Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-01 04:59:10.556 00:00:00.000 UDP 28.104.0.1:45035 -> 198.28.0.2:53 1 64 1 2025-09-01 04:59:10.557 00:00:00.000 UDP 28.104.0.1:41572 -> 198.28.0.2:53 1 64 1 2025-09-01 04:59:10.568 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41572 1 109 1 2025-09-01 04:59:10.566 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45035 1 80 1 2025-09-01 04:55:21.748 00:05:01.073 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-01 05:00:10.882 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49774 1 109 1 2025-09-01 05:00:10.882 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41800 1 80 1 2025-09-01 05:00:10.871 00:00:00.000 UDP 28.104.0.1:41800 -> 198.28.0.2:53 1 64 1 2025-09-01 05:00:10.871 00:00:00.000 UDP 28.104.0.1:49774 -> 198.28.0.2:53 1 64 1 2025-09-01 04:56:21.798 00:05:01.011 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-01 05:01:11.187 00:00:00.000 UDP 28.104.0.1:60370 -> 198.28.0.2:53 1 64 1 2025-09-01 05:01:11.187 00:00:00.000 UDP 28.104.0.1:42711 -> 198.28.0.2:53 1 64 1 2025-09-01 05:01:11.197 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60370 1 80 1 2025-09-01 05:01:11.197 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42711 1 109 1 2025-09-01 04:57:21.747 00:05:01.162 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-01 04:57:22.897 00:05:00.123 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-09-01 05:01:29.869 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-01 05:02:11.497 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56697 1 109 1 2025-09-01 05:02:11.497 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42390 1 80 1 2025-09-01 05:02:11.486 00:00:00.000 UDP 28.104.0.1:42390 -> 198.28.0.2:53 1 64 1 2025-09-01 05:02:11.486 00:00:00.000 UDP 28.104.0.1:56697 -> 198.28.0.2:53 1 64 1 2025-09-01 04:58:21.759 00:05:01.141 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-01 04:58:27.639 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2736 1 2025-09-01 05:03:11.795 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41426 1 109 1 2025-09-01 05:03:11.791 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59909 1 80 1 2025-09-01 05:03:11.783 00:00:00.000 UDP 28.104.0.1:41426 -> 198.28.0.2:53 1 64 1 2025-09-01 05:03:11.780 00:00:00.000 UDP 28.104.0.1:59909 -> 198.28.0.2:53 1 64 1 2025-09-01 04:58:22.898 00:06:00.030 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-09-01 05:04:12.367 00:00:00.000 UDP 28.104.0.1:33817 -> 198.28.0.2:53 1 64 1 2025-09-01 05:04:12.367 00:00:00.000 UDP 28.104.0.1:38785 -> 198.28.0.2:53 1 64 1 2025-09-01 05:04:12.377 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33817 1 109 1 2025-09-01 05:04:12.377 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38785 1 80 1 2025-09-01 05:05:12.675 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34115 1 109 1 2025-09-01 05:05:12.675 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55734 1 80 1 2025-09-01 05:05:12.664 00:00:00.000 UDP 28.104.0.1:34115 -> 198.28.0.2:53 1 64 1 2025-09-01 05:05:12.664 00:00:00.000 UDP 28.104.0.1:55734 -> 198.28.0.2:53 1 64 1 2025-09-01 05:01:21.750 00:05:01.070 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-01 05:06:12.970 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44610 1 109 1 2025-09-01 05:06:12.970 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41799 1 80 1 2025-09-01 05:06:12.961 00:00:00.000 UDP 28.104.0.1:41799 -> 198.28.0.2:53 1 64 1 2025-09-01 05:06:12.961 00:00:00.000 UDP 28.104.0.1:44610 -> 198.28.0.2:53 1 64 1 2025-09-01 05:02:21.799 00:05:01.010 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-01 05:06:30.161 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-01 05:07:13.207 00:00:00.000 UDP 28.104.0.1:39062 -> 198.28.0.2:53 1 64 1 2025-09-01 05:07:13.207 00:00:00.000 UDP 28.104.0.1:49117 -> 198.28.0.2:53 1 64 1 2025-09-01 05:07:13.217 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39062 1 80 1 2025-09-01 05:07:13.219 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49117 1 109 1 2025-09-01 05:03:22.899 00:05:00.123 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-09-01 05:03:21.750 00:05:01.159 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-01 05:03:47.641 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 42 3016 1 2025-09-01 05:08:13.517 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35201 1 80 1 2025-09-01 05:08:13.517 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34796 1 109 1 2025-09-01 05:08:13.508 00:00:00.000 UDP 28.104.0.1:34796 -> 198.28.0.2:53 1 64 1 2025-09-01 05:08:13.507 00:00:00.000 UDP 28.104.0.1:35201 -> 198.28.0.2:53 1 64 1 2025-09-01 05:04:21.760 00:05:01.140 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-01 05:09:13.792 00:00:00.000 UDP 28.104.0.1:33271 -> 198.28.0.2:53 1 64 1 2025-09-01 05:09:13.792 00:00:00.000 UDP 28.104.0.1:51069 -> 198.28.0.2:53 1 64 1 2025-09-01 05:09:13.802 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33271 1 109 1 2025-09-01 05:09:13.802 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51069 1 80 1 2025-09-01 05:10:14.102 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57029 1 109 1 2025-09-01 05:10:14.102 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55040 1 80 1 2025-09-01 05:10:14.093 00:00:00.000 UDP 28.104.0.1:55040 -> 198.28.0.2:53 1 64 1 2025-09-01 05:10:14.092 00:00:00.000 UDP 28.104.0.1:57029 -> 198.28.0.2:53 1 64 1 2025-09-01 05:05:22.900 00:06:00.030 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-09-01 05:11:14.337 00:00:00.000 UDP 28.104.0.1:33653 -> 198.28.0.2:53 1 64 1 2025-09-01 05:11:14.337 00:00:00.000 UDP 28.104.0.1:53725 -> 198.28.0.2:53 1 64 1 2025-09-01 05:11:14.349 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33653 1 80 1 2025-09-01 05:11:14.349 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53725 1 109 1 2025-09-01 05:07:21.754 00:05:01.071 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-01 05:11:30.532 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-01 05:12:14.645 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60583 1 80 1 2025-09-01 05:12:14.645 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57230 1 109 1 2025-09-01 05:12:14.635 00:00:00.000 UDP 28.104.0.1:60583 -> 198.28.0.2:53 1 64 1 2025-09-01 05:12:14.635 00:00:00.000 UDP 28.104.0.1:57230 -> 198.28.0.2:53 1 64 1 2025-09-01 05:08:21.804 00:05:01.010 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-01 05:13:14.989 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49855 1 109 1 2025-09-01 05:13:14.989 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48404 1 80 1 2025-09-01 05:13:14.979 00:00:00.000 UDP 28.104.0.1:49855 -> 198.28.0.2:53 1 64 1 2025-09-01 05:13:14.978 00:00:00.000 UDP 28.104.0.1:48404 -> 198.28.0.2:53 1 64 1 2025-09-01 05:09:07.650 00:05:10.009 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2884 1 2025-09-01 05:09:22.901 00:05:00.170 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-09-01 05:09:21.755 00:05:01.157 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-01 05:14:15.248 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51437 1 80 1 2025-09-01 05:14:15.248 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34843 1 109 1 2025-09-01 05:14:15.238 00:00:00.000 UDP 28.104.0.1:51437 -> 198.28.0.2:53 1 64 1 2025-09-01 05:14:15.238 00:00:00.000 UDP 28.104.0.1:34843 -> 198.28.0.2:53 1 64 1 2025-09-01 05:10:21.765 00:05:01.142 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-01 05:15:15.522 00:00:00.000 UDP 28.104.0.1:53128 -> 198.28.0.2:53 1 64 1 2025-09-01 05:15:15.522 00:00:00.000 UDP 28.104.0.1:43761 -> 198.28.0.2:53 1 64 1 2025-09-01 05:15:15.532 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43761 1 80 1 2025-09-01 05:15:15.534 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53128 1 109 1 2025-09-01 05:16:15.832 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59312 1 80 1 2025-09-01 05:16:15.832 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54848 1 109 1 2025-09-01 05:16:15.820 00:00:00.000 UDP 28.104.0.1:59312 -> 198.28.0.2:53 1 64 1 2025-09-01 05:16:15.820 00:00:00.000 UDP 28.104.0.1:54848 -> 198.28.0.2:53 1 64 1 2025-09-01 05:16:30.397 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-01 05:17:16.132 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58112 1 109 1 2025-09-01 05:17:16.132 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57917 1 80 1 2025-09-01 05:17:16.121 00:00:00.000 UDP 28.104.0.1:57917 -> 198.28.0.2:53 1 64 1 2025-09-01 05:17:16.121 00:00:00.000 UDP 28.104.0.1:58112 -> 198.28.0.2:53 1 64 1 2025-09-01 05:13:21.755 00:05:01.070 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-01 05:12:22.902 00:06:00.030 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-09-01 05:18:16.428 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43331 1 80 1 2025-09-01 05:18:16.428 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54082 1 109 1 2025-09-01 05:18:16.419 00:00:00.000 UDP 28.104.0.1:43331 -> 198.28.0.2:53 1 64 1 2025-09-01 05:18:16.419 00:00:00.000 UDP 28.104.0.1:54082 -> 198.28.0.2:53 1 64 1 2025-09-01 05:14:21.806 00:05:01.009 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-01 05:14:27.658 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 32 2176 1 2025-09-01 05:19:16.686 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58155 1 109 1 2025-09-01 05:19:16.686 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55521 1 80 1 2025-09-01 05:19:16.678 00:00:00.000 UDP 28.104.0.1:55521 -> 198.28.0.2:53 1 64 1 2025-09-01 05:19:16.678 00:00:00.000 UDP 28.104.0.1:58155 -> 198.28.0.2:53 1 64 1 2025-09-01 05:15:22.907 00:05:00.169 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-09-01 05:15:21.756 00:05:01.161 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-01 05:20:16.944 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55153 1 109 1 2025-09-01 05:20:16.945 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58444 1 80 1 2025-09-01 05:20:16.934 00:00:00.000 UDP 28.104.0.1:55153 -> 198.28.0.2:53 1 64 1 2025-09-01 05:20:16.934 00:00:00.000 UDP 28.104.0.1:58444 -> 198.28.0.2:53 1 64 1 2025-09-01 05:16:21.766 00:05:01.141 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-01 05:21:17.246 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39989 1 80 1 2025-09-01 05:21:17.245 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42158 1 109 1 2025-09-01 05:21:17.236 00:00:00.000 UDP 28.104.0.1:42158 -> 198.28.0.2:53 1 64 1 2025-09-01 05:21:17.236 00:00:00.000 UDP 28.104.0.1:39989 -> 198.28.0.2:53 1 64 1 2025-09-01 05:21:30.523 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-01 05:22:17.530 00:00:00.000 UDP 28.104.0.1:49716 -> 198.28.0.2:53 1 64 1 2025-09-01 05:22:17.530 00:00:00.000 UDP 28.104.0.1:36354 -> 198.28.0.2:53 1 64 1 2025-09-01 05:22:17.542 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36354 1 80 1 2025-09-01 05:22:17.542 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49716 1 109 1 2025-09-01 05:23:17.836 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53214 1 109 1 2025-09-01 05:23:17.836 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44912 1 80 1 2025-09-01 05:23:17.826 00:00:00.000 UDP 28.104.0.1:44912 -> 198.28.0.2:53 1 64 1 2025-09-01 05:23:17.826 00:00:00.000 UDP 28.104.0.1:53214 -> 198.28.0.2:53 1 64 1 2025-09-01 05:19:21.757 00:05:01.070 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-01 05:19:47.665 00:05:10.009 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 3100 1 2025-09-01 05:24:18.132 00:00:00.000 UDP 28.104.0.1:40611 -> 198.28.0.2:53 1 64 1 2025-09-01 05:24:18.132 00:00:00.000 UDP 28.104.0.1:48478 -> 198.28.0.2:53 1 64 1 2025-09-01 05:24:18.141 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48478 1 109 1 2025-09-01 05:24:18.142 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40611 1 80 1 2025-09-01 05:20:21.808 00:05:01.009 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-01 05:19:22.907 00:06:00.025 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-09-01 05:25:18.431 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58629 1 80 1 2025-09-01 05:25:18.431 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57815 1 109 1 2025-09-01 05:25:18.421 00:00:00.000 UDP 28.104.0.1:57815 -> 198.28.0.2:53 1 64 1 2025-09-01 05:25:18.421 00:00:00.000 UDP 28.104.0.1:58629 -> 198.28.0.2:53 1 64 1 2025-09-01 05:21:22.907 00:05:00.170 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-09-01 05:21:21.757 00:05:01.161 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-01 05:26:18.717 00:00:00.000 UDP 28.104.0.1:48384 -> 198.28.0.2:53 1 64 1 2025-09-01 05:26:18.717 00:00:00.000 UDP 28.104.0.1:51269 -> 198.28.0.2:53 1 64 1 2025-09-01 05:26:18.728 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48384 1 109 1 2025-09-01 05:26:18.728 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51269 1 80 1 2025-09-01 05:22:21.767 00:05:01.142 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-01 05:26:30.586 00:00:00.025 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-01 05:27:19.039 00:00:00.000 UDP 28.104.0.1:36008 -> 198.28.0.2:53 1 64 1 2025-09-01 05:27:19.038 00:00:00.000 UDP 28.104.0.1:46053 -> 198.28.0.2:53 1 64 1 2025-09-01 05:27:19.049 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46053 1 80 1 2025-09-01 05:27:19.049 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36008 1 109 1 2025-09-01 05:28:19.361 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51035 1 109 1 2025-09-01 05:28:19.362 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52137 1 80 1 2025-09-01 05:28:19.351 00:00:00.000 UDP 28.104.0.1:52137 -> 198.28.0.2:53 1 64 1 2025-09-01 05:28:19.351 00:00:00.000 UDP 28.104.0.1:51035 -> 198.28.0.2:53 1 64 1 2025-09-01 05:25:07.673 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 34 2320 1 2025-09-01 05:29:19.658 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48281 1 109 1 2025-09-01 05:29:19.658 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45035 1 80 1 2025-09-01 05:29:19.649 00:00:00.000 UDP 28.104.0.1:48281 -> 198.28.0.2:53 1 64 1 2025-09-01 05:29:19.649 00:00:00.000 UDP 28.104.0.1:45035 -> 198.28.0.2:53 1 64 1 2025-09-01 05:25:21.758 00:05:01.070 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-01 05:30:19.959 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45345 1 109 1 2025-09-01 05:30:19.959 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35148 1 80 1 2025-09-01 05:30:19.949 00:00:00.000 UDP 28.104.0.1:35148 -> 198.28.0.2:53 1 64 1 2025-09-01 05:30:19.949 00:00:00.000 UDP 28.104.0.1:45345 -> 198.28.0.2:53 1 64 1 2025-09-01 05:26:21.808 00:05:01.010 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-01 05:31:20.254 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57049 1 109 1 2025-09-01 05:31:20.254 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48813 1 80 1 2025-09-01 05:31:20.244 00:00:00.000 UDP 28.104.0.1:57049 -> 198.28.0.2:53 1 64 1 2025-09-01 05:31:20.245 00:00:00.000 UDP 28.104.0.1:48813 -> 198.28.0.2:53 1 64 1 2025-09-01 05:26:22.908 00:06:00.025 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-09-01 05:27:22.909 00:05:00.172 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-09-01 05:27:21.757 00:05:01.163 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-01 05:31:30.557 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-01 05:32:20.509 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36858 1 80 1 2025-09-01 05:32:20.508 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55813 1 109 1 2025-09-01 05:32:20.498 00:00:00.000 UDP 28.104.0.1:55813 -> 198.28.0.2:53 1 64 1 2025-09-01 05:32:20.498 00:00:00.000 UDP 28.104.0.1:36858 -> 198.28.0.2:53 1 64 1 2025-09-01 05:28:21.768 00:05:01.143 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-01 05:33:20.811 00:00:00.000 UDP 28.104.0.1:42586 -> 198.28.0.2:53 1 64 1 2025-09-01 05:33:20.811 00:00:00.000 UDP 28.104.0.1:42048 -> 198.28.0.2:53 1 64 1 2025-09-01 05:33:20.821 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42048 1 109 1 2025-09-01 05:33:20.821 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42586 1 80 1 2025-09-01 05:34:21.124 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46767 1 80 1 2025-09-01 05:34:21.124 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53494 1 109 1 2025-09-01 05:34:21.114 00:00:00.000 UDP 28.104.0.1:53494 -> 198.28.0.2:53 1 64 1 2025-09-01 05:34:21.114 00:00:00.000 UDP 28.104.0.1:46767 -> 198.28.0.2:53 1 64 1 2025-09-01 05:30:27.681 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 43 3060 1 2025-09-01 05:35:21.364 00:00:00.000 UDP 28.104.0.1:49547 -> 198.28.0.2:53 1 64 1 2025-09-01 05:35:21.364 00:00:00.000 UDP 28.104.0.1:54835 -> 198.28.0.2:53 1 64 1 2025-09-01 05:35:21.375 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49547 1 80 1 2025-09-01 05:35:21.375 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54835 1 109 1 2025-09-01 05:31:21.759 00:05:01.070 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-01 05:36:21.658 00:00:00.000 UDP 28.104.0.1:35319 -> 198.28.0.2:53 1 64 1 2025-09-01 05:36:21.657 00:00:00.000 UDP 28.104.0.1:48610 -> 198.28.0.2:53 1 64 1 2025-09-01 05:36:21.667 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48610 1 109 1 2025-09-01 05:36:21.668 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35319 1 80 1 2025-09-01 05:32:21.809 00:05:01.010 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-01 05:36:30.613 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-01 05:37:21.968 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53058 1 80 1 2025-09-01 05:37:21.967 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56864 1 109 1 2025-09-01 05:37:21.958 00:00:00.000 UDP 28.104.0.1:53058 -> 198.28.0.2:53 1 64 1 2025-09-01 05:37:21.958 00:00:00.000 UDP 28.104.0.1:56864 -> 198.28.0.2:53 1 64 1 2025-09-01 05:33:22.911 00:05:00.176 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-09-01 05:33:21.758 00:05:01.166 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-01 05:38:22.271 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57912 1 80 1 2025-09-01 05:38:22.271 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49887 1 109 1 2025-09-01 05:33:22.911 00:06:00.026 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-09-01 05:34:21.769 00:05:01.146 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-01 05:38:22.261 00:00:00.000 UDP 28.104.0.1:49887 -> 198.28.0.2:53 1 64 1 2025-09-01 05:38:22.261 00:00:00.000 UDP 28.104.0.1:57912 -> 198.28.0.2:53 1 64 1 2025-09-01 05:39:22.546 00:00:00.000 UDP 28.104.0.1:57600 -> 198.28.0.2:53 1 64 1 2025-09-01 05:39:22.545 00:00:00.000 UDP 28.104.0.1:40834 -> 198.28.0.2:53 1 64 1 2025-09-01 05:39:22.558 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57600 1 109 1 2025-09-01 05:39:22.558 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40834 1 80 1 2025-09-01 05:35:47.688 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2816 1 2025-09-01 05:40:22.841 00:00:00.000 UDP 28.104.0.1:55116 -> 198.28.0.2:53 1 64 1 2025-09-01 05:40:22.841 00:00:00.000 UDP 28.104.0.1:53398 -> 198.28.0.2:53 1 64 1 2025-09-01 05:40:22.852 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53398 1 80 1 2025-09-01 05:40:22.851 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55116 1 109 1 2025-09-01 05:37:21.759 00:05:01.072 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-01 05:41:23.143 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34310 1 109 1 2025-09-01 05:41:23.143 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42537 1 80 1 2025-09-01 05:41:23.132 00:00:00.000 UDP 28.104.0.1:42537 -> 198.28.0.2:53 1 64 1 2025-09-01 05:41:23.131 00:00:00.000 UDP 28.104.0.1:34310 -> 198.28.0.2:53 1 64 1 2025-09-01 05:41:30.926 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-01 05:42:23.438 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57494 1 80 1 2025-09-01 05:42:23.438 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51861 1 109 1 2025-09-01 05:42:23.427 00:00:00.000 UDP 28.104.0.1:57494 -> 198.28.0.2:53 1 64 1 2025-09-01 05:42:23.427 00:00:00.000 UDP 28.104.0.1:51861 -> 198.28.0.2:53 1 64 1 2025-09-01 05:38:21.810 00:05:01.011 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-01 05:43:23.729 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46287 1 80 1 2025-09-01 05:39:21.759 00:05:01.166 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-01 05:43:23.729 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42177 1 109 1 2025-09-01 05:43:23.719 00:00:00.000 UDP 28.104.0.1:46287 -> 198.28.0.2:53 1 64 1 2025-09-01 05:43:23.719 00:00:00.000 UDP 28.104.0.1:42177 -> 198.28.0.2:53 1 64 1 2025-09-01 05:39:22.915 00:05:00.173 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-09-01 05:44:24.035 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41951 1 109 1 2025-09-01 05:44:24.032 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46511 1 80 1 2025-09-01 05:44:24.022 00:00:00.000 UDP 28.104.0.1:46511 -> 198.28.0.2:53 1 64 1 2025-09-01 05:44:24.021 00:00:00.000 UDP 28.104.0.1:41951 -> 198.28.0.2:53 1 64 1 2025-09-01 05:40:21.770 00:05:01.145 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-01 05:41:07.697 00:05:10.009 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2480 1 2025-09-01 05:45:24.319 00:00:00.000 UDP 28.104.0.1:33160 -> 198.28.0.2:53 1 64 1 2025-09-01 05:40:22.915 00:06:00.027 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-09-01 05:45:24.319 00:00:00.000 UDP 28.104.0.1:43332 -> 198.28.0.2:53 1 64 1 2025-09-01 05:45:24.329 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33160 1 109 1 2025-09-01 05:45:24.329 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43332 1 80 1 2025-09-01 05:46:24.628 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49266 1 80 1 2025-09-01 05:46:24.629 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55928 1 109 1 2025-09-01 05:46:24.617 00:00:00.000 UDP 28.104.0.1:55928 -> 198.28.0.2:53 1 64 1 2025-09-01 05:46:24.618 00:00:00.000 UDP 28.104.0.1:49266 -> 198.28.0.2:53 1 64 1 2025-09-01 05:46:30.895 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-01 05:47:24.871 00:00:00.000 UDP 28.104.0.1:34358 -> 198.28.0.2:53 1 64 1 2025-09-01 05:47:24.871 00:00:00.000 UDP 28.104.0.1:50391 -> 198.28.0.2:53 1 64 1 2025-09-01 05:43:21.760 00:05:01.075 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-01 05:47:24.881 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50391 1 80 1 2025-09-01 05:47:24.881 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34358 1 109 1 2025-09-01 05:44:21.811 00:05:01.014 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-01 05:48:25.192 00:00:00.000 UDP 28.104.0.1:60578 -> 198.28.0.2:53 1 64 1 2025-09-01 05:48:25.186 00:00:00.000 UDP 28.104.0.1:50545 -> 198.28.0.2:53 1 64 1 2025-09-01 05:48:25.195 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50545 1 80 1 2025-09-01 05:48:25.201 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60578 1 109 1 2025-09-01 05:49:25.486 00:00:00.000 UDP 28.104.0.1:59774 -> 198.28.0.2:53 1 64 1 2025-09-01 05:45:22.916 00:05:00.173 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-09-01 05:49:25.486 00:00:00.000 UDP 28.104.0.1:43713 -> 198.28.0.2:53 1 64 1 2025-09-01 05:45:21.760 00:05:01.167 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-01 05:49:25.496 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43713 1 109 1 2025-09-01 05:49:25.496 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59774 1 80 1 2025-09-01 05:50:25.795 00:00:00.000 UDP 28.104.0.1:39045 -> 198.28.0.2:53 1 64 1 2025-09-01 05:50:25.795 00:00:00.000 UDP 28.104.0.1:38469 -> 198.28.0.2:53 1 64 1 2025-09-01 05:46:21.770 00:05:01.146 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-01 05:50:25.806 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38469 1 109 1 2025-09-01 05:50:25.806 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39045 1 80 1 2025-09-01 05:46:27.706 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 34 2444 1 2025-09-01 05:51:26.072 00:00:00.000 UDP 28.104.0.1:37045 -> 198.28.0.2:53 1 64 1 2025-09-01 05:51:26.073 00:00:00.000 UDP 28.104.0.1:38254 -> 198.28.0.2:53 1 64 1 2025-09-01 05:51:26.083 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37045 1 109 1 2025-09-01 05:51:26.083 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38254 1 80 1 2025-09-01 05:51:31.205 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-01 05:47:22.917 00:06:00.034 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-09-01 05:52:26.365 00:00:00.000 UDP 28.104.0.1:42477 -> 198.28.0.2:53 1 64 1 2025-09-01 05:52:26.365 00:00:00.000 UDP 28.104.0.1:60539 -> 198.28.0.2:53 1 64 1 2025-09-01 05:52:26.375 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42477 1 80 1 2025-09-01 05:52:26.374 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60539 1 109 1 2025-09-01 05:53:26.667 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39262 1 80 1 2025-09-01 05:53:26.667 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49333 1 109 1 2025-09-01 05:49:21.760 00:05:01.079 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-01 05:53:26.657 00:00:00.000 UDP 28.104.0.1:39262 -> 198.28.0.2:53 1 64 1 2025-09-01 05:53:26.658 00:00:00.000 UDP 28.104.0.1:49333 -> 198.28.0.2:53 1 64 1 2025-09-01 05:50:21.815 00:05:01.015 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-01 05:54:26.910 00:00:00.000 UDP 28.104.0.1:57569 -> 198.28.0.2:53 1 64 1 2025-09-01 05:54:26.910 00:00:00.000 UDP 28.104.0.1:49828 -> 198.28.0.2:53 1 64 1 2025-09-01 05:54:26.919 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57569 1 109 1 2025-09-01 05:54:26.919 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49828 1 80 1 2025-09-01 05:51:21.765 00:05:01.165 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-01 05:55:27.179 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49386 1 80 1 2025-09-01 05:55:27.179 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34153 1 109 1 2025-09-01 05:51:22.917 00:05:00.180 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-09-01 05:55:27.169 00:00:00.000 UDP 28.104.0.1:34153 -> 198.28.0.2:53 1 64 1 2025-09-01 05:55:27.168 00:00:00.000 UDP 28.104.0.1:49386 -> 198.28.0.2:53 1 64 1 2025-09-01 05:51:47.714 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2940 1 2025-09-01 05:56:31.324 00:00:00.031 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-01 05:56:27.478 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45383 1 80 1 2025-09-01 05:56:27.476 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45819 1 109 1 2025-09-01 05:52:21.775 00:05:01.144 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-01 05:56:27.465 00:00:00.000 UDP 28.104.0.1:45819 -> 198.28.0.2:53 1 64 1 2025-09-01 05:56:27.464 00:00:00.000 UDP 28.104.0.1:45383 -> 198.28.0.2:53 1 64 1 2025-09-01 05:57:27.763 00:00:00.000 UDP 28.104.0.1:44319 -> 198.28.0.2:53 1 64 1 2025-09-01 05:57:27.762 00:00:00.000 UDP 28.104.0.1:49277 -> 198.28.0.2:53 1 64 1 2025-09-01 05:57:27.773 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44319 1 80 1 2025-09-01 05:57:27.772 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49277 1 109 1 2025-09-01 05:58:28.044 00:00:00.000 UDP 28.104.0.1:37635 -> 198.28.0.2:53 1 64 1 2025-09-01 05:58:28.038 00:00:00.000 UDP 28.104.0.1:48142 -> 198.28.0.2:53 1 64 1 2025-09-01 05:58:28.049 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48142 1 80 1 2025-09-01 05:58:28.055 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37635 1 109 1 Summary: total flows: 321, total bytes: 95804, total packets: 1411, avg bps: 202, avg pps: 0, avg bpp: 67 Time window: 2025-09-01 04:55:21 - 2025-09-01 05:58:28 Total flows processed: 321, passed: 321, Blocks skipped: 0, Bytes read: 33448 Sys: 0.0029s User: 0.0029s Wall: 0.0054s flows/second: 59531.8 Runtime: 0.0054s