Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-02 08:58:57.926 00:00:00.000 UDP 28.104.0.1:46303 -> 198.28.0.2:53 1 64 1 2025-07-02 08:58:57.926 00:00:00.000 UDP 28.104.0.1:52236 -> 198.28.0.2:53 1 64 1 2025-07-02 08:58:57.937 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52236 1 80 1 2025-07-02 08:58:57.937 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46303 1 109 1 2025-07-02 08:55:13.567 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2856 1 2025-07-02 08:58:51.578 00:01:00.065 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-07-02 08:55:50.873 00:05:00.144 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-07-02 08:59:58.244 00:00:00.000 UDP 28.104.0.1:54915 -> 198.28.0.2:53 1 64 1 2025-07-02 08:59:58.244 00:00:00.000 UDP 28.104.0.1:60762 -> 198.28.0.2:53 1 64 1 2025-07-02 08:59:58.254 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54915 1 80 1 2025-07-02 08:59:58.254 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60762 1 109 1 2025-07-02 08:55:50.578 00:06:00.307 TCP 28.151.0.1:179 -> 28.154.0.1:41239 14 861 1 2025-07-02 08:55:50.628 00:06:00.256 TCP 28.156.0.1:179 -> 28.151.0.1:39145 14 861 1 2025-07-02 09:00:58.547 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42369 1 109 1 2025-07-02 09:00:58.548 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44734 1 80 1 2025-07-02 09:00:58.537 00:00:00.000 UDP 28.104.0.1:42369 -> 198.28.0.2:53 1 64 1 2025-07-02 09:00:58.537 00:00:00.000 UDP 28.104.0.1:44734 -> 198.28.0.2:53 1 64 1 2025-07-02 09:00:51.578 00:01:00.066 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-07-02 08:56:50.588 00:06:00.286 TCP 28.154.0.1:41239 -> 28.151.0.1:179 14 861 1 2025-07-02 09:01:58.820 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59535 1 80 1 2025-07-02 09:01:58.820 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59809 1 109 1 2025-07-02 09:01:58.810 00:00:00.000 UDP 28.104.0.1:59535 -> 198.28.0.2:53 1 64 1 2025-07-02 09:01:58.810 00:00:00.000 UDP 28.104.0.1:59809 -> 198.28.0.2:53 1 64 1 2025-07-02 09:02:12.767 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-02 09:02:51.579 00:00:00.065 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 123 1 2025-07-02 09:02:59.127 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40212 1 80 1 2025-07-02 09:02:59.127 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54887 1 109 1 2025-07-02 09:02:59.116 00:00:00.000 UDP 28.104.0.1:40212 -> 198.28.0.2:53 1 64 1 2025-07-02 09:02:59.116 00:00:00.000 UDP 28.104.0.1:54887 -> 198.28.0.2:53 1 64 1 2025-07-02 09:03:59.383 00:00:00.000 UDP 28.104.0.1:48737 -> 198.28.0.2:53 1 64 1 2025-07-02 09:03:59.383 00:00:00.000 UDP 28.104.0.1:48945 -> 198.28.0.2:53 1 64 1 2025-07-02 09:03:59.395 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48945 1 109 1 2025-07-02 09:03:59.395 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48737 1 80 1 2025-07-02 09:00:33.574 00:05:10.011 OSPF 28.0.2.1:0 -> 224.0.0.5:0 48 3664 1 2025-07-02 08:59:50.581 00:06:00.314 TCP 28.151.0.1:39145 -> 28.156.0.1:179 14 861 1 2025-07-02 09:03:51.581 00:01:00.065 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-07-02 09:04:59.647 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35324 1 109 1 2025-07-02 09:04:59.647 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36419 1 80 1 2025-07-02 09:04:59.635 00:00:00.000 UDP 28.104.0.1:36419 -> 198.28.0.2:53 1 64 1 2025-07-02 09:04:59.636 00:00:00.000 UDP 28.104.0.1:35324 -> 198.28.0.2:53 1 64 1 2025-07-02 09:01:50.874 00:05:00.143 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-07-02 09:05:59.938 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35051 1 80 1 2025-07-02 09:05:59.938 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37060 1 109 1 2025-07-02 09:05:59.928 00:00:00.000 UDP 28.104.0.1:37060 -> 198.28.0.2:53 1 64 1 2025-07-02 09:05:59.928 00:00:00.000 UDP 28.104.0.1:35051 -> 198.28.0.2:53 1 64 1 2025-07-02 09:05:51.580 00:01:00.065 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-07-02 09:07:00.235 00:00:00.000 UDP 28.104.0.1:34485 -> 198.28.0.2:53 1 64 1 2025-07-02 09:07:00.235 00:00:00.000 UDP 28.104.0.1:53588 -> 198.28.0.2:53 1 64 1 2025-07-02 09:07:00.246 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34485 1 109 1 2025-07-02 09:07:00.246 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53588 1 80 1 2025-07-02 09:07:12.983 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-02 09:02:50.582 00:06:00.304 TCP 28.151.0.1:179 -> 28.154.0.1:41239 14 861 1 2025-07-02 09:02:50.631 00:06:00.254 TCP 28.156.0.1:179 -> 28.151.0.1:39145 14 861 1 2025-07-02 09:07:51.580 00:00:00.065 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 123 1 2025-07-02 09:08:00.528 00:00:00.000 UDP 28.104.0.1:37336 -> 198.28.0.2:53 1 64 1 2025-07-02 09:08:00.528 00:00:00.000 UDP 28.104.0.1:44913 -> 198.28.0.2:53 1 64 1 2025-07-02 09:08:00.538 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44913 1 109 1 2025-07-02 09:08:00.538 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37336 1 80 1 2025-07-02 09:03:50.591 00:06:00.284 TCP 28.154.0.1:41239 -> 28.151.0.1:179 14 861 1 2025-07-02 09:09:00.799 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43375 1 80 1 2025-07-02 09:09:00.799 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50856 1 109 1 2025-07-02 09:09:00.789 00:00:00.000 UDP 28.104.0.1:43375 -> 198.28.0.2:53 1 64 1 2025-07-02 09:09:00.789 00:00:00.000 UDP 28.104.0.1:50856 -> 198.28.0.2:53 1 64 1 2025-07-02 09:08:51.580 00:01:00.065 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-07-02 09:10:01.099 00:00:00.000 UDP 28.104.0.1:53091 -> 198.28.0.2:53 1 64 1 2025-07-02 09:10:01.099 00:00:00.000 UDP 28.104.0.1:45710 -> 198.28.0.2:53 1 64 1 2025-07-02 09:10:01.110 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53091 1 80 1 2025-07-02 09:10:01.110 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45710 1 109 1 2025-07-02 09:05:53.585 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 33 2240 1 2025-07-02 09:11:01.410 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36632 1 109 1 2025-07-02 09:11:01.410 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50692 1 80 1 2025-07-02 09:11:01.400 00:00:00.000 UDP 28.104.0.1:36632 -> 198.28.0.2:53 1 64 1 2025-07-02 09:11:01.400 00:00:00.000 UDP 28.104.0.1:50692 -> 198.28.0.2:53 1 64 1 2025-07-02 09:10:51.580 00:01:00.065 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-07-02 09:07:50.875 00:05:00.143 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-07-02 09:06:50.583 00:06:00.314 TCP 28.151.0.1:39145 -> 28.156.0.1:179 14 861 1 2025-07-02 09:12:01.702 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60419 1 109 1 2025-07-02 09:12:01.702 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44577 1 80 1 2025-07-02 09:12:01.691 00:00:00.000 UDP 28.104.0.1:44577 -> 198.28.0.2:53 1 64 1 2025-07-02 09:12:01.691 00:00:00.000 UDP 28.104.0.1:60419 -> 198.28.0.2:53 1 64 1 2025-07-02 09:12:13.011 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-02 09:12:51.581 00:00:00.065 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 123 1 2025-07-02 09:13:01.988 00:00:00.000 UDP 28.104.0.1:50419 -> 198.28.0.2:53 1 64 1 2025-07-02 09:13:01.988 00:00:00.000 UDP 28.104.0.1:58880 -> 198.28.0.2:53 1 64 1 2025-07-02 09:13:01.999 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50419 1 80 1 2025-07-02 09:13:01.999 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58880 1 109 1 2025-07-02 09:14:02.308 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45999 1 80 1 2025-07-02 09:14:02.308 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41161 1 109 1 2025-07-02 09:14:02.299 00:00:00.000 UDP 28.104.0.1:45999 -> 198.28.0.2:53 1 64 1 2025-07-02 09:14:02.299 00:00:00.000 UDP 28.104.0.1:41161 -> 198.28.0.2:53 1 64 1 2025-07-02 09:09:50.633 00:06:00.254 TCP 28.156.0.1:179 -> 28.151.0.1:39145 14 861 1 2025-07-02 09:13:51.581 00:01:00.065 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-07-02 09:09:50.583 00:06:00.303 TCP 28.151.0.1:179 -> 28.154.0.1:41239 14 861 1 2025-07-02 09:15:02.602 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39492 1 80 1 2025-07-02 09:15:02.602 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51567 1 109 1 2025-07-02 09:15:02.591 00:00:00.000 UDP 28.104.0.1:51567 -> 198.28.0.2:53 1 64 1 2025-07-02 09:15:02.591 00:00:00.000 UDP 28.104.0.1:39492 -> 198.28.0.2:53 1 64 1 2025-07-02 09:11:13.593 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 32 2176 1 2025-07-02 09:10:50.597 00:06:00.279 TCP 28.154.0.1:41239 -> 28.151.0.1:179 14 861 1 2025-07-02 09:16:02.897 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42553 1 109 1 2025-07-02 09:16:02.897 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59363 1 80 1 2025-07-02 09:16:02.887 00:00:00.000 UDP 28.104.0.1:42553 -> 198.28.0.2:53 1 64 1 2025-07-02 09:16:02.887 00:00:00.000 UDP 28.104.0.1:59363 -> 198.28.0.2:53 1 64 1 2025-07-02 09:15:51.582 00:01:00.064 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-07-02 09:17:03.180 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53724 1 109 1 2025-07-02 09:17:03.178 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44548 1 80 1 2025-07-02 09:17:03.168 00:00:00.000 UDP 28.104.0.1:53724 -> 198.28.0.2:53 1 64 1 2025-07-02 09:17:03.168 00:00:00.000 UDP 28.104.0.1:44548 -> 198.28.0.2:53 1 64 1 2025-07-02 09:17:12.929 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-02 09:17:51.583 00:00:00.063 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 123 1 2025-07-02 09:13:50.876 00:05:00.142 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-07-02 09:18:03.473 00:00:00.000 UDP 28.104.0.1:49247 -> 198.28.0.2:53 1 64 1 2025-07-02 09:18:03.473 00:00:00.000 UDP 28.104.0.1:53976 -> 198.28.0.2:53 1 64 1 2025-07-02 09:18:03.484 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53976 1 109 1 2025-07-02 09:18:03.484 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49247 1 80 1 2025-07-02 09:13:50.585 00:06:00.325 TCP 28.151.0.1:39145 -> 28.156.0.1:179 14 861 1 2025-07-02 09:19:03.781 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57304 1 80 1 2025-07-02 09:19:03.781 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55374 1 109 1 2025-07-02 09:19:03.772 00:00:00.000 UDP 28.104.0.1:57304 -> 198.28.0.2:53 1 64 1 2025-07-02 09:19:03.772 00:00:00.000 UDP 28.104.0.1:55374 -> 198.28.0.2:53 1 64 1 2025-07-02 09:18:51.583 00:01:00.063 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-07-02 09:20:04.090 00:00:00.000 UDP 28.104.0.1:35110 -> 198.28.0.2:53 1 64 1 2025-07-02 09:20:04.090 00:00:00.000 UDP 28.104.0.1:35046 -> 198.28.0.2:53 1 64 1 2025-07-02 09:20:04.101 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35046 1 109 1 2025-07-02 09:20:04.101 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35110 1 80 1 2025-07-02 09:16:33.600 00:05:10.020 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2528 1 2025-07-02 09:21:04.384 00:00:00.000 UDP 28.104.0.1:36527 -> 198.28.0.2:53 1 64 1 2025-07-02 09:21:04.384 00:00:00.000 UDP 28.104.0.1:58008 -> 198.28.0.2:53 1 64 1 2025-07-02 09:21:04.395 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36527 1 109 1 2025-07-02 09:21:04.395 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58008 1 80 1 2025-07-02 09:16:50.636 00:06:00.265 TCP 28.156.0.1:179 -> 28.151.0.1:39145 14 861 1 2025-07-02 09:20:51.584 00:01:00.063 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-07-02 09:16:50.585 00:06:00.306 TCP 28.151.0.1:179 -> 28.154.0.1:41239 14 861 1 2025-07-02 09:22:04.688 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58353 1 80 1 2025-07-02 09:22:04.688 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51860 1 109 1 2025-07-02 09:22:04.677 00:00:00.000 UDP 28.104.0.1:58353 -> 198.28.0.2:53 1 64 1 2025-07-02 09:22:04.677 00:00:00.000 UDP 28.104.0.1:51860 -> 198.28.0.2:53 1 64 1 2025-07-02 09:22:13.334 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-02 09:22:51.585 00:00:00.063 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 123 1 2025-07-02 09:17:50.596 00:06:00.285 TCP 28.154.0.1:41239 -> 28.151.0.1:179 14 861 1 2025-07-02 09:23:04.979 00:00:00.000 UDP 28.104.0.1:60133 -> 198.28.0.2:53 1 64 1 2025-07-02 09:23:04.979 00:00:00.000 UDP 28.104.0.1:55719 -> 198.28.0.2:53 1 64 1 2025-07-02 09:23:04.989 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60133 1 109 1 2025-07-02 09:23:04.989 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55719 1 80 1 2025-07-02 09:19:50.881 00:05:00.142 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-07-02 09:24:05.286 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47452 1 80 1 2025-07-02 09:24:05.286 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54754 1 109 1 2025-07-02 09:24:05.277 00:00:00.000 UDP 28.104.0.1:54754 -> 198.28.0.2:53 1 64 1 2025-07-02 09:24:05.277 00:00:00.000 UDP 28.104.0.1:47452 -> 198.28.0.2:53 1 64 1 2025-07-02 09:23:51.584 00:01:00.063 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-07-02 09:25:05.578 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36897 1 109 1 2025-07-02 09:25:05.578 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55752 1 80 1 2025-07-02 09:25:05.567 00:00:00.000 UDP 28.104.0.1:55752 -> 198.28.0.2:53 1 64 1 2025-07-02 09:25:05.567 00:00:00.000 UDP 28.104.0.1:36897 -> 198.28.0.2:53 1 64 1 2025-07-02 09:20:50.586 00:06:00.329 TCP 28.151.0.1:39145 -> 28.156.0.1:179 14 861 1 2025-07-02 09:21:53.622 00:05:00.471 OSPF 28.0.2.1:0 -> 224.0.0.5:0 45 3108 1 2025-07-02 09:26:05.874 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56124 1 80 1 2025-07-02 09:26:05.874 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48682 1 109 1 2025-07-02 09:26:05.865 00:00:00.000 UDP 28.104.0.1:48682 -> 198.28.0.2:53 1 64 1 2025-07-02 09:26:05.865 00:00:00.000 UDP 28.104.0.1:56124 -> 198.28.0.2:53 1 64 1 2025-07-02 09:25:51.586 00:01:00.062 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-07-02 09:27:06.187 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55153 1 80 1 2025-07-02 09:27:06.186 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33160 1 109 1 2025-07-02 09:27:06.176 00:00:00.000 UDP 28.104.0.1:33160 -> 198.28.0.2:53 1 64 1 2025-07-02 09:27:06.176 00:00:00.000 UDP 28.104.0.1:55153 -> 198.28.0.2:53 1 64 1 2025-07-02 09:27:13.384 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-02 09:28:06.463 00:00:00.000 UDP 28.104.0.1:38335 -> 198.28.0.2:53 1 64 1 2025-07-02 09:28:06.463 00:00:00.000 UDP 28.104.0.1:50572 -> 198.28.0.2:53 1 64 1 2025-07-02 09:28:06.473 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38335 1 109 1 2025-07-02 09:28:06.473 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50572 1 80 1 2025-07-02 09:23:50.636 00:06:00.268 TCP 28.156.0.1:179 -> 28.151.0.1:39145 14 861 1 2025-07-02 09:23:50.586 00:06:00.307 TCP 28.151.0.1:179 -> 28.154.0.1:41239 14 861 1 2025-07-02 09:29:06.756 00:00:00.000 UDP 28.104.0.1:57633 -> 198.28.0.2:53 1 64 1 2025-07-02 09:29:06.756 00:00:00.000 UDP 28.104.0.1:45433 -> 198.28.0.2:53 1 64 1 2025-07-02 09:29:06.766 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45433 1 80 1 2025-07-02 09:29:06.766 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57633 1 109 1 2025-07-02 09:27:51.587 00:02:00.062 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-07-02 09:24:50.598 00:06:00.286 TCP 28.154.0.1:41239 -> 28.151.0.1:179 14 861 1 2025-07-02 09:25:50.882 00:05:00.141 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-07-02 09:30:07.066 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60095 1 80 1 2025-07-02 09:30:07.066 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35068 1 109 1 2025-07-02 09:30:07.055 00:00:00.000 UDP 28.104.0.1:35068 -> 198.28.0.2:53 1 64 1 2025-07-02 09:30:07.055 00:00:00.000 UDP 28.104.0.1:60095 -> 198.28.0.2:53 1 64 1 2025-07-02 09:31:07.357 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32798 1 80 1 2025-07-02 09:31:07.357 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47376 1 109 1 2025-07-02 09:31:07.346 00:00:00.000 UDP 28.104.0.1:32798 -> 198.28.0.2:53 1 64 1 2025-07-02 09:31:07.346 00:00:00.000 UDP 28.104.0.1:47376 -> 198.28.0.2:53 1 64 1 2025-07-02 09:27:03.631 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 43 3140 1 2025-07-02 09:30:51.586 00:01:00.063 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-07-02 09:32:07.647 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39523 1 109 1 2025-07-02 09:32:07.646 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60360 1 80 1 2025-07-02 09:32:07.637 00:00:00.000 UDP 28.104.0.1:39523 -> 198.28.0.2:53 1 64 1 2025-07-02 09:32:07.637 00:00:00.000 UDP 28.104.0.1:60360 -> 198.28.0.2:53 1 64 1 2025-07-02 09:32:13.437 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-02 09:27:50.588 00:06:00.329 TCP 28.151.0.1:39145 -> 28.156.0.1:179 14 861 1 2025-07-02 09:33:07.939 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48335 1 109 1 2025-07-02 09:33:07.939 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36816 1 80 1 2025-07-02 09:33:07.929 00:00:00.000 UDP 28.104.0.1:36816 -> 198.28.0.2:53 1 64 1 2025-07-02 09:33:07.929 00:00:00.000 UDP 28.104.0.1:48335 -> 198.28.0.2:53 1 64 1 2025-07-02 09:32:51.588 00:01:00.062 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-07-02 09:34:08.249 00:00:00.000 UDP 28.104.0.1:53737 -> 198.28.0.2:53 1 64 1 2025-07-02 09:34:08.249 00:00:00.000 UDP 28.104.0.1:56361 -> 198.28.0.2:53 1 64 1 2025-07-02 09:34:08.259 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53737 1 80 1 2025-07-02 09:34:08.259 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56361 1 109 1 2025-07-02 09:34:51.590 00:00:00.058 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 123 1 2025-07-02 09:35:08.565 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53138 1 80 1 2025-07-02 09:35:08.565 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40580 1 109 1 2025-07-02 09:35:08.554 00:00:00.000 UDP 28.104.0.1:40580 -> 198.28.0.2:53 1 64 1 2025-07-02 09:35:08.554 00:00:00.000 UDP 28.104.0.1:53138 -> 198.28.0.2:53 1 64 1 2025-07-02 09:30:50.588 00:06:00.306 TCP 28.151.0.1:179 -> 28.154.0.1:41239 14 861 1 2025-07-02 09:30:50.640 00:06:00.269 TCP 28.156.0.1:179 -> 28.151.0.1:39145 14 861 1 2025-07-02 09:31:50.885 00:05:00.138 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-07-02 09:36:08.826 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42062 1 109 1 2025-07-02 09:36:08.826 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43287 1 80 1 2025-07-02 09:36:08.816 00:00:00.000 UDP 28.104.0.1:42062 -> 198.28.0.2:53 1 64 1 2025-07-02 09:36:08.816 00:00:00.000 UDP 28.104.0.1:43287 -> 198.28.0.2:53 1 64 1 2025-07-02 09:32:23.641 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2956 1 2025-07-02 09:35:51.590 00:01:00.059 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-07-02 09:31:50.599 00:06:00.285 TCP 28.154.0.1:41239 -> 28.151.0.1:179 14 861 1 2025-07-02 09:37:09.117 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35751 1 109 1 2025-07-02 09:37:09.118 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35184 1 80 1 2025-07-02 09:37:09.107 00:00:00.000 UDP 28.104.0.1:35184 -> 198.28.0.2:53 1 64 1 2025-07-02 09:37:09.107 00:00:00.000 UDP 28.104.0.1:35751 -> 198.28.0.2:53 1 64 1 2025-07-02 09:37:13.603 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-02 09:38:09.420 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57488 1 109 1 2025-07-02 09:38:09.420 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45603 1 80 1 2025-07-02 09:38:09.410 00:00:00.000 UDP 28.104.0.1:45603 -> 198.28.0.2:53 1 64 1 2025-07-02 09:38:09.411 00:00:00.000 UDP 28.104.0.1:57488 -> 198.28.0.2:53 1 64 1 2025-07-02 09:37:51.591 00:01:00.058 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-07-02 09:39:09.716 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34584 1 109 1 2025-07-02 09:39:09.716 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38071 1 80 1 2025-07-02 09:39:09.706 00:00:00.000 UDP 28.104.0.1:34584 -> 198.28.0.2:53 1 64 1 2025-07-02 09:39:09.706 00:00:00.000 UDP 28.104.0.1:38071 -> 198.28.0.2:53 1 64 1 2025-07-02 09:34:50.590 00:06:00.329 TCP 28.151.0.1:39145 -> 28.156.0.1:179 14 861 1 2025-07-02 09:39:51.592 00:00:00.058 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 123 1 2025-07-02 09:40:10.012 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51543 1 109 1 2025-07-02 09:40:10.012 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39767 1 80 1 2025-07-02 09:40:10.002 00:00:00.000 UDP 28.104.0.1:51543 -> 198.28.0.2:53 1 64 1 2025-07-02 09:40:10.002 00:00:00.000 UDP 28.104.0.1:39767 -> 198.28.0.2:53 1 64 1 2025-07-02 09:41:10.313 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57313 1 80 1 2025-07-02 09:41:10.313 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50088 1 109 1 2025-07-02 09:41:10.303 00:00:00.000 UDP 28.104.0.1:50088 -> 198.28.0.2:53 1 64 1 2025-07-02 09:41:10.303 00:00:00.000 UDP 28.104.0.1:57313 -> 198.28.0.2:53 1 64 1 2025-07-02 09:40:51.592 00:01:00.058 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-07-02 09:37:50.884 00:05:00.141 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-07-02 09:37:43.645 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 32 2176 1 2025-07-02 09:42:10.615 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41367 1 80 1 2025-07-02 09:42:10.615 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41779 1 109 1 2025-07-02 09:42:10.604 00:00:00.000 UDP 28.104.0.1:41779 -> 198.28.0.2:53 1 64 1 2025-07-02 09:42:10.604 00:00:00.000 UDP 28.104.0.1:41367 -> 198.28.0.2:53 1 64 1 2025-07-02 09:42:13.530 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-02 09:37:50.591 00:06:00.307 TCP 28.151.0.1:179 -> 28.154.0.1:41239 14 861 1 2025-07-02 09:37:50.641 00:06:00.267 TCP 28.156.0.1:179 -> 28.151.0.1:39145 14 861 1 2025-07-02 09:43:10.906 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60223 1 80 1 2025-07-02 09:43:10.905 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50975 1 109 1 2025-07-02 09:43:10.895 00:00:00.000 UDP 28.104.0.1:60223 -> 198.28.0.2:53 1 64 1 2025-07-02 09:43:10.895 00:00:00.000 UDP 28.104.0.1:50975 -> 198.28.0.2:53 1 64 1 2025-07-02 09:42:51.592 00:01:00.058 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-07-02 09:38:50.600 00:06:00.290 TCP 28.154.0.1:41239 -> 28.151.0.1:179 14 861 1 2025-07-02 09:44:11.213 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49307 1 109 1 2025-07-02 09:44:11.213 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38907 1 80 1 2025-07-02 09:44:11.203 00:00:00.000 UDP 28.104.0.1:49307 -> 198.28.0.2:53 1 64 1 2025-07-02 09:44:11.203 00:00:00.000 UDP 28.104.0.1:38907 -> 198.28.0.2:53 1 64 1 2025-07-02 09:44:51.593 00:00:00.059 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 123 1 2025-07-02 09:45:11.508 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60630 1 80 1 2025-07-02 09:45:11.508 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54122 1 109 1 2025-07-02 09:45:11.497 00:00:00.000 UDP 28.104.0.1:54122 -> 198.28.0.2:53 1 64 1 2025-07-02 09:45:11.497 00:00:00.000 UDP 28.104.0.1:60630 -> 198.28.0.2:53 1 64 1 2025-07-02 09:46:11.877 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44095 1 80 1 2025-07-02 09:46:11.877 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49985 1 109 1 2025-07-02 09:46:11.867 00:00:00.000 UDP 28.104.0.1:49985 -> 198.28.0.2:53 1 64 1 2025-07-02 09:46:11.867 00:00:00.000 UDP 28.104.0.1:44095 -> 198.28.0.2:53 1 64 1 2025-07-02 09:45:51.592 00:01:00.060 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-07-02 09:41:50.592 00:06:00.328 TCP 28.151.0.1:39145 -> 28.156.0.1:179 14 861 1 2025-07-02 09:47:12.180 00:00:00.000 UDP 28.104.0.1:54300 -> 198.28.0.2:53 1 64 1 2025-07-02 09:47:12.180 00:00:00.000 UDP 28.104.0.1:57211 -> 198.28.0.2:53 1 64 1 2025-07-02 09:47:13.658 00:00:00.025 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-02 09:47:12.192 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54300 1 109 1 2025-07-02 09:43:03.653 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 34 2320 1 2025-07-02 09:47:12.191 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57211 1 80 1 2025-07-02 09:43:50.888 00:05:00.137 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-07-02 09:48:12.486 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50585 1 109 1 2025-07-02 09:48:12.475 00:00:00.000 UDP 28.104.0.1:50585 -> 198.28.0.2:53 1 64 1 2025-07-02 09:47:51.593 00:01:00.059 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-07-02 09:49:12.815 00:00:00.000 UDP 28.104.0.1:56523 -> 198.28.0.2:53 1 64 1 2025-07-02 09:48:12.476 00:01:00.339 UDP 28.104.0.1:37056 -> 198.28.0.2:53 2 128 1 2025-07-02 09:48:12.486 00:01:00.339 UDP 198.28.0.2:53 -> 28.104.0.1:37056 2 189 1 2025-07-02 09:49:12.824 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56523 1 80 1 2025-07-02 09:44:50.592 00:06:00.309 TCP 28.151.0.1:179 -> 28.154.0.1:41239 14 861 1 2025-07-02 09:44:50.644 00:06:00.267 TCP 28.156.0.1:179 -> 28.151.0.1:39145 14 861 1 2025-07-02 09:49:51.594 00:00:00.059 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 123 1 2025-07-02 09:50:13.083 00:00:00.000 UDP 28.104.0.1:53476 -> 198.28.0.2:53 1 64 1 2025-07-02 09:50:13.083 00:00:00.000 UDP 28.104.0.1:54845 -> 198.28.0.2:53 1 64 1 2025-07-02 09:50:13.093 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53476 1 109 1 2025-07-02 09:50:13.093 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54845 1 80 1 2025-07-02 09:45:50.603 00:06:00.290 TCP 28.154.0.1:41239 -> 28.151.0.1:179 14 861 1 2025-07-02 09:51:13.383 00:00:00.000 UDP 28.104.0.1:40362 -> 198.28.0.2:53 1 64 1 2025-07-02 09:51:13.384 00:00:00.000 UDP 28.104.0.1:52657 -> 198.28.0.2:53 1 64 1 2025-07-02 09:51:13.394 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52657 1 109 1 2025-07-02 09:51:13.394 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40362 1 80 1 2025-07-02 09:50:51.594 00:01:00.059 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-07-02 09:52:13.680 00:00:00.000 UDP 28.104.0.1:32923 -> 198.28.0.2:53 1 64 1 2025-07-02 09:52:13.680 00:00:00.000 UDP 28.104.0.1:50330 -> 198.28.0.2:53 1 64 1 2025-07-02 09:52:13.939 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-02 09:52:13.689 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32923 1 80 1 2025-07-02 09:52:13.689 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50330 1 109 1 2025-07-02 09:48:23.658 00:05:02.848 OSPF 28.0.2.1:0 -> 224.0.0.5:0 43 3112 1 2025-07-02 09:53:13.980 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52975 1 109 1 2025-07-02 09:53:13.981 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44660 1 80 1 2025-07-02 09:53:13.970 00:00:00.000 UDP 28.104.0.1:52975 -> 198.28.0.2:53 1 64 1 2025-07-02 09:53:13.970 00:00:00.000 UDP 28.104.0.1:44660 -> 198.28.0.2:53 1 64 1 2025-07-02 09:48:50.594 00:06:00.326 TCP 28.151.0.1:39145 -> 28.156.0.1:179 14 861 1 2025-07-02 09:52:51.594 00:01:00.067 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-07-02 09:49:50.890 00:05:00.137 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-07-02 09:54:14.278 00:00:00.000 UDP 28.104.0.1:47448 -> 198.28.0.2:53 1 64 1 2025-07-02 09:54:14.278 00:00:00.000 UDP 28.104.0.1:33464 -> 198.28.0.2:53 1 64 1 2025-07-02 09:54:14.289 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33464 1 80 1 2025-07-02 09:54:14.289 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47448 1 109 1 2025-07-02 09:54:51.594 00:00:00.068 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 123 1 2025-07-02 09:55:14.568 00:00:00.000 UDP 28.104.0.1:45607 -> 198.28.0.2:53 1 64 1 2025-07-02 09:55:14.568 00:00:00.000 UDP 28.104.0.1:38394 -> 198.28.0.2:53 1 64 1 2025-07-02 09:55:14.577 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38394 1 109 1 2025-07-02 09:55:14.577 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45607 1 80 1 2025-07-02 09:56:14.876 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59216 1 109 1 2025-07-02 09:56:14.876 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60248 1 80 1 2025-07-02 09:56:14.866 00:00:00.000 UDP 28.104.0.1:59216 -> 198.28.0.2:53 1 64 1 2025-07-02 09:56:14.865 00:00:00.000 UDP 28.104.0.1:60248 -> 198.28.0.2:53 1 64 1 2025-07-02 09:51:50.594 00:06:00.311 TCP 28.151.0.1:179 -> 28.154.0.1:41239 14 861 1 2025-07-02 09:51:50.645 00:06:00.266 TCP 28.156.0.1:179 -> 28.151.0.1:39145 14 861 1 2025-07-02 09:55:51.594 00:01:00.068 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-07-02 09:57:15.184 00:00:00.000 UDP 28.104.0.1:52953 -> 198.28.0.2:53 1 64 1 2025-07-02 09:57:15.184 00:00:00.000 UDP 28.104.0.1:51510 -> 198.28.0.2:53 1 64 1 2025-07-02 09:57:13.972 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-02 09:57:15.195 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52953 1 80 1 2025-07-02 09:57:15.195 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51510 1 109 1 2025-07-02 09:53:33.509 00:05:10.160 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2800 1 2025-07-02 09:52:50.605 00:06:00.290 TCP 28.154.0.1:41239 -> 28.151.0.1:179 14 861 1 2025-07-02 09:58:15.484 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43084 1 109 1 2025-07-02 09:58:15.484 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39792 1 80 1 2025-07-02 09:58:15.475 00:00:00.000 UDP 28.104.0.1:43084 -> 198.28.0.2:53 1 64 1 2025-07-02 09:58:15.475 00:00:00.000 UDP 28.104.0.1:39792 -> 198.28.0.2:53 1 64 1 2025-07-02 09:57:51.597 00:01:00.066 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 Summary: total flows: 342, total bytes: 100138, total packets: 1477, avg bps: 209, avg pps: 0, avg bpp: 67 Time window: 2025-07-02 08:55:13 - 2025-07-02 09:58:51 Total flows processed: 342, passed: 342, Blocks skipped: 0, Bytes read: 35632 Sys: 0.0031s User: 0.0024s Wall: 0.0043s flows/second: 78764.1 Runtime: 0.0044s