Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-05 18:54:26.071 00:06:00.000 TCP 28.154.0.1:179 -> 28.155.0.1:36643 13 809 1 2025-09-05 18:55:23.931 00:05:02.349 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-05 18:59:35.842 00:00:00.000 UDP 28.104.0.1:42828 -> 198.28.0.2:53 1 64 1 2025-09-05 18:59:35.842 00:00:00.000 UDP 28.104.0.1:41546 -> 198.28.0.2:53 1 64 1 2025-09-05 18:59:35.852 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41546 1 80 1 2025-09-05 18:59:35.852 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42828 1 109 1 2025-09-05 18:56:23.984 00:05:02.287 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-05 19:00:36.103 00:00:00.000 UDP 28.104.0.1:58438 -> 198.28.0.2:53 1 64 1 2025-09-05 19:00:36.103 00:00:00.000 UDP 28.104.0.1:34893 -> 198.28.0.2:53 1 64 1 2025-09-05 19:00:36.114 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34893 1 80 1 2025-09-05 19:00:36.114 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58438 1 109 1 2025-09-05 19:00:26.071 00:01:00.397 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-09-05 19:00:26.323 00:01:00.002 TCP 28.154.0.1:179 -> 28.155.0.1:36643 3 175 1 2025-09-05 19:01:36.406 00:00:00.000 UDP 28.104.0.1:48377 -> 198.28.0.2:53 1 64 1 2025-09-05 19:01:36.406 00:00:00.000 UDP 28.104.0.1:54643 -> 198.28.0.2:53 1 64 1 2025-09-05 18:57:23.933 00:05:02.148 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-05 19:01:36.416 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54643 1 80 1 2025-09-05 19:01:36.416 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48377 1 109 1 2025-09-05 18:58:23.944 00:05:02.128 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-05 19:02:36.715 00:00:00.000 UDP 28.104.0.1:53141 -> 198.28.0.2:53 1 64 1 2025-09-05 19:02:36.715 00:00:00.000 UDP 28.104.0.1:57286 -> 198.28.0.2:53 1 64 1 2025-09-05 19:02:36.726 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53141 1 109 1 2025-09-05 19:02:36.726 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57286 1 80 1 2025-09-05 18:58:46.997 00:05:00.012 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2684 1 2025-09-05 19:03:37.049 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44146 1 109 1 2025-09-05 19:03:37.049 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51390 1 80 1 2025-09-05 19:03:37.039 00:00:00.000 UDP 28.104.0.1:44146 -> 198.28.0.2:53 1 64 1 2025-09-05 19:03:37.039 00:00:00.000 UDP 28.104.0.1:51390 -> 198.28.0.2:53 1 64 1 2025-09-05 19:03:42.375 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-05 19:04:37.341 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39487 1 109 1 2025-09-05 19:04:37.341 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53990 1 80 1 2025-09-05 19:04:37.330 00:00:00.000 UDP 28.104.0.1:53990 -> 198.28.0.2:53 1 64 1 2025-09-05 19:04:37.330 00:00:00.000 UDP 28.104.0.1:39487 -> 198.28.0.2:53 1 64 1 2025-09-05 19:01:23.935 00:05:02.348 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-05 19:05:37.621 00:00:00.000 UDP 28.104.0.1:51773 -> 198.28.0.2:53 1 64 1 2025-09-05 19:05:37.621 00:00:00.000 UDP 28.104.0.1:58287 -> 198.28.0.2:53 1 64 1 2025-09-05 19:05:37.633 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51773 1 80 1 2025-09-05 19:05:37.633 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58287 1 109 1 2025-09-05 19:02:26.071 00:04:00.398 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-09-05 19:02:26.071 00:04:00.264 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-05 19:02:23.985 00:05:02.289 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-05 19:06:37.919 00:00:00.000 UDP 28.104.0.1:34869 -> 198.28.0.2:53 1 64 1 2025-09-05 19:06:37.919 00:00:00.000 UDP 28.104.0.1:37209 -> 198.28.0.2:53 1 64 1 2025-09-05 19:06:37.930 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37209 1 80 1 2025-09-05 19:06:37.930 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34869 1 109 1 2025-09-05 19:03:23.934 00:05:02.150 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-05 19:07:38.247 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54929 1 109 1 2025-09-05 19:07:38.247 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48921 1 80 1 2025-09-05 19:07:38.236 00:00:00.000 UDP 28.104.0.1:48921 -> 198.28.0.2:53 1 64 1 2025-09-05 19:07:38.236 00:00:00.000 UDP 28.104.0.1:54929 -> 198.28.0.2:53 1 64 1 2025-09-05 19:03:57.009 00:05:10.038 OSPF 28.0.2.1:0 -> 224.0.0.5:0 34 2304 1 2025-09-05 19:04:23.946 00:05:02.129 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-05 19:08:38.531 00:00:00.000 UDP 28.104.0.1:33567 -> 198.28.0.2:53 1 64 1 2025-09-05 19:08:38.531 00:00:00.000 UDP 28.104.0.1:40264 -> 198.28.0.2:53 1 64 1 2025-09-05 19:08:38.542 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40264 1 80 1 2025-09-05 19:08:38.542 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33567 1 109 1 2025-09-05 19:08:42.610 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-05 19:09:38.841 00:00:00.000 UDP 28.104.0.1:50842 -> 198.28.0.2:53 1 64 1 2025-09-05 19:09:38.840 00:00:00.000 UDP 28.104.0.1:49508 -> 198.28.0.2:53 1 64 1 2025-09-05 19:09:38.850 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50842 1 80 1 2025-09-05 19:09:38.850 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49508 1 109 1 2025-09-05 19:10:39.133 00:00:00.000 UDP 28.104.0.1:60711 -> 198.28.0.2:53 1 64 1 2025-09-05 19:10:39.133 00:00:00.000 UDP 28.104.0.1:56520 -> 198.28.0.2:53 1 64 1 2025-09-05 19:10:39.145 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56520 1 80 1 2025-09-05 19:10:39.144 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60711 1 109 1 2025-09-05 19:07:26.075 00:04:00.397 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-09-05 19:07:26.075 00:04:00.268 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-05 19:07:23.936 00:05:02.348 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-05 19:11:39.437 00:00:00.000 UDP 28.104.0.1:35949 -> 198.28.0.2:53 1 64 1 2025-09-05 19:11:39.437 00:00:00.000 UDP 28.104.0.1:41751 -> 198.28.0.2:53 1 64 1 2025-09-05 19:11:39.446 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41751 1 80 1 2025-09-05 19:11:39.446 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35949 1 109 1 2025-09-05 19:08:23.985 00:05:02.289 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-05 19:12:39.741 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56908 1 109 1 2025-09-05 19:12:39.741 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54838 1 80 1 2025-09-05 19:12:39.730 00:00:00.000 UDP 28.104.0.1:54838 -> 198.28.0.2:53 1 64 1 2025-09-05 19:12:39.730 00:00:00.000 UDP 28.104.0.1:56908 -> 198.28.0.2:53 1 64 1 2025-09-05 19:09:23.937 00:05:02.150 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-05 19:09:17.047 00:05:10.013 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2728 1 2025-09-05 19:13:40.070 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56081 1 80 1 2025-09-05 19:13:40.070 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38032 1 109 1 2025-09-05 19:13:40.061 00:00:00.000 UDP 28.104.0.1:56081 -> 198.28.0.2:53 1 64 1 2025-09-05 19:13:40.061 00:00:00.000 UDP 28.104.0.1:38032 -> 198.28.0.2:53 1 64 1 2025-09-05 19:13:42.753 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-05 19:10:23.946 00:05:02.130 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-05 19:14:40.370 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53503 1 80 1 2025-09-05 19:14:40.369 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40922 1 109 1 2025-09-05 19:14:40.360 00:00:00.000 UDP 28.104.0.1:53503 -> 198.28.0.2:53 1 64 1 2025-09-05 19:14:40.360 00:00:00.000 UDP 28.104.0.1:40922 -> 198.28.0.2:53 1 64 1 2025-09-05 19:15:40.649 00:00:00.000 UDP 28.104.0.1:37910 -> 198.28.0.2:53 1 64 1 2025-09-05 19:15:40.649 00:00:00.000 UDP 28.104.0.1:52396 -> 198.28.0.2:53 1 64 1 2025-09-05 19:15:40.658 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52396 1 109 1 2025-09-05 19:15:40.658 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37910 1 80 1 2025-09-05 19:16:41.569 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38016 1 109 1 2025-09-05 19:16:41.569 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43164 1 80 1 2025-09-05 19:16:41.559 00:00:00.000 UDP 28.104.0.1:38016 -> 198.28.0.2:53 1 64 1 2025-09-05 19:16:41.559 00:00:00.000 UDP 28.104.0.1:43164 -> 198.28.0.2:53 1 64 1 2025-09-05 19:13:23.937 00:05:02.347 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-05 19:12:26.075 00:06:00.406 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-09-05 19:12:26.075 00:06:00.268 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-09-05 19:17:41.869 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59351 1 109 1 2025-09-05 19:17:41.869 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47892 1 80 1 2025-09-05 19:17:41.859 00:00:00.000 UDP 28.104.0.1:59351 -> 198.28.0.2:53 1 64 1 2025-09-05 19:17:41.859 00:00:00.000 UDP 28.104.0.1:47892 -> 198.28.0.2:53 1 64 1 2025-09-05 19:14:23.988 00:05:02.289 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-05 19:18:42.187 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49759 1 109 1 2025-09-05 19:18:42.186 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46948 1 80 1 2025-09-05 19:18:42.666 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-05 19:18:42.176 00:00:00.000 UDP 28.104.0.1:49759 -> 198.28.0.2:53 1 64 1 2025-09-05 19:18:42.176 00:00:00.000 UDP 28.104.0.1:46948 -> 198.28.0.2:53 1 64 1 2025-09-05 19:14:37.060 00:05:10.015 OSPF 28.0.2.1:0 -> 224.0.0.5:0 43 3112 1 2025-09-05 19:15:23.941 00:05:02.146 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-05 19:19:42.474 00:00:00.000 UDP 28.104.0.1:41277 -> 198.28.0.2:53 1 64 1 2025-09-05 19:19:42.474 00:00:00.000 UDP 28.104.0.1:44109 -> 198.28.0.2:53 1 64 1 2025-09-05 19:19:42.485 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41277 1 80 1 2025-09-05 19:19:42.484 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44109 1 109 1 2025-09-05 19:16:23.951 00:05:02.126 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-05 19:20:42.733 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55702 1 109 1 2025-09-05 19:20:42.734 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48190 1 80 1 2025-09-05 19:20:42.723 00:00:00.000 UDP 28.104.0.1:55702 -> 198.28.0.2:53 1 64 1 2025-09-05 19:20:42.723 00:00:00.000 UDP 28.104.0.1:48190 -> 198.28.0.2:53 1 64 1 2025-09-05 19:21:43.048 00:00:00.000 UDP 28.104.0.1:37689 -> 198.28.0.2:53 1 64 1 2025-09-05 19:21:43.053 00:00:00.000 UDP 28.104.0.1:56774 -> 198.28.0.2:53 1 64 1 2025-09-05 19:21:43.060 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37689 1 80 1 2025-09-05 19:21:43.065 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56774 1 109 1 2025-09-05 19:22:43.359 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50502 1 80 1 2025-09-05 19:22:43.359 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48663 1 109 1 2025-09-05 19:22:43.349 00:00:00.000 UDP 28.104.0.1:48663 -> 198.28.0.2:53 1 64 1 2025-09-05 19:22:43.349 00:00:00.000 UDP 28.104.0.1:50502 -> 198.28.0.2:53 1 64 1 2025-09-05 19:19:23.942 00:05:02.350 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-05 19:23:43.648 00:00:00.000 UDP 28.104.0.1:43288 -> 198.28.0.2:53 1 64 1 2025-09-05 19:23:43.648 00:00:00.000 UDP 28.104.0.1:54614 -> 198.28.0.2:53 1 64 1 2025-09-05 19:23:42.868 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-05 19:23:43.658 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43288 1 80 1 2025-09-05 19:23:43.658 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54614 1 109 1 2025-09-05 19:19:57.076 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 34 2360 1 2025-09-05 19:19:26.076 00:06:00.004 TCP 28.154.0.1:179 -> 28.157.0.1:37077 13 809 1 2025-09-05 19:19:26.076 00:06:00.004 TCP 28.154.0.1:179 -> 28.155.0.1:36643 13 809 1 2025-09-05 19:20:23.992 00:05:02.288 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-05 19:24:43.989 00:00:00.000 UDP 28.104.0.1:60884 -> 198.28.0.2:53 1 64 1 2025-09-05 19:24:43.989 00:00:00.000 UDP 28.104.0.1:38473 -> 198.28.0.2:53 1 64 1 2025-09-05 19:24:44.001 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60884 1 80 1 2025-09-05 19:24:44.001 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38473 1 109 1 2025-09-05 19:21:23.943 00:05:02.146 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-05 19:25:44.300 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43274 1 80 1 2025-09-05 19:25:44.299 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60449 1 109 1 2025-09-05 19:25:44.289 00:00:00.000 UDP 28.104.0.1:43274 -> 198.28.0.2:53 1 64 1 2025-09-05 19:25:44.289 00:00:00.000 UDP 28.104.0.1:60449 -> 198.28.0.2:53 1 64 1 2025-09-05 19:22:23.954 00:05:02.126 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-05 19:26:44.585 00:00:00.000 UDP 28.104.0.1:47239 -> 198.28.0.2:53 1 64 1 2025-09-05 19:26:44.585 00:00:00.000 UDP 28.104.0.1:40056 -> 198.28.0.2:53 1 64 1 2025-09-05 19:26:44.596 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40056 1 80 1 2025-09-05 19:26:44.595 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47239 1 109 1 2025-09-05 19:27:44.890 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41056 1 109 1 2025-09-05 19:27:44.890 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37115 1 80 1 2025-09-05 19:27:44.880 00:00:00.000 UDP 28.104.0.1:37115 -> 198.28.0.2:53 1 64 1 2025-09-05 19:27:44.880 00:00:00.000 UDP 28.104.0.1:41056 -> 198.28.0.2:53 1 64 1 2025-09-05 19:28:42.979 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-05 19:28:45.150 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44476 1 80 1 2025-09-05 19:28:45.150 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52843 1 109 1 2025-09-05 19:28:45.139 00:00:00.000 UDP 28.104.0.1:44476 -> 198.28.0.2:53 1 64 1 2025-09-05 19:28:45.139 00:00:00.000 UDP 28.104.0.1:52843 -> 198.28.0.2:53 1 64 1 2025-09-05 19:25:23.946 00:05:02.344 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-05 19:25:17.086 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 43 3204 1 2025-09-05 19:29:45.391 00:00:00.000 UDP 28.104.0.1:40228 -> 198.28.0.2:53 1 64 1 2025-09-05 19:29:45.391 00:00:00.000 UDP 28.104.0.1:59054 -> 198.28.0.2:53 1 64 1 2025-09-05 19:29:45.401 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40228 1 80 1 2025-09-05 19:29:45.401 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59054 1 109 1 2025-09-05 19:26:23.995 00:05:02.290 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-05 19:25:26.485 00:06:00.006 TCP 28.154.0.1:179 -> 28.157.0.1:37077 13 790 1 2025-09-05 19:25:26.348 00:06:00.001 TCP 28.154.0.1:179 -> 28.155.0.1:36643 13 790 1 2025-09-05 19:30:45.692 00:00:00.000 UDP 28.104.0.1:49320 -> 198.28.0.2:53 1 64 1 2025-09-05 19:30:45.692 00:00:00.000 UDP 28.104.0.1:50474 -> 198.28.0.2:53 1 64 1 2025-09-05 19:30:45.702 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50474 1 109 1 2025-09-05 19:30:45.702 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49320 1 80 1 2025-09-05 19:27:23.945 00:05:02.145 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-05 19:31:45.992 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35406 1 80 1 2025-09-05 19:31:45.992 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49613 1 109 1 2025-09-05 19:31:45.983 00:00:00.000 UDP 28.104.0.1:49613 -> 198.28.0.2:53 1 64 1 2025-09-05 19:31:45.983 00:00:00.000 UDP 28.104.0.1:35406 -> 198.28.0.2:53 1 64 1 2025-09-05 19:28:23.965 00:05:02.116 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-05 19:32:46.294 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38880 1 80 1 2025-09-05 19:32:46.294 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47369 1 109 1 2025-09-05 19:32:46.284 00:00:00.000 UDP 28.104.0.1:38880 -> 198.28.0.2:53 1 64 1 2025-09-05 19:32:46.284 00:00:00.000 UDP 28.104.0.1:47369 -> 198.28.0.2:53 1 64 1 2025-09-05 19:33:46.588 00:00:00.000 UDP 28.104.0.1:47773 -> 198.28.0.2:53 1 64 1 2025-09-05 19:33:46.588 00:00:00.000 UDP 28.104.0.1:47858 -> 198.28.0.2:53 1 64 1 2025-09-05 19:33:43.202 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-05 19:33:46.598 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47858 1 109 1 2025-09-05 19:33:46.598 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47773 1 80 1 2025-09-05 19:34:46.902 00:00:00.000 UDP 28.104.0.1:58241 -> 198.28.0.2:53 1 64 1 2025-09-05 19:34:46.902 00:00:00.000 UDP 28.104.0.1:47418 -> 198.28.0.2:53 1 64 1 2025-09-05 19:34:46.913 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58241 1 80 1 2025-09-05 19:34:46.913 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47418 1 109 1 2025-09-05 19:30:37.089 00:05:10.009 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2448 1 2025-09-05 19:31:23.948 00:05:02.348 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-05 19:35:47.214 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48232 1 109 1 2025-09-05 19:35:47.215 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58518 1 80 1 2025-09-05 19:35:47.204 00:00:00.000 UDP 28.104.0.1:58518 -> 198.28.0.2:53 1 64 1 2025-09-05 19:35:47.204 00:00:00.000 UDP 28.104.0.1:48232 -> 198.28.0.2:53 1 64 1 2025-09-05 19:32:23.996 00:05:02.289 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-05 19:36:47.522 00:00:00.000 UDP 28.104.0.1:43220 -> 198.28.0.2:53 1 64 1 2025-09-05 19:36:47.520 00:00:00.000 UDP 28.104.0.1:43876 -> 198.28.0.2:53 1 64 1 2025-09-05 19:36:47.531 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43876 1 80 1 2025-09-05 19:36:47.533 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43220 1 109 1 2025-09-05 19:33:23.946 00:05:02.150 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-05 19:32:26.080 00:06:00.412 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-09-05 19:32:26.080 00:06:00.270 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-09-05 19:37:47.834 00:00:00.000 UDP 28.104.0.1:50844 -> 198.28.0.2:53 1 64 1 2025-09-05 19:37:47.834 00:00:00.000 UDP 28.104.0.1:46169 -> 198.28.0.2:53 1 64 1 2025-09-05 19:37:47.845 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50844 1 80 1 2025-09-05 19:37:47.845 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46169 1 109 1 2025-09-05 19:34:23.957 00:05:02.130 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-05 19:38:43.112 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-05 19:38:48.140 00:00:00.000 UDP 28.104.0.1:35580 -> 198.28.0.2:53 1 64 1 2025-09-05 19:38:48.140 00:00:00.000 UDP 28.104.0.1:51150 -> 198.28.0.2:53 1 64 1 2025-09-05 19:38:48.149 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35580 1 80 1 2025-09-05 19:38:48.149 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51150 1 109 1 2025-09-05 19:39:48.443 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41528 1 109 1 2025-09-05 19:39:48.442 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60316 1 80 1 2025-09-05 19:39:48.434 00:00:00.000 UDP 28.104.0.1:41528 -> 198.28.0.2:53 1 64 1 2025-09-05 19:39:48.433 00:00:00.000 UDP 28.104.0.1:60316 -> 198.28.0.2:53 1 64 1 2025-09-05 19:35:57.098 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2504 1 2025-09-05 19:40:48.734 00:00:00.000 UDP 28.104.0.1:42684 -> 198.28.0.2:53 1 64 1 2025-09-05 19:40:48.734 00:00:00.000 UDP 28.104.0.1:55065 -> 198.28.0.2:53 1 64 1 2025-09-05 19:40:48.744 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55065 1 109 1 2025-09-05 19:40:48.744 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42684 1 80 1 2025-09-05 19:37:23.947 00:05:02.354 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-05 19:41:49.053 00:00:00.000 UDP 28.104.0.1:60484 -> 198.28.0.2:53 1 64 1 2025-09-05 19:41:49.053 00:00:00.000 UDP 28.104.0.1:58525 -> 198.28.0.2:53 1 64 1 2025-09-05 19:41:49.063 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60484 1 109 1 2025-09-05 19:41:49.063 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58525 1 80 1 2025-09-05 19:38:23.999 00:05:02.293 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-05 19:42:49.357 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37651 1 80 1 2025-09-05 19:42:49.357 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35912 1 109 1 2025-09-05 19:42:49.346 00:00:00.000 UDP 28.104.0.1:37651 -> 198.28.0.2:53 1 64 1 2025-09-05 19:42:49.346 00:00:00.000 UDP 28.104.0.1:35912 -> 198.28.0.2:53 1 64 1 2025-09-05 19:39:26.088 00:04:00.409 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-09-05 19:39:26.088 00:04:00.265 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-05 19:39:23.947 00:05:02.150 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-05 19:43:43.054 00:00:00.020 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-05 19:43:49.652 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34635 1 109 1 2025-09-05 19:43:49.651 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38488 1 80 1 2025-09-05 19:43:49.640 00:00:00.000 UDP 28.104.0.1:38488 -> 198.28.0.2:53 1 64 1 2025-09-05 19:43:49.640 00:00:00.000 UDP 28.104.0.1:34635 -> 198.28.0.2:53 1 64 1 2025-09-05 19:40:23.958 00:05:02.130 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-05 19:44:49.933 00:00:00.000 UDP 28.104.0.1:59516 -> 198.28.0.2:53 1 64 1 2025-09-05 19:44:49.933 00:00:00.000 UDP 28.104.0.1:48585 -> 198.28.0.2:53 1 64 1 2025-09-05 19:44:49.944 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59516 1 80 1 2025-09-05 19:44:49.944 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48585 1 109 1 2025-09-05 19:41:17.107 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 44 3176 1 2025-09-05 19:45:50.198 00:00:00.000 UDP 28.104.0.1:38983 -> 198.28.0.2:53 1 64 1 2025-09-05 19:45:50.198 00:00:00.000 UDP 28.104.0.1:43090 -> 198.28.0.2:53 1 64 1 2025-09-05 19:45:50.207 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43090 1 80 1 2025-09-05 19:45:50.208 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38983 1 109 1 2025-09-05 19:46:50.460 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44423 1 80 1 2025-09-05 19:46:50.460 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60330 1 109 1 2025-09-05 19:46:50.450 00:00:00.000 UDP 28.104.0.1:44423 -> 198.28.0.2:53 1 64 1 2025-09-05 19:46:50.451 00:00:00.000 UDP 28.104.0.1:60330 -> 198.28.0.2:53 1 64 1 2025-09-05 19:43:23.949 00:05:02.352 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-05 19:47:50.753 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36606 1 80 1 2025-09-05 19:47:50.753 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57363 1 109 1 2025-09-05 19:47:50.743 00:00:00.000 UDP 28.104.0.1:57363 -> 198.28.0.2:53 1 64 1 2025-09-05 19:47:50.743 00:00:00.000 UDP 28.104.0.1:36606 -> 198.28.0.2:53 1 64 1 2025-09-05 19:44:26.088 00:04:00.409 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-09-05 19:44:26.088 00:04:00.266 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-05 19:44:24.002 00:05:02.290 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-05 19:48:43.276 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-05 19:48:51.054 00:00:00.000 UDP 28.104.0.1:54995 -> 198.28.0.2:53 1 64 1 2025-09-05 19:48:51.054 00:00:00.000 UDP 28.104.0.1:52966 -> 198.28.0.2:53 1 64 1 2025-09-05 19:48:51.065 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52966 1 109 1 2025-09-05 19:48:51.065 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54995 1 80 1 2025-09-05 19:45:23.950 00:05:02.148 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-05 19:49:51.341 00:00:00.000 UDP 28.104.0.1:51665 -> 198.28.0.2:53 1 64 1 2025-09-05 19:49:51.341 00:00:00.000 UDP 28.104.0.1:38336 -> 198.28.0.2:53 1 64 1 2025-09-05 19:49:51.352 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38336 1 80 1 2025-09-05 19:49:51.351 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51665 1 109 1 2025-09-05 19:46:23.959 00:05:02.129 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-05 19:50:51.639 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60311 1 109 1 2025-09-05 19:46:37.111 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2424 1 2025-09-05 19:50:51.639 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56827 1 80 1 2025-09-05 19:50:51.628 00:00:00.000 UDP 28.104.0.1:60311 -> 198.28.0.2:53 1 64 1 2025-09-05 19:50:51.628 00:00:00.000 UDP 28.104.0.1:56827 -> 198.28.0.2:53 1 64 1 2025-09-05 19:51:51.932 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34873 1 80 1 2025-09-05 19:51:51.932 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41548 1 109 1 2025-09-05 19:51:51.924 00:00:00.000 UDP 28.104.0.1:34873 -> 198.28.0.2:53 1 64 1 2025-09-05 19:51:51.923 00:00:00.000 UDP 28.104.0.1:41548 -> 198.28.0.2:53 1 64 1 2025-09-05 19:52:52.207 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53741 1 80 1 2025-09-05 19:52:52.206 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58239 1 109 1 2025-09-05 19:52:52.196 00:00:00.000 UDP 28.104.0.1:58239 -> 198.28.0.2:53 1 64 1 2025-09-05 19:52:52.196 00:00:00.000 UDP 28.104.0.1:53741 -> 198.28.0.2:53 1 64 1 2025-09-05 19:49:23.951 00:05:02.352 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-05 19:53:43.779 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-05 19:53:52.487 00:00:00.000 UDP 28.104.0.1:40567 -> 198.28.0.2:53 1 64 1 2025-09-05 19:53:52.487 00:00:00.000 UDP 28.104.0.1:38099 -> 198.28.0.2:53 1 64 1 2025-09-05 19:53:52.498 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40567 1 109 1 2025-09-05 19:53:52.498 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38099 1 80 1 2025-09-05 19:50:24.002 00:05:02.291 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-05 19:49:26.089 00:06:00.417 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-09-05 19:49:26.089 00:06:00.267 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-09-05 19:54:52.788 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36243 1 109 1 2025-09-05 19:54:52.788 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40395 1 80 1 2025-09-05 19:54:52.778 00:00:00.000 UDP 28.104.0.1:40395 -> 198.28.0.2:53 1 64 1 2025-09-05 19:54:52.778 00:00:00.000 UDP 28.104.0.1:36243 -> 198.28.0.2:53 1 64 1 2025-09-05 19:51:23.951 00:05:02.148 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-05 19:55:53.069 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33106 1 109 1 2025-09-05 19:55:53.068 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58052 1 80 1 2025-09-05 19:55:53.057 00:00:00.000 UDP 28.104.0.1:58052 -> 198.28.0.2:53 1 64 1 2025-09-05 19:55:53.058 00:00:00.000 UDP 28.104.0.1:33106 -> 198.28.0.2:53 1 64 1 2025-09-05 19:51:57.117 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2916 1 2025-09-05 19:52:23.962 00:05:02.127 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-05 19:56:53.771 00:00:00.000 UDP 28.104.0.1:53801 -> 198.28.0.2:53 1 64 1 2025-09-05 19:56:53.771 00:00:00.000 UDP 28.104.0.1:59465 -> 198.28.0.2:53 1 64 1 2025-09-05 19:56:53.782 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59465 1 80 1 2025-09-05 19:56:53.782 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53801 1 109 1 2025-09-05 19:57:54.082 00:00:00.000 UDP 28.104.0.1:46546 -> 198.28.0.2:53 1 64 1 2025-09-05 19:57:54.082 00:00:00.000 UDP 28.104.0.1:43314 -> 198.28.0.2:53 1 64 1 2025-09-05 19:57:54.091 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46546 1 80 1 2025-09-05 19:57:54.091 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43314 1 109 1 2025-09-05 19:58:43.372 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 Summary: total flows: 320, total bytes: 95621, total packets: 1410, avg bps: 198, avg pps: 0, avg bpp: 67 Time window: 2025-09-05 18:54:26 - 2025-09-05 19:58:43 Total flows processed: 320, passed: 320, Blocks skipped: 0, Bytes read: 33344 Sys: 0.0032s User: 0.0032s Wall: 0.0030s flows/second: 105816.6 Runtime: 0.0030s