Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-12 15:57:31.249 00:02:00.287 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-09-12 15:57:31.249 00:02:00.234 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-09-12 15:55:27.168 00:05:04.357 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-12 15:59:45.094 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55084 1 80 1 2025-09-12 15:59:45.094 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53865 1 109 1 2025-09-12 15:59:45.084 00:00:00.000 UDP 28.104.0.1:55084 -> 198.28.0.2:53 1 64 1 2025-09-12 15:59:45.084 00:00:00.000 UDP 28.104.0.1:53865 -> 198.28.0.2:53 1 64 1 2025-09-12 15:56:27.120 00:05:04.141 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-12 16:00:45.370 00:00:00.000 UDP 28.104.0.1:45519 -> 198.28.0.2:53 1 64 1 2025-09-12 16:00:45.370 00:00:00.000 UDP 28.104.0.1:46168 -> 198.28.0.2:53 1 64 1 2025-09-12 16:00:45.380 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46168 1 109 1 2025-09-12 16:00:45.380 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45519 1 80 1 2025-09-12 16:00:31.250 00:01:00.286 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-09-12 16:00:31.250 00:01:00.233 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-09-12 15:57:27.130 00:05:04.121 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-12 16:01:45.663 00:00:00.000 UDP 28.104.0.1:58420 -> 198.28.0.2:53 1 64 1 2025-09-12 16:01:45.663 00:00:00.000 UDP 28.104.0.1:60041 -> 198.28.0.2:53 1 64 1 2025-09-12 16:01:45.674 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60041 1 109 1 2025-09-12 16:01:45.674 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58420 1 80 1 2025-09-12 16:02:08.293 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-12 15:58:20.352 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2584 1 2025-09-12 16:02:45.955 00:00:00.000 UDP 28.104.0.1:49859 -> 198.28.0.2:53 1 64 1 2025-09-12 16:02:45.955 00:00:00.000 UDP 28.104.0.1:47056 -> 198.28.0.2:53 1 64 1 2025-09-12 16:02:45.965 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49859 1 109 1 2025-09-12 16:02:45.966 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47056 1 80 1 2025-09-12 16:03:46.262 00:00:00.000 UDP 28.104.0.1:53760 -> 198.28.0.2:53 1 64 1 2025-09-12 16:03:46.262 00:00:00.000 UDP 28.104.0.1:41020 -> 198.28.0.2:53 1 64 1 2025-09-12 16:03:46.273 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41020 1 109 1 2025-09-12 16:03:46.273 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53760 1 80 1 2025-09-12 16:00:27.122 00:05:04.415 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-12 16:04:46.538 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47811 1 80 1 2025-09-12 16:04:46.538 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33648 1 109 1 2025-09-12 16:04:46.527 00:00:00.000 UDP 28.104.0.1:47811 -> 198.28.0.2:53 1 64 1 2025-09-12 16:04:46.527 00:00:00.000 UDP 28.104.0.1:33648 -> 198.28.0.2:53 1 64 1 2025-09-12 16:01:27.171 00:05:04.355 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-12 16:05:47.340 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54693 1 109 1 2025-09-12 16:05:47.340 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39784 1 80 1 2025-09-12 16:05:47.330 00:00:00.000 UDP 28.104.0.1:39784 -> 198.28.0.2:53 1 64 1 2025-09-12 16:05:47.330 00:00:00.000 UDP 28.104.0.1:54693 -> 198.28.0.2:53 1 64 1 2025-09-12 16:02:31.250 00:04:00.287 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-09-12 16:02:31.250 00:04:00.234 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-12 16:02:27.121 00:05:04.140 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-12 16:06:47.580 00:00:00.000 UDP 28.104.0.1:60747 -> 198.28.0.2:53 1 64 1 2025-09-12 16:06:47.580 00:00:00.000 UDP 28.104.0.1:53392 -> 198.28.0.2:53 1 64 1 2025-09-12 16:06:47.591 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60747 1 80 1 2025-09-12 16:06:47.591 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53392 1 109 1 2025-09-12 16:07:08.343 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-12 16:03:27.133 00:05:04.119 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-12 16:07:47.890 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38152 1 80 1 2025-09-12 16:03:40.358 00:05:10.017 OSPF 28.0.2.1:0 -> 224.0.0.5:0 45 3224 1 2025-09-12 16:07:47.890 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45004 1 109 1 2025-09-12 16:07:47.880 00:00:00.000 UDP 28.104.0.1:45004 -> 198.28.0.2:53 1 64 1 2025-09-12 16:07:47.880 00:00:00.000 UDP 28.104.0.1:38152 -> 198.28.0.2:53 1 64 1 2025-09-12 16:08:48.247 00:00:00.000 UDP 28.104.0.1:56418 -> 198.28.0.2:53 1 64 1 2025-09-12 16:08:48.247 00:00:00.000 UDP 28.104.0.1:32960 -> 198.28.0.2:53 1 64 1 2025-09-12 16:08:48.259 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32960 1 80 1 2025-09-12 16:08:48.259 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56418 1 109 1 2025-09-12 16:09:48.554 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59459 1 109 1 2025-09-12 16:09:48.554 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53781 1 80 1 2025-09-12 16:09:48.545 00:00:00.000 UDP 28.104.0.1:59459 -> 198.28.0.2:53 1 64 1 2025-09-12 16:09:48.545 00:00:00.000 UDP 28.104.0.1:53781 -> 198.28.0.2:53 1 64 1 2025-09-12 16:06:27.125 00:05:04.412 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-12 16:10:48.840 00:00:00.000 UDP 28.104.0.1:41297 -> 198.28.0.2:53 1 64 1 2025-09-12 16:10:48.840 00:00:00.000 UDP 28.104.0.1:41482 -> 198.28.0.2:53 1 64 1 2025-09-12 16:10:48.850 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41297 1 80 1 2025-09-12 16:10:48.850 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41482 1 109 1 2025-09-12 16:07:31.251 00:04:00.288 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-09-12 16:07:31.251 00:04:00.235 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-12 16:07:27.175 00:05:04.353 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-12 16:11:49.140 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33184 1 80 1 2025-09-12 16:11:49.140 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48547 1 109 1 2025-09-12 16:11:49.128 00:00:00.000 UDP 28.104.0.1:33184 -> 198.28.0.2:53 1 64 1 2025-09-12 16:11:49.128 00:00:00.000 UDP 28.104.0.1:48547 -> 198.28.0.2:53 1 64 1 2025-09-12 16:12:08.494 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-12 16:08:27.126 00:05:04.138 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-12 16:12:49.390 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41056 1 109 1 2025-09-12 16:12:49.390 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54593 1 80 1 2025-09-12 16:12:49.381 00:00:00.000 UDP 28.104.0.1:54593 -> 198.28.0.2:53 1 64 1 2025-09-12 16:12:49.381 00:00:00.000 UDP 28.104.0.1:41056 -> 198.28.0.2:53 1 64 1 2025-09-12 16:09:00.375 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2672 1 2025-09-12 16:09:27.138 00:05:04.117 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-12 16:13:49.678 00:00:00.000 UDP 28.104.0.1:44656 -> 198.28.0.2:53 1 64 1 2025-09-12 16:13:49.678 00:00:00.000 UDP 28.104.0.1:52886 -> 198.28.0.2:53 1 64 1 2025-09-12 16:13:49.690 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44656 1 80 1 2025-09-12 16:13:49.689 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52886 1 109 1 2025-09-12 16:14:49.977 00:00:00.000 UDP 28.104.0.1:35591 -> 198.28.0.2:53 1 64 1 2025-09-12 16:14:49.977 00:00:00.000 UDP 28.104.0.1:34278 -> 198.28.0.2:53 1 64 1 2025-09-12 16:14:49.987 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35591 1 109 1 2025-09-12 16:14:49.987 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34278 1 80 1 2025-09-12 16:15:55.862 00:00:00.000 UDP 28.104.0.1:42013 -> 198.28.0.2:53 1 64 1 2025-09-12 16:15:55.862 00:00:00.000 UDP 28.104.0.1:39633 -> 198.28.0.2:53 1 64 1 2025-09-12 16:15:55.872 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39633 1 80 1 2025-09-12 16:15:55.871 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42013 1 109 1 2025-09-12 16:12:31.253 00:04:00.287 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-09-12 16:12:31.253 00:04:00.233 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-12 16:12:27.126 00:05:04.414 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-12 16:16:56.196 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53927 1 80 1 2025-09-12 16:16:56.196 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57976 1 109 1 2025-09-12 16:16:56.187 00:00:00.000 UDP 28.104.0.1:57976 -> 198.28.0.2:53 1 64 1 2025-09-12 16:16:56.187 00:00:00.000 UDP 28.104.0.1:53927 -> 198.28.0.2:53 1 64 1 2025-09-12 16:17:08.509 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-12 16:13:27.177 00:05:04.354 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-12 16:17:56.501 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40348 1 109 1 2025-09-12 16:17:56.501 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59771 1 80 1 2025-09-12 16:17:56.491 00:00:00.000 UDP 28.104.0.1:59771 -> 198.28.0.2:53 1 64 1 2025-09-12 16:17:56.491 00:00:00.000 UDP 28.104.0.1:40348 -> 198.28.0.2:53 1 64 1 2025-09-12 16:14:27.127 00:05:04.137 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-12 16:14:20.377 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2528 1 2025-09-12 16:18:57.412 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51064 1 109 1 2025-09-12 16:18:57.412 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37332 1 80 1 2025-09-12 16:18:57.400 00:00:00.000 UDP 28.104.0.1:51064 -> 198.28.0.2:53 1 64 1 2025-09-12 16:18:57.399 00:00:00.000 UDP 28.104.0.1:37332 -> 198.28.0.2:53 1 64 1 2025-09-12 16:15:27.140 00:05:04.140 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-12 16:19:57.711 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49171 1 80 1 2025-09-12 16:19:57.712 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54141 1 109 1 2025-09-12 16:19:57.701 00:00:00.000 UDP 28.104.0.1:49171 -> 198.28.0.2:53 1 64 1 2025-09-12 16:19:57.701 00:00:00.000 UDP 28.104.0.1:54141 -> 198.28.0.2:53 1 64 1 2025-09-12 16:20:58.000 00:00:00.000 UDP 28.104.0.1:34809 -> 198.28.0.2:53 1 64 1 2025-09-12 16:20:58.000 00:00:00.000 UDP 28.104.0.1:52500 -> 198.28.0.2:53 1 64 1 2025-09-12 16:20:58.013 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34809 1 80 1 2025-09-12 16:20:58.024 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52500 1 109 1 2025-09-12 16:17:31.254 00:04:00.287 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-09-12 16:17:31.254 00:04:00.245 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-12 16:21:58.319 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59024 1 109 1 2025-09-12 16:21:58.319 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59219 1 80 1 2025-09-12 16:21:58.309 00:00:00.000 UDP 28.104.0.1:59024 -> 198.28.0.2:53 1 64 1 2025-09-12 16:21:58.309 00:00:00.000 UDP 28.104.0.1:59219 -> 198.28.0.2:53 1 64 1 2025-09-12 16:22:08.656 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-12 16:18:27.130 00:05:04.413 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-12 16:22:58.562 00:00:00.000 UDP 28.104.0.1:57166 -> 198.28.0.2:53 1 64 1 2025-09-12 16:22:58.562 00:00:00.000 UDP 28.104.0.1:51945 -> 198.28.0.2:53 1 64 1 2025-09-12 16:22:58.573 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51945 1 80 1 2025-09-12 16:22:58.573 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57166 1 109 1 2025-09-12 16:22:31.264 00:01:00.278 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-09-12 16:22:31.263 00:01:00.247 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-09-12 16:19:27.181 00:05:04.352 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-12 16:19:40.382 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2716 1 2025-09-12 16:23:58.867 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59192 1 109 1 2025-09-12 16:23:58.866 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55692 1 80 1 2025-09-12 16:23:58.856 00:00:00.000 UDP 28.104.0.1:55692 -> 198.28.0.2:53 1 64 1 2025-09-12 16:23:58.856 00:00:00.000 UDP 28.104.0.1:59192 -> 198.28.0.2:53 1 64 1 2025-09-12 16:20:27.130 00:05:04.144 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-12 16:24:59.204 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49380 1 109 1 2025-09-12 16:24:59.204 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45765 1 80 1 2025-09-12 16:24:59.193 00:00:00.000 UDP 28.104.0.1:49380 -> 198.28.0.2:53 1 64 1 2025-09-12 16:24:59.193 00:00:00.000 UDP 28.104.0.1:45765 -> 198.28.0.2:53 1 64 1 2025-09-12 16:21:27.141 00:05:04.124 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-12 16:25:59.482 00:00:00.000 UDP 28.104.0.1:50465 -> 198.28.0.2:53 1 64 1 2025-09-12 16:25:59.482 00:00:00.000 UDP 28.104.0.1:45962 -> 198.28.0.2:53 1 64 1 2025-09-12 16:25:59.495 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45962 1 80 1 2025-09-12 16:25:59.494 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50465 1 109 1 2025-09-12 16:24:31.263 00:02:00.278 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-09-12 16:24:31.263 00:02:00.238 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-09-12 16:26:59.786 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35054 1 109 1 2025-09-12 16:26:59.786 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50569 1 80 1 2025-09-12 16:26:59.777 00:00:00.000 UDP 28.104.0.1:50569 -> 198.28.0.2:53 1 64 1 2025-09-12 16:26:59.777 00:00:00.000 UDP 28.104.0.1:35054 -> 198.28.0.2:53 1 64 1 2025-09-12 16:27:08.712 00:00:00.025 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-12 16:28:00.076 00:00:00.000 UDP 28.104.0.1:48957 -> 198.28.0.2:53 1 64 1 2025-09-12 16:28:00.076 00:00:00.000 UDP 28.104.0.1:52202 -> 198.28.0.2:53 1 64 1 2025-09-12 16:28:00.087 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48957 1 80 1 2025-09-12 16:28:00.087 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52202 1 109 1 2025-09-12 16:27:31.264 00:01:00.288 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-09-12 16:27:31.264 00:01:00.247 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-09-12 16:24:27.130 00:05:04.418 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-12 16:29:00.386 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46629 1 80 1 2025-09-12 16:29:00.386 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42924 1 109 1 2025-09-12 16:29:00.377 00:00:00.000 UDP 28.104.0.1:46629 -> 198.28.0.2:53 1 64 1 2025-09-12 16:29:00.377 00:00:00.000 UDP 28.104.0.1:42924 -> 198.28.0.2:53 1 64 1 2025-09-12 16:25:00.387 00:05:10.010 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2584 1 2025-09-12 16:25:27.181 00:05:04.358 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-12 16:30:00.675 00:00:00.000 UDP 28.104.0.1:37795 -> 198.28.0.2:53 1 64 1 2025-09-12 16:30:00.675 00:00:00.000 UDP 28.104.0.1:37078 -> 198.28.0.2:53 1 64 1 2025-09-12 16:30:00.686 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37078 1 80 1 2025-09-12 16:30:00.686 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37795 1 109 1 2025-09-12 16:26:27.131 00:05:04.144 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-12 16:31:00.969 00:00:00.000 UDP 28.104.0.1:54396 -> 198.28.0.2:53 1 64 1 2025-09-12 16:31:00.969 00:00:00.000 UDP 28.104.0.1:53091 -> 198.28.0.2:53 1 64 1 2025-09-12 16:31:00.979 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54396 1 109 1 2025-09-12 16:31:00.979 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53091 1 80 1 2025-09-12 16:29:31.264 00:02:00.289 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-09-12 16:29:31.264 00:02:00.238 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-09-12 16:27:27.141 00:05:04.124 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-12 16:32:01.265 00:00:00.000 UDP 28.104.0.1:43617 -> 198.28.0.2:53 1 64 1 2025-09-12 16:32:01.265 00:00:00.000 UDP 28.104.0.1:37438 -> 198.28.0.2:53 1 64 1 2025-09-12 16:32:01.274 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37438 1 109 1 2025-09-12 16:32:01.275 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43617 1 80 1 2025-09-12 16:32:08.959 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-12 16:33:01.568 00:00:00.000 UDP 28.104.0.1:51932 -> 198.28.0.2:53 1 64 1 2025-09-12 16:33:01.568 00:00:00.000 UDP 28.104.0.1:58622 -> 198.28.0.2:53 1 64 1 2025-09-12 16:33:01.578 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51932 1 109 1 2025-09-12 16:33:01.579 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58622 1 80 1 2025-09-12 16:32:31.265 00:01:00.290 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-09-12 16:32:31.265 00:01:00.238 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-09-12 16:34:01.876 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56263 1 80 1 2025-09-12 16:34:01.876 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58861 1 109 1 2025-09-12 16:34:01.865 00:00:00.000 UDP 28.104.0.1:58861 -> 198.28.0.2:53 1 64 1 2025-09-12 16:34:01.865 00:00:00.000 UDP 28.104.0.1:56263 -> 198.28.0.2:53 1 64 1 2025-09-12 16:30:20.397 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 47 3400 1 2025-09-12 16:30:27.147 00:05:04.403 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-12 16:35:02.233 00:00:00.000 UDP 28.104.0.1:58650 -> 198.28.0.2:53 1 64 1 2025-09-12 16:35:02.233 00:00:00.000 UDP 28.104.0.1:52847 -> 198.28.0.2:53 1 64 1 2025-09-12 16:35:02.244 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58650 1 80 1 2025-09-12 16:35:02.246 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52847 1 109 1 2025-09-12 16:31:27.197 00:05:04.343 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-12 16:36:02.549 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57294 1 109 1 2025-09-12 16:36:02.549 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43992 1 80 1 2025-09-12 16:36:02.540 00:00:00.000 UDP 28.104.0.1:57294 -> 198.28.0.2:53 1 64 1 2025-09-12 16:36:02.540 00:00:00.000 UDP 28.104.0.1:43992 -> 198.28.0.2:53 1 64 1 2025-09-12 16:32:27.146 00:05:04.130 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-12 16:37:02.842 00:00:00.000 UDP 28.104.0.1:49591 -> 198.28.0.2:53 1 64 1 2025-09-12 16:37:02.842 00:00:00.000 UDP 28.104.0.1:51836 -> 198.28.0.2:53 1 64 1 2025-09-12 16:37:02.852 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49591 1 109 1 2025-09-12 16:37:02.852 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51836 1 80 1 2025-09-12 16:37:09.361 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-12 16:33:27.157 00:05:04.109 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-12 16:38:03.137 00:00:00.000 UDP 28.104.0.1:41403 -> 198.28.0.2:53 1 64 1 2025-09-12 16:38:03.138 00:00:00.000 UDP 28.104.0.1:40454 -> 198.28.0.2:53 1 64 1 2025-09-12 16:38:03.148 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41403 1 109 1 2025-09-12 16:38:03.149 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40454 1 80 1 2025-09-12 16:34:31.266 00:04:00.291 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-09-12 16:34:31.266 00:04:00.240 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-12 16:39:03.504 00:00:00.000 UDP 28.104.0.1:51524 -> 198.28.0.2:53 1 64 1 2025-09-12 16:39:03.504 00:00:00.000 UDP 28.104.0.1:47213 -> 198.28.0.2:53 1 64 1 2025-09-12 16:39:03.513 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51524 1 109 1 2025-09-12 16:39:03.513 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47213 1 80 1 2025-09-12 16:35:40.405 00:05:10.358 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2568 1 2025-09-12 16:40:03.819 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40294 1 109 1 2025-09-12 16:40:03.818 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37548 1 80 1 2025-09-12 16:40:03.808 00:00:00.000 UDP 28.104.0.1:40294 -> 198.28.0.2:53 1 64 1 2025-09-12 16:40:03.808 00:00:00.000 UDP 28.104.0.1:37548 -> 198.28.0.2:53 1 64 1 2025-09-12 16:36:27.156 00:05:04.395 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-12 16:41:04.128 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45631 1 80 1 2025-09-12 16:41:04.128 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38735 1 109 1 2025-09-12 16:41:04.116 00:00:00.000 UDP 28.104.0.1:38735 -> 198.28.0.2:53 1 64 1 2025-09-12 16:41:04.116 00:00:00.000 UDP 28.104.0.1:45631 -> 198.28.0.2:53 1 64 1 2025-09-12 16:37:27.198 00:05:04.343 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-12 16:42:04.417 00:00:00.000 UDP 28.104.0.1:54513 -> 198.28.0.2:53 1 64 1 2025-09-12 16:42:04.417 00:00:00.000 UDP 28.104.0.1:41769 -> 198.28.0.2:53 1 64 1 2025-09-12 16:42:04.428 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54513 1 80 1 2025-09-12 16:42:04.428 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41769 1 109 1 2025-09-12 16:42:08.914 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-12 16:38:27.150 00:05:04.128 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-12 16:43:04.734 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38872 1 109 1 2025-09-12 16:43:04.734 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44255 1 80 1 2025-09-12 16:43:04.724 00:00:00.000 UDP 28.104.0.1:38872 -> 198.28.0.2:53 1 64 1 2025-09-12 16:43:04.724 00:00:00.000 UDP 28.104.0.1:44255 -> 198.28.0.2:53 1 64 1 2025-09-12 16:39:31.266 00:04:00.291 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-09-12 16:39:31.266 00:04:00.239 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-12 16:39:27.159 00:05:04.108 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-12 16:44:04.991 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53875 1 80 1 2025-09-12 16:44:04.992 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59311 1 109 1 2025-09-12 16:44:04.983 00:00:00.000 UDP 28.104.0.1:59311 -> 198.28.0.2:53 1 64 1 2025-09-12 16:44:04.982 00:00:00.000 UDP 28.104.0.1:53875 -> 198.28.0.2:53 1 64 1 2025-09-12 16:45:05.254 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52751 1 109 1 2025-09-12 16:45:05.253 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53682 1 80 1 2025-09-12 16:45:05.243 00:00:00.000 UDP 28.104.0.1:53682 -> 198.28.0.2:53 1 64 1 2025-09-12 16:45:05.243 00:00:00.000 UDP 28.104.0.1:52751 -> 198.28.0.2:53 1 64 1 2025-09-12 16:41:00.413 00:05:10.014 OSPF 28.0.2.1:0 -> 224.0.0.5:0 34 2360 1 2025-09-12 16:46:05.507 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37426 1 80 1 2025-09-12 16:46:05.508 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57200 1 109 1 2025-09-12 16:46:05.497 00:00:00.000 UDP 28.104.0.1:57200 -> 198.28.0.2:53 1 64 1 2025-09-12 16:46:05.497 00:00:00.000 UDP 28.104.0.1:37426 -> 198.28.0.2:53 1 64 1 2025-09-12 16:42:27.149 00:05:04.404 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-12 16:47:06.601 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36621 1 80 1 2025-09-12 16:47:06.601 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59693 1 109 1 2025-09-12 16:47:06.592 00:00:00.000 UDP 28.104.0.1:36621 -> 198.28.0.2:53 1 64 1 2025-09-12 16:47:06.592 00:00:00.000 UDP 28.104.0.1:59693 -> 198.28.0.2:53 1 64 1 2025-09-12 16:47:08.868 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-12 16:43:27.199 00:05:04.344 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-12 16:48:06.922 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38971 1 80 1 2025-09-12 16:48:06.922 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38082 1 109 1 2025-09-12 16:48:06.912 00:00:00.000 UDP 28.104.0.1:38971 -> 198.28.0.2:53 1 64 1 2025-09-12 16:48:06.912 00:00:00.000 UDP 28.104.0.1:38082 -> 198.28.0.2:53 1 64 1 2025-09-12 16:44:31.267 00:04:00.290 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-09-12 16:44:31.267 00:04:00.239 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-12 16:44:27.149 00:05:04.128 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-12 16:49:07.226 00:00:00.000 UDP 28.104.0.1:36696 -> 198.28.0.2:53 1 64 1 2025-09-12 16:49:07.226 00:00:00.000 UDP 28.104.0.1:56977 -> 198.28.0.2:53 1 64 1 2025-09-12 16:49:07.236 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56977 1 109 1 2025-09-12 16:49:07.236 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36696 1 80 1 2025-09-12 16:45:27.160 00:05:04.109 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-12 16:50:08.233 00:00:00.000 UDP 28.104.0.1:48155 -> 198.28.0.2:53 1 64 1 2025-09-12 16:50:08.234 00:00:00.000 UDP 28.104.0.1:38292 -> 198.28.0.2:53 1 64 1 2025-09-12 16:50:08.244 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48155 1 80 1 2025-09-12 16:50:08.245 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38292 1 109 1 2025-09-12 16:46:20.427 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2940 1 2025-09-12 16:51:09.252 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40433 1 80 1 2025-09-12 16:51:09.253 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43744 1 109 1 2025-09-12 16:51:09.242 00:00:00.000 UDP 28.104.0.1:43744 -> 198.28.0.2:53 1 64 1 2025-09-12 16:51:09.241 00:00:00.000 UDP 28.104.0.1:40433 -> 198.28.0.2:53 1 64 1 2025-09-12 16:52:09.539 00:00:00.000 UDP 28.104.0.1:52024 -> 198.28.0.2:53 1 64 1 2025-09-12 16:52:09.539 00:00:00.000 UDP 28.104.0.1:50961 -> 198.28.0.2:53 1 64 1 2025-09-12 16:52:09.231 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-12 16:52:09.548 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50961 1 109 1 2025-09-12 16:52:09.548 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52024 1 80 1 2025-09-12 16:48:27.151 00:05:04.403 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-12 16:53:09.803 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46065 1 80 1 2025-09-12 16:53:09.803 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60362 1 109 1 2025-09-12 16:53:09.794 00:00:00.000 UDP 28.104.0.1:60362 -> 198.28.0.2:53 1 64 1 2025-09-12 16:53:09.794 00:00:00.000 UDP 28.104.0.1:46065 -> 198.28.0.2:53 1 64 1 2025-09-12 16:49:31.268 00:04:00.291 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-09-12 16:49:31.268 00:04:00.240 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-12 16:49:27.201 00:05:04.343 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-12 16:54:10.066 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60775 1 80 1 2025-09-12 16:54:10.066 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44749 1 109 1 2025-09-12 16:54:10.055 00:00:00.000 UDP 28.104.0.1:44749 -> 198.28.0.2:53 1 64 1 2025-09-12 16:54:10.055 00:00:00.000 UDP 28.104.0.1:60775 -> 198.28.0.2:53 1 64 1 2025-09-12 16:50:27.152 00:05:04.127 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-12 16:55:10.309 00:00:00.000 UDP 28.104.0.1:60794 -> 198.28.0.2:53 1 64 1 2025-09-12 16:55:10.309 00:00:00.000 UDP 28.104.0.1:45198 -> 198.28.0.2:53 1 64 1 2025-09-12 16:55:10.319 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45198 1 109 1 2025-09-12 16:55:10.319 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60794 1 80 1 2025-09-12 16:54:31.270 00:01:00.290 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-09-12 16:54:31.270 00:01:00.250 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-09-12 16:51:27.161 00:05:04.109 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-12 16:51:40.433 00:05:10.013 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2384 1 2025-09-12 16:56:10.609 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47120 1 109 1 2025-09-12 16:56:10.609 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59388 1 80 1 2025-09-12 16:56:10.599 00:00:00.000 UDP 28.104.0.1:47120 -> 198.28.0.2:53 1 64 1 2025-09-12 16:56:10.599 00:00:00.000 UDP 28.104.0.1:59388 -> 198.28.0.2:53 1 64 1 2025-09-12 16:57:10.900 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47801 1 80 1 2025-09-12 16:57:10.900 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46737 1 109 1 2025-09-12 16:57:09.415 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-12 16:57:10.891 00:00:00.000 UDP 28.104.0.1:47801 -> 198.28.0.2:53 1 64 1 2025-09-12 16:57:10.891 00:00:00.000 UDP 28.104.0.1:46737 -> 198.28.0.2:53 1 64 1 2025-09-12 16:58:11.215 00:00:00.000 UDP 28.104.0.1:50145 -> 198.28.0.2:53 1 64 1 2025-09-12 16:58:11.214 00:00:00.000 UDP 28.104.0.1:35077 -> 198.28.0.2:53 1 64 1 2025-09-12 16:58:11.225 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35077 1 80 1 2025-09-12 16:58:11.225 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50145 1 109 1 2025-09-12 16:56:31.270 00:02:00.290 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-09-12 16:56:31.270 00:02:00.241 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-09-12 16:54:27.152 00:05:04.404 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 Summary: total flows: 333, total bytes: 96459, total packets: 1424, avg bps: 200, avg pps: 0, avg bpp: 67 Time window: 2025-09-12 15:55:27 - 2025-09-12 16:59:31 Total flows processed: 333, passed: 333, Blocks skipped: 0, Bytes read: 34696 Sys: 0.0054s User: 0.0009s Wall: 0.0042s flows/second: 79322.1 Runtime: 0.0042s