Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-12 17:55:27.212 00:05:04.370 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-12 17:59:31.233 00:00:00.000 UDP 28.104.0.1:38348 -> 198.28.0.2:53 1 64 1 2025-09-12 17:59:31.232 00:00:00.000 UDP 28.104.0.1:57342 -> 198.28.0.2:53 1 64 1 2025-09-12 17:59:31.244 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38348 1 109 1 2025-09-12 17:59:31.244 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57342 1 80 1 2025-09-12 17:55:40.541 00:05:10.391 OSPF 28.0.2.1:0 -> 224.0.0.5:0 43 2960 1 2025-09-12 18:00:31.549 00:00:00.000 UDP 28.104.0.1:60732 -> 198.28.0.2:53 1 64 1 2025-09-12 18:00:31.549 00:00:00.000 UDP 28.104.0.1:41488 -> 198.28.0.2:53 1 64 1 2025-09-12 18:00:31.559 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60732 1 80 1 2025-09-12 18:00:31.559 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41488 1 109 1 2025-09-12 17:56:27.164 00:05:04.161 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-12 18:01:31.852 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55836 1 80 1 2025-09-12 18:01:31.852 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42062 1 109 1 2025-09-12 18:01:31.842 00:00:00.000 UDP 28.104.0.1:42062 -> 198.28.0.2:53 1 64 1 2025-09-12 17:57:27.175 00:05:04.140 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-12 18:01:31.842 00:00:00.000 UDP 28.104.0.1:55836 -> 198.28.0.2:53 1 64 1 2025-09-12 18:02:11.051 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-12 17:58:31.315 00:04:00.279 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-09-12 17:58:31.315 00:04:00.225 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-12 18:02:32.776 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49345 1 109 1 2025-09-12 18:02:32.776 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44469 1 80 1 2025-09-12 18:02:32.767 00:00:00.000 UDP 28.104.0.1:44469 -> 198.28.0.2:53 1 64 1 2025-09-12 18:02:32.767 00:00:00.000 UDP 28.104.0.1:49345 -> 198.28.0.2:53 1 64 1 2025-09-12 18:03:33.076 00:00:00.000 UDP 28.104.0.1:56314 -> 198.28.0.2:53 1 64 1 2025-09-12 18:03:33.076 00:00:00.000 UDP 28.104.0.1:42690 -> 198.28.0.2:53 1 64 1 2025-09-12 18:03:33.086 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56314 1 80 1 2025-09-12 18:03:33.086 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42690 1 109 1 2025-09-12 18:03:31.316 00:01:00.278 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-09-12 18:03:31.316 00:01:00.237 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-09-12 18:00:27.166 00:05:04.429 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-12 18:04:33.386 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44146 1 80 1 2025-09-12 18:04:33.386 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52083 1 109 1 2025-09-12 18:04:33.376 00:00:00.000 UDP 28.104.0.1:52083 -> 198.28.0.2:53 1 64 1 2025-09-12 18:04:33.376 00:00:00.000 UDP 28.104.0.1:44146 -> 198.28.0.2:53 1 64 1 2025-09-12 18:01:00.546 00:05:10.457 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2812 1 2025-09-12 18:05:33.689 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58227 1 109 1 2025-09-12 18:05:33.689 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34317 1 80 1 2025-09-12 18:01:27.216 00:05:04.367 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-12 18:05:33.678 00:00:00.000 UDP 28.104.0.1:58227 -> 198.28.0.2:53 1 64 1 2025-09-12 18:05:33.678 00:00:00.000 UDP 28.104.0.1:34317 -> 198.28.0.2:53 1 64 1 2025-09-12 18:02:27.169 00:05:04.158 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-12 18:06:33.970 00:00:00.000 UDP 28.104.0.1:58052 -> 198.28.0.2:53 1 64 1 2025-09-12 18:06:33.970 00:00:00.000 UDP 28.104.0.1:57446 -> 198.28.0.2:53 1 64 1 2025-09-12 18:06:33.981 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58052 1 80 1 2025-09-12 18:06:33.981 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57446 1 109 1 2025-09-12 18:07:10.817 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-12 18:05:31.316 00:02:00.278 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-09-12 18:05:31.316 00:02:00.228 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-09-12 18:07:34.268 00:00:00.000 UDP 28.104.0.1:60650 -> 198.28.0.2:53 1 64 1 2025-09-12 18:03:27.175 00:05:04.142 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-12 18:07:34.268 00:00:00.000 UDP 28.104.0.1:51476 -> 198.28.0.2:53 1 64 1 2025-09-12 18:07:34.279 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60650 1 109 1 2025-09-12 18:07:34.279 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51476 1 80 1 2025-09-12 18:08:34.556 00:00:00.000 UDP 28.104.0.1:60985 -> 198.28.0.2:53 1 64 1 2025-09-12 18:08:34.556 00:00:00.000 UDP 28.104.0.1:60150 -> 198.28.0.2:53 1 64 1 2025-09-12 18:08:34.566 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60150 1 80 1 2025-09-12 18:08:34.566 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60985 1 109 1 2025-09-12 18:09:34.821 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58721 1 80 1 2025-09-12 18:09:34.821 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42783 1 109 1 2025-09-12 18:08:31.317 00:01:00.278 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-09-12 18:08:31.317 00:01:00.227 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-09-12 18:09:34.810 00:00:00.000 UDP 28.104.0.1:58721 -> 198.28.0.2:53 1 64 1 2025-09-12 18:09:34.810 00:00:00.000 UDP 28.104.0.1:42783 -> 198.28.0.2:53 1 64 1 2025-09-12 18:06:20.555 00:05:10.009 OSPF 28.0.2.1:0 -> 224.0.0.5:0 34 2360 1 2025-09-12 18:10:35.120 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43451 1 109 1 2025-09-12 18:10:35.120 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35907 1 80 1 2025-09-12 18:06:27.166 00:05:04.428 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-12 18:10:35.110 00:00:00.000 UDP 28.104.0.1:35907 -> 198.28.0.2:53 1 64 1 2025-09-12 18:10:35.110 00:00:00.000 UDP 28.104.0.1:43451 -> 198.28.0.2:53 1 64 1 2025-09-12 18:07:27.215 00:05:04.369 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-12 18:11:35.406 00:00:00.000 UDP 28.104.0.1:38087 -> 198.28.0.2:53 1 64 1 2025-09-12 18:11:35.405 00:00:00.000 UDP 28.104.0.1:40693 -> 198.28.0.2:53 1 64 1 2025-09-12 18:11:35.416 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38087 1 80 1 2025-09-12 18:11:35.416 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40693 1 109 1 2025-09-12 18:12:10.919 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-12 18:10:31.319 00:02:00.278 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-09-12 18:10:31.319 00:02:00.227 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-09-12 18:12:35.701 00:00:00.000 UDP 28.104.0.1:49012 -> 198.28.0.2:53 1 64 1 2025-09-12 18:12:35.701 00:00:00.000 UDP 28.104.0.1:33570 -> 198.28.0.2:53 1 64 1 2025-09-12 18:08:27.165 00:05:04.164 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-12 18:12:35.711 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49012 1 80 1 2025-09-12 18:12:35.711 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33570 1 109 1 2025-09-12 18:09:27.175 00:05:04.143 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-12 18:13:36.007 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56654 1 80 1 2025-09-12 18:13:36.007 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39320 1 109 1 2025-09-12 18:13:35.997 00:00:00.000 UDP 28.104.0.1:39320 -> 198.28.0.2:53 1 64 1 2025-09-12 18:13:35.998 00:00:00.000 UDP 28.104.0.1:56654 -> 198.28.0.2:53 1 64 1 2025-09-12 18:13:31.319 00:01:00.277 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-09-12 18:13:31.319 00:01:00.226 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-09-12 18:14:36.571 00:00:00.000 UDP 28.104.0.1:41440 -> 198.28.0.2:53 1 64 1 2025-09-12 18:14:36.571 00:00:00.000 UDP 28.104.0.1:51719 -> 198.28.0.2:53 1 64 1 2025-09-12 18:14:36.583 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51719 1 109 1 2025-09-12 18:14:36.583 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41440 1 80 1 2025-09-12 18:15:36.913 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35852 1 109 1 2025-09-12 18:15:36.913 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55058 1 80 1 2025-09-12 18:15:36.903 00:00:00.000 UDP 28.104.0.1:55058 -> 198.28.0.2:53 1 64 1 2025-09-12 18:15:36.903 00:00:00.000 UDP 28.104.0.1:35852 -> 198.28.0.2:53 1 64 1 2025-09-12 18:11:40.566 00:05:10.010 OSPF 28.0.2.1:0 -> 224.0.0.5:0 42 3084 1 2025-09-12 18:12:27.167 00:05:04.428 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-12 18:16:37.207 00:00:00.000 UDP 28.104.0.1:43806 -> 198.28.0.2:53 1 64 1 2025-09-12 18:16:37.207 00:00:00.000 UDP 28.104.0.1:46162 -> 198.28.0.2:53 1 64 1 2025-09-12 18:16:37.218 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46162 1 80 1 2025-09-12 18:16:37.218 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43806 1 109 1 2025-09-12 18:17:10.961 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-12 18:15:31.320 00:02:00.278 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-09-12 18:15:31.320 00:02:00.226 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-09-12 18:13:27.218 00:05:04.367 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-12 18:17:37.529 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54385 1 109 1 2025-09-12 18:17:37.529 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54398 1 80 1 2025-09-12 18:17:37.520 00:00:00.000 UDP 28.104.0.1:54385 -> 198.28.0.2:53 1 64 1 2025-09-12 18:17:37.520 00:00:00.000 UDP 28.104.0.1:54398 -> 198.28.0.2:53 1 64 1 2025-09-12 18:14:27.169 00:05:04.161 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-12 18:18:37.782 00:00:00.000 UDP 28.104.0.1:34055 -> 198.28.0.2:53 1 64 1 2025-09-12 18:18:37.782 00:00:00.000 UDP 28.104.0.1:49245 -> 198.28.0.2:53 1 64 1 2025-09-12 18:18:37.793 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49245 1 80 1 2025-09-12 18:18:37.794 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34055 1 109 1 2025-09-12 18:18:31.321 00:01:00.278 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-09-12 18:18:31.321 00:01:00.227 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-09-12 18:15:27.180 00:05:04.141 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-12 18:19:38.113 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47505 1 109 1 2025-09-12 18:19:38.113 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49944 1 80 1 2025-09-12 18:19:38.103 00:00:00.000 UDP 28.104.0.1:49944 -> 198.28.0.2:53 1 64 1 2025-09-12 18:19:38.103 00:00:00.000 UDP 28.104.0.1:47505 -> 198.28.0.2:53 1 64 1 2025-09-12 18:20:38.403 00:00:00.000 UDP 28.104.0.1:46402 -> 198.28.0.2:53 1 64 1 2025-09-12 18:20:38.403 00:00:00.000 UDP 28.104.0.1:42350 -> 198.28.0.2:53 1 64 1 2025-09-12 18:20:38.413 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42350 1 109 1 2025-09-12 18:20:38.413 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46402 1 80 1 2025-09-12 18:17:00.575 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2384 1 2025-09-12 18:21:38.704 00:00:00.000 UDP 28.104.0.1:56952 -> 198.28.0.2:53 1 64 1 2025-09-12 18:21:38.704 00:00:00.000 UDP 28.104.0.1:52337 -> 198.28.0.2:53 1 64 1 2025-09-12 18:21:38.715 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52337 1 109 1 2025-09-12 18:21:38.716 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56952 1 80 1 2025-09-12 18:22:10.976 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-12 18:22:39.003 00:00:00.000 UDP 28.104.0.1:50914 -> 198.28.0.2:53 1 64 1 2025-09-12 18:22:39.003 00:00:00.000 UDP 28.104.0.1:55868 -> 198.28.0.2:53 1 64 1 2025-09-12 18:18:27.172 00:05:04.425 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-12 18:22:39.014 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55868 1 109 1 2025-09-12 18:22:39.015 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50914 1 80 1 2025-09-12 18:19:27.224 00:05:04.362 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-12 18:23:39.315 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34281 1 109 1 2025-09-12 18:23:39.315 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57657 1 80 1 2025-09-12 18:23:39.304 00:00:00.000 UDP 28.104.0.1:34281 -> 198.28.0.2:53 1 64 1 2025-09-12 18:23:39.304 00:00:00.000 UDP 28.104.0.1:57657 -> 198.28.0.2:53 1 64 1 2025-09-12 18:20:31.320 00:04:00.281 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-09-12 18:20:31.320 00:04:00.237 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-12 18:20:27.173 00:05:04.160 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-12 18:24:39.555 00:00:00.000 UDP 28.104.0.1:50429 -> 198.28.0.2:53 1 64 1 2025-09-12 18:24:39.554 00:00:00.000 UDP 28.104.0.1:39979 -> 198.28.0.2:53 1 64 1 2025-09-12 18:24:39.565 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39979 1 80 1 2025-09-12 18:24:39.565 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50429 1 109 1 2025-09-12 18:21:27.183 00:05:04.140 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-12 18:25:39.867 00:00:00.000 UDP 28.104.0.1:60178 -> 198.28.0.2:53 1 64 1 2025-09-12 18:25:39.866 00:00:00.000 UDP 28.104.0.1:39229 -> 198.28.0.2:53 1 64 1 2025-09-12 18:25:39.876 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39229 1 80 1 2025-09-12 18:25:39.879 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60178 1 109 1 2025-09-12 18:22:20.581 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2944 1 2025-09-12 18:26:40.186 00:00:00.000 UDP 28.104.0.1:47876 -> 198.28.0.2:53 1 64 1 2025-09-12 18:26:40.187 00:00:00.000 UDP 28.104.0.1:58093 -> 198.28.0.2:53 1 64 1 2025-09-12 18:26:40.197 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47876 1 80 1 2025-09-12 18:26:40.198 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58093 1 109 1 2025-09-12 18:27:11.044 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-12 18:27:40.479 00:00:00.000 UDP 28.104.0.1:53073 -> 198.28.0.2:53 1 64 1 2025-09-12 18:27:40.479 00:00:00.000 UDP 28.104.0.1:39861 -> 198.28.0.2:53 1 64 1 2025-09-12 18:27:40.490 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39861 1 109 1 2025-09-12 18:27:40.490 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53073 1 80 1 2025-09-12 18:24:27.174 00:05:04.424 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-12 18:28:40.742 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60332 1 80 1 2025-09-12 18:28:40.742 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49191 1 109 1 2025-09-12 18:28:40.730 00:00:00.000 UDP 28.104.0.1:60332 -> 198.28.0.2:53 1 64 1 2025-09-12 18:28:40.730 00:00:00.000 UDP 28.104.0.1:49191 -> 198.28.0.2:53 1 64 1 2025-09-12 18:25:31.324 00:04:00.280 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-09-12 18:25:31.324 00:04:00.234 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-12 18:25:27.225 00:05:04.376 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-12 18:29:41.062 00:00:00.000 UDP 28.104.0.1:42708 -> 198.28.0.2:53 1 64 1 2025-09-12 18:29:41.061 00:00:00.000 UDP 28.104.0.1:46295 -> 198.28.0.2:53 1 64 1 2025-09-12 18:29:41.072 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46295 1 80 1 2025-09-12 18:29:41.072 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42708 1 109 1 2025-09-12 18:26:27.174 00:05:04.160 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-12 18:30:41.367 00:00:00.000 UDP 28.104.0.1:44573 -> 198.28.0.2:53 1 64 1 2025-09-12 18:30:41.367 00:00:00.000 UDP 28.104.0.1:51310 -> 198.28.0.2:53 1 64 1 2025-09-12 18:30:41.376 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51310 1 109 1 2025-09-12 18:30:41.376 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44573 1 80 1 2025-09-12 18:30:31.324 00:01:00.281 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-09-12 18:30:31.324 00:01:00.234 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-09-12 18:27:27.184 00:05:04.141 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-12 18:31:41.660 00:00:00.000 UDP 28.104.0.1:43824 -> 198.28.0.2:53 1 64 1 2025-09-12 18:31:41.660 00:00:00.000 UDP 28.104.0.1:39672 -> 198.28.0.2:53 1 64 1 2025-09-12 18:31:41.671 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39672 1 109 1 2025-09-12 18:31:41.670 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43824 1 80 1 2025-09-12 18:27:40.585 00:05:10.012 OSPF 28.0.2.1:0 -> 224.0.0.5:0 43 3136 1 2025-09-12 18:32:11.793 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-12 18:32:41.973 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38954 1 109 1 2025-09-12 18:32:41.972 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40780 1 80 1 2025-09-12 18:32:41.962 00:00:00.000 UDP 28.104.0.1:38954 -> 198.28.0.2:53 1 64 1 2025-09-12 18:32:41.962 00:00:00.000 UDP 28.104.0.1:40780 -> 198.28.0.2:53 1 64 1 2025-09-12 18:33:42.264 00:00:00.000 UDP 28.104.0.1:33734 -> 198.28.0.2:53 1 64 1 2025-09-12 18:33:42.262 00:00:00.000 UDP 28.104.0.1:55118 -> 198.28.0.2:53 1 64 1 2025-09-12 18:33:42.272 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55118 1 80 1 2025-09-12 18:33:42.274 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33734 1 109 1 2025-09-12 18:32:31.326 00:02:00.280 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-09-12 18:32:31.326 00:02:00.234 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-09-12 18:30:27.175 00:05:04.425 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-12 18:34:43.118 00:00:00.000 UDP 28.104.0.1:33960 -> 198.28.0.2:53 1 64 1 2025-09-12 18:34:43.118 00:00:00.000 UDP 28.104.0.1:54944 -> 198.28.0.2:53 1 64 1 2025-09-12 18:34:43.129 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54944 1 109 1 2025-09-12 18:34:43.129 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33960 1 80 1 2025-09-12 18:31:27.225 00:05:04.365 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-12 18:35:43.380 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51114 1 109 1 2025-09-12 18:35:43.379 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58508 1 80 1 2025-09-12 18:35:43.368 00:00:00.000 UDP 28.104.0.1:58508 -> 198.28.0.2:53 1 64 1 2025-09-12 18:35:43.369 00:00:00.000 UDP 28.104.0.1:51114 -> 198.28.0.2:53 1 64 1 2025-09-12 18:32:27.176 00:05:04.161 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-12 18:35:31.326 00:01:00.281 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-09-12 18:35:31.326 00:01:00.238 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-09-12 18:36:43.691 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60157 1 80 1 2025-09-12 18:36:43.692 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39289 1 109 1 2025-09-12 18:36:43.681 00:00:00.000 UDP 28.104.0.1:60157 -> 198.28.0.2:53 1 64 1 2025-09-12 18:36:43.682 00:00:00.000 UDP 28.104.0.1:39289 -> 198.28.0.2:53 1 64 1 2025-09-12 18:37:11.550 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-12 18:33:00.598 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2424 1 2025-09-12 18:33:27.186 00:05:04.143 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-12 18:37:43.978 00:00:00.000 UDP 28.104.0.1:40714 -> 198.28.0.2:53 1 64 1 2025-09-12 18:37:43.978 00:00:00.000 UDP 28.104.0.1:39145 -> 198.28.0.2:53 1 64 1 2025-09-12 18:37:43.988 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40714 1 109 1 2025-09-12 18:37:43.988 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39145 1 80 1 2025-09-12 18:38:44.298 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54823 1 109 1 2025-09-12 18:38:44.298 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32911 1 80 1 2025-09-12 18:38:44.287 00:00:00.000 UDP 28.104.0.1:32911 -> 198.28.0.2:53 1 64 1 2025-09-12 18:38:44.287 00:00:00.000 UDP 28.104.0.1:54823 -> 198.28.0.2:53 1 64 1 2025-09-12 18:37:31.326 00:02:00.280 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-09-12 18:37:31.326 00:02:00.237 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-09-12 18:39:44.636 00:00:00.000 UDP 28.104.0.1:42142 -> 198.28.0.2:53 1 64 1 2025-09-12 18:39:44.636 00:00:00.000 UDP 28.104.0.1:40936 -> 198.28.0.2:53 1 64 1 2025-09-12 18:39:44.646 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42142 1 109 1 2025-09-12 18:39:44.646 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40936 1 80 1 2025-09-12 18:36:27.177 00:05:04.424 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-12 18:40:44.910 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60130 1 109 1 2025-09-12 18:40:44.910 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47672 1 80 1 2025-09-12 18:40:44.899 00:00:00.000 UDP 28.104.0.1:60130 -> 198.28.0.2:53 1 64 1 2025-09-12 18:40:44.899 00:00:00.000 UDP 28.104.0.1:47672 -> 198.28.0.2:53 1 64 1 2025-09-12 18:40:31.328 00:01:00.278 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-09-12 18:40:31.328 00:01:00.235 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-09-12 18:37:27.227 00:05:04.364 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-12 18:41:45.216 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35072 1 109 1 2025-09-12 18:41:45.216 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49828 1 80 1 2025-09-12 18:41:45.207 00:00:00.000 UDP 28.104.0.1:35072 -> 198.28.0.2:53 1 64 1 2025-09-12 18:41:45.207 00:00:00.000 UDP 28.104.0.1:49828 -> 198.28.0.2:53 1 64 1 2025-09-12 18:42:11.573 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-12 18:38:20.604 00:05:00.955 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2828 1 2025-09-12 18:38:27.176 00:05:04.164 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-12 18:42:45.507 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55391 1 109 1 2025-09-12 18:42:45.507 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40939 1 80 1 2025-09-12 18:42:45.498 00:00:00.000 UDP 28.104.0.1:55391 -> 198.28.0.2:53 1 64 1 2025-09-12 18:42:45.498 00:00:00.000 UDP 28.104.0.1:40939 -> 198.28.0.2:53 1 64 1 2025-09-12 18:39:27.187 00:05:04.144 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-12 18:43:45.799 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52479 1 80 1 2025-09-12 18:43:45.799 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60559 1 109 1 2025-09-12 18:43:45.788 00:00:00.000 UDP 28.104.0.1:60559 -> 198.28.0.2:53 1 64 1 2025-09-12 18:43:45.788 00:00:00.000 UDP 28.104.0.1:52479 -> 198.28.0.2:53 1 64 1 2025-09-12 18:42:31.329 00:02:00.278 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-09-12 18:42:31.329 00:02:00.235 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-09-12 18:44:46.092 00:00:00.000 UDP 28.104.0.1:39487 -> 198.28.0.2:53 1 64 1 2025-09-12 18:44:46.092 00:00:00.000 UDP 28.104.0.1:56315 -> 198.28.0.2:53 1 64 1 2025-09-12 18:44:46.104 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56315 1 109 1 2025-09-12 18:44:46.115 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39487 1 80 1 2025-09-12 18:45:46.415 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37293 1 109 1 2025-09-12 18:45:46.415 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51197 1 80 1 2025-09-12 18:45:46.406 00:00:00.000 UDP 28.104.0.1:37293 -> 198.28.0.2:53 1 64 1 2025-09-12 18:45:46.406 00:00:00.000 UDP 28.104.0.1:51197 -> 198.28.0.2:53 1 64 1 2025-09-12 18:42:27.179 00:05:04.435 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-12 18:45:31.330 00:01:00.278 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-09-12 18:45:31.330 00:01:00.235 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-09-12 18:46:46.716 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45467 1 109 1 2025-09-12 18:46:46.716 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48946 1 80 1 2025-09-12 18:46:46.705 00:00:00.000 UDP 28.104.0.1:45467 -> 198.28.0.2:53 1 64 1 2025-09-12 18:46:46.705 00:00:00.000 UDP 28.104.0.1:48946 -> 198.28.0.2:53 1 64 1 2025-09-12 18:47:11.522 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-12 18:43:27.227 00:05:04.377 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-12 18:43:30.610 00:05:10.014 OSPF 28.0.2.1:0 -> 224.0.0.5:0 34 2304 1 2025-09-12 18:47:47.052 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58503 1 109 1 2025-09-12 18:47:47.048 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49976 1 80 1 2025-09-12 18:47:47.042 00:00:00.000 UDP 28.104.0.1:58503 -> 198.28.0.2:53 1 64 1 2025-09-12 18:47:47.038 00:00:00.000 UDP 28.104.0.1:49976 -> 198.28.0.2:53 1 64 1 2025-09-12 18:44:27.179 00:05:04.163 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-12 18:48:47.345 00:00:00.000 UDP 28.104.0.1:50714 -> 198.28.0.2:53 1 64 1 2025-09-12 18:48:47.345 00:00:00.000 UDP 28.104.0.1:51431 -> 198.28.0.2:53 1 64 1 2025-09-12 18:48:47.356 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51431 1 109 1 2025-09-12 18:48:47.356 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50714 1 80 1 2025-09-12 18:47:31.331 00:02:00.278 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-09-12 18:47:31.331 00:02:00.236 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-09-12 18:45:27.188 00:05:04.143 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-12 18:49:47.648 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38235 1 80 1 2025-09-12 18:49:47.648 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50124 1 109 1 2025-09-12 18:49:47.637 00:00:00.000 UDP 28.104.0.1:38235 -> 198.28.0.2:53 1 64 1 2025-09-12 18:49:47.638 00:00:00.000 UDP 28.104.0.1:50124 -> 198.28.0.2:53 1 64 1 2025-09-12 18:50:47.905 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49362 1 80 1 2025-09-12 18:50:47.905 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57250 1 109 1 2025-09-12 18:50:47.894 00:00:00.000 UDP 28.104.0.1:57250 -> 198.28.0.2:53 1 64 1 2025-09-12 18:50:47.894 00:00:00.000 UDP 28.104.0.1:49362 -> 198.28.0.2:53 1 64 1 2025-09-12 18:50:31.331 00:01:00.288 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-09-12 18:50:31.331 00:01:00.235 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-09-12 18:51:48.205 00:00:00.000 UDP 28.104.0.1:33066 -> 198.28.0.2:53 1 64 1 2025-09-12 18:51:48.206 00:00:00.000 UDP 28.104.0.1:33455 -> 198.28.0.2:53 1 64 1 2025-09-12 18:51:48.214 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33066 1 80 1 2025-09-12 18:51:48.216 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33455 1 109 1 2025-09-12 18:52:11.898 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-12 18:48:27.179 00:05:04.436 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-12 18:52:48.746 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54616 1 109 1 2025-09-12 18:52:48.746 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53348 1 80 1 2025-09-12 18:52:48.735 00:00:00.000 UDP 28.104.0.1:54616 -> 198.28.0.2:53 1 64 1 2025-09-12 18:52:48.736 00:00:00.000 UDP 28.104.0.1:53348 -> 198.28.0.2:53 1 64 1 2025-09-12 18:48:50.623 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2648 1 2025-09-12 18:49:27.231 00:05:04.375 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-12 18:53:49.056 00:00:00.000 UDP 28.104.0.1:34516 -> 198.28.0.2:53 1 64 1 2025-09-12 18:53:49.056 00:00:00.000 UDP 28.104.0.1:56272 -> 198.28.0.2:53 1 64 1 2025-09-12 18:53:49.065 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34516 1 109 1 2025-09-12 18:53:49.065 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56272 1 80 1 2025-09-12 18:52:31.331 00:02:00.278 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-09-12 18:50:27.182 00:05:04.164 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-12 18:54:49.327 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60626 1 80 1 2025-09-12 18:54:49.327 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51998 1 109 1 2025-09-12 18:54:49.317 00:00:00.000 UDP 28.104.0.1:51998 -> 198.28.0.2:53 1 64 1 2025-09-12 18:54:49.317 00:00:00.000 UDP 28.104.0.1:60626 -> 198.28.0.2:53 1 64 1 2025-09-12 18:51:27.193 00:05:04.145 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-12 18:55:49.608 00:00:00.000 UDP 28.104.0.1:58714 -> 198.28.0.2:53 1 64 1 2025-09-12 18:55:49.608 00:00:00.000 UDP 28.104.0.1:43119 -> 198.28.0.2:53 1 64 1 2025-09-12 18:55:49.618 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58714 1 109 1 2025-09-12 18:55:49.618 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43119 1 80 1 2025-09-12 18:55:31.336 00:01:00.274 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-09-12 18:52:31.331 00:04:00.245 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-12 18:56:49.907 00:00:00.000 UDP 28.104.0.1:41757 -> 198.28.0.2:53 1 64 1 2025-09-12 18:56:49.908 00:00:00.000 UDP 28.104.0.1:42436 -> 198.28.0.2:53 1 64 1 2025-09-12 18:56:49.918 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42436 1 80 1 2025-09-12 18:56:49.918 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41757 1 109 1 2025-09-12 18:57:11.820 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-12 18:57:50.224 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59645 1 109 1 2025-09-12 18:57:50.224 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57485 1 80 1 2025-09-12 18:57:50.214 00:00:00.000 UDP 28.104.0.1:57485 -> 198.28.0.2:53 1 64 1 2025-09-12 18:57:50.214 00:00:00.000 UDP 28.104.0.1:59645 -> 198.28.0.2:53 1 64 1 2025-09-12 18:54:10.629 00:05:10.012 OSPF 28.0.2.1:0 -> 224.0.0.5:0 47 3368 1 2025-09-12 18:54:27.185 00:05:04.433 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-12 18:58:50.517 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53445 1 80 1 2025-09-12 18:58:50.517 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53827 1 109 1 2025-09-12 18:58:50.507 00:00:00.000 UDP 28.104.0.1:53445 -> 198.28.0.2:53 1 64 1 2025-09-12 18:58:50.507 00:00:00.000 UDP 28.104.0.1:53827 -> 198.28.0.2:53 1 64 1 Summary: total flows: 345, total bytes: 99330, total packets: 1461, avg bps: 206, avg pps: 0, avg bpp: 67 Time window: 2025-09-12 17:55:27 - 2025-09-12 18:59:31 Total flows processed: 345, passed: 345, Blocks skipped: 0, Bytes read: 35944 Sys: 0.0023s User: 0.0046s Wall: 0.0051s flows/second: 68140.7 Runtime: 0.0051s