Shorewall 4.0.9 Dump at cyrus - Thu Mar 20 10:16:02 CST 2008

   Shorewall-perl 4.0.9.1

Counters reset Wed Mar 19 21:21:32 CST 2008

Chain Drop (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 reject     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:113 
12226 2102K dropBcast  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 3 code 4 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 11 
 1683  134K dropInvalid  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 135,445 
   15  1170 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:137:139 
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:137 dpts:1024:65535 
  295 14564 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 135,139,445 
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:1900 
  105  5128 dropNotSyn  tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
   16  1754 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:53 

Chain INPUT (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
 160K   13M LOG        all  --  eth3   *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 7 prefix `BANDWIDTH_IN:' 
 112K  111M eth0_in    all  --  eth0   *       0.0.0.0/0            0.0.0.0/0           
 4547  722K eth1_in    all  --  eth1   *       0.0.0.0/0            0.0.0.0/0           
 160K   13M eth3_in    all  --  eth3   *       0.0.0.0/0            0.0.0.0/0           
 4149  708K eth4_in    all  --  eth4   *       0.0.0.0/0            0.0.0.0/0           
51921   75M ACCEPT     all  --  lo     *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           limit: avg 10/min burst 5 LOG flags 0 level 6 prefix `Shorewall:INPUT:REJECT:' 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain FORWARD (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
1702K 1068M LOG        all  --  *      eth3    0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 7 prefix `BANDWIDTH_OUT:' 
1683K  758M LOG        all  --  eth3   *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 7 prefix `BANDWIDTH_IN:' 
40045 2014K TCPMSS     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp flags:0x06/0x02 TCPMSS clamp to PMTU 
11796 1147K eth0_fwd   all  --  eth0   *       0.0.0.0/0            0.0.0.0/0           
 3303  307K eth1_fwd   all  --  eth1   *       0.0.0.0/0            0.0.0.0/0           
1683K  758M eth3_fwd   all  --  eth3   *       0.0.0.0/0            0.0.0.0/0           
1687K 1066M eth4_fwd   all  --  eth4   *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           limit: avg 10/min burst 5 LOG flags 0 level 6 prefix `Shorewall:FORWARD:REJECT:' 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain OUTPUT (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
 239K  188M LOG        all  --  *      eth3    0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 7 prefix `BANDWIDTH_OUT:' 
93166   29M eth0_out   all  --  *      eth0    0.0.0.0/0            0.0.0.0/0           
 142K   10M eth1_out   all  --  *      eth1    0.0.0.0/0            0.0.0.0/0           
 239K  188M eth3_out   all  --  *      eth3    0.0.0.0/0            0.0.0.0/0           
 135K 9594K eth4_out   all  --  *      eth4    0.0.0.0/0            0.0.0.0/0           
51921   75M ACCEPT     all  --  *      lo      0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           limit: avg 10/min burst 5 LOG flags 0 level 6 prefix `Shorewall:OUTPUT:REJECT:' 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain Reject (4 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 reject     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:113 
    0     0 dropBcast  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 3 code 4 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 11 
    0     0 dropInvalid  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 reject     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 135,445 
    0     0 reject     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:137:139 
    0     0 reject     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:137 dpts:1024:65535 
    0     0 reject     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 135,139,445 
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:1900 
    0     0 dropNotSyn  tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:53 

Chain all2all (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           limit: avg 10/min burst 5 LOG flags 0 level 6 prefix `Shorewall:all2all:REJECT:' 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain blacklog (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           limit: avg 10/min burst 5 LOG flags 0 level 6 prefix `Shorewall:blacklst:DROP:' 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain blacklst (6 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 blacklog   all  --  *      *       125.232.106.78       0.0.0.0/0           
    0     0 blacklog   all  --  *      *       217.199.186.146      0.0.0.0/0           

Chain dropBcast (2 references)
 pkts bytes target     prot opt in     out     source               destination         
10543 1968K DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ADDRTYPE match dst-type BROADCAST 
    0     0 DROP       all  --  *      *       0.0.0.0/0            224.0.0.0/4         

Chain dropInvalid (2 references)
 pkts bytes target     prot opt in     out     source               destination         
  185 12654 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID 

Chain dropNotSyn (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp flags:!0x17/0x02 

Chain dynamic (8 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain eth0_fwd (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
    0     0 blacklst   all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
    0     0 smurfs     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
    0     0 norfc1918  all  --  *      *       0.0.0.0/0            0.0.0.0/0           state NEW 
11728 1133K tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
11796 1147K net2loc    all  --  *      eth3    0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      eth4    0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      eth1    0.0.0.0/0            0.0.0.0/0           

Chain eth0_in (1 references)
 pkts bytes target     prot opt in     out     source               destination         
 6056  816K dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
 6056  816K blacklst   all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
 6056  816K smurfs     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
 5929  809K norfc1918  all  --  *      *       0.0.0.0/0            0.0.0.0/0           state NEW 
94249  108M tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
 112K  111M net2fw     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain eth0_out (1 references)
 pkts bytes target     prot opt in     out     source               destination         
93166   29M fw2net     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain eth1_fwd (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
    0     0 blacklst   all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
    0     0 smurfs     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
 3276  304K tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
 3303  307K net2loc    all  --  *      eth3    0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      eth4    0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      eth0    0.0.0.0/0            0.0.0.0/0           

Chain eth1_in (1 references)
 pkts bytes target     prot opt in     out     source               destination         
 4547  722K dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
 4547  722K blacklst   all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
 4547  722K smurfs     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
    0     0 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
 4547  722K net2fw     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain eth1_out (1 references)
 pkts bytes target     prot opt in     out     source               destination         
 142K   10M fw2net     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain eth3_fwd (1 references)
 pkts bytes target     prot opt in     out     source               destination         
82350 6352K dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
82350 6352K smurfs     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
 449K   55M tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
82107 6340K eth3_mac   all  --  *      *       0.0.0.0/0            0.0.0.0/0           state NEW 
1667K  756M loc2net    all  --  *      eth4    0.0.0.0/0            0.0.0.0/0           
 3071  407K loc2net    all  --  *      eth1    0.0.0.0/0            0.0.0.0/0           
11443 1491K loc2net    all  --  *      eth0    0.0.0.0/0            0.0.0.0/0           

Chain eth3_in (1 references)
 pkts bytes target     prot opt in     out     source               destination         
14089 1658K dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
14089 1658K smurfs     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
  963  318K ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:67:68 
 133K   10M tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
13128 1342K eth3_mac   all  --  *      *       0.0.0.0/0            0.0.0.0/0           state NEW 
 158K   12M loc2fw     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain eth3_mac (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:00:77:9D:F7:F0 
    0     0 RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:00:77:9D:F7:F1 
    0     0 RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:00:77:9D:F7:F2 
    0     0 RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:00:77:9D:F7:F3 
    0     0 RETURN     all  --  *      *       192.168.5.3          0.0.0.0/0           MAC 00:0F:3D:CE:1A:63 
 2362  129K RETURN     all  --  *      *       192.168.5.4          0.0.0.0/0           MAC 00:0D:54:A3:7A:AA 
    0     0 RETURN     all  --  *      *       192.168.5.15         0.0.0.0/0           MAC 00:0D:54:A3:7A:A9 
 1667  182K RETURN     all  --  *      *       192.168.5.6          0.0.0.0/0           MAC 00:0E:2E:E3:59:17 
    0     0 RETURN     all  --  *      *       192.168.5.7          0.0.0.0/0           MAC 00:0E:2E:E3:59:4D 
 2456  159K RETURN     all  --  *      *       192.168.5.16         0.0.0.0/0           MAC 00:0D:54:A3:7A:B3 
    0     0 RETURN     all  --  *      *       192.168.5.17         0.0.0.0/0           MAC 00:19:CB:6C:A1:91 
    0     0 RETURN     all  --  *      *       192.168.5.20         0.0.0.0/0           MAC 00:03:25:07:9C:6C 
    0     0 RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:50:8B:4E:6A:4A 
    0     0 RETURN     all  --  *      *       192.168.5.10         0.0.0.0/0           MAC 00:20:6B:39:02:9C 
    0     0 RETURN     all  --  *      *       192.168.5.11         0.0.0.0/0           MAC 00:00:B4:C9:3A:F2 
    0     0 RETURN     all  --  *      *       192.168.5.182        0.0.0.0/0           MAC 00:04:E2:F6:DA:57 
    0     0 RETURN     all  --  *      *       192.168.5.101        0.0.0.0/0           MAC 00:11:D8:B6:A3:6F 
    0     0 RETURN     all  --  *      *       192.168.5.104        0.0.0.0/0           MAC 00:A0:D1:83:4C:48 
 6389  481K RETURN     all  --  *      *       192.168.5.102        0.0.0.0/0           MAC 00:08:02:0E:81:FF 
14971 1184K RETURN     all  --  *      *       192.168.5.103        0.0.0.0/0           MAC 00:16:EC:A3:57:F3 
    0     0 RETURN     all  --  *      *       192.168.5.108        0.0.0.0/0           MAC 00:A0:D1:83:4C:2B 
    0     0 RETURN     all  --  *      *       192.168.5.105        0.0.0.0/0           MAC 00:16:36:51:4B:C5 
  329 19560 RETURN     all  --  *      *       192.168.5.106        0.0.0.0/0           MAC 00:11:D8:24:B1:B1 
  166  8806 RETURN     all  --  *      *       192.168.5.107        0.0.0.0/0           MAC 00:A0:D1:83:4D:2B 
 3030  247K RETURN     all  --  *      *       192.168.5.110        0.0.0.0/0           MAC 00:16:36:48:A5:A4 
  479 27242 RETURN     all  --  *      *       192.168.5.111        0.0.0.0/0           MAC 00:08:02:0C:A1:66 
 1086 96335 RETURN     all  --  *      *       192.168.5.112        0.0.0.0/0           MAC 00:08:02:0D:C2:C4 
    0     0 RETURN     all  --  *      *       192.168.5.113        0.0.0.0/0           MAC 00:11:25:43:F1:B4 
    0     0 RETURN     all  --  *      *       192.168.5.115        0.0.0.0/0           MAC 00:08:02:0C:B6:31 
  683 38419 RETURN     all  --  *      *       192.168.5.116        0.0.0.0/0           MAC 00:16:36:51:43:D3 
    0     0 RETURN     all  --  *      *       192.168.5.117        0.0.0.0/0           MAC 00:13:D4:D3:8B:77 
    0     0 RETURN     all  --  *      *       192.168.5.120        0.0.0.0/0           MAC 00:0E:A6:CC:06:1D 
  498 39138 RETURN     all  --  *      *       192.168.5.121        0.0.0.0/0           MAC 00:13:A9:3B:80:C6 
    0     0 RETURN     all  --  *      *       192.168.5.122        0.0.0.0/0           MAC 00:1D:60:63:22:17 
 5169  548K RETURN     all  --  *      *       192.168.5.123        0.0.0.0/0           MAC 00:17:31:85:21:A4 
    0     0 RETURN     all  --  *      *       192.168.5.124        0.0.0.0/0           MAC 00:03:25:07:9C:6C 
    0     0 RETURN     all  --  *      *       192.168.5.125        0.0.0.0/0           MAC 00:0E:A6:F5:4C:0F 
    0     0 RETURN     all  --  *      *       192.168.5.126        0.0.0.0/0           MAC 00:E0:91:09:25:5D 
    0     0 RETURN     all  --  *      *       192.168.5.127        0.0.0.0/0           MAC 00:60:97:AF:D7:2C 
    0     0 RETURN     all  --  *      *       192.168.5.128        0.0.0.0/0           MAC 00:1D:60:18:7E:81 
    0     0 RETURN     all  --  *      *       192.168.5.129        0.0.0.0/0           MAC 00:15:AF:36:80:7F 
    0     0 RETURN     all  --  *      *       192.168.5.130        0.0.0.0/0           MAC 00:16:36:51:43:2F 
 1137 62436 RETURN     all  --  *      *       192.168.5.131        0.0.0.0/0           MAC 00:15:F2:F0:5B:55 
  635 71536 RETURN     all  --  *      *       192.168.5.135        0.0.0.0/0           MAC 00:18:F3:5E:F5:B4 
  432 34730 RETURN     all  --  *      *       192.168.5.136        0.0.0.0/0           MAC 00:11:D8:0A:4A:BF 
 1021  107K RETURN     all  --  *      *       192.168.5.140        0.0.0.0/0           MAC 00:0F:B0:82:51:85 
    0     0 RETURN     all  --  *      *       192.168.5.141        0.0.0.0/0           MAC 00:0F:B0:82:18:55 
  568 43302 RETURN     all  --  *      *       192.168.5.145        0.0.0.0/0           MAC 00:10:DC:69:FB:08 
    0     0 RETURN     all  --  *      *       192.168.5.146        0.0.0.0/0           MAC 00:1D:09:C2:6D:0B 
    0     0 RETURN     all  --  *      *       192.168.5.150        0.0.0.0/0           MAC 00:18:C0:54:F9:58 
    0     0 RETURN     all  --  *      *       192.168.5.151        0.0.0.0/0           MAC 00:16:36:69:64:6E 
    0     0 RETURN     all  --  *      *       192.168.5.152        0.0.0.0/0           MAC 00:08:02:67:C2:53 
  245 15192 RETURN     all  --  *      *       192.168.5.153        0.0.0.0/0           MAC 00:40:F4:CC:86:AE 
 3890  244K RETURN     all  --  *      *       192.168.5.155        0.0.0.0/0           MAC 00:1B:FC:B3:92:22 
 1242 74549 RETURN     all  --  *      *       192.168.5.156        0.0.0.0/0           MAC 00:13:49:AB:04:9A 
    0     0 RETURN     all  --  *      *       192.168.5.157        0.0.0.0/0           MAC 00:12:3F:81:E8:1F 
    0     0 RETURN     all  --  *      *       192.168.5.158        0.0.0.0/0           MAC 00:10:DC:E8:03:1F 
    0     0 RETURN     all  --  *      *       192.168.5.159        0.0.0.0/0           MAC 00:0F:CB:9A:5E:05 
  991 53645 RETURN     all  --  *      *       192.168.5.160        0.0.0.0/0           MAC 00:0E:2E:76:FB:A5 
    0     0 RETURN     all  --  *      *       192.168.5.161        0.0.0.0/0           MAC 00:0C:76:4A:75:10 
 6218  464K RETURN     all  --  *      *       192.168.5.162        0.0.0.0/0           MAC 00:13:D3:0F:E6:9C 
  222 11771 RETURN     all  --  *      *       192.168.5.163        0.0.0.0/0           MAC 00:50:70:35:11:94 
    0     0 RETURN     all  --  *      *       192.168.5.164        0.0.0.0/0           MAC 00:60:08:39:0C:23 
    0     0 RETURN     all  --  *      *       192.168.5.165        0.0.0.0/0           MAC 00:08:02:68:55:92 
  176 10480 RETURN     all  --  *      *       192.168.5.166        0.0.0.0/0           MAC 00:16:36:C1:A2:8C 
    0     0 RETURN     all  --  *      *       192.168.5.167        0.0.0.0/0           MAC 00:0A:79:8B:1D:10 
    0     0 RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:0D:60:77:45:F4 
 5639  331K RETURN     all  --  *      *       192.168.5.170        0.0.0.0/0           MAC 00:E0:18:9D:D4:AA 
    0     0 RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:08:0D:84:BF:C2 
    0     0 RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:1B:24:77:CC:8D 
    0     0 RETURN     all  --  *      *       192.168.5.168        0.0.0.0/0           MAC 00:15:C5:37:87:D0 
    0     0 RETURN     all  --  *      *       192.168.5.172        0.0.0.0/0           MAC 00:C0:9F:5E:14:99 
16741 1264K RETURN     all  --  *      *       192.168.5.173        0.0.0.0/0           MAC 00:03:47:EA:B2:03 
    0     0 RETURN     all  --  *      *       192.168.5.174        0.0.0.0/0           MAC 00:13:D3:95:3E:D2 
  497 24315 RETURN     all  --  *      *       192.168.5.175        0.0.0.0/0           MAC 00:14:85:19:AE:20 
    0     0 RETURN     all  --  *      *       192.168.5.180        0.0.0.0/0           MAC 00:0E:35:81:56:C2 
    0     0 RETURN     all  --  *      *       192.168.5.181        0.0.0.0/0           MAC 00:02:3F:0A:E1:3B 
  446 22748 RETURN     all  --  *      *       192.168.5.201        0.0.0.0/0           MAC 00:18:F3:27:30:1D 
 1355 76360 RETURN     all  --  *      *       192.168.5.202        0.0.0.0/0           MAC 00:1B:24:55:A5:04 
    0     0 RETURN     all  --  *      *       192.168.5.203        0.0.0.0/0           MAC 00:02:3F:67:18:F1 
 4994  506K RETURN     all  --  *      *       192.168.5.204        0.0.0.0/0           MAC 00:14:2A:60:FC:A6 
 5105  367K RETURN     all  --  *      *       192.168.5.205        0.0.0.0/0           MAC 00:19:DB:D0:13:35 
    0     0 RETURN     all  --  *      *       192.168.5.50         0.0.0.0/0           MAC 00:0E:35:E6:87:54 
    0     0 RETURN     all  --  *      *       192.168.5.51         0.0.0.0/0           MAC 00:1C:BF:0A:64:A1 
    0     0 RETURN     all  --  *      *       192.168.5.52         0.0.0.0/0           MAC 00:16:6F:55:AC:39 
    0     0 RETURN     all  --  *      *       192.168.5.53         0.0.0.0/0           MAC 00:1B:77:DA:9A:90 
    0     0 RETURN     all  --  *      *       192.168.5.54         0.0.0.0/0           MAC 00:0E:A6:6E:47:53 
    0     0 RETURN     all  --  *      *       192.168.5.56         0.0.0.0/0           MAC 00:16:6F:2E:40:30 
    0     0 RETURN     all  --  *      *       192.168.5.58         0.0.0.0/0           MAC 00:16:6F:56:16:E5 
    0     0 RETURN     all  --  *      *       192.168.5.59         0.0.0.0/0           MAC 00:1B:77:DA:EA:76 
    0     0 RETURN     all  --  *      *       192.168.5.60         0.0.0.0/0           MAC 00:16:6F:56:41:D0 
    0     0 RETURN     all  --  *      *       192.168.5.62         0.0.0.0/0           MAC 00:18:F3:3E:DF:D6 
    0     0 RETURN     all  --  *      *       192.168.5.64         0.0.0.0/0           MAC 00:14:A4:30:52:A4 
    0     0 RETURN     all  --  *      *       192.168.5.66         0.0.0.0/0           MAC 00:13:02:66:83:68 
    0     0 RETURN     all  --  *      *       192.168.5.68         0.0.0.0/0           MAC 00:18:DE:22:C4:97 
    0     0 RETURN     all  --  *      *       192.168.5.70         0.0.0.0/0           MAC 00:14:A4:30:98:03 
    0     0 RETURN     all  --  *      *       192.168.5.72         0.0.0.0/0           MAC 00:0E:35:83:66:FE 
    0     0 RETURN     all  --  *      *       192.168.5.74         0.0.0.0/0           MAC 00:13:CE:45:12:D2 
    0     0 RETURN     all  --  *      *       192.168.5.76         0.0.0.0/0           MAC 00:19:7D:1C:F4:FB 
    0     0 RETURN     all  --  *      *       192.168.5.78         0.0.0.0/0           MAC 00:0E:35:4A:C3:52 
    0     0 RETURN     all  --  *      *       192.168.5.80         0.0.0.0/0           MAC 00:E0:91:09:25:5D 
    0     0 RETURN     all  --  *      *       192.168.5.82         0.0.0.0/0           MAC 00:0E:35:83:69:0E 
    0     0 RETURN     all  --  *      *       192.168.5.83         0.0.0.0/0           MAC 00:15:00:2E:2D:10 
    0     0 RETURN     all  --  *      *       192.168.5.84         0.0.0.0/0           MAC 00:1C:BF:9E:BE:24 
    0     0 RETURN     all  --  *      *       192.168.5.90         0.0.0.0/0           MAC 00:1B:77:B7:F2:E7 
    0     0 RETURN     all  --  *      *       192.168.5.91         0.0.0.0/0           MAC 00:15:B7:27:0D:F1 
    0     0 RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:16:CB:BC:18:1C 
    0     0 RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:16:CB:CF:68:8E 
    0     0 RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:1B:63:AB:33:65 
    0     0 RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:1D:4F:F9:AD:C1 
    0     0 RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:0E:35:A8:5A:8E 
    0     0 RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:0B:5D:71:75:A1 
   17   936 RETURN     all  --  *      *       192.168.5.96         0.0.0.0/0           MAC 00:0A:E4:ED:0D:FE 
    0     0 RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:1B:63:1C:5B:B8 
    0     0 RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:13:77:06:06:C5 
    0     0 RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:13:02:36:11:B7 
    0     0 RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:1E:C2:03:3A:85 
    0     0 RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:13:F2:AB:F7:EA 
    0     0 RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:15:CE:CA:D7:10 
    0     0 RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:15:F2:51:96:17 
    0     0 RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:15:00:42:69:CA 
 2998  597K RETURN     all  --  *      *       192.168.5.1          0.0.0.0/0           ADDRTYPE match dst-type BROADCAST 
    0     0 RETURN     all  --  *      *       192.168.5.1          224.0.0.0/4         
 1037  119K LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           limit: avg 10/min burst 5 LOG flags 0 level 6 prefix `Shorewall:eth3_mac:REJECT:' 
 1381  141K reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain eth3_out (1 references)
 pkts bytes target     prot opt in     out     source               destination         
  395  130K ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:67:68 
 239K  188M fw2loc     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain eth4_fwd (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
    0     0 blacklst   all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
    0     0 smurfs     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
 524K  499M tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
1687K 1066M net2loc    all  --  *      eth3    0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      eth1    0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      eth0    0.0.0.0/0            0.0.0.0/0           

Chain eth4_in (1 references)
 pkts bytes target     prot opt in     out     source               destination         
 4149  708K dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
 4149  708K blacklst   all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
 4149  708K smurfs     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state INVALID,NEW 
  157 10660 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
 4149  708K net2fw     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain eth4_out (1 references)
 pkts bytes target     prot opt in     out     source               destination         
 135K 9594K fw2net     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain fw2loc (1 references)
 pkts bytes target     prot opt in     out     source               destination         
 233K  187M ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
 6373  897K ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain fw2net (3 references)
 pkts bytes target     prot opt in     out     source               destination         
77076   28M ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
 292K   21M ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain loc2fw (1 references)
 pkts bytes target     prot opt in     out     source               destination         
 146K   11M ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:21 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:106 
12400 1258K ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain loc2loc (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            192.168.5.122       tcp dpt:25200 ctorigdst 59.126.248.234 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            192.168.5.122       udp dpt:25200 ctorigdst 59.126.248.234 
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain loc2net (3 references)
 pkts bytes target     prot opt in     out     source               destination         
1600K  752M ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 LOG        tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:25 limit: avg 10/min burst 5 LOG flags 0 level 7 prefix `Shorewall:loc2net:DROP:' 
    0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:25 
81701 6296K ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain logdrop (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           limit: avg 10/min burst 5 LOG flags 0 level 6 prefix `Shorewall:logdrop:DROP:' 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain logflags (5 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           limit: avg 10/min burst 5 LOG flags 4 level 6 prefix `Shorewall:logflags:DROP:' 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain logreject (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           limit: avg 10/min burst 5 LOG flags 0 level 6 prefix `Shorewall:logreject:REJECT:' 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain net2all (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
12226 2102K Drop       all  --  *      *       0.0.0.0/0            0.0.0.0/0           
 1021 90206 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           limit: avg 10/min burst 5 LOG flags 0 level 6 prefix `Shorewall:net2all:DROP:' 
 1172  104K DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain net2fw (3 references)
 pkts bytes target     prot opt in     out     source               destination         
 106K  111M ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
  692 35700 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:80 
  142  6816 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:443 
  370 17710 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:25 
    3   144 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:33 
  304 14920 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:110 
  355 25971 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:53 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:53 
    0     0 ACCEPT     tcp  --  *      *       59.148.224.151       0.0.0.0/0           tcp dpt:31 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 31,47020:47050 ctorigdst 60.248.42.28 
  650 41680 LOG        icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8 limit: avg 10/min burst 5 LOG flags 0 level 6 prefix `Shorewall:net2fw:ACCEPT:' 
  660 42320 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8 
12226 2102K net2all    all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain net2loc (3 references)
 pkts bytes target     prot opt in     out     source               destination         
1702K 1068M ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            192.168.5.3         tcp dpt:8088 ctorigdst 60.248.42.28 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            192.168.5.4         tcp dpt:8000 ctorigdst 60.248.42.28 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            192.168.5.6         tcp dpt:8000 ctorigdst 60.248.42.28 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            192.168.5.122       tcp dpt:25200 ctorigdst 59.126.248.234 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            192.168.5.122       udp dpt:25200 ctorigdst 59.126.248.234 
    0     0 net2all    all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain norfc1918 (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 rfc1918    all  --  *      *       172.16.0.0/12        0.0.0.0/0           
    0     0 rfc1918    all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctorigdst 172.16.0.0/12 
    0     0 rfc1918    all  --  *      *       192.168.0.0/16       0.0.0.0/0           
    0     0 rfc1918    all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctorigdst 192.168.0.0/16 
    0     0 rfc1918    all  --  *      *       10.0.0.0/8           0.0.0.0/0           
    0     0 rfc1918    all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctorigdst 10.0.0.0/8 

Chain reject (12 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ADDRTYPE match src-type BROADCAST 
    0     0 DROP       all  --  *      *       224.0.0.0/4          0.0.0.0/0           
   98  8812 REJECT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with tcp-reset 
 1280  132K REJECT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with icmp-port-unreachable 
    3    99 REJECT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with icmp-host-unreachable 
    0     0 REJECT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with icmp-host-prohibited 

Chain rfc1918 (6 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           limit: avg 10/min burst 5 LOG flags 0 level 6 prefix `Shorewall:rfc1918:DROP:' 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain shorewall (0 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain smurfs (8 references)
 pkts bytes target     prot opt in     out     source               destination         
  545  180K RETURN     all  --  *      *       0.0.0.0              0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           ADDRTYPE match src-type BROADCAST limit: avg 10/min burst 5 LOG flags 0 level 6 prefix `Shorewall:smurfs:DROP:' 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ADDRTYPE match src-type BROADCAST 
    0     0 LOG        all  --  *      *       224.0.0.0/4          0.0.0.0/0           limit: avg 10/min burst 5 LOG flags 0 level 6 prefix `Shorewall:smurfs:DROP:' 
    0     0 DROP       all  --  *      *       224.0.0.0/4          0.0.0.0/0           

Chain tcpflags (8 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp flags:0x3F/0x29 
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp flags:0x3F/0x00 
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp flags:0x06/0x06 
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp flags:0x03/0x03 
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp spt:0 flags:0x17/0x02 

Log (/var/log/messages)

Mar 20 06:58:07 net2fw:ACCEPT:IN=eth0 OUT= SRC=218.25.41.136 DST=60.248.42.28 LEN=64 TOS=0x00 PREC=0x00 TTL=51 ID=46992 PROTO=ICMP TYPE=8 CODE=0 ID=16003 SEQ=512 
Mar 20 06:58:26 net2fw:ACCEPT:IN=eth0 OUT= SRC=222.71.50.23 DST=60.248.42.28 LEN=61 TOS=0x00 PREC=0x00 TTL=113 ID=54483 PROTO=ICMP TYPE=8 CODE=0 ID=512 SEQ=5702 
Mar 20 06:58:26 net2fw:ACCEPT:IN=eth0 OUT= SRC=222.71.50.23 DST=60.248.42.28 LEN=61 TOS=0x00 PREC=0x00 TTL=113 ID=54499 PROTO=ICMP TYPE=8 CODE=0 ID=512 SEQ=7494 
Mar 20 06:58:31 net2all:DROP:IN=eth4 OUT= SRC=60.28.161.117 DST=192.168.21.2 LEN=82 TOS=0x00 PREC=0x00 TTL=113 ID=27247 PROTO=UDP SPT=8800 DPT=11101 LEN=62 
Mar 20 06:58:55 eth3_mac:REJECT:IN=eth3 OUT=eth4 SRC=192.168.5.8 DST=192.168.1.253 LEN=106 TOS=0x00 PREC=0x00 TTL=127 ID=6274 PROTO=UDP SPT=1030 DPT=161 LEN=86 
Mar 20 06:59:01 eth3_mac:REJECT:IN=eth3 OUT=eth4 SRC=192.168.5.8 DST=192.168.1.253 LEN=106 TOS=0x00 PREC=0x00 TTL=127 ID=6275 PROTO=UDP SPT=1030 DPT=161 LEN=86 
Mar 20 06:59:01 net2all:DROP:IN=eth4 OUT= SRC=60.28.161.117 DST=192.168.21.2 LEN=82 TOS=0x00 PREC=0x00 TTL=113 ID=6570 PROTO=UDP SPT=8800 DPT=11101 LEN=62 
Mar 20 06:59:05 net2fw:ACCEPT:IN=eth0 OUT= SRC=218.25.41.136 DST=60.248.42.28 LEN=64 TOS=0x00 PREC=0x00 TTL=51 ID=46993 PROTO=ICMP TYPE=8 CODE=0 ID=56015 SEQ=0 
Mar 20 06:59:05 net2fw:ACCEPT:IN=eth0 OUT= SRC=218.25.41.136 DST=60.248.42.28 LEN=64 TOS=0x00 PREC=0x00 TTL=51 ID=46994 PROTO=ICMP TYPE=8 CODE=0 ID=56015 SEQ=256 
Mar 20 06:59:05 net2fw:ACCEPT:IN=eth0 OUT= SRC=218.25.41.136 DST=60.248.42.28 LEN=64 TOS=0x00 PREC=0x00 TTL=51 ID=46995 PROTO=ICMP TYPE=8 CODE=0 ID=56015 SEQ=512 
Mar 20 06:59:07 eth3_mac:REJECT:IN=eth3 OUT=eth4 SRC=192.168.5.8 DST=192.168.1.253 LEN=106 TOS=0x00 PREC=0x00 TTL=127 ID=6276 PROTO=UDP SPT=1030 DPT=161 LEN=86 
Mar 20 06:59:13 eth3_mac:REJECT:IN=eth3 OUT=eth4 SRC=192.168.5.8 DST=192.168.1.253 LEN=106 TOS=0x00 PREC=0x00 TTL=127 ID=6277 PROTO=UDP SPT=1030 DPT=161 LEN=86 
Mar 20 06:59:32 net2all:DROP:IN=eth4 OUT= SRC=60.28.161.117 DST=192.168.21.2 LEN=82 TOS=0x00 PREC=0x00 TTL=113 ID=19685 PROTO=UDP SPT=8800 DPT=11101 LEN=62 
Mar 20 06:59:52 net2fw:ACCEPT:IN=eth0 OUT= SRC=58.19.159.195 DST=60.248.42.28 LEN=64 TOS=0x00 PREC=0x00 TTL=49 ID=61955 PROTO=ICMP TYPE=8 CODE=0 ID=3008 SEQ=0 
Mar 20 06:59:52 net2fw:ACCEPT:IN=eth0 OUT= SRC=58.19.159.195 DST=60.248.42.28 LEN=64 TOS=0x00 PREC=0x00 TTL=49 ID=61956 PROTO=ICMP TYPE=8 CODE=0 ID=3008 SEQ=256 
Mar 20 06:59:52 net2fw:ACCEPT:IN=eth0 OUT= SRC=58.19.159.195 DST=60.248.42.28 LEN=64 TOS=0x00 PREC=0x00 TTL=49 ID=61957 PROTO=ICMP TYPE=8 CODE=0 ID=3008 SEQ=512 
Mar 20 06:59:56 eth3_mac:REJECT:IN=eth3 OUT= SRC=192.168.5.8 DST=192.168.5.255 LEN=78 TOS=0x00 PREC=0x00 TTL=128 ID=6278 PROTO=UDP SPT=137 DPT=137 LEN=58 
Mar 20 06:59:57 eth3_mac:REJECT:IN=eth3 OUT= SRC=192.168.5.8 DST=192.168.5.255 LEN=78 TOS=0x00 PREC=0x00 TTL=128 ID=6279 PROTO=UDP SPT=137 DPT=137 LEN=58 
Mar 20 06:59:57 eth3_mac:REJECT:IN=eth3 OUT= SRC=192.168.5.8 DST=192.168.5.255 LEN=78 TOS=0x00 PREC=0x00 TTL=128 ID=6280 PROTO=UDP SPT=137 DPT=137 LEN=58 
Mar 20 07:00:02 net2all:DROP:IN=eth4 OUT= SRC=60.28.161.117 DST=192.168.21.2 LEN=82 TOS=0x00 PREC=0x00 TTL=113 ID=6393 PROTO=UDP SPT=8800 DPT=11101 LEN=62 

NAT Table

Chain PREROUTING (policy ACCEPT 59103 packets, 4673K bytes)
 pkts bytes target     prot opt in     out     source               destination         
52165 4194K loc_dnat   all  --  eth3   *       0.0.0.0/0            0.0.0.0/0           
 2458  193K net_dnat   all  --  eth4   *       0.0.0.0/0            0.0.0.0/0           
 1549  112K net_dnat   all  --  eth1   *       0.0.0.0/0            0.0.0.0/0           
 2931  174K net_dnat   all  --  eth0   *       0.0.0.0/0            0.0.0.0/0           

Chain POSTROUTING (policy ACCEPT 288K packets, 20M bytes)
 pkts bytes target     prot opt in     out     source               destination         
 276K   19M eth0_masq  all  --  *      eth0    0.0.0.0/0            0.0.0.0/0           
 1027  199K eth1_masq  all  --  *      eth1    0.0.0.0/0            0.0.0.0/0           
 2144  336K eth3_masq  all  --  *      eth3    0.0.0.0/0            0.0.0.0/0           
46609 3732K eth4_masq  all  --  *      eth4    0.0.0.0/0            0.0.0.0/0           

Chain OUTPUT (policy ACCEPT 288K packets, 20M bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain eth0_masq (1 references)
 pkts bytes target     prot opt in     out     source               destination         
   30 11690 SNAT       all  --  *      *       192.168.5.0/24       0.0.0.0/0           to:60.248.42.28 

Chain eth1_masq (1 references)
 pkts bytes target     prot opt in     out     source               destination         
   13  2701 SNAT       all  --  *      *       192.168.5.0/24       0.0.0.0/0           to:192.168.20.2 

Chain eth3_masq (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 SNAT       tcp  --  *      *       60.248.42.0/24       0.0.0.0/0           tcp dpt:25 to:60.248.42.28 
    0     0 SNAT       all  --  *      *       192.168.20.0/24      0.0.0.0/0           to:192.168.20.2 
    0     0 SNAT       all  --  *      *       192.168.21.0/24      0.0.0.0/0           to:192.168.21.2 

Chain eth4_masq (1 references)
 pkts bytes target     prot opt in     out     source               destination         
45595 3536K SNAT       all  --  *      *       192.168.5.0/24       0.0.0.0/0           to:192.168.21.2 

Chain loc_dnat (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DNAT       tcp  --  *      *       0.0.0.0/0            59.126.248.234      tcp dpt:25200 to:192.168.5.122:25200 
    0     0 DNAT       udp  --  *      *       0.0.0.0/0            59.126.248.234      udp dpt:25200 to:192.168.5.122:25200 

Chain net_dnat (3 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DNAT       tcp  --  *      *       0.0.0.0/0            60.248.42.28        tcp dpt:22322 to:192.168.5.3:8088 
    0     0 DNAT       tcp  --  *      *       0.0.0.0/0            60.248.42.28        tcp dpt:22422 to:192.168.5.4:8000 
    0     0 DNAT       tcp  --  *      *       0.0.0.0/0            60.248.42.28        tcp dpt:22622 to:192.168.5.6:8000 
    0     0 DNAT       tcp  --  *      *       0.0.0.0/0            59.126.248.234      tcp dpt:25200 to:192.168.5.122:25200 
    0     0 DNAT       udp  --  *      *       0.0.0.0/0            59.126.248.234      udp dpt:25200 to:192.168.5.122:25200 

Mangle Table

Chain PREROUTING (policy ACCEPT 3720K packets, 2027M bytes)
 pkts bytes target     prot opt in     out     source               destination         
3372K 1925M CONNMARK   all  --  *      *       0.0.0.0/0            0.0.0.0/0           CONNMARK match !0x0/0xff CONNMARK restore mask 0xff
28837 2809K routemark  all  --  eth4   *       0.0.0.0/0            0.0.0.0/0           MARK match 0x0/0xff 
 1562  112K routemark  all  --  eth1   *       0.0.0.0/0            0.0.0.0/0           MARK match 0x0/0xff 
15850 2648K routemark  all  --  eth0   *       0.0.0.0/0            0.0.0.0/0           MARK match 0x0/0xff 
 124K  113M tcpre      all  --  eth0   *       0.0.0.0/0            0.0.0.0/0           
 7850 1029K tcpre      all  --  eth1   *       0.0.0.0/0            0.0.0.0/0           
1692K 1067M tcpre      all  --  eth4   *       0.0.0.0/0            0.0.0.0/0           
 239K   18M tcpre      all  --  *      *       0.0.0.0/0            0.0.0.0/0           MARK match 0x0/0xff 

Chain INPUT (policy ACCEPT 333K packets, 201M bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain FORWARD (policy ACCEPT 3385K packets, 1826M bytes)
 pkts bytes target     prot opt in     out     source               destination         
3385K 1826M tcfor      all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain OUTPUT (policy ACCEPT 661K packets, 312M bytes)
 pkts bytes target     prot opt in     out     source               destination         
77266   28M CONNMARK   all  --  *      *       0.0.0.0/0            0.0.0.0/0           CONNMARK match !0x0/0xff CONNMARK restore mask 0xff
 583K  284M tcout      all  --  *      *       0.0.0.0/0            0.0.0.0/0           MARK match 0x0/0xff 

Chain POSTROUTING (policy ACCEPT 4057K packets, 2140M bytes)
 pkts bytes target     prot opt in     out     source               destination         
4057K 2140M tcpost     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain routemark (3 references)
 pkts bytes target     prot opt in     out     source               destination         
28837 2809K MARK       all  --  eth4   *       0.0.0.0/0            0.0.0.0/0           MARK set 0x3 
 1562  112K MARK       all  --  eth1   *       0.0.0.0/0            0.0.0.0/0           MARK set 0x2 
15850 2648K MARK       all  --  eth0   *       0.0.0.0/0            0.0.0.0/0           MARK set 0x1 
46249 5569K CONNMARK   all  --  *      *       0.0.0.0/0            0.0.0.0/0           MARK match !0x0/0xff CONNMARK save mask 0xff 

Chain tcfor (1 references)
 pkts bytes target     prot opt in     out     source               destination         
58986 5037K CONNMARK   all  --  *      *       0.0.0.0/0            0.0.0.0/0           MARK match 0x0/0xffff CONNMARK restore mask 0xff
3326K 1821M RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0           MARK match !0x0/0xffff 
    0     0 CONNMARK   all  --  *      *       0.0.0.0/0            0.0.0.0/0           MARK match !0x0/0xffff CONNMARK save mask 0xff 

Chain tcout (1 references)
 pkts bytes target     prot opt in     out     source               destination         
 583K  284M MARK       all  --  *      *       0.0.0.0/0            0.0.0.0/0           MARK set 0x1 

Chain tcpost (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain tcpre (4 references)
 pkts bytes target     prot opt in     out     source               destination         
  744 56285 MARK       icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8 MARK set 0x1 
   17 10526 MARK       icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 0 MARK set 0x1 
54198 5895K MARK       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:80 MARK match 0x0/0xffff MARK set 0x3 
 3775  315K MARK       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:443 MARK match 0x0/0xffff MARK set 0x3 
   14  2820 MARK       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,5070 /* PRESUMABLY VOIP PORTS */ MARK set 0x2 
  246  261K MARK       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 1214,2086,4662,4672,6346,6347,8888,9999,6881,6969,7000 /* P2P PORTS OF FREQUENT USE */ MARK set 0x2 

Conntrack Table

udp      17 11 src=60.248.42.28 dst=60.248.42.28 sport=43354 dport=53 packets=1 bytes=72 [UNREPLIED] src=60.248.42.28 dst=60.248.42.28 sport=53 dport=43354 packets=0 bytes=0 mark=0 use=1
tcp      6 349191 ESTABLISHED src=192.168.5.140 dst=220.132.233.128 sport=1236 dport=32609 packets=494 bytes=102592 src=220.132.233.128 dst=192.168.21.2 sport=32609 dport=1236 packets=491 bytes=56061 [ASSURED] mark=3 use=1
tcp      6 387119 ESTABLISHED src=192.168.5.16 dst=121.10.104.142 sport=3015 dport=80 packets=52 bytes=8539 src=121.10.104.142 dst=192.168.21.2 sport=80 dport=3015 packets=66 bytes=75984 [ASSURED] mark=3 use=1
udp      17 9 src=192.168.21.2 dst=217.12.4.104 sport=1025 dport=53 packets=1 bytes=58 [UNREPLIED] src=217.12.4.104 dst=192.168.21.2 sport=53 dport=1025 packets=0 bytes=0 mark=0 use=1
udp      17 20 src=192.168.5.102 dst=59.115.78.134 sport=49857 dport=63181 packets=3 bytes=456 [UNREPLIED] src=59.115.78.134 dst=192.168.21.2 sport=63181 dport=49857 packets=0 bytes=0 mark=0 use=1
udp      17 7 src=60.248.42.28 dst=60.248.42.28 sport=27193 dport=53 packets=1 bytes=72 [UNREPLIED] src=60.248.42.28 dst=60.248.42.28 sport=53 dport=27193 packets=0 bytes=0 mark=0 use=1
udp      17 4 src=192.168.5.102 dst=59.190.179.66 sport=49857 dport=64382 packets=3 bytes=429 [UNREPLIED] src=59.190.179.66 dst=192.168.21.2 sport=64382 dport=49857 packets=0 bytes=0 mark=0 use=1
udp      17 17 src=192.168.5.102 dst=150.214.137.225 sport=49857 dport=7801 packets=3 bytes=180 [UNREPLIED] src=150.214.137.225 dst=192.168.21.2 sport=7801 dport=49857 packets=0 bytes=0 mark=0 use=1
udp      17 10 src=192.168.20.2 dst=192.168.20.1 sport=58496 dport=53 packets=1 bytes=75 [UNREPLIED] src=192.168.20.1 dst=192.168.20.2 sport=53 dport=58496 packets=0 bytes=0 mark=0 use=1
udp      17 23 src=192.168.20.2 dst=195.47.75.55 sport=4666 dport=53 packets=1 bytes=67 [UNREPLIED] src=195.47.75.55 dst=192.168.20.2 sport=53 dport=4666 packets=0 bytes=0 mark=0 use=1
udp      17 7 src=192.168.20.2 dst=65.55.238.126 sport=42372 dport=53 packets=1 bytes=55 [UNREPLIED] src=65.55.238.126 dst=192.168.20.2 sport=53 dport=42372 packets=0 bytes=0 mark=0 use=1
udp      17 8 src=192.168.21.2 dst=207.68.160.190 sport=37653 dport=53 packets=1 bytes=60 [UNREPLIED] src=207.68.160.190 dst=192.168.21.2 sport=53 dport=37653 packets=0 bytes=0 mark=0 use=1
udp      17 17 src=192.168.20.2 dst=202.165.104.22 sport=56812 dport=53 packets=1 bytes=58 [UNREPLIED] src=202.165.104.22 dst=192.168.20.2 sport=53 dport=56812 packets=0 bytes=0 mark=0 use=1
udp      17 21 src=192.168.5.103 dst=70.172.204.177 sport=22319 dport=49885 packets=3 bytes=183 [UNREPLIED] src=70.172.204.177 dst=192.168.21.2 sport=49885 dport=22319 packets=0 bytes=0 mark=0 use=1
tcp      6 431585 ESTABLISHED src=192.168.5.112 dst=218.169.111.127 sport=2812 dport=38639 packets=723 bytes=75346 src=218.169.111.127 dst=192.168.21.2 sport=38639 dport=2812 packets=787 bytes=73299 [ASSURED] mark=3 use=1
udp      17 0 src=192.168.5.102 dst=24.126.141.76 sport=49857 dport=23317 packets=3 bytes=183 [UNREPLIED] src=24.126.141.76 dst=192.168.21.2 sport=23317 dport=49857 packets=0 bytes=0 mark=0 use=1
tcp      6 431894 ESTABLISHED src=192.168.5.140 dst=59.113.62.252 sport=1142 dport=48457 packets=22 bytes=2216 src=59.113.62.252 dst=192.168.21.2 sport=48457 dport=1142 packets=21 bytes=1120 [ASSURED] mark=3 use=1
udp      17 21 src=192.168.21.2 dst=203.84.197.239 sport=17102 dport=53 packets=1 bytes=58 [UNREPLIED] src=203.84.197.239 dst=192.168.21.2 sport=53 dport=17102 packets=0 bytes=0 mark=0 use=1
udp      17 6 src=192.168.20.2 dst=193.85.2.117 sport=29250 dport=53 packets=1 bytes=67 [UNREPLIED] src=193.85.2.117 dst=192.168.20.2 sport=53 dport=29250 packets=0 bytes=0 mark=0 use=1
udp      17 29 src=192.168.21.2 dst=75.125.29.226 sport=15132 dport=53 packets=1 bytes=67 [UNREPLIED] src=75.125.29.226 dst=192.168.21.2 sport=53 dport=15132 packets=0 bytes=0 mark=0 use=1
udp      17 9 src=192.168.21.2 dst=202.43.223.170 sport=28637 dport=53 packets=1 bytes=58 [UNREPLIED] src=202.43.223.170 dst=192.168.21.2 sport=53 dport=28637 packets=0 bytes=0 mark=0 use=1
udp      17 142 src=192.168.5.204 dst=61.172.196.115 sport=11101 dport=17788 packets=2 bytes=139 src=61.172.196.115 dst=192.168.21.2 sport=17788 dport=11101 packets=2 bytes=111 [ASSURED] mark=3 use=1
udp      17 28 src=192.168.5.103 dst=78.58.71.244 sport=22319 dport=32159 packets=2 bytes=120 [UNREPLIED] src=78.58.71.244 dst=192.168.21.2 sport=32159 dport=22319 packets=0 bytes=0 mark=0 use=1
udp      17 23 src=60.248.42.28 dst=60.248.42.28 sport=34213 dport=53 packets=1 bytes=72 [UNREPLIED] src=60.248.42.28 dst=60.248.42.28 sport=53 dport=34213 packets=0 bytes=0 mark=0 use=1
udp      17 29 src=192.168.21.2 dst=75.125.29.226 sport=3259 dport=53 packets=1 bytes=67 [UNREPLIED] src=75.125.29.226 dst=192.168.21.2 sport=53 dport=3259 packets=0 bytes=0 mark=0 use=1
udp      17 25 src=192.168.21.2 dst=75.125.29.226 sport=42257 dport=53 packets=1 bytes=67 [UNREPLIED] src=75.125.29.226 dst=192.168.21.2 sport=53 dport=42257 packets=0 bytes=0 mark=0 use=1
udp      17 0 src=192.168.5.102 dst=92.74.205.82 sport=49857 dport=43411 packets=2 bytes=128 src=92.74.205.82 dst=192.168.21.2 sport=43411 dport=49857 packets=1 bytes=46 mark=3 use=1
udp      17 5 src=192.168.21.2 dst=203.84.197.239 sport=17774 dport=53 packets=1 bytes=58 [UNREPLIED] src=203.84.197.239 dst=192.168.21.2 sport=53 dport=17774 packets=0 bytes=0 mark=0 use=1
udp      17 29 src=192.168.5.102 dst=211.193.74.98 sport=49857 dport=18697 packets=1 bytes=137 [UNREPLIED] src=211.193.74.98 dst=192.168.21.2 sport=18697 dport=49857 packets=0 bytes=0 mark=0 use=1
udp      17 1 src=192.168.20.2 dst=210.244.29.185 sport=12169 dport=53 packets=1 bytes=63 [UNREPLIED] src=210.244.29.185 dst=192.168.20.2 sport=53 dport=12169 packets=0 bytes=0 mark=0 use=1
udp      17 28 src=192.168.5.103 dst=72.218.4.52 sport=22319 dport=41414 packets=2 bytes=122 [UNREPLIED] src=72.218.4.52 dst=192.168.21.2 sport=41414 dport=22319 packets=0 bytes=0 mark=0 use=1
tcp      6 358021 ESTABLISHED src=192.168.5.116 dst=207.46.108.39 sport=1352 dport=1863 packets=1942 bytes=84291 src=207.46.108.39 dst=192.168.21.2 sport=1863 dport=1352 packets=2057 bytes=511349 [ASSURED] mark=3 use=1
tcp      6 340203 ESTABLISHED src=192.168.5.112 dst=59.85.223.239 sport=1039 dport=8109 packets=54 bytes=7572 src=59.85.223.239 dst=192.168.21.2 sport=8109 dport=1039 packets=67 bytes=37183 [ASSURED] mark=3 use=1
udp      17 8 src=192.168.21.2 dst=66.218.71.63 sport=19081 dport=53 packets=1 bytes=58 [UNREPLIED] src=66.218.71.63 dst=192.168.21.2 sport=53 dport=19081 packets=0 bytes=0 mark=0 use=1
udp      17 10 src=192.168.5.102 dst=89.76.247.76 sport=49857 dport=55560 packets=3 bytes=189 [UNREPLIED] src=89.76.247.76 dst=192.168.21.2 sport=55560 dport=49857 packets=0 bytes=0 mark=0 use=1
udp      17 19 src=192.168.21.2 dst=68.142.196.63 sport=17386 dport=53 packets=1 bytes=58 [UNREPLIED] src=68.142.196.63 dst=192.168.21.2 sport=53 dport=17386 packets=0 bytes=0 mark=0 use=1
udp      17 132 src=192.168.5.102 dst=79.35.178.225 sport=49857 dport=22355 packets=3 bytes=752 src=79.35.178.225 dst=192.168.21.2 sport=22355 dport=49857 packets=2 bytes=107 [ASSURED] mark=3 use=1
tcp      6 305230 ESTABLISHED src=192.168.5.156 dst=220.143.42.204 sport=1029 dport=22795 packets=103 bytes=19786 src=220.143.42.204 dst=192.168.21.2 sport=22795 dport=1029 packets=121 bytes=48875 [ASSURED] mark=0 use=1
udp      17 17 src=192.168.21.2 dst=75.125.29.226 sport=52588 dport=53 packets=1 bytes=67 [UNREPLIED] src=75.125.29.226 dst=192.168.21.2 sport=53 dport=52588 packets=0 bytes=0 mark=0 use=1
udp      17 1 src=192.168.21.2 dst=217.12.4.104 sport=20137 dport=53 packets=1 bytes=58 [UNREPLIED] src=217.12.4.104 dst=192.168.21.2 sport=53 dport=20137 packets=0 bytes=0 mark=0 use=1
udp      17 0 src=192.168.20.2 dst=207.46.66.126 sport=60722 dport=53 packets=1 bytes=60 [UNREPLIED] src=207.46.66.126 dst=192.168.20.2 sport=53 dport=60722 packets=0 bytes=0 mark=0 use=1
udp      17 0 src=60.248.42.28 dst=60.248.42.28 sport=41240 dport=53 packets=1 bytes=72 [UNREPLIED] src=60.248.42.28 dst=60.248.42.28 sport=53 dport=41240 packets=0 bytes=0 mark=0 use=1
tcp      6 431995 ESTABLISHED src=192.168.5.102 dst=207.46.108.63 sport=2450 dport=80 packets=62 bytes=17788 src=207.46.108.63 dst=192.168.21.2 sport=80 dport=2450 packets=49 bytes=35976 [ASSURED] mark=3 use=1
tcp      6 281907 ESTABLISHED src=192.168.5.123 dst=207.46.106.13 sport=4001 dport=1863 packets=80 bytes=10743 src=207.46.106.13 dst=192.168.21.2 sport=1863 dport=4001 packets=100 bytes=34742 [ASSURED] mark=768 use=1
udp      17 24 src=192.168.21.2 dst=68.142.255.16 sport=42934 dport=53 packets=1 bytes=58 [UNREPLIED] src=68.142.255.16 dst=192.168.21.2 sport=53 dport=42934 packets=0 bytes=0 mark=0 use=1
udp      17 26 src=60.248.42.28 dst=60.248.42.28 sport=17583 dport=53 packets=1 bytes=72 [UNREPLIED] src=60.248.42.28 dst=60.248.42.28 sport=53 dport=17583 packets=0 bytes=0 mark=0 use=1
udp      17 1 src=192.168.20.2 dst=202.165.104.22 sport=40775 dport=53 packets=1 bytes=58 [UNREPLIED] src=202.165.104.22 dst=192.168.20.2 sport=53 dport=40775 packets=0 bytes=0 mark=0 use=1
tcp      6 431996 ESTABLISHED src=192.168.5.103 dst=192.168.21.1 sport=4204 dport=4040 packets=302 bytes=42013 src=192.168.21.1 dst=192.168.21.2 sport=4040 dport=4204 packets=301 bytes=143519 [ASSURED] mark=3 use=1
udp      17 0 src=192.168.21.2 dst=68.142.255.16 sport=11813 dport=53 packets=1 bytes=60 [UNREPLIED] src=68.142.255.16 dst=192.168.21.2 sport=53 dport=11813 packets=0 bytes=0 mark=0 use=1
udp      17 29 src=192.168.21.2 dst=217.12.4.104 sport=40694 dport=53 packets=1 bytes=58 [UNREPLIED] src=217.12.4.104 dst=192.168.21.2 sport=53 dport=40694 packets=0 bytes=0 mark=0 use=1
udp      17 6 src=192.168.21.2 dst=217.12.4.104 sport=56096 dport=53 packets=1 bytes=58 [UNREPLIED] src=217.12.4.104 dst=192.168.21.2 sport=53 dport=56096 packets=0 bytes=0 mark=0 use=1
udp      17 22 src=192.168.5.110 dst=220.133.78.128 sport=64882 dport=20776 packets=3 bytes=408 [UNREPLIED] src=220.133.78.128 dst=192.168.21.2 sport=20776 dport=64882 packets=0 bytes=0 mark=3 use=1
tcp      6 431944 ESTABLISHED src=192.168.5.140 dst=207.68.179.219 sport=1190 dport=80 packets=6 bytes=910 src=207.68.179.219 dst=192.168.21.2 sport=80 dport=1190 packets=5 bytes=897 [ASSURED] mark=3 use=1
udp      17 2 src=192.168.20.2 dst=202.165.104.22 sport=26287 dport=53 packets=1 bytes=58 [UNREPLIED] src=202.165.104.22 dst=192.168.20.2 sport=53 dport=26287 packets=0 bytes=0 mark=0 use=1
udp      17 17 src=192.168.5.162 dst=69.231.73.18 sport=1803 dport=52833 packets=1 bytes=70 src=69.231.73.18 dst=192.168.21.2 sport=52833 dport=1803 packets=1 bytes=47 mark=3 use=1
udp      17 27 src=192.168.5.102 dst=149.169.176.13 sport=49857 dport=50433 packets=3 bytes=180 [UNREPLIED] src=149.169.176.13 dst=192.168.21.2 sport=50433 dport=49857 packets=0 bytes=0 mark=0 use=1
udp      17 10 src=192.168.20.2 dst=207.46.66.126 sport=60602 dport=53 packets=1 bytes=60 [UNREPLIED] src=207.46.66.126 dst=192.168.20.2 sport=53 dport=60602 packets=0 bytes=0 mark=0 use=1
udp      17 23 src=192.168.21.2 dst=68.142.255.16 sport=45607 dport=53 packets=1 bytes=65 [UNREPLIED] src=68.142.255.16 dst=192.168.21.2 sport=53 dport=45607 packets=0 bytes=0 mark=0 use=1
tcp      6 367545 ESTABLISHED src=192.168.5.16 dst=140.115.42.158 sport=4617 dport=19132 packets=101 bytes=11048 src=140.115.42.158 dst=60.248.42.28 sport=19132 dport=4617 packets=113 bytes=14289 [ASSURED] mark=0 use=1
udp      17 12 src=60.248.42.28 dst=60.248.42.28 sport=33723 dport=53 packets=1 bytes=72 [UNREPLIED] src=60.248.42.28 dst=60.248.42.28 sport=53 dport=33723 packets=0 bytes=0 mark=0 use=1
udp      17 18 src=192.168.21.2 dst=202.43.223.170 sport=28305 dport=53 packets=1 bytes=58 [UNREPLIED] src=202.43.223.170 dst=192.168.21.2 sport=53 dport=28305 packets=0 bytes=0 mark=0 use=1
udp      17 6 src=192.168.5.102 dst=140.127.116.221 sport=49857 dport=35842 packets=2 bytes=276 src=140.127.116.221 dst=192.168.21.2 sport=35842 dport=49857 packets=1 bytes=48 mark=3 use=1
udp      17 13 src=192.168.5.102 dst=81.170.236.25 sport=49857 dport=59362 packets=2 bytes=126 src=81.170.236.25 dst=192.168.21.2 sport=59362 dport=49857 packets=1 bytes=389 mark=3 use=1
udp      17 131 src=192.168.5.102 dst=125.225.133.184 sport=49857 dport=51905 packets=3 bytes=683 src=125.225.133.184 dst=192.168.21.2 sport=51905 dport=49857 packets=2 bytes=100 [ASSURED] mark=3 use=1
udp      17 19 src=192.168.20.2 dst=202.165.104.22 sport=59449 dport=53 packets=1 bytes=58 [UNREPLIED] src=202.165.104.22 dst=192.168.20.2 sport=53 dport=59449 packets=0 bytes=0 mark=0 use=1
udp      17 9 src=192.168.21.2 dst=207.68.160.190 sport=6700 dport=53 packets=1 bytes=60 [UNREPLIED] src=207.68.160.190 dst=192.168.21.2 sport=53 dport=6700 packets=0 bytes=0 mark=0 use=1
udp      17 21 src=192.168.20.2 dst=65.54.240.126 sport=9995 dport=53 packets=1 bytes=60 [UNREPLIED] src=65.54.240.126 dst=192.168.20.2 sport=53 dport=9995 packets=0 bytes=0 mark=0 use=1
tcp      6 375927 ESTABLISHED src=192.168.5.16 dst=121.10.104.142 sport=1274 dport=80 packets=29 bytes=7603 src=121.10.104.142 dst=192.168.20.2 sport=80 dport=1274 packets=36 bytes=38134 [ASSURED] mark=2 use=1
udp      17 1 src=192.168.20.2 dst=65.55.238.126 sport=40154 dport=53 packets=1 bytes=60 [UNREPLIED] src=65.55.238.126 dst=192.168.20.2 sport=53 dport=40154 packets=0 bytes=0 mark=0 use=1
tcp      6 18 SYN_SENT src=192.168.5.166 dst=202.43.195.52 sport=1139 dport=80 packets=3 bytes=144 [UNREPLIED] src=202.43.195.52 dst=192.168.21.2 sport=80 dport=1139 packets=0 bytes=0 mark=0 use=1
udp      17 160 src=192.168.5.103 dst=71.103.105.231 sport=22319 dport=20284 packets=3 bytes=871 src=71.103.105.231 dst=192.168.21.2 sport=20284 dport=22319 packets=2 bytes=100 [ASSURED] mark=3 use=1
tcp      6 350180 ESTABLISHED src=192.168.5.135 dst=61.57.11.93 sport=1196 dport=47960 packets=7 bytes=433 src=61.57.11.93 dst=192.168.21.2 sport=47960 dport=1196 packets=7 bytes=435 [ASSURED] mark=0 use=1
tcp      6 281958 ESTABLISHED src=192.168.5.103 dst=67.60.64.94 sport=1312 dport=17070 packets=65 bytes=13600 src=67.60.64.94 dst=192.168.21.2 sport=17070 dport=1312 packets=47 bytes=8251 [ASSURED] mark=768 use=1
udp      17 0 src=192.168.5.102 dst=145.116.9.214 sport=49857 dport=9430 packets=3 bytes=192 [UNREPLIED] src=145.116.9.214 dst=192.168.21.2 sport=9430 dport=49857 packets=0 bytes=0 mark=0 use=1
udp      17 0 src=192.168.20.2 dst=202.165.104.22 sport=22629 dport=53 packets=1 bytes=58 [UNREPLIED] src=202.165.104.22 dst=192.168.20.2 sport=53 dport=22629 packets=0 bytes=0 mark=0 use=1
udp      17 7 src=192.168.20.2 dst=193.85.2.117 sport=52501 dport=53 packets=1 bytes=67 [UNREPLIED] src=193.85.2.117 dst=192.168.20.2 sport=53 dport=52501 packets=0 bytes=0 mark=0 use=1
tcp      6 431983 ESTABLISHED src=192.168.5.102 dst=72.14.253.125 sport=2049 dport=5222 packets=220 bytes=16662 src=72.14.253.125 dst=192.168.21.2 sport=5222 dport=2049 packets=306 bytes=201829 [ASSURED] mark=3 use=1
tcp      6 339974 ESTABLISHED src=192.168.5.131 dst=62.85.93.20 sport=2397 dport=443 packets=11 bytes=620 src=62.85.93.20 dst=192.168.21.2 sport=443 dport=2397 packets=17 bytes=968 [ASSURED] mark=3 use=1
udp      17 28 src=192.168.20.2 dst=195.47.75.55 sport=65361 dport=53 packets=1 bytes=67 [UNREPLIED] src=195.47.75.55 dst=192.168.20.2 sport=53 dport=65361 packets=0 bytes=0 mark=0 use=1
udp      17 13 src=192.168.5.102 dst=76.126.86.100 sport=49857 dport=63293 packets=2 bytes=116 src=76.126.86.100 dst=192.168.21.2 sport=63293 dport=49857 packets=1 bytes=387 mark=3 use=1
udp      17 8 src=192.168.20.2 dst=213.199.161.77 sport=5731 dport=53 packets=1 bytes=60 [UNREPLIED] src=213.199.161.77 dst=192.168.20.2 sport=53 dport=5731 packets=0 bytes=0 mark=0 use=1
udp      17 17 src=192.168.20.2 dst=65.54.240.126 sport=27155 dport=53 packets=1 bytes=60 [UNREPLIED] src=65.54.240.126 dst=192.168.20.2 sport=53 dport=27155 packets=0 bytes=0 mark=0 use=1
tcp      6 358022 ESTABLISHED src=192.168.5.123 dst=207.46.108.93 sport=2831 dport=1863 packets=2285 bytes=102135 src=207.46.108.93 dst=192.168.21.2 sport=1863 dport=2831 packets=2442 bytes=599720 [ASSURED] mark=3 use=1
udp      17 4 src=192.168.20.2 dst=193.85.2.117 sport=44757 dport=53 packets=1 bytes=67 [UNREPLIED] src=193.85.2.117 dst=192.168.20.2 sport=53 dport=44757 packets=0 bytes=0 mark=0 use=1
tcp      6 344225 ESTABLISHED src=192.168.5.106 dst=218.169.111.127 sport=1188 dport=38639 packets=386 bytes=70929 src=218.169.111.127 dst=192.168.21.2 sport=38639 dport=1188 packets=449 bytes=38389 [ASSURED] mark=3 use=1
udp      17 23 src=192.168.5.103 dst=123.194.246.162 sport=22319 dport=48505 packets=2 bytes=126 src=123.194.246.162 dst=192.168.21.2 sport=48505 dport=22319 packets=1 bytes=416 mark=3 use=1
udp      17 3 src=60.248.42.28 dst=60.248.42.28 sport=1273 dport=53 packets=1 bytes=72 [UNREPLIED] src=60.248.42.28 dst=60.248.42.28 sport=53 dport=1273 packets=0 bytes=0 mark=0 use=1
udp      17 105 src=192.168.5.110 dst=91.92.3.94 sport=64882 dport=15576 packets=1 bytes=63 src=91.92.3.94 dst=192.168.21.2 sport=15576 dport=64882 packets=2 bytes=1548 [ASSURED] mark=3 use=1
udp      17 17 src=192.168.5.102 dst=79.22.227.94 sport=49857 dport=23574 packets=3 bytes=180 [UNREPLIED] src=79.22.227.94 dst=192.168.21.2 sport=23574 dport=49857 packets=0 bytes=0 mark=0 use=1
udp      17 1 src=192.168.20.2 dst=65.54.240.126 sport=61659 dport=53 packets=1 bytes=60 [UNREPLIED] src=65.54.240.126 dst=192.168.20.2 sport=53 dport=61659 packets=0 bytes=0 mark=0 use=1
udp      17 9 src=60.248.42.28 dst=60.248.42.28 sport=53910 dport=53 packets=1 bytes=72 [UNREPLIED] src=60.248.42.28 dst=60.248.42.28 sport=53 dport=53910 packets=0 bytes=0 mark=0 use=1
udp      17 27 src=192.168.5.102 dst=59.115.75.244 sport=49857 dport=9773 packets=3 bytes=183 [UNREPLIED] src=59.115.75.244 dst=192.168.21.2 sport=9773 dport=49857 packets=0 bytes=0 mark=0 use=1
udp      17 3 src=192.168.20.2 dst=207.46.66.126 sport=38216 dport=53 packets=1 bytes=62 [UNREPLIED] src=207.46.66.126 dst=192.168.20.2 sport=53 dport=38216 packets=0 bytes=0 mark=0 use=1
udp      17 5 src=192.168.21.2 dst=217.12.4.104 sport=6734 dport=53 packets=1 bytes=58 [UNREPLIED] src=217.12.4.104 dst=192.168.21.2 sport=53 dport=6734 packets=0 bytes=0 mark=0 use=1
udp      17 21 src=192.168.5.103 dst=61.194.61.80 sport=22319 dport=53280 packets=3 bytes=186 [UNREPLIED] src=61.194.61.80 dst=192.168.21.2 sport=53280 dport=22319 packets=0 bytes=0 mark=0 use=1
udp      17 3 src=192.168.5.103 dst=81.159.112.63 sport=22319 dport=22440 packets=3 bytes=180 [UNREPLIED] src=81.159.112.63 dst=192.168.21.2 sport=22440 dport=22319 packets=0 bytes=0 mark=0 use=1
udp      17 6 src=192.168.20.2 dst=207.46.66.126 sport=61881 dport=53 packets=1 bytes=60 [UNREPLIED] src=207.46.66.126 dst=192.168.20.2 sport=53 dport=61881 packets=0 bytes=0 mark=0 use=1
udp      17 21 src=192.168.5.102 dst=89.150.77.60 sport=49857 dport=35888 packets=2 bytes=118 src=89.150.77.60 dst=192.168.21.2 sport=35888 dport=49857 packets=1 bytes=48 mark=3 use=1
udp      17 0 src=192.168.21.2 dst=68.142.196.63 sport=57907 dport=53 packets=1 bytes=65 [UNREPLIED] src=68.142.196.63 dst=192.168.21.2 sport=53 dport=57907 packets=0 bytes=0 mark=0 use=1
udp      17 28 src=192.168.5.103 dst=70.247.216.89 sport=22319 dport=21053 packets=1 bytes=60 [UNREPLIED] src=70.247.216.89 dst=192.168.21.2 sport=21053 dport=22319 packets=0 bytes=0 mark=0 use=1
udp      17 9 src=192.168.20.2 dst=207.46.66.126 sport=55310 dport=53 packets=1 bytes=60 [UNREPLIED] src=207.46.66.126 dst=192.168.20.2 sport=53 dport=55310 packets=0 bytes=0 mark=0 use=1
udp      17 3 src=192.168.20.2 dst=202.165.104.22 sport=27922 dport=53 packets=1 bytes=58 [UNREPLIED] src=202.165.104.22 dst=192.168.20.2 sport=53 dport=27922 packets=0 bytes=0 mark=0 use=1
udp      17 16 src=192.168.20.2 dst=195.47.75.55 sport=42494 dport=53 packets=1 bytes=67 [UNREPLIED] src=195.47.75.55 dst=192.168.20.2 sport=53 dport=42494 packets=0 bytes=0 mark=0 use=1
udp      17 18 src=192.168.20.2 dst=65.54.240.126 sport=64081 dport=53 packets=1 bytes=60 [UNREPLIED] src=65.54.240.126 dst=192.168.20.2 sport=53 dport=64081 packets=0 bytes=0 mark=0 use=1
tcp      6 282454 ESTABLISHED src=192.168.5.106 dst=210.202.93.84 sport=3094 dport=1081 packets=25 bytes=4358 src=210.202.93.84 dst=192.168.21.2 sport=1081 dport=3094 packets=29 bytes=3567 [ASSURED] mark=768 use=1
tcp      6 425867 ESTABLISHED src=192.168.5.6 dst=24.216.53.131 sport=1417 dport=59356 packets=73 bytes=14627 src=24.216.53.131 dst=192.168.21.2 sport=59356 dport=1417 packets=87 bytes=28761 [ASSURED] mark=3 use=1
udp      17 14 src=192.168.20.2 dst=195.47.75.55 sport=25976 dport=53 packets=1 bytes=67 [UNREPLIED] src=195.47.75.55 dst=192.168.20.2 sport=53 dport=25976 packets=0 bytes=0 mark=0 use=1
udp      17 26 src=192.168.5.112 dst=70.226.13.216 sport=1323 dport=21836 packets=2 bytes=264 [UNREPLIED] src=70.226.13.216 dst=192.168.21.2 sport=21836 dport=1323 packets=0 bytes=0 mark=0 use=1
tcp      6 381438 ESTABLISHED src=192.168.5.16 dst=121.10.104.142 sport=2227 dport=80 packets=11 bytes=6843 src=121.10.104.142 dst=60.248.42.28 sport=80 dport=2227 packets=9 bytes=4069 [ASSURED] mark=1 use=1
udp      17 20 src=192.168.5.162 dst=78.54.161.12 sport=1803 dport=43110 packets=2 bytes=140 src=78.54.161.12 dst=192.168.21.2 sport=43110 dport=1803 packets=1 bytes=47 mark=3 use=1
udp      17 0 src=192.168.21.2 dst=202.43.223.170 sport=6861 dport=53 packets=1 bytes=58 [UNREPLIED] src=202.43.223.170 dst=192.168.21.2 sport=53 dport=6861 packets=0 bytes=0 mark=0 use=1
udp      17 17 src=192.168.20.2 dst=65.54.240.126 sport=21801 dport=53 packets=1 bytes=60 [UNREPLIED] src=65.54.240.126 dst=192.168.20.2 sport=53 dport=21801 packets=0 bytes=0 mark=0 use=1
udp      17 11 src=192.168.20.2 dst=207.46.66.126 sport=7015 dport=53 packets=1 bytes=55 [UNREPLIED] src=207.46.66.126 dst=192.168.20.2 sport=53 dport=7015 packets=0 bytes=0 mark=0 use=1
udp      17 21 src=192.168.20.2 dst=193.85.2.117 sport=1689 dport=53 packets=1 bytes=67 [UNREPLIED] src=193.85.2.117 dst=192.168.20.2 sport=53 dport=1689 packets=0 bytes=0 mark=0 use=1
udp      17 20 src=192.168.21.2 dst=217.12.4.104 sport=18952 dport=53 packets=1 bytes=58 [UNREPLIED] src=217.12.4.104 dst=192.168.21.2 sport=53 dport=18952 packets=0 bytes=0 mark=0 use=1
tcp      6 375882 ESTABLISHED src=192.168.5.16 dst=121.10.104.142 sport=1265 dport=80 packets=50 bytes=8483 src=121.10.104.142 dst=192.168.20.2 sport=80 dport=1265 packets=68 bytes=78277 [ASSURED] mark=2 use=1
udp      17 22 src=192.168.5.103 dst=71.106.115.135 sport=22319 dport=31094 packets=3 bytes=444 [UNREPLIED] src=71.106.115.135 dst=192.168.21.2 sport=31094 dport=22319 packets=0 bytes=0 mark=0 use=1
udp      17 25 src=192.168.5.102 dst=201.17.89.236 sport=49857 dport=15281 packets=3 bytes=183 [UNREPLIED] src=201.17.89.236 dst=192.168.21.2 sport=15281 dport=49857 packets=0 bytes=0 mark=0 use=1
tcp      6 359426 ESTABLISHED src=192.168.5.106 dst=61.231.232.246 sport=1095 dport=5144 packets=18 bytes=6513 src=61.231.232.246 dst=60.248.42.28 sport=5144 dport=1095 packets=25 bytes=3006 [ASSURED] mark=0 use=1
udp      17 24 src=60.248.42.28 dst=60.248.42.28 sport=37796 dport=53 packets=1 bytes=73 [UNREPLIED] src=60.248.42.28 dst=60.248.42.28 sport=53 dport=37796 packets=0 bytes=0 mark=0 use=1
udp      17 143 src=192.168.5.204 dst=60.28.213.187 sport=11101 dport=17788 packets=3 bytes=182 src=60.28.213.187 dst=192.168.21.2 sport=17788 dport=11101 packets=3 bytes=154 [ASSURED] mark=3 use=1
udp      17 25 src=0.0.0.0 dst=255.255.255.255 sport=68 dport=67 packets=4 bytes=1312 [UNREPLIED] src=255.255.255.255 dst=0.0.0.0 sport=67 dport=68 packets=0 bytes=0 mark=0 use=1
udp      17 1 src=192.168.21.2 dst=66.218.71.63 sport=38964 dport=53 packets=1 bytes=60 [UNREPLIED] src=66.218.71.63 dst=192.168.21.2 sport=53 dport=38964 packets=0 bytes=0 mark=0 use=1
udp      17 12 src=192.168.20.2 dst=202.165.104.22 sport=57373 dport=53 packets=1 bytes=58 [UNREPLIED] src=202.165.104.22 dst=192.168.20.2 sport=53 dport=57373 packets=0 bytes=0 mark=0 use=1
udp      17 17 src=192.168.5.102 dst=209.107.121.48 sport=49857 dport=56394 packets=3 bytes=180 [UNREPLIED] src=209.107.121.48 dst=192.168.21.2 sport=56394 dport=49857 packets=0 bytes=0 mark=0 use=1
tcp      6 386817 ESTABLISHED src=192.168.5.16 dst=60.190.114.95 sport=2878 dport=80 packets=53 bytes=14040 src=60.190.114.95 dst=192.168.21.2 sport=80 dport=2878 packets=65 bytes=76867 [ASSURED] mark=3 use=1
tcp      6 420682 ESTABLISHED src=192.168.5.205 dst=68.142.233.163 sport=1060 dport=443 packets=11 bytes=3471 src=68.142.233.163 dst=192.168.21.2 sport=443 dport=1060 packets=10 bytes=2525 [ASSURED] mark=3 use=1
udp      17 27 src=192.168.5.102 dst=71.108.19.222 sport=49857 dport=56505 packets=3 bytes=180 [UNREPLIED] src=71.108.19.222 dst=192.168.21.2 sport=56505 dport=49857 packets=0 bytes=0 mark=0 use=1
udp      17 10 src=192.168.20.2 dst=213.199.161.77 sport=45177 dport=53 packets=1 bytes=62 [UNREPLIED] src=213.199.161.77 dst=192.168.20.2 sport=53 dport=45177 packets=0 bytes=0 mark=0 use=1
udp      17 119 src=127.0.0.1 dst=127.0.0.1 sport=54883 dport=161 packets=49 bytes=3796 src=127.0.0.1 dst=127.0.0.1 sport=161 dport=54883 packets=49 bytes=4017 [ASSURED] mark=0 use=1
tcp      6 431985 ESTABLISHED src=192.168.5.102 dst=61.218.240.34 sport=2405 dport=80 packets=34 bytes=4225 src=61.218.240.34 dst=192.168.21.2 sport=80 dport=2405 packets=29 bytes=2283 [ASSURED] mark=3 use=1
udp      17 138 src=168.95.192.138 dst=60.248.42.28 sport=32842 dport=53 packets=2 bytes=162 src=60.248.42.28 dst=168.95.192.138 sport=53 dport=32842 packets=2 bytes=242 [ASSURED] mark=1 use=1
tcp      6 91 TIME_WAIT src=192.168.5.166 dst=202.43.195.52 sport=1165 dport=80 packets=7 bytes=851 src=202.43.195.52 dst=192.168.21.2 sport=80 dport=1165 packets=4 bytes=277 [ASSURED] mark=3 use=1
udp      17 29 src=192.168.5.102 dst=147.83.74.86 sport=49857 dport=22732 packets=1 bytes=65 [UNREPLIED] src=147.83.74.86 dst=192.168.21.2 sport=22732 dport=49857 packets=0 bytes=0 mark=0 use=1
udp      17 1 src=192.168.21.2 dst=66.218.71.63 sport=25128 dport=53 packets=1 bytes=58 [UNREPLIED] src=66.218.71.63 dst=192.168.21.2 sport=53 dport=25128 packets=0 bytes=0 mark=0 use=1
tcp      6 9 TIME_WAIT src=127.0.0.1 dst=127.0.0.1 sport=43603 dport=143 packets=9 bytes=636 src=127.0.0.1 dst=127.0.0.1 sport=143 dport=43603 packets=12 bytes=1336 [ASSURED] mark=0 use=1
udp      17 13 src=192.168.21.2 dst=75.125.29.226 sport=60722 dport=53 packets=1 bytes=67 [UNREPLIED] src=75.125.29.226 dst=192.168.21.2 sport=53 dport=60722 packets=0 bytes=0 mark=0 use=1
tcp      6 429374 ESTABLISHED src=192.168.5.156 dst=218.172.211.18 sport=1028 dport=5237 packets=1803 bytes=185108 src=218.172.211.18 dst=192.168.21.2 sport=5237 dport=1028 packets=1710 bytes=190087 [ASSURED] mark=3 use=1
tcp      6 283848 ESTABLISHED src=192.168.5.6 dst=124.40.41.48 sport=3449 dport=80 packets=2 bytes=442 [UNREPLIED] src=124.40.41.48 dst=192.168.21.2 sport=80 dport=1024 packets=0 bytes=0 mark=3 use=1
tcp      6 418967 ESTABLISHED src=192.168.5.205 dst=203.69.140.153 sport=1111 dport=30810 packets=2634 bytes=146344 src=203.69.140.153 dst=192.168.21.2 sport=30810 dport=1111 packets=2605 bytes=301097 [ASSURED] mark=3 use=1
udp      17 11 src=192.168.20.2 dst=193.85.2.117 sport=17795 dport=53 packets=1 bytes=67 [UNREPLIED] src=193.85.2.117 dst=192.168.20.2 sport=53 dport=17795 packets=0 bytes=0 mark=0 use=1
udp      17 10 src=192.168.21.2 dst=66.218.71.63 sport=37235 dport=53 packets=1 bytes=65 [UNREPLIED] src=66.218.71.63 dst=192.168.21.2 sport=53 dport=37235 packets=0 bytes=0 mark=0 use=1
udp      17 5 src=192.168.20.2 dst=193.85.2.117 sport=43385 dport=53 packets=1 bytes=67 [UNREPLIED] src=193.85.2.117 dst=192.168.20.2 sport=53 dport=43385 packets=0 bytes=0 mark=0 use=1
udp      17 175 src=192.168.5.145 dst=76.188.106.66 sport=40944 dport=25632 packets=2 bytes=589 src=76.188.106.66 dst=192.168.21.2 sport=25632 dport=40944 packets=2 bytes=100 [ASSURED] mark=3 use=1
udp      17 16 src=192.168.21.2 dst=203.84.197.239 sport=23954 dport=53 packets=1 bytes=58 [UNREPLIED] src=203.84.197.239 dst=192.168.21.2 sport=53 dport=23954 packets=0 bytes=0 mark=0 use=1
udp      17 10 src=192.168.20.2 dst=195.47.75.55 sport=30459 dport=53 packets=1 bytes=67 [UNREPLIED] src=195.47.75.55 dst=192.168.20.2 sport=53 dport=30459 packets=0 bytes=0 mark=0 use=1
tcp      6 359450 ESTABLISHED src=192.168.5.106 dst=60.248.71.10 sport=1110 dport=13397 packets=34 bytes=5407 src=60.248.71.10 dst=60.248.42.28 sport=13397 dport=1110 packets=38 bytes=3624 [ASSURED] mark=0 use=1
udp      17 29 src=192.168.21.2 dst=207.68.160.190 sport=63211 dport=53 packets=1 bytes=60 [UNREPLIED] src=207.68.160.190 dst=192.168.21.2 sport=53 dport=63211 packets=0 bytes=0 mark=0 use=1
udp      17 20 src=192.168.20.2 dst=202.165.104.22 sport=2960 dport=53 packets=1 bytes=58 [UNREPLIED] src=202.165.104.22 dst=192.168.20.2 sport=53 dport=2960 packets=0 bytes=0 mark=0 use=1
tcp      6 307516 ESTABLISHED src=192.168.5.123 dst=118.170.103.228 sport=1045 dport=1664 packets=386 bytes=19002 src=118.170.103.228 dst=192.168.21.2 sport=1664 dport=1045 packets=380 bytes=23678 [ASSURED] mark=768 use=1
udp      17 15 src=192.168.5.162 dst=74.77.212.106 sport=1803 dport=16429 packets=1 bytes=60 src=74.77.212.106 dst=192.168.21.2 sport=16429 dport=1803 packets=1 bytes=46 mark=3 use=1
tcp      6 75 SYN_SENT src=192.168.5.166 dst=203.84.196.242 sport=1158 dport=80 packets=1 bytes=48 [UNREPLIED] src=203.84.196.242 dst=192.168.21.2 sport=80 dport=1158 packets=0 bytes=0 mark=0 use=1
tcp      6 306022 ESTABLISHED src=192.168.5.166 dst=203.70.49.205 sport=1376 dport=10294 packets=2 bytes=1134 [UNREPLIED] src=203.70.49.205 dst=192.168.21.2 sport=10294 dport=1376 packets=0 bytes=0 mark=0 use=1
udp      17 14 src=192.168.21.2 dst=75.125.29.226 sport=62814 dport=53 packets=1 bytes=67 [UNREPLIED] src=75.125.29.226 dst=192.168.21.2 sport=53 dport=62814 packets=0 bytes=0 mark=0 use=1
udp      17 179 src=192.168.5.102 dst=222.158.192.3 sport=49857 dport=5061 packets=2 bytes=131 src=222.158.192.3 dst=192.168.20.2 sport=5061 dport=49857 packets=2 bytes=765 [ASSURED] mark=2 use=1
tcp      6 430962 ESTABLISHED src=168.95.4.131 dst=60.248.42.28 sport=37310 dport=25 packets=393 bytes=540893 src=60.248.42.28 dst=168.95.4.131 sport=25 dport=37310 packets=202 bytes=8273 [ASSURED] mark=1 use=1
udp      17 6 src=192.168.5.103 dst=207.34.130.150 sport=22319 dport=37401 packets=2 bytes=260 [UNREPLIED] src=207.34.130.150 dst=192.168.21.2 sport=37401 dport=22319 packets=0 bytes=0 mark=0 use=1
udp      17 2 src=192.168.20.2 dst=207.46.66.126 sport=16811 dport=53 packets=1 bytes=60 [UNREPLIED] src=207.46.66.126 dst=192.168.20.2 sport=53 dport=16811 packets=0 bytes=0 mark=0 use=1
udp      17 0 src=60.248.42.28 dst=60.248.42.28 sport=63227 dport=53 packets=1 bytes=72 [UNREPLIED] src=60.248.42.28 dst=60.248.42.28 sport=53 dport=63227 packets=0 bytes=0 mark=0 use=1
udp      17 11 src=192.168.20.2 dst=65.54.240.126 sport=5019 dport=53 packets=1 bytes=60 [UNREPLIED] src=65.54.240.126 dst=192.168.20.2 sport=53 dport=5019 packets=0 bytes=0 mark=0 use=1
tcp      6 381440 ESTABLISHED src=192.168.5.16 dst=121.10.104.142 sport=2224 dport=80 packets=16 bytes=7067 src=121.10.104.142 dst=60.248.42.28 sport=80 dport=2224 packets=16 bytes=13139 [ASSURED] mark=1 use=1
tcp      6 78 TIME_WAIT src=192.168.5.102 dst=60.248.42.28 sport=2477 dport=80 packets=5 bytes=690 src=60.248.42.28 dst=192.168.5.102 sport=80 dport=2477 packets=4 bytes=524 [ASSURED] mark=0 use=1
udp      17 22 src=192.168.5.103 dst=129.49.105.231 sport=22319 dport=25565 packets=3 bytes=444 [UNREPLIED] src=129.49.105.231 dst=192.168.21.2 sport=25565 dport=22319 packets=0 bytes=0 mark=0 use=1
tcp      6 78 SYN_SENT src=192.168.5.166 dst=203.84.196.242 sport=1159 dport=80 packets=2 bytes=96 [UNREPLIED] src=203.84.196.242 dst=192.168.21.2 sport=80 dport=1159 packets=0 bytes=0 mark=0 use=1
udp      17 4 src=192.168.5.103 dst=58.72.177.118 sport=22319 dport=41199 packets=2 bytes=120 src=58.72.177.118 dst=192.168.21.2 sport=41199 dport=22319 packets=1 bytes=46 mark=3 use=1
udp      17 6 src=192.168.20.2 dst=202.165.104.22 sport=1520 dport=53 packets=1 bytes=58 [UNREPLIED] src=202.165.104.22 dst=192.168.20.2 sport=53 dport=1520 packets=0 bytes=0 mark=0 use=1
udp      17 20 src=192.168.5.102 dst=140.135.11.128 sport=49857 dport=50817 packets=3 bytes=456 [UNREPLIED] src=140.135.11.128 dst=192.168.21.2 sport=50817 dport=49857 packets=0 bytes=0 mark=0 use=1
udp      17 8 src=192.168.21.2 dst=68.142.196.63 sport=36556 dport=53 packets=1 bytes=58 [UNREPLIED] src=68.142.196.63 dst=192.168.21.2 sport=53 dport=36556 packets=0 bytes=0 mark=0 use=1
udp      17 27 src=192.168.21.2 dst=202.43.223.170 sport=43697 dport=53 packets=1 bytes=58 [UNREPLIED] src=202.43.223.170 dst=192.168.21.2 sport=53 dport=43697 packets=0 bytes=0 mark=0 use=1
udp      17 2 src=192.168.21.2 dst=66.218.71.63 sport=28117 dport=53 packets=1 bytes=58 [UNREPLIED] src=66.218.71.63 dst=192.168.21.2 sport=53 dport=28117 packets=0 bytes=0 mark=0 use=1
udp      17 19 src=192.168.5.162 dst=69.209.135.42 sport=1803 dport=24015 packets=2 bytes=140 src=69.209.135.42 dst=192.168.21.2 sport=24015 dport=1803 packets=1 bytes=47 mark=3 use=1
udp      17 8 src=192.168.20.2 dst=193.85.2.117 sport=34546 dport=53 packets=1 bytes=67 [UNREPLIED] src=193.85.2.117 dst=192.168.20.2 sport=53 dport=34546 packets=0 bytes=0 mark=0 use=1
udp      17 15 src=192.168.20.2 dst=202.165.104.22 sport=64170 dport=53 packets=1 bytes=58 [UNREPLIED] src=202.165.104.22 dst=192.168.20.2 sport=53 dport=64170 packets=0 bytes=0 mark=0 use=1
udp      17 21 src=192.168.5.103 dst=87.4.251.67 sport=22319 dport=23404 packets=3 bytes=189 [UNREPLIED] src=87.4.251.67 dst=192.168.21.2 sport=23404 dport=22319 packets=0 bytes=0 mark=0 use=1
tcp      6 305261 ESTABLISHED src=192.168.5.166 dst=61.92.188.122 sport=1988 dport=8764 packets=148 bytes=16855 src=61.92.188.122 dst=192.168.21.2 sport=8764 dport=1988 packets=178 bytes=185324 [ASSURED] mark=0 use=1
udp      17 13 src=192.168.5.103 dst=71.107.252.37 sport=22319 dport=31860 packets=3 bytes=441 [UNREPLIED] src=71.107.252.37 dst=192.168.21.2 sport=31860 dport=22319 packets=0 bytes=0 mark=0 use=1
udp      17 85 src=192.168.5.166 dst=58.18.172.47 sport=65535 dport=7201 packets=29 bytes=2220 src=58.18.172.47 dst=192.168.21.2 sport=7201 dport=65535 packets=56 bytes=33083 [ASSURED] mark=3 use=1
udp      17 25 src=192.168.5.102 dst=61.228.94.9 sport=49857 dport=31325 packets=3 bytes=423 [UNREPLIED] src=61.228.94.9 dst=192.168.21.2 sport=31325 dport=49857 packets=0 bytes=0 mark=0 use=1
udp      17 21 src=192.168.5.103 dst=86.136.71.27 sport=22319 dport=16282 packets=3 bytes=192 [UNREPLIED] src=86.136.71.27 dst=192.168.21.2 sport=16282 dport=22319 packets=0 bytes=0 mark=0 use=1
udp      17 166 src=192.168.5.102 dst=221.145.173.99 sport=49857 dport=38614 packets=3 bytes=735 src=221.145.173.99 dst=192.168.21.2 sport=38614 dport=49857 packets=2 bytes=99 [ASSURED] mark=3 use=1
udp      17 22 src=192.168.20.2 dst=195.47.75.55 sport=42669 dport=53 packets=1 bytes=67 [UNREPLIED] src=195.47.75.55 dst=192.168.20.2 sport=53 dport=42669 packets=0 bytes=0 mark=0 use=1
udp      17 21 src=192.168.21.2 dst=202.43.223.170 sport=27478 dport=53 packets=1 bytes=58 [UNREPLIED] src=202.43.223.170 dst=192.168.21.2 sport=53 dport=27478 packets=0 bytes=0 mark=0 use=1
udp      17 22 src=192.168.5.103 dst=71.233.12.61 sport=22319 dport=54369 packets=3 bytes=405 [UNREPLIED] src=71.233.12.61 dst=192.168.21.2 sport=54369 dport=22319 packets=0 bytes=0 mark=0 use=1
udp      17 11 src=192.168.21.2 dst=207.68.160.190 sport=29375 dport=53 packets=1 bytes=60 [UNREPLIED] src=207.68.160.190 dst=192.168.21.2 sport=53 dport=29375 packets=0 bytes=0 mark=0 use=1
udp      17 4 src=192.168.5.110 dst=59.104.225.105 sport=64882 dport=42698 packets=3 bytes=411 src=59.104.225.105 dst=192.168.21.2 sport=42698 dport=64882 packets=1 bytes=48 mark=3 use=1
udp      17 18 src=192.168.20.2 dst=65.54.240.126 sport=4546 dport=53 packets=1 bytes=60 [UNREPLIED] src=65.54.240.126 dst=192.168.20.2 sport=53 dport=4546 packets=0 bytes=0 mark=0 use=1
udp      17 2 src=192.168.20.2 dst=213.199.161.77 sport=58493 dport=53 packets=1 bytes=60 [UNREPLIED] src=213.199.161.77 dst=192.168.20.2 sport=53 dport=58493 packets=0 bytes=0 mark=0 use=1
udp      17 24 src=192.168.20.2 dst=65.55.238.126 sport=40259 dport=53 packets=1 bytes=60 [UNREPLIED] src=65.55.238.126 dst=192.168.20.2 sport=53 dport=40259 packets=0 bytes=0 mark=0 use=1
udp      17 25 src=192.168.20.2 dst=195.47.75.55 sport=29471 dport=53 packets=1 bytes=67 [UNREPLIED] src=195.47.75.55 dst=192.168.20.2 sport=53 dport=29471 packets=0 bytes=0 mark=0 use=1
udp      17 10 src=192.168.5.103 dst=76.100.223.169 sport=22319 dport=58575 packets=3 bytes=447 [UNREPLIED] src=76.100.223.169 dst=192.168.21.2 sport=58575 dport=22319 packets=0 bytes=0 mark=0 use=1
tcp      6 374757 ESTABLISHED src=192.168.5.155 dst=163.16.140.211 sport=4608 dport=56913 packets=9 bytes=541 src=163.16.140.211 dst=192.168.20.2 sport=56913 dport=4608 packets=14 bytes=906 [ASSURED] mark=2 use=1
udp      17 3 src=192.168.21.2 dst=68.142.196.63 sport=2615 dport=53 packets=1 bytes=58 [UNREPLIED] src=68.142.196.63 dst=192.168.21.2 sport=53 dport=2615 packets=0 bytes=0 mark=0 use=1
udp      17 4 src=192.168.20.2 dst=193.85.2.117 sport=2925 dport=53 packets=1 bytes=67 [UNREPLIED] src=193.85.2.117 dst=192.168.20.2 sport=53 dport=2925 packets=0 bytes=0 mark=0 use=1
udp      17 8 src=192.168.5.103 dst=72.223.106.210 sport=22319 dport=63819 packets=3 bytes=186 [UNREPLIED] src=72.223.106.210 dst=192.168.21.2 sport=63819 dport=22319 packets=0 bytes=0 mark=0 use=1
tcp      6 31 TIME_WAIT src=192.168.5.166 dst=74.6.155.239 sport=1147 dport=80 packets=5 bytes=818 src=74.6.155.239 dst=192.168.21.2 sport=80 dport=1147 packets=4 bytes=1354 [ASSURED] mark=3 use=1
udp      17 2 src=192.168.21.2 dst=202.43.223.170 sport=37545 dport=53 packets=1 bytes=58 [UNREPLIED] src=202.43.223.170 dst=192.168.21.2 sport=53 dport=37545 packets=0 bytes=0 mark=0 use=1
udp      17 23 src=192.168.21.2 dst=202.43.223.170 sport=56247 dport=53 packets=1 bytes=58 [UNREPLIED] src=202.43.223.170 dst=192.168.21.2 sport=53 dport=56247 packets=0 bytes=0 mark=0 use=1
udp      17 25 src=192.168.20.2 dst=65.54.240.126 sport=16031 dport=53 packets=1 bytes=60 [UNREPLIED] src=65.54.240.126 dst=192.168.20.2 sport=53 dport=16031 packets=0 bytes=0 mark=0 use=1
udp      17 24 src=60.248.42.28 dst=60.248.42.28 sport=11668 dport=53 packets=1 bytes=72 [UNREPLIED] src=60.248.42.28 dst=60.248.42.28 sport=53 dport=11668 packets=0 bytes=0 mark=0 use=1
udp      17 10 src=60.248.42.28 dst=61.200.83.50 sport=37052 dport=53 packets=1 bytes=65 src=61.200.83.50 dst=60.248.42.28 sport=53 dport=37052 packets=1 bytes=183 mark=1 use=1
udp      17 10 src=192.168.5.103 dst=64.231.85.26 sport=22319 dport=35180 packets=3 bytes=450 [UNREPLIED] src=64.231.85.26 dst=192.168.21.2 sport=35180 dport=22319 packets=0 bytes=0 mark=0 use=1
udp      17 142 src=192.168.5.155 dst=192.168.5.1 sport=2030 dport=53 packets=26 bytes=1580 src=192.168.5.1 dst=192.168.5.155 sport=53 dport=2030 packets=25 bytes=2150 [ASSURED] mark=0 use=1
udp      17 1 src=60.248.42.28 dst=60.248.42.28 sport=22757 dport=53 packets=1 bytes=72 [UNREPLIED] src=60.248.42.28 dst=60.248.42.28 sport=53 dport=22757 packets=0 bytes=0 mark=0 use=1
udp      17 28 src=192.168.20.2 dst=65.55.238.126 sport=31374 dport=53 packets=1 bytes=67 [UNREPLIED] src=65.55.238.126 dst=192.168.20.2 sport=53 dport=31374 packets=0 bytes=0 mark=0 use=1
udp      17 27 src=192.168.21.2 dst=203.84.197.239 sport=2350 dport=53 packets=1 bytes=58 [UNREPLIED] src=203.84.197.239 dst=192.168.21.2 sport=53 dport=2350 packets=0 bytes=0 mark=0 use=1
udp      17 2 src=192.168.5.103 dst=74.57.131.134 sport=22319 dport=61588 packets=1 bytes=59 src=74.57.131.134 dst=192.168.21.2 sport=61588 dport=22319 packets=1 bytes=389 mark=3 use=1
udp      17 25 src=192.168.5.102 dst=87.105.84.249 sport=49857 dport=22928 packets=3 bytes=198 [UNREPLIED] src=87.105.84.249 dst=192.168.21.2 sport=22928 dport=49857 packets=0 bytes=0 mark=0 use=1
tcp      6 356431 ESTABLISHED src=192.168.5.16 dst=60.190.118.169 sport=2155 dport=80 packets=3 bytes=4476 [UNREPLIED] src=60.190.118.169 dst=192.168.21.2 sport=80 dport=2155 packets=0 bytes=0 mark=0 use=1
udp      17 28 src=192.168.5.103 dst=24.154.150.34 sport=22319 dport=19426 packets=2 bytes=120 [UNREPLIED] src=24.154.150.34 dst=192.168.21.2 sport=19426 dport=22319 packets=0 bytes=0 mark=0 use=1
tcp      6 375928 ESTABLISHED src=192.168.5.16 dst=121.10.104.142 sport=1279 dport=80 packets=11 bytes=6835 src=121.10.104.142 dst=192.168.20.2 sport=80 dport=1279 packets=10 bytes=4870 [ASSURED] mark=2 use=1
tcp      6 359453 ESTABLISHED src=192.168.5.106 dst=203.121.248.147 sport=1090 dport=49209 packets=7 bytes=379 src=203.121.248.147 dst=60.248.42.28 sport=49209 dport=1090 packets=13 bytes=742 [ASSURED] mark=0 use=1
udp      17 13 src=60.248.42.28 dst=60.248.42.28 sport=24800 dport=53 packets=1 bytes=72 [UNREPLIED] src=60.248.42.28 dst=60.248.42.28 sport=53 dport=24800 packets=0 bytes=0 mark=0 use=1
udp      17 26 src=60.248.42.28 dst=60.248.42.28 sport=48230 dport=53 packets=1 bytes=73 [UNREPLIED] src=60.248.42.28 dst=60.248.42.28 sport=53 dport=48230 packets=0 bytes=0 mark=0 use=1
udp      17 4 src=192.168.21.2 dst=202.43.223.170 sport=59351 dport=53 packets=1 bytes=58 [UNREPLIED] src=202.43.223.170 dst=192.168.21.2 sport=53 dport=59351 packets=0 bytes=0 mark=0 use=1
tcp      6 375930 ESTABLISHED src=192.168.5.16 dst=121.10.104.142 sport=1282 dport=80 packets=12 bytes=6899 src=121.10.104.142 dst=192.168.20.2 sport=80 dport=1282 packets=10 bytes=5561 [ASSURED] mark=2 use=1
udp      17 14 src=192.168.20.2 dst=213.199.161.77 sport=26194 dport=53 packets=1 bytes=62 [UNREPLIED] src=213.199.161.77 dst=192.168.20.2 sport=53 dport=26194 packets=0 bytes=0 mark=0 use=1
tcp      6 282391 ESTABLISHED src=192.168.5.6 dst=74.12.122.61 sport=3399 dport=19584 packets=28 bytes=10572 src=74.12.122.61 dst=192.168.21.2 sport=19584 dport=3399 packets=34 bytes=18326 [ASSURED] mark=768 use=1
udp      17 3 src=192.168.5.102 dst=203.64.46.201 sport=49857 dport=6252 packets=2 bytes=310 src=203.64.46.201 dst=192.168.21.2 sport=6252 dport=49857 packets=1 bytes=48 mark=3 use=1
udp      17 28 src=192.168.5.102 dst=82.57.41.6 sport=49857 dport=46762 packets=2 bytes=122 [UNREPLIED] src=82.57.41.6 dst=192.168.21.2 sport=46762 dport=49857 packets=0 bytes=0 mark=0 use=1
tcp      6 306659 ESTABLISHED src=192.168.5.166 dst=58.176.8.226 sport=3932 dport=10354 packets=1227 bytes=323159 src=58.176.8.226 dst=192.168.21.2 sport=10354 dport=3932 packets=1407 bytes=1458382 [ASSURED] mark=0 use=1
udp      17 8 src=192.168.5.103 dst=84.72.91.127 sport=22319 dport=49207 packets=3 bytes=186 [UNREPLIED] src=84.72.91.127 dst=192.168.21.2 sport=49207 dport=22319 packets=0 bytes=0 mark=0 use=1
udp      17 12 src=192.168.5.102 dst=137.132.165.117 sport=49857 dport=4493 packets=3 bytes=441 [UNREPLIED] src=137.132.165.117 dst=192.168.21.2 sport=4493 dport=49857 packets=0 bytes=0 mark=0 use=1
tcp      6 349193 ESTABLISHED src=192.168.5.111 dst=207.46.109.55 sport=1273 dport=1863 packets=1524 bytes=201912 src=207.46.109.55 dst=192.168.21.2 sport=1863 dport=1273 packets=1105 bytes=146893 [ASSURED] mark=0 use=1
udp      17 28 src=192.168.20.2 dst=65.55.238.126 sport=12868 dport=53 packets=1 bytes=67 [UNREPLIED] src=65.55.238.126 dst=192.168.20.2 sport=53 dport=12868 packets=0 bytes=0 mark=0 use=1
tcp      6 311426 ESTABLISHED src=192.168.5.123 dst=140.113.190.193 sport=1339 dport=1318 packets=73 bytes=3266 src=140.113.190.193 dst=192.168.21.2 sport=1318 dport=1339 packets=121 bytes=5828 [ASSURED] mark=3 use=1
udp      17 29 src=192.168.5.103 dst=98.198.96.174 sport=22319 dport=55725 packets=3 bytes=444 [UNREPLIED] src=98.198.96.174 dst=192.168.21.2 sport=55725 dport=22319 packets=0 bytes=0 mark=0 use=1
udp      17 1 src=192.168.20.2 dst=213.199.161.77 sport=2691 dport=53 packets=1 bytes=60 [UNREPLIED] src=213.199.161.77 dst=192.168.20.2 sport=53 dport=2691 packets=0 bytes=0 mark=0 use=1
udp      17 0 src=192.168.21.2 dst=217.12.4.104 sport=63732 dport=53 packets=1 bytes=58 [UNREPLIED] src=217.12.4.104 dst=192.168.21.2 sport=53 dport=63732 packets=0 bytes=0 mark=0 use=1
tcp      6 387133 ESTABLISHED src=192.168.5.16 dst=121.10.104.142 sport=3013 dport=80 packets=50 bytes=8403 src=121.10.104.142 dst=192.168.21.2 sport=80 dport=3013 packets=66 bytes=75984 [ASSURED] mark=3 use=1
udp      17 6 src=60.248.42.28 dst=60.248.42.28 sport=18670 dport=53 packets=1 bytes=72 [UNREPLIED] src=60.248.42.28 dst=60.248.42.28 sport=53 dport=18670 packets=0 bytes=0 mark=0 use=1
udp      17 23 src=192.168.20.2 dst=65.55.238.126 sport=14607 dport=53 packets=1 bytes=60 [UNREPLIED] src=65.55.238.126 dst=192.168.20.2 sport=53 dport=14607 packets=0 bytes=0 mark=0 use=1
udp      17 20 src=60.248.42.28 dst=60.248.42.28 sport=33112 dport=53 packets=1 bytes=73 [UNREPLIED] src=60.248.42.28 dst=60.248.42.28 sport=53 dport=33112 packets=0 bytes=0 mark=0 use=1
udp      17 15 src=192.168.21.2 dst=203.84.197.239 sport=53163 dport=53 packets=1 bytes=58 [UNREPLIED] src=203.84.197.239 dst=192.168.21.2 sport=53 dport=53163 packets=0 bytes=0 mark=0 use=1
udp      17 25 src=192.168.5.102 dst=219.73.30.143 sport=49857 dport=5931 packets=3 bytes=423 [UNREPLIED] src=219.73.30.143 dst=192.168.21.2 sport=5931 dport=49857 packets=0 bytes=0 mark=0 use=1
udp      17 0 src=192.168.5.102 dst=220.132.66.29 sport=49857 dport=40628 packets=3 bytes=186 [UNREPLIED] src=220.132.66.29 dst=192.168.21.2 sport=40628 dport=49857 packets=0 bytes=0 mark=0 use=1
udp      17 28 src=192.168.5.103 dst=24.67.55.199 sport=22319 dport=32538 packets=2 bytes=116 [UNREPLIED] src=24.67.55.199 dst=192.168.21.2 sport=32538 dport=22319 packets=0 bytes=0 mark=0 use=1
udp      17 6 src=192.168.20.2 dst=213.199.161.77 sport=10761 dport=53 packets=1 bytes=62 [UNREPLIED] src=213.199.161.77 dst=192.168.20.2 sport=53 dport=10761 packets=0 bytes=0 mark=0 use=1
udp      17 2 src=192.168.21.2 dst=65.57.86.48 sport=58499 dport=53 packets=1 bytes=65 [UNREPLIED] src=65.57.86.48 dst=192.168.21.2 sport=53 dport=58499 packets=0 bytes=0 mark=0 use=1
tcp      6 379789 ESTABLISHED src=192.168.5.16 dst=59.34.216.125 sport=1686 dport=80 packets=15 bytes=12336 src=59.34.216.125 dst=192.168.20.2 sport=80 dport=1686 packets=7 bytes=6096 [ASSURED] mark=2 use=1
tcp      6 359439 ESTABLISHED src=192.168.5.106 dst=61.229.132.174 sport=1091 dport=5512 packets=29 bytes=6937 src=61.229.132.174 dst=60.248.42.28 sport=5512 dport=1091 packets=34 bytes=3180 [ASSURED] mark=0 use=1
tcp      6 374862 ESTABLISHED src=192.168.5.16 dst=60.190.114.95 sport=1061 dport=80 packets=3 bytes=4476 [UNREPLIED] src=60.190.114.95 dst=192.168.20.2 sport=80 dport=1061 packets=0 bytes=0 mark=0 use=1
udp      17 11 src=60.248.42.28 dst=60.248.42.28 sport=26641 dport=53 packets=1 bytes=72 [UNREPLIED] src=60.248.42.28 dst=60.248.42.28 sport=53 dport=26641 packets=0 bytes=0 mark=0 use=1
tcp      6 13 TIME_WAIT src=192.168.5.102 dst=60.248.42.28 sport=2473 dport=80 packets=5 bytes=694 src=60.248.42.28 dst=192.168.5.102 sport=80 dport=2473 packets=4 bytes=522 [ASSURED] mark=0 use=1
udp      17 6 src=192.168.21.2 dst=68.142.196.63 sport=10858 dport=53 packets=1 bytes=58 [UNREPLIED] src=68.142.196.63 dst=192.168.21.2 sport=53 dport=10858 packets=0 bytes=0 mark=0 use=1
tcp      6 344214 ESTABLISHED src=192.168.5.106 dst=219.82.17.211 sport=1711 dport=36473 packets=17 bytes=885 src=219.82.17.211 dst=192.168.21.2 sport=36473 dport=1711 packets=28 bytes=1578 [ASSURED] mark=0 use=1
udp      17 10 src=192.168.5.102 dst=82.59.199.53 sport=49857 dport=25874 packets=3 bytes=183 [UNREPLIED] src=82.59.199.53 dst=192.168.21.2 sport=25874 dport=49857 packets=0 bytes=0 mark=0 use=1
tcp      6 366118 ESTABLISHED src=192.168.5.16 dst=61.216.181.135 sport=4617 dport=15539 packets=322 bytes=33746 src=61.216.181.135 dst=60.248.42.28 sport=15539 dport=4617 packets=349 bytes=34718 [ASSURED] mark=0 use=1
udp      17 4 src=192.168.20.2 dst=195.47.75.55 sport=19098 dport=53 packets=1 bytes=67 [UNREPLIED] src=195.47.75.55 dst=192.168.20.2 sport=53 dport=19098 packets=0 bytes=0 mark=0 use=1
udp      17 15 src=192.168.5.145 dst=210.209.132.120 sport=40944 dport=1089 packets=3 bytes=333 [UNREPLIED] src=210.209.132.120 dst=192.168.21.2 sport=1089 dport=40944 packets=0 bytes=0 mark=0 use=1
tcp      6 381438 ESTABLISHED src=192.168.5.16 dst=121.10.104.142 sport=2226 dport=80 packets=11 bytes=6843 src=121.10.104.142 dst=60.248.42.28 sport=80 dport=2226 packets=9 bytes=4069 [ASSURED] mark=1 use=1
udp      17 10 src=192.168.5.112 dst=69.173.187.170 sport=1323 dport=36243 packets=3 bytes=384 [UNREPLIED] src=69.173.187.170 dst=192.168.21.2 sport=36243 dport=1323 packets=0 bytes=0 mark=0 use=1
udp      17 8 src=192.168.5.103 dst=68.217.4.193 sport=22319 dport=26962 packets=3 bytes=186 [UNREPLIED] src=68.217.4.193 dst=192.168.21.2 sport=26962 dport=22319 packets=0 bytes=0 mark=3 use=1
tcp      6 344204 ESTABLISHED src=192.168.5.106 dst=203.218.143.254 sport=1709 dport=11532 packets=49 bytes=6689 src=203.218.143.254 dst=192.168.21.2 sport=11532 dport=1709 packets=58 bytes=7602 [ASSURED] mark=0 use=1
udp      17 28 src=192.168.21.2 dst=207.68.160.190 sport=44717 dport=53 packets=1 bytes=60 [UNREPLIED] src=207.68.160.190 dst=192.168.21.2 sport=53 dport=44717 packets=0 bytes=0 mark=0 use=1
udp      17 5 src=192.168.20.2 dst=207.46.66.126 sport=48204 dport=53 packets=1 bytes=60 [UNREPLIED] src=207.46.66.126 dst=192.168.20.2 sport=53 dport=48204 packets=0 bytes=0 mark=0 use=1
udp      17 3 src=192.168.5.102 dst=218.172.211.18 sport=49857 dport=5237 packets=2 bytes=310 src=218.172.211.18 dst=192.168.21.2 sport=5237 dport=49857 packets=1 bytes=48 mark=3 use=1
tcp      6 387114 ESTABLISHED src=192.168.5.6 dst=203.67.141.240 sport=1633 dport=19035 packets=9 bytes=694 src=203.67.141.240 dst=192.168.21.2 sport=19035 dport=1633 packets=14 bytes=1620 [ASSURED] mark=3 use=1
udp      17 18 src=192.168.21.2 dst=66.218.71.63 sport=27577 dport=53 packets=1 bytes=58 [UNREPLIED] src=66.218.71.63 dst=192.168.21.2 sport=53 dport=27577 packets=0 bytes=0 mark=0 use=1
tcp      6 392032 ESTABLISHED src=192.168.5.6 dst=218.169.111.127 sport=1729 dport=443 packets=63 bytes=15615 src=218.169.111.127 dst=192.168.21.2 sport=443 dport=1729 packets=71 bytes=8609 [ASSURED] mark=3 use=1
udp      17 4 src=192.168.5.103 dst=86.164.10.197 sport=22319 dport=31232 packets=5 bytes=307 src=86.164.10.197 dst=192.168.21.2 sport=31232 dport=22319 packets=1 bytes=46 mark=3 use=1
tcp      6 380695 ESTABLISHED src=192.168.5.16 dst=59.34.216.125 sport=1849 dport=80 packets=15 bytes=12368 src=59.34.216.125 dst=60.248.42.28 sport=80 dport=1849 packets=7 bytes=6128 [ASSURED] mark=1 use=1
udp      17 29 src=192.168.5.102 dst=138.232.171.26 sport=49857 dport=45227 packets=1 bytes=59 [UNREPLIED] src=138.232.171.26 dst=192.168.21.2 sport=45227 dport=49857 packets=0 bytes=0 mark=0 use=1
udp      17 28 src=192.168.21.2 dst=68.142.196.63 sport=34379 dport=53 packets=1 bytes=58 [UNREPLIED] src=68.142.196.63 dst=192.168.21.2 sport=53 dport=34379 packets=0 bytes=0 mark=0 use=1
tcp      6 6 SYN_SENT src=192.168.5.6 dst=216.252.124.207 sport=4442 dport=80 packets=3 bytes=144 [UNREPLIED] src=216.252.124.207 dst=192.168.21.2 sport=80 dport=4442 packets=0 bytes=0 mark=0 use=1
tcp      6 381440 ESTABLISHED src=192.168.5.16 dst=121.10.104.142 sport=2228 dport=80 packets=11 bytes=6843 src=121.10.104.142 dst=60.248.42.28 sport=80 dport=2228 packets=9 bytes=4069 [ASSURED] mark=1 use=1
tcp      6 385727 ESTABLISHED src=192.168.5.16 dst=59.34.216.125 sport=2811 dport=80 packets=15 bytes=12328 src=59.34.216.125 dst=192.168.21.2 sport=80 dport=2811 packets=7 bytes=6096 [ASSURED] mark=3 use=1
udp      17 0 src=192.168.20.2 dst=207.46.66.126 sport=1955 dport=53 packets=1 bytes=60 [UNREPLIED] src=207.46.66.126 dst=192.168.20.2 sport=53 dport=1955 packets=0 bytes=0 mark=0 use=1
udp      17 17 src=192.168.5.102 dst=170.140.242.172 sport=49857 dport=55068 packets=3 bytes=186 [UNREPLIED] src=170.140.242.172 dst=192.168.21.2 sport=55068 dport=49857 packets=0 bytes=0 mark=0 use=1
udp      17 29 src=192.168.21.2 dst=66.218.71.63 sport=17823 dport=53 packets=1 bytes=58 [UNREPLIED] src=66.218.71.63 dst=192.168.21.2 sport=53 dport=17823 packets=0 bytes=0 mark=0 use=1
udp      17 19 src=192.168.21.2 dst=192.168.21.1 sport=41420 dport=53 packets=1 bytes=80 [UNREPLIED] src=192.168.21.1 dst=192.168.21.2 sport=53 dport=41420 packets=0 bytes=0 mark=0 use=1
udp      17 9 src=192.168.21.2 dst=68.142.196.63 sport=12320 dport=53 packets=1 bytes=58 [UNREPLIED] src=68.142.196.63 dst=192.168.21.2 sport=53 dport=12320 packets=0 bytes=0 mark=0 use=1
udp      17 2 src=192.168.20.2 dst=65.54.240.126 sport=19160 dport=53 packets=1 bytes=60 [UNREPLIED] src=65.54.240.126 dst=192.168.20.2 sport=53 dport=19160 packets=0 bytes=0 mark=0 use=1
udp      17 10 src=192.168.5.102 dst=74.71.216.237 sport=49857 dport=6425 packets=3 bytes=180 [UNREPLIED] src=74.71.216.237 dst=192.168.21.2 sport=6425 dport=49857 packets=0 bytes=0 mark=0 use=1
tcp      6 358060 ESTABLISHED src=192.168.5.123 dst=118.170.103.228 sport=2872 dport=1664 packets=117 bytes=5631 src=118.170.103.228 dst=192.168.21.2 sport=1664 dport=2872 packets=118 bytes=5649 [ASSURED] mark=3 use=1
udp      17 4 src=192.168.21.2 dst=68.142.196.63 sport=35595 dport=53 packets=1 bytes=58 [UNREPLIED] src=68.142.196.63 dst=192.168.21.2 sport=53 dport=35595 packets=0 bytes=0 mark=0 use=1
tcp      6 363259 ESTABLISHED src=192.168.5.16 dst=59.34.216.125 sport=4939 dport=80 packets=15 bytes=12368 src=59.34.216.125 dst=60.248.42.28 sport=80 dport=4939 packets=7 bytes=6128 [ASSURED] mark=0 use=1
udp      17 27 src=192.168.21.2 dst=168.95.1.1 sport=54901 dport=53 packets=2 bytes=144 [UNREPLIED] src=168.95.1.1 dst=192.168.21.2 sport=53 dport=54901 packets=0 bytes=0 mark=0 use=1
udp      17 10 src=192.168.21.2 dst=68.142.196.63 sport=3731 dport=53 packets=1 bytes=58 [UNREPLIED] src=68.142.196.63 dst=192.168.21.2 sport=53 dport=3731 packets=0 bytes=0 mark=0 use=1
udp      17 124 src=192.168.5.112 dst=125.225.133.184 sport=1323 dport=51905 packets=2 bytes=513 src=125.225.133.184 dst=192.168.21.2 sport=51905 dport=1323 packets=2 bytes=100 [ASSURED] mark=3 use=1
udp      17 4 src=192.168.5.103 dst=83.25.39.20 sport=22319 dport=41747 packets=2 bytes=128 src=83.25.39.20 dst=192.168.21.2 sport=41747 dport=22319 packets=1 bytes=48 mark=3 use=1
udp      17 11 src=192.168.21.2 dst=217.12.4.104 sport=11692 dport=53 packets=1 bytes=65 [UNREPLIED] src=217.12.4.104 dst=192.168.21.2 sport=53 dport=11692 packets=0 bytes=0 mark=0 use=1
udp      17 4 src=60.248.42.28 dst=60.248.42.28 sport=62992 dport=53 packets=1 bytes=72 [UNREPLIED] src=60.248.42.28 dst=60.248.42.28 sport=53 dport=62992 packets=0 bytes=0 mark=0 use=1
udp      17 6 src=192.168.21.2 dst=207.68.160.190 sport=8782 dport=53 packets=1 bytes=60 [UNREPLIED] src=207.68.160.190 dst=192.168.21.2 sport=53 dport=8782 packets=0 bytes=0 mark=0 use=1
tcp      6 380364 ESTABLISHED src=192.168.5.204 dst=207.46.107.98 sport=4033 dport=1863 packets=3393 bytes=154967 src=207.46.107.98 dst=60.248.42.28 sport=1863 dport=4033 packets=3357 bytes=756786 [ASSURED] mark=1 use=1
udp      17 14 src=192.168.20.2 dst=213.199.161.77 sport=6709 dport=53 packets=1 bytes=60 [UNREPLIED] src=213.199.161.77 dst=192.168.20.2 sport=53 dport=6709 packets=0 bytes=0 mark=0 use=1
tcp      6 431461 ESTABLISHED src=192.168.5.6 dst=58.99.1.31 sport=1116 dport=57451 packets=14 bytes=1564 src=58.99.1.31 dst=192.168.21.2 sport=57451 dport=1116 packets=18 bytes=1462 [ASSURED] mark=3 use=1
udp      17 10 src=60.248.42.28 dst=60.248.42.28 sport=21205 dport=53 packets=1 bytes=72 [UNREPLIED] src=60.248.42.28 dst=60.248.42.28 sport=53 dport=21205 packets=0 bytes=0 mark=0 use=1
udp      17 5 src=192.168.5.102 dst=133.27.36.63 sport=49857 dport=65013 packets=3 bytes=456 [UNREPLIED] src=133.27.36.63 dst=192.168.21.2 sport=65013 dport=49857 packets=0 bytes=0 mark=0 use=1
udp      17 8 src=192.168.21.2 dst=168.95.192.1 sport=49473 dport=53 packets=1 bytes=85 [UNREPLIED] src=168.95.192.1 dst=192.168.21.2 sport=53 dport=49473 packets=0 bytes=0 mark=0 use=1
udp      17 0 src=192.168.20.2 dst=207.46.66.126 sport=25063 dport=53 packets=1 bytes=60 [UNREPLIED] src=207.46.66.126 dst=192.168.20.2 sport=53 dport=25063 packets=0 bytes=0 mark=0 use=1
tcp      6 340221 ESTABLISHED src=192.168.5.112 dst=86.150.137.8 sport=1067 dport=20113 packets=32 bytes=1797 src=86.150.137.8 dst=192.168.21.2 sport=20113 dport=1067 packets=38 bytes=2116 [ASSURED] mark=3 use=1
udp      17 29 src=192.168.21.2 dst=207.68.160.190 sport=3496 dport=53 packets=1 bytes=60 [UNREPLIED] src=207.68.160.190 dst=192.168.21.2 sport=53 dport=3496 packets=0 bytes=0 mark=0 use=1
tcp      6 8 TIME_WAIT src=118.169.67.138 dst=60.248.42.28 sport=1569 dport=443 packets=10 bytes=4506 src=60.248.42.28 dst=118.169.67.138 sport=443 dport=1569 packets=9 bytes=1324 [ASSURED] mark=1 use=1
udp      17 10 src=192.168.21.2 dst=168.95.1.1 sport=51899 dport=53 packets=1 bytes=80 [UNREPLIED] src=168.95.1.1 dst=192.168.21.2 sport=53 dport=51899 packets=0 bytes=0 mark=0 use=1
udp      17 22 src=192.168.20.2 dst=193.85.2.117 sport=28054 dport=53 packets=1 bytes=67 [UNREPLIED] src=193.85.2.117 dst=192.168.20.2 sport=53 dport=28054 packets=0 bytes=0 mark=0 use=1
udp      17 29 src=192.168.21.2 dst=207.68.160.190 sport=4916 dport=53 packets=1 bytes=60 [UNREPLIED] src=207.68.160.190 dst=192.168.21.2 sport=53 dport=4916 packets=0 bytes=0 mark=0 use=1
tcp      6 349189 ESTABLISHED src=192.168.5.116 dst=133.27.36.63 sport=1082 dport=65013 packets=2831 bytes=369313 src=133.27.36.63 dst=192.168.21.2 sport=65013 dport=1082 packets=2870 bytes=343089 [ASSURED] mark=3 use=1
tcp      6 359463 ESTABLISHED src=192.168.5.106 dst=202.132.176.96 sport=1096 dport=59798 packets=7 bytes=366 src=202.132.176.96 dst=60.248.42.28 sport=59798 dport=1096 packets=13 bytes=855 [ASSURED] mark=0 use=1
tcp      6 381437 ESTABLISHED src=192.168.5.16 dst=121.10.104.142 sport=2222 dport=80 packets=15 bytes=7039 src=121.10.104.142 dst=60.248.42.28 sport=80 dport=2222 packets=14 bytes=10854 [ASSURED] mark=1 use=1
udp      17 18 src=192.168.20.2 dst=65.54.240.126 sport=54462 dport=53 packets=1 bytes=60 [UNREPLIED] src=65.54.240.126 dst=192.168.20.2 sport=53 dport=54462 packets=0 bytes=0 mark=0 use=1
tcp      6 307080 ESTABLISHED src=192.168.5.173 dst=218.165.33.197 sport=2449 dport=46294 packets=1781 bytes=323824 src=218.165.33.197 dst=192.168.21.2 sport=46294 dport=2449 packets=1917 bytes=176986 [ASSURED] mark=768 use=1
udp      17 0 src=192.168.21.2 dst=203.84.197.239 sport=12703 dport=53 packets=1 bytes=58 [UNREPLIED] src=203.84.197.239 dst=192.168.21.2 sport=53 dport=12703 packets=0 bytes=0 mark=0 use=1
udp      17 1 src=192.168.20.2 dst=202.165.104.22 sport=36039 dport=53 packets=1 bytes=75 [UNREPLIED] src=202.165.104.22 dst=192.168.20.2 sport=53 dport=36039 packets=0 bytes=0 mark=0 use=1
udp      17 0 src=192.168.5.102 dst=190.154.13.224 sport=49857 dport=60520 packets=3 bytes=180 [UNREPLIED] src=190.154.13.224 dst=192.168.21.2 sport=60520 dport=49857 packets=0 bytes=0 mark=0 use=1
udp      17 29 src=192.168.5.102 dst=77.126.201.138 sport=49857 dport=52396 packets=1 bytes=60 [UNREPLIED] src=77.126.201.138 dst=192.168.21.2 sport=52396 dport=49857 packets=0 bytes=0 mark=0 use=1
udp      17 23 src=60.248.42.28 dst=60.248.42.28 sport=33784 dport=53 packets=1 bytes=73 [UNREPLIED] src=60.248.42.28 dst=60.248.42.28 sport=53 dport=33784 packets=0 bytes=0 mark=0 use=1
udp      17 0 src=192.168.5.102 dst=81.165.208.219 sport=49857 dport=1221 packets=3 bytes=186 [UNREPLIED] src=81.165.208.219 dst=192.168.21.2 sport=1221 dport=49857 packets=0 bytes=0 mark=0 use=1
tcp      6 375930 ESTABLISHED src=192.168.5.16 dst=121.10.104.142 sport=1277 dport=80 packets=11 bytes=6835 src=121.10.104.142 dst=192.168.20.2 sport=80 dport=1277 packets=9 bytes=4069 [ASSURED] mark=2 use=1
udp      17 10 src=192.168.20.2 dst=202.165.104.22 sport=21912 dport=53 packets=1 bytes=58 [UNREPLIED] src=202.165.104.22 dst=192.168.20.2 sport=53 dport=21912 packets=0 bytes=0 mark=0 use=1
udp      17 4 src=192.168.21.2 dst=202.43.223.170 sport=43809 dport=53 packets=1 bytes=58 [UNREPLIED] src=202.43.223.170 dst=192.168.21.2 sport=53 dport=43809 packets=0 bytes=0 mark=0 use=1
tcp      6 378209 ESTABLISHED src=192.168.5.155 dst=220.128.116.55 sport=2175 dport=63558 packets=181 bytes=47186 src=220.128.116.55 dst=192.168.20.2 sport=63558 dport=2175 packets=189 bytes=37505 [ASSURED] mark=2 use=1
udp      17 4 src=192.168.5.110 dst=59.125.100.209 sport=64882 dport=37991 packets=3 bytes=408 src=59.125.100.209 dst=192.168.21.2 sport=37991 dport=64882 packets=1 bytes=48 mark=3 use=1
udp      17 15 src=192.168.20.2 dst=195.47.75.55 sport=37201 dport=53 packets=1 bytes=67 [UNREPLIED] src=195.47.75.55 dst=192.168.20.2 sport=53 dport=37201 packets=0 bytes=0 mark=0 use=1
udp      17 2 src=192.168.20.2 dst=65.54.240.126 sport=12866 dport=53 packets=1 bytes=60 [UNREPLIED] src=65.54.240.126 dst=192.168.20.2 sport=53 dport=12866 packets=0 bytes=0 mark=0 use=1
udp      17 6 src=192.168.5.102 dst=67.86.17.225 sport=49857 dport=41539 packets=2 bytes=120 src=67.86.17.225 dst=192.168.21.2 sport=41539 dport=49857 packets=1 bytes=416 mark=3 use=1
tcp      6 431797 ESTABLISHED src=192.168.5.166 dst=60.248.42.28 sport=1131 dport=25 packets=2 bytes=88 src=60.248.42.28 dst=192.168.5.166 sport=25 dport=1131 packets=1 bytes=48 [ASSURED] mark=0 use=1
udp      17 20 src=192.168.20.2 dst=202.165.104.22 sport=58143 dport=53 packets=1 bytes=58 [UNREPLIED] src=202.165.104.22 dst=192.168.20.2 sport=53 dport=58143 packets=0 bytes=0 mark=0 use=1
udp      17 17 src=192.168.21.2 dst=75.125.29.226 sport=3532 dport=53 packets=1 bytes=67 [UNREPLIED] src=75.125.29.226 dst=192.168.21.2 sport=53 dport=3532 packets=0 bytes=0 mark=0 use=1
udp      17 16 src=192.168.5.103 dst=78.154.5.232 sport=22319 dport=50195 packets=1 bytes=66 src=78.154.5.232 dst=192.168.21.2 sport=50195 dport=22319 packets=1 bytes=741 mark=3 use=1
udp      17 22 src=192.168.5.103 dst=71.207.248.54 sport=22319 dport=11242 packets=3 bytes=405 [UNREPLIED] src=71.207.248.54 dst=192.168.21.2 sport=11242 dport=22319 packets=0 bytes=0 mark=0 use=1
udp      17 20 src=192.168.21.2 dst=168.95.192.1 sport=49525 dport=53 packets=1 bytes=85 [UNREPLIED] src=168.95.192.1 dst=192.168.21.2 sport=53 dport=49525 packets=0 bytes=0 mark=0 use=1
udp      17 0 src=192.168.21.2 dst=203.84.197.239 sport=11794 dport=53 packets=1 bytes=65 [UNREPLIED] src=203.84.197.239 dst=192.168.21.2 sport=53 dport=11794 packets=0 bytes=0 mark=0 use=1
tcp      6 316469 ESTABLISHED src=192.168.5.170 dst=218.254.191.17 sport=3916 dport=7248 packets=3 bytes=4476 [UNREPLIED] src=218.254.191.17 dst=192.168.21.2 sport=7248 dport=3916 packets=0 bytes=0 mark=0 use=1
udp      17 10 src=192.168.5.103 dst=218.250.123.41 sport=22319 dport=6318 packets=3 bytes=411 src=218.250.123.41 dst=192.168.21.2 sport=6318 dport=22319 packets=1 bytes=48 mark=3 use=1
udp      17 12 src=192.168.21.2 dst=75.125.29.226 sport=56814 dport=53 packets=1 bytes=67 [UNREPLIED] src=75.125.29.226 dst=192.168.21.2 sport=53 dport=56814 packets=0 bytes=0 mark=0 use=1
udp      17 21 src=192.168.5.103 dst=24.212.27.108 sport=22319 dport=42484 packets=3 bytes=186 [UNREPLIED] src=24.212.27.108 dst=192.168.21.2 sport=42484 dport=22319 packets=0 bytes=0 mark=0 use=1
udp      17 4 src=192.168.5.102 dst=24.63.248.217 sport=49857 dport=8711 packets=3 bytes=180 src=24.63.248.217 dst=192.168.21.2 sport=8711 dport=49857 packets=1 bytes=459 mark=3 use=1
udp      17 24 src=60.248.42.28 dst=60.248.42.28 sport=16171 dport=53 packets=1 bytes=73 [UNREPLIED] src=60.248.42.28 dst=60.248.42.28 sport=53 dport=16171 packets=0 bytes=0 mark=0 use=1
udp      17 6 src=192.168.20.2 dst=195.47.75.55 sport=63255 dport=53 packets=1 bytes=67 [UNREPLIED] src=195.47.75.55 dst=192.168.20.2 sport=53 dport=63255 packets=0 bytes=0 mark=0 use=1
udp      17 28 src=192.168.21.2 dst=168.95.1.1 sport=16405 dport=53 packets=1 bytes=78 [UNREPLIED] src=168.95.1.1 dst=192.168.21.2 sport=53 dport=16405 packets=0 bytes=0 mark=0 use=1
tcp      6 371919 ESTABLISHED src=192.168.5.131 dst=140.116.85.186 sport=1237 dport=42439 packets=3222 bytes=322955 src=140.116.85.186 dst=60.248.42.28 sport=42439 dport=1237 packets=2932 bytes=316118 [ASSURED] mark=1 use=1
udp      17 5 src=192.168.21.2 dst=68.142.255.16 sport=20587 dport=53 packets=1 bytes=58 [UNREPLIED] src=68.142.255.16 dst=192.168.21.2 sport=53 dport=20587 packets=0 bytes=0 mark=0 use=1
udp      17 11 src=192.168.20.2 dst=65.55.238.126 sport=4582 dport=53 packets=1 bytes=60 [UNREPLIED] src=65.55.238.126 dst=192.168.20.2 sport=53 dport=4582 packets=0 bytes=0 mark=0 use=1
udp      17 19 src=192.168.21.2 dst=75.125.29.226 sport=43160 dport=53 packets=1 bytes=67 [UNREPLIED] src=75.125.29.226 dst=192.168.21.2 sport=53 dport=43160 packets=0 bytes=0 mark=0 use=1
udp      17 37 src=192.168.5.205 dst=192.168.5.1 sport=1028 dport=53 packets=12 bytes=786 src=192.168.5.1 dst=192.168.5.205 sport=53 dport=1028 packets=7 bytes=768 [ASSURED] mark=0 use=1
udp      17 20 src=192.168.21.2 dst=68.142.255.16 sport=41917 dport=53 packets=1 bytes=58 [UNREPLIED] src=68.142.255.16 dst=192.168.21.2 sport=53 dport=41917 packets=0 bytes=0 mark=0 use=1
tcp      6 374719 ESTABLISHED src=192.168.5.16 dst=121.10.107.70 sport=1093 dport=80 packets=53 bytes=6972 src=121.10.107.70 dst=192.168.20.2 sport=80 dport=1093 packets=81 bytes=92254 [ASSURED] mark=2 use=1
udp      17 10 src=192.168.20.2 dst=195.47.75.55 sport=64695 dport=53 packets=1 bytes=67 [UNREPLIED] src=195.47.75.55 dst=192.168.20.2 sport=53 dport=64695 packets=0 bytes=0 mark=0 use=1
udp      17 25 src=192.168.21.2 dst=207.68.160.190 sport=43431 dport=53 packets=1 bytes=60 [UNREPLIED] src=207.68.160.190 dst=192.168.21.2 sport=53 dport=43431 packets=0 bytes=0 mark=0 use=1
tcp      6 386322 ESTABLISHED src=192.168.5.16 dst=60.190.114.95 sport=2883 dport=80 packets=3 bytes=4476 [UNREPLIED] src=60.190.114.95 dst=192.168.21.2 sport=80 dport=2883 packets=0 bytes=0 mark=0 use=1
udp      17 2 src=192.168.21.2 dst=207.68.160.190 sport=2546 dport=53 packets=1 bytes=60 [UNREPLIED] src=207.68.160.190 dst=192.168.21.2 sport=53 dport=2546 packets=0 bytes=0 mark=0 use=1
tcp      6 77 TIME_WAIT src=192.168.5.102 dst=60.248.42.28 sport=2476 dport=80 packets=5 bytes=858 src=60.248.42.28 dst=192.168.5.102 sport=80 dport=2476 packets=5 bytes=397 [ASSURED] mark=0 use=1
udp      17 0 src=192.168.20.2 dst=207.46.66.126 sport=59656 dport=53 packets=1 bytes=60 [UNREPLIED] src=207.46.66.126 dst=192.168.20.2 sport=53 dport=59656 packets=0 bytes=0 mark=0 use=1
tcp      6 375930 ESTABLISHED src=192.168.5.16 dst=121.10.104.142 sport=1283 dport=80 packets=9 bytes=6755 src=121.10.104.142 dst=192.168.20.2 sport=80 dport=1283 packets=6 bytes=284 [ASSURED] mark=2 use=1
udp      17 4 src=192.168.20.2 dst=65.54.240.126 sport=6981 dport=53 packets=1 bytes=60 [UNREPLIED] src=65.54.240.126 dst=192.168.20.2 sport=53 dport=6981 packets=0 bytes=0 mark=0 use=1
udp      17 17 src=192.168.21.2 dst=192.168.21.1 sport=3517 dport=53 packets=1 bytes=85 [UNREPLIED] src=192.168.21.1 dst=192.168.21.2 sport=53 dport=3517 packets=0 bytes=0 mark=0 use=1
udp      17 4 src=192.168.21.2 dst=66.218.71.63 sport=7383 dport=53 packets=1 bytes=58 [UNREPLIED] src=66.218.71.63 dst=192.168.21.2 sport=53 dport=7383 packets=0 bytes=0 mark=0 use=1
udp      17 16 src=192.168.21.2 dst=66.218.71.63 sport=23303 dport=53 packets=1 bytes=58 [UNREPLIED] src=66.218.71.63 dst=192.168.21.2 sport=53 dport=23303 packets=0 bytes=0 mark=0 use=1
tcp      6 359439 ESTABLISHED src=192.168.5.106 dst=61.62.242.170 sport=1102 dport=33881 packets=24 bytes=1145 src=61.62.242.170 dst=60.248.42.28 sport=33881 dport=1102 packets=31 bytes=1796 [ASSURED] mark=0 use=1
udp      17 24 src=192.168.21.2 dst=207.68.160.190 sport=33907 dport=53 packets=1 bytes=60 [UNREPLIED] src=207.68.160.190 dst=192.168.21.2 sport=53 dport=33907 packets=0 bytes=0 mark=0 use=1
tcp      6 374717 ESTABLISHED src=192.168.5.16 dst=121.10.107.70 sport=1096 dport=80 packets=46 bytes=6496 src=121.10.107.70 dst=192.168.20.2 sport=80 dport=1096 packets=64 bytes=70288 [ASSURED] mark=2 use=1
tcp      6 349235 ESTABLISHED src=192.168.5.123 dst=207.46.107.35 sport=1428 dport=1863 packets=2152 bytes=96684 src=207.46.107.35 dst=192.168.21.2 sport=1863 dport=1428 packets=2270 bytes=550637 [ASSURED] mark=3 use=1
tcp      6 34 SYN_SENT src=192.168.5.140 dst=207.68.179.219 sport=1188 dport=80 packets=3 bytes=144 [UNREPLIED] src=207.68.179.219 dst=192.168.21.2 sport=80 dport=1188 packets=0 bytes=0 mark=0 use=1
udp      17 20 src=192.168.20.2 dst=207.46.66.126 sport=9652 dport=53 packets=1 bytes=60 [UNREPLIED] src=207.46.66.126 dst=192.168.20.2 sport=53 dport=9652 packets=0 bytes=0 mark=0 use=1
tcp      6 70 TIME_WAIT src=192.168.5.145 dst=60.248.42.28 sport=1264 dport=110 packets=8 bytes=364 src=60.248.42.28 dst=192.168.5.145 sport=110 dport=1264 packets=9 bytes=445 [ASSURED] mark=0 use=1
udp      17 29 src=192.168.20.2 dst=193.85.2.117 sport=10077 dport=53 packets=1 bytes=67 [UNREPLIED] src=193.85.2.117 dst=192.168.20.2 sport=53 dport=10077 packets=0 bytes=0 mark=0 use=1
udp      17 26 src=192.168.20.2 dst=195.47.75.55 sport=32552 dport=53 packets=1 bytes=67 [UNREPLIED] src=195.47.75.55 dst=192.168.20.2 sport=53 dport=32552 packets=0 bytes=0 mark=0 use=1
udp      17 3 src=192.168.20.2 dst=65.54.240.126 sport=41279 dport=53 packets=1 bytes=60 [UNREPLIED] src=65.54.240.126 dst=192.168.20.2 sport=53 dport=41279 packets=0 bytes=0 mark=0 use=1
udp      17 15 src=192.168.21.2 dst=68.142.196.63 sport=65164 dport=53 packets=1 bytes=58 [UNREPLIED] src=68.142.196.63 dst=192.168.21.2 sport=53 dport=65164 packets=0 bytes=0 mark=0 use=1
udp      17 21 src=192.168.21.2 dst=75.125.29.226 sport=31727 dport=53 packets=1 bytes=67 [UNREPLIED] src=75.125.29.226 dst=192.168.21.2 sport=53 dport=31727 packets=0 bytes=0 mark=0 use=1
tcp      6 359457 ESTABLISHED src=192.168.5.106 dst=59.124.31.127 sport=1098 dport=5520 packets=7 bytes=351 src=59.124.31.127 dst=60.248.42.28 sport=5520 dport=1098 packets=13 bytes=839 [ASSURED] mark=0 use=1
udp      17 22 src=192.168.21.2 dst=68.142.255.16 sport=19992 dport=53 packets=1 bytes=58 [UNREPLIED] src=68.142.255.16 dst=192.168.21.2 sport=53 dport=19992 packets=0 bytes=0 mark=0 use=1
udp      17 4 src=192.168.21.2 dst=66.218.71.63 sport=14998 dport=53 packets=1 bytes=58 [UNREPLIED] src=66.218.71.63 dst=192.168.21.2 sport=53 dport=14998 packets=0 bytes=0 mark=0 use=1
tcp      6 386452 ESTABLISHED src=192.168.5.16 dst=60.190.114.95 sport=2949 dport=80 packets=96 bytes=15468 src=60.190.114.95 dst=192.168.21.2 sport=80 dport=2949 packets=150 bytes=87178 [ASSURED] mark=3 use=1
udp      17 22 src=192.168.20.2 dst=202.165.104.22 sport=1271 dport=53 packets=1 bytes=65 [UNREPLIED] src=202.165.104.22 dst=192.168.20.2 sport=53 dport=1271 packets=0 bytes=0 mark=0 use=1
udp      17 17 src=192.168.5.102 dst=80.6.64.10 sport=49857 dport=58618 packets=3 bytes=183 [UNREPLIED] src=80.6.64.10 dst=192.168.21.2 sport=58618 dport=49857 packets=0 bytes=0 mark=0 use=1
tcp      6 339945 ESTABLISHED src=192.168.5.106 dst=163.16.140.211 sport=1129 dport=443 packets=14 bytes=769 src=163.16.140.211 dst=192.168.21.2 sport=443 dport=1129 packets=23 bytes=1300 [ASSURED] mark=3 use=1
tcp      6 38 SYN_SENT src=192.168.5.166 dst=202.43.197.140 sport=1143 dport=80 packets=3 bytes=144 [UNREPLIED] src=202.43.197.140 dst=192.168.21.2 sport=80 dport=1143 packets=0 bytes=0 mark=0 use=1
udp      17 16 src=192.168.20.2 dst=65.54.240.126 sport=30587 dport=53 packets=1 bytes=60 [UNREPLIED] src=65.54.240.126 dst=192.168.20.2 sport=53 dport=30587 packets=0 bytes=0 mark=0 use=1
udp      17 23 src=192.168.20.2 dst=195.47.75.55 sport=25680 dport=53 packets=1 bytes=67 [UNREPLIED] src=195.47.75.55 dst=192.168.20.2 sport=53 dport=25680 packets=0 bytes=0 mark=0 use=1
udp      17 28 src=192.168.21.2 dst=168.95.1.1 sport=10714 dport=53 packets=1 bytes=80 [UNREPLIED] src=168.95.1.1 dst=192.168.21.2 sport=53 dport=10714 packets=0 bytes=0 mark=0 use=1
tcp      6 349208 ESTABLISHED src=192.168.5.6 dst=220.132.233.128 sport=1236 dport=32609 packets=3 bytes=2130 [UNREPLIED] src=220.132.233.128 dst=192.168.21.2 sport=32609 dport=1058 packets=0 bytes=0 mark=0 use=1
udp      17 25 src=192.168.21.2 dst=168.95.192.1 sport=22402 dport=53 packets=1 bytes=74 [UNREPLIED] src=168.95.192.1 dst=192.168.21.2 sport=53 dport=22402 packets=0 bytes=0 mark=0 use=1
udp      17 9 src=192.168.20.2 dst=195.47.75.55 sport=26034 dport=53 packets=1 bytes=67 [UNREPLIED] src=195.47.75.55 dst=192.168.20.2 sport=53 dport=26034 packets=0 bytes=0 mark=0 use=1
udp      17 41 src=192.168.5.205 dst=192.168.5.1 sport=1219 dport=53 packets=7 bytes=504 src=192.168.5.1 dst=192.168.5.205 sport=53 dport=1219 packets=2 bytes=230 [ASSURED] mark=0 use=1
tcp      6 349239 ESTABLISHED src=192.168.5.131 dst=207.46.107.111 sport=3941 dport=1863 packets=1722 bytes=72205 src=207.46.107.111 dst=192.168.21.2 sport=1863 dport=3941 packets=1776 bytes=431455 [ASSURED] mark=3 use=1
tcp      6 10 TIME_WAIT src=118.169.67.138 dst=60.248.42.28 sport=1578 dport=443 packets=8 bytes=1021 src=60.248.42.28 dst=118.169.67.138 sport=443 dport=1578 packets=8 bytes=677 [ASSURED] mark=1 use=1
tcp      6 61 TIME_WAIT src=192.168.5.166 dst=202.43.195.52 sport=1156 dport=80 packets=5 bytes=735 src=202.43.195.52 dst=192.168.21.2 sport=80 dport=1156 packets=4 bytes=634 [ASSURED] mark=3 use=1
udp      17 21 src=192.168.5.103 dst=98.194.156.190 sport=22319 dport=38850 packets=3 bytes=186 [UNREPLIED] src=98.194.156.190 dst=192.168.21.2 sport=38850 dport=22319 packets=0 bytes=0 mark=0 use=1
udp      17 157 src=192.168.5.103 dst=24.154.246.149 sport=22319 dport=25779 packets=3 bytes=877 src=24.154.246.149 dst=192.168.21.2 sport=25779 dport=22319 packets=2 bytes=98 [ASSURED] mark=3 use=1
udp      17 23 src=192.168.20.2 dst=213.199.161.77 sport=45233 dport=53 packets=1 bytes=60 [UNREPLIED] src=213.199.161.77 dst=192.168.20.2 sport=53 dport=45233 packets=0 bytes=0 mark=0 use=1
tcp      6 378723 ESTABLISHED src=192.168.5.155 dst=58.87.210.204 sport=2732 dport=80 packets=98 bytes=35305 src=58.87.210.204 dst=192.168.20.2 sport=80 dport=2732 packets=99 bytes=31128 [ASSURED] mark=2 use=1
udp      17 5 src=192.168.21.2 dst=207.68.160.190 sport=52773 dport=53 packets=1 bytes=60 [UNREPLIED] src=207.68.160.190 dst=192.168.21.2 sport=53 dport=52773 packets=0 bytes=0 mark=0 use=1
tcp      6 34 SYN_SENT src=192.168.5.140 dst=207.68.179.219 sport=1189 dport=80 packets=3 bytes=144 [UNREPLIED] src=207.68.179.219 dst=192.168.21.2 sport=80 dport=1189 packets=0 bytes=0 mark=0 use=1
tcp      6 358021 ESTABLISHED src=192.168.5.102 dst=207.46.108.78 sport=1636 dport=1863 packets=2282 bytes=98444 src=207.46.108.78 dst=192.168.21.2 sport=1863 dport=1636 packets=2424 bytes=594535 [ASSURED] mark=3 use=1
udp      17 12 src=192.168.5.102 dst=85.240.215.64 sport=49857 dport=59808 packets=3 bytes=441 [UNREPLIED] src=85.240.215.64 dst=192.168.21.2 sport=59808 dport=49857 packets=0 bytes=0 mark=0 use=1
udp      17 29 src=192.168.21.2 dst=207.68.160.190 sport=40261 dport=53 packets=1 bytes=67 [UNREPLIED] src=207.68.160.190 dst=192.168.21.2 sport=53 dport=40261 packets=0 bytes=0 mark=0 use=1
udp      17 8 src=192.168.21.2 dst=207.68.160.190 sport=39634 dport=53 packets=1 bytes=62 [UNREPLIED] src=207.68.160.190 dst=192.168.21.2 sport=53 dport=39634 packets=0 bytes=0 mark=0 use=1
tcp      6 374267 ESTABLISHED src=192.168.5.135 dst=61.218.73.134 sport=1227 dport=16106 packets=95 bytes=8595 src=61.218.73.134 dst=192.168.21.2 sport=16106 dport=1227 packets=78 bytes=7030 [ASSURED] mark=0 use=1
tcp      6 387129 ESTABLISHED src=192.168.5.16 dst=121.10.104.142 sport=3012 dport=80 packets=49 bytes=8355 src=121.10.104.142 dst=192.168.21.2 sport=80 dport=3012 packets=66 bytes=75984 [ASSURED] mark=3 use=1
udp      17 3 src=192.168.5.112 dst=218.172.211.18 sport=1323 dport=5237 packets=3 bytes=390 src=218.172.211.18 dst=192.168.21.2 sport=5237 dport=1323 packets=1 bytes=48 mark=3 use=1
udp      17 7 src=192.168.21.2 dst=75.125.29.226 sport=63223 dport=53 packets=1 bytes=67 [UNREPLIED] src=75.125.29.226 dst=192.168.21.2 sport=53 dport=63223 packets=0 bytes=0 mark=0 use=1
udp      17 6 src=192.168.5.102 dst=82.49.197.179 sport=49857 dport=2319 packets=2 bytes=122 src=82.49.197.179 dst=192.168.21.2 sport=2319 dport=49857 packets=1 bytes=395 mark=3 use=1
udp      17 27 src=192.168.20.2 dst=207.46.66.126 sport=5820 dport=53 packets=1 bytes=67 [UNREPLIED] src=207.46.66.126 dst=192.168.20.2 sport=53 dport=5820 packets=0 bytes=0 mark=0 use=1
tcp      6 285048 ESTABLISHED src=192.168.5.166 dst=218.198.169.158 sport=2503 dport=9197 packets=274 bytes=94025 src=218.198.169.158 dst=192.168.21.2 sport=9197 dport=2503 packets=247 bytes=199419 [ASSURED] mark=768 use=1
udp      17 27 src=192.168.20.2 dst=202.165.104.22 sport=27435 dport=53 packets=1 bytes=58 [UNREPLIED] src=202.165.104.22 dst=192.168.20.2 sport=53 dport=27435 packets=0 bytes=0 mark=0 use=1
udp      17 1 src=192.168.21.2 dst=192.168.21.1 sport=57321 dport=53 packets=1 bytes=80 [UNREPLIED] src=192.168.21.1 dst=192.168.21.2 sport=53 dport=57321 packets=0 bytes=0 mark=0 use=1
udp      17 23 src=192.168.20.2 dst=207.46.66.126 sport=56016 dport=53 packets=1 bytes=60 [UNREPLIED] src=207.46.66.126 dst=192.168.20.2 sport=53 dport=56016 packets=0 bytes=0 mark=0 use=1
udp      17 10 src=192.168.5.103 dst=88.209.140.138 sport=22319 dport=54800 packets=3 bytes=192 src=88.209.140.138 dst=192.168.21.2 sport=54800 dport=22319 packets=1 bytes=47 mark=3 use=1
udp      17 21 src=192.168.5.103 dst=61.89.211.37 sport=22319 dport=48521 packets=3 bytes=183 [UNREPLIED] src=61.89.211.37 dst=192.168.21.2 sport=48521 dport=22319 packets=0 bytes=0 mark=0 use=1
tcp      6 286467 ESTABLISHED src=192.168.5.123 dst=118.170.103.228 sport=4230 dport=1664 packets=75 bytes=5984 src=118.170.103.228 dst=192.168.21.2 sport=1664 dport=4230 packets=72 bytes=5376 [ASSURED] mark=768 use=1
udp      17 25 src=192.168.5.102 dst=81.110.121.130 sport=49857 dport=63635 packets=3 bytes=180 [UNREPLIED] src=81.110.121.130 dst=192.168.21.2 sport=63635 dport=49857 packets=0 bytes=0 mark=0 use=1
udp      17 9 src=192.168.21.2 dst=68.142.255.16 sport=16432 dport=53 packets=1 bytes=58 [UNREPLIED] src=68.142.255.16 dst=192.168.21.2 sport=53 dport=16432 packets=0 bytes=0 mark=0 use=1
tcp      6 386643 ESTABLISHED src=192.168.5.16 dst=60.190.114.95 sport=2884 dport=80 packets=50 bytes=11016 src=60.190.114.95 dst=192.168.21.2 sport=80 dport=2884 packets=66 bytes=77294 [ASSURED] mark=3 use=1
udp      17 5 src=192.168.5.102 dst=24.14.107.14 sport=49857 dport=22083 packets=3 bytes=456 [UNREPLIED] src=24.14.107.14 dst=192.168.21.2 sport=22083 dport=49857 packets=0 bytes=0 mark=0 use=1
udp      17 8 src=192.168.5.103 dst=81.111.175.20 sport=22319 dport=36374 packets=3 bytes=189 [UNREPLIED] src=81.111.175.20 dst=192.168.21.2 sport=36374 dport=22319 packets=0 bytes=0 mark=0 use=1
udp      17 7 src=192.168.21.2 dst=68.142.255.16 sport=13505 dport=53 packets=1 bytes=58 [UNREPLIED] src=68.142.255.16 dst=192.168.21.2 sport=53 dport=13505 packets=0 bytes=0 mark=0 use=1
tcp      6 375972 ESTABLISHED src=192.168.5.16 dst=60.190.114.95 sport=1250 dport=80 packets=67 bytes=12324 src=60.190.114.95 dst=192.168.20.2 sport=80 dport=1250 packets=78 bytes=102067 [ASSURED] mark=2 use=1
udp      17 19 src=192.168.21.2 dst=66.218.71.63 sport=34881 dport=53 packets=1 bytes=58 [UNREPLIED] src=66.218.71.63 dst=192.168.21.2 sport=53 dport=34881 packets=0 bytes=0 mark=0 use=1
udp      17 5 src=192.168.20.2 dst=195.47.75.55 sport=36408 dport=53 packets=1 bytes=67 [UNREPLIED] src=195.47.75.55 dst=192.168.20.2 sport=53 dport=36408 packets=0 bytes=0 mark=0 use=1
udp      17 28 src=60.248.42.28 dst=60.248.42.28 sport=11689 dport=53 packets=1 bytes=73 [UNREPLIED] src=60.248.42.28 dst=60.248.42.28 sport=53 dport=11689 packets=0 bytes=0 mark=0 use=1
udp      17 29 src=192.168.5.102 dst=60.248.167.227 sport=49857 dport=3281 packets=1 bytes=144 [UNREPLIED] src=60.248.167.227 dst=192.168.21.2 sport=3281 dport=49857 packets=0 bytes=0 mark=0 use=1
udp      17 3 src=192.168.5.112 dst=210.24.125.251 sport=1323 dport=11138 packets=3 bytes=390 src=210.24.125.251 dst=192.168.21.2 sport=11138 dport=1323 packets=1 bytes=48 mark=3 use=1
udp      17 23 src=192.168.20.2 dst=192.168.20.1 sport=47460 dport=53 packets=1 bytes=79 [UNREPLIED] src=192.168.20.1 dst=192.168.20.2 sport=53 dport=47460 packets=0 bytes=0 mark=0 use=1
tcp      6 286505 ESTABLISHED src=192.168.5.166 dst=122.7.178.212 sport=4585 dport=9095 packets=10 bytes=4108 src=122.7.178.212 dst=192.168.21.2 sport=9095 dport=4585 packets=2 bytes=169 [ASSURED] mark=768 use=1
udp      17 8 src=192.168.20.2 dst=202.165.104.22 sport=28557 dport=53 packets=1 bytes=58 [UNREPLIED] src=202.165.104.22 dst=192.168.20.2 sport=53 dport=28557 packets=0 bytes=0 mark=0 use=1
udp      17 10 src=192.168.21.2 dst=68.142.255.16 sport=38456 dport=53 packets=1 bytes=58 [UNREPLIED] src=68.142.255.16 dst=192.168.21.2 sport=53 dport=38456 packets=0 bytes=0 mark=0 use=1
udp      17 15 src=192.168.20.2 dst=207.46.66.126 sport=54139 dport=53 packets=1 bytes=55 [UNREPLIED] src=207.46.66.126 dst=192.168.20.2 sport=53 dport=54139 packets=0 bytes=0 mark=0 use=1
udp      17 2 src=192.168.20.2 dst=58.86.34.1 sport=38978 dport=53 packets=1 bytes=63 [UNREPLIED] src=58.86.34.1 dst=192.168.20.2 sport=53 dport=38978 packets=0 bytes=0 mark=0 use=1
tcp      6 22 TIME_WAIT src=192.168.5.155 dst=65.55.184.29 sport=2092 dport=80 packets=6 bytes=1897 src=65.55.184.29 dst=192.168.21.2 sport=80 dport=2092 packets=5 bytes=1133 [ASSURED] mark=3 use=1
tcp      6 351390 ESTABLISHED src=192.168.5.140 dst=59.156.16.146 sport=1354 dport=9653 packets=121 bytes=22318 src=59.156.16.146 dst=192.168.21.2 sport=9653 dport=1354 packets=131 bytes=9829 [ASSURED] mark=0 use=1
tcp      6 304678 ESTABLISHED src=192.168.5.166 dst=121.23.217.97 sport=1503 dport=15471 packets=47 bytes=3699 src=121.23.217.97 dst=192.168.21.2 sport=15471 dport=1503 packets=47 bytes=4343 [ASSURED] mark=0 use=1
tcp      6 380494 ESTABLISHED src=192.168.5.16 dst=121.10.108.181 sport=1753 dport=80 packets=45 bytes=13728 src=121.10.108.181 dst=60.248.42.28 sport=80 dport=1753 packets=60 bytes=83202 [ASSURED] mark=1 use=1
udp      17 8 src=192.168.21.2 dst=68.142.196.63 sport=11685 dport=53 packets=1 bytes=58 [UNREPLIED] src=68.142.196.63 dst=192.168.21.2 sport=53 dport=11685 packets=0 bytes=0 mark=0 use=1
udp      17 1 src=192.168.21.2 dst=203.84.197.239 sport=8293 dport=53 packets=1 bytes=58 [UNREPLIED] src=203.84.197.239 dst=192.168.21.2 sport=53 dport=8293 packets=0 bytes=0 mark=0 use=1
udp      17 157 src=192.168.5.103 dst=67.76.8.49 sport=22319 dport=60519 packets=3 bytes=874 src=67.76.8.49 dst=192.168.21.2 sport=60519 dport=22319 packets=2 bytes=117 [ASSURED] mark=3 use=1
tcp      6 375933 ESTABLISHED src=192.168.5.16 dst=121.10.104.142 sport=1278 dport=80 packets=14 bytes=6979 src=121.10.104.142 dst=192.168.20.2 sport=80 dport=1278 packets=14 bytes=10147 [ASSURED] mark=2 use=1
udp      17 14 src=192.168.21.2 dst=68.142.255.16 sport=21056 dport=53 packets=1 bytes=58 [UNREPLIED] src=68.142.255.16 dst=192.168.21.2 sport=53 dport=21056 packets=0 bytes=0 mark=0 use=1
udp      17 9 src=60.248.42.28 dst=60.248.42.28 sport=25559 dport=53 packets=1 bytes=72 [UNREPLIED] src=60.248.42.28 dst=60.248.42.28 sport=53 dport=25559 packets=0 bytes=0 mark=0 use=1
udp      17 29 src=192.168.5.102 dst=218.169.111.127 sport=49857 dport=38639 packets=1 bytes=137 [UNREPLIED] src=218.169.111.127 dst=192.168.21.2 sport=38639 dport=49857 packets=0 bytes=0 mark=0 use=1
tcp      6 286433 ESTABLISHED src=192.168.5.123 dst=61.230.169.104 sport=4157 dport=26701 packets=1074 bytes=138475 src=61.230.169.104 dst=192.168.21.2 sport=26701 dport=4157 packets=1112 bytes=119667 [ASSURED] mark=768 use=1
udp      17 5 src=192.168.21.2 dst=203.84.197.239 sport=40351 dport=53 packets=1 bytes=58 [UNREPLIED] src=203.84.197.239 dst=192.168.21.2 sport=53 dport=40351 packets=0 bytes=0 mark=0 use=1
tcp      6 358029 ESTABLISHED src=192.168.5.112 dst=207.46.108.58 sport=1775 dport=1863 packets=2134 bytes=91179 src=207.46.108.58 dst=192.168.21.2 sport=1863 dport=1775 packets=2222 bytes=535951 [ASSURED] mark=3 use=1
udp      17 29 src=192.168.5.103 dst=58.161.66.228 sport=22319 dport=37433 packets=3 bytes=453 [UNREPLIED] src=58.161.66.228 dst=192.168.21.2 sport=37433 dport=22319 packets=0 bytes=0 mark=0 use=1
udp      17 4 src=192.168.21.2 dst=192.168.21.1 sport=23243 dport=53 packets=1 bytes=80 [UNREPLIED] src=192.168.21.1 dst=192.168.21.2 sport=53 dport=23243 packets=0 bytes=0 mark=0 use=1
udp      17 21 src=60.248.42.28 dst=60.248.42.28 sport=26658 dport=53 packets=1 bytes=73 [UNREPLIED] src=60.248.42.28 dst=60.248.42.28 sport=53 dport=26658 packets=0 bytes=0 mark=0 use=1
udp      17 29 src=192.168.20.2 dst=193.85.2.117 sport=31534 dport=53 packets=1 bytes=67 [UNREPLIED] src=193.85.2.117 dst=192.168.20.2 sport=53 dport=31534 packets=0 bytes=0 mark=0 use=1
udp      17 28 src=192.168.5.103 dst=62.178.205.50 sport=22319 dport=47791 packets=2 bytes=124 [UNREPLIED] src=62.178.205.50 dst=192.168.21.2 sport=47791 dport=22319 packets=0 bytes=0 mark=0 use=1
udp      17 25 src=192.168.5.102 dst=190.77.83.75 sport=49857 dport=8858 packets=3 bytes=189 [UNREPLIED] src=190.77.83.75 dst=192.168.21.2 sport=8858 dport=49857 packets=0 bytes=0 mark=0 use=1
udp      17 18 src=192.168.20.2 dst=195.47.75.55 sport=11453 dport=53 packets=1 bytes=67 [UNREPLIED] src=195.47.75.55 dst=192.168.20.2 sport=53 dport=11453 packets=0 bytes=0 mark=0 use=1
udp      17 11 src=192.168.20.2 dst=65.55.238.126 sport=13067 dport=53 packets=1 bytes=60 [UNREPLIED] src=65.55.238.126 dst=192.168.20.2 sport=53 dport=13067 packets=0 bytes=0 mark=0 use=1
udp      17 28 src=192.168.5.103 dst=152.23.192.103 sport=22319 dport=26361 packets=2 bytes=128 [UNREPLIED] src=152.23.192.103 dst=192.168.21.2 sport=26361 dport=22319 packets=0 bytes=0 mark=0 use=1
udp      17 28 src=192.168.5.103 dst=58.174.86.210 sport=22319 dport=3985 packets=2 bytes=124 [UNREPLIED] src=58.174.86.210 dst=192.168.21.2 sport=3985 dport=22319 packets=0 bytes=0 mark=0 use=1
udp      17 17 src=60.248.42.28 dst=60.248.42.28 sport=19845 dport=53 packets=1 bytes=72 [UNREPLIED] src=60.248.42.28 dst=60.248.42.28 sport=53 dport=19845 packets=0 bytes=0 mark=0 use=1
udp      17 2 src=192.168.20.2 dst=192.168.20.1 sport=54897 dport=53 packets=2 bytes=144 [UNREPLIED] src=192.168.20.1 dst=192.168.20.2 sport=53 dport=54897 packets=0 bytes=0 mark=0 use=1
udp      17 17 src=192.168.5.162 dst=87.110.42.227 sport=1803 dport=58294 packets=1 bytes=70 src=87.110.42.227 dst=192.168.21.2 sport=58294 dport=1803 packets=1 bytes=47 mark=3 use=1
udp      17 0 src=192.168.5.102 dst=137.30.253.65 sport=49857 dport=7201 packets=3 bytes=186 [UNREPLIED] src=137.30.253.65 dst=192.168.21.2 sport=7201 dport=49857 packets=0 bytes=0 mark=0 use=1
udp      17 5 src=192.168.21.2 dst=66.218.71.63 sport=6433 dport=53 packets=1 bytes=75 [UNREPLIED] src=66.218.71.63 dst=192.168.21.2 sport=53 dport=6433 packets=0 bytes=0 mark=0 use=1
tcp      6 431974 ESTABLISHED src=192.168.5.112 dst=61.56.21.7 sport=2864 dport=59149 packets=26 bytes=1775 src=61.56.21.7 dst=192.168.21.2 sport=59149 dport=2864 packets=20 bytes=1672 [ASSURED] mark=3 use=1
udp      17 23 src=192.168.20.2 dst=195.47.75.55 sport=1319 dport=53 packets=1 bytes=67 [UNREPLIED] src=195.47.75.55 dst=192.168.20.2 sport=53 dport=1319 packets=0 bytes=0 mark=0 use=1
udp      17 13 src=192.168.21.2 dst=202.43.223.170 sport=8399 dport=53 packets=1 bytes=58 [UNREPLIED] src=202.43.223.170 dst=192.168.21.2 sport=53 dport=8399 packets=0 bytes=0 mark=0 use=1
tcp      6 13 SYN_SENT src=192.168.5.140 dst=207.68.179.219 sport=1187 dport=80 packets=3 bytes=144 [UNREPLIED] src=207.68.179.219 dst=192.168.21.2 sport=80 dport=1187 packets=0 bytes=0 mark=0 use=1
udp      17 22 src=192.168.21.2 dst=203.84.197.239 sport=61093 dport=53 packets=1 bytes=58 [UNREPLIED] src=203.84.197.239 dst=192.168.21.2 sport=53 dport=61093 packets=0 bytes=0 mark=0 use=1
udp      17 15 src=192.168.20.2 dst=193.85.2.117 sport=56699 dport=53 packets=1 bytes=67 [UNREPLIED] src=193.85.2.117 dst=192.168.20.2 sport=53 dport=56699 packets=0 bytes=0 mark=0 use=1
udp      17 13 src=192.168.21.2 dst=66.218.71.63 sport=15704 dport=53 packets=1 bytes=58 [UNREPLIED] src=66.218.71.63 dst=192.168.21.2 sport=53 dport=15704 packets=0 bytes=0 mark=0 use=1
udp      17 10 src=192.168.5.102 dst=86.132.141.23 sport=49857 dport=28821 packets=3 bytes=192 [UNREPLIED] src=86.132.141.23 dst=192.168.21.2 sport=28821 dport=49857 packets=0 bytes=0 mark=0 use=1
tcp      6 281933 ESTABLISHED src=192.168.5.131 dst=207.46.106.26 sport=4365 dport=1863 packets=57 bytes=5161 src=207.46.106.26 dst=192.168.21.2 sport=1863 dport=4365 packets=57 bytes=14102 [ASSURED] mark=768 use=1
udp      17 11 src=192.168.21.2 dst=68.142.196.63 sport=48602 dport=53 packets=1 bytes=58 [UNREPLIED] src=68.142.196.63 dst=192.168.21.2 sport=53 dport=48602 packets=0 bytes=0 mark=0 use=1
tcp      6 375932 ESTABLISHED src=192.168.5.16 dst=121.10.104.142 sport=1284 dport=80 packets=9 bytes=6755 src=121.10.104.142 dst=192.168.20.2 sport=80 dport=1284 packets=6 bytes=284 [ASSURED] mark=2 use=1
udp      17 17 src=192.168.5.162 dst=81.205.13.203 sport=1803 dport=4864 packets=1 bytes=70 src=81.205.13.203 dst=192.168.21.2 sport=4864 dport=1803 packets=1 bytes=45 mark=3 use=1
udp      17 158 src=192.168.5.102 dst=192.168.5.1 sport=2132 dport=53 packets=43 bytes=2769 src=192.168.5.1 dst=192.168.5.102 sport=53 dport=2132 packets=18 bytes=1954 [ASSURED] mark=0 use=1
udp      17 22 src=192.168.20.2 dst=213.199.161.77 sport=5371 dport=53 packets=1 bytes=60 [UNREPLIED] src=213.199.161.77 dst=192.168.20.2 sport=53 dport=5371 packets=0 bytes=0 mark=0 use=1
tcp      6 306919 ESTABLISHED src=192.168.5.166 dst=125.229.186.31 sport=3832 dport=10310 packets=3 bytes=4440 [UNREPLIED] src=125.229.186.31 dst=192.168.21.2 sport=10310 dport=3832 packets=0 bytes=0 mark=0 use=1
udp      17 24 src=192.168.5.204 dst=221.238.249.203 sport=11101 dport=8800 packets=1 bytes=197 [UNREPLIED] src=221.238.249.203 dst=192.168.21.2 sport=8800 dport=11101 packets=0 bytes=0 mark=0 use=1
udp      17 29 src=192.168.5.103 dst=58.108.243.31 sport=22319 dport=16567 packets=3 bytes=453 [UNREPLIED] src=58.108.243.31 dst=192.168.21.2 sport=16567 dport=22319 packets=0 bytes=0 mark=3 use=1
udp      17 4 src=192.168.5.103 dst=87.116.87.185 sport=22319 dport=48558 packets=2 bytes=124 src=87.116.87.185 dst=192.168.21.2 sport=48558 dport=22319 packets=1 bytes=723 mark=3 use=1
udp      17 20 src=60.248.42.28 dst=60.248.42.28 sport=52897 dport=53 packets=1 bytes=73 [UNREPLIED] src=60.248.42.28 dst=60.248.42.28 sport=53 dport=52897 packets=0 bytes=0 mark=0 use=1
udp      17 7 src=192.168.21.2 dst=203.84.197.239 sport=39802 dport=53 packets=1 bytes=58 [UNREPLIED] src=203.84.197.239 dst=192.168.21.2 sport=53 dport=39802 packets=0 bytes=0 mark=0 use=1
udp      17 6 src=192.168.5.103 dst=207.34.130.247 sport=22319 dport=37401 packets=2 bytes=260 [UNREPLIED] src=207.34.130.247 dst=192.168.21.2 sport=37401 dport=22319 packets=0 bytes=0 mark=0 use=1
udp      17 12 src=192.168.21.2 dst=207.68.160.190 sport=17402 dport=53 packets=1 bytes=60 [UNREPLIED] src=207.68.160.190 dst=192.168.21.2 sport=53 dport=17402 packets=0 bytes=0 mark=0 use=1
udp      17 0 src=192.168.21.2 dst=68.142.196.63 sport=50882 dport=53 packets=1 bytes=58 [UNREPLIED] src=68.142.196.63 dst=192.168.21.2 sport=53 dport=50882 packets=0 bytes=0 mark=0 use=1
tcp      6 285190 ESTABLISHED src=192.168.5.166 dst=219.246.48.15 sport=2543 dport=10609 packets=547 bytes=116621 src=219.246.48.15 dst=192.168.21.2 sport=10609 dport=2543 packets=581 bytes=562907 [ASSURED] mark=768 use=1
tcp      6 13 SYN_SENT src=192.168.5.140 dst=207.68.179.219 sport=1186 dport=80 packets=3 bytes=144 [UNREPLIED] src=207.68.179.219 dst=192.168.21.2 sport=80 dport=1186 packets=0 bytes=0 mark=0 use=1
tcp      6 61 TIME_WAIT src=192.168.5.166 dst=203.84.196.242 sport=1157 dport=80 packets=5 bytes=917 src=203.84.196.242 dst=192.168.21.2 sport=80 dport=1157 packets=4 bytes=850 [ASSURED] mark=3 use=1
tcp      6 431505 ESTABLISHED src=209.85.198.189 dst=60.248.42.28 sport=12805 dport=25 packets=2 bytes=112 src=60.248.42.28 dst=209.85.198.189 sport=25 dport=12805 packets=1 bytes=60 [ASSURED] mark=1 use=1
udp      17 29 src=192.168.20.2 dst=65.55.238.126 sport=34155 dport=53 packets=1 bytes=60 [UNREPLIED] src=65.55.238.126 dst=192.168.20.2 sport=53 dport=34155 packets=0 bytes=0 mark=0 use=1
udp      17 10 src=192.168.5.103 dst=219.84.106.12 sport=22319 dport=24401 packets=1 bytes=135 src=219.84.106.12 dst=192.168.21.2 sport=24401 dport=22319 packets=1 bytes=48 mark=3 use=1
udp      17 0 src=192.168.21.2 dst=217.12.4.104 sport=19695 dport=53 packets=1 bytes=58 [UNREPLIED] src=217.12.4.104 dst=192.168.21.2 sport=53 dport=19695 packets=0 bytes=0 mark=0 use=1
udp      17 6 src=60.248.42.28 dst=60.248.42.28 sport=52277 dport=53 packets=1 bytes=72 [UNREPLIED] src=60.248.42.28 dst=60.248.42.28 sport=53 dport=52277 packets=0 bytes=0 mark=0 use=1
udp      17 29 src=192.168.20.2 dst=193.85.2.117 sport=19529 dport=53 packets=1 bytes=67 [UNREPLIED] src=193.85.2.117 dst=192.168.20.2 sport=53 dport=19529 packets=0 bytes=0 mark=0 use=1
udp      17 9 src=192.168.20.2 dst=65.55.238.126 sport=43884 dport=53 packets=1 bytes=60 [UNREPLIED] src=65.55.238.126 dst=192.168.20.2 sport=53 dport=43884 packets=0 bytes=0 mark=0 use=1
tcp      6 430493 ESTABLISHED src=118.170.89.23 dst=60.248.42.28 sport=3988 dport=33 packets=239 bytes=43060 src=60.248.42.28 dst=118.170.89.23 sport=33 dport=3988 packets=204 bytes=59364 [ASSURED] mark=1 use=1
udp      17 24 src=192.168.20.2 dst=192.168.20.255 sport=631 dport=631 packets=2 bytes=424 [UNREPLIED] src=192.168.20.255 dst=192.168.20.2 sport=631 dport=631 packets=0 bytes=0 mark=0 use=1
tcp      6 22 SYN_RECV src=192.168.5.166 dst=203.84.196.242 sport=1155 dport=80 packets=1 bytes=48 src=203.84.196.242 dst=192.168.21.2 sport=80 dport=1155 packets=4 bytes=176 mark=3 use=1
tcp      6 88 SYN_SENT src=192.168.5.166 dst=203.84.196.242 sport=1163 dport=80 packets=3 bytes=144 [UNREPLIED] src=203.84.196.242 dst=192.168.21.2 sport=80 dport=1163 packets=0 bytes=0 mark=0 use=1
tcp      6 56 TIME_WAIT src=192.168.5.166 dst=202.43.195.52 sport=1153 dport=80 packets=6 bytes=795 src=202.43.195.52 dst=192.168.21.2 sport=80 dport=1153 packets=5 bytes=989 [ASSURED] mark=3 use=1
udp      17 20 src=60.248.42.28 dst=60.248.42.28 sport=57360 dport=53 packets=1 bytes=72 [UNREPLIED] src=60.248.42.28 dst=60.248.42.28 sport=53 dport=57360 packets=0 bytes=0 mark=0 use=1
tcp      6 356694 ESTABLISHED src=192.168.5.16 dst=60.190.118.169 sport=2192 dport=80 packets=3 bytes=4476 [UNREPLIED] src=60.190.118.169 dst=192.168.21.2 sport=80 dport=2192 packets=0 bytes=0 mark=0 use=1
udp      17 0 src=192.168.20.2 dst=65.55.238.126 sport=57124 dport=53 packets=1 bytes=55 [UNREPLIED] src=65.55.238.126 dst=192.168.20.2 sport=53 dport=57124 packets=0 bytes=0 mark=0 use=1
udp      17 0 src=192.168.5.102 dst=75.57.101.201 sport=49857 dport=63994 packets=3 bytes=180 [UNREPLIED] src=75.57.101.201 dst=192.168.21.2 sport=63994 dport=49857 packets=0 bytes=0 mark=0 use=1
udp      17 6 src=192.168.21.2 dst=207.68.160.190 sport=33709 dport=53 packets=1 bytes=60 [UNREPLIED] src=207.68.160.190 dst=192.168.21.2 sport=53 dport=33709 packets=0 bytes=0 mark=0 use=1
udp      17 16 src=192.168.20.2 dst=192.168.20.1 sport=54902 dport=53 packets=1 bytes=72 [UNREPLIED] src=192.168.20.1 dst=192.168.20.2 sport=53 dport=54902 packets=0 bytes=0 mark=0 use=1
tcp      6 431982 ESTABLISHED src=192.168.5.103 dst=203.71.30.120 sport=4208 dport=8806 packets=27 bytes=3549 src=203.71.30.120 dst=192.168.21.2 sport=8806 dport=4208 packets=20 bytes=1502 [ASSURED] mark=3 use=1
tcp      6 277 ESTABLISHED src=192.168.5.123 dst=60.248.42.28 sport=2251 dport=33 packets=25972 bytes=36608348 src=60.248.42.28 dst=192.168.5.123 sport=33 dport=2251 packets=17029 bytes=1029504 [ASSURED] mark=0 use=1
tcp      6 39 SYN_SENT src=192.168.5.166 dst=203.84.204.69 sport=1146 dport=80 packets=3 bytes=144 [UNREPLIED] src=203.84.204.69 dst=192.168.21.2 sport=80 dport=1146 packets=0 bytes=0 mark=0 use=1
udp      17 104 src=192.168.5.112 dst=118.170.103.228 sport=1323 dport=1664 packets=2 bytes=515 src=118.170.103.228 dst=192.168.21.2 sport=1664 dport=1323 packets=2 bytes=99 [ASSURED] mark=3 use=1
udp      17 18 src=60.248.42.28 dst=60.248.42.28 sport=48761 dport=53 packets=1 bytes=72 [UNREPLIED] src=60.248.42.28 dst=60.248.42.28 sport=53 dport=48761 packets=0 bytes=0 mark=0 use=1
udp      17 24 src=192.168.5.145 dst=59.114.42.76 sport=40944 dport=5484 packets=1 bytes=138 src=59.114.42.76 dst=192.168.21.2 sport=5484 dport=40944 packets=1 bytes=48 mark=3 use=1
udp      17 4 src=192.168.5.103 dst=86.120.135.20 sport=22319 dport=59955 packets=2 bytes=126 src=86.120.135.20 dst=192.168.21.2 sport=59955 dport=22319 packets=1 bytes=463 mark=3 use=1
udp      17 1 src=192.168.20.2 dst=193.85.2.117 sport=52673 dport=53 packets=1 bytes=67 [UNREPLIED] src=193.85.2.117 dst=192.168.20.2 sport=53 dport=52673 packets=0 bytes=0 mark=0 use=1
udp      17 27 src=192.168.20.2 dst=202.165.104.22 sport=65408 dport=53 packets=1 bytes=58 [UNREPLIED] src=202.165.104.22 dst=192.168.20.2 sport=53 dport=65408 packets=0 bytes=0 mark=0 use=1
udp      17 17 src=192.168.5.102 dst=189.78.109.135 sport=49857 dport=4955 packets=3 bytes=180 [UNREPLIED] src=189.78.109.135 dst=192.168.21.2 sport=4955 dport=49857 packets=0 bytes=0 mark=0 use=1
tcp      6 380446 ESTABLISHED src=192.168.5.103 dst=61.216.181.135 sport=2808 dport=80 packets=496 bytes=91311 src=61.216.181.135 dst=192.168.20.2 sport=80 dport=2808 packets=476 bytes=51884 [ASSURED] mark=2 use=1
udp      17 27 src=192.168.5.102 dst=24.46.254.56 sport=49857 dport=19551 packets=3 bytes=186 [UNREPLIED] src=24.46.254.56 dst=192.168.21.2 sport=19551 dport=49857 packets=0 bytes=0 mark=0 use=1
udp      17 22 src=60.248.42.28 dst=60.248.42.28 sport=7678 dport=53 packets=1 bytes=73 [UNREPLIED] src=60.248.42.28 dst=60.248.42.28 sport=53 dport=7678 packets=0 bytes=0 mark=0 use=1
udp      17 27 src=192.168.20.2 dst=65.54.240.126 sport=34121 dport=53 packets=1 bytes=67 [UNREPLIED] src=65.54.240.126 dst=192.168.20.2 sport=53 dport=34121 packets=0 bytes=0 mark=0 use=1
udp      17 176 src=192.168.5.102 dst=192.168.5.1 sport=2175 dport=53 packets=37 bytes=2343 src=192.168.5.1 dst=192.168.5.102 sport=53 dport=2175 packets=24 bytes=2650 [ASSURED] mark=0 use=1
udp      17 21 src=192.168.20.2 dst=202.165.104.22 sport=36427 dport=53 packets=1 bytes=58 [UNREPLIED] src=202.165.104.22 dst=192.168.20.2 sport=53 dport=36427 packets=0 bytes=0 mark=0 use=1
udp      17 22 src=192.168.5.103 dst=76.27.248.28 sport=22319 dport=2051 packets=3 bytes=447 [UNREPLIED] src=76.27.248.28 dst=192.168.21.2 sport=2051 dport=22319 packets=0 bytes=0 mark=0 use=1
tcp      6 386397 ESTABLISHED src=192.168.5.16 dst=60.190.118.169 sport=2900 dport=80 packets=102 bytes=17071 src=60.190.118.169 dst=192.168.21.2 sport=80 dport=2900 packets=155 bytes=86135 [ASSURED] mark=3 use=1
udp      17 21 src=192.168.5.110 dst=91.193.159.163 sport=64882 dport=50984 packets=1 bytes=63 src=91.193.159.163 dst=192.168.21.2 sport=50984 dport=64882 packets=1 bytes=46 mark=3 use=1
udp      17 24 src=192.168.20.2 dst=195.47.75.55 sport=57249 dport=53 packets=1 bytes=67 [UNREPLIED] src=195.47.75.55 dst=192.168.20.2 sport=53 dport=57249 packets=0 bytes=0 mark=0 use=1
tcp      6 359446 ESTABLISHED src=192.168.5.106 dst=59.114.19.220 sport=1111 dport=1053 packets=30 bytes=3231 src=59.114.19.220 dst=60.248.42.28 sport=1053 dport=1111 packets=34 bytes=2007 [ASSURED] mark=0 use=1
udp      17 12 src=192.168.21.2 dst=207.68.160.190 sport=26816 dport=53 packets=1 bytes=60 [UNREPLIED] src=207.68.160.190 dst=192.168.21.2 sport=53 dport=26816 packets=0 bytes=0 mark=0 use=1
udp      17 29 src=192.168.5.204 dst=192.168.5.1 sport=1664 dport=53 packets=30 bytes=2010 [UNREPLIED] src=192.168.5.1 dst=192.168.5.204 sport=53 dport=1664 packets=0 bytes=0 mark=0 use=1
udp      17 23 src=192.168.21.2 dst=75.125.29.226 sport=3450 dport=53 packets=1 bytes=67 [UNREPLIED] src=75.125.29.226 dst=192.168.21.2 sport=53 dport=3450 packets=0 bytes=0 mark=0 use=1
udp      17 1 src=192.168.21.2 dst=68.142.255.16 sport=17455 dport=53 packets=1 bytes=58 [UNREPLIED] src=68.142.255.16 dst=192.168.21.2 sport=53 dport=17455 packets=0 bytes=0 mark=0 use=1
udp      17 2 src=60.248.42.28 dst=60.248.42.28 sport=4896 dport=53 packets=1 bytes=72 [UNREPLIED] src=60.248.42.28 dst=60.248.42.28 sport=53 dport=4896 packets=0 bytes=0 mark=0 use=1
udp      17 5 src=60.248.42.28 dst=60.248.42.28 sport=57859 dport=53 packets=1 bytes=72 [UNREPLIED] src=60.248.42.28 dst=60.248.42.28 sport=53 dport=57859 packets=0 bytes=0 mark=0 use=1
tcp      6 431591 ESTABLISHED src=192.168.5.136 dst=69.177.6.220 sport=1127 dport=60400 packets=36 bytes=3133 src=69.177.6.220 dst=192.168.21.2 sport=60400 dport=1127 packets=38 bytes=12360 [ASSURED] mark=3 use=1
udp      17 21 src=192.168.21.2 dst=68.142.196.63 sport=35433 dport=53 packets=1 bytes=65 [UNREPLIED] src=68.142.196.63 dst=192.168.21.2 sport=53 dport=35433 packets=0 bytes=0 mark=0 use=1
udp      17 3 src=60.248.42.28 dst=60.248.42.28 sport=20506 dport=53 packets=1 bytes=72 [UNREPLIED] src=60.248.42.28 dst=60.248.42.28 sport=53 dport=20506 packets=0 bytes=0 mark=0 use=1
tcp      6 414638 ESTABLISHED src=192.168.5.170 dst=118.165.166.237 sport=2324 dport=12048 packets=55 bytes=4791 src=118.165.166.237 dst=192.168.21.2 sport=12048 dport=2324 packets=66 bytes=12113 [ASSURED] mark=3 use=1
udp      17 24 src=192.168.5.145 dst=59.125.100.209 sport=40944 dport=37991 packets=1 bytes=138 src=59.125.100.209 dst=192.168.21.2 sport=37991 dport=40944 packets=1 bytes=48 mark=3 use=1
udp      17 9 src=192.168.21.2 dst=68.142.196.63 sport=65116 dport=53 packets=1 bytes=58 [UNREPLIED] src=68.142.196.63 dst=192.168.21.2 sport=53 dport=65116 packets=0 bytes=0 mark=0 use=1
tcp      6 417674 ESTABLISHED src=192.168.5.205 dst=203.69.140.153 sport=1290 dport=30810 packets=1224 bytes=70875 src=203.69.140.153 dst=192.168.21.2 sport=30810 dport=1290 packets=1189 bytes=181223 [ASSURED] mark=3 use=1
udp      17 12 src=192.168.20.2 dst=213.199.161.77 sport=19366 dport=53 packets=1 bytes=60 [UNREPLIED] src=213.199.161.77 dst=192.168.20.2 sport=53 dport=19366 packets=0 bytes=0 mark=0 use=1
udp      17 27 src=192.168.5.102 dst=82.235.179.71 sport=49857 dport=2551 packets=3 bytes=180 [UNREPLIED] src=82.235.179.71 dst=192.168.21.2 sport=2551 dport=49857 packets=0 bytes=0 mark=0 use=1
udp      17 23 src=192.168.20.2 dst=65.54.240.126 sport=48960 dport=53 packets=1 bytes=60 [UNREPLIED] src=65.54.240.126 dst=192.168.20.2 sport=53 dport=48960 packets=0 bytes=0 mark=0 use=1
tcp      6 307176 ESTABLISHED src=192.168.5.162 dst=69.203.202.130 sport=4673 dport=65320 packets=290 bytes=26514 src=69.203.202.130 dst=192.168.21.2 sport=65320 dport=4673 packets=299 bytes=36677 [ASSURED] mark=768 use=1
tcp      6 32 TIME_WAIT src=66.249.67.98 dst=60.248.42.28 sport=54407 dport=80 packets=18 bytes=1336 src=60.248.42.28 dst=66.249.67.98 sport=80 dport=54407 packets=17 bytes=19992 [ASSURED] mark=1 use=1
udp      17 10 src=192.168.20.2 dst=207.46.66.126 sport=49716 dport=53 packets=1 bytes=60 [UNREPLIED] src=207.46.66.126 dst=192.168.20.2 sport=53 dport=49716 packets=0 bytes=0 mark=0 use=1
udp      17 18 src=192.168.21.2 dst=75.125.29.226 sport=8948 dport=53 packets=1 bytes=67 [UNREPLIED] src=75.125.29.226 dst=192.168.21.2 sport=53 dport=8948 packets=0 bytes=0 mark=0 use=1
tcp      6 425500 ESTABLISHED src=192.168.5.6 dst=80.116.181.126 sport=1441 dport=61298 packets=7 bytes=446 src=80.116.181.126 dst=192.168.21.2 sport=61298 dport=1441 packets=5 bytes=363 [ASSURED] mark=3 use=1
udp      17 115 src=192.168.5.112 dst=218.210.250.123 sport=1323 dport=44623 packets=7 bytes=953 src=218.210.250.123 dst=192.168.21.2 sport=44623 dport=1323 packets=4 bytes=216 [ASSURED] mark=3 use=1
tcp      6 380348 ESTABLISHED src=192.168.5.123 dst=118.170.103.228 sport=3058 dport=1664 packets=408 bytes=22676 src=118.170.103.228 dst=60.248.42.28 sport=1664 dport=3058 packets=420 bytes=22845 [ASSURED] mark=1 use=1
udp      17 5 src=192.168.20.2 dst=202.165.104.22 sport=16070 dport=53 packets=1 bytes=65 [UNREPLIED] src=202.165.104.22 dst=192.168.20.2 sport=53 dport=16070 packets=0 bytes=0 mark=0 use=1
tcp      6 307120 ESTABLISHED src=192.168.5.170 dst=118.171.42.82 sport=3463 dport=10681 packets=25 bytes=10481 src=118.171.42.82 dst=192.168.21.2 sport=10681 dport=3463 packets=16 bytes=11347 [ASSURED] mark=0 use=1
udp      17 28 src=192.168.5.103 dst=68.35.75.245 sport=22319 dport=44345 packets=2 bytes=126 [UNREPLIED] src=68.35.75.245 dst=192.168.21.2 sport=44345 dport=22319 packets=0 bytes=0 mark=0 use=1
udp      17 7 src=192.168.5.103 dst=97.100.244.148 sport=22319 dport=34298 packets=1 bytes=60 src=97.100.244.148 dst=192.168.21.2 sport=34298 dport=22319 packets=1 bytes=46 mark=3 use=1
udp      17 29 src=192.168.5.102 dst=125.132.251.112 sport=49857 dport=36690 packets=1 bytes=63 [UNREPLIED] src=125.132.251.112 dst=192.168.21.2 sport=36690 dport=49857 packets=0 bytes=0 mark=0 use=1
udp      17 150 src=192.168.5.140 dst=192.168.5.1 sport=1143 dport=53 packets=109 bytes=6648 src=192.168.5.1 dst=192.168.5.140 sport=53 dport=1143 packets=14 bytes=1685 [ASSURED] mark=0 use=1
udp      17 6 src=192.168.20.2 dst=65.55.238.126 sport=56417 dport=53 packets=1 bytes=60 [UNREPLIED] src=65.55.238.126 dst=192.168.20.2 sport=53 dport=56417 packets=0 bytes=0 mark=0 use=1
udp      17 16 src=192.168.5.110 dst=61.221.135.85 sport=64882 dport=54739 packets=3 bytes=348 [UNREPLIED] src=61.221.135.85 dst=192.168.21.2 sport=54739 dport=64882 packets=0 bytes=0 mark=0 use=1
udp      17 15 src=60.248.42.28 dst=60.248.42.28 sport=8520 dport=53 packets=1 bytes=72 [UNREPLIED] src=60.248.42.28 dst=60.248.42.28 sport=53 dport=8520 packets=0 bytes=0 mark=0 use=1
udp      17 22 src=192.168.5.103 dst=24.219.103.204 sport=22319 dport=61060 packets=3 bytes=444 [UNREPLIED] src=24.219.103.204 dst=192.168.21.2 sport=61060 dport=22319 packets=0 bytes=0 mark=0 use=1
tcp      6 85 SYN_SENT src=192.168.5.166 dst=202.43.195.52 sport=1164 dport=80 packets=2 bytes=96 [UNREPLIED] src=202.43.195.52 dst=192.168.21.2 sport=80 dport=1164 packets=0 bytes=0 mark=0 use=1
udp      17 24 src=192.168.20.2 dst=193.85.2.117 sport=44864 dport=53 packets=1 bytes=67 [UNREPLIED] src=193.85.2.117 dst=192.168.20.2 sport=53 dport=44864 packets=0 bytes=0 mark=0 use=1
udp      17 9 src=192.168.20.2 dst=65.54.240.126 sport=36894 dport=53 packets=1 bytes=60 [UNREPLIED] src=65.54.240.126 dst=192.168.20.2 sport=53 dport=36894 packets=0 bytes=0 mark=0 use=1
udp      17 12 src=192.168.20.2 dst=193.85.2.117 sport=1671 dport=53 packets=1 bytes=67 [UNREPLIED] src=193.85.2.117 dst=192.168.20.2 sport=53 dport=1671 packets=0 bytes=0 mark=0 use=1
udp      17 29 src=192.168.21.2 dst=207.68.160.190 sport=32043 dport=53 packets=1 bytes=67 [UNREPLIED] src=207.68.160.190 dst=192.168.21.2 sport=53 dport=32043 packets=0 bytes=0 mark=0 use=1
tcp      6 28 TIME_WAIT src=192.168.5.166 dst=202.43.195.52 sport=1140 dport=80 packets=27 bytes=1692 src=202.43.195.52 dst=192.168.21.2 sport=80 dport=1140 packets=38 bytes=52444 [ASSURED] mark=3 use=1
udp      17 16 src=192.168.21.2 dst=66.218.71.63 sport=35357 dport=53 packets=1 bytes=58 [UNREPLIED] src=66.218.71.63 dst=192.168.21.2 sport=53 dport=35357 packets=0 bytes=0 mark=0 use=1
udp      17 6 src=60.248.42.28 dst=61.200.83.50 sport=19228 dport=53 packets=1 bytes=65 src=61.200.83.50 dst=60.248.42.28 sport=53 dport=19228 packets=1 bytes=183 mark=1 use=1
udp      17 23 src=192.168.20.2 dst=213.199.161.77 sport=50475 dport=53 packets=1 bytes=60 [UNREPLIED] src=213.199.161.77 dst=192.168.20.2 sport=53 dport=50475 packets=0 bytes=0 mark=0 use=1
tcp      6 281898 ESTABLISHED src=192.168.5.16 dst=71.10.247.74 sport=2166 dport=443 packets=142 bytes=35172 src=71.10.247.74 dst=192.168.21.2 sport=443 dport=2166 packets=167 bytes=37180 [ASSURED] mark=771 use=1
udp      17 25 src=192.168.21.2 dst=68.142.196.63 sport=16256 dport=53 packets=1 bytes=58 [UNREPLIED] src=68.142.196.63 dst=192.168.21.2 sport=53 dport=16256 packets=0 bytes=0 mark=0 use=1
tcp      6 39 SYN_SENT src=192.168.5.166 dst=203.84.204.69 sport=1145 dport=80 packets=3 bytes=144 [UNREPLIED] src=203.84.204.69 dst=192.168.21.2 sport=80 dport=1145 packets=0 bytes=0 mark=0 use=1
udp      17 8 src=192.168.5.103 dst=59.127.138.18 sport=22319 dport=10402 packets=3 bytes=402 [UNREPLIED] src=59.127.138.18 dst=192.168.21.2 sport=10402 dport=22319 packets=0 bytes=0 mark=0 use=1
tcp      6 359431 ESTABLISHED src=192.168.5.106 dst=59.114.19.220 sport=1089 dport=1053 packets=20 bytes=8731 src=59.114.19.220 dst=60.248.42.28 sport=1053 dport=1089 packets=24 bytes=3147 [ASSURED] mark=0 use=1
udp      17 2 src=192.168.21.2 dst=202.43.223.170 sport=42227 dport=53 packets=1 bytes=58 [UNREPLIED] src=202.43.223.170 dst=192.168.21.2 sport=53 dport=42227 packets=0 bytes=0 mark=0 use=1
udp      17 154 src=192.168.5.103 dst=118.170.103.228 sport=22319 dport=1664 packets=2 bytes=680 src=118.170.103.228 dst=192.168.21.2 sport=1664 dport=22319 packets=2 bytes=109 [ASSURED] mark=3 use=1
udp      17 25 src=192.168.21.2 dst=66.218.71.63 sport=51668 dport=53 packets=1 bytes=65 [UNREPLIED] src=66.218.71.63 dst=192.168.21.2 sport=53 dport=51668 packets=0 bytes=0 mark=0 use=1
udp      17 0 src=192.168.20.2 dst=195.47.75.55 sport=23461 dport=53 packets=1 bytes=67 [UNREPLIED] src=195.47.75.55 dst=192.168.20.2 sport=53 dport=23461 packets=0 bytes=0 mark=0 use=1
tcp      6 292285 ESTABLISHED src=192.168.5.156 dst=24.144.185.26 sport=1171 dport=30827 packets=1072 bytes=105986 src=24.144.185.26 dst=192.168.21.2 sport=30827 dport=1171 packets=970 bytes=101603 [ASSURED] mark=768 use=1
udp      17 10 src=192.168.5.103 dst=65.35.64.173 sport=22319 dport=48659 packets=3 bytes=258 [UNREPLIED] src=65.35.64.173 dst=192.168.21.2 sport=48659 dport=22319 packets=0 bytes=0 mark=0 use=1
udp      17 1 src=60.248.42.28 dst=60.248.42.28 sport=46221 dport=53 packets=1 bytes=72 [UNREPLIED] src=60.248.42.28 dst=60.248.42.28 sport=53 dport=46221 packets=0 bytes=0 mark=0 use=1
udp      17 11 src=192.168.21.2 dst=75.125.29.226 sport=58088 dport=53 packets=1 bytes=67 [UNREPLIED] src=75.125.29.226 dst=192.168.21.2 sport=53 dport=58088 packets=0 bytes=0 mark=0 use=1
udp      17 142 src=192.168.5.204 dst=125.46.57.12 sport=11101 dport=17788 packets=2 bytes=86 src=125.46.57.12 dst=192.168.21.2 sport=17788 dport=11101 packets=2 bytes=86 [ASSURED] mark=3 use=1
udp      17 27 src=192.168.5.102 dst=66.146.137.68 sport=49857 dport=60906 packets=3 bytes=180 [UNREPLIED] src=66.146.137.68 dst=192.168.21.2 sport=60906 dport=49857 packets=0 bytes=0 mark=0 use=1
udp      17 15 src=192.168.20.2 dst=213.199.161.77 sport=41508 dport=53 packets=1 bytes=60 [UNREPLIED] src=213.199.161.77 dst=192.168.20.2 sport=53 dport=41508 packets=0 bytes=0 mark=0 use=1
udp      17 2 src=192.168.20.2 dst=207.46.66.126 sport=58368 dport=53 packets=1 bytes=60 [UNREPLIED] src=207.46.66.126 dst=192.168.20.2 sport=53 dport=58368 packets=0 bytes=0 mark=0 use=1
udp      17 1 src=192.168.21.2 dst=168.95.192.1 sport=54330 dport=53 packets=1 bytes=79 [UNREPLIED] src=168.95.192.1 dst=192.168.21.2 sport=53 dport=54330 packets=0 bytes=0 mark=0 use=1
udp      17 29 src=192.168.5.103 dst=61.62.132.87 sport=22319 dport=19565 packets=3 bytes=444 [UNREPLIED] src=61.62.132.87 dst=192.168.21.2 sport=19565 dport=22319 packets=0 bytes=0 mark=0 use=1
tcp      6 349060 ESTABLISHED src=192.168.5.105 dst=124.40.51.89 sport=1176 dport=80 packets=13 bytes=745 src=124.40.51.89 dst=192.168.21.2 sport=80 dport=1176 packets=15 bytes=17868 [ASSURED] mark=0 use=1
udp      17 9 src=192.168.21.2 dst=68.142.196.63 sport=32852 dport=53 packets=1 bytes=58 [UNREPLIED] src=68.142.196.63 dst=192.168.21.2 sport=53 dport=32852 packets=0 bytes=0 mark=0 use=1
udp      17 29 src=60.248.42.28 dst=60.248.42.28 sport=14596 dport=53 packets=1 bytes=73 [UNREPLIED] src=60.248.42.28 dst=60.248.42.28 sport=53 dport=14596 packets=0 bytes=0 mark=0 use=1
tcp      6 350357 ESTABLISHED src=192.168.5.102 dst=219.68.32.225 sport=1610 dport=34106 packets=248 bytes=63920 src=219.68.32.225 dst=192.168.21.2 sport=34106 dport=1610 packets=282 bytes=47584 [ASSURED] mark=0 use=1
udp      17 25 src=192.168.21.2 dst=75.125.29.226 sport=14897 dport=53 packets=1 bytes=67 [UNREPLIED] src=75.125.29.226 dst=192.168.21.2 sport=53 dport=14897 packets=0 bytes=0 mark=0 use=1
tcp      6 373980 ESTABLISHED src=192.168.5.131 dst=207.46.107.13 sport=2595 dport=1863 packets=367 bytes=17756 src=207.46.107.13 dst=192.168.21.2 sport=1863 dport=2595 packets=403 bytes=102647 [ASSURED] mark=0 use=1
udp      17 0 src=192.168.20.2 dst=213.199.161.77 sport=49695 dport=53 packets=1 bytes=60 [UNREPLIED] src=213.199.161.77 dst=192.168.20.2 sport=53 dport=49695 packets=0 bytes=0 mark=0 use=1
tcp      6 386270 ESTABLISHED src=192.168.5.16 dst=60.190.114.95 sport=2873 dport=80 packets=3 bytes=4476 [UNREPLIED] src=60.190.114.95 dst=192.168.21.2 sport=80 dport=2873 packets=0 bytes=0 mark=0 use=1
udp      17 8 src=192.168.21.2 dst=217.12.4.104 sport=60238 dport=53 packets=1 bytes=58 [UNREPLIED] src=217.12.4.104 dst=192.168.21.2 sport=53 dport=60238 packets=0 bytes=0 mark=0 use=1
tcp      6 386580 ESTABLISHED src=192.168.5.16 dst=60.190.118.169 sport=2903 dport=80 packets=3 bytes=4476 [UNREPLIED] src=60.190.118.169 dst=192.168.21.2 sport=80 dport=2903 packets=0 bytes=0 mark=0 use=1
udp      17 21 src=192.168.20.2 dst=65.55.238.126 sport=11751 dport=53 packets=1 bytes=60 [UNREPLIED] src=65.55.238.126 dst=192.168.20.2 sport=53 dport=11751 packets=0 bytes=0 mark=0 use=1
udp      17 10 src=192.168.21.2 dst=75.125.29.226 sport=51466 dport=53 packets=1 bytes=67 [UNREPLIED] src=75.125.29.226 dst=192.168.21.2 sport=53 dport=51466 packets=0 bytes=0 mark=0 use=1
udp      17 16 src=192.168.21.2 dst=68.142.255.16 sport=46728 dport=53 packets=1 bytes=58 [UNREPLIED] src=68.142.255.16 dst=192.168.21.2 sport=53 dport=46728 packets=0 bytes=0 mark=0 use=1
udp      17 154 src=192.168.5.110 dst=76.188.106.66 sport=64882 dport=25632 packets=4 bytes=907 src=76.188.106.66 dst=192.168.21.2 sport=25632 dport=64882 packets=2 bytes=100 [ASSURED] mark=3 use=1
tcp      6 10 TIME_WAIT src=127.0.0.1 dst=127.0.0.1 sport=43604 dport=143 packets=56 bytes=3243 src=127.0.0.1 dst=127.0.0.1 sport=143 dport=43604 packets=71 bytes=565107 [ASSURED] mark=0 use=1
udp      17 1 src=192.168.5.102 dst=86.5.3.197 sport=49857 dport=52051 packets=2 bytes=126 src=86.5.3.197 dst=192.168.21.2 sport=52051 dport=49857 packets=1 bytes=854 mark=3 use=1
tcp      6 14 TIME_WAIT src=192.168.5.102 dst=60.248.42.28 sport=2470 dport=80 packets=2039 bytes=82369 src=60.248.42.28 dst=192.168.5.102 sport=80 dport=2470 packets=4116 bytes=6162020 [ASSURED] mark=0 use=1
udp      17 8 src=60.248.42.28 dst=60.248.42.28 sport=27694 dport=53 packets=1 bytes=72 [UNREPLIED] src=60.248.42.28 dst=60.248.42.28 sport=53 dport=27694 packets=0 bytes=0 mark=0 use=1
udp      17 26 src=60.248.42.28 dst=60.248.42.28 sport=8153 dport=53 packets=1 bytes=73 [UNREPLIED] src=60.248.42.28 dst=60.248.42.28 sport=53 dport=8153 packets=0 bytes=0 mark=0 use=1
udp      17 36 src=192.168.5.145 dst=219.81.234.80 sport=40944 dport=19292 packets=3 bytes=740 src=219.81.234.80 dst=192.168.21.2 sport=19292 dport=40944 packets=3 bytes=170 [ASSURED] mark=3 use=1
udp      17 21 src=192.168.5.103 dst=87.11.68.188 sport=22319 dport=41058 packets=3 bytes=180 [UNREPLIED] src=87.11.68.188 dst=192.168.21.2 sport=41058 dport=22319 packets=0 bytes=0 mark=0 use=1
udp      17 17 src=192.168.21.2 dst=207.68.160.190 sport=65243 dport=53 packets=1 bytes=60 [UNREPLIED] src=207.68.160.190 dst=192.168.21.2 sport=53 dport=65243 packets=0 bytes=0 mark=0 use=1
udp      17 10 src=192.168.5.102 dst=83.167.115.117 sport=49857 dport=44378 packets=3 bytes=186 [UNREPLIED] src=83.167.115.117 dst=192.168.21.2 sport=44378 dport=49857 packets=0 bytes=0 mark=0 use=1
tcp      6 112 SYN_SENT src=192.168.5.166 dst=203.84.196.242 sport=1166 dport=80 packets=3 bytes=144 [UNREPLIED] src=203.84.196.242 dst=192.168.21.2 sport=80 dport=1166 packets=0 bytes=0 mark=0 use=1
udp      17 0 src=60.248.42.28 dst=60.248.42.28 sport=54789 dport=53 packets=1 bytes=72 [UNREPLIED] src=60.248.42.28 dst=60.248.42.28 sport=53 dport=54789 packets=0 bytes=0 mark=0 use=1
tcp      6 40 SYN_RECV src=192.168.5.166 dst=203.84.196.242 sport=1162 dport=80 packets=1 bytes=48 src=203.84.196.242 dst=192.168.21.2 sport=80 dport=1162 packets=4 bytes=176 mark=3 use=1
udp      17 25 src=192.168.20.2 dst=195.47.75.55 sport=36130 dport=53 packets=1 bytes=67 [UNREPLIED] src=195.47.75.55 dst=192.168.20.2 sport=53 dport=36130 packets=0 bytes=0 mark=0 use=1
udp      17 3 src=192.168.21.2 dst=203.84.197.239 sport=31216 dport=53 packets=1 bytes=60 [UNREPLIED] src=203.84.197.239 dst=192.168.21.2 sport=53 dport=31216 packets=0 bytes=0 mark=0 use=1
udp      17 17 src=192.168.21.2 dst=66.218.71.63 sport=1339 dport=53 packets=1 bytes=58 [UNREPLIED] src=66.218.71.63 dst=192.168.21.2 sport=53 dport=1339 packets=0 bytes=0 mark=0 use=1
udp      17 27 src=192.168.5.102 dst=82.81.16.130 sport=49857 dport=64690 packets=3 bytes=180 [UNREPLIED] src=82.81.16.130 dst=192.168.21.2 sport=64690 dport=49857 packets=0 bytes=0 mark=0 use=1
udp      17 23 src=192.168.21.2 dst=68.142.255.16 sport=38526 dport=53 packets=1 bytes=58 [UNREPLIED] src=68.142.255.16 dst=192.168.21.2 sport=53 dport=38526 packets=0 bytes=0 mark=0 use=1
udp      17 2 src=192.168.21.2 dst=203.84.197.239 sport=13453 dport=53 packets=1 bytes=58 [UNREPLIED] src=203.84.197.239 dst=192.168.21.2 sport=53 dport=13453 packets=0 bytes=0 mark=0 use=1
udp      17 27 src=192.168.20.2 dst=195.47.75.55 sport=41654 dport=53 packets=1 bytes=67 [UNREPLIED] src=195.47.75.55 dst=192.168.20.2 sport=53 dport=41654 packets=0 bytes=0 mark=0 use=1
udp      17 2 src=192.168.5.103 dst=130.13.153.57 sport=22319 dport=1679 packets=1 bytes=61 src=130.13.153.57 dst=192.168.21.2 sport=1679 dport=22319 packets=1 bytes=46 mark=3 use=1
tcp      6 102 TIME_WAIT src=59.115.235.69 dst=60.248.42.28 sport=1035 dport=110 packets=27 bytes=1152 src=60.248.42.28 dst=59.115.235.69 sport=110 dport=1035 packets=35 bytes=25691 [ASSURED] mark=1 use=1
udp      17 8 src=192.168.21.2 dst=168.95.1.1 sport=3090 dport=53 packets=1 bytes=74 [UNREPLIED] src=168.95.1.1 dst=192.168.21.2 sport=53 dport=3090 packets=0 bytes=0 mark=0 use=1
udp      17 157 src=192.168.5.102 dst=192.168.5.1 sport=2328 dport=53 packets=31 bytes=1964 src=192.168.5.1 dst=192.168.5.102 sport=53 dport=2328 packets=21 bytes=2506 [ASSURED] mark=0 use=1
udp      17 142 src=192.168.5.204 dst=58.18.172.59 sport=11101 dport=17788 packets=2 bytes=139 src=58.18.172.59 dst=192.168.21.2 sport=17788 dport=11101 packets=1 bytes=43 [ASSURED] mark=3 use=1
tcp      6 381439 ESTABLISHED src=192.168.5.16 dst=121.10.104.142 sport=2223 dport=80 packets=13 bytes=6923 src=121.10.104.142 dst=60.248.42.28 sport=80 dport=2223 packets=12 bytes=7854 [ASSURED] mark=1 use=1
udp      17 12 src=60.248.42.28 dst=60.248.42.28 sport=17588 dport=53 packets=1 bytes=72 [UNREPLIED] src=60.248.42.28 dst=60.248.42.28 sport=53 dport=17588 packets=0 bytes=0 mark=0 use=1
tcp      6 79 SYN_SENT src=192.168.5.166 dst=203.84.196.242 sport=1160 dport=80 packets=1 bytes=48 [UNREPLIED] src=203.84.196.242 dst=192.168.21.2 sport=80 dport=1160 packets=0 bytes=0 mark=0 use=1
udp      17 28 src=192.168.21.2 dst=75.125.29.226 sport=39587 dport=53 packets=1 bytes=67 [UNREPLIED] src=75.125.29.226 dst=192.168.21.2 sport=53 dport=39587 packets=0 bytes=0 mark=0 use=1
udp      17 11 src=192.168.21.2 dst=168.95.1.1 sport=46964 dport=53 packets=1 bytes=85 [UNREPLIED] src=168.95.1.1 dst=192.168.21.2 sport=53 dport=46964 packets=0 bytes=0 mark=0 use=1
udp      17 157 src=192.168.5.103 dst=74.65.246.99 sport=22319 dport=27491 packets=3 bytes=880 src=74.65.246.99 dst=192.168.21.2 sport=27491 dport=22319 packets=2 bytes=98 [ASSURED] mark=3 use=1
udp      17 27 src=192.168.5.162 dst=79.35.178.225 sport=1803 dport=22355 packets=2 bytes=250 src=79.35.178.225 dst=192.168.21.2 sport=22355 dport=1803 packets=1 bytes=65 mark=3 use=1
udp      17 8 src=192.168.5.103 dst=24.27.155.6 sport=22319 dport=10904 packets=3 bytes=183 [UNREPLIED] src=24.27.155.6 dst=192.168.21.2 sport=10904 dport=22319 packets=0 bytes=0 mark=0 use=1
tcp      6 376057 ESTABLISHED src=192.168.5.16 dst=60.190.114.95 sport=1249 dport=80 packets=3 bytes=4476 [UNREPLIED] src=60.190.114.95 dst=192.168.20.2 sport=80 dport=1249 packets=0 bytes=0 mark=0 use=1
udp      17 5 src=192.168.5.102 dst=220.134.79.34 sport=49857 dport=10615 packets=6 bytes=645 [UNREPLIED] src=220.134.79.34 dst=192.168.21.2 sport=10615 dport=49857 packets=0 bytes=0 mark=0 use=1
udp      17 23 src=192.168.5.103 dst=85.66.61.61 sport=22319 dport=18206 packets=2 bytes=120 src=85.66.61.61 dst=192.168.21.2 sport=18206 dport=22319 packets=1 bytes=46 mark=3 use=1
udp      17 12 src=192.168.20.2 dst=202.165.104.22 sport=1532 dport=53 packets=1 bytes=65 [UNREPLIED] src=202.165.104.22 dst=192.168.20.2 sport=53 dport=1532 packets=0 bytes=0 mark=0 use=1
udp      17 23 src=192.168.21.2 dst=207.68.160.190 sport=54119 dport=53 packets=1 bytes=60 [UNREPLIED] src=207.68.160.190 dst=192.168.21.2 sport=53 dport=54119 packets=0 bytes=0 mark=0 use=1
udp      17 2 src=192.168.21.2 dst=68.142.196.63 sport=63278 dport=53 packets=1 bytes=58 [UNREPLIED] src=68.142.196.63 dst=192.168.21.2 sport=53 dport=63278 packets=0 bytes=0 mark=0 use=1
udp      17 179 src=192.168.5.166 dst=192.168.5.1 sport=1081 dport=53 packets=270 bytes=18448 src=192.168.5.1 dst=192.168.5.166 sport=53 dport=1081 packets=156 bytes=12377 [ASSURED] mark=0 use=1
tcp      6 431995 ESTABLISHED src=192.168.5.162 dst=60.248.167.227 sport=3165 dport=80 packets=23 bytes=1540 src=60.248.167.227 dst=192.168.21.2 sport=80 dport=3165 packets=20 bytes=1818 [ASSURED] mark=3 use=1
tcp      6 431702 ESTABLISHED src=192.168.5.166 dst=60.248.42.28 sport=1127 dport=25 packets=2 bytes=88 src=60.248.42.28 dst=192.168.5.166 sport=25 dport=1127 packets=1 bytes=48 [ASSURED] mark=0 use=1
udp      17 6 src=192.168.5.103 dst=76.107.177.35 sport=22319 dport=20209 packets=2 bytes=296 src=76.107.177.35 dst=192.168.21.2 sport=20209 dport=22319 packets=1 bytes=48 mark=3 use=1
tcp      6 431783 ESTABLISHED src=192.168.5.166 dst=60.248.42.28 sport=1129 dport=25 packets=2 bytes=88 src=60.248.42.28 dst=192.168.5.166 sport=25 dport=1129 packets=1 bytes=48 [ASSURED] mark=0 use=1
tcp      6 386714 ESTABLISHED src=192.168.5.16 dst=60.190.114.95 sport=2874 dport=80 packets=52 bytes=11096 src=60.190.114.95 dst=192.168.21.2 sport=80 dport=2874 packets=66 bytes=76907 [ASSURED] mark=3 use=1
udp      17 9 src=192.168.20.2 dst=213.199.161.77 sport=36816 dport=53 packets=1 bytes=55 [UNREPLIED] src=213.199.161.77 dst=192.168.20.2 sport=53 dport=36816 packets=0 bytes=0 mark=0 use=1
udp      17 15 src=192.168.5.112 dst=218.168.196.161 sport=1323 dport=40338 packets=1 bytes=133 src=218.168.196.161 dst=192.168.21.2 sport=40338 dport=1323 packets=1 bytes=48 mark=3 use=1
udp      17 16 src=192.168.5.103 dst=137.120.169.72 sport=22319 dport=6381 packets=1 bytes=58 src=137.120.169.72 dst=192.168.21.2 sport=6381 dport=22319 packets=1 bytes=384 mark=3 use=1
udp      17 25 src=192.168.5.102 dst=69.209.135.42 sport=49857 dport=24015 packets=3 bytes=189 [UNREPLIED] src=69.209.135.42 dst=192.168.21.2 sport=24015 dport=49857 packets=0 bytes=0 mark=0 use=1
udp      17 13 src=192.168.21.2 dst=66.218.71.63 sport=56519 dport=53 packets=1 bytes=58 [UNREPLIED] src=66.218.71.63 dst=192.168.21.2 sport=53 dport=56519 packets=0 bytes=0 mark=0 use=1
udp      17 19 src=192.168.21.2 dst=202.43.223.170 sport=40066 dport=53 packets=1 bytes=58 [UNREPLIED] src=202.43.223.170 dst=192.168.21.2 sport=53 dport=40066 packets=0 bytes=0 mark=0 use=1
udp      17 15 src=192.168.20.2 dst=195.47.75.55 sport=51491 dport=53 packets=1 bytes=67 [UNREPLIED] src=195.47.75.55 dst=192.168.20.2 sport=53 dport=51491 packets=0 bytes=0 mark=0 use=1
tcp      6 307155 ESTABLISHED src=192.168.5.170 dst=218.250.188.56 sport=3416 dport=22977 packets=26 bytes=11043 src=218.250.188.56 dst=192.168.21.2 sport=22977 dport=3416 packets=15 bytes=11188 [ASSURED] mark=0 use=1
udp      17 115 src=192.168.5.112 dst=222.167.190.105 sport=1323 dport=39422 packets=3 bytes=696 src=222.167.190.105 dst=192.168.21.2 sport=39422 dport=1323 packets=3 bytes=157 [ASSURED] mark=3 use=1
udp      17 1 src=192.168.21.2 dst=75.125.29.226 sport=63791 dport=53 packets=1 bytes=67 [UNREPLIED] src=75.125.29.226 dst=192.168.21.2 sport=53 dport=63791 packets=0 bytes=0 mark=0 use=1
udp      17 6 src=60.248.42.28 dst=60.248.42.28 sport=24452 dport=53 packets=1 bytes=72 [UNREPLIED] src=60.248.42.28 dst=60.248.42.28 sport=53 dport=24452 packets=0 bytes=0 mark=0 use=1
udp      17 6 src=192.168.20.2 dst=207.46.66.126 sport=51202 dport=53 packets=1 bytes=60 [UNREPLIED] src=207.46.66.126 dst=192.168.20.2 sport=53 dport=51202 packets=0 bytes=0 mark=0 use=1
udp      17 28 src=192.168.5.103 dst=67.66.93.224 sport=22319 dport=64200 packets=1 bytes=136 [UNREPLIED] src=67.66.93.224 dst=192.168.21.2 sport=64200 dport=22319 packets=0 bytes=0 mark=3 use=1
tcp      6 303119 ESTABLISHED src=192.168.5.156 dst=140.134.30.150 sport=1028 dport=9094 packets=2085 bytes=190279 src=140.134.30.150 dst=192.168.21.2 sport=9094 dport=1028 packets=2011 bytes=207359 [ASSURED] mark=768 use=1
udp      17 7 src=192.168.21.2 dst=75.125.29.226 sport=64031 dport=53 packets=1 bytes=67 [UNREPLIED] src=75.125.29.226 dst=192.168.21.2 sport=53 dport=64031 packets=0 bytes=0 mark=0 use=1
tcp      6 56 TIME_WAIT src=192.168.5.166 dst=202.43.195.52 sport=1152 dport=80 packets=6 bytes=786 src=202.43.195.52 dst=192.168.21.2 sport=80 dport=1152 packets=5 bytes=975 [ASSURED] mark=3 use=1
udp      17 21 src=192.168.20.2 dst=193.85.2.117 sport=50590 dport=53 packets=1 bytes=67 [UNREPLIED] src=193.85.2.117 dst=192.168.20.2 sport=53 dport=50590 packets=0 bytes=0 mark=0 use=1
tcp      6 281926 ESTABLISHED src=192.168.5.173 dst=76.226.163.229 sport=2351 dport=80 packets=109 bytes=30382 src=76.226.163.229 dst=192.168.21.2 sport=80 dport=2351 packets=107 bytes=20031 [ASSURED] mark=771 use=1
udp      17 8 src=192.168.20.2 dst=207.46.66.126 sport=57192 dport=53 packets=1 bytes=60 [UNREPLIED] src=207.46.66.126 dst=192.168.20.2 sport=53 dport=57192 packets=0 bytes=0 mark=0 use=1
udp      17 13 src=192.168.20.2 dst=213.199.161.77 sport=54717 dport=53 packets=1 bytes=60 [UNREPLIED] src=213.199.161.77 dst=192.168.20.2 sport=53 dport=54717 packets=0 bytes=0 mark=0 use=1
udp      17 21 src=192.168.5.103 dst=82.64.175.198 sport=22319 dport=10325 packets=3 bytes=174 [UNREPLIED] src=82.64.175.198 dst=192.168.21.2 sport=10325 dport=22319 packets=0 bytes=0 mark=0 use=1
udp      17 21 src=192.168.21.2 dst=192.168.21.1 sport=44472 dport=53 packets=1 bytes=75 [UNREPLIED] src=192.168.21.1 dst=192.168.21.2 sport=53 dport=44472 packets=0 bytes=0 mark=0 use=1
tcp      6 381439 ESTABLISHED src=192.168.5.16 dst=121.10.104.142 sport=2225 dport=80 packets=14 bytes=6963 src=121.10.104.142 dst=60.248.42.28 sport=80 dport=2225 packets=13 bytes=9354 [ASSURED] mark=1 use=1
udp      17 19 src=192.168.21.2 dst=217.12.4.104 sport=3983 dport=53 packets=1 bytes=65 [UNREPLIED] src=217.12.4.104 dst=192.168.21.2 sport=53 dport=3983 packets=0 bytes=0 mark=0 use=1
udp      17 27 src=192.168.20.2 dst=193.85.2.117 sport=65448 dport=53 packets=1 bytes=67 [UNREPLIED] src=193.85.2.117 dst=192.168.20.2 sport=53 dport=65448 packets=0 bytes=0 mark=0 use=1
udp      17 4 src=192.168.5.103 dst=91.148.151.3 sport=22319 dport=11741 packets=2 bytes=124 src=91.148.151.3 dst=192.168.21.2 sport=11741 dport=22319 packets=1 bytes=760 mark=3 use=1
udp      17 14 src=192.168.20.2 dst=192.168.20.1 sport=37001 dport=53 packets=1 bytes=85 [UNREPLIED] src=192.168.20.1 dst=192.168.20.2 sport=53 dport=37001 packets=0 bytes=0 mark=0 use=1
udp      17 13 src=60.248.42.28 dst=60.248.42.28 sport=10335 dport=53 packets=1 bytes=72 [UNREPLIED] src=60.248.42.28 dst=60.248.42.28 sport=53 dport=10335 packets=0 bytes=0 mark=0 use=1
tcp      6 431997 ESTABLISHED src=192.168.5.116 dst=220.140.17.56 sport=4860 dport=7248 packets=127 bytes=28144 src=220.140.17.56 dst=192.168.21.2 sport=7248 dport=4860 packets=135 bytes=14821 [ASSURED] mark=3 use=1
tcp      6 381439 ESTABLISHED src=192.168.5.16 dst=121.10.104.142 sport=2229 dport=80 packets=9 bytes=6763 src=121.10.104.142 dst=60.248.42.28 sport=80 dport=2229 packets=6 bytes=284 [ASSURED] mark=1 use=1
udp      17 8 src=192.168.20.2 dst=195.47.75.55 sport=2986 dport=53 packets=1 bytes=67 [UNREPLIED] src=195.47.75.55 dst=192.168.20.2 sport=53 dport=2986 packets=0 bytes=0 mark=0 use=1
udp      17 7 src=192.168.21.2 dst=75.125.29.226 sport=27173 dport=53 packets=1 bytes=67 [UNREPLIED] src=75.125.29.226 dst=192.168.21.2 sport=53 dport=27173 packets=0 bytes=0 mark=0 use=1
udp      17 16 src=192.168.5.103 dst=59.115.50.173 sport=22319 dport=32650 packets=3 bytes=405 [UNREPLIED] src=59.115.50.173 dst=192.168.21.2 sport=32650 dport=22319 packets=0 bytes=0 mark=0 use=1
tcp      6 431977 ESTABLISHED src=192.168.5.205 dst=68.142.233.141 sport=1231 dport=443 packets=8 bytes=3142 src=68.142.233.141 dst=192.168.21.2 sport=443 dport=1231 packets=7 bytes=2380 [ASSURED] mark=3 use=1
udp      17 9 src=60.248.42.28 dst=61.200.83.50 sport=63998 dport=53 packets=1 bytes=65 src=61.200.83.50 dst=60.248.42.28 sport=53 dport=63998 packets=1 bytes=183 mark=1 use=1
udp      17 7 src=192.168.20.2 dst=213.199.161.77 sport=25161 dport=53 packets=1 bytes=60 [UNREPLIED] src=213.199.161.77 dst=192.168.20.2 sport=53 dport=25161 packets=0 bytes=0 mark=0 use=1
udp      17 29 src=192.168.5.102 dst=68.111.248.87 sport=49857 dport=22528 packets=1 bytes=66 [UNREPLIED] src=68.111.248.87 dst=192.168.21.2 sport=22528 dport=49857 packets=0 bytes=0 mark=0 use=1
tcp      6 375930 ESTABLISHED src=192.168.5.16 dst=121.10.104.142 sport=1280 dport=80 packets=11 bytes=6835 src=121.10.104.142 dst=192.168.20.2 sport=80 dport=1280 packets=9 bytes=4069 [ASSURED] mark=2 use=1
tcp      6 286269 ESTABLISHED src=192.168.5.166 dst=121.200.135.12 sport=3043 dport=8301 packets=2818 bytes=848734 src=121.200.135.12 dst=192.168.21.2 sport=8301 dport=3043 packets=3183 bytes=3085085 [ASSURED] mark=768 use=1
udp      17 0 src=192.168.21.2 dst=65.57.86.48 sport=4676 dport=53 packets=1 bytes=73 [UNREPLIED] src=65.57.86.48 dst=192.168.21.2 sport=53 dport=4676 packets=0 bytes=0 mark=0 use=1
tcp      6 427720 ESTABLISHED src=192.168.5.123 dst=61.230.176.196 sport=3642 dport=26701 packets=8135 bytes=1035330 src=61.230.176.196 dst=60.248.42.28 sport=26701 dport=3642 packets=8379 bytes=821113 [ASSURED] mark=1 use=1
udp      17 29 src=192.168.21.2 dst=207.68.160.190 sport=42352 dport=53 packets=1 bytes=67 [UNREPLIED] src=207.68.160.190 dst=192.168.21.2 sport=53 dport=42352 packets=0 bytes=0 mark=0 use=1
tcp      6 431985 ESTABLISHED src=192.168.5.166 dst=207.46.108.77 sport=1122 dport=80 packets=49 bytes=11698 src=207.46.108.77 dst=192.168.21.2 sport=80 dport=1122 packets=27 bytes=10706 [ASSURED] mark=3 use=1
udp      17 8 src=192.168.21.2 dst=203.84.197.239 sport=50531 dport=53 packets=1 bytes=58 [UNREPLIED] src=203.84.197.239 dst=192.168.21.2 sport=53 dport=50531 packets=0 bytes=0 mark=0 use=1
udp      17 10 src=192.168.21.2 dst=202.43.223.170 sport=44720 dport=53 packets=1 bytes=58 [UNREPLIED] src=202.43.223.170 dst=192.168.21.2 sport=53 dport=44720 packets=0 bytes=0 mark=0 use=1
tcp      6 112 TIME_WAIT src=122.123.38.79 dst=60.248.42.28 sport=1148 dport=110 packets=8 bytes=366 src=60.248.42.28 dst=122.123.38.79 sport=110 dport=1148 packets=9 bytes=445 [ASSURED] mark=1 use=1
tcp      6 374233 ESTABLISHED src=192.168.5.173 dst=59.125.100.209 sport=4253 dport=37991 packets=183 bytes=26431 src=59.125.100.209 dst=192.168.21.2 sport=37991 dport=4253 packets=154 bytes=18084 [ASSURED] mark=0 use=1
udp      17 9 src=192.168.20.2 dst=210.59.230.88 sport=18908 dport=53 packets=1 bytes=63 [UNREPLIED] src=210.59.230.88 dst=192.168.20.2 sport=53 dport=18908 packets=0 bytes=0 mark=0 use=1
udp      17 6 src=192.168.21.2 dst=202.43.223.170 sport=55264 dport=53 packets=1 bytes=58 [UNREPLIED] src=202.43.223.170 dst=192.168.21.2 sport=53 dport=55264 packets=0 bytes=0 mark=0 use=1
udp      17 3 src=60.248.42.28 dst=60.248.42.28 sport=42807 dport=53 packets=1 bytes=72 [UNREPLIED] src=60.248.42.28 dst=60.248.42.28 sport=53 dport=42807 packets=0 bytes=0 mark=0 use=1
udp      17 9 src=192.168.21.2 dst=207.68.160.190 sport=50731 dport=53 packets=1 bytes=60 [UNREPLIED] src=207.68.160.190 dst=192.168.21.2 sport=53 dport=50731 packets=0 bytes=0 mark=0 use=1
udp      17 12 src=192.168.20.2 dst=195.47.75.55 sport=18751 dport=53 packets=1 bytes=67 [UNREPLIED] src=195.47.75.55 dst=192.168.20.2 sport=53 dport=18751 packets=0 bytes=0 mark=0 use=1
tcp      6 359441 ESTABLISHED src=192.168.5.106 dst=60.248.71.10 sport=1082 dport=13397 packets=34 bytes=7157 src=60.248.71.10 dst=60.248.42.28 sport=13397 dport=1082 packets=41 bytes=3766 [ASSURED] mark=0 use=1
udp      17 12 src=192.168.5.102 dst=140.113.218.9 sport=49857 dport=21807 packets=3 bytes=267 src=140.113.218.9 dst=192.168.21.2 sport=21807 dport=49857 packets=1 bytes=48 mark=3 use=1
tcp      6 318426 ESTABLISHED src=192.168.5.204 dst=221.225.243.236 sport=1738 dport=12577 packets=47 bytes=2615 src=221.225.243.236 dst=192.168.21.2 sport=12577 dport=1738 packets=44 bytes=43498 [ASSURED] mark=3 use=1
udp      17 5 src=192.168.20.2 dst=65.55.238.126 sport=31478 dport=53 packets=1 bytes=60 [UNREPLIED] src=65.55.238.126 dst=192.168.20.2 sport=53 dport=31478 packets=0 bytes=0 mark=0 use=1
udp      17 2 src=60.248.42.28 dst=60.248.42.28 sport=15179 dport=53 packets=1 bytes=72 [UNREPLIED] src=60.248.42.28 dst=60.248.42.28 sport=53 dport=15179 packets=0 bytes=0 mark=0 use=1
udp      17 1 src=192.168.20.2 dst=213.199.161.77 sport=56777 dport=53 packets=1 bytes=60 [UNREPLIED] src=213.199.161.77 dst=192.168.20.2 sport=53 dport=56777 packets=0 bytes=0 mark=0 use=1
udp      17 12 src=192.168.21.2 dst=68.142.255.16 sport=45713 dport=53 packets=1 bytes=58 [UNREPLIED] src=68.142.255.16 dst=192.168.21.2 sport=53 dport=45713 packets=0 bytes=0 mark=0 use=1
udp      17 29 src=192.168.5.102 dst=210.124.133.142 sport=49857 dport=23674 packets=1 bytes=144 [UNREPLIED] src=210.124.133.142 dst=192.168.21.2 sport=23674 dport=49857 packets=0 bytes=0 mark=0 use=1
udp      17 17 src=192.168.5.162 dst=220.72.230.185 sport=1803 dport=44019 packets=1 bytes=70 src=220.72.230.185 dst=192.168.21.2 sport=44019 dport=1803 packets=1 bytes=47 mark=3 use=1
udp      17 26 src=192.168.20.2 dst=207.46.66.126 sport=16820 dport=53 packets=1 bytes=67 [UNREPLIED] src=207.46.66.126 dst=192.168.20.2 sport=53 dport=16820 packets=0 bytes=0 mark=0 use=1
udp      17 5 src=192.168.5.102 dst=220.140.17.56 sport=49857 dport=7248 packets=3 bytes=456 [UNREPLIED] src=220.140.17.56 dst=192.168.21.2 sport=7248 dport=49857 packets=0 bytes=0 mark=0 use=1
udp      17 16 src=192.168.21.2 dst=68.142.255.16 sport=23434 dport=53 packets=1 bytes=58 [UNREPLIED] src=68.142.255.16 dst=192.168.21.2 sport=53 dport=23434 packets=0 bytes=0 mark=0 use=1
udp      17 27 src=192.168.20.2 dst=193.85.2.117 sport=63773 dport=53 packets=1 bytes=67 [UNREPLIED] src=193.85.2.117 dst=192.168.20.2 sport=53 dport=63773 packets=0 bytes=0 mark=0 use=1
udp      17 19 src=192.168.20.2 dst=192.168.20.1 sport=31013 dport=53 packets=1 bytes=74 [UNREPLIED] src=192.168.20.1 dst=192.168.20.2 sport=53 dport=31013 packets=0 bytes=0 mark=0 use=1
tcp      6 431897 ESTABLISHED src=88.79.64.82 dst=60.248.42.28 sport=59264 dport=25 packets=2 bytes=88 src=60.248.42.28 dst=88.79.64.82 sport=25 dport=59264 packets=1 bytes=48 [ASSURED] mark=1 use=1
udp      17 5 src=192.168.5.110 dst=219.73.77.73 sport=64882 dport=48275 packets=1 bytes=139 src=219.73.77.73 dst=192.168.21.2 sport=48275 dport=64882 packets=1 bytes=48 mark=3 use=1
tcp      6 426312 ESTABLISHED src=192.168.5.110 dst=60.248.42.28 sport=3561 dport=33 packets=19 bytes=5100 src=60.248.42.28 dst=192.168.5.110 sport=33 dport=3561 packets=20 bytes=3808 [ASSURED] mark=0 use=1
udp      17 24 src=192.168.5.1 dst=192.168.5.255 sport=631 dport=631 packets=2 bytes=398 [UNREPLIED] src=192.168.5.255 dst=192.168.5.1 sport=631 dport=631 packets=0 bytes=0 mark=0 use=1
udp      17 19 src=192.168.21.2 dst=202.43.223.170 sport=15111 dport=53 packets=1 bytes=58 [UNREPLIED] src=202.43.223.170 dst=192.168.21.2 sport=53 dport=15111 packets=0 bytes=0 mark=0 use=1
udp      17 22 src=192.168.21.2 dst=68.142.255.16 sport=20684 dport=53 packets=1 bytes=58 [UNREPLIED] src=68.142.255.16 dst=192.168.21.2 sport=53 dport=20684 packets=0 bytes=0 mark=0 use=1
udp      17 8 src=192.168.21.2 dst=68.142.255.16 sport=52488 dport=53 packets=1 bytes=58 [UNREPLIED] src=68.142.255.16 dst=192.168.21.2 sport=53 dport=52488 packets=0 bytes=0 mark=0 use=1
udp      17 28 src=192.168.21.2 dst=68.142.196.63 sport=22756 dport=53 packets=1 bytes=58 [UNREPLIED] src=68.142.196.63 dst=192.168.21.2 sport=53 dport=22756 packets=0 bytes=0 mark=0 use=1
tcp      6 387851 ESTABLISHED src=192.168.5.16 dst=121.10.108.181 sport=3111 dport=80 packets=45 bytes=13784 src=121.10.108.181 dst=192.168.21.2 sport=80 dport=3111 packets=59 bytes=80812 [ASSURED] mark=3 use=1
tcp      6 359438 ESTABLISHED src=192.168.5.106 dst=61.230.11.251 sport=1068 dport=6005 packets=58 bytes=6762 src=61.230.11.251 dst=60.248.42.28 sport=6005 dport=1068 packets=52 bytes=14717 [ASSURED] mark=0 use=1
udp      17 13 src=192.168.20.2 dst=213.199.161.77 sport=59812 dport=53 packets=1 bytes=60 [UNREPLIED] src=213.199.161.77 dst=192.168.20.2 sport=53 dport=59812 packets=0 bytes=0 mark=0 use=1
tcp      6 359433 ESTABLISHED src=192.168.5.106 dst=219.70.223.177 sport=1101 dport=29135 packets=31 bytes=7040 src=219.70.223.177 dst=60.248.42.28 sport=29135 dport=1101 packets=39 bytes=3683 [ASSURED] mark=0 use=1
udp      17 1 src=192.168.20.2 dst=207.46.66.126 sport=15334 dport=53 packets=1 bytes=60 [UNREPLIED] src=207.46.66.126 dst=192.168.20.2 sport=53 dport=15334 packets=0 bytes=0 mark=0 use=1
tcp      6 283850 ESTABLISHED src=192.168.5.6 dst=140.127.116.221 sport=3422 dport=35842 packets=2 bytes=435 [UNREPLIED] src=140.127.116.221 dst=192.168.21.2 sport=35842 dport=1024 packets=0 bytes=0 mark=0 use=1
udp      17 10 src=192.168.5.110 dst=189.23.129.73 sport=64882 dport=17286 packets=1 bytes=58 src=189.23.129.73 dst=192.168.21.2 sport=17286 dport=64882 packets=1 bytes=46 mark=3 use=1
tcp      6 339977 ESTABLISHED src=192.168.5.131 dst=140.112.141.142 sport=1612 dport=443 packets=3312 bytes=314192 src=140.112.141.142 dst=192.168.21.2 sport=443 dport=1612 packets=4247 bytes=370460 [ASSURED] mark=3 use=1
udp      17 0 src=192.168.20.2 dst=195.47.75.55 sport=35333 dport=53 packets=1 bytes=67 [UNREPLIED] src=195.47.75.55 dst=192.168.20.2 sport=53 dport=35333 packets=0 bytes=0 mark=0 use=1
udp      17 4 src=192.168.5.103 dst=84.201.225.122 sport=22319 dport=44444 packets=2 bytes=122 src=84.201.225.122 dst=192.168.21.2 sport=44444 dport=22319 packets=1 bytes=46 mark=3 use=1
udp      17 7 src=192.168.21.2 dst=217.12.4.104 sport=27545 dport=53 packets=1 bytes=58 [UNREPLIED] src=217.12.4.104 dst=192.168.21.2 sport=53 dport=27545 packets=0 bytes=0 mark=0 use=1
tcp      6 281925 ESTABLISHED src=192.168.5.106 dst=207.46.106.89 sport=2285 dport=1863 packets=54 bytes=11157 src=207.46.106.89 dst=192.168.21.2 sport=1863 dport=2285 packets=73 bytes=33728 [ASSURED] mark=768 use=1
udp      17 25 src=192.168.5.102 dst=82.18.188.127 sport=49857 dport=7031 packets=3 bytes=177 [UNREPLIED] src=82.18.188.127 dst=192.168.21.2 sport=7031 dport=49857 packets=0 bytes=0 mark=0 use=1
udp      17 17 src=192.168.21.2 dst=207.68.160.190 sport=38589 dport=53 packets=1 bytes=60 [UNREPLIED] src=207.68.160.190 dst=192.168.21.2 sport=53 dport=38589 packets=0 bytes=0 mark=0 use=1
udp      17 21 src=192.168.5.103 dst=71.237.232.124 sport=22319 dport=11420 packets=3 bytes=180 [UNREPLIED] src=71.237.232.124 dst=192.168.21.2 sport=11420 dport=22319 packets=0 bytes=0 mark=0 use=1
udp      17 25 src=60.248.42.28 dst=60.248.42.28 sport=21545 dport=53 packets=1 bytes=73 [UNREPLIED] src=60.248.42.28 dst=60.248.42.28 sport=53 dport=21545 packets=0 bytes=0 mark=0 use=1
udp      17 12 src=192.168.21.2 dst=75.125.29.226 sport=5084 dport=53 packets=1 bytes=67 [UNREPLIED] src=75.125.29.226 dst=192.168.21.2 sport=53 dport=5084 packets=0 bytes=0 mark=0 use=1
udp      17 178 src=192.168.5.166 dst=192.168.5.1 sport=1075 dport=53 packets=206 bytes=14269 src=192.168.5.1 dst=192.168.5.166 sport=53 dport=1075 packets=136 bytes=11123 [ASSURED] mark=0 use=1
tcp      6 431947 ESTABLISHED src=192.168.5.107 dst=137.132.165.117 sport=1542 dport=4493 packets=37 bytes=10085 src=137.132.165.117 dst=192.168.21.2 sport=4493 dport=1542 packets=34 bytes=4773 [ASSURED] mark=3 use=1
udp      17 8 src=192.168.5.103 dst=221.112.99.106 sport=22319 dport=56845 packets=3 bytes=408 [UNREPLIED] src=221.112.99.106 dst=192.168.21.2 sport=56845 dport=22319 packets=0 bytes=0 mark=0 use=1
udp      17 25 src=192.168.21.2 dst=217.12.4.104 sport=4128 dport=53 packets=1 bytes=58 [UNREPLIED] src=217.12.4.104 dst=192.168.21.2 sport=53 dport=4128 packets=0 bytes=0 mark=0 use=1
udp      17 0 src=192.168.5.102 dst=80.195.180.193 sport=49857 dport=52501 packets=3 bytes=183 [UNREPLIED] src=80.195.180.193 dst=192.168.21.2 sport=52501 dport=49857 packets=0 bytes=0 mark=0 use=1
udp      17 1 src=192.168.21.2 dst=66.218.71.63 sport=49694 dport=53 packets=1 bytes=58 [UNREPLIED] src=66.218.71.63 dst=192.168.21.2 sport=53 dport=49694 packets=0 bytes=0 mark=0 use=1
udp      17 21 src=192.168.5.103 dst=24.193.6.213 sport=22319 dport=33886 packets=3 bytes=183 [UNREPLIED] src=24.193.6.213 dst=192.168.21.2 sport=33886 dport=22319 packets=0 bytes=0 mark=0 use=1
udp      17 27 src=60.248.42.28 dst=60.248.42.28 sport=19770 dport=53 packets=1 bytes=73 [UNREPLIED] src=60.248.42.28 dst=60.248.42.28 sport=53 dport=19770 packets=0 bytes=0 mark=0 use=1
tcp      6 25 TIME_WAIT src=118.170.89.23 dst=60.248.42.28 sport=4249 dport=110 packets=23 bytes=1001 src=60.248.42.28 dst=118.170.89.23 sport=110 dport=4249 packets=24 bytes=9433 [ASSURED] mark=1 use=1
udp      17 28 src=192.168.21.2 dst=75.125.29.226 sport=1071 dport=53 packets=1 bytes=67 [UNREPLIED] src=75.125.29.226 dst=192.168.21.2 sport=53 dport=1071 packets=0 bytes=0 mark=0 use=1
udp      17 6 src=192.168.5.103 dst=61.230.176.196 sport=22319 dport=26701 packets=2 bytes=294 src=61.230.176.196 dst=192.168.21.2 sport=26701 dport=22319 packets=1 bytes=48 mark=3 use=1
udp      17 4 src=192.168.5.102 dst=218.168.196.161 sport=49857 dport=40338 packets=3 bytes=429 [UNREPLIED] src=218.168.196.161 dst=192.168.21.2 sport=40338 dport=49857 packets=0 bytes=0 mark=0 use=1
udp      17 29 src=192.168.5.102 dst=222.7.178.107 sport=49857 dport=57366 packets=1 bytes=61 [UNREPLIED] src=222.7.178.107 dst=192.168.21.2 sport=57366 dport=49857 packets=0 bytes=0 mark=0 use=1
udp      17 17 src=192.168.20.2 dst=193.85.2.117 sport=21016 dport=53 packets=1 bytes=67 [UNREPLIED] src=193.85.2.117 dst=192.168.20.2 sport=53 dport=21016 packets=0 bytes=0 mark=0 use=1
tcp      6 5 SYN_SENT src=192.168.5.204 dst=75.126.53.174 sport=2848 dport=80 packets=3 bytes=144 [UNREPLIED] src=75.126.53.174 dst=192.168.21.2 sport=80 dport=2848 packets=0 bytes=0 mark=0 use=1
tcp      6 374334 ESTABLISHED src=192.168.5.103 dst=152.3.44.84 sport=2608 dport=80 packets=206 bytes=41096 src=152.3.44.84 dst=192.168.21.2 sport=80 dport=2608 packets=201 bytes=24316 [ASSURED] mark=0 use=1
udp      17 7 src=192.168.20.2 dst=207.46.66.126 sport=5641 dport=53 packets=1 bytes=60 [UNREPLIED] src=207.46.66.126 dst=192.168.20.2 sport=53 dport=5641 packets=0 bytes=0 mark=0 use=1
tcp      6 426985 ESTABLISHED src=192.168.5.116 dst=207.46.108.38 sport=1324 dport=1863 packets=86 bytes=12416 src=207.46.108.38 dst=192.168.21.2 sport=1863 dport=1324 packets=97 bytes=30859 [ASSURED] mark=3 use=1
udp      17 24 src=192.168.20.2 dst=193.85.2.117 sport=57461 dport=53 packets=1 bytes=67 [UNREPLIED] src=193.85.2.117 dst=192.168.20.2 sport=53 dport=57461 packets=0 bytes=0 mark=0 use=1
udp      17 22 src=192.168.5.103 dst=209.250.12.86 sport=22319 dport=8471 packets=3 bytes=447 [UNREPLIED] src=209.250.12.86 dst=192.168.21.2 sport=8471 dport=22319 packets=0 bytes=0 mark=0 use=1
tcp      6 348892 ESTABLISHED src=192.168.5.16 dst=219.70.214.201 sport=1347 dport=53744 packets=2196 bytes=230309 src=219.70.214.201 dst=192.168.21.2 sport=53744 dport=1347 packets=2305 bytes=252052 [ASSURED] mark=0 use=1
udp      17 2 src=192.168.21.2 dst=207.68.160.190 sport=15314 dport=53 packets=1 bytes=60 [UNREPLIED] src=207.68.160.190 dst=192.168.21.2 sport=53 dport=15314 packets=0 bytes=0 mark=0 use=1
udp      17 1 src=192.168.20.2 dst=61.213.182.233 sport=54641 dport=53 packets=1 bytes=65 [UNREPLIED] src=61.213.182.233 dst=192.168.20.2 sport=53 dport=54641 packets=0 bytes=0 mark=0 use=1
udp      17 11 src=192.168.20.2 dst=195.47.75.55 sport=43097 dport=53 packets=1 bytes=67 [UNREPLIED] src=195.47.75.55 dst=192.168.20.2 sport=53 dport=43097 packets=0 bytes=0 mark=0 use=1
tcp      6 349227 ESTABLISHED src=192.168.5.166 dst=207.46.107.84 sport=1280 dport=1863 packets=231 bytes=14876 src=207.46.107.84 dst=192.168.21.2 sport=1863 dport=1280 packets=168 bytes=36688 [ASSURED] mark=0 use=1
udp      17 18 src=192.168.20.2 dst=193.85.2.117 sport=34038 dport=53 packets=1 bytes=67 [UNREPLIED] src=193.85.2.117 dst=192.168.20.2 sport=53 dport=34038 packets=0 bytes=0 mark=0 use=1
udp      17 17 src=192.168.21.2 dst=203.84.197.239 sport=18418 dport=53 packets=1 bytes=58 [UNREPLIED] src=203.84.197.239 dst=192.168.21.2 sport=53 dport=18418 packets=0 bytes=0 mark=0 use=1
udp      17 9 src=192.168.20.2 dst=207.46.66.126 sport=26831 dport=53 packets=1 bytes=60 [UNREPLIED] src=207.46.66.126 dst=192.168.20.2 sport=53 dport=26831 packets=0 bytes=0 mark=0 use=1
udp      17 7 src=192.168.21.2 dst=66.218.71.63 sport=11523 dport=53 packets=1 bytes=60 [UNREPLIED] src=66.218.71.63 dst=192.168.21.2 sport=53 dport=11523 packets=0 bytes=0 mark=0 use=1
udp      17 7 src=192.168.21.2 dst=207.68.160.190 sport=18600 dport=53 packets=1 bytes=60 [UNREPLIED] src=207.68.160.190 dst=192.168.21.2 sport=53 dport=18600 packets=0 bytes=0 mark=0 use=1
udp      17 3 src=192.168.20.2 dst=193.85.2.117 sport=8571 dport=53 packets=1 bytes=67 [UNREPLIED] src=193.85.2.117 dst=192.168.20.2 sport=53 dport=8571 packets=0 bytes=0 mark=0 use=1
tcp      6 374732 ESTABLISHED src=192.168.5.16 dst=121.10.107.70 sport=1098 dport=80 packets=48 bytes=6596 src=121.10.107.70 dst=192.168.20.2 sport=80 dport=1098 packets=67 bytes=72824 [ASSURED] mark=2 use=1
udp      17 15 src=192.168.21.2 dst=217.12.4.104 sport=13358 dport=53 packets=1 bytes=58 [UNREPLIED] src=217.12.4.104 dst=192.168.21.2 sport=53 dport=13358 packets=0 bytes=0 mark=0 use=1
tcp      6 386843 ESTABLISHED src=192.168.5.16 dst=60.190.114.95 sport=2800 dport=80 packets=59 bytes=16738 src=60.190.114.95 dst=192.168.21.2 sport=80 dport=2800 packets=72 bytes=77476 [ASSURED] mark=3 use=1
udp      17 1 src=192.168.21.2 dst=75.125.29.226 sport=58566 dport=53 packets=1 bytes=67 [UNREPLIED] src=75.125.29.226 dst=192.168.21.2 sport=53 dport=58566 packets=0 bytes=0 mark=0 use=1
udp      17 7 src=192.168.21.2 dst=217.12.4.104 sport=50935 dport=53 packets=1 bytes=58 [UNREPLIED] src=217.12.4.104 dst=192.168.21.2 sport=53 dport=50935 packets=0 bytes=0 mark=0 use=1
tcp      6 386717 ESTABLISHED src=192.168.5.16 dst=60.190.114.95 sport=2938 dport=80 packets=56 bytes=15310 src=60.190.114.95 dst=192.168.21.2 sport=80 dport=2938 packets=67 bytes=81820 [ASSURED] mark=3 use=1
tcp      6 374640 ESTABLISHED src=192.168.5.16 dst=59.34.216.125 sport=1079 dport=80 packets=17 bytes=12424 src=59.34.216.125 dst=192.168.20.2 sport=80 dport=1079 packets=7 bytes=6096 [ASSURED] mark=2 use=1
udp      17 21 src=192.168.21.2 dst=207.68.160.190 sport=10421 dport=53 packets=1 bytes=60 [UNREPLIED] src=207.68.160.190 dst=192.168.21.2 sport=53 dport=10421 packets=0 bytes=0 mark=0 use=1
udp      17 28 src=192.168.5.103 dst=24.13.246.130 sport=22319 dport=43099 packets=2 bytes=130 [UNREPLIED] src=24.13.246.130 dst=192.168.21.2 sport=43099 dport=22319 packets=0 bytes=0 mark=0 use=1
tcp      6 380483 ESTABLISHED src=192.168.5.173 dst=61.231.48.171 sport=4556 dport=59953 packets=532 bytes=96615 src=61.231.48.171 dst=192.168.20.2 sport=59953 dport=4556 packets=514 bytes=55490 [ASSURED] mark=2 use=1
udp      17 17 src=192.168.5.102 dst=189.25.51.223 sport=49857 dport=45146 packets=3 bytes=180 [UNREPLIED] src=189.25.51.223 dst=192.168.21.2 sport=45146 dport=49857 packets=0 bytes=0 mark=0 use=1
udp      17 5 src=192.168.20.2 dst=65.54.240.126 sport=56696 dport=53 packets=1 bytes=60 [UNREPLIED] src=65.54.240.126 dst=192.168.20.2 sport=53 dport=56696 packets=0 bytes=0 mark=0 use=1
udp      17 3 src=192.168.20.2 dst=213.199.161.77 sport=16733 dport=53 packets=1 bytes=60 [UNREPLIED] src=213.199.161.77 dst=192.168.20.2 sport=53 dport=16733 packets=0 bytes=0 mark=0 use=1
udp      17 28 src=192.168.20.2 dst=65.55.238.126 sport=60169 dport=53 packets=1 bytes=67 [UNREPLIED] src=65.55.238.126 dst=192.168.20.2 sport=53 dport=60169 packets=0 bytes=0 mark=0 use=1
udp      17 29 src=60.248.42.28 dst=60.248.42.28 sport=58510 dport=53 packets=1 bytes=73 [UNREPLIED] src=60.248.42.28 dst=60.248.42.28 sport=53 dport=58510 packets=0 bytes=0 mark=0 use=1
udp      17 25 src=192.168.5.102 dst=87.253.114.97 sport=49857 dport=63277 packets=3 bytes=195 [UNREPLIED] src=87.253.114.97 dst=192.168.21.2 sport=63277 dport=49857 packets=0 bytes=0 mark=0 use=1
udp      17 7 src=60.248.42.28 dst=61.200.83.50 sport=27603 dport=53 packets=1 bytes=73 src=61.200.83.50 dst=60.248.42.28 sport=53 dport=27603 packets=1 bytes=191 mark=1 use=1
tcp      6 281862 ESTABLISHED src=192.168.5.106 dst=59.124.54.66 sport=2320 dport=443 packets=19 bytes=2720 src=59.124.54.66 dst=192.168.21.2 sport=443 dport=2320 packets=21 bytes=24884 [ASSURED] mark=771 use=1
tcp      6 431979 ESTABLISHED src=192.168.5.136 dst=68.36.220.222 sport=1228 dport=443 packets=49 bytes=12332 src=68.36.220.222 dst=192.168.21.2 sport=443 dport=1228 packets=43 bytes=4586 [ASSURED] mark=3 use=1
udp      17 24 src=60.248.42.28 dst=60.248.42.255 sport=631 dport=631 packets=2 bytes=424 [UNREPLIED] src=60.248.42.255 dst=60.248.42.28 sport=631 dport=631 packets=0 bytes=0 mark=0 use=1
udp      17 24 src=192.168.21.2 dst=75.125.29.226 sport=25733 dport=53 packets=1 bytes=67 [UNREPLIED] src=75.125.29.226 dst=192.168.21.2 sport=53 dport=25733 packets=0 bytes=0 mark=0 use=1
udp      17 22 src=192.168.20.2 dst=65.55.238.126 sport=42008 dport=53 packets=1 bytes=60 [UNREPLIED] src=65.55.238.126 dst=192.168.20.2 sport=53 dport=42008 packets=0 bytes=0 mark=0 use=1
udp      17 19 src=192.168.21.2 dst=192.168.21.1 sport=7101 dport=53 packets=1 bytes=84 [UNREPLIED] src=192.168.21.1 dst=192.168.21.2 sport=53 dport=7101 packets=0 bytes=0 mark=0 use=1
udp      17 21 src=192.168.5.103 dst=97.97.146.125 sport=22319 dport=39567 packets=3 bytes=186 [UNREPLIED] src=97.97.146.125 dst=192.168.21.2 sport=39567 dport=22319 packets=0 bytes=0 mark=0 use=1
udp      17 23 src=192.168.21.2 dst=66.218.71.63 sport=24289 dport=53 packets=1 bytes=58 [UNREPLIED] src=66.218.71.63 dst=192.168.21.2 sport=53 dport=24289 packets=0 bytes=0 mark=0 use=1
udp      17 22 src=192.168.20.2 dst=193.85.2.117 sport=54701 dport=53 packets=1 bytes=67 [UNREPLIED] src=193.85.2.117 dst=192.168.20.2 sport=53 dport=54701 packets=0 bytes=0 mark=0 use=1
udp      17 0 src=192.168.20.2 dst=195.47.75.55 sport=58728 dport=53 packets=1 bytes=67 [UNREPLIED] src=195.47.75.55 dst=192.168.20.2 sport=53 dport=58728 packets=0 bytes=0 mark=0 use=1
udp      17 20 src=192.168.5.112 dst=59.190.179.66 sport=1323 dport=64382 packets=3 bytes=399 [UNREPLIED] src=59.190.179.66 dst=192.168.21.2 sport=64382 dport=1323 packets=0 bytes=0 mark=0 use=1
tcp      6 431965 ESTABLISHED src=192.168.5.110 dst=219.81.195.208 sport=3685 dport=80 packets=38 bytes=3131 src=219.81.195.208 dst=192.168.21.2 sport=80 dport=3685 packets=24 bytes=3640 [ASSURED] mark=3 use=1
tcp      6 386920 ESTABLISHED src=192.168.5.16 dst=60.190.114.95 sport=2794 dport=80 packets=56 bytes=15106 src=60.190.114.95 dst=192.168.21.2 sport=80 dport=2794 packets=72 bytes=76415 [ASSURED] mark=3 use=1
udp      17 27 src=192.168.20.2 dst=207.46.66.126 sport=27985 dport=53 packets=1 bytes=60 [UNREPLIED] src=207.46.66.126 dst=192.168.20.2 sport=53 dport=27985 packets=0 bytes=0 mark=0 use=1
tcp      6 305196 ESTABLISHED src=192.168.5.166 dst=58.241.221.205 sport=1268 dport=9162 packets=1460 bytes=311130 src=58.241.221.205 dst=192.168.21.2 sport=9162 dport=1268 packets=1733 bytes=857892 [ASSURED] mark=0 use=1
udp      17 5 src=192.168.20.2 dst=210.59.230.85 sport=19376 dport=53 packets=1 bytes=63 [UNREPLIED] src=210.59.230.85 dst=192.168.20.2 sport=53 dport=19376 packets=0 bytes=0 mark=0 use=1
udp      17 7 src=192.168.21.2 dst=192.168.21.1 sport=15564 dport=53 packets=1 bytes=75 [UNREPLIED] src=192.168.21.1 dst=192.168.21.2 sport=53 dport=15564 packets=0 bytes=0 mark=0 use=1
udp      17 12 src=192.168.20.2 dst=65.55.238.126 sport=56834 dport=53 packets=1 bytes=60 [UNREPLIED] src=65.55.238.126 dst=192.168.20.2 sport=53 dport=56834 packets=0 bytes=0 mark=0 use=1
udp      17 10 src=192.168.20.2 dst=207.46.66.126 sport=43292 dport=53 packets=1 bytes=60 [UNREPLIED] src=207.46.66.126 dst=192.168.20.2 sport=53 dport=43292 packets=0 bytes=0 mark=0 use=1
udp      17 9 src=60.248.42.28 dst=60.248.42.28 sport=44801 dport=53 packets=1 bytes=72 [UNREPLIED] src=60.248.42.28 dst=60.248.42.28 sport=53 dport=44801 packets=0 bytes=0 mark=0 use=1
tcp      6 79 SYN_SENT src=192.168.5.166 dst=203.84.196.242 sport=1161 dport=80 packets=1 bytes=48 [UNREPLIED] src=203.84.196.242 dst=192.168.21.2 sport=80 dport=1161 packets=0 bytes=0 mark=0 use=1
udp      17 5 src=192.168.21.2 dst=217.12.4.104 sport=34348 dport=53 packets=1 bytes=58 [UNREPLIED] src=217.12.4.104 dst=192.168.21.2 sport=53 dport=34348 packets=0 bytes=0 mark=0 use=1
udp      17 10 src=192.168.5.103 dst=69.209.222.237 sport=22319 dport=14959 packets=3 bytes=411 [UNREPLIED] src=69.209.222.237 dst=192.168.21.2 sport=14959 dport=22319 packets=0 bytes=0 mark=3 use=1
tcp      6 31 SYN_SENT src=192.168.5.166 dst=74.6.155.239 sport=1149 dport=80 packets=1 bytes=48 [UNREPLIED] src=74.6.155.239 dst=192.168.21.2 sport=80 dport=1149 packets=0 bytes=0 mark=0 use=1
tcp      6 356773 ESTABLISHED src=192.168.5.16 dst=60.190.118.169 sport=2200 dport=80 packets=3 bytes=4476 [UNREPLIED] src=60.190.118.169 dst=192.168.21.2 sport=80 dport=2200 packets=0 bytes=0 mark=0 use=1
udp      17 26 src=192.168.20.2 dst=195.47.75.55 sport=40497 dport=53 packets=1 bytes=67 [UNREPLIED] src=195.47.75.55 dst=192.168.20.2 sport=53 dport=40497 packets=0 bytes=0 mark=0 use=1
udp      17 0 src=192.168.5.102 dst=203.129.36.14 sport=49857 dport=35692 packets=3 bytes=189 [UNREPLIED] src=203.129.36.14 dst=192.168.21.2 sport=35692 dport=49857 packets=0 bytes=0 mark=0 use=1
udp      17 20 src=192.168.20.2 dst=193.85.2.117 sport=10546 dport=53 packets=1 bytes=67 [UNREPLIED] src=193.85.2.117 dst=192.168.20.2 sport=53 dport=10546 packets=0 bytes=0 mark=0 use=1
udp      17 3 src=192.168.21.2 dst=66.218.71.63 sport=21587 dport=53 packets=1 bytes=58 [UNREPLIED] src=66.218.71.63 dst=192.168.21.2 sport=53 dport=21587 packets=0 bytes=0 mark=0 use=1
udp      17 14 src=60.248.42.28 dst=66.211.168.226 sport=56117 dport=53 packets=1 bytes=60 src=66.211.168.226 dst=60.248.42.28 sport=53 dport=56117 packets=1 bytes=340 mark=1 use=1
udp      17 2 src=192.168.21.2 dst=68.142.196.63 sport=46387 dport=53 packets=1 bytes=65 [UNREPLIED] src=68.142.196.63 dst=192.168.21.2 sport=53 dport=46387 packets=0 bytes=0 mark=0 use=1
udp      17 6 src=192.168.21.2 dst=202.43.223.170 sport=7232 dport=53 packets=1 bytes=58 [UNREPLIED] src=202.43.223.170 dst=192.168.21.2 sport=53 dport=7232 packets=0 bytes=0 mark=0 use=1
udp      17 12 src=192.168.20.2 dst=65.55.238.126 sport=49454 dport=53 packets=1 bytes=60 [UNREPLIED] src=65.55.238.126 dst=192.168.20.2 sport=53 dport=49454 packets=0 bytes=0 mark=0 use=1
udp      17 20 src=192.168.20.2 dst=213.199.161.77 sport=15120 dport=53 packets=1 bytes=60 [UNREPLIED] src=213.199.161.77 dst=192.168.20.2 sport=53 dport=15120 packets=0 bytes=0 mark=0 use=1
tcp      6 386534 ESTABLISHED src=192.168.5.6 dst=218.210.248.247 sport=1517 dport=55299 packets=68 bytes=15339 src=218.210.248.247 dst=192.168.21.2 sport=55299 dport=1517 packets=79 bytes=10466 [ASSURED] mark=3 use=1
tcp      6 349239 ESTABLISHED src=192.168.5.116 dst=207.46.107.35 sport=1207 dport=1863 packets=2071 bytes=92275 src=207.46.107.35 dst=192.168.21.2 sport=1863 dport=1207 packets=2168 bytes=534227 [ASSURED] mark=3 use=1
udp      17 14 src=192.168.20.2 dst=193.85.2.117 sport=13166 dport=53 packets=1 bytes=67 [UNREPLIED] src=193.85.2.117 dst=192.168.20.2 sport=53 dport=13166 packets=0 bytes=0 mark=0 use=1
udp      17 13 src=192.168.21.2 dst=216.113.188.122 sport=27537 dport=53 packets=1 bytes=60 [UNREPLIED] src=216.113.188.122 dst=192.168.21.2 sport=53 dport=27537 packets=0 bytes=0 mark=0 use=1
tcp      6 374840 ESTABLISHED src=192.168.5.135 dst=59.113.162.187 sport=1251 dport=56011 packets=43 bytes=14144 src=59.113.162.187 dst=192.168.20.2 sport=56011 dport=1251 packets=40 bytes=13523 [ASSURED] mark=2 use=1
udp      17 8 src=192.168.20.2 dst=193.85.2.117 sport=28759 dport=53 packets=1 bytes=67 [UNREPLIED] src=193.85.2.117 dst=192.168.20.2 sport=53 dport=28759 packets=0 bytes=0 mark=0 use=1
udp      17 5 src=192.168.20.2 dst=193.85.2.117 sport=1329 dport=53 packets=1 bytes=67 [UNREPLIED] src=193.85.2.117 dst=192.168.20.2 sport=53 dport=1329 packets=0 bytes=0 mark=0 use=1
udp      17 1 src=192.168.21.2 dst=68.142.196.63 sport=40048 dport=53 packets=1 bytes=58 [UNREPLIED] src=68.142.196.63 dst=192.168.21.2 sport=53 dport=40048 packets=0 bytes=0 mark=0 use=1
udp      17 20 src=192.168.20.2 dst=207.46.66.126 sport=21429 dport=53 packets=1 bytes=60 [UNREPLIED] src=207.46.66.126 dst=192.168.20.2 sport=53 dport=21429 packets=0 bytes=0 mark=0 use=1
tcp      6 431969 ESTABLISHED src=192.168.5.145 dst=221.191.98.178 sport=1237 dport=28258 packets=24 bytes=3834 src=221.191.98.178 dst=192.168.21.2 sport=28258 dport=1237 packets=14 bytes=833 [ASSURED] mark=3 use=1
udp      17 23 src=192.168.20.2 dst=195.47.75.55 sport=62292 dport=53 packets=1 bytes=67 [UNREPLIED] src=195.47.75.55 dst=192.168.20.2 sport=53 dport=62292 packets=0 bytes=0 mark=0 use=1
tcp      6 357991 ESTABLISHED src=192.168.5.102 dst=59.115.152.25 sport=1834 dport=41125 packets=361 bytes=86545 src=59.115.152.25 dst=192.168.21.2 sport=41125 dport=1834 packets=411 bytes=75316 [ASSURED] mark=3 use=1
udp      17 25 src=60.248.42.28 dst=60.248.42.28 sport=50395 dport=53 packets=1 bytes=73 [UNREPLIED] src=60.248.42.28 dst=60.248.42.28 sport=53 dport=50395 packets=0 bytes=0 mark=0 use=1
tcp      6 349811 ESTABLISHED src=192.168.5.116 dst=207.46.108.18 sport=2653 dport=1863 packets=93 bytes=9765 src=207.46.108.18 dst=192.168.21.2 sport=1863 dport=2653 packets=127 bytes=42115 [ASSURED] mark=0 use=1
udp      17 24 src=192.168.21.2 dst=68.142.196.63 sport=35279 dport=53 packets=1 bytes=58 [UNREPLIED] src=68.142.196.63 dst=192.168.21.2 sport=53 dport=35279 packets=0 bytes=0 mark=0 use=1
udp      17 9 src=60.248.42.28 dst=60.248.42.28 sport=50555 dport=53 packets=1 bytes=72 [UNREPLIED] src=60.248.42.28 dst=60.248.42.28 sport=53 dport=50555 packets=0 bytes=0 mark=0 use=1
tcp      6 45 CLOSE_WAIT src=192.168.5.145 dst=60.248.42.28 sport=1263 dport=25 packets=3 bytes=128 src=60.248.42.28 dst=192.168.5.145 sport=25 dport=1263 packets=2 bytes=88 [ASSURED] mark=0 use=1
udp      17 28 src=192.168.5.103 dst=60.249.22.166 sport=22319 dport=29057 packets=2 bytes=124 [UNREPLIED] src=60.249.22.166 dst=192.168.21.2 sport=29057 dport=22319 packets=0 bytes=0 mark=0 use=1
udp      17 21 src=192.168.5.103 dst=84.194.155.131 sport=22319 dport=55372 packets=3 bytes=189 [UNREPLIED] src=84.194.155.131 dst=192.168.21.2 sport=55372 dport=22319 packets=0 bytes=0 mark=0 use=1
tcp      6 29 TIME_WAIT src=192.168.5.166 dst=202.43.195.52 sport=1141 dport=80 packets=26 bytes=1652 src=202.43.195.52 dst=192.168.21.2 sport=80 dport=1141 packets=37 bytes=51766 [ASSURED] mark=3 use=1
udp      17 1 src=192.168.21.2 dst=66.218.71.63 sport=4556 dport=53 packets=1 bytes=65 [UNREPLIED] src=66.218.71.63 dst=192.168.21.2 sport=53 dport=4556 packets=0 bytes=0 mark=0 use=1
tcp      6 420930 ESTABLISHED src=192.168.5.205 dst=68.180.217.9 sport=1058 dport=5050 packets=30 bytes=5350 src=68.180.217.9 dst=192.168.21.2 sport=5050 dport=1058 packets=27 bytes=9243 [ASSURED] mark=3 use=1
udp      17 19 src=60.248.42.28 dst=60.248.42.28 sport=2993 dport=53 packets=1 bytes=73 [UNREPLIED] src=60.248.42.28 dst=60.248.42.28 sport=53 dport=2993 packets=0 bytes=0 mark=0 use=1
udp      17 13 src=192.168.21.2 dst=75.125.29.226 sport=26381 dport=53 packets=1 bytes=67 [UNREPLIED] src=75.125.29.226 dst=192.168.21.2 sport=53 dport=26381 packets=0 bytes=0 mark=0 use=1
udp      17 12 src=192.168.21.2 dst=203.84.197.239 sport=57814 dport=53 packets=1 bytes=58 [UNREPLIED] src=203.84.197.239 dst=192.168.21.2 sport=53 dport=57814 packets=0 bytes=0 mark=0 use=1
tcp      6 10 TIME_WAIT src=118.169.67.138 dst=60.248.42.28 sport=1571 dport=443 packets=16 bytes=4912 src=60.248.42.28 dst=118.169.67.138 sport=443 dport=1571 packets=21 bytes=19279 [ASSURED] mark=1 use=1
udp      17 7 src=192.168.20.2 dst=65.54.240.126 sport=37132 dport=53 packets=1 bytes=62 [UNREPLIED] src=65.54.240.126 dst=192.168.20.2 sport=53 dport=37132 packets=0 bytes=0 mark=0 use=1
udp      17 12 src=192.168.21.2 dst=168.95.1.1 sport=48823 dport=53 packets=1 bytes=79 [UNREPLIED] src=168.95.1.1 dst=192.168.21.2 sport=53 dport=48823 packets=0 bytes=0 mark=0 use=1
tcp      6 281084 ESTABLISHED src=192.168.5.121 dst=206.21.140.74 sport=1528 dport=16264 packets=149 bytes=21244 src=206.21.140.74 dst=192.168.21.2 sport=16264 dport=1528 packets=166 bytes=19598 [ASSURED] mark=768 use=1
udp      17 131 src=192.168.5.102 dst=192.168.5.1 sport=2330 dport=53 packets=8 bytes=522 src=192.168.5.1 dst=192.168.5.102 sport=53 dport=2330 packets=7 bytes=783 [ASSURED] mark=0 use=1
tcp      6 374711 ESTABLISHED src=192.168.5.16 dst=121.10.107.70 sport=1095 dport=80 packets=52 bytes=6880 src=121.10.107.70 dst=192.168.20.2 sport=80 dport=1095 packets=69 bytes=77748 [ASSURED] mark=2 use=1
udp      17 3 src=192.168.20.2 dst=192.168.20.1 sport=5878 dport=53 packets=1 bytes=74 [UNREPLIED] src=192.168.20.1 dst=192.168.20.2 sport=53 dport=5878 packets=0 bytes=0 mark=0 use=1
udp      17 15 src=60.248.42.28 dst=60.248.42.28 sport=15318 dport=53 packets=1 bytes=72 [UNREPLIED] src=60.248.42.28 dst=60.248.42.28 sport=53 dport=15318 packets=0 bytes=0 mark=0 use=1
udp      17 18 src=192.168.20.2 dst=207.46.66.126 sport=34764 dport=53 packets=1 bytes=60 [UNREPLIED] src=207.46.66.126 dst=192.168.20.2 sport=53 dport=34764 packets=0 bytes=0 mark=0 use=1
udp      17 10 src=192.168.5.102 dst=146.6.25.71 sport=49857 dport=36037 packets=3 bytes=192 [UNREPLIED] src=146.6.25.71 dst=192.168.21.2 sport=36037 dport=49857 packets=0 bytes=0 mark=0 use=1
udp      17 28 src=192.168.5.102 dst=75.73.68.230 sport=49857 dport=12226 packets=2 bytes=116 src=75.73.68.230 dst=192.168.21.2 sport=12226 dport=49857 packets=1 bytes=46 mark=3 use=1
tcp      6 386928 ESTABLISHED src=192.168.5.16 dst=121.10.104.142 sport=2999 dport=80 packets=50 bytes=8419 src=121.10.104.142 dst=192.168.21.2 sport=80 dport=2999 packets=67 bytes=77476 [ASSURED] mark=3 use=1
udp      17 4 src=192.168.5.102 dst=81.220.60.204 sport=49857 dport=63346 packets=3 bytes=186 [UNREPLIED] src=81.220.60.204 dst=192.168.21.2 sport=63346 dport=49857 packets=0 bytes=0 mark=0 use=1
tcp      6 33 TIME_WAIT src=192.168.5.166 dst=203.84.196.242 sport=1144 dport=80 packets=6 bytes=735 src=203.84.196.242 dst=192.168.21.2 sport=80 dport=1144 packets=4 bytes=718 [ASSURED] mark=3 use=1
tcp      6 386929 ESTABLISHED src=192.168.5.16 dst=121.10.104.142 sport=3000 dport=80 packets=48 bytes=8315 src=121.10.104.142 dst=192.168.21.2 sport=80 dport=3000 packets=66 bytes=75984 [ASSURED] mark=3 use=1
udp      17 5 src=60.248.42.28 dst=60.248.42.28 sport=1281 dport=53 packets=1 bytes=72 [UNREPLIED] src=60.248.42.28 dst=60.248.42.28 sport=53 dport=1281 packets=0 bytes=0 mark=0 use=1
tcp      6 378725 ESTABLISHED src=192.168.5.155 dst=202.83.40.17 sport=2779 dport=30430 packets=26 bytes=9419 src=202.83.40.17 dst=192.168.20.2 sport=30430 dport=2779 packets=35 bytes=3835 [ASSURED] mark=2 use=1
tcp      6 306364 ESTABLISHED src=192.168.5.166 dst=125.229.166.62 sport=1585 dport=15621 packets=1 bytes=417 [UNREPLIED] src=125.229.166.62 dst=192.168.21.2 sport=15621 dport=1585 packets=0 bytes=0 mark=0 use=1
tcp      6 386505 ESTABLISHED src=192.168.5.16 dst=60.190.118.169 sport=2894 dport=80 packets=3 bytes=4476 [UNREPLIED] src=60.190.118.169 dst=192.168.21.2 sport=80 dport=2894 packets=0 bytes=0 mark=0 use=1
tcp      6 65 SYN_SENT src=192.168.5.102 dst=59.126.248.234 sport=2475 dport=80 packets=3 bytes=144 [UNREPLIED] src=59.126.248.234 dst=192.168.21.2 sport=80 dport=2475 packets=0 bytes=0 mark=0 use=1
udp      17 0 src=192.168.21.2 dst=202.43.223.170 sport=50595 dport=53 packets=1 bytes=58 [UNREPLIED] src=202.43.223.170 dst=192.168.21.2 sport=53 dport=50595 packets=0 bytes=0 mark=0 use=1
udp      17 29 src=192.168.20.2 dst=207.46.66.126 sport=33845 dport=53 packets=1 bytes=60 [UNREPLIED] src=207.46.66.126 dst=192.168.20.2 sport=53 dport=33845 packets=0 bytes=0 mark=0 use=1
udp      17 12 src=192.168.20.2 dst=65.55.238.126 sport=31139 dport=53 packets=1 bytes=60 [UNREPLIED] src=65.55.238.126 dst=192.168.20.2 sport=53 dport=31139 packets=0 bytes=0 mark=0 use=1
tcp      6 431999 ESTABLISHED src=192.168.5.103 dst=192.168.5.1 sport=1448 dport=33 packets=80437 bytes=4665100 src=192.168.5.1 dst=192.168.5.103 sport=33 dport=1448 packets=109420 bytes=39172752 [ASSURED] mark=0 use=1
udp      17 28 src=192.168.5.103 dst=125.225.133.74 sport=22319 dport=62487 packets=2 bytes=124 [UNREPLIED] src=125.225.133.74 dst=192.168.21.2 sport=62487 dport=22319 packets=0 bytes=0 mark=0 use=1
tcp      6 431867 ESTABLISHED src=192.168.5.205 dst=68.180.217.8 sport=1215 dport=5050 packets=35 bytes=6174 src=68.180.217.8 dst=192.168.21.2 sport=5050 dport=1215 packets=32 bytes=9883 [ASSURED] mark=3 use=1
udp      17 28 src=192.168.5.103 dst=69.176.138.210 sport=22319 dport=17505 packets=2 bytes=122 [UNREPLIED] src=69.176.138.210 dst=192.168.21.2 sport=17505 dport=22319 packets=0 bytes=0 mark=0 use=1
udp      17 5 src=192.168.5.102 dst=59.127.65.17 sport=49857 dport=64921 packets=3 bytes=456 [UNREPLIED] src=59.127.65.17 dst=192.168.21.2 sport=64921 dport=49857 packets=0 bytes=0 mark=0 use=1
udp      17 12 src=192.168.5.102 dst=59.104.119.180 sport=49857 dport=15986 packets=3 bytes=441 [UNREPLIED] src=59.104.119.180 dst=192.168.21.2 sport=15986 dport=49857 packets=0 bytes=0 mark=0 use=1
tcp      6 340234 ESTABLISHED src=192.168.5.112 dst=122.253.141.226 sport=1077 dport=29318 packets=13 bytes=667 src=122.253.141.226 dst=192.168.21.2 sport=29318 dport=1077 packets=18 bytes=1115 [ASSURED] mark=3 use=1
udp      17 3 src=192.168.21.2 dst=75.125.29.226 sport=55659 dport=53 packets=1 bytes=67 [UNREPLIED] src=75.125.29.226 dst=192.168.21.2 sport=53 dport=55659 packets=0 bytes=0 mark=0 use=1
tcp      6 356268 ESTABLISHED src=192.168.5.16 dst=60.190.118.169 sport=2141 dport=80 packets=3 bytes=4476 [UNREPLIED] src=60.190.118.169 dst=192.168.21.2 sport=80 dport=2141 packets=0 bytes=0 mark=0 use=1
udp      17 10 src=192.168.5.103 dst=218.167.76.30 sport=22319 dport=1058 packets=3 bytes=441 [UNREPLIED] src=218.167.76.30 dst=192.168.21.2 sport=1058 dport=22319 packets=0 bytes=0 mark=0 use=1
udp      17 28 src=60.248.42.28 dst=60.248.42.28 sport=4388 dport=53 packets=1 bytes=73 [UNREPLIED] src=60.248.42.28 dst=60.248.42.28 sport=53 dport=4388 packets=0 bytes=0 mark=0 use=1
udp      17 22 src=192.168.21.2 dst=168.95.192.1 sport=54900 dport=53 packets=2 bytes=144 [UNREPLIED] src=168.95.192.1 dst=192.168.21.2 sport=53 dport=54900 packets=0 bytes=0 mark=0 use=1
tcp      6 431549 ESTABLISHED src=209.85.198.189 dst=60.248.42.28 sport=13968 dport=25 packets=2 bytes=112 src=60.248.42.28 dst=209.85.198.189 sport=25 dport=13968 packets=1 bytes=60 [ASSURED] mark=1 use=1
udp      17 156 src=192.168.5.103 dst=140.138.242.155 sport=22319 dport=7067 packets=3 bytes=871 src=140.138.242.155 dst=192.168.21.2 sport=7067 dport=22319 packets=2 bytes=98 [ASSURED] mark=3 use=1
udp      17 3 src=192.168.21.2 dst=217.12.4.104 sport=32002 dport=53 packets=1 bytes=65 [UNREPLIED] src=217.12.4.104 dst=192.168.21.2 sport=53 dport=32002 packets=0 bytes=0 mark=0 use=1
udp      17 17 src=192.168.21.2 dst=168.95.1.1 sport=12966 dport=53 packets=1 bytes=74 [UNREPLIED] src=168.95.1.1 dst=192.168.21.2 sport=53 dport=12966 packets=0 bytes=0 mark=0 use=1
udp      17 8 src=192.168.21.2 dst=68.142.255.16 sport=7361 dport=53 packets=1 bytes=65 [UNREPLIED] src=68.142.255.16 dst=192.168.21.2 sport=53 dport=7361 packets=0 bytes=0 mark=0 use=1
udp      17 8 src=192.168.20.2 dst=193.85.2.117 sport=53215 dport=53 packets=1 bytes=67 [UNREPLIED] src=193.85.2.117 dst=192.168.20.2 sport=53 dport=53215 packets=0 bytes=0 mark=0 use=1
tcp      6 307087 ESTABLISHED src=192.168.5.166 dst=145.94.38.247 sport=2114 dport=16946 packets=2111 bytes=662667 src=145.94.38.247 dst=192.168.21.2 sport=16946 dport=2114 packets=2117 bytes=1231017 [ASSURED] mark=0 use=1
udp      17 26 src=192.168.5.112 dst=69.203.202.130 sport=1323 dport=65320 packets=2 bytes=264 [UNREPLIED] src=69.203.202.130 dst=192.168.21.2 sport=65320 dport=1323 packets=0 bytes=0 mark=0 use=1
udp      17 14 src=192.168.20.2 dst=193.85.2.117 sport=5307 dport=53 packets=1 bytes=67 [UNREPLIED] src=193.85.2.117 dst=192.168.20.2 sport=53 dport=5307 packets=0 bytes=0 mark=0 use=1
tcp      6 431958 ESTABLISHED src=168.95.4.115 dst=60.248.42.28 sport=52976 dport=25 packets=2 bytes=84 src=60.248.42.28 dst=168.95.4.115 sport=25 dport=52976 packets=1 bytes=44 [ASSURED] mark=1 use=1
tcp      6 431997 ESTABLISHED src=192.168.5.111 dst=218.210.250.123 sport=3337 dport=44623 packets=121 bytes=23335 src=218.210.250.123 dst=192.168.21.2 sport=44623 dport=3337 packets=115 bytes=17107 [ASSURED] mark=3 use=1
tcp      6 429191 ESTABLISHED src=192.168.5.6 dst=210.203.61.248 sport=1026 dport=56730 packets=76 bytes=10460 src=210.203.61.248 dst=192.168.21.2 sport=56730 dport=1026 packets=82 bytes=8323 [ASSURED] mark=3 use=1
tcp      6 387103 ESTABLISHED src=192.168.5.16 dst=121.10.104.142 sport=3011 dport=80 packets=50 bytes=8403 src=121.10.104.142 dst=192.168.21.2 sport=80 dport=3011 packets=66 bytes=75984 [ASSURED] mark=3 use=1
udp      17 3 src=192.168.20.2 dst=65.54.240.126 sport=54035 dport=53 packets=1 bytes=60 [UNREPLIED] src=65.54.240.126 dst=192.168.20.2 sport=53 dport=54035 packets=0 bytes=0 mark=0 use=1
udp      17 173 src=192.168.5.140 dst=192.168.5.1 sport=1033 dport=53 packets=166 bytes=9858 src=192.168.5.1 dst=192.168.5.140 sport=53 dport=1033 packets=65 bytes=6932 [ASSURED] mark=0 use=1
udp      17 1 src=192.168.20.2 dst=195.47.75.55 sport=22672 dport=53 packets=1 bytes=67 [UNREPLIED] src=195.47.75.55 dst=192.168.20.2 sport=53 dport=22672 packets=0 bytes=0 mark=0 use=1
udp      17 4 src=60.248.42.28 dst=60.248.42.28 sport=42030 dport=53 packets=1 bytes=72 [UNREPLIED] src=60.248.42.28 dst=60.248.42.28 sport=53 dport=42030 packets=0 bytes=0 mark=0 use=1
udp      17 11 src=192.168.20.2 dst=213.199.161.77 sport=39464 dport=53 packets=1 bytes=60 [UNREPLIED] src=213.199.161.77 dst=192.168.20.2 sport=53 dport=39464 packets=0 bytes=0 mark=0 use=1
udp      17 6 src=192.168.21.2 dst=207.68.160.190 sport=15414 dport=53 packets=1 bytes=60 [UNREPLIED] src=207.68.160.190 dst=192.168.21.2 sport=53 dport=15414 packets=0 bytes=0 mark=0 use=1
udp      17 5 src=192.168.21.2 dst=68.142.196.63 sport=30651 dport=53 packets=1 bytes=58 [UNREPLIED] src=68.142.196.63 dst=192.168.21.2 sport=53 dport=30651 packets=0 bytes=0 mark=0 use=1
tcp      6 431615 ESTABLISHED src=192.168.5.205 dst=216.155.193.143 sport=1077 dport=5050 packets=53 bytes=7397 src=216.155.193.143 dst=192.168.21.2 sport=5050 dport=1077 packets=52 bytes=9963 [ASSURED] mark=3 use=1
udp      17 5 src=192.168.20.2 dst=213.199.161.77 sport=49039 dport=53 packets=1 bytes=60 [UNREPLIED] src=213.199.161.77 dst=192.168.20.2 sport=53 dport=49039 packets=0 bytes=0 mark=0 use=1
tcp      6 31 SYN_SENT src=192.168.5.166 dst=74.6.155.239 sport=1148 dport=80 packets=1 bytes=48 [UNREPLIED] src=74.6.155.239 dst=192.168.21.2 sport=80 dport=1148 packets=0 bytes=0 mark=0 use=1
tcp      6 381441 ESTABLISHED src=192.168.5.16 dst=121.10.104.142 sport=2230 dport=80 packets=9 bytes=6763 src=121.10.104.142 dst=60.248.42.28 sport=80 dport=2230 packets=6 bytes=284 [ASSURED] mark=1 use=1
udp      17 9 src=192.168.21.2 dst=66.218.71.63 sport=63619 dport=53 packets=1 bytes=58 [UNREPLIED] src=66.218.71.63 dst=192.168.21.2 sport=53 dport=63619 packets=0 bytes=0 mark=0 use=1
udp      17 28 src=192.168.5.103 dst=76.192.158.162 sport=22319 dport=28398 packets=2 bytes=122 [UNREPLIED] src=76.192.158.162 dst=192.168.21.2 sport=28398 dport=22319 packets=0 bytes=0 mark=0 use=1
udp      17 11 src=192.168.5.162 dst=24.31.100.155 sport=1803 dport=16784 packets=3 bytes=393 [UNREPLIED] src=24.31.100.155 dst=192.168.21.2 sport=16784 dport=1803 packets=0 bytes=0 mark=0 use=1
udp      17 11 src=192.168.21.2 dst=66.218.71.63 sport=9839 dport=53 packets=1 bytes=58 [UNREPLIED] src=66.218.71.63 dst=192.168.21.2 sport=53 dport=9839 packets=0 bytes=0 mark=0 use=1
udp      17 2 src=192.168.20.2 dst=65.55.238.126 sport=52525 dport=53 packets=1 bytes=60 [UNREPLIED] src=65.55.238.126 dst=192.168.20.2 sport=53 dport=52525 packets=0 bytes=0 mark=0 use=1
udp      17 105 src=192.168.5.162 dst=125.225.133.184 sport=1803 dport=51905 packets=2 bytes=513 src=125.225.133.184 dst=192.168.21.2 sport=51905 dport=1803 packets=2 bytes=100 [ASSURED] mark=3 use=1
udp      17 1 src=192.168.21.2 dst=66.218.71.63 sport=24825 dport=53 packets=1 bytes=58 [UNREPLIED] src=66.218.71.63 dst=192.168.21.2 sport=53 dport=24825 packets=0 bytes=0 mark=0 use=1
udp      17 21 src=192.168.5.103 dst=85.182.78.126 sport=22319 dport=11357 packets=3 bytes=195 [UNREPLIED] src=85.182.78.126 dst=192.168.21.2 sport=11357 dport=22319 packets=0 bytes=0 mark=0 use=1
udp      17 16 src=192.168.21.2 dst=66.218.71.63 sport=18007 dport=53 packets=1 bytes=58 [UNREPLIED] src=66.218.71.63 dst=192.168.21.2 sport=53 dport=18007 packets=0 bytes=0 mark=0 use=1
udp      17 6 src=192.168.20.2 dst=207.46.66.126 sport=21252 dport=53 packets=1 bytes=60 [UNREPLIED] src=207.46.66.126 dst=192.168.20.2 sport=53 dport=21252 packets=0 bytes=0 mark=0 use=1
udp      17 4 src=192.168.5.103 dst=82.56.76.98 sport=22319 dport=9501 packets=2 bytes=120 src=82.56.76.98 dst=192.168.21.2 sport=9501 dport=22319 packets=1 bytes=449 mark=3 use=1
udp      17 28 src=192.168.5.103 dst=84.232.187.200 sport=22319 dport=13541 packets=2 bytes=126 [UNREPLIED] src=84.232.187.200 dst=192.168.21.2 sport=13541 dport=22319 packets=0 bytes=0 mark=0 use=1
udp      17 6 src=192.168.20.2 dst=193.85.2.117 sport=37121 dport=53 packets=1 bytes=67 [UNREPLIED] src=193.85.2.117 dst=192.168.20.2 sport=53 dport=37121 packets=0 bytes=0 mark=0 use=1
udp      17 11 src=192.168.20.2 dst=65.55.238.126 sport=20951 dport=53 packets=1 bytes=60 [UNREPLIED] src=65.55.238.126 dst=192.168.20.2 sport=53 dport=20951 packets=0 bytes=0 mark=0 use=1
udp      17 24 src=192.168.20.2 dst=202.165.104.22 sport=14135 dport=53 packets=1 bytes=58 [UNREPLIED] src=202.165.104.22 dst=192.168.20.2 sport=53 dport=14135 packets=0 bytes=0 mark=0 use=1
udp      17 28 src=192.168.5.116 dst=192.168.5.1 sport=4793 dport=53 packets=3 bytes=201 [UNREPLIED] src=192.168.5.1 dst=192.168.5.116 sport=53 dport=4793 packets=0 bytes=0 mark=0 use=1
udp      17 12 src=192.168.5.102 dst=24.216.53.131 sport=49857 dport=59356 packets=3 bytes=441 src=24.216.53.131 dst=192.168.21.2 sport=59356 dport=49857 packets=1 bytes=48 mark=3 use=1
tcp      6 344216 ESTABLISHED src=192.168.5.106 dst=207.46.107.100 sport=1183 dport=1863 packets=1365 bytes=90481 src=207.46.107.100 dst=192.168.21.2 sport=1863 dport=1183 packets=1410 bytes=349681 [ASSURED] mark=3 use=1
udp      17 6 src=192.168.21.2 dst=75.125.29.226 sport=5484 dport=53 packets=1 bytes=67 [UNREPLIED] src=75.125.29.226 dst=192.168.21.2 sport=53 dport=5484 packets=0 bytes=0 mark=0 use=1
tcp      6 414642 ESTABLISHED src=192.168.5.170 dst=218.172.195.139 sport=2395 dport=13761 packets=37 bytes=4279 src=218.172.195.139 dst=192.168.21.2 sport=13761 dport=2395 packets=39 bytes=9801 [ASSURED] mark=3 use=1
udp      17 3 src=192.168.20.2 dst=65.54.240.126 sport=15608 dport=53 packets=1 bytes=60 [UNREPLIED] src=65.54.240.126 dst=192.168.20.2 sport=53 dport=15608 packets=0 bytes=0 mark=0 use=1
tcp      6 431995 ESTABLISHED src=192.168.5.103 dst=192.168.21.1 sport=4203 dport=4040 packets=386 bytes=53239 src=192.168.21.1 dst=192.168.21.2 sport=4040 dport=4203 packets=461 bytes=397993 [ASSURED] mark=3 use=1
udp      17 130 src=192.168.5.102 dst=24.31.100.155 sport=49857 dport=16784 packets=2 bytes=585 src=24.31.100.155 dst=192.168.21.2 sport=16784 dport=49857 packets=2 bytes=98 [ASSURED] mark=3 use=1
tcp      6 286135 ESTABLISHED src=192.168.5.166 dst=220.131.110.177 sport=4215 dport=10923 packets=1 bytes=1480 [UNREPLIED] src=220.131.110.177 dst=192.168.21.2 sport=10923 dport=4215 packets=0 bytes=0 mark=0 use=1
tcp      6 431897 ESTABLISHED src=65.54.246.220 dst=60.248.42.28 sport=27929 dport=25 packets=2 bytes=88 src=60.248.42.28 dst=65.54.246.220 sport=25 dport=27929 packets=1 bytes=48 [ASSURED] mark=1 use=1
tcp      6 431879 ESTABLISHED src=192.168.5.166 dst=60.248.42.28 sport=1138 dport=25 packets=2 bytes=88 src=60.248.42.28 dst=192.168.5.166 sport=25 dport=1138 packets=1 bytes=48 [ASSURED] mark=0 use=1
tcp      6 355530 ESTABLISHED src=192.168.5.16 dst=60.190.118.169 sport=1858 dport=80 packets=80 bytes=17887 src=60.190.118.169 dst=192.168.21.2 sport=80 dport=1858 packets=114 bytes=88444 [ASSURED] mark=3 use=1
udp      17 23 src=60.248.42.28 dst=60.248.42.28 sport=65179 dport=53 packets=1 bytes=73 [UNREPLIED] src=60.248.42.28 dst=60.248.42.28 sport=53 dport=65179 packets=0 bytes=0 mark=0 use=1
udp      17 29 src=192.168.5.102 dst=61.56.21.7 sport=49857 dport=59149 packets=1 bytes=137 [UNREPLIED] src=61.56.21.7 dst=192.168.21.2 sport=59149 dport=49857 packets=0 bytes=0 mark=0 use=1
tcp      6 382414 ESTABLISHED src=192.168.5.16 dst=60.190.114.95 sport=2462 dport=80 packets=8 bytes=6428 src=60.190.114.95 dst=192.168.20.2 sport=80 dport=2462 packets=1 bytes=48 [ASSURED] mark=2 use=1
udp      17 28 src=192.168.5.110 dst=79.35.178.225 sport=64882 dport=22355 packets=1 bytes=142 [UNREPLIED] src=79.35.178.225 dst=192.168.21.2 sport=22355 dport=64882 packets=0 bytes=0 mark=0 use=1
udp      17 15 src=192.168.20.2 dst=65.55.238.126 sport=24432 dport=53 packets=1 bytes=60 [UNREPLIED] src=65.55.238.126 dst=192.168.20.2 sport=53 dport=24432 packets=0 bytes=0 mark=0 use=1
udp      17 3 src=192.168.20.2 dst=58.86.34.1 sport=4794 dport=53 packets=1 bytes=63 [UNREPLIED] src=58.86.34.1 dst=192.168.20.2 sport=53 dport=4794 packets=0 bytes=0 mark=0 use=1
tcp      6 349230 ESTABLISHED src=192.168.5.112 dst=207.46.107.56 sport=1201 dport=1863 packets=1798 bytes=78861 src=207.46.107.56 dst=192.168.21.2 sport=1863 dport=1201 packets=1848 bytes=450181 [ASSURED] mark=3 use=1
udp      17 6 src=192.168.21.2 dst=207.68.160.190 sport=53833 dport=53 packets=1 bytes=60 [UNREPLIED] src=207.68.160.190 dst=192.168.21.2 sport=53 dport=53833 packets=0 bytes=0 mark=0 use=1
tcp      6 431619 ESTABLISHED src=192.168.5.204 dst=207.46.108.83 sport=2776 dport=1863 packets=65 bytes=5698 src=207.46.108.83 dst=192.168.21.2 sport=1863 dport=2776 packets=77 bytes=14179 [ASSURED] mark=3 use=1
udp      17 153 src=192.168.5.6 dst=192.168.5.1 sport=1055 dport=53 packets=26 bytes=1548 src=192.168.5.1 dst=192.168.5.6 sport=53 dport=1055 packets=1 bytes=153 [ASSURED] mark=0 use=1
udp      17 16 src=192.168.20.2 dst=193.85.2.117 sport=45743 dport=53 packets=1 bytes=67 [UNREPLIED] src=193.85.2.117 dst=192.168.20.2 sport=53 dport=45743 packets=0 bytes=0 mark=0 use=1
udp      17 3 src=192.168.21.2 dst=203.84.197.239 sport=36507 dport=53 packets=1 bytes=58 [UNREPLIED] src=203.84.197.239 dst=192.168.21.2 sport=53 dport=36507 packets=0 bytes=0 mark=0 use=1
udp      17 14 src=192.168.20.2 dst=202.165.104.22 sport=32982 dport=53 packets=1 bytes=65 [UNREPLIED] src=202.165.104.22 dst=192.168.20.2 sport=53 dport=32982 packets=0 bytes=0 mark=0 use=1
udp      17 18 src=192.168.21.2 dst=68.142.255.16 sport=13034 dport=53 packets=1 bytes=58 [UNREPLIED] src=68.142.255.16 dst=192.168.21.2 sport=53 dport=13034 packets=0 bytes=0 mark=0 use=1
udp      17 10 src=192.168.5.102 dst=86.100.82.187 sport=49857 dport=19150 packets=3 bytes=186 [UNREPLIED] src=86.100.82.187 dst=192.168.21.2 sport=19150 dport=49857 packets=0 bytes=0 mark=0 use=1
tcp      6 374711 ESTABLISHED src=192.168.5.16 dst=121.10.107.70 sport=1094 dport=80 packets=51 bytes=6756 src=121.10.107.70 dst=192.168.20.2 sport=80 dport=1094 packets=70 bytes=78752 [ASSURED] mark=2 use=1
udp      17 14 src=192.168.21.2 dst=192.168.21.1 sport=62284 dport=53 packets=1 bytes=74 [UNREPLIED] src=192.168.21.1 dst=192.168.21.2 sport=53 dport=62284 packets=0 bytes=0 mark=0 use=1
udp      17 9 src=192.168.20.2 dst=65.55.238.126 sport=15267 dport=53 packets=1 bytes=60 [UNREPLIED] src=65.55.238.126 dst=192.168.20.2 sport=53 dport=15267 packets=0 bytes=0 mark=0 use=1
udp      17 19 src=192.168.5.102 dst=212.70.134.31 sport=49857 dport=26702 packets=1 bytes=60 src=212.70.134.31 dst=192.168.21.2 sport=26702 dport=49857 packets=1 bytes=429 mark=3 use=1
udp      17 0 src=192.168.5.102 dst=201.17.92.140 sport=49857 dport=42693 packets=3 bytes=192 [UNREPLIED] src=201.17.92.140 dst=192.168.21.2 sport=42693 dport=49857 packets=0 bytes=0 mark=0 use=1
udp      17 6 src=192.168.5.102 dst=219.86.13.94 sport=49857 dport=51120 packets=2 bytes=124 src=219.86.13.94 dst=192.168.21.2 sport=51120 dport=49857 packets=1 bytes=46 mark=3 use=1
udp      17 24 src=192.168.21.2 dst=192.168.21.255 sport=631 dport=631 packets=2 bytes=424 [UNREPLIED] src=192.168.21.255 dst=192.168.21.2 sport=631 dport=631 packets=0 bytes=0 mark=0 use=1
udp      17 8 src=192.168.20.2 dst=192.168.20.1 sport=39048 dport=53 packets=1 bytes=84 [UNREPLIED] src=192.168.20.1 dst=192.168.20.2 sport=53 dport=39048 packets=0 bytes=0 mark=0 use=1
udp      17 29 src=192.168.20.2 dst=65.54.240.126 sport=24548 dport=53 packets=1 bytes=60 [UNREPLIED] src=65.54.240.126 dst=192.168.20.2 sport=53 dport=24548 packets=0 bytes=0 mark=0 use=1
tcp      6 10 TIME_WAIT src=118.169.67.138 dst=60.248.42.28 sport=1575 dport=443 packets=8 bytes=1020 src=60.248.42.28 dst=118.169.67.138 sport=443 dport=1575 packets=8 bytes=677 [ASSURED] mark=1 use=1
udp      17 8 src=192.168.20.2 dst=65.54.240.126 sport=30868 dport=53 packets=1 bytes=60 [UNREPLIED] src=65.54.240.126 dst=192.168.20.2 sport=53 dport=30868 packets=0 bytes=0 mark=0 use=1
udp      17 12 src=192.168.21.2 dst=217.12.4.104 sport=35636 dport=53 packets=1 bytes=58 [UNREPLIED] src=217.12.4.104 dst=192.168.21.2 sport=53 dport=35636 packets=0 bytes=0 mark=0 use=1
udp      17 0 src=192.168.21.2 dst=207.68.160.190 sport=10204 dport=53 packets=1 bytes=60 [UNREPLIED] src=207.68.160.190 dst=192.168.21.2 sport=53 dport=10204 packets=0 bytes=0 mark=0 use=1
udp      17 8 src=192.168.20.2 dst=213.199.161.77 sport=49089 dport=53 packets=1 bytes=55 [UNREPLIED] src=213.199.161.77 dst=192.168.20.2 sport=53 dport=49089 packets=0 bytes=0 mark=0 use=1
udp      17 18 src=192.168.21.2 dst=66.218.71.63 sport=42361 dport=53 packets=1 bytes=58 [UNREPLIED] src=66.218.71.63 dst=192.168.21.2 sport=53 dport=42361 packets=0 bytes=0 mark=0 use=1
tcp      6 38 SYN_SENT src=192.168.5.166 dst=202.43.197.140 sport=1142 dport=80 packets=3 bytes=144 [UNREPLIED] src=202.43.197.140 dst=192.168.21.2 sport=80 dport=1142 packets=0 bytes=0 mark=0 use=1
tcp      6 281931 ESTABLISHED src=192.168.5.123 dst=129.64.64.22 sport=3993 dport=4453 packets=69 bytes=18480 src=129.64.64.22 dst=192.168.21.2 sport=4453 dport=3993 packets=53 bytes=8571 [ASSURED] mark=768 use=1
tcp      6 359451 ESTABLISHED src=192.168.5.106 dst=61.225.1.182 sport=1094 dport=28358 packets=7 bytes=350 src=61.225.1.182 dst=60.248.42.28 sport=28358 dport=1094 packets=13 bytes=879 [ASSURED] mark=0 use=1
tcp      6 61 TIME_WAIT src=192.168.5.166 dst=202.43.195.52 sport=1154 dport=80 packets=5 bytes=735 src=202.43.195.52 dst=192.168.21.2 sport=80 dport=1154 packets=4 bytes=634 [ASSURED] mark=3 use=1
udp      17 4 src=192.168.21.2 dst=68.142.255.16 sport=15070 dport=53 packets=1 bytes=58 [UNREPLIED] src=68.142.255.16 dst=192.168.21.2 sport=53 dport=15070 packets=0 bytes=0 mark=0 use=1
udp      17 28 src=192.168.20.2 dst=213.199.161.77 sport=39256 dport=53 packets=1 bytes=60 [UNREPLIED] src=213.199.161.77 dst=192.168.20.2 sport=53 dport=39256 packets=0 bytes=0 mark=0 use=1
udp      17 7 src=192.168.20.2 dst=193.85.2.117 sport=32814 dport=53 packets=1 bytes=67 [UNREPLIED] src=193.85.2.117 dst=192.168.20.2 sport=53 dport=32814 packets=0 bytes=0 mark=0 use=1
tcp      6 420362 ESTABLISHED src=192.168.5.205 dst=203.69.140.153 sport=1129 dport=30810 packets=1979 bytes=113572 src=203.69.140.153 dst=192.168.21.2 sport=30810 dport=1129 packets=1890 bytes=249776 [ASSURED] mark=3 use=1
udp      17 12 src=192.168.21.2 dst=202.43.223.170 sport=3260 dport=53 packets=1 bytes=58 [UNREPLIED] src=202.43.223.170 dst=192.168.21.2 sport=53 dport=3260 packets=0 bytes=0 mark=0 use=1
tcp      6 359473 ESTABLISHED src=192.168.5.106 dst=60.248.71.10 sport=1119 dport=13397 packets=8 bytes=374 src=60.248.71.10 dst=60.248.42.28 sport=13397 dport=1119 packets=13 bytes=859 [ASSURED] mark=0 use=1
udp      17 14 src=192.168.20.2 dst=65.55.238.126 sport=25585 dport=53 packets=1 bytes=60 [UNREPLIED] src=65.55.238.126 dst=192.168.20.2 sport=53 dport=25585 packets=0 bytes=0 mark=0 use=1
udp      17 3 src=192.168.5.102 dst=210.24.125.251 sport=49857 dport=11138 packets=2 bytes=310 src=210.24.125.251 dst=192.168.21.2 sport=11138 dport=49857 packets=1 bytes=48 mark=3 use=1
tcp      6 386453 ESTABLISHED src=192.168.5.16 dst=60.190.114.95 sport=2944 dport=80 packets=52 bytes=13708 src=60.190.114.95 dst=192.168.21.2 sport=80 dport=2944 packets=64 bytes=89806 [ASSURED] mark=3 use=1
tcp      6 13 TIME_WAIT src=192.168.5.102 dst=60.248.42.28 sport=2472 dport=80 packets=5 bytes=861 src=60.248.42.28 dst=192.168.5.102 sport=80 dport=2472 packets=5 bytes=396 [ASSURED] mark=0 use=1
udp      17 9 src=192.168.20.2 dst=193.85.2.117 sport=1054 dport=53 packets=1 bytes=67 [UNREPLIED] src=193.85.2.117 dst=192.168.20.2 sport=53 dport=1054 packets=0 bytes=0 mark=0 use=1
tcp      6 357987 ESTABLISHED src=192.168.5.103 dst=140.116.90.5 sport=4962 dport=80 packets=672 bytes=119351 src=140.116.90.5 dst=192.168.21.2 sport=80 dport=4962 packets=722 bytes=89216 [ASSURED] mark=3 use=1

IP Configuration

1: lo: <LOOPBACK,UP> mtu 16436 qdisc noqueue 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast qlen 1000
    link/ether 00:18:f3:a0:fa:f1 brd ff:ff:ff:ff:ff:ff
    inet 60.248.42.28/24 brd 60.248.42.255 scope global eth0
    inet6 fe80::218:f3ff:fea0:faf1/64 scope link 
       valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast qlen 1000
    link/ether 00:18:f3:a0:fa:f2 brd ff:ff:ff:ff:ff:ff
    inet 192.168.20.2/24 brd 192.168.20.255 scope global eth1
    inet6 fe80::218:f3ff:fea0:faf2/64 scope link 
       valid_lft forever preferred_lft forever
4: eth6: <BROADCAST,MULTICAST> mtu 1500 qdisc noop qlen 1000
    link/ether 00:00:77:9d:f7:f0 brd ff:ff:ff:ff:ff:ff
5: eth3: <BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast qlen 1000
    link/ether 00:00:77:9d:f7:f1 brd ff:ff:ff:ff:ff:ff
    inet 192.168.5.1/24 brd 192.168.5.255 scope global eth3
    inet6 fe80::200:77ff:fe9d:f7f1/64 scope link 
       valid_lft forever preferred_lft forever
6: eth4: <BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast qlen 1000
    link/ether 00:00:77:9d:f7:f2 brd ff:ff:ff:ff:ff:ff
    inet 192.168.21.2/24 brd 192.168.21.255 scope global eth4
    inet6 fe80::200:77ff:fe9d:f7f2/64 scope link 
       valid_lft forever preferred_lft forever
7: eth5: <BROADCAST,MULTICAST> mtu 1500 qdisc noop qlen 1000
    link/ether 00:00:77:9d:f7:f3 brd ff:ff:ff:ff:ff:ff
8: sit0: <NOARP> mtu 1480 qdisc noop 
    link/sit 0.0.0.0 brd 0.0.0.0

IP Stats

1: lo: <LOOPBACK,UP> mtu 16436 qdisc noqueue 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    RX: bytes  packets  errors  dropped overrun mcast   
    313427951  245039   0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    313427951  245039   0       0       0       0      
2: eth0: <BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast qlen 1000
    link/ether 00:18:f3:a0:fa:f1 brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    117447967  130750   0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    57829648   382276   0       0       0       0      
3: eth1: <BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast qlen 1000
    link/ether 00:18:f3:a0:fa:f2 brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    37820052   94216    0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    25958489   162612   0       0       0       0      
4: eth6: <BROADCAST,MULTICAST> mtu 1500 qdisc noop qlen 1000
    link/ether 00:00:77:9d:f7:f0 brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    0          0        0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    0          0        0       0       0       0      
5: eth3: <BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast qlen 1000
    link/ether 00:00:77:9d:f7:f1 brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    812998192  1903551  0       0       0       1      
    TX: bytes  packets  errors  dropped carrier collsns 
    1310104933 1983642  0       0       0       0      
6: eth4: <BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast qlen 1000
    link/ether 00:00:77:9d:f7:f2 brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    4170806664 6972379  1       0       0       3811   
    TX: bytes  packets  errors  dropped carrier collsns 
    3114974508 7276641  0       0       0       0      
7: eth5: <BROADCAST,MULTICAST> mtu 1500 qdisc noop qlen 1000
    link/ether 00:00:77:9d:f7:f3 brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    0          0        0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    0          0        0       0       0       0      
8: sit0: <NOARP> mtu 1480 qdisc noop 
    link/sit 0.0.0.0 brd 0.0.0.0
    RX: bytes  packets  errors  dropped overrun mcast   
    0          0        0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    0          0        0       0       0       0      

/proc

   /proc/version = Linux version 2.6.15-26-server (buildd@terranova) (gcc version 4.0.3 (Ubuntu 4.0.3-1ubuntu5)) #1 SMP Fri Sep 8 21:00:37 UTC 2006
   /proc/sys/net/ipv4/ip_forward = 1
   /proc/sys/net/ipv4/icmp_echo_ignore_all = 0
   /proc/sys/net/ipv4/conf/all/proxy_arp = 0
   /proc/sys/net/ipv4/conf/all/arp_filter = 0
   /proc/sys/net/ipv4/conf/all/arp_ignore = 0
   /proc/sys/net/ipv4/conf/all/rp_filter = 1
   /proc/sys/net/ipv4/conf/all/log_martians = 0
   /proc/sys/net/ipv4/conf/default/proxy_arp = 0
   /proc/sys/net/ipv4/conf/default/arp_filter = 0
   /proc/sys/net/ipv4/conf/default/arp_ignore = 0
   /proc/sys/net/ipv4/conf/default/rp_filter = 1
   /proc/sys/net/ipv4/conf/default/log_martians = 0
   /proc/sys/net/ipv4/conf/eth0/proxy_arp = 0
   /proc/sys/net/ipv4/conf/eth0/arp_filter = 0
   /proc/sys/net/ipv4/conf/eth0/arp_ignore = 0
   /proc/sys/net/ipv4/conf/eth0/rp_filter = 1
   /proc/sys/net/ipv4/conf/eth0/log_martians = 1
   /proc/sys/net/ipv4/conf/eth1/proxy_arp = 0
   /proc/sys/net/ipv4/conf/eth1/arp_filter = 0
   /proc/sys/net/ipv4/conf/eth1/arp_ignore = 0
   /proc/sys/net/ipv4/conf/eth1/rp_filter = 1
   /proc/sys/net/ipv4/conf/eth1/log_martians = 1
   /proc/sys/net/ipv4/conf/eth3/proxy_arp = 0
   /proc/sys/net/ipv4/conf/eth3/arp_filter = 0
   /proc/sys/net/ipv4/conf/eth3/arp_ignore = 0
   /proc/sys/net/ipv4/conf/eth3/rp_filter = 1
   /proc/sys/net/ipv4/conf/eth3/log_martians = 0
   /proc/sys/net/ipv4/conf/eth4/proxy_arp = 0
   /proc/sys/net/ipv4/conf/eth4/arp_filter = 0
   /proc/sys/net/ipv4/conf/eth4/arp_ignore = 0
   /proc/sys/net/ipv4/conf/eth4/rp_filter = 1
   /proc/sys/net/ipv4/conf/eth4/log_martians = 1
   /proc/sys/net/ipv4/conf/lo/proxy_arp = 0
   /proc/sys/net/ipv4/conf/lo/arp_filter = 0
   /proc/sys/net/ipv4/conf/lo/arp_ignore = 0
   /proc/sys/net/ipv4/conf/lo/rp_filter = 1
   /proc/sys/net/ipv4/conf/lo/log_martians = 0

Routing Rules

0:	from all lookup local 
10000:	from all fwmark 0x1 lookup CT_Stat 
10001:	from all fwmark 0x2 lookup CT_PPP 
10002:	from all fwmark 0x3 lookup CT_PPP1 
20000:	from 60.248.42.28 lookup CT_Stat 
20256:	from 192.168.20.2 lookup CT_PPP 
20512:	from 192.168.21.2 lookup CT_PPP1 
32766:	from all lookup main 
32767:	from all lookup default 

Table CT_PPP:

192.168.5.0/24 dev eth3  proto kernel  scope link  src 192.168.5.1 
default via 192.168.20.1 dev eth1 

Table CT_PPP1:

192.168.5.0/24 dev eth3  proto kernel  scope link  src 192.168.5.1 
default via 192.168.21.1 dev eth4 

Table CT_Stat:

192.168.5.0/24 dev eth3  proto kernel  scope link  src 192.168.5.1 
default via 60.248.42.254 dev eth0 

Table default:


Table local:

broadcast 192.168.5.0 dev eth3  proto kernel  scope link  src 192.168.5.1 
local 192.168.5.1 dev eth3  proto kernel  scope host  src 192.168.5.1 
broadcast 127.255.255.255 dev lo  proto kernel  scope link  src 127.0.0.1 
broadcast 60.248.42.255 dev eth0  proto kernel  scope link  src 60.248.42.28 
broadcast 192.168.20.255 dev eth1  proto kernel  scope link  src 192.168.20.2 
local 192.168.21.2 dev eth4  proto kernel  scope host  src 192.168.21.2 
local 60.248.42.28 dev eth0  proto kernel  scope host  src 60.248.42.28 
broadcast 192.168.5.255 dev eth3  proto kernel  scope link  src 192.168.5.1 
broadcast 60.248.42.0 dev eth0  proto kernel  scope link  src 60.248.42.28 
broadcast 192.168.21.255 dev eth4  proto kernel  scope link  src 192.168.21.2 
broadcast 192.168.20.0 dev eth1  proto kernel  scope link  src 192.168.20.2 
local 192.168.20.2 dev eth1  proto kernel  scope host  src 192.168.20.2 
broadcast 127.0.0.0 dev lo  proto kernel  scope link  src 127.0.0.1 
local 127.0.0.1 dev lo  proto kernel  scope host  src 127.0.0.1 
local 127.0.0.0/8 dev lo  proto kernel  scope host  src 127.0.0.1 

Table main:

192.168.5.0/24 dev eth3  proto kernel  scope link  src 192.168.5.1 
192.168.21.0/24 dev eth4  proto kernel  scope link  src 192.168.21.2 
192.168.20.0/24 dev eth1  proto kernel  scope link  src 192.168.20.2 
60.248.42.0/24 dev eth0  proto kernel  scope link  src 60.248.42.28 
default 
	nexthop via 60.248.42.254  dev eth0 weight 1
	nexthop via 192.168.20.1  dev eth1 weight 3
	nexthop via 192.168.21.1  dev eth4 weight 3

ARP

? (192.168.5.116) at 00:16:36:51:43:D3 [ether] on eth3
? (192.168.5.6) at 00:0E:2E:E3:59:17 [ether] on eth3
? (192.168.20.1) at 00:19:CB:6C:A1:90 [ether] on eth1
? (192.168.5.155) at 00:1B:FC:B3:92:22 [ether] on eth3
? (192.168.5.205) at 00:19:DB:D0:13:35 [ether] on eth3
? (192.168.5.110) at 00:16:36:48:A5:A4 [ether] on eth3
? (192.168.5.103) at 00:16:EC:A3:57:F3 [ether] on eth3
? (192.168.5.140) at 00:0F:B0:82:51:85 [ether] on eth3
? (192.168.5.107) at 00:A0:D1:83:4D:2B [ether] on eth3
? (192.168.5.102) at 00:08:02:0E:81:FF [ether] on eth3
? (192.168.21.1) at 00:19:CB:57:14:E4 [ether] on eth4
? (60.248.42.254) at 00:90:1A:F8:2A:FE [ether] on eth0
? (192.168.5.136) at 00:11:D8:0A:4A:BF [ether] on eth3
? (192.168.5.166) at 00:16:36:C1:A2:8C [ether] on eth3
? (192.168.5.112) at 00:08:02:0D:C2:C4 [ether] on eth3
? (192.168.5.204) at 00:14:2A:60:FC:A6 [ether] on eth3
? (192.168.5.123) at <incomplete> on eth3
? (192.168.5.145) at 00:10:DC:69:FB:08 [ether] on eth3
? (192.168.5.111) at 00:08:02:0C:A1:66 [ether] on eth3
? (192.168.5.162) at 00:13:D3:0F:E6:9C [ether] on eth3
? (192.168.5.131) at 00:15:F2:F0:5B:55 [ether] on eth3

Modules

ip_conntrack           54744  14 ipt_state,ipt_NOTRACK,ipt_MASQUERADE,ipt_helper,ipt_conntrack,ipt_CONNMARK,ip_nat_irc,ip_nat_tftp,ip_nat_ftp,iptable_nat,ip_nat,ip_conntrack_irc,ip_conntrack_tftp,ip_conntrack_ftp
ip_conntrack_ftp        9072  1 ip_nat_ftp
ip_conntrack_irc        7920  1 ip_nat_irc
ip_conntrack_tftp       5240  1 ip_nat_tftp
ip_nat                 21420  8 ipt_SAME,ipt_REDIRECT,ipt_NETMAP,ipt_MASQUERADE,ip_nat_irc,ip_nat_tftp,ip_nat_ftp,iptable_nat
ip_nat_ftp              4480  0 
ip_nat_irc              3712  0 
ip_nat_tftp             2816  0 
iptable_filter          3968  1 
iptable_mangle          3840  1 
iptable_nat             9092  1 
iptable_raw             3072  0 
ip_tables              23552  47 iptable_raw,iptable_mangle,ipt_ULOG,ipt_TTL,ipt_ttl,ipt_TOS,ipt_tos,ipt_TCPMSS,ipt_tcpmss,ipt_state,ipt_sctp,ipt_SAME,ipt_REJECT,ipt_REDIRECT,ipt_recent,ipt_realm,ipt_pkttype,ipt_physdev,ipt_owner,ipt_NOTRACK,ipt_NETMAP,ipt_multiport,ipt_MASQUERADE,ipt_MARK,ipt_mark,ipt_mac,ipt_LOG,ipt_limit,ipt_length,ipt_iprange,ipt_helper,ipt_hashlimit,ipt_esp,ipt_ECN,ipt_ecn,ipt_DSCP,ipt_dscp,ipt_conntrack,ipt_CONNMARK,ipt_connmark,ipt_comment,ipt_CLUSTERIP,ipt_CLASSIFY,ipt_ah,ipt_addrtype,iptable_nat,iptable_filter
ipt_addrtype            3072  5 
ipt_ah                  2944  0 
ipt_CLASSIFY            3200  0 
ipt_CLUSTERIP          10500  0 
ipt_comment             2688  2 
ipt_connmark            2688  2 
ipt_CONNMARK            3328  5 
ipt_conntrack           3456  11 
ipt_dscp                2688  0 
ipt_DSCP                3456  0 
ipt_ecn                 3328  0 
ipt_ECN                 4352  0 
ipt_esp                 2944  0 
ipt_hashlimit          10888  0 
ipt_helper              3200  0 
ipt_iprange             2816  0 
ipt_length              2688  0 
ipt_limit               3584  15 
ipt_LOG                 8320  19 
ipt_mac                 2944  121 
ipt_mark                2688  11 
ipt_MARK                3456  10 
ipt_MASQUERADE          4736  0 
ipt_multiport           3840  7 
ipt_NETMAP              3072  0 
ipt_NOTRACK             3200  0 
ipt_owner               3200  0 
ipt_physdev             3216  0 
ipt_pkttype             2688  0 
ipt_realm               2944  0 
ipt_recent             12172  0 
ipt_REDIRECT            3072  0 
ipt_REJECT              7040  4 
ipt_SAME                3456  0 
ipt_sctp                3968  0 
ipt_state               2944  39 
ipt_tcpmss              3328  0 
ipt_TCPMSS              5504  1 
ipt_tos                 2688  0 
ipt_TOS                 3456  0 
ipt_ttl                 2944  0 
ipt_TTL                 3584  0 
ipt_ULOG                9348  0 

Shorewall has detected the following iptables/netfilter capabilities:
   NAT: Available
   Packet Mangling: Available
   Multi-port Match: Available
   Extended Multi-port Match: Available
   Connection Tracking Match: Available
   Packet Type Match: Available
   Policy Match: Not available
   Physdev Match: Available
   Physdev-is-bridged Support: Available
   Packet length Match: Available
   IP range Match: Available
   Recent Match: Available
   Owner Match: Available
   Ipset Match: Not available
   CONNMARK Target: Available
   Extended CONNMARK Target: Available
   Connmark Match: Available
   Extended Connmark Match: Available
   Raw Table: Available
   IPP2P Match: Not available
   CLASSIFY Target: Available
   Extended REJECT: Available
   Repeat match: Not available
   MARK Target: Available
   Extended MARK Target: Available
   Mangle FORWARD Chain: Available
   Comments: Available
   Address Type Match: Available
   TCPMSS Match: Available
   Hashlimit Match: Available
   NFQUEUE Target: Not available

Traffic Control

Device eth0:
qdisc pfifo_fast 0: bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 530872311 bytes 1533547 pkts (dropped 0, overlimits 0) 

Device eth1:
qdisc pfifo_fast 0: bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 25100614 bytes 162612 pkts (dropped 0, overlimits 0) 

Device eth3:
qdisc pfifo_fast 0: bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 5359745133 bytes 8686152 pkts (dropped 0, overlimits 0) 

Device eth4:
qdisc pfifo_fast 0: bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 3080046003 bytes 7276644 pkts (dropped 0, overlimits 0) 


TC Filters

Device eth0:

Device eth1:

Device eth3:

Device eth4:

