Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-30 02:59:19.398 00:00:00.000 UDP 28.104.0.1:56372 -> 198.28.0.2:53 1 64 1 2025-08-30 02:59:19.398 00:00:00.000 UDP 28.104.0.1:52770 -> 198.28.0.2:53 1 64 1 2025-08-30 02:55:20.868 00:05:00.374 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-08-30 02:59:19.409 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52770 1 80 1 2025-08-30 02:55:20.819 00:05:00.434 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-08-30 02:59:19.409 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56372 1 109 1 2025-08-30 03:00:19.700 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38300 1 109 1 2025-08-30 03:00:19.700 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42708 1 80 1 2025-08-30 03:00:19.688 00:00:00.000 UDP 28.104.0.1:38300 -> 198.28.0.2:53 1 64 1 2025-08-30 03:00:19.688 00:00:00.000 UDP 28.104.0.1:42708 -> 198.28.0.2:53 1 64 1 2025-08-30 02:56:21.349 00:04:00.047 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-08-30 02:56:21.349 00:04:00.014 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-08-30 03:00:29.802 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-30 03:01:19.946 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56060 1 80 1 2025-08-30 03:01:19.947 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42386 1 109 1 2025-08-30 02:57:20.830 00:05:00.523 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-08-30 03:01:19.937 00:00:00.000 UDP 28.104.0.1:42386 -> 198.28.0.2:53 1 64 1 2025-08-30 03:01:19.937 00:00:00.000 UDP 28.104.0.1:56060 -> 198.28.0.2:53 1 64 1 2025-08-30 02:57:23.579 00:05:10.017 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2972 1 2025-08-30 03:02:20.239 00:00:00.000 UDP 28.104.0.1:42488 -> 198.28.0.2:53 1 64 1 2025-08-30 03:02:20.239 00:00:00.000 UDP 28.104.0.1:47112 -> 198.28.0.2:53 1 64 1 2025-08-30 02:58:20.819 00:05:00.544 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-08-30 03:02:20.250 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47112 1 80 1 2025-08-30 03:02:20.250 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42488 1 109 1 2025-08-30 03:03:20.538 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37158 1 109 1 2025-08-30 03:03:20.538 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41396 1 80 1 2025-08-30 03:03:20.529 00:00:00.000 UDP 28.104.0.1:41396 -> 198.28.0.2:53 1 64 1 2025-08-30 03:03:20.529 00:00:00.000 UDP 28.104.0.1:37158 -> 198.28.0.2:53 1 64 1 2025-08-30 03:04:20.778 00:00:00.000 UDP 28.104.0.1:33469 -> 198.28.0.2:53 1 64 1 2025-08-30 03:04:20.778 00:00:00.000 UDP 28.104.0.1:48312 -> 198.28.0.2:53 1 64 1 2025-08-30 03:04:20.789 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48312 1 109 1 2025-08-30 03:04:20.789 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33469 1 80 1 2025-08-30 03:01:21.352 00:04:00.044 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-08-30 03:05:21.097 00:00:00.000 UDP 28.104.0.1:51997 -> 198.28.0.2:53 1 64 1 2025-08-30 03:01:21.352 00:04:00.011 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-08-30 03:05:21.097 00:00:00.000 UDP 28.104.0.1:45286 -> 198.28.0.2:53 1 64 1 2025-08-30 03:01:20.821 00:05:00.438 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-08-30 03:05:21.109 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45286 1 109 1 2025-08-30 03:05:21.111 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51997 1 80 1 2025-08-30 03:01:20.869 00:05:00.378 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-08-30 03:05:29.808 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-30 03:06:21.442 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42180 1 80 1 2025-08-30 03:06:21.442 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35031 1 109 1 2025-08-30 03:06:21.433 00:00:00.000 UDP 28.104.0.1:35031 -> 198.28.0.2:53 1 64 1 2025-08-30 03:06:21.433 00:00:00.000 UDP 28.104.0.1:42180 -> 198.28.0.2:53 1 64 1 2025-08-30 03:02:43.595 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2612 1 2025-08-30 03:07:21.719 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41452 1 80 1 2025-08-30 03:07:21.719 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59461 1 109 1 2025-08-30 03:07:21.709 00:00:00.000 UDP 28.104.0.1:59461 -> 198.28.0.2:53 1 64 1 2025-08-30 03:06:21.355 00:01:00.046 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-08-30 03:06:21.355 00:01:00.012 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-08-30 03:07:21.709 00:00:00.000 UDP 28.104.0.1:41452 -> 198.28.0.2:53 1 64 1 2025-08-30 03:03:20.830 00:05:00.525 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-08-30 03:08:22.071 00:00:00.000 UDP 28.104.0.1:47694 -> 198.28.0.2:53 1 64 1 2025-08-30 03:08:22.071 00:00:00.000 UDP 28.104.0.1:34214 -> 198.28.0.2:53 1 64 1 2025-08-30 03:08:22.081 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47694 1 80 1 2025-08-30 03:04:20.820 00:05:00.544 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-08-30 03:08:22.080 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34214 1 109 1 2025-08-30 03:09:22.336 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57267 1 109 1 2025-08-30 03:09:22.334 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36232 1 80 1 2025-08-30 03:09:22.324 00:00:00.000 UDP 28.104.0.1:57267 -> 198.28.0.2:53 1 64 1 2025-08-30 03:09:22.324 00:00:00.000 UDP 28.104.0.1:36232 -> 198.28.0.2:53 1 64 1 2025-08-30 03:08:21.354 00:02:00.047 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-08-30 03:08:21.354 00:02:00.012 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-08-30 03:10:22.592 00:00:00.000 UDP 28.104.0.1:45118 -> 198.28.0.2:53 1 64 1 2025-08-30 03:10:22.592 00:00:00.000 UDP 28.104.0.1:58031 -> 198.28.0.2:53 1 64 1 2025-08-30 03:10:22.603 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45118 1 80 1 2025-08-30 03:10:22.611 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58031 1 109 1 2025-08-30 03:10:30.159 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-30 03:07:20.820 00:05:00.441 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-08-30 03:07:20.870 00:05:00.380 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-08-30 03:11:22.896 00:00:00.000 UDP 28.104.0.1:46755 -> 198.28.0.2:53 1 64 1 2025-08-30 03:11:22.896 00:00:00.000 UDP 28.104.0.1:47463 -> 198.28.0.2:53 1 64 1 2025-08-30 03:11:22.905 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46755 1 80 1 2025-08-30 03:11:22.905 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47463 1 109 1 2025-08-30 03:08:03.602 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2920 1 2025-08-30 03:11:21.355 00:01:00.058 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-08-30 03:11:21.355 00:01:00.011 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-08-30 03:12:23.151 00:00:00.000 UDP 28.104.0.1:41105 -> 198.28.0.2:53 1 64 1 2025-08-30 03:12:23.150 00:00:00.000 UDP 28.104.0.1:41800 -> 198.28.0.2:53 1 64 1 2025-08-30 03:12:23.161 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41105 1 80 1 2025-08-30 03:12:23.161 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41800 1 109 1 2025-08-30 03:09:20.831 00:05:00.524 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-08-30 03:13:23.445 00:00:00.000 UDP 28.104.0.1:42180 -> 198.28.0.2:53 1 64 1 2025-08-30 03:13:23.445 00:00:00.000 UDP 28.104.0.1:35307 -> 198.28.0.2:53 1 64 1 2025-08-30 03:13:23.456 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42180 1 109 1 2025-08-30 03:13:23.456 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35307 1 80 1 2025-08-30 03:10:20.820 00:05:00.545 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-08-30 03:14:23.749 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55231 1 109 1 2025-08-30 03:14:23.749 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58854 1 80 1 2025-08-30 03:14:23.739 00:00:00.000 UDP 28.104.0.1:58854 -> 198.28.0.2:53 1 64 1 2025-08-30 03:14:23.739 00:00:00.000 UDP 28.104.0.1:55231 -> 198.28.0.2:53 1 64 1 2025-08-30 03:13:21.354 00:02:00.049 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-08-30 03:13:21.354 00:02:00.012 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-08-30 03:15:24.056 00:00:00.000 UDP 28.104.0.1:33288 -> 198.28.0.2:53 1 64 1 2025-08-30 03:15:24.056 00:00:00.000 UDP 28.104.0.1:40654 -> 198.28.0.2:53 1 64 1 2025-08-30 03:15:24.067 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40654 1 109 1 2025-08-30 03:15:24.067 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33288 1 80 1 2025-08-30 03:15:30.229 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-30 03:16:24.352 00:00:00.000 UDP 28.104.0.1:60021 -> 198.28.0.2:53 1 64 1 2025-08-30 03:16:24.352 00:00:00.000 UDP 28.104.0.1:36194 -> 198.28.0.2:53 1 64 1 2025-08-30 03:16:24.363 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36194 1 109 1 2025-08-30 03:16:24.363 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60021 1 80 1 2025-08-30 03:13:20.822 00:05:00.443 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-08-30 03:16:21.357 00:01:00.010 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-08-30 03:16:21.357 00:01:00.047 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-08-30 03:17:24.663 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52177 1 80 1 2025-08-30 03:17:24.663 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34379 1 109 1 2025-08-30 03:13:20.872 00:05:00.383 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-08-30 03:17:24.654 00:00:00.000 UDP 28.104.0.1:52177 -> 198.28.0.2:53 1 64 1 2025-08-30 03:17:24.654 00:00:00.000 UDP 28.104.0.1:34379 -> 198.28.0.2:53 1 64 1 2025-08-30 03:13:23.609 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2384 1 2025-08-30 03:18:24.916 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39748 1 109 1 2025-08-30 03:18:24.915 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38972 1 80 1 2025-08-30 03:18:24.905 00:00:00.000 UDP 28.104.0.1:39748 -> 198.28.0.2:53 1 64 1 2025-08-30 03:18:24.905 00:00:00.000 UDP 28.104.0.1:38972 -> 198.28.0.2:53 1 64 1 2025-08-30 03:15:20.831 00:05:00.532 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-08-30 03:19:25.219 00:00:00.000 UDP 28.104.0.1:39914 -> 198.28.0.2:53 1 64 1 2025-08-30 03:19:25.219 00:00:00.000 UDP 28.104.0.1:34132 -> 198.28.0.2:53 1 64 1 2025-08-30 03:19:25.230 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39914 1 109 1 2025-08-30 03:19:25.229 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34132 1 80 1 2025-08-30 03:18:21.364 00:02:00.043 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-08-30 03:18:21.364 00:02:00.021 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-08-30 03:20:25.517 00:00:00.000 UDP 28.104.0.1:43265 -> 198.28.0.2:53 1 64 1 2025-08-30 03:20:25.517 00:00:00.000 UDP 28.104.0.1:54221 -> 198.28.0.2:53 1 64 1 2025-08-30 03:16:20.822 00:05:00.552 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-08-30 03:20:25.527 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43265 1 80 1 2025-08-30 03:20:25.528 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54221 1 109 1 2025-08-30 03:20:30.194 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-30 03:21:25.816 00:00:00.000 UDP 28.104.0.1:50946 -> 198.28.0.2:53 1 64 1 2025-08-30 03:21:25.816 00:00:00.000 UDP 28.104.0.1:57980 -> 198.28.0.2:53 1 64 1 2025-08-30 03:21:25.830 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50946 1 80 1 2025-08-30 03:21:25.831 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57980 1 109 1 2025-08-30 03:21:21.364 00:01:00.043 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-08-30 03:21:21.364 00:01:00.021 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-08-30 03:22:26.080 00:00:00.000 UDP 28.104.0.1:50742 -> 198.28.0.2:53 1 64 1 2025-08-30 03:22:26.081 00:00:00.000 UDP 28.104.0.1:38463 -> 198.28.0.2:53 1 64 1 2025-08-30 03:22:26.092 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38463 1 109 1 2025-08-30 03:22:26.091 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50742 1 80 1 2025-08-30 03:18:43.614 00:05:10.012 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2940 1 2025-08-30 03:19:20.873 00:05:00.382 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-08-30 03:23:26.374 00:00:00.000 UDP 28.104.0.1:48463 -> 198.28.0.2:53 1 64 1 2025-08-30 03:23:26.374 00:00:00.000 UDP 28.104.0.1:34148 -> 198.28.0.2:53 1 64 1 2025-08-30 03:19:20.824 00:05:00.447 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-08-30 03:23:26.385 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48463 1 109 1 2025-08-30 03:23:26.385 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34148 1 80 1 2025-08-30 03:24:26.668 00:00:00.000 UDP 28.104.0.1:40622 -> 198.28.0.2:53 1 64 1 2025-08-30 03:24:26.668 00:00:00.000 UDP 28.104.0.1:50296 -> 198.28.0.2:53 1 64 1 2025-08-30 03:24:26.679 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50296 1 80 1 2025-08-30 03:24:26.680 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40622 1 109 1 2025-08-30 03:23:21.364 00:02:00.043 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-08-30 03:23:21.364 00:02:00.021 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-08-30 03:25:26.966 00:00:00.000 UDP 28.104.0.1:40159 -> 198.28.0.2:53 1 64 1 2025-08-30 03:21:20.834 00:05:00.530 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-08-30 03:25:26.966 00:00:00.000 UDP 28.104.0.1:41178 -> 198.28.0.2:53 1 64 1 2025-08-30 03:25:26.976 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41178 1 80 1 2025-08-30 03:25:26.976 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40159 1 109 1 2025-08-30 03:25:30.352 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-30 03:22:20.825 00:05:00.550 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-08-30 03:26:27.259 00:00:00.000 UDP 28.104.0.1:54073 -> 198.28.0.2:53 1 64 1 2025-08-30 03:26:27.259 00:00:00.000 UDP 28.104.0.1:34210 -> 198.28.0.2:53 1 64 1 2025-08-30 03:26:27.270 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54073 1 109 1 2025-08-30 03:26:27.270 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34210 1 80 1 2025-08-30 03:26:21.364 00:01:00.044 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-08-30 03:26:21.364 00:01:00.021 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-08-30 03:27:27.563 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49929 1 109 1 2025-08-30 03:27:27.563 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37768 1 80 1 2025-08-30 03:27:27.552 00:00:00.000 UDP 28.104.0.1:49929 -> 198.28.0.2:53 1 64 1 2025-08-30 03:27:27.552 00:00:00.000 UDP 28.104.0.1:37768 -> 198.28.0.2:53 1 64 1 2025-08-30 03:24:03.626 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2648 1 2025-08-30 03:28:27.892 00:00:00.000 UDP 28.104.0.1:52218 -> 198.28.0.2:53 1 64 1 2025-08-30 03:28:27.893 00:00:00.000 UDP 28.104.0.1:56139 -> 198.28.0.2:53 1 64 1 2025-08-30 03:28:27.903 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56139 1 80 1 2025-08-30 03:28:27.903 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52218 1 109 1 2025-08-30 03:25:20.825 00:05:00.443 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-08-30 03:25:20.874 00:05:00.384 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-08-30 03:29:28.209 00:00:00.000 UDP 28.104.0.1:56110 -> 198.28.0.2:53 1 64 1 2025-08-30 03:29:28.209 00:00:00.000 UDP 28.104.0.1:41947 -> 198.28.0.2:53 1 64 1 2025-08-30 03:29:28.218 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41947 1 80 1 2025-08-30 03:29:28.218 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56110 1 109 1 2025-08-30 03:28:21.365 00:02:00.048 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-08-30 03:28:21.365 00:02:00.021 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-08-30 03:30:30.449 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-30 03:30:28.513 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44437 1 80 1 2025-08-30 03:30:28.513 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53921 1 109 1 2025-08-30 03:30:28.503 00:00:00.000 UDP 28.104.0.1:53921 -> 198.28.0.2:53 1 64 1 2025-08-30 03:30:28.502 00:00:00.000 UDP 28.104.0.1:44437 -> 198.28.0.2:53 1 64 1 2025-08-30 03:27:20.836 00:05:00.532 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-08-30 03:31:28.808 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52090 1 80 1 2025-08-30 03:31:28.809 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48362 1 109 1 2025-08-30 03:31:28.799 00:00:00.000 UDP 28.104.0.1:48362 -> 198.28.0.2:53 1 64 1 2025-08-30 03:31:28.798 00:00:00.000 UDP 28.104.0.1:52090 -> 198.28.0.2:53 1 64 1 2025-08-30 03:31:21.368 00:01:00.041 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-08-30 03:31:21.368 00:01:00.018 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-08-30 03:28:20.827 00:05:00.551 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-08-30 03:32:29.093 00:00:00.000 UDP 28.104.0.1:52339 -> 198.28.0.2:53 1 64 1 2025-08-30 03:32:29.093 00:00:00.000 UDP 28.104.0.1:33775 -> 198.28.0.2:53 1 64 1 2025-08-30 03:32:29.103 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33775 1 109 1 2025-08-30 03:32:29.103 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52339 1 80 1 2025-08-30 03:33:29.401 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60034 1 109 1 2025-08-30 03:33:29.402 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41013 1 80 1 2025-08-30 03:33:29.391 00:00:00.000 UDP 28.104.0.1:60034 -> 198.28.0.2:53 1 64 1 2025-08-30 03:33:29.392 00:00:00.000 UDP 28.104.0.1:41013 -> 198.28.0.2:53 1 64 1 2025-08-30 03:29:23.635 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2692 1 2025-08-30 03:34:29.679 00:00:00.000 UDP 28.104.0.1:44256 -> 198.28.0.2:53 1 64 1 2025-08-30 03:34:29.679 00:00:00.000 UDP 28.104.0.1:44981 -> 198.28.0.2:53 1 64 1 2025-08-30 03:34:29.690 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44981 1 80 1 2025-08-30 03:34:29.690 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44256 1 109 1 2025-08-30 03:31:20.878 00:05:00.379 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-08-30 03:31:20.827 00:05:00.440 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-08-30 03:35:30.521 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-30 03:35:29.980 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51072 1 109 1 2025-08-30 03:35:29.980 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41515 1 80 1 2025-08-30 03:35:29.970 00:00:00.000 UDP 28.104.0.1:51072 -> 198.28.0.2:53 1 64 1 2025-08-30 03:35:29.970 00:00:00.000 UDP 28.104.0.1:41515 -> 198.28.0.2:53 1 64 1 2025-08-30 03:36:30.265 00:00:00.000 UDP 28.104.0.1:55424 -> 198.28.0.2:53 1 64 1 2025-08-30 03:36:30.265 00:00:00.000 UDP 28.104.0.1:45527 -> 198.28.0.2:53 1 64 1 2025-08-30 03:36:30.274 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55424 1 80 1 2025-08-30 03:36:30.274 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45527 1 109 1 2025-08-30 03:33:21.368 00:04:00.043 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-08-30 03:33:21.368 00:04:00.019 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-08-30 03:33:20.838 00:05:00.536 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-08-30 03:37:30.567 00:00:00.000 UDP 28.104.0.1:42676 -> 198.28.0.2:53 1 64 1 2025-08-30 03:37:30.567 00:00:00.000 UDP 28.104.0.1:38200 -> 198.28.0.2:53 1 64 1 2025-08-30 03:37:30.578 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42676 1 80 1 2025-08-30 03:37:30.578 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38200 1 109 1 2025-08-30 03:34:20.833 00:05:00.550 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-08-30 03:38:30.871 00:00:00.000 UDP 28.104.0.1:45892 -> 198.28.0.2:53 1 64 1 2025-08-30 03:38:30.870 00:00:00.000 UDP 28.104.0.1:51364 -> 198.28.0.2:53 1 64 1 2025-08-30 03:38:30.882 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51364 1 80 1 2025-08-30 03:38:30.883 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45892 1 109 1 2025-08-30 03:34:43.643 00:05:10.009 OSPF 28.0.2.1:0 -> 224.0.0.5:0 42 2988 1 2025-08-30 03:38:21.373 00:01:00.038 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-08-30 03:38:21.373 00:01:00.017 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-08-30 03:39:31.192 00:00:00.000 UDP 28.104.0.1:35870 -> 198.28.0.2:53 1 64 1 2025-08-30 03:39:31.192 00:00:00.000 UDP 28.104.0.1:47726 -> 198.28.0.2:53 1 64 1 2025-08-30 03:39:31.203 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47726 1 109 1 2025-08-30 03:39:31.203 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35870 1 80 1 2025-08-30 03:40:31.500 00:00:00.000 UDP 28.104.0.1:47859 -> 198.28.0.2:53 1 64 1 2025-08-30 03:40:31.500 00:00:00.000 UDP 28.104.0.1:52925 -> 198.28.0.2:53 1 64 1 2025-08-30 03:40:31.511 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47859 1 80 1 2025-08-30 03:40:30.563 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-30 03:40:31.511 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52925 1 109 1 2025-08-30 03:37:20.886 00:05:00.375 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-08-30 03:37:20.834 00:05:00.436 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-08-30 03:41:31.806 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59655 1 109 1 2025-08-30 03:41:31.805 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48103 1 80 1 2025-08-30 03:41:31.794 00:00:00.000 UDP 28.104.0.1:59655 -> 198.28.0.2:53 1 64 1 2025-08-30 03:41:31.793 00:00:00.000 UDP 28.104.0.1:48103 -> 198.28.0.2:53 1 64 1 2025-08-30 03:40:21.374 00:02:00.038 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-08-30 03:40:21.374 00:02:00.019 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-08-30 03:42:32.114 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40613 1 80 1 2025-08-30 03:42:32.114 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56870 1 109 1 2025-08-30 03:42:32.103 00:00:00.000 UDP 28.104.0.1:40613 -> 198.28.0.2:53 1 64 1 2025-08-30 03:42:32.103 00:00:00.000 UDP 28.104.0.1:56870 -> 198.28.0.2:53 1 64 1 2025-08-30 03:39:20.857 00:05:00.517 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-08-30 03:43:32.455 00:00:00.000 UDP 28.104.0.1:50640 -> 198.28.0.2:53 1 64 1 2025-08-30 03:43:32.455 00:00:00.000 UDP 28.104.0.1:56693 -> 198.28.0.2:53 1 64 1 2025-08-30 03:43:32.465 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56693 1 109 1 2025-08-30 03:43:32.465 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50640 1 80 1 2025-08-30 03:40:03.652 00:05:10.013 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2712 1 2025-08-30 03:40:20.838 00:05:00.546 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-08-30 03:43:21.373 00:01:00.051 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-08-30 03:43:21.373 00:01:00.023 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-08-30 03:44:38.446 00:00:00.000 UDP 28.104.0.1:52748 -> 198.28.0.2:53 1 64 1 2025-08-30 03:44:38.446 00:00:00.000 UDP 28.104.0.1:43378 -> 198.28.0.2:53 1 64 1 2025-08-30 03:44:38.457 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52748 1 80 1 2025-08-30 03:44:38.457 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43378 1 109 1 2025-08-30 03:45:30.764 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-30 03:45:38.753 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36134 1 80 1 2025-08-30 03:45:38.754 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47433 1 109 1 2025-08-30 03:45:38.743 00:00:00.000 UDP 28.104.0.1:36134 -> 198.28.0.2:53 1 64 1 2025-08-30 03:45:38.743 00:00:00.000 UDP 28.104.0.1:47433 -> 198.28.0.2:53 1 64 1 2025-08-30 03:46:39.427 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34950 1 80 1 2025-08-30 03:46:39.427 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44506 1 109 1 2025-08-30 03:46:39.418 00:00:00.000 UDP 28.104.0.1:34950 -> 198.28.0.2:53 1 64 1 2025-08-30 03:46:39.418 00:00:00.000 UDP 28.104.0.1:44506 -> 198.28.0.2:53 1 64 1 2025-08-30 03:43:20.839 00:05:00.433 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-08-30 03:45:21.374 00:02:00.038 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-08-30 03:45:21.374 00:02:00.020 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-08-30 03:43:20.889 00:05:00.373 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-08-30 03:47:39.679 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44420 1 80 1 2025-08-30 03:47:39.679 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55057 1 109 1 2025-08-30 03:47:39.669 00:00:00.000 UDP 28.104.0.1:44420 -> 198.28.0.2:53 1 64 1 2025-08-30 03:47:39.669 00:00:00.000 UDP 28.104.0.1:55057 -> 198.28.0.2:53 1 64 1 2025-08-30 03:48:39.983 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34858 1 80 1 2025-08-30 03:48:39.982 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54456 1 109 1 2025-08-30 03:48:39.973 00:00:00.000 UDP 28.104.0.1:54456 -> 198.28.0.2:53 1 64 1 2025-08-30 03:48:39.973 00:00:00.000 UDP 28.104.0.1:34858 -> 198.28.0.2:53 1 64 1 2025-08-30 03:48:21.375 00:01:00.038 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-08-30 03:48:21.375 00:01:00.019 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-08-30 03:45:20.851 00:05:00.528 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-08-30 03:45:23.664 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2796 1 2025-08-30 03:49:40.273 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50530 1 109 1 2025-08-30 03:49:40.273 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56470 1 80 1 2025-08-30 03:49:40.262 00:00:00.000 UDP 28.104.0.1:50530 -> 198.28.0.2:53 1 64 1 2025-08-30 03:49:40.262 00:00:00.000 UDP 28.104.0.1:56470 -> 198.28.0.2:53 1 64 1 2025-08-30 03:46:20.838 00:05:00.551 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-08-30 03:50:30.679 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-30 03:50:40.572 00:00:00.000 UDP 28.104.0.1:42335 -> 198.28.0.2:53 1 64 1 2025-08-30 03:50:40.572 00:00:00.000 UDP 28.104.0.1:47839 -> 198.28.0.2:53 1 64 1 2025-08-30 03:50:40.583 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47839 1 109 1 2025-08-30 03:50:40.583 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42335 1 80 1 2025-08-30 03:51:40.883 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56854 1 109 1 2025-08-30 03:51:40.882 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34304 1 80 1 2025-08-30 03:51:40.872 00:00:00.000 UDP 28.104.0.1:34304 -> 198.28.0.2:53 1 64 1 2025-08-30 03:51:40.871 00:00:00.000 UDP 28.104.0.1:56854 -> 198.28.0.2:53 1 64 1 2025-08-30 03:50:21.381 00:02:00.034 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-08-30 03:50:21.381 00:02:00.021 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-08-30 03:52:41.196 00:00:00.000 UDP 28.104.0.1:60986 -> 198.28.0.2:53 1 64 1 2025-08-30 03:52:41.196 00:00:00.000 UDP 28.104.0.1:35341 -> 198.28.0.2:53 1 64 1 2025-08-30 03:52:41.208 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35341 1 80 1 2025-08-30 03:52:41.208 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60986 1 109 1 2025-08-30 03:49:20.889 00:05:00.373 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-08-30 03:49:20.839 00:05:00.434 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-08-30 03:53:41.506 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33977 1 109 1 2025-08-30 03:53:41.506 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34997 1 80 1 2025-08-30 03:53:41.495 00:00:00.000 UDP 28.104.0.1:34997 -> 198.28.0.2:53 1 64 1 2025-08-30 03:53:41.495 00:00:00.000 UDP 28.104.0.1:33977 -> 198.28.0.2:53 1 64 1 2025-08-30 03:53:21.381 00:01:00.033 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-08-30 03:53:21.381 00:01:00.020 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-08-30 03:54:41.796 00:00:00.000 UDP 28.104.0.1:47372 -> 198.28.0.2:53 1 64 1 2025-08-30 03:54:41.796 00:00:00.000 UDP 28.104.0.1:45681 -> 198.28.0.2:53 1 64 1 2025-08-30 03:54:41.807 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47372 1 80 1 2025-08-30 03:54:41.807 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45681 1 109 1 2025-08-30 03:50:43.672 00:05:00.458 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2644 1 2025-08-30 03:51:20.849 00:05:00.532 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-08-30 03:55:30.906 00:00:00.025 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-30 03:55:42.117 00:00:00.000 UDP 28.104.0.1:59196 -> 198.28.0.2:53 1 64 1 2025-08-30 03:55:42.117 00:00:00.000 UDP 28.104.0.1:34927 -> 198.28.0.2:53 1 64 1 2025-08-30 03:55:42.129 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34927 1 109 1 2025-08-30 03:55:42.130 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59196 1 80 1 2025-08-30 03:52:20.841 00:05:00.550 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-08-30 03:56:42.426 00:00:00.000 UDP 28.104.0.1:56253 -> 198.28.0.2:53 1 64 1 2025-08-30 03:56:42.426 00:00:00.000 UDP 28.104.0.1:58866 -> 198.28.0.2:53 1 64 1 2025-08-30 03:56:42.438 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58866 1 80 1 2025-08-30 03:56:42.438 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56253 1 109 1 2025-08-30 03:55:21.381 00:02:00.034 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-08-30 03:55:21.381 00:02:00.022 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-08-30 03:57:42.693 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51873 1 109 1 2025-08-30 03:57:42.693 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56692 1 80 1 2025-08-30 03:57:42.683 00:00:00.000 UDP 28.104.0.1:56692 -> 198.28.0.2:53 1 64 1 2025-08-30 03:57:42.682 00:00:00.000 UDP 28.104.0.1:51873 -> 198.28.0.2:53 1 64 1 2025-08-30 03:58:42.978 00:00:00.000 UDP 28.104.0.1:54573 -> 198.28.0.2:53 1 64 1 2025-08-30 03:58:42.978 00:00:00.000 UDP 28.104.0.1:50073 -> 198.28.0.2:53 1 64 1 2025-08-30 03:58:42.989 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54573 1 80 1 2025-08-30 03:58:42.988 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50073 1 109 1 Summary: total flows: 347, total bytes: 97124, total packets: 1431, avg bps: 204, avg pps: 0, avg bpp: 67 Time window: 2025-08-30 02:55:20 - 2025-08-30 03:58:42 Total flows processed: 347, passed: 347, Blocks skipped: 0, Bytes read: 36152 Sys: 0.0009s User: 0.0038s Wall: 0.0027s flows/second: 129716.9 Runtime: 0.0027s