Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-12 13:58:57.453 00:00:00.000 UDP 28.104.0.1:48289 -> 198.28.0.2:53 1 64 1 2025-07-12 13:58:57.453 00:00:00.000 UDP 28.104.0.1:46443 -> 198.28.0.2:53 1 64 1 2025-07-12 13:58:57.463 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48289 1 109 1 2025-07-12 13:58:57.463 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46443 1 80 1 2025-07-12 13:55:56.321 00:04:00.282 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-07-12 13:58:56.436 00:01:00.167 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-07-12 13:59:57.757 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49643 1 109 1 2025-07-12 13:59:57.757 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58583 1 80 1 2025-07-12 13:55:55.375 00:05:00.876 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-07-12 13:59:57.747 00:00:00.000 UDP 28.104.0.1:58583 -> 198.28.0.2:53 1 64 1 2025-07-12 13:59:57.747 00:00:00.000 UDP 28.104.0.1:49643 -> 198.28.0.2:53 1 64 1 2025-07-12 13:56:15.759 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2772 1 2025-07-12 14:00:58.068 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45833 1 109 1 2025-07-12 14:00:58.068 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56262 1 80 1 2025-07-12 13:56:55.333 00:05:01.274 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-07-12 14:00:58.058 00:00:00.000 UDP 28.104.0.1:45833 -> 198.28.0.2:53 1 64 1 2025-07-12 14:00:58.057 00:00:00.000 UDP 28.104.0.1:56262 -> 198.28.0.2:53 1 64 1 2025-07-12 14:00:56.321 00:01:00.285 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-07-12 14:00:56.436 00:01:00.170 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-07-12 14:01:58.321 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42147 1 80 1 2025-07-12 14:01:58.320 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44473 1 109 1 2025-07-12 14:01:58.311 00:00:00.000 UDP 28.104.0.1:44473 -> 198.28.0.2:53 1 64 1 2025-07-12 14:01:58.311 00:00:00.000 UDP 28.104.0.1:42147 -> 198.28.0.2:53 1 64 1 2025-07-12 14:02:07.568 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-12 14:02:56.437 00:00:00.168 TCP 28.154.0.1:179 -> 28.155.0.1:36643 2 123 1 2025-07-12 13:58:55.327 00:05:01.289 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-07-12 14:02:58.613 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52086 1 80 1 2025-07-12 14:02:58.614 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50206 1 109 1 2025-07-12 14:02:58.604 00:00:00.000 UDP 28.104.0.1:50206 -> 198.28.0.2:53 1 64 1 2025-07-12 14:02:58.604 00:00:00.000 UDP 28.104.0.1:52086 -> 198.28.0.2:53 1 64 1 2025-07-12 13:59:55.326 00:05:00.934 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-07-12 14:03:58.893 00:00:00.000 UDP 28.104.0.1:51920 -> 198.28.0.2:53 1 64 1 2025-07-12 14:03:58.893 00:00:00.000 UDP 28.104.0.1:60473 -> 198.28.0.2:53 1 64 1 2025-07-12 14:03:58.905 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60473 1 109 1 2025-07-12 14:03:58.905 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51920 1 80 1 2025-07-12 14:02:56.322 00:02:00.283 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-07-12 14:03:56.437 00:01:00.168 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-07-12 14:04:59.190 00:00:00.000 UDP 28.104.0.1:35450 -> 198.28.0.2:53 1 64 1 2025-07-12 14:04:59.190 00:00:00.000 UDP 28.104.0.1:54839 -> 198.28.0.2:53 1 64 1 2025-07-12 14:04:59.201 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54839 1 109 1 2025-07-12 14:04:59.201 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35450 1 80 1 2025-07-12 14:01:35.766 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 33 2256 1 2025-07-12 14:01:55.377 00:05:00.873 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-07-12 14:05:59.483 00:00:00.000 UDP 28.104.0.1:56272 -> 198.28.0.2:53 1 64 1 2025-07-12 14:05:59.483 00:00:00.000 UDP 28.104.0.1:59357 -> 198.28.0.2:53 1 64 1 2025-07-12 14:05:59.493 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56272 1 80 1 2025-07-12 14:05:59.493 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59357 1 109 1 2025-07-12 14:06:59.804 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42086 1 80 1 2025-07-12 14:06:59.804 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53318 1 109 1 2025-07-12 14:05:56.322 00:01:00.284 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-07-12 14:05:56.438 00:01:00.168 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-07-12 14:06:59.794 00:00:00.000 UDP 28.104.0.1:42086 -> 198.28.0.2:53 1 64 1 2025-07-12 14:02:55.339 00:05:01.267 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-07-12 14:06:59.794 00:00:00.000 UDP 28.104.0.1:53318 -> 198.28.0.2:53 1 64 1 2025-07-12 14:07:07.721 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-12 14:08:00.110 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53220 1 109 1 2025-07-12 14:08:00.110 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35527 1 80 1 2025-07-12 14:08:00.100 00:00:00.000 UDP 28.104.0.1:53220 -> 198.28.0.2:53 1 64 1 2025-07-12 14:08:00.100 00:00:00.000 UDP 28.104.0.1:35527 -> 198.28.0.2:53 1 64 1 2025-07-12 14:09:00.433 00:00:00.000 UDP 28.104.0.1:54754 -> 198.28.0.2:53 1 64 1 2025-07-12 14:09:00.433 00:00:00.000 UDP 28.104.0.1:46186 -> 198.28.0.2:53 1 64 1 2025-07-12 14:09:00.445 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46186 1 109 1 2025-07-12 14:04:55.329 00:05:01.287 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-07-12 14:09:00.445 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54754 1 80 1 2025-07-12 14:05:55.328 00:05:00.933 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-07-12 14:07:56.322 00:02:00.283 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-07-12 14:07:56.438 00:02:00.167 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-07-12 14:10:00.730 00:00:00.000 UDP 28.104.0.1:46125 -> 198.28.0.2:53 1 64 1 2025-07-12 14:10:00.730 00:00:00.000 UDP 28.104.0.1:36027 -> 198.28.0.2:53 1 64 1 2025-07-12 14:10:00.741 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46125 1 109 1 2025-07-12 14:10:00.741 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36027 1 80 1 2025-07-12 14:11:01.048 00:00:00.000 UDP 28.104.0.1:57373 -> 198.28.0.2:53 1 64 1 2025-07-12 14:11:01.049 00:00:00.000 UDP 28.104.0.1:39782 -> 198.28.0.2:53 1 64 1 2025-07-12 14:11:01.060 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57373 1 80 1 2025-07-12 14:11:01.060 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39782 1 109 1 2025-07-12 14:06:55.769 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2448 1 2025-07-12 14:12:01.368 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60578 1 80 1 2025-07-12 14:12:01.368 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46569 1 109 1 2025-07-12 14:10:56.323 00:01:00.283 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-07-12 14:10:56.439 00:01:00.167 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-07-12 14:07:55.379 00:05:00.873 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-07-12 14:12:01.358 00:00:00.000 UDP 28.104.0.1:60578 -> 198.28.0.2:53 1 64 1 2025-07-12 14:12:01.357 00:00:00.000 UDP 28.104.0.1:46569 -> 198.28.0.2:53 1 64 1 2025-07-12 14:12:07.994 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-12 14:08:55.340 00:05:01.268 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-07-12 14:13:01.649 00:00:00.000 UDP 28.104.0.1:35147 -> 198.28.0.2:53 1 64 1 2025-07-12 14:13:01.649 00:00:00.000 UDP 28.104.0.1:39376 -> 198.28.0.2:53 1 64 1 2025-07-12 14:13:01.660 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39376 1 80 1 2025-07-12 14:13:01.660 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35147 1 109 1 2025-07-12 14:14:01.954 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41070 1 80 1 2025-07-12 14:14:01.954 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53853 1 109 1 2025-07-12 14:14:01.943 00:00:00.000 UDP 28.104.0.1:53853 -> 198.28.0.2:53 1 64 1 2025-07-12 14:14:01.943 00:00:00.000 UDP 28.104.0.1:41070 -> 198.28.0.2:53 1 64 1 2025-07-12 14:12:56.324 00:02:00.285 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-07-12 14:12:56.439 00:02:00.170 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-07-12 14:10:55.331 00:05:01.288 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-07-12 14:15:02.245 00:00:00.000 UDP 28.104.0.1:44960 -> 198.28.0.2:53 1 64 1 2025-07-12 14:15:02.245 00:00:00.000 UDP 28.104.0.1:52074 -> 198.28.0.2:53 1 64 1 2025-07-12 14:15:02.254 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52074 1 80 1 2025-07-12 14:15:02.254 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44960 1 109 1 2025-07-12 14:11:55.331 00:05:00.933 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-07-12 14:16:02.500 00:00:00.000 UDP 28.104.0.1:42531 -> 198.28.0.2:53 1 64 1 2025-07-12 14:16:02.499 00:00:00.000 UDP 28.104.0.1:47964 -> 198.28.0.2:53 1 64 1 2025-07-12 14:16:02.510 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47964 1 80 1 2025-07-12 14:16:02.511 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42531 1 109 1 2025-07-12 14:12:15.774 00:05:10.013 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2812 1 2025-07-12 14:15:56.324 00:01:00.285 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-07-12 14:15:56.440 00:01:00.169 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-07-12 14:17:02.802 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47882 1 80 1 2025-07-12 14:17:02.803 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36629 1 109 1 2025-07-12 14:17:02.791 00:00:00.000 UDP 28.104.0.1:47882 -> 198.28.0.2:53 1 64 1 2025-07-12 14:17:02.791 00:00:00.000 UDP 28.104.0.1:36629 -> 198.28.0.2:53 1 64 1 2025-07-12 14:17:07.940 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-12 14:13:55.383 00:05:00.870 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-07-12 14:18:03.101 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50490 1 109 1 2025-07-12 14:18:03.101 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60652 1 80 1 2025-07-12 14:18:03.091 00:00:00.000 UDP 28.104.0.1:50490 -> 198.28.0.2:53 1 64 1 2025-07-12 14:18:03.091 00:00:00.000 UDP 28.104.0.1:60652 -> 198.28.0.2:53 1 64 1 2025-07-12 14:14:55.344 00:05:01.266 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-07-12 14:19:03.387 00:00:00.000 UDP 28.104.0.1:37825 -> 198.28.0.2:53 1 64 1 2025-07-12 14:19:03.387 00:00:00.000 UDP 28.104.0.1:39406 -> 198.28.0.2:53 1 64 1 2025-07-12 14:19:03.398 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37825 1 80 1 2025-07-12 14:19:03.399 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39406 1 109 1 2025-07-12 14:17:56.441 00:02:00.168 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-07-12 14:20:03.653 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49757 1 80 1 2025-07-12 14:20:03.653 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45267 1 109 1 2025-07-12 14:20:03.644 00:00:00.000 UDP 28.104.0.1:45267 -> 198.28.0.2:53 1 64 1 2025-07-12 14:20:03.644 00:00:00.000 UDP 28.104.0.1:49757 -> 198.28.0.2:53 1 64 1 2025-07-12 14:16:55.334 00:05:01.287 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-07-12 14:21:03.936 00:00:00.000 UDP 28.104.0.1:35008 -> 198.28.0.2:53 1 64 1 2025-07-12 14:21:03.936 00:00:00.000 UDP 28.104.0.1:39432 -> 198.28.0.2:53 1 64 1 2025-07-12 14:21:03.946 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35008 1 80 1 2025-07-12 14:21:03.946 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39432 1 109 1 2025-07-12 14:17:35.787 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2920 1 2025-07-12 14:17:55.334 00:05:00.931 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-07-12 14:17:56.324 00:04:00.287 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-07-12 14:20:56.442 00:01:00.169 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-07-12 14:22:04.243 00:00:00.000 UDP 28.104.0.1:53989 -> 198.28.0.2:53 1 64 1 2025-07-12 14:22:04.244 00:00:00.000 UDP 28.104.0.1:42979 -> 198.28.0.2:53 1 64 1 2025-07-12 14:22:04.255 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42979 1 80 1 2025-07-12 14:22:04.255 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53989 1 109 1 2025-07-12 14:22:08.040 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-12 14:23:04.545 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58774 1 109 1 2025-07-12 14:23:04.545 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36889 1 80 1 2025-07-12 14:23:04.534 00:00:00.000 UDP 28.104.0.1:58774 -> 198.28.0.2:53 1 64 1 2025-07-12 14:23:04.534 00:00:00.000 UDP 28.104.0.1:36889 -> 198.28.0.2:53 1 64 1 2025-07-12 14:19:55.384 00:05:00.871 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-07-12 14:24:04.823 00:00:00.000 UDP 28.104.0.1:43805 -> 198.28.0.2:53 1 64 1 2025-07-12 14:24:04.822 00:00:00.000 UDP 28.104.0.1:38724 -> 198.28.0.2:53 1 64 1 2025-07-12 14:24:04.833 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38724 1 109 1 2025-07-12 14:24:04.833 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43805 1 80 1 2025-07-12 14:22:56.444 00:02:00.167 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-07-12 14:20:55.344 00:05:01.268 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-07-12 14:25:05.153 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57050 1 80 1 2025-07-12 14:25:05.153 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34945 1 109 1 2025-07-12 14:25:05.144 00:00:00.000 UDP 28.104.0.1:34945 -> 198.28.0.2:53 1 64 1 2025-07-12 14:25:05.143 00:00:00.000 UDP 28.104.0.1:57050 -> 198.28.0.2:53 1 64 1 2025-07-12 14:26:05.424 00:00:00.000 UDP 28.104.0.1:42512 -> 198.28.0.2:53 1 64 1 2025-07-12 14:26:05.424 00:00:00.000 UDP 28.104.0.1:48904 -> 198.28.0.2:53 1 64 1 2025-07-12 14:26:05.435 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48904 1 80 1 2025-07-12 14:26:05.434 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42512 1 109 1 2025-07-12 14:22:56.325 00:04:00.287 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-07-12 14:25:56.447 00:01:00.165 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-07-12 14:22:55.335 00:05:01.288 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-07-12 14:22:55.791 00:05:10.013 OSPF 28.0.2.1:0 -> 224.0.0.5:0 47 3348 1 2025-07-12 14:27:05.728 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47340 1 80 1 2025-07-12 14:27:05.728 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54031 1 109 1 2025-07-12 14:27:05.718 00:00:00.000 UDP 28.104.0.1:54031 -> 198.28.0.2:53 1 64 1 2025-07-12 14:27:05.718 00:00:00.000 UDP 28.104.0.1:47340 -> 198.28.0.2:53 1 64 1 2025-07-12 14:27:08.042 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-12 14:23:55.335 00:05:00.932 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-07-12 14:28:06.040 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57702 1 109 1 2025-07-12 14:28:06.035 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49872 1 80 1 2025-07-12 14:28:06.031 00:00:00.000 UDP 28.104.0.1:57702 -> 198.28.0.2:53 1 64 1 2025-07-12 14:28:06.026 00:00:00.000 UDP 28.104.0.1:49872 -> 198.28.0.2:53 1 64 1 2025-07-12 14:29:06.287 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33101 1 109 1 2025-07-12 14:29:06.287 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56300 1 80 1 2025-07-12 14:29:06.276 00:00:00.000 UDP 28.104.0.1:56300 -> 198.28.0.2:53 1 64 1 2025-07-12 14:29:06.276 00:00:00.000 UDP 28.104.0.1:33101 -> 198.28.0.2:53 1 64 1 2025-07-12 14:25:55.387 00:05:00.872 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-07-12 14:27:56.447 00:02:00.172 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-07-12 14:30:06.584 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45409 1 80 1 2025-07-12 14:30:06.583 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37844 1 109 1 2025-07-12 14:30:06.572 00:00:00.000 UDP 28.104.0.1:37844 -> 198.28.0.2:53 1 64 1 2025-07-12 14:30:06.572 00:00:00.000 UDP 28.104.0.1:45409 -> 198.28.0.2:53 1 64 1 2025-07-12 14:26:55.346 00:05:01.269 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-07-12 14:31:06.889 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34728 1 109 1 2025-07-12 14:31:06.888 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48699 1 80 1 2025-07-12 14:31:06.877 00:00:00.000 UDP 28.104.0.1:48699 -> 198.28.0.2:53 1 64 1 2025-07-12 14:31:06.878 00:00:00.000 UDP 28.104.0.1:34728 -> 198.28.0.2:53 1 64 1 2025-07-12 14:27:56.326 00:04:00.289 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-07-12 14:30:56.446 00:01:00.168 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-07-12 14:32:08.225 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-12 14:32:07.188 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57920 1 109 1 2025-07-12 14:32:07.188 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44112 1 80 1 2025-07-12 14:32:07.178 00:00:00.000 UDP 28.104.0.1:44112 -> 198.28.0.2:53 1 64 1 2025-07-12 14:32:07.178 00:00:00.000 UDP 28.104.0.1:57920 -> 198.28.0.2:53 1 64 1 2025-07-12 14:28:12.867 00:05:02.953 OSPF 28.0.2.1:0 -> 224.0.0.5:0 33 2252 1 2025-07-12 14:28:55.337 00:05:01.289 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-07-12 14:33:07.428 00:00:00.000 UDP 28.104.0.1:34850 -> 198.28.0.2:53 1 64 1 2025-07-12 14:33:07.428 00:00:00.000 UDP 28.104.0.1:58765 -> 198.28.0.2:53 1 64 1 2025-07-12 14:33:07.440 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34850 1 109 1 2025-07-12 14:33:07.439 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58765 1 80 1 2025-07-12 14:29:55.336 00:05:00.934 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-07-12 14:32:56.326 00:01:00.289 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-07-12 14:32:56.448 00:01:00.167 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-07-12 14:34:07.734 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60256 1 80 1 2025-07-12 14:34:07.734 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36125 1 109 1 2025-07-12 14:34:07.725 00:00:00.000 UDP 28.104.0.1:60256 -> 198.28.0.2:53 1 64 1 2025-07-12 14:34:07.725 00:00:00.000 UDP 28.104.0.1:36125 -> 198.28.0.2:53 1 64 1 2025-07-12 14:34:56.447 00:00:00.168 TCP 28.154.0.1:179 -> 28.155.0.1:36643 2 123 1 2025-07-12 14:35:08.057 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35065 1 80 1 2025-07-12 14:35:08.057 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51027 1 109 1 2025-07-12 14:35:08.046 00:00:00.000 UDP 28.104.0.1:35065 -> 198.28.0.2:53 1 64 1 2025-07-12 14:35:08.046 00:00:00.000 UDP 28.104.0.1:51027 -> 198.28.0.2:53 1 64 1 2025-07-12 14:31:55.387 00:05:00.873 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-07-12 14:36:08.357 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48670 1 109 1 2025-07-12 14:36:08.357 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59958 1 80 1 2025-07-12 14:36:08.346 00:00:00.000 UDP 28.104.0.1:59958 -> 198.28.0.2:53 1 64 1 2025-07-12 14:36:08.346 00:00:00.000 UDP 28.104.0.1:48670 -> 198.28.0.2:53 1 64 1 2025-07-12 14:34:56.328 00:02:00.289 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-07-12 14:35:56.448 00:01:00.169 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-07-12 14:32:55.348 00:05:01.269 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-07-12 14:37:08.268 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-12 14:37:08.650 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39798 1 109 1 2025-07-12 14:37:08.650 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37362 1 80 1 2025-07-12 14:37:08.640 00:00:00.000 UDP 28.104.0.1:37362 -> 198.28.0.2:53 1 64 1 2025-07-12 14:37:08.640 00:00:00.000 UDP 28.104.0.1:39798 -> 198.28.0.2:53 1 64 1 2025-07-12 14:33:25.820 00:05:10.015 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2448 1 2025-07-12 14:38:08.935 00:00:00.000 UDP 28.104.0.1:56718 -> 198.28.0.2:53 1 64 1 2025-07-12 14:38:08.935 00:00:00.000 UDP 28.104.0.1:32779 -> 198.28.0.2:53 1 64 1 2025-07-12 14:38:08.944 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56718 1 109 1 2025-07-12 14:38:08.944 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32779 1 80 1 2025-07-12 14:37:56.328 00:01:00.290 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-07-12 14:37:56.449 00:01:00.169 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-07-12 14:34:55.336 00:05:01.291 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-07-12 14:39:09.197 00:00:00.000 UDP 28.104.0.1:42039 -> 198.28.0.2:53 1 64 1 2025-07-12 14:39:09.197 00:00:00.000 UDP 28.104.0.1:32784 -> 198.28.0.2:53 1 64 1 2025-07-12 14:39:09.208 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42039 1 109 1 2025-07-12 14:39:09.208 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32784 1 80 1 2025-07-12 14:35:55.337 00:05:00.932 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-07-12 14:40:09.511 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43070 1 80 1 2025-07-12 14:40:09.511 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47073 1 109 1 2025-07-12 14:40:09.500 00:00:00.000 UDP 28.104.0.1:47073 -> 198.28.0.2:53 1 64 1 2025-07-12 14:40:09.500 00:00:00.000 UDP 28.104.0.1:43070 -> 198.28.0.2:53 1 64 1 2025-07-12 14:41:09.803 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47939 1 80 1 2025-07-12 14:41:09.803 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57562 1 109 1 2025-07-12 14:41:09.792 00:00:00.000 UDP 28.104.0.1:47939 -> 198.28.0.2:53 1 64 1 2025-07-12 14:41:09.792 00:00:00.000 UDP 28.104.0.1:57562 -> 198.28.0.2:53 1 64 1 2025-07-12 14:37:55.388 00:05:00.873 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-07-12 14:39:56.327 00:02:00.292 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-07-12 14:39:56.448 00:02:00.171 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-07-12 14:42:08.523 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-12 14:42:10.118 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58380 1 80 1 2025-07-12 14:42:10.118 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59869 1 109 1 2025-07-12 14:42:10.107 00:00:00.000 UDP 28.104.0.1:58380 -> 198.28.0.2:53 1 64 1 2025-07-12 14:42:10.107 00:00:00.000 UDP 28.104.0.1:59869 -> 198.28.0.2:53 1 64 1 2025-07-12 14:38:45.835 00:05:10.018 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2464 1 2025-07-12 14:38:55.348 00:05:01.272 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-07-12 14:43:10.405 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34995 1 80 1 2025-07-12 14:43:10.405 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55316 1 109 1 2025-07-12 14:43:10.395 00:00:00.000 UDP 28.104.0.1:34995 -> 198.28.0.2:53 1 64 1 2025-07-12 14:43:10.395 00:00:00.000 UDP 28.104.0.1:55316 -> 198.28.0.2:53 1 64 1 2025-07-12 14:42:56.328 00:01:00.291 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-07-12 14:42:56.448 00:01:00.171 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-07-12 14:44:10.687 00:00:00.000 UDP 28.104.0.1:58909 -> 198.28.0.2:53 1 64 1 2025-07-12 14:44:10.687 00:00:00.000 UDP 28.104.0.1:36123 -> 198.28.0.2:53 1 64 1 2025-07-12 14:44:10.697 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58909 1 80 1 2025-07-12 14:44:10.697 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36123 1 109 1 2025-07-12 14:40:55.337 00:05:01.292 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-07-12 14:45:10.976 00:00:00.000 UDP 28.104.0.1:48183 -> 198.28.0.2:53 1 64 1 2025-07-12 14:45:10.976 00:00:00.000 UDP 28.104.0.1:56084 -> 198.28.0.2:53 1 64 1 2025-07-12 14:45:10.987 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56084 1 80 1 2025-07-12 14:45:10.987 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48183 1 109 1 2025-07-12 14:41:55.339 00:05:00.934 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-07-12 14:46:11.286 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53643 1 80 1 2025-07-12 14:46:11.286 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45790 1 109 1 2025-07-12 14:46:11.275 00:00:00.000 UDP 28.104.0.1:53643 -> 198.28.0.2:53 1 64 1 2025-07-12 14:46:11.276 00:00:00.000 UDP 28.104.0.1:45790 -> 198.28.0.2:53 1 64 1 2025-07-12 14:44:56.327 00:02:00.292 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-07-12 14:44:56.448 00:02:00.171 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-07-12 14:47:11.526 00:00:00.000 UDP 28.104.0.1:41813 -> 198.28.0.2:53 1 64 1 2025-07-12 14:47:11.527 00:00:00.000 UDP 28.104.0.1:51737 -> 198.28.0.2:53 1 64 1 2025-07-12 14:47:08.642 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-12 14:47:11.539 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41813 1 109 1 2025-07-12 14:47:11.537 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51737 1 80 1 2025-07-12 14:43:55.387 00:05:00.875 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-07-12 14:48:11.835 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35417 1 80 1 2025-07-12 14:48:11.835 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47459 1 109 1 2025-07-12 14:48:11.824 00:00:00.000 UDP 28.104.0.1:47459 -> 198.28.0.2:53 1 64 1 2025-07-12 14:48:11.824 00:00:00.000 UDP 28.104.0.1:35417 -> 198.28.0.2:53 1 64 1 2025-07-12 14:44:05.853 00:05:10.011 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2836 1 2025-07-12 14:47:56.330 00:01:00.292 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-07-12 14:47:56.450 00:01:00.172 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-07-12 14:44:55.349 00:05:01.273 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-07-12 14:49:15.900 00:00:00.000 UDP 28.104.0.1:47212 -> 198.28.0.2:53 1 64 1 2025-07-12 14:49:15.900 00:00:00.000 UDP 28.104.0.1:41019 -> 198.28.0.2:53 1 64 1 2025-07-12 14:49:15.910 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41019 1 80 1 2025-07-12 14:49:15.910 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47212 1 109 1 2025-07-12 14:50:16.206 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39079 1 109 1 2025-07-12 14:50:16.206 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44857 1 80 1 2025-07-12 14:50:16.196 00:00:00.000 UDP 28.104.0.1:44857 -> 198.28.0.2:53 1 64 1 2025-07-12 14:50:16.196 00:00:00.000 UDP 28.104.0.1:39079 -> 198.28.0.2:53 1 64 1 2025-07-12 14:46:55.338 00:05:01.295 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-07-12 14:51:16.482 00:00:00.000 UDP 28.104.0.1:50757 -> 198.28.0.2:53 1 64 1 2025-07-12 14:51:16.482 00:00:00.000 UDP 28.104.0.1:40374 -> 198.28.0.2:53 1 64 1 2025-07-12 14:51:16.494 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50757 1 109 1 2025-07-12 14:51:16.495 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40374 1 80 1 2025-07-12 14:47:55.339 00:05:00.934 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-07-12 14:49:56.331 00:02:00.293 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-07-12 14:49:56.451 00:02:00.173 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-07-12 14:52:08.659 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-12 14:52:16.809 00:00:00.000 UDP 28.104.0.1:45412 -> 198.28.0.2:53 1 64 1 2025-07-12 14:52:16.809 00:00:00.000 UDP 28.104.0.1:46557 -> 198.28.0.2:53 1 64 1 2025-07-12 14:52:16.819 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46557 1 109 1 2025-07-12 14:52:16.819 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45412 1 80 1 2025-07-12 14:53:17.106 00:00:00.000 UDP 28.104.0.1:38562 -> 198.28.0.2:53 1 64 1 2025-07-12 14:53:17.106 00:00:00.000 UDP 28.104.0.1:49442 -> 198.28.0.2:53 1 64 1 2025-07-12 14:53:17.117 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38562 1 109 1 2025-07-12 14:53:17.117 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49442 1 80 1 2025-07-12 14:49:25.865 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 48 3392 1 2025-07-12 14:52:56.331 00:01:00.292 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-07-12 14:52:56.451 00:01:00.172 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-07-12 14:49:55.389 00:05:00.874 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-07-12 14:54:17.394 00:00:00.000 UDP 28.104.0.1:49878 -> 198.28.0.2:53 1 64 1 2025-07-12 14:54:17.394 00:00:00.000 UDP 28.104.0.1:54600 -> 198.28.0.2:53 1 64 1 2025-07-12 14:54:17.403 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54600 1 80 1 2025-07-12 14:54:17.403 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49878 1 109 1 2025-07-12 14:50:55.349 00:05:01.275 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-07-12 14:55:17.684 00:00:00.000 UDP 28.104.0.1:45046 -> 198.28.0.2:53 1 64 1 2025-07-12 14:55:17.684 00:00:00.000 UDP 28.104.0.1:33718 -> 198.28.0.2:53 1 64 1 2025-07-12 14:55:17.695 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45046 1 80 1 2025-07-12 14:55:17.695 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33718 1 109 1 2025-07-12 14:56:17.983 00:00:00.000 UDP 28.104.0.1:41720 -> 198.28.0.2:53 1 64 1 2025-07-12 14:56:17.983 00:00:00.000 UDP 28.104.0.1:43084 -> 198.28.0.2:53 1 64 1 2025-07-12 14:56:17.993 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41720 1 80 1 2025-07-12 14:56:17.993 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43084 1 109 1 2025-07-12 14:52:55.340 00:05:01.294 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-07-12 14:54:56.451 00:02:00.173 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-07-12 14:57:08.781 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-12 14:57:18.279 00:00:00.000 UDP 28.104.0.1:50670 -> 198.28.0.2:53 1 64 1 2025-07-12 14:57:18.279 00:00:00.000 UDP 28.104.0.1:56453 -> 198.28.0.2:53 1 64 1 2025-07-12 14:57:18.288 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50670 1 80 1 2025-07-12 14:57:18.288 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56453 1 109 1 2025-07-12 14:53:55.340 00:05:00.934 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-07-12 14:58:18.585 00:00:00.000 UDP 28.104.0.1:50421 -> 198.28.0.2:53 1 64 1 2025-07-12 14:58:18.585 00:00:00.000 UDP 28.104.0.1:56037 -> 198.28.0.2:53 1 64 1 2025-07-12 14:58:18.596 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50421 1 80 1 2025-07-12 14:58:18.596 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56037 1 109 1 Summary: total flows: 349, total bytes: 96026, total packets: 1417, avg bps: 203, avg pps: 0, avg bpp: 67 Time window: 2025-07-12 13:55:55 - 2025-07-12 14:58:56 Total flows processed: 349, passed: 349, Blocks skipped: 0, Bytes read: 36360 Sys: 0.0041s User: 0.0021s Wall: 0.0051s flows/second: 68005.2 Runtime: 0.0052s