Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-12 14:59:26.537 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58775 1 80 1 2025-09-12 14:59:26.537 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50598 1 109 1 2025-09-12 14:59:26.526 00:00:00.000 UDP 28.104.0.1:50598 -> 198.28.0.2:53 1 64 1 2025-09-12 14:59:26.526 00:00:00.000 UDP 28.104.0.1:58775 -> 198.28.0.2:53 1 64 1 2025-09-12 14:55:27.155 00:05:04.339 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-12 15:00:26.787 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45175 1 109 1 2025-09-12 15:00:26.787 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50103 1 80 1 2025-09-12 15:00:26.778 00:00:00.000 UDP 28.104.0.1:50103 -> 198.28.0.2:53 1 64 1 2025-09-12 15:00:26.779 00:00:00.000 UDP 28.104.0.1:45175 -> 198.28.0.2:53 1 64 1 2025-09-12 14:56:27.106 00:05:04.124 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-12 15:01:27.082 00:00:00.000 UDP 28.104.0.1:33247 -> 198.28.0.2:53 1 64 1 2025-09-12 14:57:27.115 00:05:04.104 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-12 15:01:27.081 00:00:00.000 UDP 28.104.0.1:43133 -> 198.28.0.2:53 1 64 1 2025-09-12 15:01:27.092 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33247 1 80 1 2025-09-12 15:01:27.092 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43133 1 109 1 2025-09-12 15:02:07.608 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-12 15:02:27.381 00:00:00.000 UDP 28.104.0.1:48340 -> 198.28.0.2:53 1 64 1 2025-09-12 14:58:31.220 00:04:00.291 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-09-12 14:58:31.220 00:04:00.251 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-12 15:02:27.381 00:00:00.000 UDP 28.104.0.1:59674 -> 198.28.0.2:53 1 64 1 2025-09-12 15:02:27.391 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59674 1 80 1 2025-09-12 15:02:27.391 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48340 1 109 1 2025-09-12 15:03:27.685 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35331 1 109 1 2025-09-12 15:03:27.684 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50332 1 80 1 2025-09-12 15:03:27.673 00:00:00.000 UDP 28.104.0.1:35331 -> 198.28.0.2:53 1 64 1 2025-09-12 15:03:27.673 00:00:00.000 UDP 28.104.0.1:50332 -> 198.28.0.2:53 1 64 1 2025-09-12 14:59:40.276 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2712 1 2025-09-12 15:04:27.964 00:00:00.000 UDP 28.104.0.1:52385 -> 198.28.0.2:53 1 64 1 2025-09-12 15:04:27.964 00:00:00.000 UDP 28.104.0.1:40690 -> 198.28.0.2:53 1 64 1 2025-09-12 15:00:27.106 00:05:04.405 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-12 15:04:27.974 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52385 1 80 1 2025-09-12 15:04:27.974 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40690 1 109 1 2025-09-12 15:05:28.264 00:00:00.000 UDP 28.104.0.1:59836 -> 198.28.0.2:53 1 64 1 2025-09-12 15:05:28.264 00:00:00.000 UDP 28.104.0.1:43414 -> 198.28.0.2:53 1 64 1 2025-09-12 15:05:28.272 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43414 1 80 1 2025-09-12 15:05:28.273 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59836 1 109 1 2025-09-12 15:01:27.155 00:05:04.346 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-12 15:06:28.570 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57094 1 80 1 2025-09-12 15:02:27.106 00:05:04.123 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-12 15:06:28.570 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36688 1 109 1 2025-09-12 15:06:28.561 00:00:00.000 UDP 28.104.0.1:36688 -> 198.28.0.2:53 1 64 1 2025-09-12 15:06:28.561 00:00:00.000 UDP 28.104.0.1:57094 -> 198.28.0.2:53 1 64 1 2025-09-12 15:07:07.218 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-12 15:07:28.877 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38546 1 109 1 2025-09-12 15:07:28.877 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37087 1 80 1 2025-09-12 15:07:28.868 00:00:00.000 UDP 28.104.0.1:38546 -> 198.28.0.2:53 1 64 1 2025-09-12 15:07:28.868 00:00:00.000 UDP 28.104.0.1:37087 -> 198.28.0.2:53 1 64 1 2025-09-12 15:03:31.220 00:04:00.293 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-09-12 15:03:31.220 00:04:00.250 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-12 15:03:27.118 00:05:04.103 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-12 15:08:29.177 00:00:00.000 UDP 28.104.0.1:40903 -> 198.28.0.2:53 1 64 1 2025-09-12 15:08:29.178 00:00:00.000 UDP 28.104.0.1:40231 -> 198.28.0.2:53 1 64 1 2025-09-12 15:08:29.189 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40231 1 80 1 2025-09-12 15:08:29.189 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40903 1 109 1 2025-09-12 15:05:00.284 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 44 3248 1 2025-09-12 15:09:29.481 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39848 1 80 1 2025-09-12 15:09:29.481 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40052 1 109 1 2025-09-12 15:09:29.470 00:00:00.000 UDP 28.104.0.1:40052 -> 198.28.0.2:53 1 64 1 2025-09-12 15:09:29.470 00:00:00.000 UDP 28.104.0.1:39848 -> 198.28.0.2:53 1 64 1 2025-09-12 15:10:29.768 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40913 1 80 1 2025-09-12 15:10:29.769 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46589 1 109 1 2025-09-12 15:10:29.759 00:00:00.000 UDP 28.104.0.1:46589 -> 198.28.0.2:53 1 64 1 2025-09-12 15:10:29.759 00:00:00.000 UDP 28.104.0.1:40913 -> 198.28.0.2:53 1 64 1 2025-09-12 15:06:27.108 00:05:04.404 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-12 15:07:27.158 00:05:04.345 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-12 15:11:30.056 00:00:00.000 UDP 28.104.0.1:53620 -> 198.28.0.2:53 1 64 1 2025-09-12 15:11:30.056 00:00:00.000 UDP 28.104.0.1:39082 -> 198.28.0.2:53 1 64 1 2025-09-12 15:11:30.066 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39082 1 80 1 2025-09-12 15:11:30.066 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53620 1 109 1 2025-09-12 15:12:07.268 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-12 15:12:30.307 00:00:00.000 UDP 28.104.0.1:57714 -> 198.28.0.2:53 1 64 1 2025-09-12 15:12:30.307 00:00:00.000 UDP 28.104.0.1:47846 -> 198.28.0.2:53 1 64 1 2025-09-12 15:08:31.219 00:04:00.294 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-09-12 15:08:31.219 00:04:00.251 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-12 15:08:27.109 00:05:04.133 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-12 15:12:30.318 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47846 1 109 1 2025-09-12 15:12:30.318 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57714 1 80 1 2025-09-12 15:13:30.601 00:00:00.000 UDP 28.104.0.1:51762 -> 198.28.0.2:53 1 64 1 2025-09-12 15:09:27.119 00:05:04.113 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-12 15:13:30.601 00:00:00.000 UDP 28.104.0.1:43847 -> 198.28.0.2:53 1 64 1 2025-09-12 15:13:30.611 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51762 1 109 1 2025-09-12 15:13:30.611 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43847 1 80 1 2025-09-12 15:14:30.895 00:00:00.000 UDP 28.104.0.1:42189 -> 198.28.0.2:53 1 64 1 2025-09-12 15:14:30.895 00:00:00.000 UDP 28.104.0.1:45394 -> 198.28.0.2:53 1 64 1 2025-09-12 15:10:20.289 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2712 1 2025-09-12 15:14:30.907 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45394 1 109 1 2025-09-12 15:14:30.906 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42189 1 80 1 2025-09-12 15:15:31.164 00:00:00.000 UDP 28.104.0.1:39808 -> 198.28.0.2:53 1 64 1 2025-09-12 15:15:31.163 00:00:00.000 UDP 28.104.0.1:57873 -> 198.28.0.2:53 1 64 1 2025-09-12 15:15:31.174 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57873 1 80 1 2025-09-12 15:15:31.175 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39808 1 109 1 2025-09-12 15:12:27.109 00:05:04.405 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-12 15:16:31.469 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52008 1 109 1 2025-09-12 15:16:31.469 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43681 1 80 1 2025-09-12 15:16:31.458 00:00:00.000 UDP 28.104.0.1:43681 -> 198.28.0.2:53 1 64 1 2025-09-12 15:16:31.458 00:00:00.000 UDP 28.104.0.1:52008 -> 198.28.0.2:53 1 64 1 2025-09-12 15:17:07.096 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-12 15:13:31.233 00:04:00.283 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-09-12 15:13:31.233 00:04:00.239 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-12 15:13:27.159 00:05:04.345 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-12 15:17:32.395 00:00:00.000 UDP 28.104.0.1:57375 -> 198.28.0.2:53 1 64 1 2025-09-12 15:17:32.395 00:00:00.000 UDP 28.104.0.1:35400 -> 198.28.0.2:53 1 64 1 2025-09-12 15:17:32.405 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35400 1 80 1 2025-09-12 15:17:32.405 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57375 1 109 1 2025-09-12 15:14:27.109 00:05:04.136 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-12 15:18:32.645 00:00:00.000 UDP 28.104.0.1:34077 -> 198.28.0.2:53 1 64 1 2025-09-12 15:18:32.645 00:00:00.000 UDP 28.104.0.1:42683 -> 198.28.0.2:53 1 64 1 2025-09-12 15:18:32.655 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34077 1 109 1 2025-09-12 15:18:32.655 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42683 1 80 1 2025-09-12 15:18:31.234 00:01:00.281 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-09-12 15:18:31.234 00:01:00.238 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-09-12 15:19:32.904 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51510 1 109 1 2025-09-12 15:19:32.904 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39312 1 80 1 2025-09-12 15:19:32.894 00:00:00.000 UDP 28.104.0.1:39312 -> 198.28.0.2:53 1 64 1 2025-09-12 15:15:27.119 00:05:04.115 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-12 15:19:32.894 00:00:00.000 UDP 28.104.0.1:51510 -> 198.28.0.2:53 1 64 1 2025-09-12 15:15:40.293 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2504 1 2025-09-12 15:20:33.208 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53303 1 80 1 2025-09-12 15:20:33.207 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34490 1 109 1 2025-09-12 15:20:33.195 00:00:00.000 UDP 28.104.0.1:34490 -> 198.28.0.2:53 1 64 1 2025-09-12 15:20:33.195 00:00:00.000 UDP 28.104.0.1:53303 -> 198.28.0.2:53 1 64 1 2025-09-12 15:21:33.498 00:00:00.000 UDP 28.104.0.1:34234 -> 198.28.0.2:53 1 64 1 2025-09-12 15:21:33.498 00:00:00.000 UDP 28.104.0.1:52390 -> 198.28.0.2:53 1 64 1 2025-09-12 15:21:33.507 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34234 1 109 1 2025-09-12 15:21:33.507 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52390 1 80 1 2025-09-12 15:22:07.543 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-12 15:22:33.803 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38724 1 80 1 2025-09-12 15:18:27.110 00:05:04.407 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-12 15:22:33.803 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52971 1 109 1 2025-09-12 15:20:31.234 00:02:00.280 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-09-12 15:20:31.234 00:02:00.237 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-09-12 15:22:33.791 00:00:00.000 UDP 28.104.0.1:38724 -> 198.28.0.2:53 1 64 1 2025-09-12 15:22:33.791 00:00:00.000 UDP 28.104.0.1:52971 -> 198.28.0.2:53 1 64 1 2025-09-12 15:19:27.160 00:05:04.346 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-12 15:23:34.101 00:00:00.000 UDP 28.104.0.1:60262 -> 198.28.0.2:53 1 64 1 2025-09-12 15:23:34.101 00:00:00.000 UDP 28.104.0.1:50176 -> 198.28.0.2:53 1 64 1 2025-09-12 15:23:34.113 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60262 1 109 1 2025-09-12 15:23:34.112 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50176 1 80 1 2025-09-12 15:20:27.110 00:05:04.135 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-12 15:23:31.234 00:01:00.281 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-09-12 15:23:31.234 00:01:00.237 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-09-12 15:24:34.404 00:00:00.000 UDP 28.104.0.1:50047 -> 198.28.0.2:53 1 64 1 2025-09-12 15:24:34.403 00:00:00.000 UDP 28.104.0.1:56263 -> 198.28.0.2:53 1 64 1 2025-09-12 15:24:34.417 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50047 1 109 1 2025-09-12 15:24:34.414 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56263 1 80 1 2025-09-12 15:21:00.299 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2796 1 2025-09-12 15:21:27.122 00:05:04.112 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-12 15:25:34.662 00:00:00.000 UDP 28.104.0.1:35255 -> 198.28.0.2:53 1 64 1 2025-09-12 15:25:34.662 00:00:00.000 UDP 28.104.0.1:51298 -> 198.28.0.2:53 1 64 1 2025-09-12 15:25:34.672 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51298 1 80 1 2025-09-12 15:25:34.672 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35255 1 109 1 2025-09-12 15:26:34.962 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48776 1 80 1 2025-09-12 15:26:34.962 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44732 1 109 1 2025-09-12 15:26:34.953 00:00:00.000 UDP 28.104.0.1:48776 -> 198.28.0.2:53 1 64 1 2025-09-12 15:26:34.953 00:00:00.000 UDP 28.104.0.1:44732 -> 198.28.0.2:53 1 64 1 2025-09-12 15:27:07.786 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-12 15:27:35.263 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44331 1 80 1 2025-09-12 15:27:35.263 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55752 1 109 1 2025-09-12 15:27:35.254 00:00:00.000 UDP 28.104.0.1:44331 -> 198.28.0.2:53 1 64 1 2025-09-12 15:27:35.254 00:00:00.000 UDP 28.104.0.1:55752 -> 198.28.0.2:53 1 64 1 2025-09-12 15:28:35.511 00:00:00.000 UDP 28.104.0.1:56865 -> 198.28.0.2:53 1 64 1 2025-09-12 15:28:35.511 00:00:00.000 UDP 28.104.0.1:46213 -> 198.28.0.2:53 1 64 1 2025-09-12 15:24:27.114 00:05:04.403 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-12 15:28:35.521 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56865 1 80 1 2025-09-12 15:28:35.521 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46213 1 109 1 2025-09-12 15:25:31.235 00:04:00.282 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-09-12 15:25:31.235 00:04:00.238 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-12 15:29:35.766 00:00:00.000 UDP 28.104.0.1:36673 -> 198.28.0.2:53 1 64 1 2025-09-12 15:25:27.163 00:05:04.344 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-12 15:29:35.766 00:00:00.000 UDP 28.104.0.1:59010 -> 198.28.0.2:53 1 64 1 2025-09-12 15:29:35.778 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36673 1 80 1 2025-09-12 15:29:35.777 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59010 1 109 1 2025-09-12 15:26:27.112 00:05:04.133 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-12 15:26:20.301 00:05:10.379 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2568 1 2025-09-12 15:30:36.093 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52336 1 109 1 2025-09-12 15:30:36.094 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46623 1 80 1 2025-09-12 15:30:36.083 00:00:00.000 UDP 28.104.0.1:46623 -> 198.28.0.2:53 1 64 1 2025-09-12 15:30:36.083 00:00:00.000 UDP 28.104.0.1:52336 -> 198.28.0.2:53 1 64 1 2025-09-12 15:27:27.123 00:05:04.113 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-12 15:31:36.500 00:00:00.000 UDP 28.104.0.1:48017 -> 198.28.0.2:53 1 64 1 2025-09-12 15:31:36.500 00:00:00.000 UDP 28.104.0.1:39667 -> 198.28.0.2:53 1 64 1 2025-09-12 15:31:36.510 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48017 1 109 1 2025-09-12 15:31:36.510 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39667 1 80 1 2025-09-12 15:32:07.461 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-12 15:32:36.803 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47250 1 109 1 2025-09-12 15:32:36.803 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41403 1 80 1 2025-09-12 15:32:36.793 00:00:00.000 UDP 28.104.0.1:47250 -> 198.28.0.2:53 1 64 1 2025-09-12 15:32:36.793 00:00:00.000 UDP 28.104.0.1:41403 -> 198.28.0.2:53 1 64 1 2025-09-12 15:33:37.113 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38601 1 109 1 2025-09-12 15:33:37.113 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58266 1 80 1 2025-09-12 15:33:37.104 00:00:00.000 UDP 28.104.0.1:38601 -> 198.28.0.2:53 1 64 1 2025-09-12 15:33:37.103 00:00:00.000 UDP 28.104.0.1:58266 -> 198.28.0.2:53 1 64 1 2025-09-12 15:30:31.236 00:04:00.282 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-09-12 15:30:31.236 00:04:00.241 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-12 15:30:27.115 00:05:04.404 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-12 15:34:37.443 00:00:00.000 UDP 28.104.0.1:49048 -> 198.28.0.2:53 1 64 1 2025-09-12 15:34:37.443 00:00:00.000 UDP 28.104.0.1:45613 -> 198.28.0.2:53 1 64 1 2025-09-12 15:34:37.453 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45613 1 109 1 2025-09-12 15:34:37.453 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49048 1 80 1 2025-09-12 15:31:27.164 00:05:04.344 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-12 15:35:37.738 00:00:00.000 UDP 28.104.0.1:56853 -> 198.28.0.2:53 1 64 1 2025-09-12 15:35:37.738 00:00:00.000 UDP 28.104.0.1:34180 -> 198.28.0.2:53 1 64 1 2025-09-12 15:35:37.748 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56853 1 109 1 2025-09-12 15:35:37.748 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34180 1 80 1 2025-09-12 15:31:40.313 00:05:10.466 OSPF 28.0.2.1:0 -> 224.0.0.5:0 45 3156 1 2025-09-12 15:32:27.113 00:05:04.132 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-12 15:36:38.013 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37563 1 80 1 2025-09-12 15:36:38.010 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51053 1 109 1 2025-09-12 15:36:38.000 00:00:00.000 UDP 28.104.0.1:51053 -> 198.28.0.2:53 1 64 1 2025-09-12 15:36:37.998 00:00:00.000 UDP 28.104.0.1:37563 -> 198.28.0.2:53 1 64 1 2025-09-12 15:37:07.782 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-12 15:33:27.124 00:05:04.112 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-12 15:37:38.286 00:00:00.000 UDP 28.104.0.1:46126 -> 198.28.0.2:53 1 64 1 2025-09-12 15:37:38.286 00:00:00.000 UDP 28.104.0.1:51874 -> 198.28.0.2:53 1 64 1 2025-09-12 15:37:38.297 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46126 1 109 1 2025-09-12 15:37:38.297 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51874 1 80 1 2025-09-12 15:38:38.596 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49080 1 109 1 2025-09-12 15:38:38.596 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33659 1 80 1 2025-09-12 15:38:38.587 00:00:00.000 UDP 28.104.0.1:33659 -> 198.28.0.2:53 1 64 1 2025-09-12 15:38:38.587 00:00:00.000 UDP 28.104.0.1:49080 -> 198.28.0.2:53 1 64 1 2025-09-12 15:35:31.236 00:04:00.289 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-09-12 15:35:31.236 00:04:00.242 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-12 15:39:38.890 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44851 1 109 1 2025-09-12 15:39:38.890 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56018 1 80 1 2025-09-12 15:39:38.879 00:00:00.000 UDP 28.104.0.1:44851 -> 198.28.0.2:53 1 64 1 2025-09-12 15:39:38.879 00:00:00.000 UDP 28.104.0.1:56018 -> 198.28.0.2:53 1 64 1 2025-09-12 15:36:27.114 00:05:04.407 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-12 15:40:39.198 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55290 1 109 1 2025-09-12 15:40:39.198 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60160 1 80 1 2025-09-12 15:40:39.187 00:00:00.000 UDP 28.104.0.1:60160 -> 198.28.0.2:53 1 64 1 2025-09-12 15:40:39.187 00:00:00.000 UDP 28.104.0.1:55290 -> 198.28.0.2:53 1 64 1 2025-09-12 15:37:00.322 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2956 1 2025-09-12 15:37:27.164 00:05:04.347 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-12 15:41:39.451 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55035 1 80 1 2025-09-12 15:41:39.451 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42763 1 109 1 2025-09-12 15:41:39.442 00:00:00.000 UDP 28.104.0.1:55035 -> 198.28.0.2:53 1 64 1 2025-09-12 15:41:39.442 00:00:00.000 UDP 28.104.0.1:42763 -> 198.28.0.2:53 1 64 1 2025-09-12 15:42:08.415 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-12 15:42:39.738 00:00:00.000 UDP 28.104.0.1:48692 -> 198.28.0.2:53 1 64 1 2025-09-12 15:42:39.738 00:00:00.000 UDP 28.104.0.1:38537 -> 198.28.0.2:53 1 64 1 2025-09-12 15:38:27.115 00:05:04.133 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-12 15:42:39.749 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38537 1 80 1 2025-09-12 15:42:39.749 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48692 1 109 1 2025-09-12 15:39:27.126 00:05:04.112 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-12 15:43:39.995 00:00:00.000 UDP 28.104.0.1:42310 -> 198.28.0.2:53 1 64 1 2025-09-12 15:43:39.996 00:00:00.000 UDP 28.104.0.1:35249 -> 198.28.0.2:53 1 64 1 2025-09-12 15:43:40.007 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42310 1 109 1 2025-09-12 15:43:40.007 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35249 1 80 1 2025-09-12 15:40:31.237 00:04:00.241 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-12 15:40:31.237 00:04:00.289 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-09-12 15:44:40.288 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40774 1 109 1 2025-09-12 15:44:40.287 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36008 1 80 1 2025-09-12 15:44:40.276 00:00:00.000 UDP 28.104.0.1:36008 -> 198.28.0.2:53 1 64 1 2025-09-12 15:44:40.276 00:00:00.000 UDP 28.104.0.1:40774 -> 198.28.0.2:53 1 64 1 2025-09-12 15:45:40.605 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60538 1 109 1 2025-09-12 15:45:40.605 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32863 1 80 1 2025-09-12 15:45:40.594 00:00:00.000 UDP 28.104.0.1:60538 -> 198.28.0.2:53 1 64 1 2025-09-12 15:45:40.594 00:00:00.000 UDP 28.104.0.1:32863 -> 198.28.0.2:53 1 64 1 2025-09-12 15:42:27.115 00:05:04.407 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-12 15:42:20.329 00:05:10.011 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2424 1 2025-09-12 15:46:40.904 00:00:00.000 UDP 28.104.0.1:59565 -> 198.28.0.2:53 1 64 1 2025-09-12 15:46:40.904 00:00:00.000 UDP 28.104.0.1:51597 -> 198.28.0.2:53 1 64 1 2025-09-12 15:46:40.915 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51597 1 80 1 2025-09-12 15:46:40.915 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59565 1 109 1 2025-09-12 15:47:07.912 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-12 15:43:27.166 00:05:04.347 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-12 15:47:41.207 00:00:00.000 UDP 28.104.0.1:59180 -> 198.28.0.2:53 1 64 1 2025-09-12 15:47:41.207 00:00:00.000 UDP 28.104.0.1:51960 -> 198.28.0.2:53 1 64 1 2025-09-12 15:47:41.218 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59180 1 109 1 2025-09-12 15:47:41.218 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51960 1 80 1 2025-09-12 15:44:27.115 00:05:04.134 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-12 15:48:41.515 00:00:00.000 UDP 28.104.0.1:58166 -> 198.28.0.2:53 1 64 1 2025-09-12 15:48:41.514 00:00:00.000 UDP 28.104.0.1:59085 -> 198.28.0.2:53 1 64 1 2025-09-12 15:48:41.524 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58166 1 80 1 2025-09-12 15:48:41.524 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59085 1 109 1 2025-09-12 15:49:41.822 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35247 1 109 1 2025-09-12 15:49:41.822 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39914 1 80 1 2025-09-12 15:45:31.239 00:04:00.289 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-09-12 15:45:31.238 00:04:00.242 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-12 15:45:27.127 00:05:04.113 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-12 15:49:41.813 00:00:00.000 UDP 28.104.0.1:35247 -> 198.28.0.2:53 1 64 1 2025-09-12 15:49:41.813 00:00:00.000 UDP 28.104.0.1:39914 -> 198.28.0.2:53 1 64 1 2025-09-12 15:50:42.106 00:00:00.000 UDP 28.104.0.1:43171 -> 198.28.0.2:53 1 64 1 2025-09-12 15:50:42.106 00:00:00.000 UDP 28.104.0.1:44753 -> 198.28.0.2:53 1 64 1 2025-09-12 15:50:42.117 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44753 1 109 1 2025-09-12 15:50:42.117 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43171 1 80 1 2025-09-12 15:51:42.401 00:00:00.000 UDP 28.104.0.1:50017 -> 198.28.0.2:53 1 64 1 2025-09-12 15:51:42.401 00:00:00.000 UDP 28.104.0.1:49601 -> 198.28.0.2:53 1 64 1 2025-09-12 15:51:42.412 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50017 1 80 1 2025-09-12 15:51:42.412 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49601 1 109 1 2025-09-12 15:47:40.341 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2796 1 2025-09-12 15:52:08.275 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-12 15:48:27.117 00:05:04.416 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-12 15:52:42.691 00:00:00.000 UDP 28.104.0.1:42609 -> 198.28.0.2:53 1 64 1 2025-09-12 15:52:42.691 00:00:00.000 UDP 28.104.0.1:38282 -> 198.28.0.2:53 1 64 1 2025-09-12 15:52:42.701 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38282 1 80 1 2025-09-12 15:52:42.701 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42609 1 109 1 2025-09-12 15:49:27.167 00:05:04.356 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-12 15:53:42.994 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49214 1 109 1 2025-09-12 15:53:42.994 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55028 1 80 1 2025-09-12 15:53:42.985 00:00:00.000 UDP 28.104.0.1:49214 -> 198.28.0.2:53 1 64 1 2025-09-12 15:53:42.985 00:00:00.000 UDP 28.104.0.1:55028 -> 198.28.0.2:53 1 64 1 2025-09-12 15:50:31.241 00:04:00.293 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-09-12 15:50:31.241 00:04:00.240 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-12 15:50:27.117 00:05:04.142 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-12 15:54:43.312 00:00:00.000 UDP 28.104.0.1:56105 -> 198.28.0.2:53 1 64 1 2025-09-12 15:54:43.312 00:00:00.000 UDP 28.104.0.1:37206 -> 198.28.0.2:53 1 64 1 2025-09-12 15:54:43.322 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37206 1 109 1 2025-09-12 15:54:43.322 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56105 1 80 1 2025-09-12 15:51:27.128 00:05:04.122 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-12 15:55:43.610 00:00:00.000 UDP 28.104.0.1:60809 -> 198.28.0.2:53 1 64 1 2025-09-12 15:55:43.610 00:00:00.000 UDP 28.104.0.1:57739 -> 198.28.0.2:53 1 64 1 2025-09-12 15:55:43.622 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57739 1 80 1 2025-09-12 15:55:43.622 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60809 1 109 1 2025-09-12 15:55:31.250 00:01:00.296 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-09-12 15:55:31.250 00:01:00.231 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-09-12 15:56:43.918 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46734 1 109 1 2025-09-12 15:56:43.917 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39685 1 80 1 2025-09-12 15:56:43.907 00:00:00.000 UDP 28.104.0.1:39685 -> 198.28.0.2:53 1 64 1 2025-09-12 15:56:43.908 00:00:00.000 UDP 28.104.0.1:46734 -> 198.28.0.2:53 1 64 1 2025-09-12 15:57:08.251 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-12 15:53:00.348 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2592 1 2025-09-12 15:57:44.414 00:00:00.000 UDP 28.104.0.1:40143 -> 198.28.0.2:53 1 64 1 2025-09-12 15:57:44.414 00:00:00.000 UDP 28.104.0.1:53089 -> 198.28.0.2:53 1 64 1 2025-09-12 15:57:44.425 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40143 1 109 1 2025-09-12 15:57:44.425 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53089 1 80 1 2025-09-12 15:54:27.119 00:05:04.417 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-12 15:58:44.720 00:00:00.000 UDP 28.104.0.1:41342 -> 198.28.0.2:53 1 64 1 2025-09-12 15:58:44.720 00:00:00.000 UDP 28.104.0.1:52575 -> 198.28.0.2:53 1 64 1 2025-09-12 15:58:44.729 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41342 1 109 1 2025-09-12 15:58:44.730 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52575 1 80 1 Summary: total flows: 331, total bytes: 96542, total packets: 1422, avg bps: 200, avg pps: 0, avg bpp: 67 Time window: 2025-09-12 14:55:27 - 2025-09-12 15:59:31 Total flows processed: 331, passed: 331, Blocks skipped: 0, Bytes read: 34488 Sys: 0.0043s User: 0.0026s Wall: 0.0040s flows/second: 82461.1 Runtime: 0.0040s