Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-12 11:55:27.097 00:05:04.266 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-12 11:59:30.270 00:00:00.000 UDP 28.104.0.1:49607 -> 198.28.0.2:53 1 64 1 2025-09-12 11:59:30.270 00:00:00.000 UDP 28.104.0.1:56342 -> 198.28.0.2:53 1 64 1 2025-09-12 11:59:30.281 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56342 1 80 1 2025-09-12 11:59:30.281 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49607 1 109 1 2025-09-12 11:56:27.047 00:05:04.108 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-12 12:00:30.578 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50011 1 80 1 2025-09-12 12:00:30.578 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48121 1 109 1 2025-09-12 12:00:30.568 00:00:00.000 UDP 28.104.0.1:50011 -> 198.28.0.2:53 1 64 1 2025-09-12 11:56:31.129 00:04:00.271 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-09-12 11:56:31.129 00:04:00.230 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-12 12:00:30.568 00:00:00.000 UDP 28.104.0.1:48121 -> 198.28.0.2:53 1 64 1 2025-09-12 12:01:30.861 00:00:00.000 UDP 28.104.0.1:50708 -> 198.28.0.2:53 1 64 1 2025-09-12 11:57:27.057 00:05:04.087 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-12 12:01:30.861 00:00:00.000 UDP 28.104.0.1:39769 -> 198.28.0.2:53 1 64 1 2025-09-12 12:01:30.871 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39769 1 80 1 2025-09-12 12:01:30.872 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50708 1 109 1 2025-09-12 12:02:03.399 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-12 12:02:31.196 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46031 1 80 1 2025-09-12 12:02:31.196 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33578 1 109 1 2025-09-12 12:02:31.185 00:00:00.000 UDP 28.104.0.1:33578 -> 198.28.0.2:53 1 64 1 2025-09-12 12:02:31.185 00:00:00.000 UDP 28.104.0.1:46031 -> 198.28.0.2:53 1 64 1 2025-09-12 11:58:40.055 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2796 1 2025-09-12 12:03:31.657 00:00:00.000 UDP 28.104.0.1:47149 -> 198.28.0.2:53 1 64 1 2025-09-12 12:03:31.657 00:00:00.000 UDP 28.104.0.1:34254 -> 198.28.0.2:53 1 64 1 2025-09-12 12:03:31.667 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47149 1 80 1 2025-09-12 12:03:31.667 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34254 1 109 1 2025-09-12 12:04:31.959 00:00:00.000 UDP 28.104.0.1:38143 -> 198.28.0.2:53 1 64 1 2025-09-12 12:04:31.959 00:00:00.000 UDP 28.104.0.1:56849 -> 198.28.0.2:53 1 64 1 2025-09-12 12:00:27.059 00:05:04.317 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-12 12:04:31.971 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38143 1 109 1 2025-09-12 12:04:31.970 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56849 1 80 1 2025-09-12 12:01:31.146 00:04:00.258 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-09-12 12:01:31.146 00:04:00.215 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-12 12:05:32.231 00:00:00.000 UDP 28.104.0.1:52884 -> 198.28.0.2:53 1 64 1 2025-09-12 12:01:27.109 00:05:04.257 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-12 12:05:32.231 00:00:00.000 UDP 28.104.0.1:47447 -> 198.28.0.2:53 1 64 1 2025-09-12 12:05:32.242 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47447 1 109 1 2025-09-12 12:05:32.242 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52884 1 80 1 2025-09-12 12:02:27.059 00:05:04.099 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-12 12:06:32.521 00:00:00.000 UDP 28.104.0.1:35730 -> 198.28.0.2:53 1 64 1 2025-09-12 12:06:32.521 00:00:00.000 UDP 28.104.0.1:37521 -> 198.28.0.2:53 1 64 1 2025-09-12 12:06:32.533 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35730 1 80 1 2025-09-12 12:06:32.534 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37521 1 109 1 2025-09-12 12:07:03.722 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-12 12:03:27.069 00:05:04.078 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-12 12:07:32.843 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43166 1 80 1 2025-09-12 12:07:32.843 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50444 1 109 1 2025-09-12 12:07:32.834 00:00:00.000 UDP 28.104.0.1:50444 -> 198.28.0.2:53 1 64 1 2025-09-12 12:07:32.834 00:00:00.000 UDP 28.104.0.1:43166 -> 198.28.0.2:53 1 64 1 2025-09-12 12:04:00.062 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2592 1 2025-09-12 12:08:33.135 00:00:00.000 UDP 28.104.0.1:56601 -> 198.28.0.2:53 1 64 1 2025-09-12 12:08:33.135 00:00:00.000 UDP 28.104.0.1:45523 -> 198.28.0.2:53 1 64 1 2025-09-12 12:08:33.145 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45523 1 80 1 2025-09-12 12:08:33.145 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56601 1 109 1 2025-09-12 12:09:33.445 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36525 1 80 1 2025-09-12 12:09:33.445 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57257 1 109 1 2025-09-12 12:09:33.435 00:00:00.000 UDP 28.104.0.1:36525 -> 198.28.0.2:53 1 64 1 2025-09-12 12:09:33.434 00:00:00.000 UDP 28.104.0.1:57257 -> 198.28.0.2:53 1 64 1 2025-09-12 12:06:31.148 00:04:00.260 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-09-12 12:06:31.148 00:04:00.214 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-12 12:10:33.726 00:00:00.000 UDP 28.104.0.1:38182 -> 198.28.0.2:53 1 64 1 2025-09-12 12:10:33.726 00:00:00.000 UDP 28.104.0.1:42784 -> 198.28.0.2:53 1 64 1 2025-09-12 12:06:27.065 00:05:04.311 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-12 12:10:33.736 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42784 1 80 1 2025-09-12 12:10:33.736 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38182 1 109 1 2025-09-12 12:07:27.116 00:05:04.250 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-12 12:11:34.042 00:00:00.000 UDP 28.104.0.1:36172 -> 198.28.0.2:53 1 64 1 2025-09-12 12:11:34.042 00:00:00.000 UDP 28.104.0.1:46192 -> 198.28.0.2:53 1 64 1 2025-09-12 12:11:34.052 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36172 1 80 1 2025-09-12 12:11:34.052 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46192 1 109 1 2025-09-12 12:12:03.727 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-12 12:08:27.065 00:05:04.094 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-12 12:12:34.337 00:00:00.000 UDP 28.104.0.1:48470 -> 198.28.0.2:53 1 64 1 2025-09-12 12:12:34.337 00:00:00.000 UDP 28.104.0.1:57467 -> 198.28.0.2:53 1 64 1 2025-09-12 12:12:34.348 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57467 1 109 1 2025-09-12 12:12:34.348 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48470 1 80 1 2025-09-12 12:09:20.064 00:05:10.012 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2648 1 2025-09-12 12:09:27.076 00:05:04.075 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-12 12:13:34.597 00:00:00.000 UDP 28.104.0.1:40867 -> 198.28.0.2:53 1 64 1 2025-09-12 12:13:34.596 00:00:00.000 UDP 28.104.0.1:57584 -> 198.28.0.2:53 1 64 1 2025-09-12 12:13:34.607 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40867 1 109 1 2025-09-12 12:13:34.606 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57584 1 80 1 2025-09-12 12:14:34.906 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44886 1 80 1 2025-09-12 12:14:34.904 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57391 1 109 1 2025-09-12 12:14:34.894 00:00:00.000 UDP 28.104.0.1:44886 -> 198.28.0.2:53 1 64 1 2025-09-12 12:14:34.894 00:00:00.000 UDP 28.104.0.1:57391 -> 198.28.0.2:53 1 64 1 2025-09-12 12:15:35.177 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57604 1 80 1 2025-09-12 12:15:35.176 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43289 1 109 1 2025-09-12 12:15:35.166 00:00:00.000 UDP 28.104.0.1:43289 -> 198.28.0.2:53 1 64 1 2025-09-12 12:15:35.167 00:00:00.000 UDP 28.104.0.1:57604 -> 198.28.0.2:53 1 64 1 2025-09-12 12:12:27.067 00:05:04.313 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-12 12:11:31.147 00:06:00.264 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-09-12 12:11:31.147 00:06:00.220 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-09-12 12:16:35.473 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54964 1 80 1 2025-09-12 12:16:35.472 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56926 1 109 1 2025-09-12 12:16:35.462 00:00:00.000 UDP 28.104.0.1:56926 -> 198.28.0.2:53 1 64 1 2025-09-12 12:16:35.462 00:00:00.000 UDP 28.104.0.1:54964 -> 198.28.0.2:53 1 64 1 2025-09-12 12:17:03.853 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-12 12:13:27.117 00:05:04.254 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-12 12:17:35.779 00:00:00.000 UDP 28.104.0.1:42101 -> 198.28.0.2:53 1 64 1 2025-09-12 12:17:35.778 00:00:00.000 UDP 28.104.0.1:48667 -> 198.28.0.2:53 1 64 1 2025-09-12 12:17:35.790 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42101 1 80 1 2025-09-12 12:17:35.789 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48667 1 109 1 2025-09-12 12:14:27.066 00:05:04.095 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-12 12:18:36.077 00:00:00.000 UDP 28.104.0.1:57472 -> 198.28.0.2:53 1 64 1 2025-09-12 12:18:36.077 00:00:00.000 UDP 28.104.0.1:37773 -> 198.28.0.2:53 1 64 1 2025-09-12 12:18:36.088 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57472 1 80 1 2025-09-12 12:18:36.088 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37773 1 109 1 2025-09-12 12:14:40.076 00:05:10.861 OSPF 28.0.2.1:0 -> 224.0.0.5:0 45 3188 1 2025-09-12 12:15:27.077 00:05:04.075 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-12 12:19:36.383 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42041 1 80 1 2025-09-12 12:19:36.383 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36598 1 109 1 2025-09-12 12:19:36.373 00:00:00.000 UDP 28.104.0.1:42041 -> 198.28.0.2:53 1 64 1 2025-09-12 12:19:36.373 00:00:00.000 UDP 28.104.0.1:36598 -> 198.28.0.2:53 1 64 1 2025-09-12 12:20:36.627 00:00:00.000 UDP 28.104.0.1:34582 -> 198.28.0.2:53 1 64 1 2025-09-12 12:20:36.627 00:00:00.000 UDP 28.104.0.1:49386 -> 198.28.0.2:53 1 64 1 2025-09-12 12:20:36.637 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49386 1 80 1 2025-09-12 12:20:36.637 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34582 1 109 1 2025-09-12 12:21:36.933 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54365 1 109 1 2025-09-12 12:21:36.933 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58939 1 80 1 2025-09-12 12:21:36.923 00:00:00.000 UDP 28.104.0.1:58939 -> 198.28.0.2:53 1 64 1 2025-09-12 12:21:36.923 00:00:00.000 UDP 28.104.0.1:54365 -> 198.28.0.2:53 1 64 1 2025-09-12 12:22:03.945 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-12 12:18:27.067 00:05:04.323 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-12 12:18:31.153 00:04:00.262 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-09-12 12:18:31.153 00:04:00.216 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-12 12:22:37.245 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54049 1 80 1 2025-09-12 12:22:37.245 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48786 1 109 1 2025-09-12 12:22:37.237 00:00:00.000 UDP 28.104.0.1:48786 -> 198.28.0.2:53 1 64 1 2025-09-12 12:22:37.236 00:00:00.000 UDP 28.104.0.1:54049 -> 198.28.0.2:53 1 64 1 2025-09-12 12:19:27.118 00:05:04.263 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-12 12:23:37.539 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44963 1 109 1 2025-09-12 12:23:37.539 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34591 1 80 1 2025-09-12 12:23:37.528 00:00:00.000 UDP 28.104.0.1:34591 -> 198.28.0.2:53 1 64 1 2025-09-12 12:23:37.528 00:00:00.000 UDP 28.104.0.1:44963 -> 198.28.0.2:53 1 64 1 2025-09-12 12:20:00.084 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2688 1 2025-09-12 12:20:27.068 00:05:04.096 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-12 12:24:37.832 00:00:00.000 UDP 28.104.0.1:58485 -> 198.28.0.2:53 1 64 1 2025-09-12 12:24:37.832 00:00:00.000 UDP 28.104.0.1:36511 -> 198.28.0.2:53 1 64 1 2025-09-12 12:24:37.841 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58485 1 109 1 2025-09-12 12:24:37.841 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36511 1 80 1 2025-09-12 12:21:27.080 00:05:04.075 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-12 12:25:38.109 00:00:00.000 UDP 28.104.0.1:40210 -> 198.28.0.2:53 1 64 1 2025-09-12 12:25:38.109 00:00:00.000 UDP 28.104.0.1:52924 -> 198.28.0.2:53 1 64 1 2025-09-12 12:25:38.119 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40210 1 109 1 2025-09-12 12:25:38.119 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52924 1 80 1 2025-09-12 12:26:38.400 00:00:00.000 UDP 28.104.0.1:45762 -> 198.28.0.2:53 1 64 1 2025-09-12 12:26:38.400 00:00:00.000 UDP 28.104.0.1:57694 -> 198.28.0.2:53 1 64 1 2025-09-12 12:26:38.410 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57694 1 109 1 2025-09-12 12:26:38.411 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45762 1 80 1 2025-09-12 12:27:03.935 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-12 12:23:31.153 00:04:00.269 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-09-12 12:23:31.153 00:04:00.216 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-12 12:27:38.706 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46728 1 80 1 2025-09-12 12:27:38.706 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37072 1 109 1 2025-09-12 12:27:38.696 00:00:00.000 UDP 28.104.0.1:37072 -> 198.28.0.2:53 1 64 1 2025-09-12 12:27:38.695 00:00:00.000 UDP 28.104.0.1:46728 -> 198.28.0.2:53 1 64 1 2025-09-12 12:24:27.068 00:05:04.326 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-12 12:28:39.002 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34136 1 80 1 2025-09-12 12:28:39.002 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58166 1 109 1 2025-09-12 12:28:38.991 00:00:00.000 UDP 28.104.0.1:34136 -> 198.28.0.2:53 1 64 1 2025-09-12 12:28:38.992 00:00:00.000 UDP 28.104.0.1:58166 -> 198.28.0.2:53 1 64 1 2025-09-12 12:25:20.087 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2384 1 2025-09-12 12:25:27.119 00:05:04.266 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-12 12:29:39.299 00:00:00.000 UDP 28.104.0.1:60791 -> 198.28.0.2:53 1 64 1 2025-09-12 12:29:39.299 00:00:00.000 UDP 28.104.0.1:43682 -> 198.28.0.2:53 1 64 1 2025-09-12 12:29:39.310 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43682 1 109 1 2025-09-12 12:29:39.310 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60791 1 80 1 2025-09-12 12:26:27.068 00:05:04.096 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-12 12:30:39.602 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60070 1 80 1 2025-09-12 12:30:39.602 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51840 1 109 1 2025-09-12 12:30:39.591 00:00:00.000 UDP 28.104.0.1:60070 -> 198.28.0.2:53 1 64 1 2025-09-12 12:30:39.591 00:00:00.000 UDP 28.104.0.1:51840 -> 198.28.0.2:53 1 64 1 2025-09-12 12:27:27.080 00:05:04.075 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-12 12:31:39.882 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56322 1 80 1 2025-09-12 12:31:39.882 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32787 1 109 1 2025-09-12 12:31:39.873 00:00:00.000 UDP 28.104.0.1:56322 -> 198.28.0.2:53 1 64 1 2025-09-12 12:31:39.873 00:00:00.000 UDP 28.104.0.1:32787 -> 198.28.0.2:53 1 64 1 2025-09-12 12:32:04.046 00:00:00.033 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-12 12:28:31.155 00:04:00.268 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-09-12 12:28:31.155 00:04:00.215 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-12 12:32:40.175 00:00:00.000 UDP 28.104.0.1:47462 -> 198.28.0.2:53 1 64 1 2025-09-12 12:32:40.175 00:00:00.000 UDP 28.104.0.1:47197 -> 198.28.0.2:53 1 64 1 2025-09-12 12:32:40.188 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47462 1 109 1 2025-09-12 12:32:40.187 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47197 1 80 1 2025-09-12 12:33:40.473 00:00:00.000 UDP 28.104.0.1:58233 -> 198.28.0.2:53 1 64 1 2025-09-12 12:33:40.473 00:00:00.000 UDP 28.104.0.1:44955 -> 198.28.0.2:53 1 64 1 2025-09-12 12:33:40.483 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44955 1 109 1 2025-09-12 12:33:40.483 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58233 1 80 1 2025-09-12 12:30:27.069 00:05:04.331 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-12 12:34:40.766 00:00:00.000 UDP 28.104.0.1:43889 -> 198.28.0.2:53 1 64 1 2025-09-12 12:34:40.766 00:00:00.000 UDP 28.104.0.1:55221 -> 198.28.0.2:53 1 64 1 2025-09-12 12:34:40.776 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43889 1 109 1 2025-09-12 12:34:40.776 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55221 1 80 1 2025-09-12 12:30:40.094 00:05:10.017 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2796 1 2025-09-12 12:31:27.120 00:05:04.271 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-12 12:35:41.066 00:00:00.000 UDP 28.104.0.1:41440 -> 198.28.0.2:53 1 64 1 2025-09-12 12:35:41.066 00:00:00.000 UDP 28.104.0.1:49713 -> 198.28.0.2:53 1 64 1 2025-09-12 12:35:41.076 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49713 1 109 1 2025-09-12 12:35:41.076 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41440 1 80 1 2025-09-12 12:32:27.070 00:05:04.096 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-12 12:36:41.374 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35897 1 109 1 2025-09-12 12:36:41.374 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49881 1 80 1 2025-09-12 12:36:41.363 00:00:00.000 UDP 28.104.0.1:49881 -> 198.28.0.2:53 1 64 1 2025-09-12 12:36:41.363 00:00:00.000 UDP 28.104.0.1:35897 -> 198.28.0.2:53 1 64 1 2025-09-12 12:37:04.319 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-12 12:33:31.154 00:04:00.270 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-09-12 12:33:31.154 00:04:00.216 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-12 12:33:27.081 00:05:04.076 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-12 12:37:41.635 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48540 1 109 1 2025-09-12 12:37:41.635 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47268 1 80 1 2025-09-12 12:37:41.623 00:00:00.000 UDP 28.104.0.1:48540 -> 198.28.0.2:53 1 64 1 2025-09-12 12:37:41.623 00:00:00.000 UDP 28.104.0.1:47268 -> 198.28.0.2:53 1 64 1 2025-09-12 12:38:41.880 00:00:00.000 UDP 28.104.0.1:38494 -> 198.28.0.2:53 1 64 1 2025-09-12 12:38:41.880 00:00:00.000 UDP 28.104.0.1:51276 -> 198.28.0.2:53 1 64 1 2025-09-12 12:38:41.890 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51276 1 80 1 2025-09-12 12:38:41.890 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38494 1 109 1 2025-09-12 12:39:42.192 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38951 1 109 1 2025-09-12 12:39:42.192 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40304 1 80 1 2025-09-12 12:39:42.182 00:00:00.000 UDP 28.104.0.1:38951 -> 198.28.0.2:53 1 64 1 2025-09-12 12:39:42.182 00:00:00.000 UDP 28.104.0.1:40304 -> 198.28.0.2:53 1 64 1 2025-09-12 12:36:00.110 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2712 1 2025-09-12 12:36:27.071 00:05:04.330 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-12 12:40:42.473 00:00:00.000 UDP 28.104.0.1:38993 -> 198.28.0.2:53 1 64 1 2025-09-12 12:40:42.473 00:00:00.000 UDP 28.104.0.1:42149 -> 198.28.0.2:53 1 64 1 2025-09-12 12:40:42.483 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38993 1 80 1 2025-09-12 12:40:42.483 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42149 1 109 1 2025-09-12 12:37:27.128 00:05:04.264 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-12 12:41:42.777 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34302 1 109 1 2025-09-12 12:41:42.777 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48051 1 80 1 2025-09-12 12:41:42.767 00:00:00.000 UDP 28.104.0.1:48051 -> 198.28.0.2:53 1 64 1 2025-09-12 12:41:42.767 00:00:00.000 UDP 28.104.0.1:34302 -> 198.28.0.2:53 1 64 1 2025-09-12 12:42:04.294 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-12 12:38:31.157 00:04:00.217 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-12 12:38:31.158 00:04:00.268 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-09-12 12:38:27.077 00:05:04.091 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-12 12:42:43.088 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50401 1 80 1 2025-09-12 12:42:43.087 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60167 1 109 1 2025-09-12 12:42:43.078 00:00:00.000 UDP 28.104.0.1:50401 -> 198.28.0.2:53 1 64 1 2025-09-12 12:42:43.077 00:00:00.000 UDP 28.104.0.1:60167 -> 198.28.0.2:53 1 64 1 2025-09-12 12:39:27.086 00:05:04.072 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-12 12:43:43.368 00:00:00.000 UDP 28.104.0.1:50971 -> 198.28.0.2:53 1 64 1 2025-09-12 12:43:43.368 00:00:00.000 UDP 28.104.0.1:48303 -> 198.28.0.2:53 1 64 1 2025-09-12 12:43:43.379 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50971 1 80 1 2025-09-12 12:43:43.379 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48303 1 109 1 2025-09-12 12:44:43.682 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58226 1 109 1 2025-09-12 12:44:43.682 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35702 1 80 1 2025-09-12 12:44:43.671 00:00:00.000 UDP 28.104.0.1:35702 -> 198.28.0.2:53 1 64 1 2025-09-12 12:44:43.671 00:00:00.000 UDP 28.104.0.1:58226 -> 198.28.0.2:53 1 64 1 2025-09-12 12:41:20.115 00:05:10.009 OSPF 28.0.2.1:0 -> 224.0.0.5:0 43 3096 1 2025-09-12 12:45:43.973 00:00:00.000 UDP 28.104.0.1:49711 -> 198.28.0.2:53 1 64 1 2025-09-12 12:45:43.972 00:00:00.000 UDP 28.104.0.1:51956 -> 198.28.0.2:53 1 64 1 2025-09-12 12:45:43.982 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51956 1 109 1 2025-09-12 12:45:43.982 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49711 1 80 1 2025-09-12 12:42:27.078 00:05:04.324 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-12 12:46:44.270 00:00:00.000 UDP 28.104.0.1:35266 -> 198.28.0.2:53 1 64 1 2025-09-12 12:46:44.269 00:00:00.000 UDP 28.104.0.1:51601 -> 198.28.0.2:53 1 64 1 2025-09-12 12:46:44.281 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35266 1 80 1 2025-09-12 12:46:44.281 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51601 1 109 1 2025-09-12 12:47:04.428 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-12 12:43:27.127 00:05:04.265 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-12 12:47:44.569 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60124 1 80 1 2025-09-12 12:47:44.569 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39276 1 109 1 2025-09-12 12:47:44.560 00:00:00.000 UDP 28.104.0.1:39276 -> 198.28.0.2:53 1 64 1 2025-09-12 12:47:44.560 00:00:00.000 UDP 28.104.0.1:60124 -> 198.28.0.2:53 1 64 1 2025-09-12 12:43:31.158 00:06:00.270 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-09-12 12:43:31.158 00:06:00.217 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-09-12 12:44:27.080 00:05:04.096 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-12 12:48:44.856 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51746 1 109 1 2025-09-12 12:48:44.856 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38890 1 80 1 2025-09-12 12:48:44.847 00:00:00.000 UDP 28.104.0.1:51746 -> 198.28.0.2:53 1 64 1 2025-09-12 12:48:44.847 00:00:00.000 UDP 28.104.0.1:38890 -> 198.28.0.2:53 1 64 1 2025-09-12 12:45:27.088 00:05:04.078 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-12 12:49:45.137 00:00:00.000 UDP 28.104.0.1:34238 -> 198.28.0.2:53 1 64 1 2025-09-12 12:49:45.137 00:00:00.000 UDP 28.104.0.1:58300 -> 198.28.0.2:53 1 64 1 2025-09-12 12:49:45.148 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34238 1 109 1 2025-09-12 12:49:45.148 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58300 1 80 1 2025-09-12 12:50:45.429 00:00:00.000 UDP 28.104.0.1:47158 -> 198.28.0.2:53 1 64 1 2025-09-12 12:50:45.429 00:00:00.000 UDP 28.104.0.1:52940 -> 198.28.0.2:53 1 64 1 2025-09-12 12:50:45.441 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47158 1 109 1 2025-09-12 12:50:45.441 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52940 1 80 1 2025-09-12 12:46:40.124 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2504 1 2025-09-12 12:51:45.734 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40586 1 80 1 2025-09-12 12:51:45.733 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47263 1 109 1 2025-09-12 12:51:45.724 00:00:00.000 UDP 28.104.0.1:47263 -> 198.28.0.2:53 1 64 1 2025-09-12 12:51:45.724 00:00:00.000 UDP 28.104.0.1:40586 -> 198.28.0.2:53 1 64 1 2025-09-12 12:52:04.357 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-12 12:48:27.078 00:05:04.330 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-12 12:52:46.031 00:00:00.000 UDP 28.104.0.1:43976 -> 198.28.0.2:53 1 64 1 2025-09-12 12:52:46.031 00:00:00.000 UDP 28.104.0.1:40565 -> 198.28.0.2:53 1 64 1 2025-09-12 12:52:46.040 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40565 1 109 1 2025-09-12 12:52:46.041 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43976 1 80 1 2025-09-12 12:49:27.129 00:05:04.270 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-12 12:53:46.325 00:00:00.000 UDP 28.104.0.1:47705 -> 198.28.0.2:53 1 64 1 2025-09-12 12:53:46.325 00:00:00.000 UDP 28.104.0.1:46378 -> 198.28.0.2:53 1 64 1 2025-09-12 12:53:46.335 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46378 1 80 1 2025-09-12 12:53:46.335 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47705 1 109 1 2025-09-12 12:50:31.166 00:04:00.263 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-09-12 12:50:31.166 00:04:00.210 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-12 12:50:27.080 00:05:04.106 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-12 12:54:46.588 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58320 1 109 1 2025-09-12 12:54:46.587 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37020 1 80 1 2025-09-12 12:54:46.576 00:00:00.000 UDP 28.104.0.1:37020 -> 198.28.0.2:53 1 64 1 2025-09-12 12:54:46.576 00:00:00.000 UDP 28.104.0.1:58320 -> 198.28.0.2:53 1 64 1 2025-09-12 12:51:27.091 00:05:04.085 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-12 12:55:46.882 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42667 1 109 1 2025-09-12 12:55:46.882 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54553 1 80 1 2025-09-12 12:55:46.870 00:00:00.000 UDP 28.104.0.1:42667 -> 198.28.0.2:53 1 64 1 2025-09-12 12:55:46.870 00:00:00.000 UDP 28.104.0.1:54553 -> 198.28.0.2:53 1 64 1 2025-09-12 12:52:00.132 00:05:10.010 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2568 1 2025-09-12 12:56:47.155 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35082 1 80 1 2025-09-12 12:56:47.155 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59414 1 109 1 2025-09-12 12:56:47.145 00:00:00.000 UDP 28.104.0.1:59414 -> 198.28.0.2:53 1 64 1 2025-09-12 12:56:47.145 00:00:00.000 UDP 28.104.0.1:35082 -> 198.28.0.2:53 1 64 1 2025-09-12 12:57:05.029 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-12 12:57:47.458 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48371 1 109 1 2025-09-12 12:57:47.458 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51590 1 80 1 2025-09-12 12:57:47.447 00:00:00.000 UDP 28.104.0.1:51590 -> 198.28.0.2:53 1 64 1 2025-09-12 12:57:47.447 00:00:00.000 UDP 28.104.0.1:48371 -> 198.28.0.2:53 1 64 1 2025-09-12 12:54:27.080 00:05:04.329 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-12 12:58:47.705 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47521 1 109 1 2025-09-12 12:58:47.704 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34032 1 80 1 2025-09-12 12:58:47.694 00:00:00.000 UDP 28.104.0.1:34032 -> 198.28.0.2:53 1 64 1 2025-09-12 12:58:47.695 00:00:00.000 UDP 28.104.0.1:47521 -> 198.28.0.2:53 1 64 1 Summary: total flows: 325, total bytes: 96050, total packets: 1417, avg bps: 199, avg pps: 0, avg bpp: 67 Time window: 2025-09-12 11:55:27 - 2025-09-12 12:59:31 Total flows processed: 325, passed: 325, Blocks skipped: 0, Bytes read: 33864 Sys: 0.0038s User: 0.0019s Wall: 0.0027s flows/second: 119668.9 Runtime: 0.0027s