Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-12 08:55:27.016 00:05:04.221 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-12 08:59:33.097 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40620 1 109 1 2025-09-12 08:59:33.097 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49408 1 80 1 2025-09-12 08:59:33.088 00:00:00.000 UDP 28.104.0.1:40620 -> 198.28.0.2:53 1 64 1 2025-09-12 08:59:33.088 00:00:00.000 UDP 28.104.0.1:49408 -> 198.28.0.2:53 1 64 1 2025-09-12 08:56:26.966 00:05:04.046 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-12 09:00:33.395 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51383 1 80 1 2025-09-12 09:00:33.395 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59948 1 109 1 2025-09-12 09:00:33.386 00:00:00.000 UDP 28.104.0.1:51383 -> 198.28.0.2:53 1 64 1 2025-09-12 09:00:33.386 00:00:00.000 UDP 28.104.0.1:59948 -> 198.28.0.2:53 1 64 1 2025-09-12 08:57:26.974 00:05:04.027 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-12 09:01:33.706 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34067 1 109 1 2025-09-12 09:01:33.704 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36100 1 80 1 2025-09-12 09:01:33.694 00:00:00.000 UDP 28.104.0.1:36100 -> 198.28.0.2:53 1 64 1 2025-09-12 09:01:33.694 00:00:00.000 UDP 28.104.0.1:34067 -> 198.28.0.2:53 1 64 1 2025-09-12 09:01:59.806 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-12 08:58:30.995 00:05:00.274 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-09-12 08:58:19.774 00:05:10.125 OSPF 28.0.2.1:0 -> 224.0.0.5:0 43 3140 1 2025-09-12 09:02:33.988 00:00:00.000 UDP 28.104.0.1:44882 -> 198.28.0.2:53 1 64 1 2025-09-12 09:02:33.988 00:00:00.000 UDP 28.104.0.1:54813 -> 198.28.0.2:53 1 64 1 2025-09-12 09:02:34.000 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54813 1 109 1 2025-09-12 09:02:34.000 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44882 1 80 1 2025-09-12 09:03:34.288 00:00:00.000 UDP 28.104.0.1:40710 -> 198.28.0.2:53 1 64 1 2025-09-12 09:03:34.288 00:00:00.000 UDP 28.104.0.1:59906 -> 198.28.0.2:53 1 64 1 2025-09-12 09:03:34.297 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59906 1 109 1 2025-09-12 09:03:34.298 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40710 1 80 1 2025-09-12 09:00:26.966 00:05:04.283 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-12 08:59:31.001 00:06:00.287 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-09-12 09:04:34.581 00:00:00.000 UDP 28.104.0.1:44132 -> 198.28.0.2:53 1 64 1 2025-09-12 09:04:34.581 00:00:00.000 UDP 28.104.0.1:40661 -> 198.28.0.2:53 1 64 1 2025-09-12 09:04:34.591 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40661 1 109 1 2025-09-12 09:04:34.591 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44132 1 80 1 2025-09-12 09:04:31.002 00:01:00.268 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-09-12 09:05:34.941 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51825 1 109 1 2025-09-12 09:05:34.941 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59649 1 80 1 2025-09-12 09:05:34.930 00:00:00.000 UDP 28.104.0.1:59649 -> 198.28.0.2:53 1 64 1 2025-09-12 09:01:27.017 00:05:04.222 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-12 09:05:34.930 00:00:00.000 UDP 28.104.0.1:51825 -> 198.28.0.2:53 1 64 1 2025-09-12 09:02:26.965 00:05:04.047 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-12 09:06:35.199 00:00:00.000 UDP 28.104.0.1:39313 -> 198.28.0.2:53 1 64 1 2025-09-12 09:06:35.199 00:00:00.000 UDP 28.104.0.1:56451 -> 198.28.0.2:53 1 64 1 2025-09-12 09:06:35.209 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39313 1 109 1 2025-09-12 09:06:35.209 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56451 1 80 1 2025-09-12 09:06:59.959 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-12 09:03:26.977 00:05:04.027 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-12 09:07:35.499 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39712 1 80 1 2025-09-12 09:07:35.499 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59293 1 109 1 2025-09-12 09:07:35.490 00:00:00.000 UDP 28.104.0.1:59293 -> 198.28.0.2:53 1 64 1 2025-09-12 09:07:35.490 00:00:00.000 UDP 28.104.0.1:39712 -> 198.28.0.2:53 1 64 1 2025-09-12 09:03:39.778 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 34 2320 1 2025-09-12 09:08:35.780 00:00:00.000 UDP 28.104.0.1:45266 -> 198.28.0.2:53 1 64 1 2025-09-12 09:08:35.780 00:00:00.000 UDP 28.104.0.1:40920 -> 198.28.0.2:53 1 64 1 2025-09-12 09:08:35.792 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40920 1 80 1 2025-09-12 09:08:35.793 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45266 1 109 1 2025-09-12 09:09:36.109 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51940 1 80 1 2025-09-12 09:09:36.109 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45454 1 109 1 2025-09-12 09:09:36.098 00:00:00.000 UDP 28.104.0.1:51940 -> 198.28.0.2:53 1 64 1 2025-09-12 09:09:36.098 00:00:00.000 UDP 28.104.0.1:45454 -> 198.28.0.2:53 1 64 1 2025-09-12 09:06:26.968 00:05:04.281 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-12 09:10:36.401 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57974 1 109 1 2025-09-12 09:10:36.402 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42584 1 80 1 2025-09-12 09:10:36.391 00:00:00.000 UDP 28.104.0.1:57974 -> 198.28.0.2:53 1 64 1 2025-09-12 09:10:36.391 00:00:00.000 UDP 28.104.0.1:42584 -> 198.28.0.2:53 1 64 1 2025-09-12 09:07:27.019 00:05:04.220 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-12 09:06:31.002 00:06:00.292 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-09-12 09:06:31.002 00:06:00.270 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-09-12 09:11:36.696 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39562 1 109 1 2025-09-12 09:11:36.696 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51031 1 80 1 2025-09-12 09:11:36.687 00:00:00.000 UDP 28.104.0.1:39562 -> 198.28.0.2:53 1 64 1 2025-09-12 09:11:36.687 00:00:00.000 UDP 28.104.0.1:51031 -> 198.28.0.2:53 1 64 1 2025-09-12 09:11:59.871 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-12 09:08:26.968 00:05:04.045 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-12 09:12:36.995 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42107 1 109 1 2025-09-12 09:12:36.996 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54162 1 80 1 2025-09-12 09:12:36.985 00:00:00.000 UDP 28.104.0.1:54162 -> 198.28.0.2:53 1 64 1 2025-09-12 09:12:36.985 00:00:00.000 UDP 28.104.0.1:42107 -> 198.28.0.2:53 1 64 1 2025-09-12 09:08:59.784 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2796 1 2025-09-12 09:09:26.980 00:05:04.026 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-12 09:13:37.293 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50079 1 80 1 2025-09-12 09:13:37.293 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46630 1 109 1 2025-09-12 09:13:37.283 00:00:00.000 UDP 28.104.0.1:46630 -> 198.28.0.2:53 1 64 1 2025-09-12 09:13:37.283 00:00:00.000 UDP 28.104.0.1:50079 -> 198.28.0.2:53 1 64 1 2025-09-12 09:14:37.591 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37747 1 80 1 2025-09-12 09:14:37.591 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34293 1 109 1 2025-09-12 09:14:37.579 00:00:00.000 UDP 28.104.0.1:37747 -> 198.28.0.2:53 1 64 1 2025-09-12 09:14:37.579 00:00:00.000 UDP 28.104.0.1:34293 -> 198.28.0.2:53 1 64 1 2025-09-12 09:15:37.842 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37550 1 109 1 2025-09-12 09:15:37.841 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39787 1 80 1 2025-09-12 09:15:37.832 00:00:00.000 UDP 28.104.0.1:39787 -> 198.28.0.2:53 1 64 1 2025-09-12 09:15:37.832 00:00:00.000 UDP 28.104.0.1:37550 -> 198.28.0.2:53 1 64 1 2025-09-12 09:12:26.969 00:05:04.281 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-12 09:16:38.128 00:00:00.000 UDP 28.104.0.1:55687 -> 198.28.0.2:53 1 64 1 2025-09-12 09:16:38.128 00:00:00.000 UDP 28.104.0.1:40861 -> 198.28.0.2:53 1 64 1 2025-09-12 09:16:38.139 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55687 1 109 1 2025-09-12 09:16:38.140 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40861 1 80 1 2025-09-12 09:17:00.300 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-12 09:13:27.020 00:05:04.221 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-12 09:17:38.433 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54477 1 80 1 2025-09-12 09:17:38.433 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38656 1 109 1 2025-09-12 09:17:38.423 00:00:00.000 UDP 28.104.0.1:38656 -> 198.28.0.2:53 1 64 1 2025-09-12 09:17:38.423 00:00:00.000 UDP 28.104.0.1:54477 -> 198.28.0.2:53 1 64 1 2025-09-12 09:14:19.788 00:05:00.373 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2456 1 2025-09-12 09:14:26.969 00:05:04.050 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-12 09:13:31.004 00:06:00.005 TCP 28.154.0.1:179 -> 28.157.0.1:37077 13 809 1 2025-09-12 09:13:31.004 00:06:00.005 TCP 28.154.0.1:179 -> 28.155.0.1:36643 13 809 1 2025-09-12 09:18:38.718 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38173 1 109 1 2025-09-12 09:18:38.718 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43748 1 80 1 2025-09-12 09:18:38.708 00:00:00.000 UDP 28.104.0.1:38173 -> 198.28.0.2:53 1 64 1 2025-09-12 09:18:38.708 00:00:00.000 UDP 28.104.0.1:43748 -> 198.28.0.2:53 1 64 1 2025-09-12 09:15:26.981 00:05:04.028 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-12 09:19:39.017 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58923 1 80 1 2025-09-12 09:19:39.015 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43929 1 109 1 2025-09-12 09:19:39.006 00:00:00.000 UDP 28.104.0.1:58923 -> 198.28.0.2:53 1 64 1 2025-09-12 09:19:39.006 00:00:00.000 UDP 28.104.0.1:43929 -> 198.28.0.2:53 1 64 1 2025-09-12 09:20:39.317 00:00:00.000 UDP 28.104.0.1:56387 -> 198.28.0.2:53 1 64 1 2025-09-12 09:20:39.317 00:00:00.000 UDP 28.104.0.1:36184 -> 198.28.0.2:53 1 64 1 2025-09-12 09:20:39.328 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36184 1 80 1 2025-09-12 09:20:39.327 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56387 1 109 1 2025-09-12 09:21:39.608 00:00:00.000 UDP 28.104.0.1:57189 -> 198.28.0.2:53 1 64 1 2025-09-12 09:21:39.608 00:00:00.000 UDP 28.104.0.1:50132 -> 198.28.0.2:53 1 64 1 2025-09-12 09:21:39.618 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57189 1 109 1 2025-09-12 09:21:39.619 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50132 1 80 1 2025-09-12 09:22:00.147 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-12 09:18:26.972 00:05:04.280 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-12 09:22:39.919 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49437 1 80 1 2025-09-12 09:22:39.919 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35519 1 109 1 2025-09-12 09:22:39.908 00:00:00.000 UDP 28.104.0.1:35519 -> 198.28.0.2:53 1 64 1 2025-09-12 09:22:39.908 00:00:00.000 UDP 28.104.0.1:49437 -> 198.28.0.2:53 1 64 1 2025-09-12 09:19:27.024 00:05:04.218 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-12 09:19:29.796 00:05:10.044 OSPF 28.0.2.1:0 -> 224.0.0.5:0 42 2916 1 2025-09-12 09:23:40.217 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36843 1 80 1 2025-09-12 09:23:40.217 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46047 1 109 1 2025-09-12 09:23:40.207 00:00:00.000 UDP 28.104.0.1:46047 -> 198.28.0.2:53 1 64 1 2025-09-12 09:23:40.207 00:00:00.000 UDP 28.104.0.1:36843 -> 198.28.0.2:53 1 64 1 2025-09-12 09:19:31.296 00:06:00.020 TCP 28.154.0.1:179 -> 28.157.0.1:37077 13 790 1 2025-09-12 09:19:31.274 00:06:00.002 TCP 28.154.0.1:179 -> 28.155.0.1:36643 13 790 1 2025-09-12 09:20:26.973 00:05:04.047 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-12 09:24:40.510 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54966 1 109 1 2025-09-12 09:24:40.510 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33866 1 80 1 2025-09-12 09:24:40.500 00:00:00.000 UDP 28.104.0.1:54966 -> 198.28.0.2:53 1 64 1 2025-09-12 09:24:40.500 00:00:00.000 UDP 28.104.0.1:33866 -> 198.28.0.2:53 1 64 1 2025-09-12 09:21:26.983 00:05:04.038 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-12 09:25:40.803 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46296 1 109 1 2025-09-12 09:25:40.803 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49570 1 80 1 2025-09-12 09:25:40.793 00:00:00.000 UDP 28.104.0.1:46296 -> 198.28.0.2:53 1 64 1 2025-09-12 09:25:40.793 00:00:00.000 UDP 28.104.0.1:49570 -> 198.28.0.2:53 1 64 1 2025-09-12 09:26:41.115 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46554 1 80 1 2025-09-12 09:26:41.115 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53273 1 109 1 2025-09-12 09:26:41.105 00:00:00.000 UDP 28.104.0.1:53273 -> 198.28.0.2:53 1 64 1 2025-09-12 09:26:41.105 00:00:00.000 UDP 28.104.0.1:46554 -> 198.28.0.2:53 1 64 1 2025-09-12 09:27:00.466 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-12 09:27:41.407 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50793 1 109 1 2025-09-12 09:27:41.406 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60408 1 80 1 2025-09-12 09:27:41.396 00:00:00.000 UDP 28.104.0.1:50793 -> 198.28.0.2:53 1 64 1 2025-09-12 09:27:41.395 00:00:00.000 UDP 28.104.0.1:60408 -> 198.28.0.2:53 1 64 1 2025-09-12 09:24:26.976 00:05:04.277 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-12 09:28:41.694 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49330 1 80 1 2025-09-12 09:28:41.695 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35113 1 109 1 2025-09-12 09:28:41.683 00:00:00.000 UDP 28.104.0.1:49330 -> 198.28.0.2:53 1 64 1 2025-09-12 09:28:41.683 00:00:00.000 UDP 28.104.0.1:35113 -> 198.28.0.2:53 1 64 1 2025-09-12 09:24:49.798 00:05:10.009 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2848 1 2025-09-12 09:25:27.027 00:05:04.217 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-12 09:29:41.996 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54817 1 80 1 2025-09-12 09:29:41.995 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56923 1 109 1 2025-09-12 09:29:41.986 00:00:00.000 UDP 28.104.0.1:54817 -> 198.28.0.2:53 1 64 1 2025-09-12 09:29:41.986 00:00:00.000 UDP 28.104.0.1:56923 -> 198.28.0.2:53 1 64 1 2025-09-12 09:26:26.975 00:05:04.077 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-12 09:30:42.290 00:00:00.000 UDP 28.104.0.1:33993 -> 198.28.0.2:53 1 64 1 2025-09-12 09:30:42.289 00:00:00.000 UDP 28.104.0.1:38292 -> 198.28.0.2:53 1 64 1 2025-09-12 09:30:42.300 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38292 1 80 1 2025-09-12 09:30:42.300 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33993 1 109 1 2025-09-12 09:26:31.022 00:06:00.306 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-09-12 09:27:26.987 00:05:04.057 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-12 09:26:31.022 00:06:00.256 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-09-12 09:31:42.596 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44375 1 80 1 2025-09-12 09:31:42.597 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38031 1 109 1 2025-09-12 09:31:42.587 00:00:00.000 UDP 28.104.0.1:44375 -> 198.28.0.2:53 1 64 1 2025-09-12 09:31:42.588 00:00:00.000 UDP 28.104.0.1:38031 -> 198.28.0.2:53 1 64 1 2025-09-12 09:32:00.463 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-12 09:32:42.851 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37632 1 80 1 2025-09-12 09:32:42.851 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45494 1 109 1 2025-09-12 09:32:42.840 00:00:00.000 UDP 28.104.0.1:37632 -> 198.28.0.2:53 1 64 1 2025-09-12 09:32:42.840 00:00:00.000 UDP 28.104.0.1:45494 -> 198.28.0.2:53 1 64 1 2025-09-12 09:33:43.143 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49277 1 80 1 2025-09-12 09:33:43.143 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38453 1 109 1 2025-09-12 09:33:43.133 00:00:00.000 UDP 28.104.0.1:38453 -> 198.28.0.2:53 1 64 1 2025-09-12 09:33:43.133 00:00:00.000 UDP 28.104.0.1:49277 -> 198.28.0.2:53 1 64 1 2025-09-12 09:30:09.808 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2504 1 2025-09-12 09:30:26.977 00:05:04.282 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-12 09:34:43.540 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52691 1 109 1 2025-09-12 09:34:43.540 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59717 1 80 1 2025-09-12 09:34:43.531 00:00:00.000 UDP 28.104.0.1:59717 -> 198.28.0.2:53 1 64 1 2025-09-12 09:34:43.530 00:00:00.000 UDP 28.104.0.1:52691 -> 198.28.0.2:53 1 64 1 2025-09-12 09:31:27.027 00:05:04.221 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-12 09:35:43.829 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35302 1 80 1 2025-09-12 09:35:43.829 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49317 1 109 1 2025-09-12 09:35:43.820 00:00:00.000 UDP 28.104.0.1:49317 -> 198.28.0.2:53 1 64 1 2025-09-12 09:35:43.820 00:00:00.000 UDP 28.104.0.1:35302 -> 198.28.0.2:53 1 64 1 2025-09-12 09:32:26.978 00:05:04.081 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-12 09:36:44.124 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40089 1 109 1 2025-09-12 09:36:44.124 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56972 1 80 1 2025-09-12 09:36:44.113 00:00:00.000 UDP 28.104.0.1:40089 -> 198.28.0.2:53 1 64 1 2025-09-12 09:36:44.113 00:00:00.000 UDP 28.104.0.1:56972 -> 198.28.0.2:53 1 64 1 2025-09-12 09:37:00.259 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-12 09:33:31.044 00:04:00.285 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-09-12 09:33:31.044 00:04:00.235 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-12 09:33:26.989 00:05:04.057 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-12 09:37:44.714 00:00:00.000 UDP 28.104.0.1:58735 -> 198.28.0.2:53 1 64 1 2025-09-12 09:37:44.714 00:00:00.000 UDP 28.104.0.1:60870 -> 198.28.0.2:53 1 64 1 2025-09-12 09:37:44.725 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60870 1 80 1 2025-09-12 09:37:44.725 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58735 1 109 1 2025-09-12 09:38:44.984 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37104 1 109 1 2025-09-12 09:38:44.986 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38112 1 80 1 2025-09-12 09:38:44.974 00:00:00.000 UDP 28.104.0.1:38112 -> 198.28.0.2:53 1 64 1 2025-09-12 09:38:44.974 00:00:00.000 UDP 28.104.0.1:37104 -> 198.28.0.2:53 1 64 1 2025-09-12 09:35:29.815 00:05:10.012 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2796 1 2025-09-12 09:39:45.287 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54620 1 109 1 2025-09-12 09:39:45.287 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47862 1 80 1 2025-09-12 09:39:45.277 00:00:00.000 UDP 28.104.0.1:54620 -> 198.28.0.2:53 1 64 1 2025-09-12 09:39:45.277 00:00:00.000 UDP 28.104.0.1:47862 -> 198.28.0.2:53 1 64 1 2025-09-12 09:36:26.980 00:05:04.281 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-12 09:40:45.575 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41735 1 80 1 2025-09-12 09:40:45.575 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42784 1 109 1 2025-09-12 09:40:45.565 00:00:00.000 UDP 28.104.0.1:42784 -> 198.28.0.2:53 1 64 1 2025-09-12 09:40:45.565 00:00:00.000 UDP 28.104.0.1:41735 -> 198.28.0.2:53 1 64 1 2025-09-12 09:37:27.031 00:05:04.220 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-12 09:41:45.825 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50083 1 109 1 2025-09-12 09:41:45.825 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42802 1 80 1 2025-09-12 09:41:45.816 00:00:00.000 UDP 28.104.0.1:50083 -> 198.28.0.2:53 1 64 1 2025-09-12 09:41:45.816 00:00:00.000 UDP 28.104.0.1:42802 -> 198.28.0.2:53 1 64 1 2025-09-12 09:42:00.638 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-12 09:38:26.980 00:05:04.077 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-12 09:38:31.046 00:04:00.284 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-09-12 09:38:31.046 00:04:00.234 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-12 09:42:46.114 00:00:00.000 UDP 28.104.0.1:56223 -> 198.28.0.2:53 1 64 1 2025-09-12 09:42:46.114 00:00:00.000 UDP 28.104.0.1:46730 -> 198.28.0.2:53 1 64 1 2025-09-12 09:42:46.124 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46730 1 80 1 2025-09-12 09:42:46.124 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56223 1 109 1 2025-09-12 09:39:26.991 00:05:04.057 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-12 09:43:46.416 00:00:00.000 UDP 28.104.0.1:39605 -> 198.28.0.2:53 1 64 1 2025-09-12 09:43:46.416 00:00:00.000 UDP 28.104.0.1:48527 -> 198.28.0.2:53 1 64 1 2025-09-12 09:43:46.425 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48527 1 80 1 2025-09-12 09:43:46.425 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39605 1 109 1 2025-09-12 09:44:46.677 00:00:00.000 UDP 28.104.0.1:33086 -> 198.28.0.2:53 1 64 1 2025-09-12 09:44:46.677 00:00:00.000 UDP 28.104.0.1:32919 -> 198.28.0.2:53 1 64 1 2025-09-12 09:44:46.687 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33086 1 109 1 2025-09-12 09:44:46.687 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32919 1 80 1 2025-09-12 09:40:49.828 00:05:10.010 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2548 1 2025-09-12 09:45:46.934 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40774 1 109 1 2025-09-12 09:45:46.934 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33383 1 80 1 2025-09-12 09:45:46.923 00:00:00.000 UDP 28.104.0.1:33383 -> 198.28.0.2:53 1 64 1 2025-09-12 09:45:46.923 00:00:00.000 UDP 28.104.0.1:40774 -> 198.28.0.2:53 1 64 1 2025-09-12 09:42:26.982 00:05:04.280 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-12 09:46:47.258 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52885 1 80 1 2025-09-12 09:46:47.258 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37067 1 109 1 2025-09-12 09:46:47.249 00:00:00.000 UDP 28.104.0.1:37067 -> 198.28.0.2:53 1 64 1 2025-09-12 09:46:47.249 00:00:00.000 UDP 28.104.0.1:52885 -> 198.28.0.2:53 1 64 1 2025-09-12 09:47:00.781 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-12 09:43:31.047 00:04:00.283 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-09-12 09:43:31.047 00:04:00.232 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-12 09:43:27.032 00:05:04.219 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-12 09:47:47.550 00:00:00.000 UDP 28.104.0.1:40070 -> 198.28.0.2:53 1 64 1 2025-09-12 09:47:47.550 00:00:00.000 UDP 28.104.0.1:36937 -> 198.28.0.2:53 1 64 1 2025-09-12 09:47:47.560 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40070 1 109 1 2025-09-12 09:47:47.562 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36937 1 80 1 2025-09-12 09:44:26.981 00:05:04.081 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-12 09:48:47.852 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57681 1 80 1 2025-09-12 09:48:47.853 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41724 1 109 1 2025-09-12 09:48:47.843 00:00:00.000 UDP 28.104.0.1:57681 -> 198.28.0.2:53 1 64 1 2025-09-12 09:48:47.843 00:00:00.000 UDP 28.104.0.1:41724 -> 198.28.0.2:53 1 64 1 2025-09-12 09:45:26.993 00:05:04.061 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-12 09:49:48.225 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43522 1 80 1 2025-09-12 09:49:48.225 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38828 1 109 1 2025-09-12 09:49:48.214 00:00:00.000 UDP 28.104.0.1:43522 -> 198.28.0.2:53 1 64 1 2025-09-12 09:49:48.214 00:00:00.000 UDP 28.104.0.1:38828 -> 198.28.0.2:53 1 64 1 2025-09-12 09:46:09.838 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2648 1 2025-09-12 09:50:48.544 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55788 1 109 1 2025-09-12 09:50:48.544 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37002 1 80 1 2025-09-12 09:50:48.534 00:00:00.000 UDP 28.104.0.1:37002 -> 198.28.0.2:53 1 64 1 2025-09-12 09:50:48.535 00:00:00.000 UDP 28.104.0.1:55788 -> 198.28.0.2:53 1 64 1 2025-09-12 09:51:48.834 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34724 1 80 1 2025-09-12 09:51:48.834 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50131 1 109 1 2025-09-12 09:51:48.824 00:00:00.000 UDP 28.104.0.1:34724 -> 198.28.0.2:53 1 64 1 2025-09-12 09:51:48.824 00:00:00.000 UDP 28.104.0.1:50131 -> 198.28.0.2:53 1 64 1 2025-09-12 09:52:00.937 00:00:00.030 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-12 09:48:26.981 00:05:04.283 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-12 09:52:49.092 00:00:00.000 UDP 28.104.0.1:42066 -> 198.28.0.2:53 1 64 1 2025-09-12 09:52:49.092 00:00:00.000 UDP 28.104.0.1:49273 -> 198.28.0.2:53 1 64 1 2025-09-12 09:52:49.104 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42066 1 80 1 2025-09-12 09:52:49.103 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49273 1 109 1 2025-09-12 09:49:27.033 00:05:04.221 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-12 09:48:31.053 00:06:00.279 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-09-12 09:48:31.053 00:06:00.228 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-09-12 09:53:49.399 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43435 1 109 1 2025-09-12 09:53:49.399 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44738 1 80 1 2025-09-12 09:53:49.388 00:00:00.000 UDP 28.104.0.1:43435 -> 198.28.0.2:53 1 64 1 2025-09-12 09:53:49.388 00:00:00.000 UDP 28.104.0.1:44738 -> 198.28.0.2:53 1 64 1 2025-09-12 09:50:26.983 00:05:04.082 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-12 09:54:49.686 00:00:00.000 UDP 28.104.0.1:40952 -> 198.28.0.2:53 1 64 1 2025-09-12 09:54:49.686 00:00:00.000 UDP 28.104.0.1:57737 -> 198.28.0.2:53 1 64 1 2025-09-12 09:54:49.696 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40952 1 109 1 2025-09-12 09:54:49.697 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57737 1 80 1 2025-09-12 09:51:26.994 00:05:04.062 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-12 09:51:29.846 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 43 3080 1 2025-09-12 09:55:49.986 00:00:00.000 UDP 28.104.0.1:54377 -> 198.28.0.2:53 1 64 1 2025-09-12 09:55:49.986 00:00:00.000 UDP 28.104.0.1:46016 -> 198.28.0.2:53 1 64 1 2025-09-12 09:55:49.995 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54377 1 109 1 2025-09-12 09:55:49.995 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46016 1 80 1 2025-09-12 09:56:50.309 00:00:00.000 UDP 28.104.0.1:44395 -> 198.28.0.2:53 1 64 1 2025-09-12 09:56:50.309 00:00:00.000 UDP 28.104.0.1:35224 -> 198.28.0.2:53 1 64 1 2025-09-12 09:56:50.319 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35224 1 80 1 2025-09-12 09:56:50.320 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44395 1 109 1 2025-09-12 09:57:00.916 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-12 09:57:50.648 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55573 1 80 1 2025-09-12 09:57:50.648 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60583 1 109 1 2025-09-12 09:57:50.638 00:00:00.000 UDP 28.104.0.1:60583 -> 198.28.0.2:53 1 64 1 2025-09-12 09:57:50.638 00:00:00.000 UDP 28.104.0.1:55573 -> 198.28.0.2:53 1 64 1 2025-09-12 09:54:26.984 00:05:04.280 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-12 09:58:50.929 00:00:00.000 UDP 28.104.0.1:48690 -> 198.28.0.2:53 1 64 1 2025-09-12 09:58:50.929 00:00:00.000 UDP 28.104.0.1:54428 -> 198.28.0.2:53 1 64 1 2025-09-12 09:58:50.939 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54428 1 80 1 2025-09-12 09:58:50.939 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48690 1 109 1 Summary: total flows: 322, total bytes: 95515, total packets: 1405, avg bps: 198, avg pps: 0, avg bpp: 67 Time window: 2025-09-12 08:55:27 - 2025-09-12 09:59:31 Total flows processed: 322, passed: 322, Blocks skipped: 0, Bytes read: 33552 Sys: 0.0031s User: 0.0031s Wall: 0.0051s flows/second: 62621.9 Runtime: 0.0052s