Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-02 04:59:47.771 00:00:00.000 UDP 28.104.0.1:60332 -> 198.28.0.2:53 1 64 1 2025-07-02 04:59:47.771 00:00:00.000 UDP 28.104.0.1:37604 -> 198.28.0.2:53 1 64 1 2025-07-02 04:54:50.772 00:06:00.173 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-07-02 04:59:47.782 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60332 1 109 1 2025-07-02 04:54:50.498 00:06:00.341 TCP 28.151.0.1:39145 -> 28.156.0.1:179 14 861 1 2025-07-02 04:59:47.782 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37604 1 80 1 2025-07-02 05:00:48.087 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56566 1 80 1 2025-07-02 05:00:48.087 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46043 1 109 1 2025-07-02 05:00:48.076 00:00:00.000 UDP 28.104.0.1:56566 -> 198.28.0.2:53 1 64 1 2025-07-02 04:59:51.506 00:01:00.060 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-07-02 05:00:48.076 00:00:00.000 UDP 28.104.0.1:46043 -> 198.28.0.2:53 1 64 1 2025-07-02 04:56:43.153 00:05:10.011 OSPF 28.0.2.1:0 -> 224.0.0.5:0 34 2320 1 2025-07-02 05:01:48.371 00:00:00.000 UDP 28.104.0.1:35639 -> 198.28.0.2:53 1 64 1 2025-07-02 05:01:48.371 00:00:00.000 UDP 28.104.0.1:34854 -> 198.28.0.2:53 1 64 1 2025-07-02 05:01:48.381 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35639 1 109 1 2025-07-02 05:01:48.381 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34854 1 80 1 2025-07-02 05:02:07.892 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-02 04:57:50.499 00:06:00.288 TCP 28.151.0.1:179 -> 28.154.0.1:41239 14 861 1 2025-07-02 05:02:48.675 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43685 1 80 1 2025-07-02 05:02:48.675 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52478 1 109 1 2025-07-02 04:57:50.550 00:06:00.280 TCP 28.156.0.1:179 -> 28.151.0.1:39145 14 861 1 2025-07-02 05:02:48.665 00:00:00.000 UDP 28.104.0.1:43685 -> 198.28.0.2:53 1 64 1 2025-07-02 05:02:48.665 00:00:00.000 UDP 28.104.0.1:52478 -> 198.28.0.2:53 1 64 1 2025-07-02 05:03:48.966 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60004 1 80 1 2025-07-02 05:03:48.967 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36350 1 109 1 2025-07-02 05:03:48.956 00:00:00.000 UDP 28.104.0.1:60004 -> 198.28.0.2:53 1 64 1 2025-07-02 05:03:48.956 00:00:00.000 UDP 28.104.0.1:36350 -> 198.28.0.2:53 1 64 1 2025-07-02 05:01:51.509 00:02:00.058 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-07-02 04:58:50.510 00:06:00.267 TCP 28.154.0.1:41239 -> 28.151.0.1:179 14 861 1 2025-07-02 05:04:49.272 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43127 1 109 1 2025-07-02 05:04:49.272 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46816 1 80 1 2025-07-02 05:04:49.262 00:00:00.000 UDP 28.104.0.1:46816 -> 198.28.0.2:53 1 64 1 2025-07-02 05:04:49.263 00:00:00.000 UDP 28.104.0.1:43127 -> 198.28.0.2:53 1 64 1 2025-07-02 05:05:49.512 00:00:00.000 UDP 28.104.0.1:36230 -> 198.28.0.2:53 1 64 1 2025-07-02 05:04:51.509 00:01:00.058 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-07-02 05:05:49.512 00:00:00.000 UDP 28.104.0.1:47602 -> 198.28.0.2:53 1 64 1 2025-07-02 05:05:49.522 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36230 1 80 1 2025-07-02 05:05:49.522 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47602 1 109 1 2025-07-02 05:02:03.164 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 42 2928 1 2025-07-02 05:01:50.499 00:06:00.342 TCP 28.151.0.1:39145 -> 28.156.0.1:179 14 861 1 2025-07-02 05:06:49.811 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40334 1 109 1 2025-07-02 05:06:49.811 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53264 1 80 1 2025-07-02 05:06:49.802 00:00:00.000 UDP 28.104.0.1:40334 -> 198.28.0.2:53 1 64 1 2025-07-02 05:01:50.774 00:06:00.172 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-07-02 05:06:49.802 00:00:00.000 UDP 28.104.0.1:53264 -> 198.28.0.2:53 1 64 1 2025-07-02 05:07:07.880 00:00:00.032 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-02 05:07:50.118 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59467 1 80 1 2025-07-02 05:07:50.118 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41037 1 109 1 2025-07-02 05:07:50.109 00:00:00.000 UDP 28.104.0.1:59467 -> 198.28.0.2:53 1 64 1 2025-07-02 05:07:50.109 00:00:00.000 UDP 28.104.0.1:41037 -> 198.28.0.2:53 1 64 1 2025-07-02 05:08:50.417 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58162 1 80 1 2025-07-02 05:08:50.417 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43514 1 109 1 2025-07-02 05:08:50.407 00:00:00.000 UDP 28.104.0.1:43514 -> 198.28.0.2:53 1 64 1 2025-07-02 05:06:51.510 00:02:00.058 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-07-02 05:08:50.407 00:00:00.000 UDP 28.104.0.1:58162 -> 198.28.0.2:53 1 64 1 2025-07-02 05:04:50.500 00:06:00.289 TCP 28.151.0.1:179 -> 28.154.0.1:41239 14 861 1 2025-07-02 05:09:50.719 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48569 1 80 1 2025-07-02 05:09:50.719 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34278 1 109 1 2025-07-02 05:04:50.550 00:06:00.282 TCP 28.156.0.1:179 -> 28.151.0.1:39145 14 861 1 2025-07-02 05:09:50.708 00:00:00.000 UDP 28.104.0.1:48569 -> 198.28.0.2:53 1 64 1 2025-07-02 05:09:50.708 00:00:00.000 UDP 28.104.0.1:34278 -> 198.28.0.2:53 1 64 1 2025-07-02 05:10:51.026 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45196 1 80 1 2025-07-02 05:10:51.029 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48803 1 109 1 2025-07-02 05:09:51.510 00:01:00.061 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-07-02 05:05:50.510 00:06:00.268 TCP 28.154.0.1:41239 -> 28.151.0.1:179 14 861 1 2025-07-02 05:10:51.014 00:00:00.000 UDP 28.104.0.1:48803 -> 198.28.0.2:53 1 64 1 2025-07-02 05:10:51.013 00:00:00.000 UDP 28.104.0.1:45196 -> 198.28.0.2:53 1 64 1 2025-07-02 05:07:23.170 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2648 1 2025-07-02 05:11:51.328 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37627 1 109 1 2025-07-02 05:11:51.328 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55037 1 80 1 2025-07-02 05:11:51.320 00:00:00.000 UDP 28.104.0.1:55037 -> 198.28.0.2:53 1 64 1 2025-07-02 05:11:51.320 00:00:00.000 UDP 28.104.0.1:37627 -> 198.28.0.2:53 1 64 1 2025-07-02 05:12:08.137 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-02 05:11:51.511 00:01:00.062 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-07-02 05:12:51.611 00:00:00.000 UDP 28.104.0.1:41231 -> 198.28.0.2:53 1 64 1 2025-07-02 05:12:51.611 00:00:00.000 UDP 28.104.0.1:38288 -> 198.28.0.2:53 1 64 1 2025-07-02 05:12:51.622 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41231 1 80 1 2025-07-02 05:12:51.622 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38288 1 109 1 2025-07-02 05:13:51.510 00:00:00.062 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 123 1 2025-07-02 05:08:50.778 00:06:00.170 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-07-02 05:13:51.923 00:00:00.000 UDP 28.104.0.1:41570 -> 198.28.0.2:53 1 64 1 2025-07-02 05:13:51.923 00:00:00.000 UDP 28.104.0.1:49436 -> 198.28.0.2:53 1 64 1 2025-07-02 05:08:50.501 00:06:00.342 TCP 28.151.0.1:39145 -> 28.156.0.1:179 14 861 1 2025-07-02 05:13:51.933 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41570 1 80 1 2025-07-02 05:13:51.934 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49436 1 109 1 2025-07-02 05:14:52.239 00:00:00.000 UDP 28.104.0.1:33106 -> 198.28.0.2:53 1 64 1 2025-07-02 05:14:52.239 00:00:00.000 UDP 28.104.0.1:38141 -> 198.28.0.2:53 1 64 1 2025-07-02 05:14:52.249 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33106 1 109 1 2025-07-02 05:14:52.249 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38141 1 80 1 2025-07-02 05:14:51.511 00:01:00.062 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-07-02 05:15:52.546 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37758 1 109 1 2025-07-02 05:15:52.546 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48350 1 80 1 2025-07-02 05:15:52.536 00:00:00.000 UDP 28.104.0.1:37758 -> 198.28.0.2:53 1 64 1 2025-07-02 05:15:52.536 00:00:00.000 UDP 28.104.0.1:48350 -> 198.28.0.2:53 1 64 1 2025-07-02 05:11:50.504 00:06:00.287 TCP 28.151.0.1:179 -> 28.154.0.1:41239 14 861 1 2025-07-02 05:12:43.176 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 50 3776 1 2025-07-02 05:16:52.840 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51814 1 80 1 2025-07-02 05:16:52.838 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36786 1 109 1 2025-07-02 05:11:50.554 00:06:00.279 TCP 28.156.0.1:179 -> 28.151.0.1:39145 14 861 1 2025-07-02 05:16:52.829 00:00:00.000 UDP 28.104.0.1:51814 -> 198.28.0.2:53 1 64 1 2025-07-02 05:16:52.829 00:00:00.000 UDP 28.104.0.1:36786 -> 198.28.0.2:53 1 64 1 2025-07-02 05:17:08.230 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-02 05:16:51.514 00:01:00.059 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-07-02 05:12:50.513 00:06:00.267 TCP 28.154.0.1:41239 -> 28.151.0.1:179 14 861 1 2025-07-02 05:17:53.124 00:00:00.000 UDP 28.104.0.1:54910 -> 198.28.0.2:53 1 64 1 2025-07-02 05:17:53.124 00:00:00.000 UDP 28.104.0.1:45870 -> 198.28.0.2:53 1 64 1 2025-07-02 05:17:53.134 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45870 1 80 1 2025-07-02 05:17:53.134 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54910 1 109 1 2025-07-02 05:18:51.514 00:00:00.059 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 123 1 2025-07-02 05:18:53.440 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41420 1 109 1 2025-07-02 05:18:53.440 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55779 1 80 1 2025-07-02 05:18:53.430 00:00:00.000 UDP 28.104.0.1:41420 -> 198.28.0.2:53 1 64 1 2025-07-02 05:18:53.430 00:00:00.000 UDP 28.104.0.1:55779 -> 198.28.0.2:53 1 64 1 2025-07-02 05:19:53.717 00:00:00.000 UDP 28.104.0.1:55645 -> 198.28.0.2:53 1 64 1 2025-07-02 05:19:53.717 00:00:00.000 UDP 28.104.0.1:42668 -> 198.28.0.2:53 1 64 1 2025-07-02 05:19:53.729 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42668 1 109 1 2025-07-02 05:19:53.729 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55645 1 80 1 2025-07-02 05:15:50.506 00:06:00.339 TCP 28.151.0.1:39145 -> 28.156.0.1:179 14 861 1 2025-07-02 05:20:54.038 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56762 1 109 1 2025-07-02 05:20:54.026 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37186 1 80 1 2025-07-02 05:19:51.516 00:01:00.059 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-07-02 05:15:50.781 00:06:00.172 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-07-02 05:20:54.017 00:00:00.000 UDP 28.104.0.1:37186 -> 198.28.0.2:53 1 64 1 2025-07-02 05:20:54.030 00:00:00.000 UDP 28.104.0.1:56762 -> 198.28.0.2:53 1 64 1 2025-07-02 05:21:54.336 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48295 1 109 1 2025-07-02 05:21:54.336 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40123 1 80 1 2025-07-02 05:21:54.327 00:00:00.000 UDP 28.104.0.1:48295 -> 198.28.0.2:53 1 64 1 2025-07-02 05:21:54.327 00:00:00.000 UDP 28.104.0.1:40123 -> 198.28.0.2:53 1 64 1 2025-07-02 05:22:08.496 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-02 05:18:03.182 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 32 2176 1 2025-07-02 05:21:51.514 00:01:00.060 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-07-02 05:22:54.587 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52848 1 80 1 2025-07-02 05:22:54.587 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37911 1 109 1 2025-07-02 05:22:54.576 00:00:00.000 UDP 28.104.0.1:52848 -> 198.28.0.2:53 1 64 1 2025-07-02 05:22:54.576 00:00:00.000 UDP 28.104.0.1:37911 -> 198.28.0.2:53 1 64 1 2025-07-02 05:18:50.506 00:06:00.288 TCP 28.151.0.1:179 -> 28.154.0.1:41239 14 861 1 2025-07-02 05:18:50.556 00:06:00.280 TCP 28.156.0.1:179 -> 28.151.0.1:39145 14 861 1 2025-07-02 05:23:51.515 00:00:00.058 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 123 1 2025-07-02 05:23:54.880 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47680 1 80 1 2025-07-02 05:23:54.880 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51233 1 109 1 2025-07-02 05:23:54.870 00:00:00.000 UDP 28.104.0.1:51233 -> 198.28.0.2:53 1 64 1 2025-07-02 05:23:54.870 00:00:00.000 UDP 28.104.0.1:47680 -> 198.28.0.2:53 1 64 1 2025-07-02 05:19:50.516 00:06:00.269 TCP 28.154.0.1:41239 -> 28.151.0.1:179 14 861 1 2025-07-02 05:24:55.184 00:00:00.000 UDP 28.104.0.1:55865 -> 198.28.0.2:53 1 64 1 2025-07-02 05:24:55.184 00:00:00.000 UDP 28.104.0.1:50432 -> 198.28.0.2:53 1 64 1 2025-07-02 05:24:55.194 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55865 1 109 1 2025-07-02 05:24:55.194 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50432 1 80 1 2025-07-02 05:24:51.516 00:01:00.058 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-07-02 05:25:55.508 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51636 1 80 1 2025-07-02 05:25:55.508 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50436 1 109 1 2025-07-02 05:25:55.498 00:00:00.000 UDP 28.104.0.1:50436 -> 198.28.0.2:53 1 64 1 2025-07-02 05:25:55.498 00:00:00.000 UDP 28.104.0.1:51636 -> 198.28.0.2:53 1 64 1 2025-07-02 05:26:55.805 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56221 1 109 1 2025-07-02 05:26:55.804 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35675 1 80 1 2025-07-02 05:26:55.795 00:00:00.000 UDP 28.104.0.1:56221 -> 198.28.0.2:53 1 64 1 2025-07-02 05:26:55.795 00:00:00.000 UDP 28.104.0.1:35675 -> 198.28.0.2:53 1 64 1 2025-07-02 05:27:08.487 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-02 05:23:23.190 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 34 2320 1 2025-07-02 05:26:51.515 00:01:00.060 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-07-02 05:22:50.781 00:06:00.171 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-07-02 05:22:50.504 00:06:00.343 TCP 28.151.0.1:39145 -> 28.156.0.1:179 14 861 1 2025-07-02 05:27:56.062 00:00:00.000 UDP 28.104.0.1:46847 -> 198.28.0.2:53 1 64 1 2025-07-02 05:27:56.061 00:00:00.000 UDP 28.104.0.1:53524 -> 198.28.0.2:53 1 64 1 2025-07-02 05:27:56.072 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46847 1 80 1 2025-07-02 05:27:56.072 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53524 1 109 1 2025-07-02 05:28:51.515 00:00:00.060 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 123 1 2025-07-02 05:28:56.357 00:00:00.000 UDP 28.104.0.1:34319 -> 198.28.0.2:53 1 64 1 2025-07-02 05:28:56.357 00:00:00.000 UDP 28.104.0.1:42535 -> 198.28.0.2:53 1 64 1 2025-07-02 05:28:56.368 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42535 1 80 1 2025-07-02 05:28:56.368 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34319 1 109 1 2025-07-02 05:29:56.654 00:00:00.000 UDP 28.104.0.1:35035 -> 198.28.0.2:53 1 64 1 2025-07-02 05:29:56.654 00:00:00.000 UDP 28.104.0.1:46227 -> 198.28.0.2:53 1 64 1 2025-07-02 05:29:56.665 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35035 1 109 1 2025-07-02 05:29:56.665 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46227 1 80 1 2025-07-02 05:25:50.557 00:06:00.281 TCP 28.156.0.1:179 -> 28.151.0.1:39145 14 861 1 2025-07-02 05:29:51.516 00:01:00.060 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-07-02 05:25:50.509 00:06:00.289 TCP 28.151.0.1:179 -> 28.154.0.1:41239 14 861 1 2025-07-02 05:30:56.910 00:00:00.000 UDP 28.104.0.1:48180 -> 198.28.0.2:53 1 64 1 2025-07-02 05:30:56.910 00:00:00.000 UDP 28.104.0.1:36272 -> 198.28.0.2:53 1 64 1 2025-07-02 05:30:56.920 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48180 1 80 1 2025-07-02 05:30:56.920 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36272 1 109 1 2025-07-02 05:26:50.520 00:06:00.268 TCP 28.154.0.1:41239 -> 28.151.0.1:179 14 861 1 2025-07-02 05:31:57.215 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45166 1 109 1 2025-07-02 05:31:57.215 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48505 1 80 1 2025-07-02 05:31:57.205 00:00:00.000 UDP 28.104.0.1:48505 -> 198.28.0.2:53 1 64 1 2025-07-02 05:31:57.205 00:00:00.000 UDP 28.104.0.1:45166 -> 198.28.0.2:53 1 64 1 2025-07-02 05:32:08.573 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-02 05:28:43.198 00:05:05.075 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2524 1 2025-07-02 05:31:51.519 00:01:00.058 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-07-02 05:32:57.516 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55672 1 80 1 2025-07-02 05:32:57.516 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47966 1 109 1 2025-07-02 05:32:57.505 00:00:00.000 UDP 28.104.0.1:47966 -> 198.28.0.2:53 1 64 1 2025-07-02 05:32:57.505 00:00:00.000 UDP 28.104.0.1:55672 -> 198.28.0.2:53 1 64 1 2025-07-02 05:33:57.795 00:00:00.000 UDP 28.104.0.1:47567 -> 198.28.0.2:53 1 64 1 2025-07-02 05:33:57.795 00:00:00.000 UDP 28.104.0.1:53244 -> 198.28.0.2:53 1 64 1 2025-07-02 05:33:57.805 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47567 1 80 1 2025-07-02 05:33:57.806 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53244 1 109 1 2025-07-02 05:29:50.507 00:06:00.340 TCP 28.151.0.1:39145 -> 28.156.0.1:179 14 861 1 2025-07-02 05:29:50.787 00:06:00.168 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-07-02 05:34:58.100 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34380 1 109 1 2025-07-02 05:34:58.101 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60230 1 80 1 2025-07-02 05:34:58.090 00:00:00.000 UDP 28.104.0.1:60230 -> 198.28.0.2:53 1 64 1 2025-07-02 05:34:58.090 00:00:00.000 UDP 28.104.0.1:34380 -> 198.28.0.2:53 1 64 1 2025-07-02 05:33:51.518 00:02:00.061 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-07-02 05:35:58.394 00:00:00.000 UDP 28.104.0.1:50604 -> 198.28.0.2:53 1 64 1 2025-07-02 05:35:58.394 00:00:00.000 UDP 28.104.0.1:41985 -> 198.28.0.2:53 1 64 1 2025-07-02 05:35:58.405 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41985 1 80 1 2025-07-02 05:35:58.405 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50604 1 109 1 2025-07-02 05:36:58.694 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51073 1 80 1 2025-07-02 05:36:58.694 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58675 1 109 1 2025-07-02 05:36:58.683 00:00:00.000 UDP 28.104.0.1:58675 -> 198.28.0.2:53 1 64 1 2025-07-02 05:36:58.683 00:00:00.000 UDP 28.104.0.1:51073 -> 198.28.0.2:53 1 64 1 2025-07-02 05:37:08.805 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-02 05:32:50.508 00:06:00.294 TCP 28.151.0.1:179 -> 28.154.0.1:41239 14 861 1 2025-07-02 05:32:50.561 00:06:00.278 TCP 28.156.0.1:179 -> 28.151.0.1:39145 14 861 1 2025-07-02 05:36:51.520 00:01:00.059 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-07-02 05:37:58.978 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53878 1 80 1 2025-07-02 05:37:58.978 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57790 1 109 1 2025-07-02 05:37:58.968 00:00:00.000 UDP 28.104.0.1:53878 -> 198.28.0.2:53 1 64 1 2025-07-02 05:37:58.968 00:00:00.000 UDP 28.104.0.1:57790 -> 198.28.0.2:53 1 64 1 2025-07-02 05:33:53.203 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 43 3036 1 2025-07-02 05:33:50.519 00:06:00.273 TCP 28.154.0.1:41239 -> 28.151.0.1:179 14 861 1 2025-07-02 05:38:59.269 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42700 1 109 1 2025-07-02 05:38:59.269 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47115 1 80 1 2025-07-02 05:38:59.258 00:00:00.000 UDP 28.104.0.1:47115 -> 198.28.0.2:53 1 64 1 2025-07-02 05:38:59.258 00:00:00.000 UDP 28.104.0.1:42700 -> 198.28.0.2:53 1 64 1 2025-07-02 05:39:59.556 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38247 1 80 1 2025-07-02 05:39:59.556 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53227 1 109 1 2025-07-02 05:39:59.545 00:00:00.000 UDP 28.104.0.1:53227 -> 198.28.0.2:53 1 64 1 2025-07-02 05:39:59.545 00:00:00.000 UDP 28.104.0.1:38247 -> 198.28.0.2:53 1 64 1 2025-07-02 05:38:51.518 00:02:00.060 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-07-02 05:40:59.850 00:00:00.000 UDP 28.104.0.1:55821 -> 198.28.0.2:53 1 64 1 2025-07-02 05:40:59.850 00:00:00.000 UDP 28.104.0.1:40805 -> 198.28.0.2:53 1 64 1 2025-07-02 05:40:59.860 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40805 1 80 1 2025-07-02 05:40:59.860 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55821 1 109 1 2025-07-02 05:36:50.510 00:06:00.339 TCP 28.151.0.1:39145 -> 28.156.0.1:179 14 861 1 2025-07-02 05:36:50.791 00:06:00.165 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-07-02 05:42:00.157 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37281 1 80 1 2025-07-02 05:42:00.157 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40451 1 109 1 2025-07-02 05:42:00.147 00:00:00.000 UDP 28.104.0.1:37281 -> 198.28.0.2:53 1 64 1 2025-07-02 05:42:00.147 00:00:00.000 UDP 28.104.0.1:40451 -> 198.28.0.2:53 1 64 1 2025-07-02 05:42:08.746 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-02 05:41:51.518 00:01:00.060 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-07-02 05:43:00.461 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51404 1 109 1 2025-07-02 05:43:00.461 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48915 1 80 1 2025-07-02 05:43:00.452 00:00:00.000 UDP 28.104.0.1:51404 -> 198.28.0.2:53 1 64 1 2025-07-02 05:43:00.452 00:00:00.000 UDP 28.104.0.1:48915 -> 198.28.0.2:53 1 64 1 2025-07-02 05:39:13.211 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 43 3232 1 2025-07-02 05:44:00.750 00:00:00.000 UDP 28.104.0.1:42073 -> 198.28.0.2:53 1 64 1 2025-07-02 05:44:00.750 00:00:00.000 UDP 28.104.0.1:54522 -> 198.28.0.2:53 1 64 1 2025-07-02 05:44:00.761 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42073 1 80 1 2025-07-02 05:44:00.761 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54522 1 109 1 2025-07-02 05:39:50.560 00:06:00.279 TCP 28.156.0.1:179 -> 28.151.0.1:39145 14 861 1 2025-07-02 05:43:51.521 00:01:00.059 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-07-02 05:39:50.511 00:06:00.295 TCP 28.151.0.1:179 -> 28.154.0.1:41239 14 861 1 2025-07-02 05:45:01.064 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50953 1 109 1 2025-07-02 05:45:01.063 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55579 1 80 1 2025-07-02 05:45:01.055 00:00:00.000 UDP 28.104.0.1:50953 -> 198.28.0.2:53 1 64 1 2025-07-02 05:45:01.054 00:00:00.000 UDP 28.104.0.1:55579 -> 198.28.0.2:53 1 64 1 2025-07-02 05:45:51.521 00:00:00.058 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 123 1 2025-07-02 05:40:50.521 00:06:00.275 TCP 28.154.0.1:41239 -> 28.151.0.1:179 14 861 1 2025-07-02 05:46:01.364 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43490 1 80 1 2025-07-02 05:46:01.364 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46697 1 109 1 2025-07-02 05:46:01.354 00:00:00.000 UDP 28.104.0.1:46697 -> 198.28.0.2:53 1 64 1 2025-07-02 05:46:01.354 00:00:00.000 UDP 28.104.0.1:43490 -> 198.28.0.2:53 1 64 1 2025-07-02 05:47:01.667 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47037 1 109 1 2025-07-02 05:47:01.667 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33543 1 80 1 2025-07-02 05:47:01.657 00:00:00.000 UDP 28.104.0.1:33543 -> 198.28.0.2:53 1 64 1 2025-07-02 05:47:01.657 00:00:00.000 UDP 28.104.0.1:47037 -> 198.28.0.2:53 1 64 1 2025-07-02 05:47:09.135 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-02 05:46:51.521 00:01:00.058 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-07-02 05:48:01.950 00:00:00.000 UDP 28.104.0.1:58072 -> 198.28.0.2:53 1 64 1 2025-07-02 05:48:01.950 00:00:00.000 UDP 28.104.0.1:59649 -> 198.28.0.2:53 1 64 1 2025-07-02 05:48:01.962 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58072 1 109 1 2025-07-02 05:48:01.962 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59649 1 80 1 2025-07-02 05:44:30.194 00:05:03.031 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2560 1 2025-07-02 05:43:50.795 00:06:00.162 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-07-02 05:43:50.510 00:06:00.340 TCP 28.151.0.1:39145 -> 28.156.0.1:179 14 861 1 2025-07-02 05:49:02.250 00:00:00.000 UDP 28.104.0.1:45988 -> 198.28.0.2:53 1 64 1 2025-07-02 05:49:02.250 00:00:00.000 UDP 28.104.0.1:54102 -> 198.28.0.2:53 1 64 1 2025-07-02 05:49:02.261 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54102 1 109 1 2025-07-02 05:49:02.261 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45988 1 80 1 2025-07-02 05:48:51.520 00:01:00.059 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-07-02 05:50:02.542 00:00:00.000 UDP 28.104.0.1:34534 -> 198.28.0.2:53 1 64 1 2025-07-02 05:50:02.542 00:00:00.000 UDP 28.104.0.1:59361 -> 198.28.0.2:53 1 64 1 2025-07-02 05:50:02.552 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34534 1 109 1 2025-07-02 05:50:02.551 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59361 1 80 1 2025-07-02 05:50:51.521 00:00:00.058 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 123 1 2025-07-02 05:51:02.791 00:00:00.000 UDP 28.104.0.1:49330 -> 198.28.0.2:53 1 64 1 2025-07-02 05:51:02.791 00:00:00.000 UDP 28.104.0.1:32948 -> 198.28.0.2:53 1 64 1 2025-07-02 05:51:02.802 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49330 1 109 1 2025-07-02 05:51:02.802 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32948 1 80 1 2025-07-02 05:46:50.512 00:06:00.299 TCP 28.151.0.1:179 -> 28.154.0.1:41239 14 861 1 2025-07-02 05:46:50.562 00:06:00.280 TCP 28.156.0.1:179 -> 28.151.0.1:39145 14 861 1 2025-07-02 05:52:03.057 00:00:00.000 UDP 28.104.0.1:57808 -> 198.28.0.2:53 1 64 1 2025-07-02 05:52:03.057 00:00:00.000 UDP 28.104.0.1:59338 -> 198.28.0.2:53 1 64 1 2025-07-02 05:52:03.068 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59338 1 80 1 2025-07-02 05:52:03.068 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57808 1 109 1 2025-07-02 05:52:08.969 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-02 05:51:51.522 00:01:00.059 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-07-02 05:47:50.522 00:06:00.279 TCP 28.154.0.1:41239 -> 28.151.0.1:179 14 861 1 2025-07-02 05:53:03.347 00:00:00.000 UDP 28.104.0.1:50236 -> 198.28.0.2:53 1 64 1 2025-07-02 05:53:03.347 00:00:00.000 UDP 28.104.0.1:55452 -> 198.28.0.2:53 1 64 1 2025-07-02 05:53:03.358 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55452 1 80 1 2025-07-02 05:53:03.358 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50236 1 109 1 2025-07-02 05:49:43.226 00:05:10.009 OSPF 28.0.2.1:0 -> 224.0.0.5:0 32 2176 1 2025-07-02 05:54:03.644 00:00:00.000 UDP 28.104.0.1:55536 -> 198.28.0.2:53 1 64 1 2025-07-02 05:54:03.644 00:00:00.000 UDP 28.104.0.1:33280 -> 198.28.0.2:53 1 64 1 2025-07-02 05:54:03.653 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33280 1 80 1 2025-07-02 05:54:03.654 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55536 1 109 1 2025-07-02 05:53:51.523 00:01:00.059 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-07-02 05:55:03.951 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40370 1 109 1 2025-07-02 05:55:03.951 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60773 1 80 1 2025-07-02 05:55:03.939 00:00:00.000 UDP 28.104.0.1:60773 -> 198.28.0.2:53 1 64 1 2025-07-02 05:55:03.938 00:00:00.000 UDP 28.104.0.1:40370 -> 198.28.0.2:53 1 64 1 2025-07-02 05:55:51.522 00:00:00.059 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 123 1 2025-07-02 05:50:50.800 00:06:00.158 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-07-02 05:50:50.511 00:06:00.340 TCP 28.151.0.1:39145 -> 28.156.0.1:179 14 861 1 2025-07-02 05:56:04.202 00:00:00.000 UDP 28.104.0.1:56201 -> 198.28.0.2:53 1 64 1 2025-07-02 05:56:04.202 00:00:00.000 UDP 28.104.0.1:56998 -> 198.28.0.2:53 1 64 1 2025-07-02 05:56:04.212 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56998 1 109 1 2025-07-02 05:56:04.212 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56201 1 80 1 2025-07-02 05:57:04.501 00:00:00.000 UDP 28.104.0.1:54704 -> 198.28.0.2:53 1 64 1 2025-07-02 05:57:04.501 00:00:00.000 UDP 28.104.0.1:59429 -> 198.28.0.2:53 1 64 1 2025-07-02 05:57:04.510 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54704 1 80 1 2025-07-02 05:57:04.510 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59429 1 109 1 2025-07-02 05:57:08.988 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-02 05:56:51.523 00:01:00.058 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-07-02 05:58:04.768 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60103 1 109 1 2025-07-02 05:58:04.768 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56956 1 80 1 2025-07-02 05:58:04.758 00:00:00.000 UDP 28.104.0.1:56956 -> 198.28.0.2:53 1 64 1 2025-07-02 05:58:04.758 00:00:00.000 UDP 28.104.0.1:60103 -> 198.28.0.2:53 1 64 1 2025-07-02 05:53:50.512 00:06:00.309 TCP 28.151.0.1:179 -> 28.154.0.1:41239 14 861 1 2025-07-02 05:53:50.562 00:06:00.281 TCP 28.156.0.1:179 -> 28.151.0.1:39145 14 861 1 Summary: total flows: 334, total bytes: 96564, total packets: 1426, avg bps: 198, avg pps: 0, avg bpp: 67 Time window: 2025-07-02 04:54:50 - 2025-07-02 05:59:50 Total flows processed: 334, passed: 334, Blocks skipped: 0, Bytes read: 34800 Sys: 0.0034s User: 0.0026s Wall: 0.0044s flows/second: 76677.5 Runtime: 0.0044s