Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-12 01:54:44.721 00:05:10.009 OSPF 28.0.2.1:0 -> 224.0.0.5:0 43 3024 1 2025-07-12 01:59:12.460 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51940 1 80 1 2025-07-12 01:59:12.460 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39085 1 109 1 2025-07-12 01:59:12.449 00:00:00.000 UDP 28.104.0.1:39085 -> 198.28.0.2:53 1 64 1 2025-07-12 01:59:12.450 00:00:00.000 UDP 28.104.0.1:51940 -> 198.28.0.2:53 1 64 1 2025-07-12 02:00:12.753 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48117 1 109 1 2025-07-12 02:00:12.752 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58023 1 80 1 2025-07-12 02:00:12.743 00:00:00.000 UDP 28.104.0.1:48117 -> 198.28.0.2:53 1 64 1 2025-07-12 02:00:12.743 00:00:00.000 UDP 28.104.0.1:58023 -> 198.28.0.2:53 1 64 1 2025-07-12 01:56:56.122 00:04:00.219 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-07-12 01:56:56.201 00:04:00.140 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-07-12 01:56:55.132 00:05:01.209 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-07-12 02:01:13.068 00:00:00.000 UDP 28.104.0.1:55186 -> 198.28.0.2:53 1 64 1 2025-07-12 02:01:13.068 00:00:00.000 UDP 28.104.0.1:33069 -> 198.28.0.2:53 1 64 1 2025-07-12 02:01:13.079 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33069 1 80 1 2025-07-12 02:01:13.079 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55186 1 109 1 2025-07-12 02:01:53.312 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-12 02:02:13.365 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55376 1 80 1 2025-07-12 02:02:13.368 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49208 1 109 1 2025-07-12 02:02:13.356 00:00:00.000 UDP 28.104.0.1:49208 -> 198.28.0.2:53 1 64 1 2025-07-12 02:02:13.353 00:00:00.000 UDP 28.104.0.1:55376 -> 198.28.0.2:53 1 64 1 2025-07-12 01:58:55.121 00:05:01.231 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-07-12 02:03:13.667 00:00:00.000 UDP 28.104.0.1:52310 -> 198.28.0.2:53 1 64 1 2025-07-12 02:03:13.667 00:00:00.000 UDP 28.104.0.1:44029 -> 198.28.0.2:53 1 64 1 2025-07-12 02:03:13.675 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52310 1 80 1 2025-07-12 02:03:13.676 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44029 1 109 1 2025-07-12 01:58:55.172 00:06:00.821 TCP 28.156.0.1:179 -> 28.151.0.1:39145 14 861 1 2025-07-12 01:59:55.123 00:05:00.880 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-07-12 02:00:01.572 00:05:03.714 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2868 1 2025-07-12 02:04:13.968 00:00:00.000 UDP 28.104.0.1:60892 -> 198.28.0.2:53 1 64 1 2025-07-12 02:04:13.968 00:00:00.000 UDP 28.104.0.1:41712 -> 198.28.0.2:53 1 64 1 2025-07-12 02:04:13.979 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41712 1 80 1 2025-07-12 02:04:13.979 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60892 1 109 1 2025-07-12 02:05:14.271 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54927 1 109 1 2025-07-12 02:05:14.271 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53358 1 80 1 2025-07-12 02:05:14.261 00:00:00.000 UDP 28.104.0.1:54927 -> 198.28.0.2:53 1 64 1 2025-07-12 02:05:14.261 00:00:00.000 UDP 28.104.0.1:53358 -> 198.28.0.2:53 1 64 1 2025-07-12 02:01:56.202 00:04:00.141 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-07-12 02:06:14.565 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60877 1 80 1 2025-07-12 02:06:14.565 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45827 1 109 1 2025-07-12 02:06:14.555 00:00:00.000 UDP 28.104.0.1:45827 -> 198.28.0.2:53 1 64 1 2025-07-12 02:06:14.554 00:00:00.000 UDP 28.104.0.1:60877 -> 198.28.0.2:53 1 64 1 2025-07-12 02:06:53.309 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-12 02:01:56.124 00:06:00.219 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-07-12 02:02:55.135 00:05:01.208 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-07-12 02:07:14.855 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37389 1 80 1 2025-07-12 02:07:14.855 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35387 1 109 1 2025-07-12 02:07:14.845 00:00:00.000 UDP 28.104.0.1:37389 -> 198.28.0.2:53 1 64 1 2025-07-12 02:07:14.845 00:00:00.000 UDP 28.104.0.1:35387 -> 198.28.0.2:53 1 64 1 2025-07-12 02:08:15.147 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40197 1 109 1 2025-07-12 02:08:15.147 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39082 1 80 1 2025-07-12 02:08:15.137 00:00:00.000 UDP 28.104.0.1:40197 -> 198.28.0.2:53 1 64 1 2025-07-12 02:08:15.137 00:00:00.000 UDP 28.104.0.1:39082 -> 198.28.0.2:53 1 64 1 2025-07-12 02:04:55.126 00:05:01.227 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-07-12 02:09:15.495 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49218 1 109 1 2025-07-12 02:09:15.495 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43850 1 80 1 2025-07-12 02:09:15.485 00:00:00.000 UDP 28.104.0.1:43850 -> 198.28.0.2:53 1 64 1 2025-07-12 02:09:15.485 00:00:00.000 UDP 28.104.0.1:49218 -> 198.28.0.2:53 1 64 1 2025-07-12 02:05:14.740 00:05:10.002 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2484 1 2025-07-12 02:05:55.127 00:05:00.877 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-07-12 02:10:15.792 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56940 1 109 1 2025-07-12 02:10:15.792 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50845 1 80 1 2025-07-12 02:10:15.784 00:00:00.000 UDP 28.104.0.1:50845 -> 198.28.0.2:53 1 64 1 2025-07-12 02:10:15.784 00:00:00.000 UDP 28.104.0.1:56940 -> 198.28.0.2:53 1 64 1 2025-07-12 02:05:55.177 00:06:00.816 TCP 28.156.0.1:179 -> 28.151.0.1:39145 14 861 1 2025-07-12 02:06:56.204 00:04:00.139 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-07-12 02:11:16.068 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44627 1 80 1 2025-07-12 02:11:16.067 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42921 1 109 1 2025-07-12 02:11:16.056 00:00:00.000 UDP 28.104.0.1:42921 -> 198.28.0.2:53 1 64 1 2025-07-12 02:11:16.056 00:00:00.000 UDP 28.104.0.1:44627 -> 198.28.0.2:53 1 64 1 2025-07-12 02:11:53.521 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-12 02:12:16.310 00:00:00.000 UDP 28.104.0.1:37303 -> 198.28.0.2:53 1 64 1 2025-07-12 02:12:16.310 00:00:00.000 UDP 28.104.0.1:60890 -> 198.28.0.2:53 1 64 1 2025-07-12 02:12:16.320 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60890 1 80 1 2025-07-12 02:12:16.320 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37303 1 109 1 2025-07-12 02:08:55.138 00:05:01.205 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-07-12 02:13:16.599 00:00:00.000 UDP 28.104.0.1:57918 -> 198.28.0.2:53 1 64 1 2025-07-12 02:13:16.600 00:00:00.000 UDP 28.104.0.1:58126 -> 198.28.0.2:53 1 64 1 2025-07-12 02:13:16.612 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58126 1 109 1 2025-07-12 02:13:16.611 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57918 1 80 1 2025-07-12 02:08:56.126 00:06:00.218 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-07-12 02:14:16.915 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58815 1 80 1 2025-07-12 02:14:16.915 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49856 1 109 1 2025-07-12 02:14:16.905 00:00:00.000 UDP 28.104.0.1:49856 -> 198.28.0.2:53 1 64 1 2025-07-12 02:14:16.905 00:00:00.000 UDP 28.104.0.1:58815 -> 198.28.0.2:53 1 64 1 2025-07-12 02:10:34.743 00:05:10.010 OSPF 28.0.2.1:0 -> 224.0.0.5:0 34 2320 1 2025-07-12 02:10:55.128 00:05:01.226 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-07-12 02:15:17.200 00:00:00.000 UDP 28.104.0.1:42317 -> 198.28.0.2:53 1 64 1 2025-07-12 02:15:17.200 00:00:00.000 UDP 28.104.0.1:57169 -> 198.28.0.2:53 1 64 1 2025-07-12 02:15:17.211 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57169 1 109 1 2025-07-12 02:15:17.211 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42317 1 80 1 2025-07-12 02:11:55.128 00:05:00.883 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-07-12 02:11:56.203 00:04:00.141 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-07-12 02:16:17.498 00:00:00.000 UDP 28.104.0.1:43298 -> 198.28.0.2:53 1 64 1 2025-07-12 02:16:17.498 00:00:00.000 UDP 28.104.0.1:40281 -> 198.28.0.2:53 1 64 1 2025-07-12 02:16:17.511 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40281 1 109 1 2025-07-12 02:16:17.511 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43298 1 80 1 2025-07-12 02:16:53.574 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-12 02:17:17.801 00:00:00.000 UDP 28.104.0.1:48160 -> 198.28.0.2:53 1 64 1 2025-07-12 02:17:17.801 00:00:00.000 UDP 28.104.0.1:41318 -> 198.28.0.2:53 1 64 1 2025-07-12 02:17:17.811 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41318 1 109 1 2025-07-12 02:17:17.811 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48160 1 80 1 2025-07-12 02:12:55.180 00:06:00.818 TCP 28.156.0.1:179 -> 28.151.0.1:39145 14 861 1 2025-07-12 02:15:56.130 00:02:00.215 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-07-12 02:16:56.205 00:01:00.140 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-07-12 02:18:18.117 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58932 1 80 1 2025-07-12 02:18:18.117 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42777 1 109 1 2025-07-12 02:18:18.108 00:00:00.000 UDP 28.104.0.1:58932 -> 198.28.0.2:53 1 64 1 2025-07-12 02:18:18.108 00:00:00.000 UDP 28.104.0.1:42777 -> 198.28.0.2:53 1 64 1 2025-07-12 02:14:55.139 00:05:01.206 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-07-12 02:19:18.444 00:00:00.000 UDP 28.104.0.1:50842 -> 198.28.0.2:53 1 64 1 2025-07-12 02:19:18.444 00:00:00.000 UDP 28.104.0.1:33355 -> 198.28.0.2:53 1 64 1 2025-07-12 02:19:18.455 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33355 1 109 1 2025-07-12 02:19:18.454 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50842 1 80 1 2025-07-12 02:15:54.752 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2544 1 2025-07-12 02:20:18.744 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56245 1 109 1 2025-07-12 02:20:18.744 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45913 1 80 1 2025-07-12 02:20:18.735 00:00:00.000 UDP 28.104.0.1:45913 -> 198.28.0.2:53 1 64 1 2025-07-12 02:20:18.735 00:00:00.000 UDP 28.104.0.1:56245 -> 198.28.0.2:53 1 64 1 2025-07-12 02:16:55.130 00:05:01.226 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-07-12 02:21:19.057 00:00:00.000 UDP 28.104.0.1:41810 -> 198.28.0.2:53 1 64 1 2025-07-12 02:21:19.057 00:00:00.000 UDP 28.104.0.1:39830 -> 198.28.0.2:53 1 64 1 2025-07-12 02:21:19.067 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41810 1 109 1 2025-07-12 02:21:19.067 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39830 1 80 1 2025-07-12 02:21:53.693 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-12 02:17:55.129 00:05:00.882 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-07-12 02:22:19.360 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49690 1 80 1 2025-07-12 02:22:19.360 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53689 1 109 1 2025-07-12 02:22:19.350 00:00:00.000 UDP 28.104.0.1:49690 -> 198.28.0.2:53 1 64 1 2025-07-12 02:22:19.350 00:00:00.000 UDP 28.104.0.1:53689 -> 198.28.0.2:53 1 64 1 2025-07-12 02:18:56.205 00:04:00.142 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-07-12 02:18:56.130 00:04:00.217 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-07-12 02:23:19.659 00:00:00.000 UDP 28.104.0.1:46755 -> 198.28.0.2:53 1 64 1 2025-07-12 02:23:19.659 00:00:00.000 UDP 28.104.0.1:57611 -> 198.28.0.2:53 1 64 1 2025-07-12 02:23:19.668 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57611 1 80 1 2025-07-12 02:23:19.668 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46755 1 109 1 2025-07-12 02:19:55.180 00:05:00.821 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-07-12 02:24:19.935 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50170 1 80 1 2025-07-12 02:24:19.935 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33341 1 109 1 2025-07-12 02:24:19.924 00:00:00.000 UDP 28.104.0.1:33341 -> 198.28.0.2:53 1 64 1 2025-07-12 02:24:19.924 00:00:00.000 UDP 28.104.0.1:50170 -> 198.28.0.2:53 1 64 1 2025-07-12 02:20:55.141 00:05:01.206 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-07-12 02:25:20.245 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38021 1 80 1 2025-07-12 02:25:20.245 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56231 1 109 1 2025-07-12 02:25:20.234 00:00:00.000 UDP 28.104.0.1:56231 -> 198.28.0.2:53 1 64 1 2025-07-12 02:25:20.233 00:00:00.000 UDP 28.104.0.1:38021 -> 198.28.0.2:53 1 64 1 2025-07-12 02:21:14.759 00:05:10.831 OSPF 28.0.2.1:0 -> 224.0.0.5:0 42 3028 1 2025-07-12 02:26:20.502 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53113 1 80 1 2025-07-12 02:26:20.502 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33577 1 109 1 2025-07-12 02:26:20.492 00:00:00.000 UDP 28.104.0.1:33577 -> 198.28.0.2:53 1 64 1 2025-07-12 02:26:20.492 00:00:00.000 UDP 28.104.0.1:53113 -> 198.28.0.2:53 1 64 1 2025-07-12 02:26:53.537 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-12 02:22:55.131 00:05:01.226 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-07-12 02:27:20.796 00:00:00.000 UDP 28.104.0.1:35702 -> 198.28.0.2:53 1 64 1 2025-07-12 02:27:20.796 00:00:00.000 UDP 28.104.0.1:35719 -> 198.28.0.2:53 1 64 1 2025-07-12 02:27:20.806 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35719 1 109 1 2025-07-12 02:27:20.806 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35702 1 80 1 2025-07-12 02:23:55.130 00:05:00.882 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-07-12 02:23:56.130 00:04:00.216 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-07-12 02:23:56.206 00:04:00.140 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-07-12 02:28:21.100 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40143 1 109 1 2025-07-12 02:28:21.100 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37050 1 80 1 2025-07-12 02:28:21.091 00:00:00.000 UDP 28.104.0.1:37050 -> 198.28.0.2:53 1 64 1 2025-07-12 02:28:21.091 00:00:00.000 UDP 28.104.0.1:40143 -> 198.28.0.2:53 1 64 1 2025-07-12 02:29:21.411 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41872 1 80 1 2025-07-12 02:29:21.411 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39003 1 109 1 2025-07-12 02:29:21.401 00:00:00.000 UDP 28.104.0.1:39003 -> 198.28.0.2:53 1 64 1 2025-07-12 02:29:21.401 00:00:00.000 UDP 28.104.0.1:41872 -> 198.28.0.2:53 1 64 1 2025-07-12 02:25:55.181 00:05:00.822 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-07-12 02:30:21.700 00:00:00.000 UDP 28.104.0.1:52187 -> 198.28.0.2:53 1 64 1 2025-07-12 02:30:21.700 00:00:00.000 UDP 28.104.0.1:45672 -> 198.28.0.2:53 1 64 1 2025-07-12 02:30:21.710 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52187 1 109 1 2025-07-12 02:30:21.710 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45672 1 80 1 2025-07-12 02:26:34.760 00:05:10.011 OSPF 28.0.2.1:0 -> 224.0.0.5:0 45 3200 1 2025-07-12 02:26:55.140 00:05:01.207 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-07-12 02:31:21.992 00:00:00.000 UDP 28.104.0.1:50468 -> 198.28.0.2:53 1 64 1 2025-07-12 02:31:21.992 00:00:00.000 UDP 28.104.0.1:42802 -> 198.28.0.2:53 1 64 1 2025-07-12 02:31:22.001 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50468 1 80 1 2025-07-12 02:31:22.001 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42802 1 109 1 2025-07-12 02:31:53.921 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-12 02:32:22.295 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49486 1 109 1 2025-07-12 02:32:22.295 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42536 1 80 1 2025-07-12 02:32:22.286 00:00:00.000 UDP 28.104.0.1:42536 -> 198.28.0.2:53 1 64 1 2025-07-12 02:32:22.286 00:00:00.000 UDP 28.104.0.1:49486 -> 198.28.0.2:53 1 64 1 2025-07-12 02:28:55.131 00:05:01.227 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-07-12 02:28:56.132 00:04:00.216 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-07-12 02:28:56.209 00:04:00.139 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-07-12 02:33:22.544 00:00:00.000 UDP 28.104.0.1:47030 -> 198.28.0.2:53 1 64 1 2025-07-12 02:33:22.544 00:00:00.000 UDP 28.104.0.1:37229 -> 198.28.0.2:53 1 64 1 2025-07-12 02:33:22.555 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37229 1 109 1 2025-07-12 02:33:22.555 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47030 1 80 1 2025-07-12 02:29:55.131 00:05:00.883 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-07-12 02:34:22.844 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35020 1 80 1 2025-07-12 02:34:22.844 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37209 1 109 1 2025-07-12 02:34:22.833 00:00:00.000 UDP 28.104.0.1:37209 -> 198.28.0.2:53 1 64 1 2025-07-12 02:34:22.833 00:00:00.000 UDP 28.104.0.1:35020 -> 198.28.0.2:53 1 64 1 2025-07-12 02:35:23.137 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59042 1 80 1 2025-07-12 02:35:23.137 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39950 1 109 1 2025-07-12 02:35:23.128 00:00:00.000 UDP 28.104.0.1:39950 -> 198.28.0.2:53 1 64 1 2025-07-12 02:35:23.128 00:00:00.000 UDP 28.104.0.1:59042 -> 198.28.0.2:53 1 64 1 2025-07-12 02:31:55.182 00:05:00.833 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-07-12 02:31:54.772 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2628 1 2025-07-12 02:36:23.437 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60032 1 109 1 2025-07-12 02:36:23.436 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57706 1 80 1 2025-07-12 02:36:23.427 00:00:00.000 UDP 28.104.0.1:57706 -> 198.28.0.2:53 1 64 1 2025-07-12 02:36:23.428 00:00:00.000 UDP 28.104.0.1:60032 -> 198.28.0.2:53 1 64 1 2025-07-12 02:32:55.142 00:05:01.207 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-07-12 02:36:54.249 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-12 02:37:23.729 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40101 1 109 1 2025-07-12 02:37:23.729 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34916 1 80 1 2025-07-12 02:37:23.718 00:00:00.000 UDP 28.104.0.1:34916 -> 198.28.0.2:53 1 64 1 2025-07-12 02:37:23.718 00:00:00.000 UDP 28.104.0.1:40101 -> 198.28.0.2:53 1 64 1 2025-07-12 02:33:56.210 00:04:00.140 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-07-12 02:38:24.050 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48881 1 109 1 2025-07-12 02:38:24.050 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56023 1 80 1 2025-07-12 02:38:24.041 00:00:00.000 UDP 28.104.0.1:56023 -> 198.28.0.2:53 1 64 1 2025-07-12 02:38:24.041 00:00:00.000 UDP 28.104.0.1:48881 -> 198.28.0.2:53 1 64 1 2025-07-12 02:33:56.132 00:06:00.219 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-07-12 02:34:55.134 00:05:01.227 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-07-12 02:39:24.350 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42409 1 109 1 2025-07-12 02:39:24.350 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37333 1 80 1 2025-07-12 02:39:24.339 00:00:00.000 UDP 28.104.0.1:37333 -> 198.28.0.2:53 1 64 1 2025-07-12 02:39:24.339 00:00:00.000 UDP 28.104.0.1:42409 -> 198.28.0.2:53 1 64 1 2025-07-12 02:35:55.133 00:05:00.894 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-07-12 02:40:24.644 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48789 1 80 1 2025-07-12 02:40:24.644 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37963 1 109 1 2025-07-12 02:40:24.635 00:00:00.000 UDP 28.104.0.1:48789 -> 198.28.0.2:53 1 64 1 2025-07-12 02:40:24.635 00:00:00.000 UDP 28.104.0.1:37963 -> 198.28.0.2:53 1 64 1 2025-07-12 02:37:14.775 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2452 1 2025-07-12 02:41:24.933 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55871 1 109 1 2025-07-12 02:41:24.932 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39759 1 80 1 2025-07-12 02:41:24.923 00:00:00.000 UDP 28.104.0.1:55871 -> 198.28.0.2:53 1 64 1 2025-07-12 02:41:24.923 00:00:00.000 UDP 28.104.0.1:39759 -> 198.28.0.2:53 1 64 1 2025-07-12 02:41:53.992 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-12 02:37:55.185 00:05:00.847 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-07-12 02:42:25.246 00:00:00.000 UDP 28.104.0.1:33472 -> 198.28.0.2:53 1 64 1 2025-07-12 02:42:25.246 00:00:00.000 UDP 28.104.0.1:58425 -> 198.28.0.2:53 1 64 1 2025-07-12 02:42:25.255 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58425 1 109 1 2025-07-12 02:42:25.255 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33472 1 80 1 2025-07-12 02:38:56.210 00:04:00.140 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-07-12 02:38:55.145 00:05:01.205 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-07-12 02:43:25.545 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40929 1 109 1 2025-07-12 02:43:25.545 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48382 1 80 1 2025-07-12 02:43:25.534 00:00:00.000 UDP 28.104.0.1:48382 -> 198.28.0.2:53 1 64 1 2025-07-12 02:43:25.534 00:00:00.000 UDP 28.104.0.1:40929 -> 198.28.0.2:53 1 64 1 2025-07-12 02:44:25.844 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43581 1 109 1 2025-07-12 02:44:25.844 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45002 1 80 1 2025-07-12 02:44:25.833 00:00:00.000 UDP 28.104.0.1:45002 -> 198.28.0.2:53 1 64 1 2025-07-12 02:44:25.833 00:00:00.000 UDP 28.104.0.1:43581 -> 198.28.0.2:53 1 64 1 2025-07-12 02:40:56.133 00:04:00.219 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-07-12 02:43:56.212 00:01:00.140 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-07-12 02:40:55.135 00:05:01.227 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-07-12 02:45:26.121 00:00:00.000 UDP 28.104.0.1:39236 -> 198.28.0.2:53 1 64 1 2025-07-12 02:45:26.121 00:00:00.000 UDP 28.104.0.1:33119 -> 198.28.0.2:53 1 64 1 2025-07-12 02:45:26.132 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39236 1 80 1 2025-07-12 02:45:26.132 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33119 1 109 1 2025-07-12 02:41:55.137 00:05:00.892 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-07-12 02:46:26.409 00:00:00.000 UDP 28.104.0.1:52895 -> 198.28.0.2:53 1 64 1 2025-07-12 02:46:26.409 00:00:00.000 UDP 28.104.0.1:53229 -> 198.28.0.2:53 1 64 1 2025-07-12 02:46:26.419 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52895 1 109 1 2025-07-12 02:46:26.420 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53229 1 80 1 2025-07-12 02:42:34.781 00:05:10.018 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2464 1 2025-07-12 02:46:54.243 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-12 02:47:26.710 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60541 1 109 1 2025-07-12 02:47:26.710 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32824 1 80 1 2025-07-12 02:47:26.699 00:00:00.000 UDP 28.104.0.1:60541 -> 198.28.0.2:53 1 64 1 2025-07-12 02:47:26.699 00:00:00.000 UDP 28.104.0.1:32824 -> 198.28.0.2:53 1 64 1 2025-07-12 02:43:55.188 00:05:00.835 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-07-12 02:45:56.213 00:02:00.144 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-07-12 02:48:26.991 00:00:00.000 UDP 28.104.0.1:33333 -> 198.28.0.2:53 1 64 1 2025-07-12 02:48:26.991 00:00:00.000 UDP 28.104.0.1:44061 -> 198.28.0.2:53 1 64 1 2025-07-12 02:48:27.004 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33333 1 80 1 2025-07-12 02:48:27.004 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44061 1 109 1 2025-07-12 02:44:55.148 00:05:01.208 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-07-12 02:49:27.258 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52336 1 80 1 2025-07-12 02:49:27.258 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58886 1 109 1 2025-07-12 02:49:27.247 00:00:00.000 UDP 28.104.0.1:58886 -> 198.28.0.2:53 1 64 1 2025-07-12 02:49:27.247 00:00:00.000 UDP 28.104.0.1:52336 -> 198.28.0.2:53 1 64 1 2025-07-12 02:45:56.135 00:04:00.221 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-07-12 02:48:56.213 00:01:00.143 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-07-12 02:50:27.556 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42773 1 80 1 2025-07-12 02:50:27.556 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43474 1 109 1 2025-07-12 02:50:27.545 00:00:00.000 UDP 28.104.0.1:43474 -> 198.28.0.2:53 1 64 1 2025-07-12 02:50:27.545 00:00:00.000 UDP 28.104.0.1:42773 -> 198.28.0.2:53 1 64 1 2025-07-12 02:46:55.138 00:05:01.230 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-07-12 02:51:27.801 00:00:00.000 UDP 28.104.0.1:37385 -> 198.28.0.2:53 1 64 1 2025-07-12 02:51:27.801 00:00:00.000 UDP 28.104.0.1:39945 -> 198.28.0.2:53 1 64 1 2025-07-12 02:51:27.811 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37385 1 80 1 2025-07-12 02:51:27.811 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39945 1 109 1 2025-07-12 02:51:54.175 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-12 02:47:55.137 00:05:00.894 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-07-12 02:47:54.800 00:05:10.013 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2860 1 2025-07-12 02:52:28.094 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35346 1 109 1 2025-07-12 02:52:28.095 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57574 1 80 1 2025-07-12 02:52:28.083 00:00:00.000 UDP 28.104.0.1:57574 -> 198.28.0.2:53 1 64 1 2025-07-12 02:52:28.083 00:00:00.000 UDP 28.104.0.1:35346 -> 198.28.0.2:53 1 64 1 2025-07-12 02:53:28.401 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53200 1 80 1 2025-07-12 02:53:28.401 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47990 1 109 1 2025-07-12 02:53:28.393 00:00:00.000 UDP 28.104.0.1:53200 -> 198.28.0.2:53 1 64 1 2025-07-12 02:53:28.393 00:00:00.000 UDP 28.104.0.1:47990 -> 198.28.0.2:53 1 64 1 2025-07-12 02:49:55.188 00:05:00.835 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-07-12 02:54:28.685 00:00:00.000 UDP 28.104.0.1:57261 -> 198.28.0.2:53 1 64 1 2025-07-12 02:54:28.684 00:00:00.000 UDP 28.104.0.1:58454 -> 198.28.0.2:53 1 64 1 2025-07-12 02:54:28.696 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57261 1 109 1 2025-07-12 02:54:28.695 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58454 1 80 1 2025-07-12 02:50:56.139 00:04:00.221 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-07-12 02:50:56.215 00:04:00.145 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-07-12 02:50:55.148 00:05:01.210 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-07-12 02:55:28.980 00:00:00.000 UDP 28.104.0.1:34615 -> 198.28.0.2:53 1 64 1 2025-07-12 02:55:28.980 00:00:00.000 UDP 28.104.0.1:53270 -> 198.28.0.2:53 1 64 1 2025-07-12 02:55:28.991 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53270 1 80 1 2025-07-12 02:55:28.991 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34615 1 109 1 2025-07-12 02:56:29.278 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53231 1 109 1 2025-07-12 02:56:29.278 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33202 1 80 1 2025-07-12 02:56:29.269 00:00:00.000 UDP 28.104.0.1:53231 -> 198.28.0.2:53 1 64 1 2025-07-12 02:56:29.269 00:00:00.000 UDP 28.104.0.1:33202 -> 198.28.0.2:53 1 64 1 2025-07-12 02:56:54.488 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-12 02:52:55.139 00:05:01.231 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-07-12 02:53:13.548 00:05:01.281 OSPF 28.0.2.1:0 -> 224.0.0.5:0 45 3220 1 2025-07-12 02:57:29.572 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32894 1 80 1 2025-07-12 02:57:29.571 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44103 1 109 1 2025-07-12 02:57:29.561 00:00:00.000 UDP 28.104.0.1:32894 -> 198.28.0.2:53 1 64 1 2025-07-12 02:57:29.561 00:00:00.000 UDP 28.104.0.1:44103 -> 198.28.0.2:53 1 64 1 2025-07-12 02:53:55.141 00:05:00.894 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-07-12 02:58:29.854 00:00:00.000 UDP 28.104.0.1:53062 -> 198.28.0.2:53 1 64 1 2025-07-12 02:58:29.854 00:00:00.000 UDP 28.104.0.1:38983 -> 198.28.0.2:53 1 64 1 2025-07-12 02:58:29.865 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53062 1 109 1 2025-07-12 02:58:29.865 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38983 1 80 1 Summary: total flows: 328, total bytes: 98801, total packets: 1454, avg bps: 205, avg pps: 0, avg bpp: 67 Time window: 2025-07-12 01:54:44 - 2025-07-12 02:58:56 Total flows processed: 328, passed: 328, Blocks skipped: 0, Bytes read: 34176 Sys: 0.0046s User: 0.0011s Wall: 0.0048s flows/second: 67853.6 Runtime: 0.0049s