 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 18:27:24.642681 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 18:33:28.649874 3.000680 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 18:33:35.656229 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 18:33:43.657771 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 18:33:59.661742 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 18:34:31.666836 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 18:40:35.673306 3.000905 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 18:40:42.680552 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 18:40:50.681345 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 18:41:06.684916 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 18:41:38.690740 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 18:47:42.697819 3.000226 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 18:47:49.705479 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 18:47:57.705845 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 18:48:13.708632 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 18:48:45.716010 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 18:54:49.721040 3.001136 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 18:54:56.728412 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 18:55:04.729726 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 18:55:20.732589 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 18:55:52.738839 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 19:01:56.744709 3.001916 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 19:02:03.752284 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 19:02:11.753293 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 19:02:27.756890 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 19:02:59.762907 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 19:09:03.769360 3.001144 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 19:09:10.776055 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 19:09:18.817437 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 19:09:34.820894 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 19:10:06.826922 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 19:16:10.832895 3.001467 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 19:16:17.839988 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 19:16:25.841385 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 19:16:41.844504 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 19:17:13.850669 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 19:23:17.856774 3.001565 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 19:23:24.894424 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 19:23:32.895830 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 19:23:48.899954 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 19:24:20.904648 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 19:30:24.910015 3.002089 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 19:30:31.918180 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 19:30:39.919698 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 19:30:55.922608 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 19:31:27.928963 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 19:37:31.944545 3.002344 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 19:37:38.951802 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 19:37:46.953905 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 19:38:02.956380 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 19:38:34.993393 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 19:44:39.000157 3.019845 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 19:44:46.025916 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 19:44:54.027296 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 19:45:10.030258 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 19:45:42.037005 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 19:51:46.042022 3.002000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 19:51:53.049659 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 19:52:02.985012 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 19:52:18.987453 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 19:52:50.993162 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 19:58:54.998869 3.002234 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 19:59:02.006851 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 19:59:10.118095 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 19:59:26.121134 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 19:59:58.128445 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 20:06:02.134312 3.001227 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 20:06:09.141133 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 20:06:17.142774 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 20:06:33.145102 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 20:07:05.151321 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 20:13:09.157518 3.001576 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 20:13:16.164752 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 20:13:24.166690 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 20:13:40.169688 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 20:14:12.175099 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 20:20:16.181102 3.001700 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 20:20:23.189051 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 20:20:31.190339 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 20:20:47.193163 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 20:21:19.329291 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 20:27:23.336015 3.091055 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 20:27:30.432898 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 20:27:38.435020 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 20:27:54.437371 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 20:28:26.443629 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 20:34:30.450466 3.000526 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 20:34:37.457126 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 20:34:45.458524 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 20:35:01.462089 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 20:35:33.467456 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 20:41:37.473426 3.003828 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 20:41:44.480929 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 20:41:52.592736 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 20:42:08.595516 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 20:42:40.601612 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 20:48:44.607263 3.002396 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 20:48:52.476918 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 20:49:00.478018 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 20:49:16.480938 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 20:49:48.487172 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 20:55:52.493034 3.001759 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 20:55:59.500207 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 20:56:07.501919 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 20:56:23.505036 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 20:56:55.511262 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 21:02:59.516354 3.001844 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 21:03:06.524262 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 21:03:14.526680 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 21:03:30.528832 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 21:04:02.534878 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 21:10:06.541960 3.000355 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 21:10:13.549048 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 21:10:21.550011 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 21:10:37.553222 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 21:11:09.559778 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 21:17:13.564988 3.001175 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 21:17:20.572204 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 21:17:28.573486 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 21:17:44.576701 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 21:18:16.582698 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 21:24:20.588923 3.001553 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 21:24:27.595979 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 21:24:35.597801 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 21:24:51.601858 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 21:25:23.606818 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 21:31:27.613286 3.001656 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 21:31:34.620399 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 21:31:42.621525 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 21:31:58.624991 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 21:32:30.630653 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 21:38:34.638745 2.999555 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 21:38:41.644223 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 21:38:49.645446 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 21:39:05.648993 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 21:39:37.656054 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 21:45:41.662519 3.000070 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 21:45:48.668137 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 21:45:56.669921 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 21:46:12.672999 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 21:46:44.679009 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 21:52:48.685122 3.001420 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 21:52:55.692026 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 21:53:03.693666 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 21:53:19.696718 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 21:53:53.104556 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 21:59:57.110591 3.001547 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 22:00:04.117872 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 22:00:12.119641 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 22:00:28.122743 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 22:01:00.128507 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 22:07:04.135225 3.000789 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 22:07:11.142145 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 22:07:19.143227 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 22:07:35.147477 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 22:08:07.152512 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 22:14:11.158525 3.002173 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 22:14:18.166380 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 22:14:26.167241 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 22:14:42.170791 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 22:15:14.177676 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 22:21:18.183641 3.000563 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 22:21:25.191129 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 22:21:33.191298 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 22:21:49.194226 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 22:22:21.200753 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 22:28:25.206510 3.001793 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 22:28:32.214144 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 22:28:40.215534 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 22:28:56.218526 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 22:29:28.224270 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 22:35:32.230268 3.121871 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 22:35:39.358357 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 22:35:47.359789 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 22:36:03.362882 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 22:36:35.368915 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 22:42:39.374358 3.001572 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 22:42:46.381750 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 22:42:54.383475 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 22:43:10.386394 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 22:43:42.392479 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 22:49:46.399407 3.002023 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 22:49:53.405650 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 22:50:01.407694 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 22:50:17.410196 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 22:50:49.537011 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 22:56:53.543874 3.000823 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 22:57:00.549973 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 22:57:08.551823 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 22:57:24.554826 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 22:57:56.560607 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 23:01:32.814445 0.000064 arp 10.0.2.110 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/02 23:01:32.814581 0.422271 udp 10.0.2.110 54142 <-> 8.8.8.8 53 CON 0 0 2 164 flow=From-Botnet-V1-DNS 1970/01/02 23:01:33.237380 0.875639 tcp 10.0.2.110 49222 -> 61.147.82.180 80 SPA_* 0 0 7 1053 flow=From-Botnet-V1-TCP-Established 1970/01/02 23:01:33.918427 0.000086 tcp 10.0.2.110 49221 61.147.82.182 80 RA_ 0 0 2 108 flow=Background 1970/01/02 23:01:33.918667 0.000042 tcp 10.0.2.110 49219 61.147.82.182 80 RA_ 0 0 2 108 flow=Background 1970/01/02 23:01:33.918834 0.000038 tcp 10.0.2.110 49220 61.147.82.182 80 RA_ 0 0 2 108 flow=Background 1970/01/02 23:01:48.915281 0.000118 tcp 10.0.2.110 49222 -> 61.147.82.180 80 A_FA 0 0 2 108 flow=From-Botnet-V1-TCP-Established 1970/01/02 23:04:00.566930 3.001527 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 23:04:07.574188 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 23:04:15.576322 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 23:04:31.578502 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 23:05:03.584750 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 23:11:07.592426 2.999923 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 23:11:14.602175 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 23:11:22.599571 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 23:11:38.602367 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 23:12:10.610394 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 23:18:14.615579 3.000970 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 23:18:21.622298 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 23:18:29.623575 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 23:18:45.626931 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 23:19:17.632778 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 23:25:21.638606 3.001841 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 23:25:28.645791 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 23:25:36.647529 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 23:25:52.651360 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 23:26:24.656787 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 23:32:28.662409 3.002393 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 23:32:35.669987 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 23:32:43.671169 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 23:32:59.674447 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 23:33:31.680862 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 23:39:35.691925 3.156126 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 23:39:42.854248 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 23:39:50.855561 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 23:40:06.858534 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 23:40:38.865105 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 23:46:42.871407 3.001491 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 23:46:49.878218 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 23:46:57.879807 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 23:47:13.882782 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 23:47:45.888717 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 23:53:49.964212 3.002114 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/02 23:53:56.972544 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 23:54:04.973695 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 23:54:20.976329 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/02 23:54:52.982924 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 00:00:56.988643 3.002012 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 00:01:03.996505 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 00:01:11.997813 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 00:01:28.000980 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 00:02:00.006628 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 00:08:04.245711 2.998870 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 00:08:11.250342 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 00:08:19.251729 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 00:08:35.254849 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 00:09:07.260902 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 00:15:11.266511 3.002532 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 00:15:18.274752 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 00:15:26.275881 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 00:15:42.278939 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 00:16:14.285600 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 00:22:18.291882 3.001095 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 00:22:25.299385 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 00:22:33.300170 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 00:22:49.303030 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 00:23:21.309450 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 00:29:25.314426 3.002377 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 00:29:32.322014 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 00:29:40.323820 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 00:29:56.326734 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 00:30:28.934761 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 00:36:32.941016 3.000313 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 00:36:39.948288 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 00:36:47.948357 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 00:37:03.951819 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 00:37:35.958716 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 00:43:39.963952 3.001818 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 00:43:46.970958 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 00:43:54.972904 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 00:44:10.975747 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 00:44:42.981331 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 00:50:46.988198 3.001431 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 00:50:53.994771 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 00:51:01.996567 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 00:51:18.000566 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 00:51:50.006026 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 00:57:54.011008 3.002122 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 00:58:01.019040 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 00:58:09.020317 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 00:58:25.023504 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 00:58:57.029482 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 01:05:01.036873 3.000564 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 01:05:08.043847 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 01:05:16.044562 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 01:05:32.047394 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 01:06:04.054314 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 01:12:08.059470 3.001763 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 01:12:15.066889 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 01:12:23.068333 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 01:12:39.071441 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 01:13:11.077634 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 01:19:15.084439 3.001078 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 01:19:22.091450 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 01:19:30.092664 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 01:19:46.095168 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 01:20:18.101179 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 01:26:22.108109 3.000730 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 01:26:29.114987 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 01:26:37.116675 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 01:26:53.119407 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 01:27:26.127592 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 01:33:30.132627 3.002134 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 01:33:37.140671 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 01:33:45.141626 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 01:34:01.145197 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 01:34:33.150950 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 01:40:37.157397 3.001208 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 01:40:44.163995 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 01:40:52.166255 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 01:41:08.169397 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 01:41:40.174988 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 01:47:44.180234 3.002121 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 01:47:51.188079 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 01:47:59.189632 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 01:48:15.192468 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 01:48:47.199007 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 01:54:51.205356 3.001407 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 01:54:58.213001 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 01:55:06.213563 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 01:55:22.217043 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 01:55:54.224213 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 02:01:58.228707 3.001535 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 02:02:05.236131 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 02:02:13.237645 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 02:02:29.240828 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 02:03:01.246889 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 02:09:05.253044 3.001698 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 02:09:12.260061 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 02:09:20.261736 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 02:09:36.264432 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 02:10:08.270784 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 02:16:12.276699 3.001506 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 02:16:19.283958 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 02:16:27.285901 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 02:16:43.288937 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 02:17:15.294503 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 02:23:19.300286 3.002048 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 02:23:26.308191 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 02:23:34.310931 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 02:23:50.312851 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 02:24:22.318847 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 02:30:26.325270 3.001231 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 02:30:33.333101 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 02:30:41.333709 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 02:30:57.336610 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 02:31:29.343885 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 02:37:33.348446 3.001956 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 02:37:40.356145 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 02:37:48.488036 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 02:38:04.490685 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 02:38:36.505050 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 02:44:40.502958 3.001226 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 02:44:47.510543 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 02:44:55.511758 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 02:45:11.514355 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 02:45:43.521071 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 02:51:47.527584 3.000908 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 02:51:54.534380 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 02:52:02.535554 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 02:52:18.538295 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 02:52:50.544514 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 02:58:54.550918 3.001925 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 02:59:01.558089 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 02:59:09.559591 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 02:59:25.563015 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 02:59:57.568391 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 03:06:01.575845 3.000157 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 03:06:08.582171 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 03:06:16.583716 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 03:06:32.586856 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 03:07:04.593641 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 03:13:08.598872 3.001086 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 03:13:15.606646 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 03:13:23.607507 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 03:13:39.610857 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 03:14:11.616858 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 03:20:15.621892 3.002469 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 03:20:22.630262 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 03:20:30.631916 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 03:20:46.634542 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 03:21:18.640217 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 03:27:22.646445 3.001899 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 03:27:29.654090 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 03:27:37.655471 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 03:27:53.659287 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 03:28:25.664678 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 03:31:20.773306 0.000056 arp 10.0.2.110 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 03:31:20.773413 0.009520 udp 10.0.2.110 51858 <-> 8.8.8.8 53 CON 0 0 2 168 flow=From-Botnet-V1-DNS 1970/01/03 03:31:20.834039 1.974985 tcp 10.0.2.110 49223 -> 61.147.82.182 80 SPA_* 0 0 7 820 flow=From-Botnet-V1-TCP-Established 1970/01/03 03:31:20.834252 1.964763 tcp 10.0.2.110 49224 -> 61.147.82.182 80 SPA_* 0 0 7 831 flow=From-Botnet-V1-TCP-Established 1970/01/03 03:31:20.834417 2.956300 tcp 10.0.2.110 49225 -> 61.147.82.182 80 SPA_* 0 0 7 829 flow=From-Botnet-V1-TCP-Established 1970/01/03 03:31:22.632109 0.000056 tcp 10.0.2.110 49222 61.147.82.180 80 RA_ 0 0 2 108 flow=Background 1970/01/03 03:32:22.533351 0.000162 tcp 10.0.2.110 49225 -> 61.147.82.182 80 A_FA 0 0 2 108 flow=From-Botnet-V1-TCP-Established 1970/01/03 03:32:22.594537 0.000159 tcp 10.0.2.110 49224 -> 61.147.82.182 80 A_FA 0 0 2 108 flow=From-Botnet-V1-TCP-Established 1970/01/03 03:32:22.594618 0.000231 tcp 10.0.2.110 49223 -> 61.147.82.182 80 A_FA 0 0 2 108 flow=From-Botnet-V1-TCP-Established 1970/01/03 03:32:27.432203 0.000048 arp 10.0.2.110 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 03:34:29.690015 3.002386 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 INT 0 3 441 flow=Background 1970/01/03 03:34:36.698088 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 03:34:44.699570 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 03:35:00.702659 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 03:35:32.709001 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 03:41:36.714876 3.001554 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 03:41:43.723498 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 03:41:51.723128 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 03:42:07.726722 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 03:42:39.733173 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 03:48:43.738086 3.002159 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 03:48:50.746012 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 03:48:58.747133 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 03:49:14.750251 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 03:49:46.756349 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 03:55:50.762703 3.001592 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 03:55:57.769869 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 03:56:05.771013 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 03:56:21.774728 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 03:56:53.780400 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 04:02:57.787903 3.911636 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 04:03:05.705314 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 04:03:13.717152 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 04:03:29.719625 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 04:04:01.726066 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 04:10:05.730955 3.002743 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 04:10:12.738926 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 04:10:20.741022 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 04:10:36.743909 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 04:11:08.749521 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 04:17:22.900545 3.312189 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 04:17:30.218143 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 04:17:38.219866 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 04:17:54.222319 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 04:18:26.228296 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 04:24:49.242579 3.001073 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 04:24:56.250036 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 04:25:04.250913 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 04:25:20.254207 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 04:25:52.261990 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 04:31:56.265753 3.001929 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 04:32:03.273723 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 04:32:11.274526 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 04:32:27.278025 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 04:32:59.283571 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 04:39:03.290850 3.000966 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 04:39:10.297695 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 04:39:18.298979 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 04:39:34.302129 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 04:40:06.307769 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 04:46:10.313613 3.001967 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 04:46:17.321461 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 04:46:25.322891 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 04:46:41.326182 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 04:47:13.331948 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 04:53:17.337992 3.001717 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 04:53:24.345018 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 04:53:32.346635 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 04:53:48.350166 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 04:54:20.356613 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 05:00:24.362404 3.000881 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 05:00:31.370093 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 05:00:39.371189 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 05:00:55.373762 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 05:01:27.821731 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 05:07:31.826406 3.001509 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 05:07:38.833559 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 05:07:46.835388 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 05:08:02.838434 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 05:08:34.844558 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 05:14:38.851000 3.001303 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 05:14:47.841275 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 05:14:55.842112 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 05:15:11.845144 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 05:15:44.081208 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 05:21:48.089115 3.000353 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 05:21:55.095217 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 05:22:03.096598 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 05:22:19.099146 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 05:22:51.106353 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 05:28:55.111603 3.001201 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 05:29:02.118671 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 05:29:10.961387 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 05:29:26.964507 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 05:29:59.070555 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 05:36:03.076743 3.001563 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 05:36:10.084039 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 05:36:18.086064 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 05:36:34.088432 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 05:37:06.094466 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 05:43:18.102919 3.001314 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 05:43:25.110212 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 05:43:33.111484 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 05:43:49.114423 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 05:44:21.121285 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 05:50:47.127768 3.001911 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 05:50:54.135216 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 05:51:02.137593 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 05:51:18.140031 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 05:51:52.008401 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 05:57:56.015387 3.001245 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 05:58:03.021802 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 05:58:11.023576 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 05:58:27.027530 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 05:58:59.032653 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 06:05:03.038058 3.003009 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 06:05:10.045558 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 06:05:18.047374 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 06:05:34.541289 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 06:06:06.546942 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 06:12:10.554285 3.000768 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 06:12:17.561248 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 06:12:25.952787 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 06:12:41.955496 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 06:13:13.961718 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 06:19:17.968239 3.001603 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 06:19:24.974825 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 06:19:32.977074 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 06:19:49.330343 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 06:20:21.336481 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 06:26:25.342465 3.001384 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 06:26:32.349660 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 06:26:40.350904 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 06:26:56.354092 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 06:27:28.359980 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 06:33:32.367407 3.000125 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 06:33:39.413598 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 06:33:47.414983 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 06:34:03.418457 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 06:34:35.424284 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 06:40:39.430943 3.041753 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 06:40:46.477795 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 06:40:54.479199 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 06:41:10.482336 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 06:41:42.488003 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 06:47:46.494992 3.000677 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 06:47:53.501274 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 06:48:01.502904 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 06:48:17.505762 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 06:48:49.512949 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 06:54:53.518973 3.001099 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 06:55:00.525832 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 06:55:08.527372 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 06:55:24.530075 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 06:55:56.536096 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 07:02:00.542443 3.000966 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 07:02:07.549182 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 07:02:15.550649 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 07:02:31.554216 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 07:03:03.560419 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 07:09:07.565470 3.002353 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 07:09:14.573896 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 07:09:22.575097 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 07:09:38.578276 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 07:10:10.584286 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 07:16:14.590255 3.001573 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 07:16:21.597163 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 07:16:29.688852 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 07:16:45.692030 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 07:17:17.698932 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 07:23:21.705118 3.000936 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 07:23:28.711233 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 07:23:36.712880 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 07:23:52.715806 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 07:24:24.722464 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 07:30:28.728352 3.002152 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 07:30:35.735888 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 07:30:43.736735 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 07:30:59.739664 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 07:31:31.746263 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 07:37:35.752123 3.002278 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 07:37:42.760112 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 07:37:50.761349 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 07:38:06.764630 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 07:38:38.769799 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 07:44:42.775796 3.002175 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 07:44:49.783214 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 07:44:57.784590 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 07:45:13.787927 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 07:45:45.794642 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 07:51:49.800621 3.001010 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 07:51:56.807474 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 07:52:04.809048 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 07:52:20.812027 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 07:52:52.818232 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 07:58:56.823718 3.002446 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 07:59:03.872952 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 07:59:11.872716 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 07:59:27.876233 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 07:59:59.882983 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 08:06:03.887730 3.002176 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 08:06:10.895382 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 08:06:18.897061 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 08:06:34.899642 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 08:07:06.906002 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 08:13:10.912835 3.000544 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 08:13:17.919010 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 08:13:27.102566 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 08:13:43.105480 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 08:14:15.271955 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 08:20:19.277852 3.001581 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 08:20:26.285015 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 08:20:34.287056 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 08:20:50.289877 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 08:21:22.295834 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 08:27:34.303529 3.001326 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 08:27:41.311534 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 08:27:49.311967 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 08:28:05.314869 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 08:28:37.322477 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 08:35:03.328465 3.001874 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 08:35:10.336556 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 08:35:18.338716 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 08:35:34.340856 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 08:36:06.346746 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 08:42:10.354333 3.000009 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 08:42:17.361046 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 08:42:25.361878 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 08:42:41.364825 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 08:43:13.371940 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 08:49:17.377124 3.001491 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 08:49:24.384483 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 08:49:32.386091 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 08:49:48.389008 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 08:50:20.395046 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 08:56:27.404810 3.002018 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 08:56:34.412768 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 08:56:42.414348 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 08:56:58.417089 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 08:57:30.443451 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 09:03:34.450337 3.000493 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 09:03:41.456570 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 09:03:49.458285 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 09:04:05.461251 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 09:04:37.467173 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 09:10:41.473227 3.002397 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 09:10:48.480596 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 09:10:56.481663 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 09:11:12.484889 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 09:11:44.490862 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 09:17:48.497004 3.001841 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 09:17:55.504307 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 09:18:03.766421 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 09:18:19.769336 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 09:18:51.775411 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 09:24:55.781339 3.001709 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 09:25:02.788990 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 09:25:10.790460 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 09:25:26.793813 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 09:25:58.800485 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 09:32:02.805257 3.001764 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 09:32:09.812445 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 09:32:17.813933 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 09:32:33.817047 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 09:33:05.823539 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 09:39:09.831109 2.999936 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 09:39:16.837907 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 09:39:24.838106 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 09:39:40.841663 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 09:40:12.847964 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 09:46:16.853370 3.592668 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 09:46:24.451822 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 09:46:32.452909 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 09:46:48.456131 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 09:47:20.462313 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 09:53:24.468962 3.001019 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 09:53:31.675539 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 09:53:39.677160 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 09:53:55.680495 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 09:54:27.686131 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 10:00:31.692414 3.001814 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 10:00:38.699787 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 10:00:46.701116 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 10:01:02.704656 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 10:01:34.711179 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 10:07:38.717632 3.000948 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 10:07:45.723403 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 10:07:53.725285 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 10:08:09.727947 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 10:08:41.734113 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 10:14:45.739750 3.002088 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 10:14:52.747610 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 10:15:00.748871 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 10:15:16.752212 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 10:15:48.758586 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 10:21:52.765066 3.050581 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 10:21:59.821581 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 10:22:07.823406 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 10:22:23.827229 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 10:22:55.952664 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 10:28:59.958241 3.001640 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 10:29:06.965909 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 10:29:14.967348 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 10:29:30.970661 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 10:30:02.977100 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 10:36:06.982011 3.002831 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 10:36:13.989561 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 10:36:21.991509 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 10:36:37.994568 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 10:37:10.000609 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 10:43:14.005859 3.112054 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 10:43:21.123915 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 10:43:29.125448 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 10:43:45.128611 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 10:44:17.134875 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 10:50:21.140634 3.001692 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 10:50:28.148139 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 10:50:36.149532 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 10:50:52.152495 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 10:51:24.158404 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 10:57:28.165517 3.000343 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 10:57:35.172106 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 10:57:43.175893 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 10:57:59.176722 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 10:58:31.182469 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 11:04:35.190371 2.999853 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 11:04:42.196924 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 11:04:50.197135 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 11:05:06.200516 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 11:05:38.206717 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 11:11:42.212534 3.001818 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 11:11:49.219745 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 11:11:57.221120 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 11:12:13.224140 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 11:12:45.230090 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 11:18:49.236099 3.002260 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 11:18:56.243603 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 11:19:04.245258 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 11:19:20.248001 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 11:19:52.254063 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 11:25:56.259862 3.002634 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 11:26:03.267394 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 11:26:11.269520 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 11:26:27.272358 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 11:26:59.388741 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 11:33:03.394499 3.001917 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 11:33:10.401900 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 11:33:18.423317 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 11:33:34.426078 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 11:34:06.436135 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 11:40:10.438900 3.061539 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 11:40:17.506429 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 11:40:25.507462 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 11:40:41.510415 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 11:41:13.517512 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 11:47:17.522859 3.000971 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 11:47:24.530208 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 11:47:32.531637 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 11:47:48.644308 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 11:48:20.650592 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 11:54:24.656581 3.001337 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 11:54:31.664932 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 11:54:39.665211 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 11:54:55.668606 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 11:55:27.675180 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 12:01:31.680150 3.001983 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 12:01:38.687805 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 12:01:46.689576 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 12:02:02.692729 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 12:02:34.749122 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 12:08:38.755572 3.000362 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 12:08:45.762251 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 12:08:53.763205 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 12:09:09.766681 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 12:09:41.772857 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 12:15:45.778641 3.001598 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 12:15:52.786118 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 12:16:00.787784 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 12:16:16.790730 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 12:16:48.796615 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 12:22:52.802987 3.001015 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 12:22:59.810255 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 12:23:07.811875 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 12:23:23.814266 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 12:23:55.820492 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 12:29:59.826345 3.002009 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 12:30:07.104725 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 12:30:15.105502 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 12:30:31.108736 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 12:31:03.114539 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 12:37:07.121038 3.002486 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 12:37:14.128408 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 12:37:22.129827 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 12:37:38.133925 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 12:38:10.369207 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 12:44:14.375673 3.001328 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 12:44:21.382239 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 12:44:29.384237 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 12:44:45.386768 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 12:45:17.392869 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 12:51:21.398696 3.002437 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 12:51:28.406567 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 12:51:36.498408 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 12:51:52.501703 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 12:52:24.508045 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 12:58:28.513289 3.001423 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 12:58:35.520467 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 12:58:43.522021 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 12:58:59.525139 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 12:59:31.530856 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 13:05:35.537069 3.001962 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 13:05:42.544353 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 13:05:50.545937 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 13:06:06.549250 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 13:06:38.554935 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 13:12:43.284413 2.999704 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 13:12:50.290354 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 13:12:58.291393 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 13:13:14.294138 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 13:13:46.300539 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 13:19:50.306630 3.001456 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 13:19:57.313580 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 13:20:05.315286 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 13:20:21.317945 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 13:20:53.323945 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 13:26:57.680715 3.001502 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 13:27:04.688359 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 13:27:12.689876 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 13:27:28.692328 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 13:28:01.161577 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 13:34:05.168062 2.999225 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 13:34:12.172581 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 13:34:20.174336 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 13:34:36.177069 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 13:35:08.183009 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 13:41:12.188806 3.002045 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 13:41:19.196857 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 13:41:27.198133 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 13:41:43.201486 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 13:42:15.207108 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 13:48:19.214497 3.000611 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 13:48:26.220891 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 13:48:34.222373 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 13:48:50.225019 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 13:49:22.231529 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 13:55:26.236941 3.001728 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 13:55:33.244698 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 13:55:41.246598 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 13:55:57.249149 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 13:56:29.255246 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 14:02:33.262772 3.000155 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 14:02:40.269466 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 14:02:48.269814 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 14:03:04.272739 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 14:03:36.279743 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 14:09:40.285013 3.001561 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 14:09:47.292684 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 14:09:55.293677 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 14:10:11.296993 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 14:10:43.303073 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 14:16:47.309098 3.001931 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 14:16:54.316142 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 14:17:02.318092 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 14:17:18.321228 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 14:17:50.327255 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 14:23:54.333678 3.021307 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 14:24:01.360406 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 14:24:09.362035 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 14:24:25.365477 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 14:24:57.371378 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 14:31:01.377924 3.000442 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 14:31:08.384558 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 14:31:16.385811 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 14:31:32.389321 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 14:32:04.395077 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 14:38:08.401665 3.001239 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 14:38:15.408222 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 14:38:23.410241 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 14:38:39.412630 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 14:39:11.418991 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 14:45:15.424776 3.001768 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 14:45:22.432637 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 14:45:30.434873 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 14:45:46.437075 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 14:46:18.443445 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 14:52:22.449532 3.000769 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 14:52:29.457124 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 14:52:37.458065 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 14:52:53.460714 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 14:53:25.468059 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 14:59:29.473391 3.001280 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 14:59:36.480176 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 14:59:44.481677 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 15:00:00.484718 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 15:00:32.491010 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 15:06:36.497030 3.001452 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 15:06:43.504383 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 15:06:51.505633 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 15:07:07.510001 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 15:07:39.515191 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 15:13:43.520770 3.002987 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 15:13:50.528315 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 15:13:58.529705 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 15:14:14.532700 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 15:14:46.538687 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 15:20:50.545047 3.001403 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 15:20:57.552486 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 15:21:05.604059 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 15:21:21.606918 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 15:21:53.612814 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 15:27:57.618734 3.021593 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 15:28:04.646026 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 15:28:12.648113 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 15:28:28.650795 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 15:29:00.657017 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 15:31:26.540688 0.000061 arp 10.0.2.110 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 15:31:26.540828 0.000030 tcp 10.0.2.110 49224 61.147.82.182 80 FA_R 0 0 2 108 flow=Background 1970/01/03 15:31:26.540982 0.000027 tcp 10.0.2.110 49223 61.147.82.182 80 FA_R 0 0 2 108 flow=Background 1970/01/03 15:31:26.541103 0.000027 tcp 10.0.2.110 49225 61.147.82.182 80 FA_R 0 0 2 108 flow=Background 1970/01/03 15:31:26.541446 3.350432 tcp 10.0.2.110 49226 -> 61.147.82.182 80 SR_SA 0 0 3 178 flow=From-Botnet-V1-TCP-Established 1970/01/03 15:31:26.541608 0.906414 tcp 10.0.2.110 49227 -> 61.147.82.182 80 SPA_* 0 0 7 831 flow=From-Botnet-V1-TCP-Established 1970/01/03 15:31:26.598022 3.349966 tcp 10.0.2.110 49228 -> 61.147.82.182 80 SR_SA 0 0 3 178 flow=From-Botnet-V1-TCP-Established 1970/01/03 15:32:27.242016 0.000142 tcp 10.0.2.110 49227 -> 61.147.82.182 80 A_FA 0 0 2 108 flow=From-Botnet-V1-TCP-Established 1970/01/03 15:32:31.820219 0.000048 arp 10.0.2.110 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 15:35:04.662762 3.001348 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 INT 0 3 441 flow=Background 1970/01/03 15:35:11.670516 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 15:35:19.671478 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 15:35:35.675223 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 15:36:07.681085 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 15:42:11.686780 3.001593 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 15:42:18.693965 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 15:42:26.696472 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 15:42:42.698647 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 15:43:14.704747 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 15:49:18.715581 2.997134 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 15:49:25.719932 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 15:49:33.719724 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 15:49:49.722591 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 15:50:22.830447 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 15:56:26.836331 3.001298 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 15:56:33.843342 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 15:56:41.845539 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 15:56:57.848165 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 15:57:29.894165 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 16:03:37.004515 3.001792 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 16:03:44.012583 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 16:03:52.013593 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 16:04:08.016744 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 16:04:40.413188 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 16:10:44.419280 3.001376 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 16:10:51.426767 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 16:10:59.428087 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 16:11:15.432267 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 16:11:47.437711 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 16:17:51.444141 3.000941 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 16:17:58.450852 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 16:18:06.452049 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 16:18:22.455195 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 16:18:54.461348 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 16:24:58.469898 2.999741 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 16:25:05.475593 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 16:25:13.476127 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 16:25:29.478854 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 16:26:01.485842 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 16:32:05.490984 3.001884 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 16:32:12.498493 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 16:32:20.500381 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 16:32:36.502905 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 16:33:08.509259 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 16:39:12.514834 3.002312 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 16:39:19.522584 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 16:39:27.523998 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 16:39:43.527154 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 16:40:16.805101 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 16:46:25.818838 3.001093 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 16:46:32.825269 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 16:46:40.826779 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 16:46:56.830270 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 16:47:28.836544 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 16:53:32.841695 3.002283 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 16:53:39.849422 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 16:53:47.851357 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 16:54:03.854262 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 16:54:36.270998 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 17:01:05.282336 3.001862 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 17:01:12.289901 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 17:01:20.291478 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 17:01:36.294502 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 17:02:08.300772 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 17:08:13.308485 3.001458 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 17:08:20.316772 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 17:08:28.317137 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 17:08:44.320592 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 17:09:16.326897 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 17:15:20.332130 3.001725 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 17:15:27.339079 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 17:15:35.341102 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 17:15:51.344258 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 17:16:23.350044 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 17:22:27.355328 3.002415 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 17:22:34.363227 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 17:22:42.364771 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 17:22:58.367831 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 17:23:30.374383 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 17:29:34.379942 3.031757 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 17:29:41.417083 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 17:29:49.418986 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 17:30:05.421858 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 17:30:37.428222 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 17:36:41.433850 3.001850 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 17:36:48.441355 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 17:36:56.442892 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 17:37:12.445826 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 17:37:44.452023 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 17:43:48.457890 3.001415 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 17:43:55.465720 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 17:44:03.467482 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 17:44:19.469962 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 17:44:51.475994 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 17:50:55.482309 3.001420 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 17:51:02.497029 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 17:51:10.490846 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 17:51:26.494046 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 17:51:58.500464 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 17:58:02.505442 3.002339 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 17:58:09.513704 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 17:58:17.515292 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 17:58:34.088847 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 17:59:06.094372 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 18:05:10.100128 3.002420 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 18:05:17.108288 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 18:05:25.110270 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 18:05:41.112357 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 18:06:13.118536 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 18:12:17.126381 2.999647 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 18:12:24.132775 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 18:12:32.133696 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 18:12:48.136773 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 18:13:20.143210 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 18:19:24.148661 3.001218 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 18:19:31.156340 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 18:19:39.317781 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 18:19:55.320627 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 18:20:27.326957 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 18:26:31.333119 3.001926 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 18:26:38.340344 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 18:26:46.341470 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 18:27:02.344656 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 18:27:34.350869 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 18:33:38.356484 3.002105 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 18:33:45.363900 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 18:33:53.365864 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 18:34:10.039286 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 18:34:42.045964 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 18:40:46.051636 3.001476 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 18:40:53.058722 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 18:41:02.013440 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 18:41:18.014581 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 18:41:50.112259 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 18:47:54.120095 2.998556 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 18:48:01.124892 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 18:48:09.126377 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 18:48:25.128913 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 18:48:57.136749 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 18:55:01.141319 3.001401 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 18:55:08.148452 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 18:55:16.150063 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 18:55:32.152662 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 18:56:04.158713 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 19:02:08.445608 3.001576 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 19:02:15.452649 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 19:02:23.454084 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 19:02:39.457660 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 19:03:11.463243 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 19:09:15.469211 3.001801 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 19:09:22.476774 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 19:09:30.478220 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 19:09:46.481639 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 19:10:18.487518 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 19:16:22.493889 3.001536 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 19:16:29.500544 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 19:16:37.502169 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 19:16:53.505000 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 19:17:25.511686 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 19:23:29.516754 3.002040 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 19:23:36.524847 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 19:23:44.526281 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 19:24:00.529024 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 19:24:32.536237 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 19:30:36.542310 3.371031 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 19:30:43.920280 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 19:30:51.920981 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 19:31:07.923993 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 19:31:39.930578 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 19:37:43.936110 3.001442 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 19:37:50.943145 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 19:37:58.945093 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 19:38:14.948106 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 19:38:46.953854 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 19:44:50.959457 3.001915 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 19:44:57.967404 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 19:45:05.969034 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 19:45:21.971955 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 19:45:53.977928 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 19:51:57.984819 3.000862 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 19:52:04.991239 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 19:52:12.992421 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 19:52:28.995985 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 19:53:01.001548 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 19:59:05.009626 2.999881 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 19:59:12.014944 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 19:59:20.017131 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 19:59:36.019926 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 20:00:08.025977 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 20:06:12.033006 3.000128 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 20:06:19.040219 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 20:06:27.040968 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 20:06:43.043955 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 20:07:15.050576 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 20:13:19.056098 3.000826 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 20:13:26.063200 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 20:13:34.064612 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 20:13:50.067546 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 20:14:22.073445 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 20:20:26.081059 3.000032 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 20:20:33.086675 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 20:20:41.088465 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 20:20:57.092907 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 20:21:29.097523 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 20:27:33.103263 3.002518 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 20:27:40.110649 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 20:27:48.112236 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 20:28:04.115352 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 20:28:36.121435 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 20:34:40.128536 3.000512 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 20:34:47.135368 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 20:34:55.136578 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 20:35:11.139139 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 20:35:43.146043 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 20:41:47.152699 3.000275 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 20:41:54.298845 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 20:42:02.300792 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 20:42:18.303838 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 20:42:50.309376 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 20:48:54.315469 3.001669 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 20:49:01.322851 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 20:49:09.324562 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 20:49:25.327244 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 20:49:57.334069 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 20:56:01.339644 3.001322 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 20:56:08.347054 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 20:56:16.348619 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 20:56:32.352017 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 20:57:04.357951 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 21:03:08.363888 3.001199 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 21:03:15.371451 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 21:03:23.372860 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 21:03:39.375597 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 21:04:11.731987 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 21:10:16.109041 3.001558 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 21:10:23.115689 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 21:10:31.117565 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 21:10:47.120413 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 21:11:19.126586 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 21:17:23.132449 3.001675 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 21:17:30.139759 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 21:17:38.141198 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 21:17:54.145167 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 21:18:26.150645 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 21:24:30.156253 3.002115 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 21:24:39.958282 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 21:24:47.959649 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 21:25:06.275987 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 21:25:38.281869 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 21:31:51.291619 3.000939 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 21:31:58.299499 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 21:32:06.299826 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 21:32:22.302778 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 21:32:54.309792 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 21:38:58.314493 3.001918 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 21:39:05.322321 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 21:39:13.324013 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 21:39:29.326928 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 21:40:01.332751 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 21:46:05.338929 3.001219 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 21:46:12.346397 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 21:46:20.347759 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 21:46:36.350911 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 21:47:08.356479 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 21:53:13.714808 3.001088 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 21:53:20.722151 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 21:53:28.723790 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 21:53:44.727262 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 21:54:16.732701 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 22:00:20.738572 3.001867 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 22:00:27.746013 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 22:00:35.747359 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 22:00:51.750452 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 22:01:23.756837 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 22:07:27.764443 2.999546 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 22:07:34.770534 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 22:07:42.771199 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 22:07:58.774594 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 22:08:32.562706 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 22:14:36.569329 3.008502 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 22:14:43.576149 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 22:14:51.577905 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 22:15:07.581124 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 22:15:39.587331 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 22:21:44.234721 3.001187 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 22:21:51.241478 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 22:21:59.242936 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 22:22:15.245840 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 22:22:47.253066 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 22:28:51.258806 3.000560 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 22:28:58.265204 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 22:29:06.266529 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 22:29:22.270216 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 22:29:54.275965 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 22:35:58.283499 3.000344 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 22:36:05.289492 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 22:36:13.291244 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 22:36:29.293614 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 22:37:02.292506 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 22:43:10.303358 3.001487 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 22:43:17.310498 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 22:43:25.312063 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 22:43:41.315189 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 22:44:13.321337 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 22:50:20.331503 3.001237 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 22:50:27.338537 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 22:50:35.340059 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 22:50:51.342897 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 22:51:23.349110 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 22:57:52.361709 3.001278 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 22:57:59.368710 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 22:58:07.370106 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 22:58:23.373141 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 22:58:55.378941 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 23:01:51.010197 0.000054 arp 10.0.2.110 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/03 23:01:51.010297 1.654022 udp 10.0.2.110 50595 <-> 8.8.8.8 53 CON 0 0 2 164 flow=From-Botnet-V1-DNS 1970/01/03 23:01:52.002833 1.690177 udp 10.0.2.110 50595 <-> 8.8.4.4 53 CON 0 0 2 164 flow=From-Botnet-V1-DNS 1970/01/03 23:01:52.664820 0.880382 tcp 10.0.2.110 49229 -> 61.147.82.180 80 SPA_* 0 0 7 1053 flow=From-Botnet-V1-TCP-Established 1970/01/03 23:01:53.351338 0.000060 tcp 10.0.2.110 49227 61.147.82.182 80 RA_ 0 0 2 108 flow=Background 1970/01/03 23:01:53.693010 0.000000 icmp 10.0.2.110 0x0303 -> 8.8.4.4 0xa3c5 URP 0 1 118 flow=Background 1970/01/03 23:02:08.346557 0.000136 tcp 10.0.2.110 49229 -> 61.147.82.180 80 A_FA 0 0 2 108 flow=From-Botnet-V1-TCP-Established 1970/01/03 23:04:59.395317 3.321746 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 23:05:06.722915 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 23:05:14.724787 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 23:05:30.728151 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 23:06:02.733875 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 23:12:10.745649 3.001113 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 23:12:17.752889 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 23:12:25.754340 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 23:12:41.757609 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 23:13:13.763013 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 23:19:21.775231 3.001928 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 23:19:28.782211 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 23:19:36.783895 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 23:19:52.787421 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 23:20:24.792822 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 23:26:28.798913 3.001751 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 23:26:35.806600 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 23:26:43.808248 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 23:26:59.811228 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 23:27:31.817001 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 23:33:35.823188 3.001474 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 23:33:42.830619 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 23:33:50.832934 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 23:34:06.835072 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 23:34:38.841145 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 23:40:42.847191 3.001779 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 23:40:49.855467 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 23:40:57.856202 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 23:41:13.858717 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 23:41:45.866073 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 23:47:49.870382 3.002289 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 23:47:56.878277 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 23:48:04.879922 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 23:48:20.882697 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 23:48:54.141007 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 23:54:59.919233 3.001779 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/03 23:55:06.926637 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 23:55:14.928418 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 23:55:31.812286 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/03 23:56:03.818607 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 00:02:07.825528 3.000396 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 00:02:14.832467 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 00:02:22.833207 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 00:02:38.836476 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 00:03:13.056740 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 00:09:17.062359 3.001515 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 00:09:24.068766 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 00:09:32.070409 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 00:09:48.073386 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 00:10:20.079638 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 00:16:24.926536 3.001866 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 00:16:31.934457 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 00:16:39.936026 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 00:16:55.938589 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 00:17:27.945014 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 00:23:31.950795 3.001570 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 00:23:38.958188 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 00:23:46.960741 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 00:24:02.962548 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 00:24:34.969080 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 00:30:38.976082 3.000597 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 00:30:45.982723 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 00:30:53.983727 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 00:31:10.107256 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 00:31:42.113059 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 00:37:46.120379 3.000460 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 00:37:53.127580 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 00:38:01.128237 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 00:38:17.131105 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 00:38:49.137610 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 00:44:53.142595 3.001640 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 00:45:00.150258 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 00:45:08.152041 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 00:45:24.154869 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 00:45:56.501099 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 00:52:00.507101 3.001779 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 00:52:07.514961 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 00:52:15.517415 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 00:52:31.519175 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 00:53:03.525104 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 00:59:07.533282 2.999470 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 00:59:14.545963 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 00:59:22.540567 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 00:59:38.543006 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 01:00:10.549458 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 01:06:14.555519 3.001305 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 01:06:21.562608 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 01:06:29.564329 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 01:06:45.566834 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 01:07:18.805155 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 01:13:22.811455 3.001111 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 01:13:29.818394 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 01:13:40.664325 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 01:13:56.667259 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 01:14:30.205480 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 01:20:40.219501 3.002449 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 01:20:47.227532 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 01:20:55.228638 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 01:21:11.232322 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 01:21:43.238159 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 01:27:47.243790 3.001377 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 01:27:54.251740 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 01:28:02.252555 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 01:28:18.256734 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 01:28:50.262218 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 01:34:54.267737 3.001772 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 01:35:01.275062 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 01:35:09.277144 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 01:35:25.279747 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 01:35:57.706473 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 01:42:01.712442 3.282504 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 01:42:09.000849 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 01:42:17.001562 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 01:42:33.004946 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 01:43:05.010763 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 01:49:09.016634 3.002075 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 01:49:16.024216 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 01:49:24.025618 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 01:49:40.029883 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 01:50:12.034622 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 01:56:16.040567 3.008483 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 01:56:23.048396 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 01:56:31.049950 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 01:56:47.052861 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 01:57:19.058666 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 02:03:23.065519 3.000938 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 02:03:30.072489 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 02:03:38.073935 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 02:03:54.076756 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 02:04:26.633163 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 02:10:30.640824 3.000092 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 02:10:37.647820 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 02:10:45.648130 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 02:11:01.651468 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 02:11:33.657681 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 02:17:37.664088 3.000642 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 02:17:44.670835 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 02:17:52.672573 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 02:18:08.675676 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 02:18:40.681560 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 02:24:44.687964 3.001215 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 02:24:51.694847 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 02:24:59.696254 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 02:25:15.699016 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 02:25:47.705092 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 02:31:51.711117 3.002119 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 02:31:58.718770 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 02:32:06.720347 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 02:32:22.722944 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 02:32:54.729157 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 02:38:58.734998 3.002006 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 02:39:05.742800 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 02:39:13.744536 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 02:39:29.747314 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 02:40:01.753989 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 02:46:05.759898 3.001149 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 02:46:12.767770 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 02:46:20.767923 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 02:46:36.771121 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 02:47:08.777384 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 02:53:12.782971 3.001601 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 02:53:19.790632 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 02:53:27.792394 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 02:53:43.794867 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 02:54:15.801655 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 03:00:19.807705 3.001407 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 03:00:26.814528 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 03:00:34.816290 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 03:00:50.820140 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 03:01:23.076605 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 03:07:27.082844 3.000066 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 03:07:34.088872 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 03:07:42.090341 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 03:07:58.093364 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 03:08:30.099689 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 03:14:34.105785 3.001306 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 03:14:41.113251 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 03:14:49.114324 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 03:15:05.117390 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 03:15:37.123290 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 03:21:41.129230 3.001665 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 03:21:48.367402 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 03:21:56.368533 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 03:22:12.372955 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 03:22:44.738563 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 03:28:48.744234 3.001622 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 03:28:55.751602 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 03:29:03.753423 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 03:29:19.756098 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 03:29:51.762339 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 03:31:42.868208 0.000060 arp 10.0.2.110 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 03:31:42.868321 0.266547 udp 10.0.2.110 50180 <-> 8.8.8.8 53 CON 0 0 2 168 flow=From-Botnet-V1-DNS 1970/01/04 03:31:43.135410 2.109727 tcp 10.0.2.110 49230 -> 61.147.82.182 80 SPA_* 0 0 7 938 flow=From-Botnet-V1-TCP-Established 1970/01/04 03:31:43.135563 2.109485 tcp 10.0.2.110 49231 -> 61.147.82.182 80 SPA_* 0 0 7 940 flow=From-Botnet-V1-TCP-Established 1970/01/04 03:31:43.135715 2.410217 tcp 10.0.2.110 49232 -> 61.147.82.182 80 SPA_* 0 0 7 961 flow=From-Botnet-V1-TCP-Established 1970/01/04 03:31:45.044733 0.000033 tcp 10.0.2.110 49229 61.147.82.180 80 RA_ 0 0 2 108 flow=Background 1970/01/04 03:31:45.048500 0.821160 udp 10.0.2.110 50798 <-> 8.8.8.8 53 CON 0 0 2 222 flow=From-Botnet-V1-DNS 1970/01/04 03:31:45.870155 3.311174 tcp 10.0.2.110 49233 -> 61.158.145.141 80 SPA_* 0 0 10 2613 flow=From-Botnet-V1-TCP-Established 1970/01/04 03:31:45.870362 1.227345 tcp 10.0.2.110 49234 -> 61.158.145.141 80 SPA_* 0 0 10 3771 flow=From-Botnet-V1-TCP-Established 1970/01/04 03:31:45.870561 1.075820 tcp 10.0.2.110 49235 -> 61.158.145.141 80 SPA_* 0 0 18 13582 flow=From-Botnet-V1-TCP-Established 1970/01/04 03:31:58.329324 2.217968 tcp 10.0.2.110 49231 -> 61.147.82.182 80 PA_PA 0 0 6 2693 flow=From-Botnet-V1-TCP-Established 1970/01/04 03:32:00.348545 4.674137 tcp 10.0.2.110 49230 -> 61.147.82.182 80 FPA_* 0 0 6 871 flow=From-Botnet-V1-TCP-Established 1970/01/04 03:32:01.833325 3.189909 tcp 10.0.2.110 49234 -> 61.158.145.141 80 RA_FA 0 0 3 162 flow=From-Botnet-V1-TCP-Established 1970/01/04 03:32:01.851352 3.172136 tcp 10.0.2.110 49233 -> 61.158.145.141 80 RA_FA 0 0 3 162 flow=From-Botnet-V1-TCP-Established 1970/01/04 03:32:01.858992 3.164378 tcp 10.0.2.110 49235 -> 61.158.145.141 80 RA_FA 0 0 3 162 flow=From-Botnet-V1-TCP-Established 1970/01/04 03:32:05.025134 2.114273 tcp 10.0.2.110 49232 -> 61.147.82.182 80 PA_PA 0 0 11 6784 flow=From-Botnet-V1-TCP-Established 1970/01/04 03:32:05.414947 0.000148 tcp 10.0.2.110 49230 -> 61.147.82.182 80 A_FA 0 0 2 108 flow=From-Botnet-V1-TCP-Established 1970/01/04 03:32:07.616535 0.883556 udp 10.0.2.110 59893 <-> 8.8.8.8 53 CON 0 0 2 225 flow=From-Botnet-V1-DNS 1970/01/04 03:32:08.500654 4.132483 tcp 10.0.2.110 49236 -> 61.158.145.140 80 SPA_* 0 0 31 21536 flow=From-Botnet-V1-TCP-Established 1970/01/04 03:32:17.312265 4.997244 tcp 10.0.2.110 49236 -> 61.158.145.140 80 PA_PA 0 0 23 15662 flow=From-Botnet-V1-TCP-Established 1970/01/04 03:32:22.313360 4.813132 tcp 10.0.2.110 49236 -> 61.158.145.140 80 PA_PA 0 0 29 19655 flow=From-Botnet-V1-TCP-Established 1970/01/04 03:32:28.456880 4.979504 tcp 10.0.2.110 49236 -> 61.158.145.140 80 PA_PA 0 0 14 8749 flow=From-Botnet-V1-TCP-Established 1970/01/04 03:32:34.498253 4.058366 tcp 10.0.2.110 49236 -> 61.158.145.140 80 PA_PA 0 0 27 18452 flow=From-Botnet-V1-TCP-Established 1970/01/04 03:32:39.767655 4.962824 tcp 10.0.2.110 49236 -> 61.158.145.140 80 PA_PA 0 0 44 30114 flow=From-Botnet-V1-TCP-Established 1970/01/04 03:32:45.579722 2.166233 tcp 10.0.2.110 49236 -> 61.158.145.140 80 PA_PA 0 0 21 15795 flow=From-Botnet-V1-TCP-Established 1970/01/04 03:32:53.428866 4.769094 tcp 10.0.2.110 49236 -> 61.158.145.140 80 PA_PA 0 0 22 14057 flow=From-Botnet-V1-TCP-Established 1970/01/04 03:32:58.643768 4.937166 tcp 10.0.2.110 49236 -> 61.158.145.140 80 PA_PA 0 0 72 55979 flow=From-Botnet-V1-TCP-Established 1970/01/04 03:32:58.786389 1.624004 tcp 10.0.2.110 49231 -> 61.147.82.182 80 RA_FA 0 0 3 162 flow=From-Botnet-V1-TCP-Established 1970/01/04 03:33:05.429548 0.867175 tcp 10.0.2.110 49232 -> 61.147.82.182 80 RA_FA 0 0 3 162 flow=From-Botnet-V1-TCP-Established 1970/01/04 03:33:06.062241 4.736100 tcp 10.0.2.110 49236 -> 61.158.145.140 80 PA_PA 0 0 40 27995 flow=From-Botnet-V1-TCP-Established 1970/01/04 03:33:11.712781 4.580663 tcp 10.0.2.110 49236 -> 61.158.145.140 80 PA_PA 0 0 36 24040 flow=From-Botnet-V1-TCP-Established 1970/01/04 03:33:16.744379 4.769147 tcp 10.0.2.110 49236 -> 61.158.145.140 80 PA_PA 0 0 40 28601 flow=From-Botnet-V1-TCP-Established 1970/01/04 03:33:21.965924 4.944290 tcp 10.0.2.110 49236 -> 61.158.145.140 80 PA_PA 0 0 19 13901 flow=From-Botnet-V1-TCP-Established 1970/01/04 03:33:27.308049 0.510762 tcp 10.0.2.110 49236 -> 61.158.145.140 80 A_PA 0 0 11 9132 flow=From-Botnet-V1-TCP-Established 1970/01/04 03:33:41.909782 0.000150 tcp 10.0.2.110 49236 -> 61.158.145.140 80 A_FA 0 0 2 108 flow=From-Botnet-V1-TCP-Established 1970/01/04 03:35:56.188939 3.001293 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 INT 0 3 441 flow=Background 1970/01/04 03:36:03.196536 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 03:36:11.197701 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 03:36:27.200982 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 03:36:59.206741 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 03:43:03.212232 3.002411 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 03:43:10.821040 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 03:43:18.822932 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 03:43:34.825312 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 03:44:06.831799 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 03:50:10.837327 3.793502 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 03:50:18.636912 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 03:50:26.637875 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 03:50:42.641078 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 03:51:16.218743 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 03:57:20.225678 3.171629 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 03:57:27.402712 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 03:57:35.403861 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 03:57:51.407313 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 03:58:23.413753 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 04:04:27.420384 3.000387 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 04:04:34.427802 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 04:04:42.428623 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 04:04:58.431479 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 04:05:30.437648 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 04:11:34.444643 3.000369 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 04:11:41.450289 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 04:11:49.452190 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 04:12:05.454948 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 04:12:37.461103 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 04:18:41.467273 3.231730 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 04:18:48.704890 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 04:18:56.706606 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 04:19:12.709795 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 04:19:44.715706 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 04:25:48.721646 3.002313 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 04:25:55.728571 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 04:26:03.730386 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 04:26:19.733196 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 04:26:51.739823 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 04:32:55.745208 4.094008 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 04:33:03.845060 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 04:33:11.845986 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 04:33:27.848949 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 04:33:59.855373 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 04:40:03.861215 3.001354 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 04:40:10.868117 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 04:40:18.870183 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 04:40:34.872878 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 04:41:08.482072 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 04:47:14.250092 3.242212 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 04:47:21.497532 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 04:47:29.498686 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 04:47:45.501822 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 04:48:17.688696 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 04:54:21.694051 3.021707 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 04:54:28.721391 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 04:54:39.617604 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 04:54:55.622609 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 04:55:27.626513 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 05:01:34.637595 3.001162 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 05:01:41.644729 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 05:01:49.645592 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 05:02:05.648690 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 05:02:37.655742 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 05:08:41.660379 3.001943 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 05:08:48.668429 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 05:08:56.669968 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 05:09:12.672688 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 05:09:45.079539 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 05:15:49.085553 3.001571 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 05:15:56.092623 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 05:16:04.095028 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 05:16:20.096978 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 05:16:52.102951 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 05:22:56.110104 3.000699 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 05:23:03.117525 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 05:23:11.118169 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 05:23:27.121246 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 05:23:59.127687 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 05:30:03.133020 3.001639 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 05:30:10.141004 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 05:30:18.141833 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 05:30:34.145025 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 05:31:06.451513 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 05:37:10.458387 3.221552 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 05:37:17.685277 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 05:37:25.686790 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 05:37:41.690275 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 05:38:13.695584 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 05:44:17.701523 3.002003 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 05:44:24.709035 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 05:44:32.710763 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 05:44:48.715012 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 05:45:20.719971 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 05:51:24.725540 3.002297 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 05:51:32.414745 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 05:51:40.415908 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 05:51:56.418984 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 05:52:28.424946 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 05:58:32.430488 3.002304 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 05:58:39.438583 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 05:58:47.440005 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 05:59:03.442956 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 05:59:35.448889 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 06:05:39.456311 2.999985 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 06:05:50.698805 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 06:05:58.700011 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 06:06:14.703101 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 06:06:46.708885 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 06:12:56.723989 3.000908 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 06:13:03.732137 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 06:13:11.732501 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 06:13:27.735323 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 06:13:59.742499 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 06:20:03.747904 3.121043 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 06:20:10.874701 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 06:20:18.877008 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 06:20:34.879848 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 06:21:07.186792 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 06:27:11.193089 3.020649 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 06:27:18.219242 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 06:27:26.221453 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 06:27:42.223869 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 06:28:14.229799 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 06:34:19.237585 3.001230 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 06:34:26.244804 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 06:34:34.246343 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 06:34:50.249434 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 06:35:22.255622 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 06:41:26.262620 3.200487 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 06:41:33.469066 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 06:41:41.470941 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 06:41:57.473671 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 06:42:29.480013 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 06:48:33.485541 3.332546 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 06:48:40.823897 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 06:48:48.825095 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 06:49:04.827872 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 06:49:37.134841 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 06:55:46.950591 2.957054 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 06:55:53.869114 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 06:56:01.778552 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 06:56:17.578444 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 06:56:49.208827 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 07:02:51.249146 3.001592 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 07:02:58.257331 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 07:03:06.257837 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 07:03:22.261171 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 07:03:54.267587 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 07:09:58.273421 3.001062 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 07:10:05.280788 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 07:10:13.281799 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 07:10:29.285121 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 07:11:01.641067 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 07:17:12.647389 3.001498 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 07:17:19.655330 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 07:17:28.187384 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 07:17:44.190347 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 07:18:17.498495 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 07:24:24.509380 3.000817 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 07:24:31.516773 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 07:24:39.517412 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 07:24:55.520621 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 07:25:27.526963 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 07:31:31.532064 3.001832 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 07:31:38.539562 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 07:31:46.541185 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 07:32:02.544485 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 07:32:34.550230 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 07:38:38.556599 3.001354 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 07:38:45.563530 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 07:38:53.675525 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 07:39:09.678541 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 07:39:41.684909 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 07:45:45.698843 3.023344 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 07:45:52.728082 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 07:46:00.729196 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 07:46:16.732249 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 07:46:48.739102 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 07:52:52.745218 3.000775 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 07:52:59.751745 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 07:53:07.753715 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 07:53:23.756020 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 07:53:55.762621 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 07:59:59.769280 3.000667 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 08:00:06.775473 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 08:00:14.777537 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 08:00:30.780716 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 08:01:02.786104 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 08:07:06.792035 3.001745 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 08:07:13.800162 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 08:07:21.800916 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 08:07:37.805190 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 08:08:09.810398 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 08:14:13.815928 3.002009 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 08:14:20.823976 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 08:14:28.825000 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 08:14:44.828040 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 08:15:16.834019 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 08:21:20.840951 3.071549 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 08:21:27.918105 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 08:21:35.919619 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 08:21:51.922162 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 08:22:24.649079 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 08:28:28.656362 3.040766 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 08:28:35.732838 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 08:28:43.734510 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 08:28:59.737591 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 08:29:31.743412 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 08:35:35.749852 3.222041 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 08:35:42.977355 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 08:35:50.978725 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 08:36:06.981584 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 08:36:38.987841 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 08:42:42.993526 3.002095 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 08:42:50.000825 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 08:42:58.003069 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 08:43:14.005774 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 08:43:47.053861 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 08:49:55.064780 3.002059 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 08:50:02.072412 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 08:50:10.074103 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 08:50:26.077267 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 08:50:58.083746 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 08:57:03.089829 3.002591 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 08:57:10.097655 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 08:57:18.099505 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 08:57:34.122468 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 08:58:06.368716 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 09:04:35.467604 3.025035 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 09:04:42.498614 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 09:04:50.499628 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 09:05:06.502912 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 09:05:38.509869 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 09:11:42.514448 3.001915 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 09:11:49.522607 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 09:11:57.524080 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 09:12:13.526702 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 09:12:45.532764 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 09:18:49.539319 3.000965 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 09:18:56.546456 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 09:19:04.547787 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 09:19:20.550358 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 09:19:52.557100 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 09:25:56.562805 3.101962 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 09:26:03.670496 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 09:26:11.671572 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 09:26:27.675022 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 09:26:59.680625 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 09:33:03.686514 3.001998 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 09:33:10.694163 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 09:33:18.696124 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 09:33:34.698911 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 09:34:06.704929 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 09:40:10.711071 3.041514 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 09:40:17.758342 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 09:40:25.759664 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 09:40:41.762581 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 09:41:13.768534 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 09:47:17.774661 3.001630 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 09:47:24.782607 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 09:47:32.783798 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 09:47:48.787404 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 09:48:20.792433 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 09:54:24.859570 3.051058 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 09:54:31.916363 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 09:54:39.918171 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 09:54:55.921116 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 09:55:27.926569 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 10:01:31.932927 3.002559 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 10:01:40.763325 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 10:01:48.764195 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 10:02:04.767573 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 10:02:36.773487 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 10:08:40.779147 3.002051 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 10:08:47.787255 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 10:08:55.788780 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 10:09:11.791593 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 10:09:44.018845 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 10:15:48.024457 3.001870 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 10:15:55.031810 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 10:16:03.202921 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 10:16:19.205817 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 10:16:51.212392 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 10:22:55.218272 3.081465 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 10:23:02.305257 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 10:23:10.306992 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 10:23:26.309851 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 10:23:58.316757 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 10:30:02.324003 2.999803 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 10:30:09.329145 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 10:30:17.330699 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 10:30:33.334594 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 10:31:05.340694 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 10:37:09.346011 3.001617 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 10:37:16.473423 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 10:37:24.475371 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 10:37:40.478118 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 10:38:12.484352 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 10:44:16.490504 3.091137 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 10:44:23.588064 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 10:44:31.589048 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 10:44:47.592256 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 10:45:19.598270 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 10:51:23.606136 2.999501 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 10:51:30.612939 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 10:51:38.612873 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 10:51:54.616414 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 10:52:26.623612 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 10:58:30.628449 3.001549 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 10:58:37.635489 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 10:58:45.807273 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 10:59:01.810547 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 10:59:33.816299 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 11:05:37.822374 3.131754 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 11:05:44.959884 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 11:05:53.341956 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 11:06:09.345352 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 11:06:41.351217 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 11:12:45.357088 3.002178 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 11:12:52.364382 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 11:13:00.366477 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 11:13:16.369242 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 11:13:48.374935 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 11:19:52.381036 3.002338 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 11:20:01.982416 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 11:20:09.983743 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 11:20:25.987026 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 11:20:57.993004 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 11:27:01.999050 3.001747 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 11:27:09.006378 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 11:27:17.007852 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 11:27:33.010757 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 11:28:05.017248 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 11:34:09.023410 3.000667 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 11:34:16.280350 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 11:34:24.282013 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 11:34:40.285282 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 11:35:12.291423 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 11:41:16.297145 3.001844 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 11:41:23.304502 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 11:41:31.306442 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 11:41:47.309880 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 11:42:19.314887 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 11:48:23.321449 3.001338 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 11:48:30.328310 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 11:48:39.151062 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 11:48:55.153831 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 11:49:27.161468 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 11:55:31.165725 3.002213 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 11:55:38.173932 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 11:55:46.175278 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 11:56:02.178128 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 11:56:34.184399 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 12:02:38.190744 3.001053 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 12:02:45.368058 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 12:02:53.439587 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 12:03:09.442459 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 12:03:41.448410 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 12:09:45.454337 3.002030 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 12:09:52.461799 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 12:10:00.464312 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 12:10:16.466240 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 12:10:48.472582 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 12:16:52.478935 3.001487 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 12:16:59.486225 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 12:17:07.487782 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 12:17:23.490154 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 12:17:55.496914 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 12:23:59.502650 3.301760 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 12:24:06.810392 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 12:24:15.162442 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 12:24:31.165097 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 12:25:03.431905 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 12:31:07.438129 3.002442 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 12:31:14.444909 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 12:31:22.446282 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 12:31:38.449520 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 12:32:10.455782 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 12:38:14.461682 3.001503 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 12:38:21.469360 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 12:38:29.470547 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 12:38:45.473587 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 12:39:17.480126 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 12:45:21.486168 3.111278 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 12:45:28.603216 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 12:45:36.604352 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 12:45:52.607638 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 12:46:24.613703 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 12:52:28.619546 3.011954 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 12:52:35.638292 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 12:52:43.638777 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 12:52:59.641804 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 12:53:31.648375 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 12:59:35.653470 3.002119 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 12:59:42.660906 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 12:59:50.662838 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 13:00:06.665745 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 13:00:38.671662 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 13:06:42.677944 3.001768 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 13:06:49.685354 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 13:06:57.686834 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 13:07:13.690640 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 13:07:45.695730 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 13:13:50.223032 3.251721 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 13:13:57.480212 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 13:14:05.481484 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 13:14:21.484993 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 13:14:54.953131 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 13:20:58.959905 3.000780 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 13:21:05.967038 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 13:21:14.067632 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 13:21:30.071833 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 13:22:02.076752 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 13:28:06.083838 3.001842 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 13:28:13.090443 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 13:28:21.092005 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 13:28:37.095116 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 13:29:09.100619 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 13:35:13.107504 3.042105 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 13:35:20.264518 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 13:35:28.265855 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 13:35:44.269049 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 13:36:16.275053 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 13:42:20.281777 3.181093 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 13:42:27.468880 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 13:42:35.471647 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 13:42:51.963631 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 13:43:23.971700 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 13:49:27.977518 3.000354 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 13:49:34.983607 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 13:49:42.985036 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 13:49:58.988170 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 13:50:32.646317 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 13:56:36.652303 3.001837 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 13:56:43.659689 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 13:56:51.661199 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 13:57:07.664509 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 13:57:39.670540 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 14:03:43.676764 3.001201 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 14:03:50.683765 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 14:03:58.685090 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 14:04:14.688053 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 14:04:46.814761 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 14:10:50.820639 3.001731 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 14:10:57.827783 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 14:11:05.829236 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 14:11:21.832206 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 14:11:53.838069 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 14:17:57.845228 3.000927 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 14:18:04.852918 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 14:18:13.273851 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 14:18:29.276649 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 14:19:01.283404 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 14:25:05.289706 3.341499 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 14:25:12.638088 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 14:25:20.638625 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 14:25:36.641066 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 14:26:08.648964 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 14:32:12.654485 3.000624 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 14:32:19.661040 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 14:32:27.942632 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 14:32:43.945985 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 14:33:15.952670 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 14:39:19.958347 3.000885 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 14:39:26.965722 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 14:39:34.967232 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 14:39:50.969433 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 14:40:24.758727 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 14:46:28.765142 3.001175 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 14:46:35.772166 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 14:46:43.772996 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 14:46:59.777298 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 14:47:31.782170 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 14:53:35.788530 0.998412 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 2 294 flow=Background 1970/01/04 14:53:41.714618 4.125837 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 2 294 flow=Background 1970/01/04 14:53:53.841654 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 14:54:09.844763 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 14:54:41.850765 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 15:00:49.863175 3.001163 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 15:00:56.871264 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 15:01:04.871423 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 15:01:20.874026 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 15:01:52.880734 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 15:07:56.886365 3.001534 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 15:08:04.184570 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 15:08:12.185538 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 15:08:28.188641 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 15:09:00.194743 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 15:15:04.200697 3.001646 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 15:15:11.208364 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 15:15:20.000915 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 15:15:36.003973 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 15:16:08.009592 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 15:22:12.015719 3.001841 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 15:22:19.022946 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 15:22:27.024718 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 15:22:43.027691 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 15:23:15.034194 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 15:29:19.039370 3.002203 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 15:29:26.047563 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 15:29:34.048862 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 15:29:50.051991 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 15:30:22.408136 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 15:32:06.299430 1.850661 arp 10.0.2.110 who 10.0.2.2 CON 4 168 flow=Background-ARP 1970/01/04 15:32:08.150573 0.921170 tcp 10.0.2.110 49237 -> 61.147.82.182 80 SPA_* 0 0 7 831 flow=From-Botnet-V1-TCP-Established 1970/01/04 15:32:08.151430 4.084441 tcp 10.0.2.110 49238 -> 61.147.82.182 80 SPA_* 0 0 7 829 flow=From-Botnet-V1-TCP-Established 1970/01/04 15:32:08.156196 3.355945 tcp 10.0.2.110 49239 -> 61.147.82.182 80 SR_SA 0 0 3 178 flow=From-Botnet-V1-TCP-Established 1970/01/04 15:32:08.862925 0.000038 tcp 10.0.2.110 49236 61.158.145.140 80 RA_ 0 0 2 108 flow=Background 1970/01/04 15:33:08.860438 0.000176 tcp 10.0.2.110 49237 -> 61.147.82.182 80 A_FA 0 0 2 108 flow=From-Botnet-V1-TCP-Established 1970/01/04 15:33:12.036380 0.000150 tcp 10.0.2.110 49238 -> 61.147.82.182 80 A_FA 0 0 2 108 flow=From-Botnet-V1-TCP-Established 1970/01/04 15:33:13.443741 0.000046 arp 10.0.2.110 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 15:36:27.305296 3.001587 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 INT 0 3 441 flow=Background 1970/01/04 15:36:34.313089 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 15:36:42.314384 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 15:36:58.317245 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 15:37:30.323513 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 15:43:34.329574 3.002419 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 15:43:41.336642 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 15:43:49.338294 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 15:44:05.341771 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 15:44:37.347447 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 15:50:41.354062 3.001266 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 15:50:48.360939 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 15:50:56.362248 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 15:51:12.365591 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 15:51:44.372683 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 15:57:48.378777 2.999981 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 15:57:55.585040 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 15:58:07.843008 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 15:58:23.845966 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 15:58:55.852127 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 16:05:01.861681 3.000610 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 16:05:08.868421 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 16:05:16.869524 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 16:05:32.872760 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 16:06:04.878840 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 16:12:08.884075 3.002358 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 16:12:15.891944 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 16:12:23.893520 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 16:12:39.896970 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 16:13:11.903713 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 16:19:17.430755 3.071831 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 16:19:24.508639 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 16:19:32.510339 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 16:19:48.513107 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 16:20:22.962471 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 16:26:46.586436 3.402229 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 16:26:54.635922 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 16:27:02.637397 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 16:27:18.639862 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 16:27:50.787445 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 16:33:55.012643 3.001913 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 16:34:02.020176 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 16:34:10.021280 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 16:34:26.024638 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 16:34:58.541178 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 16:41:02.547078 3.001555 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 16:41:09.554941 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 16:41:17.556194 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 16:41:33.809435 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 16:42:06.056240 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 16:48:10.062083 3.002397 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 16:48:17.069430 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 16:48:25.211412 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 16:48:41.214301 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 16:49:14.292053 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 16:55:18.297946 3.001324 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 16:55:25.304947 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 16:55:33.306881 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 16:55:49.309737 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 16:56:21.315653 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 17:02:35.325390 3.002736 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 17:02:42.333602 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 17:02:50.334658 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 17:03:06.337715 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 17:03:38.343907 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 17:10:02.358991 3.001518 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 17:10:09.366436 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 17:10:17.367433 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 17:10:33.371241 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 17:11:05.377123 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 17:17:09.384704 2.999885 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 17:17:16.391928 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 17:17:24.391638 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 17:17:40.394655 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 17:18:12.401516 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 17:24:16.407814 3.000428 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 17:24:23.414488 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 17:24:31.415901 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 17:24:47.418971 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 17:25:19.424525 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 17:31:23.430766 3.001802 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 17:31:30.438374 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 17:31:38.439780 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 17:31:54.442542 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 17:32:26.829042 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 17:38:30.835788 3.002302 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 17:38:37.842643 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 17:38:45.854054 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 17:39:01.857390 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 17:39:33.863370 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 17:45:37.868541 3.002156 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 17:45:44.876653 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 17:45:52.878317 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 17:46:08.881227 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 17:46:40.887123 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 17:52:44.894169 3.000282 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 17:52:51.902040 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 17:52:59.901827 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 17:53:15.905064 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 17:53:48.202038 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 17:59:52.208239 3.000687 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 17:59:59.214824 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 18:00:07.216391 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 18:00:23.219637 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 18:00:55.225773 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 18:06:59.232441 3.381831 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 18:07:06.679396 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 18:07:14.681080 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 18:07:30.684138 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 18:08:02.690274 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 18:14:06.695845 3.002265 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 18:14:13.703405 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 18:14:21.705133 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 18:14:38.929880 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 18:15:10.936271 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 18:21:14.942777 3.110889 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 18:21:22.059557 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 18:21:30.061092 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 18:21:46.064709 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 18:22:18.069891 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 18:28:22.075558 3.003058 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 18:28:29.082977 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 18:28:37.084692 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 18:28:53.088050 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 18:29:26.766494 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 18:35:30.773283 3.151788 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 18:35:37.930113 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 18:35:45.931252 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 18:36:01.934145 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 18:36:33.940492 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 18:42:37.947017 3.001492 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 18:42:44.953981 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 18:42:52.955875 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 18:43:08.958638 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 18:43:41.454894 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 18:49:45.461401 3.001668 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 18:49:52.468719 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 18:50:00.470384 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 18:50:16.472928 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 18:50:48.478758 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 18:56:52.485564 3.602581 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 18:57:00.093351 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 18:57:08.094900 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 18:57:24.099538 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 18:57:56.104338 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 19:04:03.525536 3.000815 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 19:04:10.532241 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 19:04:18.533802 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 19:04:34.536589 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 19:05:06.543073 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 19:11:10.548362 3.002207 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 19:11:17.556677 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 19:11:25.557925 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 19:11:41.560410 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 19:12:13.567180 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 19:18:33.586301 3.001071 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 19:18:40.593172 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 19:18:48.594767 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 19:19:04.598006 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 19:19:36.603876 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 19:25:54.609370 3.012235 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 19:26:01.628435 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 19:26:09.628658 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 19:26:25.631879 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 19:26:57.638870 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 19:33:03.649121 2.999315 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 19:33:10.654515 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 19:33:18.655382 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 19:33:34.658914 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 19:34:06.696041 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 19:40:10.701133 3.001419 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 19:40:17.708243 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 19:40:25.709515 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 19:40:41.913088 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 19:41:13.919249 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 19:47:17.925784 3.191699 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 19:47:25.122929 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 19:47:33.124361 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 19:47:49.127004 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 19:48:21.133299 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 19:54:25.338872 3.022519 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 19:54:32.367948 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 19:54:40.428440 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 19:54:56.431356 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 19:55:28.438515 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 20:01:32.444897 3.000055 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 20:01:39.450752 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 20:01:47.702823 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 20:02:03.705602 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 20:02:35.712207 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 20:08:39.718318 3.281440 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 20:08:47.005586 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 20:08:55.007220 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 20:09:11.010638 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 20:09:43.016686 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 20:15:47.023045 3.301635 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 20:15:54.330523 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 20:16:02.331939 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 20:16:18.334599 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 20:16:50.340799 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 20:22:54.346720 3.002875 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 20:23:01.353796 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 20:23:09.355972 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 20:23:25.358570 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 20:23:57.364361 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 20:30:01.370749 3.001816 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 20:30:08.378053 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 20:30:16.379854 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 20:30:32.382681 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 20:31:04.389639 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 20:37:08.394654 3.292234 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 20:37:15.692826 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 20:37:23.695608 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 20:37:39.696866 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 20:38:11.703100 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 20:44:15.710272 3.000104 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 20:44:22.717293 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 20:44:30.717644 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 20:44:46.721009 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 20:45:18.897244 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 20:51:22.902696 3.262911 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 20:51:30.171082 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 20:51:38.172279 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 20:51:54.175725 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 20:52:26.181738 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 20:58:30.187245 3.493080 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 20:58:37.686024 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 20:58:45.686850 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 20:59:01.690002 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 20:59:33.696142 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 21:05:38.122864 3.002108 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 21:05:45.410987 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 21:05:53.412091 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 21:06:09.414841 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 21:06:41.421109 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 21:12:45.427424 3.562356 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 21:12:52.995812 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 21:13:00.997267 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 21:13:17.001429 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 21:13:49.005958 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 21:19:53.012253 3.002146 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 21:20:00.019406 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 21:20:08.020586 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 21:20:24.023843 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 21:20:56.029635 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 21:27:00.038228 3.079158 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 21:27:07.124341 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 21:27:15.127674 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 21:27:31.128365 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 21:28:03.134304 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 21:34:07.139697 3.192249 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 21:34:14.338424 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 21:34:22.339177 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 21:34:38.342044 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 21:35:10.348815 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 21:41:14.354244 3.001865 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 21:41:21.361480 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 21:41:31.696421 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 21:41:47.699734 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 21:42:19.705677 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 21:48:27.717923 3.000855 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 21:48:34.725586 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 21:48:42.726230 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 21:48:58.729179 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 21:49:30.735885 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 21:55:37.415303 3.241925 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 21:55:44.663000 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 21:55:52.674309 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 21:56:08.677849 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 21:56:40.684243 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 22:02:44.689996 3.000906 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 22:02:51.696911 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 22:02:59.698637 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 22:03:15.701542 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 22:03:47.707266 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 22:09:51.713901 3.001248 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 22:09:58.720878 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 22:10:06.722746 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 22:10:22.725289 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 22:10:54.731664 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 22:16:58.737165 3.042352 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 22:17:05.784713 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 22:17:13.786405 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 22:17:30.781548 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 22:18:02.786844 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 22:24:06.793121 3.292114 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 22:24:14.090863 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 22:24:22.442821 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 22:24:38.445747 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 22:25:10.452971 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 22:31:14.457176 3.002273 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 22:31:21.465030 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 22:31:30.107829 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 22:31:46.111664 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 22:32:18.116535 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 22:38:22.122762 3.001639 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 22:38:29.129964 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 22:38:37.131426 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 22:38:53.134891 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 22:39:25.140427 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 22:45:29.148364 3.170078 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 22:45:36.324358 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 22:45:44.325677 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 22:46:00.328829 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 22:46:32.335343 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 22:52:36.341421 3.001329 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 22:52:43.348171 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 22:52:51.349589 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 22:53:07.352928 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 22:53:39.358927 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 22:59:43.365597 3.010717 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 22:59:50.382571 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 22:59:58.383737 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 23:00:14.386605 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 23:00:46.392879 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 23:02:41.186176 0.000047 arp 10.0.2.110 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/04 23:02:41.186267 1.713303 udp 10.0.2.110 58605 <-> 8.8.8.8 53 CON 0 0 2 164 flow=From-Botnet-V1-DNS 1970/01/04 23:02:42.179667 0.587784 udp 10.0.2.110 58605 <-> 8.8.4.4 53 CON 0 0 2 164 flow=From-Botnet-V1-DNS 1970/01/04 23:02:42.768050 1.013281 tcp 10.0.2.110 49240 -> 61.147.82.180 80 SPA_* 0 0 7 1055 flow=From-Botnet-V1-TCP-Established 1970/01/04 23:02:42.899570 0.000000 icmp 10.0.2.110 0x0303 -> 8.8.8.8 0xede4 URP 0 1 118 flow=Background 1970/01/04 23:02:43.585417 0.000059 tcp 10.0.2.110 49237 61.147.82.182 80 RA_ 0 0 2 108 flow=Background 1970/01/04 23:02:43.585556 0.000039 tcp 10.0.2.110 49238 61.147.82.182 80 RA_ 0 0 2 108 flow=Background 1970/01/04 23:02:58.570909 0.000355 tcp 10.0.2.110 49240 -> 61.147.82.180 80 A_FA 0 0 2 108 flow=From-Botnet-V1-TCP-Established 1970/01/04 23:06:50.398483 3.002569 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 23:06:57.406376 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 23:07:05.408113 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 23:07:21.410762 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 23:07:53.416875 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 23:13:57.422520 3.001934 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 23:14:04.429871 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 23:14:12.432146 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 23:14:28.434892 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 23:15:00.921445 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 23:21:08.763664 3.001686 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 23:21:15.770187 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 23:21:23.771802 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 23:21:39.775242 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 23:22:11.780571 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 23:28:17.950342 3.171495 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 23:28:25.127898 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 23:28:33.129039 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 23:28:49.132415 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 23:29:21.137867 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 23:35:50.230505 3.171842 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 23:35:57.408243 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 23:36:05.409498 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 23:36:21.412569 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 23:36:53.419907 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 23:42:57.425620 3.291330 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 23:43:04.722394 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 23:43:12.724806 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 23:43:28.726956 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 23:44:00.732786 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 23:50:04.739624 3.000987 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 23:50:11.747302 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 23:50:20.058725 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 23:50:36.061215 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 23:51:08.067360 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 23:57:12.073192 3.151790 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/04 23:57:19.230536 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 23:57:27.232445 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 23:57:43.235377 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/04 23:58:15.241285 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 00:04:19.246888 3.002265 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 00:04:26.695360 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 00:04:34.696816 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 00:04:50.699992 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 00:05:22.706291 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 00:11:26.713082 3.000326 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 00:11:33.719629 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 00:11:41.721047 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 00:11:57.724003 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 00:12:29.730012 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 00:18:34.316316 3.002034 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 00:18:41.324347 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 00:18:49.325633 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 00:19:05.329136 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 00:19:37.605279 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 00:25:41.610872 3.002005 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 00:25:48.619040 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 00:25:56.620325 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 00:26:12.623221 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 00:26:44.629882 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 00:32:48.635634 3.001699 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 00:32:55.643829 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 00:33:03.643789 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 00:33:19.647447 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 00:33:51.653798 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 00:39:55.659160 3.562824 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 00:40:03.227595 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 00:40:11.228839 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 00:40:27.231948 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 00:40:59.237596 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 00:47:03.243584 3.002272 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 00:47:10.250993 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 00:47:18.252807 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 00:47:34.766837 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 00:48:06.772847 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 00:54:10.778779 3.371786 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 00:54:18.156647 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 00:54:26.158039 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 00:54:42.160707 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 00:55:14.166799 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 01:01:18.176077 2.998870 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 01:01:25.180247 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 01:01:33.182266 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 01:01:49.185378 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 01:02:21.211238 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 01:08:25.277408 3.001359 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 01:08:32.544789 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 01:08:40.546558 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 01:08:56.549732 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 01:09:28.555530 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 01:15:32.562644 3.040722 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 01:15:39.609063 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 01:15:47.610528 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 01:16:03.613323 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 01:16:35.619418 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 01:22:39.785181 3.382538 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 01:22:47.174131 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 01:22:55.175349 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 01:23:11.178545 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 01:23:43.584802 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 01:29:47.591317 3.001382 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 01:29:54.598486 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 01:30:02.599942 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 01:30:18.602853 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 01:30:50.608493 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 01:36:54.614603 3.081915 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 01:37:01.702166 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 01:37:09.934514 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 01:37:25.937050 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 01:37:57.944356 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 01:44:01.949978 3.001099 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 01:44:08.957956 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 01:44:16.958381 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 01:44:32.960821 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 01:45:04.968984 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 01:51:08.973917 3.000563 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 01:51:16.361228 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 01:51:24.362764 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 01:51:40.746004 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 01:52:12.922852 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 01:58:16.928787 3.261633 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 01:58:24.196389 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 01:58:32.197674 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 01:58:48.200599 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 01:59:20.206669 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 02:05:24.212383 3.002123 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 02:05:31.220345 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 02:05:39.221927 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 02:05:55.226064 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 02:06:27.230932 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 02:12:31.237071 3.001493 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 02:12:38.244090 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 02:12:46.246056 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 02:13:02.248946 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 02:13:34.254958 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 02:19:38.261402 3.001265 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 02:19:45.268953 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 02:19:53.269850 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 02:20:09.272786 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 02:20:41.279791 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 02:26:45.285117 3.081063 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 02:26:52.372135 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 02:27:00.373727 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 02:27:16.907972 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 02:27:49.805669 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 02:33:55.914065 3.001379 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 02:34:02.921185 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 02:34:10.922704 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 02:34:28.227408 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 02:35:00.234491 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 02:41:20.242447 3.002382 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 02:41:27.250031 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 02:41:35.251936 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 02:41:51.254578 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 02:42:23.260680 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 02:48:27.266890 3.251869 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 02:48:34.525634 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 02:48:42.526308 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 02:48:58.528659 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 02:49:30.535425 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 02:55:34.540953 3.001825 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 02:55:41.548135 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 02:55:49.549656 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 02:56:05.553293 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 02:56:41.474405 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 03:02:45.480554 3.001458 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 03:02:52.488198 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 03:03:00.489207 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 03:03:16.492267 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 03:03:48.498865 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 03:09:57.511703 3.001400 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 03:10:04.519494 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 03:10:12.520569 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 03:10:28.524016 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 03:11:00.530221 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 03:17:04.536181 3.001201 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 03:17:11.543572 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 03:17:19.544625 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 03:17:35.548200 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 03:18:07.553797 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 03:24:11.559822 0.998296 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 2 294 flow=Background 1970/01/05 03:24:16.614527 4.005783 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 2 294 flow=Background 1970/01/05 03:24:28.621848 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 03:24:44.624891 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 03:25:16.630430 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 03:31:20.636749 3.001384 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 03:31:27.643827 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 03:31:37.668425 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 03:31:53.671796 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 03:32:26.579780 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 03:32:38.511685 0.000051 arp 10.0.2.110 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 03:32:38.511842 0.407939 udp 10.0.2.110 51614 <-> 8.8.8.8 53 CON 0 0 2 168 flow=From-Botnet-V1-DNS 1970/01/05 03:32:39.058314 1.089733 tcp 10.0.2.110 49241 -> 61.147.82.182 80 SPA_* 0 0 7 822 flow=From-Botnet-V1-TCP-Established 1970/01/05 03:32:39.058568 1.099494 tcp 10.0.2.110 49242 -> 61.147.82.182 80 SPA_* 0 0 7 829 flow=From-Botnet-V1-TCP-Established 1970/01/05 03:32:39.058758 1.089366 tcp 10.0.2.110 49243 -> 61.147.82.182 80 SPA_* 0 0 7 831 flow=From-Botnet-V1-TCP-Established 1970/01/05 03:32:40.268955 0.000067 tcp 10.0.2.110 49240 61.147.82.180 80 RA_ 0 0 2 108 flow=Background 1970/01/05 03:33:39.945487 0.074688 tcp 10.0.2.110 49241 -> 61.147.82.182 80 A_FA 0 0 2 108 flow=From-Botnet-V1-TCP-Established 1970/01/05 03:33:40.019968 0.000254 tcp 10.0.2.110 49243 -> 61.147.82.182 80 A_FA 0 0 2 108 flow=From-Botnet-V1-TCP-Established 1970/01/05 03:33:40.019984 0.000277 tcp 10.0.2.110 49242 -> 61.147.82.182 80 A_FA 0 0 2 108 flow=From-Botnet-V1-TCP-Established 1970/01/05 03:33:44.751008 0.000047 arp 10.0.2.110 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 03:38:30.595894 3.702129 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 INT 0 2 294 flow=Background 1970/01/05 03:38:36.300610 4.007220 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 2 294 flow=Background 1970/01/05 03:38:48.307969 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 03:39:04.310806 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 03:39:38.590145 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 03:45:42.595813 3.001883 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 03:45:49.603193 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 03:45:57.605025 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 03:46:13.607939 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 03:46:45.614102 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 03:52:50.060476 3.001902 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 03:52:57.068124 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 03:53:05.069185 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 03:53:21.072573 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 03:53:53.078397 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 03:59:57.084985 3.001983 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 04:00:04.091857 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 04:00:12.093165 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 04:00:28.096575 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 04:01:00.102579 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 04:07:04.108243 3.001629 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 04:07:11.116053 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 04:07:19.117450 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 04:07:35.120212 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 04:08:07.127296 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 04:14:11.134182 2.999737 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 04:14:18.140067 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 04:14:26.141069 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 04:14:42.144732 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 04:15:14.150615 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 04:21:18.156276 3.002155 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 04:21:25.163687 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 04:21:33.345866 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 04:21:49.348688 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 04:22:21.354711 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 04:28:25.361385 3.001126 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 04:28:32.369327 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 04:28:40.369695 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 04:28:56.372558 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 04:29:28.379432 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 04:35:32.385525 3.070724 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 04:35:39.462295 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 04:35:47.463724 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 04:36:03.466671 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 04:36:35.472814 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 04:42:39.478162 3.002682 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 04:42:46.486471 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 04:42:54.739187 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 04:43:14.926775 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 04:43:46.933342 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 04:49:53.943759 3.001225 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 04:50:00.950806 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 04:50:08.952340 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 04:50:24.955131 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 04:50:56.962471 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 04:57:00.968831 3.000103 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 04:57:07.975399 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 04:57:15.975882 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 04:57:31.978899 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 04:58:03.986412 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 05:04:07.991770 3.001264 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 05:04:14.998361 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 05:04:23.000017 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 05:04:39.002855 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 05:05:11.009207 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 05:11:18.019408 3.001518 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 05:11:25.027128 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 05:11:33.029241 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 05:11:49.031827 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 05:12:21.037252 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 05:18:25.044838 3.000330 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 05:18:32.052127 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 05:18:40.052515 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 05:18:56.055266 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 05:19:28.062046 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 05:25:32.067607 3.001426 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 05:25:39.075095 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 05:25:47.076718 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 05:26:03.079716 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 05:26:35.436345 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 05:32:39.441336 3.002602 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 05:32:46.448992 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 05:32:54.551308 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 05:33:10.554327 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 05:33:42.560583 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 05:39:46.565700 3.042480 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 05:39:53.613758 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 05:40:01.614723 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 05:40:17.617933 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 05:40:49.624385 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 05:46:54.040408 3.001613 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 05:47:01.047769 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 05:47:09.049522 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 05:47:25.052546 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 05:47:57.059189 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 05:54:01.064797 3.311834 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 05:54:08.382881 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 05:54:16.383925 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 05:54:32.387592 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 05:55:04.392876 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 06:01:08.398947 3.863279 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 06:01:16.267584 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 06:01:24.269124 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 06:01:40.272175 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 06:02:12.278180 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 06:08:16.284685 3.002148 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 06:08:23.292086 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 06:08:31.293108 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 06:08:47.296209 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 06:09:19.302399 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 06:15:23.308448 3.001087 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 06:15:30.315451 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 06:15:38.316826 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 06:15:54.320311 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 06:16:26.947178 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 06:22:30.954938 2.999824 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 06:22:37.961104 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 06:22:45.962159 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 06:23:01.965037 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 06:23:33.971934 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 06:29:37.977718 3.001067 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 06:29:44.984146 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 06:29:52.986317 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 06:30:08.988999 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 06:30:40.995076 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 06:36:45.000940 3.001576 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 06:36:52.008673 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 06:37:00.010038 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 06:37:16.012933 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 06:37:48.781098 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 06:43:52.786644 3.001319 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 06:43:59.793442 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 06:44:07.794905 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 06:44:23.797795 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 06:44:55.803690 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 06:50:59.810093 3.001766 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 06:51:06.817897 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 06:51:14.819753 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 06:51:30.822613 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 06:52:02.827697 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 06:58:06.833494 3.001791 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 06:58:13.841128 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 06:58:21.842857 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 06:58:37.846263 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 06:59:09.852460 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 07:05:13.858391 3.001099 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 07:05:20.865163 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 07:05:28.867899 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 07:05:44.870176 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 07:06:16.886800 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 07:12:20.892896 3.000394 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 07:12:27.899274 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 07:12:35.901103 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 07:12:51.904158 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 07:13:23.910320 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 07:19:27.915990 3.001695 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 07:19:34.923116 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 07:19:42.925000 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 07:19:58.928818 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 07:20:30.933774 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 07:26:34.940079 3.001743 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 07:26:41.947490 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 07:26:49.948851 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 07:27:05.951916 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 07:27:37.957866 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 07:33:41.964804 3.001211 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 07:33:48.971386 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 07:33:56.972465 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 07:34:12.975750 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 07:34:44.982422 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 07:40:48.988963 3.000234 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 07:40:55.995291 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 07:41:03.996906 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 07:41:19.999753 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 07:41:52.005528 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 07:47:56.011552 3.001521 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 07:48:03.019200 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 07:48:11.020920 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 07:48:27.023717 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 07:48:59.029604 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 07:55:03.036508 3.001100 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 07:55:10.043498 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 07:55:18.044665 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 07:55:34.047673 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 07:56:06.053369 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 08:02:10.060486 3.001117 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 08:02:17.067221 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 08:02:25.069344 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 08:02:41.071497 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 08:03:13.077904 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 08:09:17.084179 3.000836 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 08:09:24.092019 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 08:09:32.092658 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 08:09:48.095498 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 08:10:20.108461 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 08:16:24.107073 3.001869 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 08:16:31.115369 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 08:16:39.116392 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 08:16:55.119263 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 08:17:27.125440 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 08:23:31.132052 3.001482 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 08:23:38.139279 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 08:23:46.140749 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 08:24:02.143802 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 08:24:34.149216 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 08:30:38.155324 3.002521 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 08:30:45.163190 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 08:30:53.164721 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 08:31:09.167901 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 08:31:41.173408 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 08:37:45.179750 3.001179 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 08:37:52.186569 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 08:38:00.188621 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 08:38:16.191188 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 08:38:48.199957 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 08:44:52.204287 3.000933 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 08:44:59.211015 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 08:45:07.212887 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 08:45:23.216231 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 08:45:55.222226 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 08:51:59.228647 3.000579 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 08:52:06.234553 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 08:52:14.236334 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 08:52:30.239634 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 08:53:02.245152 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 08:59:06.250886 3.002334 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 08:59:13.258916 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 08:59:21.260463 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 08:59:37.263043 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 09:00:09.269245 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 09:06:13.274758 3.002146 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 09:06:20.283162 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 09:06:28.284468 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 09:06:44.287197 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 09:07:16.293494 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 09:13:20.300083 3.000942 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 09:13:27.307721 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 09:13:35.308587 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 09:13:51.311863 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 09:14:23.318914 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 09:20:27.323507 3.001861 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 09:20:34.331229 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 09:20:42.332149 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 09:20:58.335296 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 09:21:30.341673 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 09:27:34.347215 3.001992 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 09:27:41.354352 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 09:27:49.356532 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 09:28:05.359405 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 09:28:37.365103 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 09:34:41.370622 3.002957 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 09:34:48.378745 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 09:34:56.380267 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 09:35:12.383573 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 09:35:44.389241 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 09:41:48.394537 3.002446 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 09:41:55.402435 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 09:42:03.404063 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 09:42:19.407271 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 09:42:51.413605 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 09:48:55.420881 2.999978 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 09:49:02.426893 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 09:49:10.427782 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 09:49:26.430770 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 09:49:58.436927 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 09:56:02.442899 3.001735 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 09:56:09.450175 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 09:56:17.452176 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 09:56:33.454718 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 09:57:05.461108 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 10:03:09.467426 3.001208 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 10:03:16.474521 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 10:03:24.476148 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 10:03:40.479787 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 10:04:12.484753 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 10:10:16.490957 3.001664 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 10:10:23.498252 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 10:10:31.500158 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 10:10:47.502912 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 10:11:19.509120 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 10:17:23.516143 3.000927 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 10:17:30.523205 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 10:17:38.523866 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 10:17:54.527347 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 10:18:26.533664 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 10:24:30.539876 3.000972 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 10:24:37.546738 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 10:24:45.547930 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 10:25:01.551110 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 10:25:33.557136 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 10:31:37.562617 3.001840 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 10:31:44.570573 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 10:31:52.571707 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 10:32:08.574809 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 10:32:40.580962 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 10:38:44.587846 3.000529 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 10:38:51.593976 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 10:38:59.596174 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 10:39:15.599003 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 10:39:47.605297 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 10:45:51.611470 3.001585 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 10:45:58.618520 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 10:46:06.619823 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 10:46:22.622456 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 10:46:54.629602 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 10:52:58.635324 3.001578 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 10:53:05.643048 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 10:53:13.644021 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 10:53:29.646804 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 10:54:01.652708 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 11:00:05.659605 3.000515 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 11:00:12.665894 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 11:00:20.667811 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 11:00:36.671007 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 11:01:08.677127 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 11:07:12.683520 3.001058 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 11:07:19.690332 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 11:07:27.691498 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 11:07:43.695345 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 11:08:15.700793 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 11:14:19.706167 3.002150 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 11:14:26.713831 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 11:14:34.716087 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 11:14:50.718477 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 11:15:22.724412 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 11:21:26.732336 3.000199 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 11:21:33.739192 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 11:21:41.739688 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 11:21:57.742757 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 11:22:29.749729 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 11:28:33.754656 3.001631 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 11:28:40.761939 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 11:28:48.763865 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 11:29:04.766361 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 11:29:36.772580 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 11:35:40.778239 3.002003 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 11:35:47.786235 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 11:35:55.787985 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 11:36:11.790889 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 11:36:43.796954 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 11:42:47.802324 3.001633 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 11:42:54.810100 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 11:43:02.812089 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 11:43:18.814602 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 11:43:50.820973 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 11:49:54.826350 3.001914 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 11:50:01.834131 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 11:50:09.835291 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 11:50:25.838413 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 11:50:57.845645 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 11:57:01.860731 3.001573 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 11:57:08.868001 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 11:57:16.869857 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 11:57:32.872371 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 11:58:04.878327 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 12:04:08.884019 3.002067 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 12:04:15.892216 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 12:04:23.893347 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 12:04:39.897324 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 12:05:11.902288 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 12:11:15.909323 3.001068 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 12:11:22.915565 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 12:11:30.917347 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 12:11:46.920636 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 12:12:18.926730 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 12:18:22.934932 2.999184 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 12:18:29.941445 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 12:18:37.941532 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 12:18:53.944536 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 12:19:25.951396 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 12:25:29.956314 3.001544 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 12:25:36.963586 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 12:25:44.965498 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 12:26:00.968024 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 12:26:32.974447 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 12:32:36.981189 3.000514 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 12:32:43.987834 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 12:32:51.989146 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 12:33:07.992454 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 12:33:39.998292 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 12:39:44.005043 3.001441 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 12:39:51.011740 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 12:39:59.013048 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 12:40:15.016858 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 12:40:47.022358 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 12:46:51.028041 3.001790 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 12:46:58.035920 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 12:47:06.037313 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 12:47:22.040556 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 12:47:54.047639 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 12:53:58.052441 3.001149 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 12:54:05.060631 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 12:54:13.060929 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 12:54:29.064080 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 12:55:01.071307 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 13:01:05.076221 3.001735 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 13:01:12.083781 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 13:01:20.085131 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 13:01:36.088318 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 13:02:08.094447 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 13:08:12.099980 3.001570 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 13:08:19.107339 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 13:08:27.109285 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 13:08:43.112630 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 13:09:15.118086 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 13:15:19.125133 3.000339 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 13:15:26.131309 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 13:15:34.132954 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 13:15:50.136207 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 13:16:22.142070 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 13:22:26.149873 3.000218 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 13:22:33.156304 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 13:22:41.156870 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 13:22:57.160265 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 13:23:29.167070 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 13:29:33.172269 3.001772 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 13:29:40.179707 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 13:29:48.181172 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 13:30:04.184336 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 13:30:36.190197 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 13:36:40.195969 3.001636 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 13:36:47.203478 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 13:36:55.204748 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 13:37:11.208255 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 13:37:43.214722 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 13:43:47.221104 3.000811 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 13:43:54.227376 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 13:44:02.228622 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 13:44:18.231649 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 13:44:50.237643 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 13:50:54.244465 3.001467 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 13:51:01.251130 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 13:51:09.253934 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 13:51:25.256270 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 13:51:57.262494 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 13:58:01.268131 3.001758 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 13:58:08.276520 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 13:58:16.276992 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 13:58:32.279995 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 13:59:04.286598 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 14:05:08.291560 3.002228 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 14:05:15.299346 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 14:05:23.300986 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 14:05:39.304006 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 14:06:11.309543 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 14:12:15.316770 3.001100 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 14:12:22.323236 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 14:12:30.325144 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 14:12:46.328560 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 14:13:18.333981 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 14:19:22.340700 3.003276 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 14:19:29.347112 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 14:19:37.348816 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 14:19:53.351735 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 14:20:25.357609 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 14:26:29.365731 2.999671 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 14:26:36.371800 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 14:26:44.372744 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 14:27:00.375863 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 14:27:32.382868 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 14:33:36.388057 3.001309 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 14:33:43.395478 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 14:33:51.396501 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 14:34:07.399987 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 14:34:39.405774 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 14:40:43.412819 3.000240 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 14:40:50.419158 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 14:40:58.420959 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 14:41:14.423812 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 14:41:46.429967 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 14:47:50.435644 3.001504 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 14:47:57.443497 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 14:48:05.444339 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 14:48:21.447959 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 14:48:53.453711 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 14:54:57.459530 3.001633 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 14:55:04.466800 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 14:55:12.469502 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 14:55:28.471523 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 14:56:00.477841 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 15:02:04.484452 3.001157 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 15:02:11.491480 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 15:02:19.492861 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 15:02:35.495483 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 15:03:07.502487 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 15:09:11.507284 3.001874 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 15:09:18.515537 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 15:09:26.516884 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 15:09:42.519647 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 15:10:14.525645 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 15:16:18.531573 3.001362 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 15:16:25.538673 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 15:16:33.540809 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 15:16:49.544477 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 15:17:21.549598 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 15:23:25.556558 3.001505 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 15:23:32.563023 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 15:23:40.564483 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 15:23:56.567450 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 15:24:28.573297 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 15:30:32.580469 3.000661 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 15:30:39.586969 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 15:30:47.588278 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 15:31:03.591818 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 15:31:35.598322 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 15:32:43.752786 0.000051 arp 10.0.2.110 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 15:32:43.752883 0.000037 tcp 10.0.2.110 49241 61.147.82.182 80 FA_R 0 0 2 108 flow=Background 1970/01/05 15:32:43.753079 0.000033 tcp 10.0.2.110 49243 61.147.82.182 80 FA_R 0 0 2 108 flow=Background 1970/01/05 15:32:43.753215 0.000033 tcp 10.0.2.110 49242 61.147.82.182 80 FA_R 0 0 2 108 flow=Background 1970/01/05 15:32:43.753739 0.993593 tcp 10.0.2.110 49244 -> 61.147.82.182 80 SPA_* 0 0 7 831 flow=From-Botnet-V1-TCP-Established 1970/01/05 15:32:43.754039 0.993214 tcp 10.0.2.110 49245 -> 61.147.82.182 80 SPA_* 0 0 7 829 flow=From-Botnet-V1-TCP-Established 1970/01/05 15:32:43.766286 0.990458 tcp 10.0.2.110 49246 -> 61.147.82.182 80 SPA_* 0 0 7 822 flow=From-Botnet-V1-TCP-Established 1970/01/05 15:33:44.539589 0.000178 tcp 10.0.2.110 49244 -> 61.147.82.182 80 A_FA 0 0 2 108 flow=From-Botnet-V1-TCP-Established 1970/01/05 15:33:44.540179 0.000117 tcp 10.0.2.110 49245 -> 61.147.82.182 80 A_FA 0 0 2 108 flow=From-Botnet-V1-TCP-Established 1970/01/05 15:33:44.552067 0.000136 tcp 10.0.2.110 49246 -> 61.147.82.182 80 A_FA 0 0 2 108 flow=From-Botnet-V1-TCP-Established 1970/01/05 15:33:49.390000 0.000060 arp 10.0.2.110 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 15:37:39.644030 3.001037 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 INT 0 3 441 flow=Background 1970/01/05 15:37:46.651257 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 15:37:54.652293 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 15:38:10.655701 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 15:38:42.861859 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 15:44:46.867929 3.001209 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 15:44:53.875143 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 15:45:01.877938 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 15:45:17.879609 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 15:45:49.887775 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 15:51:53.892963 3.000167 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 15:52:00.900227 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 15:52:08.900675 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 15:52:24.903811 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 15:52:56.910445 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 15:59:00.915943 3.001560 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 15:59:07.922885 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 15:59:15.924883 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 15:59:31.927752 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 16:00:03.933954 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 16:06:07.940389 3.001118 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 16:06:14.946960 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 16:06:22.949243 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 16:06:38.952217 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 16:07:10.958228 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 16:13:14.963578 3.002693 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 16:13:21.970914 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 16:13:29.972621 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 16:13:45.975318 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 16:14:17.981272 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 16:20:21.987385 3.002236 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 16:20:28.995008 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 16:20:36.996583 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 16:20:52.999858 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 16:21:25.006525 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 16:27:29.013008 3.000467 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 16:27:36.018882 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 16:27:44.020204 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 16:28:00.023328 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 16:28:32.029478 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 16:34:36.035479 3.001591 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 16:34:43.042802 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 16:34:51.044191 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 16:35:07.047331 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 16:35:39.053295 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 16:41:43.060217 3.000666 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 16:41:50.067071 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 16:41:58.068968 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 16:42:14.071756 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 16:42:46.077795 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 16:48:50.086239 2.998849 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 16:48:57.090688 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 16:49:05.092437 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 16:49:21.095756 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 16:49:53.101431 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 16:55:57.109315 2.999757 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 16:56:04.115682 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 16:56:12.116040 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 16:56:28.119667 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 16:57:00.126005 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 17:03:04.131032 3.001794 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 17:03:11.138989 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 17:03:19.140169 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 17:03:35.143713 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 17:04:07.149384 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 17:10:11.155314 3.001567 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 17:10:18.162530 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 17:10:26.163998 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 17:10:42.167348 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 17:11:14.173113 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 17:17:18.179220 3.003630 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 17:17:25.186568 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 17:17:33.188005 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 17:17:49.191091 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 17:18:21.197610 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 17:24:25.203434 3.001353 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 17:24:32.210762 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 17:24:40.212378 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 17:24:56.215154 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 17:25:28.221662 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 17:31:32.227322 3.001652 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 17:31:39.234424 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 17:31:47.236536 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 17:32:03.239523 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 17:32:35.245787 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 17:38:39.250749 3.002077 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 17:38:46.258634 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 17:38:54.260515 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 17:39:10.262806 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 17:39:42.269504 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 17:45:46.275022 3.001974 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 17:45:53.282365 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 17:46:01.284216 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 17:46:17.287893 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 17:46:49.293024 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 17:52:53.298676 3.002287 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 17:53:00.306528 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 17:53:08.308307 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 17:53:24.310892 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 17:53:56.317168 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 18:00:00.323885 3.000673 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 18:00:07.333669 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 18:00:15.332331 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 18:00:31.335080 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 18:01:03.341747 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 18:07:07.346582 3.002900 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 18:07:14.355390 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 18:07:22.356810 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 18:07:38.358745 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 18:08:10.364703 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 18:14:14.370690 3.001726 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 18:14:21.378854 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 18:14:29.380136 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 18:14:45.382958 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 18:15:17.388787 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 18:21:21.395570 3.001484 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 18:21:28.402789 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 18:21:36.404038 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 18:21:52.406711 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 18:22:24.412790 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 18:28:28.418984 3.002014 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 18:28:35.426358 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 18:28:43.427657 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 18:28:59.430951 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 18:29:31.437625 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 18:35:35.444848 2.999599 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 18:35:42.451278 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 18:35:50.452189 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 18:36:06.454842 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 18:36:38.460931 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 18:42:42.467991 3.000901 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 18:42:49.474494 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 18:42:57.476015 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 18:43:13.479120 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 18:43:45.484624 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 18:49:49.491266 3.001188 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 18:49:56.498510 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 18:50:04.499756 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 18:50:20.503756 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 18:50:52.508568 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 18:56:56.514476 3.001721 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 18:57:03.522312 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 18:57:11.524048 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 18:57:27.526543 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 18:57:59.532960 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 19:04:03.539374 3.001560 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 19:04:10.547190 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 19:04:18.547398 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 19:04:34.550647 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 19:05:06.557789 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 19:11:10.562262 3.002432 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 19:11:17.570146 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 19:11:25.572002 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 19:11:41.575058 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 19:12:13.580714 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 19:18:17.586113 3.002031 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 19:18:24.594150 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 19:18:32.595998 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 19:18:48.598715 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 19:19:20.604967 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 19:25:24.610798 3.001981 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 19:25:31.618092 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 19:25:39.619731 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 19:25:55.622379 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 19:26:27.628730 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 19:32:31.635445 3.000727 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 19:32:38.642182 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 19:32:46.644117 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 19:33:02.646972 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 19:33:34.653601 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 19:39:38.659671 3.000558 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 19:39:45.667018 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 19:39:53.667223 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 19:40:09.670387 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 19:40:41.678185 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 19:46:45.682338 3.001751 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 19:46:52.690159 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 19:47:00.691788 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 19:47:16.694210 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 19:47:48.700443 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 19:53:52.706751 3.001706 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 19:53:59.713677 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 19:54:07.715911 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 19:54:23.719804 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 19:54:55.724718 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 20:00:59.731334 3.001234 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 20:01:06.737621 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 20:01:14.739402 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 20:01:30.742720 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 20:02:02.748448 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 20:08:06.755538 3.000818 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 20:08:13.763488 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 20:08:21.763553 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 20:08:37.766411 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 20:09:09.773413 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 20:15:13.778616 3.001405 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 20:15:20.785879 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 20:15:28.787853 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 20:15:44.790070 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 20:16:16.796603 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 20:22:20.803438 3.000467 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 20:22:27.809994 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 20:22:35.811039 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 20:22:51.814466 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 20:23:23.820520 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 20:29:27.825884 3.002368 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 20:29:34.833927 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 20:29:42.835179 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 20:29:58.838651 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 20:30:30.844396 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 20:36:34.850128 3.001897 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 20:36:41.857542 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 20:36:49.860236 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 20:37:05.862541 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 20:37:37.868360 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 20:43:41.874911 3.000721 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 20:43:48.882143 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 20:43:56.883154 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 20:44:12.885893 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 20:44:44.892708 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 20:50:48.898257 3.001714 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 20:50:55.905378 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 20:51:03.906881 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 20:51:19.910459 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 20:51:51.916028 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 20:57:55.922738 3.001102 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 20:58:02.929630 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 20:58:10.931403 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 20:58:26.934757 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 20:58:58.940619 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 21:05:02.945598 3.003107 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 21:05:09.953586 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 21:05:17.955292 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 21:05:33.957818 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 21:06:05.964121 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 21:12:09.970846 3.001340 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 21:12:16.977548 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 21:12:24.978917 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 21:12:40.982233 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 21:13:12.988783 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 21:19:16.995364 3.000361 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 21:19:24.001769 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 21:19:32.003627 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 21:19:48.005757 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 21:20:20.012187 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 21:26:24.018718 3.000780 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 21:26:31.025326 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 21:26:39.027243 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 21:26:55.030353 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 21:27:27.036514 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 21:33:31.041858 3.002193 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 21:33:38.049565 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 21:33:46.051146 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 21:34:02.053929 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 21:34:34.060277 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 21:40:38.067052 3.000823 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 21:40:45.073156 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 21:40:53.075701 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 21:41:09.077763 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 21:41:41.083714 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 21:47:45.090834 3.000638 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 21:47:52.098725 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 21:48:00.099019 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 21:48:16.102309 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 21:48:48.109248 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 21:54:52.113892 3.001694 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 21:54:59.121439 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 21:55:07.122833 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 21:55:23.126006 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 21:55:55.132159 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 22:01:59.137929 3.001341 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 22:02:06.145325 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 22:02:14.146838 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 22:02:30.149556 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 22:03:02.156197 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 22:09:06.162275 3.001744 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 22:09:13.169699 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 22:09:21.170612 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 22:09:37.173702 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 22:10:09.180310 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 22:16:13.185419 3.002518 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 22:16:20.193235 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 22:16:28.195005 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 22:16:44.198027 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 22:17:16.204989 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 22:23:20.210448 3.000768 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 22:23:27.217640 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 22:23:35.218769 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 22:23:51.221432 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 22:24:23.227475 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 22:30:27.233296 3.001880 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 22:30:34.240899 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 22:30:42.242596 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 22:30:58.245959 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 22:31:30.251799 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 22:37:34.258652 3.000782 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 22:37:41.264884 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 22:37:49.266686 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 22:38:05.270019 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 22:38:37.435655 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 22:44:41.442078 3.001457 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 22:44:48.450426 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 22:44:56.451292 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 22:45:12.553798 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 22:45:44.560369 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 22:48:02.699762 0.000081 arp 10.0.2.110 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/05 22:48:02.699923 0.470776 udp 10.0.2.110 54920 <-> 8.8.8.8 53 CON 0 0 2 164 flow=From-Botnet-V1-DNS 1970/01/05 22:48:03.171213 0.719207 tcp 10.0.2.110 49247 -> 61.147.82.180 80 SPA_* 0 0 7 1055 flow=From-Botnet-V1-TCP-Established 1970/01/05 22:48:03.690441 0.000096 tcp 10.0.2.110 49245 61.147.82.182 80 RA_ 0 0 2 108 flow=Background 1970/01/05 22:48:03.690640 0.000052 tcp 10.0.2.110 49244 61.147.82.182 80 RA_ 0 0 2 108 flow=Background 1970/01/05 22:48:03.690796 0.000091 tcp 10.0.2.110 49246 61.147.82.182 80 RA_ 0 0 2 108 flow=Background 1970/01/05 22:48:18.687377 0.000160 tcp 10.0.2.110 49247 -> 61.147.82.180 80 A_FA 0 0 2 108 flow=From-Botnet-V1-TCP-Established 1970/01/05 22:51:48.566240 3.002784 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 22:51:55.573685 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 22:52:03.575324 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 22:52:19.578064 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 22:52:51.584028 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 22:58:55.589427 3.002553 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 22:59:02.597170 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 22:59:10.599213 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 22:59:26.602274 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 22:59:58.609497 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 23:06:02.614721 3.000707 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 23:06:09.621851 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 23:06:17.622581 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 23:06:33.625654 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 23:07:05.632029 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 23:13:09.637984 3.001344 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 23:13:16.645343 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 23:13:24.646901 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 23:13:40.649808 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 23:14:12.655879 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 23:20:17.663957 3.000927 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 23:20:24.671541 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 23:20:32.672151 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 23:20:48.675047 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 23:21:20.681909 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 23:27:24.697569 3.001597 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 23:27:31.705183 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 23:27:39.706036 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 23:27:55.709621 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 23:28:27.715450 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 23:34:31.721078 3.003155 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 23:34:38.728395 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 23:34:46.730295 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 23:35:02.733616 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 23:35:34.739232 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 23:41:38.745861 3.001537 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 23:41:45.752552 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 23:41:53.754297 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 23:42:09.757362 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 23:42:41.763951 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 23:48:45.772193 2.998975 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 23:48:52.777106 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 23:49:00.777850 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 23:49:16.781156 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 23:49:48.787511 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 23:55:52.952814 3.002776 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/05 23:55:59.960996 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 23:56:07.962064 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 23:56:23.965166 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/05 23:56:55.971393 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 00:02:59.977460 3.001400 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/06 00:03:06.984756 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 00:03:14.986093 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 00:03:30.989175 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 00:04:02.995180 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 00:10:07.001832 3.001086 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/06 00:10:14.009221 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 00:10:22.010592 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 00:10:38.012968 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 00:11:10.019263 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 00:17:14.026256 3.000970 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/06 00:17:21.034318 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 00:17:29.034099 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 00:17:45.037121 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 00:18:17.043909 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 00:24:21.049440 3.001846 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/06 00:24:28.056710 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 00:24:36.058213 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 00:24:52.061115 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 00:25:24.067078 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 00:31:28.073921 3.000958 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/06 00:31:35.080688 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 00:31:43.081954 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 00:31:59.085154 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 00:32:31.091308 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 00:38:35.097329 3.001697 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/06 00:38:42.104761 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 00:38:50.105904 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 00:39:06.109584 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 00:39:38.115077 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 00:45:42.121270 3.002036 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/06 00:45:49.128547 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 00:45:57.130026 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 00:46:13.133281 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 00:46:45.140162 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 00:52:49.146040 3.001144 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/06 00:52:56.153648 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 00:53:04.154007 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 00:53:20.156849 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 00:53:52.163231 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 00:59:56.173027 2.998034 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/06 01:00:03.176638 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 01:00:11.178325 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 01:00:27.181431 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 01:00:59.187031 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 01:07:03.193009 3.001426 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/06 01:07:10.200906 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 01:07:18.202225 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 01:07:34.205501 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 01:08:06.210892 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 01:14:10.218103 3.000705 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/06 01:14:17.224351 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 01:14:25.226148 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 01:14:41.228822 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 01:15:13.234894 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 01:21:17.242103 3.000746 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/06 01:21:24.249094 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 01:21:32.250131 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 01:21:48.253314 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 01:22:20.259682 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 01:28:24.264781 3.001722 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/06 01:28:31.272567 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 01:28:39.274088 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 01:28:55.276646 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 01:29:27.282936 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 01:35:31.288511 3.002118 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/06 01:35:38.296035 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 01:35:46.298117 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 01:36:02.300863 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 01:36:34.306755 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 01:42:38.312456 3.002305 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/06 01:42:45.319990 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 01:42:53.321505 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 01:43:09.325137 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 01:43:41.331270 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 01:49:45.336983 3.001678 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/06 01:49:52.344634 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 01:50:00.345478 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 01:50:16.348944 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 01:50:48.355426 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 01:56:52.362155 3.000016 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/06 01:56:59.368837 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 01:57:07.369757 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 01:57:23.372727 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 01:57:55.379699 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 02:03:59.384317 3.002556 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/06 02:04:06.392171 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 02:04:14.393714 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 02:04:30.396567 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 02:05:02.403022 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 02:11:06.408590 3.001629 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/06 02:11:13.416429 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 02:11:21.417484 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 02:11:37.421729 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 02:12:09.426946 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 02:18:13.432543 3.001979 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/06 02:18:20.440533 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 02:18:28.441779 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 02:18:44.444822 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 02:19:16.450444 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 02:25:20.469794 2.998788 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/06 02:25:27.474045 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 02:25:35.476019 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 02:25:51.478712 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 02:26:23.484586 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 02:32:27.490632 3.001948 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/06 02:32:34.498509 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 02:32:42.499551 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 02:32:58.502500 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 02:33:30.508402 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 02:39:34.514610 3.002150 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/06 02:39:41.522083 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 02:39:49.523827 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 02:40:05.526447 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 02:40:37.532679 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 02:46:41.538738 3.001452 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/06 02:46:48.546009 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 02:46:56.547256 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 02:47:12.550777 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 02:47:44.557217 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 02:53:48.563231 3.001367 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/06 02:53:55.570962 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 02:54:03.571760 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 02:54:19.574643 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 02:54:51.581286 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 03:00:55.586833 3.001509 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/06 03:01:02.593842 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 03:01:10.595745 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 03:01:26.598823 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 03:01:58.604414 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 03:08:02.610758 3.002051 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/06 03:08:09.618471 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 03:08:17.619768 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 03:08:33.623514 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 03:09:05.628655 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 03:15:09.634715 3.001418 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/06 03:15:16.641845 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 03:15:24.643369 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 03:15:40.646608 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 03:16:12.652323 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 03:22:16.659490 3.000819 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/06 03:22:23.666993 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 03:22:31.667910 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 03:22:47.670360 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 03:23:19.677105 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 03:29:23.681792 3.001977 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 3 441 flow=Background 1970/01/06 03:29:30.689484 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 03:29:38.691020 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 03:29:54.694186 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 03:30:26.700842 0.000000 udp fe80::31aa:edaf:e8df:b0f1 546 -> ff02::1:2 547 REQ 0 1 147 flow=Background 1970/01/06 03:32:44.773012 0.000044 arp 10.0.2.110 who 10.0.2.2 CON 2 84 flow=Background-ARP 1970/01/06 03:32:44.773157 0.017705 udp 10.0.2.110 50844 <-> 8.8.8.8 53 CON 0 0 2 168 flow=From-Botnet-V1-DNS 1970/01/06 03:32:44.826705 1.283808 tcp 10.0.2.110 49248 -> 61.147.82.182 80 SPA_* 0 0 7 963 flow=From-Botnet-V1-TCP-Established 1970/01/06 03:32:44.826887 1.283709 tcp 10.0.2.110 49249 -> 61.147.82.182 80 SPA_* 0 0 7 940 flow=From-Botnet-V1-TCP-Established 1970/01/06 03:32:44.827040 1.293474 tcp 10.0.2.110 49250 -> 61.147.82.182 80 SPA_* 0 0 7 938 flow=From-Botnet-V1-TCP-Established 1970/01/06 03:32:45.928621 0.000046 tcp 10.0.2.110 49247 61.147.82.180 80 RA_ 0 0 2 108 flow=Background 1970/01/06 03:32:45.980756 2.393136 udp 10.0.2.110 62042 <-> 8.8.8.8 53 CON 0 0 2 222 flow=From-Botnet-V1-DNS 1970/01/06 03:32:46.982134 0.842761 udp 10.0.2.110 62042 <-> 8.8.4.4 53 CON 0 0 2 222 flow=From-Botnet-V1-DNS 1970/01/06 03:32:47.825290 1.161726 tcp 10.0.2.110 49251 -> 61.158.145.140 80 SPA_* 0 0 28 24356 flow=From-Botnet-V1-TCP-Established 1970/01/06 03:32:47.825445 0.979449 tcp 10.0.2.110 49252 -> 61.158.145.140 80 SPA_* 0 0 10 3771 flow=From-Botnet-V1-TCP-Established 1970/01/06 03:32:47.825597 0.789762 tcp 10.0.2.110 49253 -> 61.158.145.140 80 SPA_* 0 0 8 2505 flow=From-Botnet-V1-TCP-Established 1970/01/06 03:32:48.373892 0.000000 icmp 10.0.2.110 0x0303 -> 8.8.8.8 0x5af2 URP 0 1 177 flow=Background 1970/01/06 03:32:51.996383 0.843754 tcp 10.0.2.110 49248 -> 61.147.82.182 80 PA_PA 0 0 4 1044 flow=From-Botnet-V1-TCP-Established 1970/01/06 03:32:52.648094 3.501625 udp 10.0.2.110 54778 <-> 8.8.8.8 53 CON 0 0 2 225 flow=From-Botnet-V1-DNS 1970/01/06 03:32:53.661331 0.935934 udp 10.0.2.110 54778 <-> 8.8.4.4 53 CON 0 0 2 225 flow=From-Botnet-V1-DNS 1970/01/06 03:32:54.597800 1.667499 tcp 10.0.2.110 49254 -> 61.158.145.141 80 SPA_* 0 0 25 19663 flow=From-Botnet-V1-TCP-Established 1970/01/06 03:32:56.077640 0.778825 tcp 10.0.2.110 49249 -> 61.147.82.182 80 PA_PA 0 0 4 1304 flow=From-Botnet-V1-TCP-Established 1970/01/06 03:32:56.149719 0.000000 icmp 10.0.2.110 0x0303 -> 8.8.8.8 0xfad5 URP 0 1 179 flow=Background 1970/01/06 03:32:56.656457 2.208706 udp 10.0.2.110 57502 <-> 8.8.8.8 53 CON 0 0 2 219 flow=From-Botnet-V1-DNS 1970/01/06 03:32:57.657111 0.884501 udp 10.0.2.110 57502 <-> 8.8.4.4 53 CON 0 0 2 219 flow=From-Botnet-V1-DNS 1970/01/06 03:32:58.542051 1.952672 tcp 10.0.2.110 49255 -> 61.158.145.141 80 SPA_* 0 0 50 46249 flow=From-Botnet-V1-TCP-Established 1970/01/06 03:32:58.865163 0.000000 icmp 10.0.2.110 0x0303 -> 8.8.8.8 0x9ee0 URP 0 1 174 flow=Background