Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-25 03:59:18.830 00:00:00.000 UDP 28.104.0.1:43093 -> 198.28.0.2:53 1 64 1 2025-09-25 03:59:18.830 00:00:00.000 UDP 28.104.0.1:45523 -> 198.28.0.2:53 1 64 1 2025-09-25 03:59:18.841 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45523 1 80 1 2025-09-25 03:59:18.841 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43093 1 109 1 2025-09-25 04:00:19.142 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41620 1 80 1 2025-09-25 04:00:19.142 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40758 1 109 1 2025-09-25 04:00:19.132 00:00:00.000 UDP 28.104.0.1:40758 -> 198.28.0.2:53 1 64 1 2025-09-25 04:00:19.132 00:00:00.000 UDP 28.104.0.1:41620 -> 198.28.0.2:53 1 64 1 2025-09-25 04:01:19.432 00:00:00.000 UDP 28.104.0.1:49897 -> 198.28.0.2:53 1 64 1 2025-09-25 04:01:19.432 00:00:00.000 UDP 28.104.0.1:55318 -> 198.28.0.2:53 1 64 1 2025-09-25 04:01:19.441 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55318 1 80 1 2025-09-25 04:01:19.441 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49897 1 109 1 2025-09-25 04:02:22.523 00:00:00.000 UDP 28.104.0.1:52988 -> 198.28.0.2:53 1 64 1 2025-09-25 04:02:22.523 00:00:00.000 UDP 28.104.0.1:59990 -> 198.28.0.2:53 1 64 1 2025-09-25 04:02:22.533 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59990 1 109 1 2025-09-25 04:02:22.534 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52988 1 80 1 2025-09-25 03:57:40.728 00:05:52.182 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-25 03:58:32.855 00:05:07.636 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-25 03:58:32.855 00:05:07.887 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-25 03:58:55.321 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2768 1 2025-09-25 04:03:09.290 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-25 04:03:22.815 00:00:00.000 UDP 28.104.0.1:52616 -> 198.28.0.2:53 1 64 1 2025-09-25 04:03:22.815 00:00:00.000 UDP 28.104.0.1:41890 -> 198.28.0.2:53 1 64 1 2025-09-25 04:03:22.827 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41890 1 80 1 2025-09-25 04:03:22.828 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52616 1 109 1 2025-09-25 03:58:40.479 00:06:00.222 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-09-25 03:59:32.865 00:05:07.629 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-25 03:58:40.479 00:06:00.046 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-09-25 04:04:23.119 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52028 1 80 1 2025-09-25 04:04:23.119 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44710 1 109 1 2025-09-25 04:04:23.111 00:00:00.000 UDP 28.104.0.1:44710 -> 198.28.0.2:53 1 64 1 2025-09-25 04:04:23.111 00:00:00.000 UDP 28.104.0.1:52028 -> 198.28.0.2:53 1 64 1 2025-09-25 04:05:23.401 00:00:00.000 UDP 28.104.0.1:43920 -> 198.28.0.2:53 1 64 1 2025-09-25 04:05:23.401 00:00:00.000 UDP 28.104.0.1:38506 -> 198.28.0.2:53 1 64 1 2025-09-25 04:05:23.413 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38506 1 109 1 2025-09-25 04:05:23.413 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43920 1 80 1 2025-09-25 04:06:23.697 00:00:00.000 UDP 28.104.0.1:51199 -> 198.28.0.2:53 1 64 1 2025-09-25 04:06:23.697 00:00:00.000 UDP 28.104.0.1:37514 -> 198.28.0.2:53 1 64 1 2025-09-25 04:06:23.708 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37514 1 80 1 2025-09-25 04:06:23.708 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51199 1 109 1 2025-09-25 04:07:24.060 00:00:00.000 UDP 28.104.0.1:39882 -> 198.28.0.2:53 1 64 1 2025-09-25 04:07:24.060 00:00:00.000 UDP 28.104.0.1:60892 -> 198.28.0.2:53 1 64 1 2025-09-25 04:07:24.070 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39882 1 109 1 2025-09-25 04:07:24.070 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60892 1 80 1 2025-09-25 04:08:09.256 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-25 04:08:24.446 00:00:00.000 UDP 28.104.0.1:40921 -> 198.28.0.2:53 1 64 1 2025-09-25 04:08:24.446 00:00:00.000 UDP 28.104.0.1:37574 -> 198.28.0.2:53 1 64 1 2025-09-25 04:04:15.326 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2692 1 2025-09-25 04:08:24.456 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37574 1 109 1 2025-09-25 04:08:24.456 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40921 1 80 1 2025-09-25 04:03:40.731 00:05:52.178 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-25 04:04:32.856 00:05:07.646 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-25 04:04:32.856 00:05:07.898 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-25 04:09:24.766 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34740 1 109 1 2025-09-25 04:09:24.766 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53666 1 80 1 2025-09-25 04:09:24.756 00:00:00.000 UDP 28.104.0.1:53666 -> 198.28.0.2:53 1 64 1 2025-09-25 04:09:24.755 00:00:00.000 UDP 28.104.0.1:34740 -> 198.28.0.2:53 1 64 1 2025-09-25 04:05:32.866 00:05:07.625 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-25 04:10:25.072 00:00:00.000 UDP 28.104.0.1:36001 -> 198.28.0.2:53 1 64 1 2025-09-25 04:10:25.072 00:00:00.000 UDP 28.104.0.1:58791 -> 198.28.0.2:53 1 64 1 2025-09-25 04:10:25.084 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36001 1 109 1 2025-09-25 04:10:25.084 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58791 1 80 1 2025-09-25 04:05:40.490 00:06:00.213 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-09-25 04:05:40.490 00:06:00.036 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-09-25 04:11:25.383 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56843 1 109 1 2025-09-25 04:11:25.383 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49183 1 80 1 2025-09-25 04:11:25.372 00:00:00.000 UDP 28.104.0.1:56843 -> 198.28.0.2:53 1 64 1 2025-09-25 04:11:25.372 00:00:00.000 UDP 28.104.0.1:49183 -> 198.28.0.2:53 1 64 1 2025-09-25 04:12:25.698 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50025 1 109 1 2025-09-25 04:12:25.699 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47976 1 80 1 2025-09-25 04:12:25.687 00:00:00.000 UDP 28.104.0.1:47976 -> 198.28.0.2:53 1 64 1 2025-09-25 04:12:25.687 00:00:00.000 UDP 28.104.0.1:50025 -> 198.28.0.2:53 1 64 1 2025-09-25 04:13:09.270 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-25 04:13:25.996 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59513 1 109 1 2025-09-25 04:13:25.996 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44638 1 80 1 2025-09-25 04:13:25.986 00:00:00.000 UDP 28.104.0.1:59513 -> 198.28.0.2:53 1 64 1 2025-09-25 04:13:25.986 00:00:00.000 UDP 28.104.0.1:44638 -> 198.28.0.2:53 1 64 1 2025-09-25 04:09:35.333 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2648 1 2025-09-25 04:14:26.284 00:00:00.000 UDP 28.104.0.1:34591 -> 198.28.0.2:53 1 64 1 2025-09-25 04:14:26.284 00:00:00.000 UDP 28.104.0.1:55543 -> 198.28.0.2:53 1 64 1 2025-09-25 04:14:26.295 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34591 1 109 1 2025-09-25 04:14:26.295 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55543 1 80 1 2025-09-25 04:09:40.743 00:05:52.166 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-25 04:10:32.858 00:05:07.643 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-25 04:10:32.858 00:05:07.897 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-25 04:15:26.579 00:00:00.000 UDP 28.104.0.1:37973 -> 198.28.0.2:53 1 64 1 2025-09-25 04:15:26.579 00:00:00.000 UDP 28.104.0.1:56859 -> 198.28.0.2:53 1 64 1 2025-09-25 04:15:26.589 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37973 1 109 1 2025-09-25 04:15:26.589 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56859 1 80 1 2025-09-25 04:11:32.868 00:05:07.624 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-25 04:16:26.910 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42142 1 109 1 2025-09-25 04:16:26.910 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40268 1 80 1 2025-09-25 04:16:26.900 00:00:00.000 UDP 28.104.0.1:42142 -> 198.28.0.2:53 1 64 1 2025-09-25 04:16:26.900 00:00:00.000 UDP 28.104.0.1:40268 -> 198.28.0.2:53 1 64 1 2025-09-25 04:17:27.210 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53322 1 109 1 2025-09-25 04:17:27.210 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59146 1 80 1 2025-09-25 04:17:27.199 00:00:00.000 UDP 28.104.0.1:53322 -> 198.28.0.2:53 1 64 1 2025-09-25 04:17:27.199 00:00:00.000 UDP 28.104.0.1:59146 -> 198.28.0.2:53 1 64 1 2025-09-25 04:12:40.491 00:06:00.217 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-09-25 04:12:40.491 00:06:00.035 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-09-25 04:18:09.490 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-25 04:18:33.698 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56751 1 80 1 2025-09-25 04:18:33.698 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50717 1 109 1 2025-09-25 04:18:33.687 00:00:00.000 UDP 28.104.0.1:50717 -> 198.28.0.2:53 1 64 1 2025-09-25 04:18:33.687 00:00:00.000 UDP 28.104.0.1:56751 -> 198.28.0.2:53 1 64 1 2025-09-25 04:14:55.341 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 42 3012 1 2025-09-25 04:19:33.986 00:00:00.000 UDP 28.104.0.1:37886 -> 198.28.0.2:53 1 64 1 2025-09-25 04:19:33.986 00:00:00.000 UDP 28.104.0.1:56338 -> 198.28.0.2:53 1 64 1 2025-09-25 04:19:33.997 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56338 1 109 1 2025-09-25 04:19:33.997 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37886 1 80 1 2025-09-25 04:20:34.280 00:00:00.000 UDP 28.104.0.1:50455 -> 198.28.0.2:53 1 64 1 2025-09-25 04:15:40.745 00:05:52.165 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-25 04:20:34.280 00:00:00.000 UDP 28.104.0.1:54329 -> 198.28.0.2:53 1 64 1 2025-09-25 04:20:34.290 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54329 1 80 1 2025-09-25 04:20:34.290 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50455 1 109 1 2025-09-25 04:16:32.859 00:05:07.652 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-25 04:16:32.859 00:05:07.899 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-25 04:21:34.933 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53522 1 80 1 2025-09-25 04:21:34.934 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39596 1 109 1 2025-09-25 04:21:34.923 00:00:00.000 UDP 28.104.0.1:39596 -> 198.28.0.2:53 1 64 1 2025-09-25 04:21:34.923 00:00:00.000 UDP 28.104.0.1:53522 -> 198.28.0.2:53 1 64 1 2025-09-25 04:17:32.869 00:05:07.632 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-25 04:22:35.249 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43870 1 80 1 2025-09-25 04:22:35.249 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55490 1 109 1 2025-09-25 04:22:35.239 00:00:00.000 UDP 28.104.0.1:43870 -> 198.28.0.2:53 1 64 1 2025-09-25 04:22:35.239 00:00:00.000 UDP 28.104.0.1:55490 -> 198.28.0.2:53 1 64 1 2025-09-25 04:23:09.570 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-25 04:23:35.507 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42078 1 80 1 2025-09-25 04:23:35.507 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41838 1 109 1 2025-09-25 04:23:35.497 00:00:00.000 UDP 28.104.0.1:41838 -> 198.28.0.2:53 1 64 1 2025-09-25 04:23:35.497 00:00:00.000 UDP 28.104.0.1:42078 -> 198.28.0.2:53 1 64 1 2025-09-25 04:20:15.346 00:05:10.169 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2576 1 2025-09-25 04:24:35.795 00:00:00.000 UDP 28.104.0.1:58943 -> 198.28.0.2:53 1 64 1 2025-09-25 04:24:35.795 00:00:00.000 UDP 28.104.0.1:39058 -> 198.28.0.2:53 1 64 1 2025-09-25 04:24:35.805 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58943 1 80 1 2025-09-25 04:24:35.805 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39058 1 109 1 2025-09-25 04:19:40.499 00:06:00.049 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-09-25 04:19:40.499 00:06:00.218 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-09-25 04:25:36.109 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48087 1 109 1 2025-09-25 04:25:36.108 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35415 1 80 1 2025-09-25 04:25:36.099 00:00:00.000 UDP 28.104.0.1:48087 -> 198.28.0.2:53 1 64 1 2025-09-25 04:25:36.098 00:00:00.000 UDP 28.104.0.1:35415 -> 198.28.0.2:53 1 64 1 2025-09-25 04:26:36.398 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58869 1 80 1 2025-09-25 04:26:36.398 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48272 1 109 1 2025-09-25 04:21:40.748 00:05:52.165 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-25 04:26:36.388 00:00:00.000 UDP 28.104.0.1:48272 -> 198.28.0.2:53 1 64 1 2025-09-25 04:26:36.388 00:00:00.000 UDP 28.104.0.1:58869 -> 198.28.0.2:53 1 64 1 2025-09-25 04:22:32.861 00:05:07.657 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-25 04:22:32.861 00:05:07.898 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-25 04:27:36.659 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44359 1 109 1 2025-09-25 04:27:36.659 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43607 1 80 1 2025-09-25 04:27:36.650 00:00:00.000 UDP 28.104.0.1:43607 -> 198.28.0.2:53 1 64 1 2025-09-25 04:27:36.650 00:00:00.000 UDP 28.104.0.1:44359 -> 198.28.0.2:53 1 64 1 2025-09-25 04:23:32.871 00:05:07.637 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-25 04:28:09.709 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-25 04:28:36.944 00:00:00.000 UDP 28.104.0.1:42276 -> 198.28.0.2:53 1 64 1 2025-09-25 04:28:36.944 00:00:00.000 UDP 28.104.0.1:48747 -> 198.28.0.2:53 1 64 1 2025-09-25 04:28:36.954 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42276 1 80 1 2025-09-25 04:28:36.954 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48747 1 109 1 2025-09-25 04:29:37.258 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44627 1 80 1 2025-09-25 04:29:37.258 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51808 1 109 1 2025-09-25 04:29:37.249 00:00:00.000 UDP 28.104.0.1:44627 -> 198.28.0.2:53 1 64 1 2025-09-25 04:29:37.249 00:00:00.000 UDP 28.104.0.1:51808 -> 198.28.0.2:53 1 64 1 2025-09-25 04:25:35.352 00:05:10.017 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2812 1 2025-09-25 04:30:37.555 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59527 1 80 1 2025-09-25 04:30:37.555 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40227 1 109 1 2025-09-25 04:30:37.544 00:00:00.000 UDP 28.104.0.1:40227 -> 198.28.0.2:53 1 64 1 2025-09-25 04:30:37.543 00:00:00.000 UDP 28.104.0.1:59527 -> 198.28.0.2:53 1 64 1 2025-09-25 04:31:38.051 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35982 1 80 1 2025-09-25 04:31:38.051 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50491 1 109 1 2025-09-25 04:31:38.040 00:00:00.000 UDP 28.104.0.1:35982 -> 198.28.0.2:53 1 64 1 2025-09-25 04:31:38.040 00:00:00.000 UDP 28.104.0.1:50491 -> 198.28.0.2:53 1 64 1 2025-09-25 04:26:40.507 00:06:00.210 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-09-25 04:26:40.507 00:06:00.036 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-09-25 04:27:40.749 00:05:52.167 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-25 04:28:32.864 00:05:07.656 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-25 04:28:32.864 00:05:07.903 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-25 04:32:38.347 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56151 1 109 1 2025-09-25 04:32:38.347 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59103 1 80 1 2025-09-25 04:32:38.337 00:00:00.000 UDP 28.104.0.1:59103 -> 198.28.0.2:53 1 64 1 2025-09-25 04:32:38.337 00:00:00.000 UDP 28.104.0.1:56151 -> 198.28.0.2:53 1 64 1 2025-09-25 04:33:09.681 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-25 04:33:38.598 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33937 1 109 1 2025-09-25 04:33:38.598 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42516 1 80 1 2025-09-25 04:33:38.587 00:00:00.000 UDP 28.104.0.1:33937 -> 198.28.0.2:53 1 64 1 2025-09-25 04:29:32.874 00:05:07.636 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-25 04:33:38.588 00:00:00.000 UDP 28.104.0.1:42516 -> 198.28.0.2:53 1 64 1 2025-09-25 04:34:38.904 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53795 1 109 1 2025-09-25 04:34:38.904 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57910 1 80 1 2025-09-25 04:34:38.894 00:00:00.000 UDP 28.104.0.1:57910 -> 198.28.0.2:53 1 64 1 2025-09-25 04:34:38.894 00:00:00.000 UDP 28.104.0.1:53795 -> 198.28.0.2:53 1 64 1 2025-09-25 04:30:55.369 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2728 1 2025-09-25 04:35:39.193 00:00:00.000 UDP 28.104.0.1:44178 -> 198.28.0.2:53 1 64 1 2025-09-25 04:35:39.193 00:00:00.000 UDP 28.104.0.1:42176 -> 198.28.0.2:53 1 64 1 2025-09-25 04:35:39.203 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44178 1 80 1 2025-09-25 04:35:39.203 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42176 1 109 1 2025-09-25 04:36:39.498 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52934 1 80 1 2025-09-25 04:36:39.499 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57106 1 109 1 2025-09-25 04:36:39.488 00:00:00.000 UDP 28.104.0.1:57106 -> 198.28.0.2:53 1 64 1 2025-09-25 04:36:39.488 00:00:00.000 UDP 28.104.0.1:52934 -> 198.28.0.2:53 1 64 1 2025-09-25 04:37:39.754 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33923 1 109 1 2025-09-25 04:37:39.754 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53357 1 80 1 2025-09-25 04:37:39.743 00:00:00.000 UDP 28.104.0.1:53357 -> 198.28.0.2:53 1 64 1 2025-09-25 04:37:39.743 00:00:00.000 UDP 28.104.0.1:33923 -> 198.28.0.2:53 1 64 1 2025-09-25 04:38:09.868 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-25 04:33:40.758 00:05:52.160 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-25 04:38:40.057 00:00:00.000 UDP 28.104.0.1:50193 -> 198.28.0.2:53 1 64 1 2025-09-25 04:33:40.510 00:06:00.217 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-09-25 04:33:40.510 00:06:00.036 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-09-25 04:38:40.057 00:00:00.000 UDP 28.104.0.1:55743 -> 198.28.0.2:53 1 64 1 2025-09-25 04:34:32.866 00:05:07.903 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-25 04:38:40.067 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50193 1 80 1 2025-09-25 04:38:40.068 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55743 1 109 1 2025-09-25 04:34:32.866 00:05:07.656 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-25 04:39:40.365 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51814 1 80 1 2025-09-25 04:39:40.364 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54688 1 109 1 2025-09-25 04:39:40.354 00:00:00.000 UDP 28.104.0.1:51814 -> 198.28.0.2:53 1 64 1 2025-09-25 04:35:32.875 00:05:07.637 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-25 04:39:40.354 00:00:00.000 UDP 28.104.0.1:54688 -> 198.28.0.2:53 1 64 1 2025-09-25 04:36:15.378 00:05:10.000 OSPF 28.0.2.1:0 -> 224.0.0.5:0 33 2240 1 2025-09-25 04:40:40.657 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46774 1 109 1 2025-09-25 04:40:40.657 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54320 1 80 1 2025-09-25 04:40:40.647 00:00:00.000 UDP 28.104.0.1:54320 -> 198.28.0.2:53 1 64 1 2025-09-25 04:40:40.647 00:00:00.000 UDP 28.104.0.1:46774 -> 198.28.0.2:53 1 64 1 2025-09-25 04:41:40.945 00:00:00.000 UDP 28.104.0.1:42709 -> 198.28.0.2:53 1 64 1 2025-09-25 04:41:40.946 00:00:00.000 UDP 28.104.0.1:55772 -> 198.28.0.2:53 1 64 1 2025-09-25 04:41:40.956 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55772 1 80 1 2025-09-25 04:41:40.957 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42709 1 109 1 2025-09-25 04:42:41.277 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46898 1 80 1 2025-09-25 04:42:41.277 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46121 1 109 1 2025-09-25 04:42:41.265 00:00:00.000 UDP 28.104.0.1:46121 -> 198.28.0.2:53 1 64 1 2025-09-25 04:42:41.266 00:00:00.000 UDP 28.104.0.1:46898 -> 198.28.0.2:53 1 64 1 2025-09-25 04:43:09.944 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-25 04:43:41.579 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32912 1 109 1 2025-09-25 04:43:41.580 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53294 1 80 1 2025-09-25 04:43:41.568 00:00:00.000 UDP 28.104.0.1:53294 -> 198.28.0.2:53 1 64 1 2025-09-25 04:43:41.569 00:00:00.000 UDP 28.104.0.1:32912 -> 198.28.0.2:53 1 64 1 2025-09-25 04:39:40.759 00:05:52.161 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-25 04:44:41.884 00:00:00.000 UDP 28.104.0.1:49627 -> 198.28.0.2:53 1 64 1 2025-09-25 04:44:41.884 00:00:00.000 UDP 28.104.0.1:34762 -> 198.28.0.2:53 1 64 1 2025-09-25 04:40:32.869 00:05:07.655 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-25 04:40:32.869 00:05:07.910 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-25 04:44:41.894 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49627 1 80 1 2025-09-25 04:44:41.894 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34762 1 109 1 2025-09-25 04:41:35.378 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 42 3088 1 2025-09-25 04:45:42.169 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37190 1 80 1 2025-09-25 04:45:42.169 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38642 1 109 1 2025-09-25 04:40:40.513 00:06:00.210 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-09-25 04:41:32.880 00:05:07.635 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-25 04:40:40.513 00:06:00.049 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-09-25 04:45:42.159 00:00:00.000 UDP 28.104.0.1:37190 -> 198.28.0.2:53 1 64 1 2025-09-25 04:45:42.159 00:00:00.000 UDP 28.104.0.1:38642 -> 198.28.0.2:53 1 64 1 2025-09-25 04:46:42.420 00:00:00.000 UDP 28.104.0.1:58102 -> 198.28.0.2:53 1 64 1 2025-09-25 04:46:42.420 00:00:00.000 UDP 28.104.0.1:40972 -> 198.28.0.2:53 1 64 1 2025-09-25 04:46:42.431 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58102 1 109 1 2025-09-25 04:46:42.431 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40972 1 80 1 2025-09-25 04:47:43.144 00:00:00.000 UDP 28.104.0.1:53087 -> 198.28.0.2:53 1 64 1 2025-09-25 04:47:43.144 00:00:00.000 UDP 28.104.0.1:57514 -> 198.28.0.2:53 1 64 1 2025-09-25 04:47:43.153 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53087 1 80 1 2025-09-25 04:47:43.153 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57514 1 109 1 2025-09-25 04:48:10.167 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-25 04:48:43.438 00:00:00.000 UDP 28.104.0.1:49464 -> 198.28.0.2:53 1 64 1 2025-09-25 04:48:43.438 00:00:00.000 UDP 28.104.0.1:49302 -> 198.28.0.2:53 1 64 1 2025-09-25 04:48:43.448 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49464 1 109 1 2025-09-25 04:48:43.448 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49302 1 80 1 2025-09-25 04:49:43.742 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55955 1 80 1 2025-09-25 04:49:43.743 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48487 1 109 1 2025-09-25 04:49:43.732 00:00:00.000 UDP 28.104.0.1:55955 -> 198.28.0.2:53 1 64 1 2025-09-25 04:49:43.732 00:00:00.000 UDP 28.104.0.1:48487 -> 198.28.0.2:53 1 64 1 2025-09-25 04:45:40.769 00:05:52.154 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-25 04:46:32.874 00:05:07.652 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-25 04:46:32.874 00:05:07.906 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-25 04:50:44.070 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60595 1 80 1 2025-09-25 04:50:44.070 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44335 1 109 1 2025-09-25 04:50:44.061 00:00:00.000 UDP 28.104.0.1:44335 -> 198.28.0.2:53 1 64 1 2025-09-25 04:50:44.061 00:00:00.000 UDP 28.104.0.1:60595 -> 198.28.0.2:53 1 64 1 2025-09-25 04:46:55.384 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2736 1 2025-09-25 04:47:32.882 00:05:07.633 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-25 04:51:44.354 00:00:00.000 UDP 28.104.0.1:60076 -> 198.28.0.2:53 1 64 1 2025-09-25 04:51:44.354 00:00:00.000 UDP 28.104.0.1:38499 -> 198.28.0.2:53 1 64 1 2025-09-25 04:51:44.365 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38499 1 109 1 2025-09-25 04:51:44.365 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60076 1 80 1 2025-09-25 04:47:40.515 00:06:00.208 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-09-25 04:47:40.515 00:06:00.047 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-09-25 04:52:44.649 00:00:00.000 UDP 28.104.0.1:44684 -> 198.28.0.2:53 1 64 1 2025-09-25 04:52:44.648 00:00:00.000 UDP 28.104.0.1:50029 -> 198.28.0.2:53 1 64 1 2025-09-25 04:52:44.660 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50029 1 109 1 2025-09-25 04:52:44.660 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44684 1 80 1 2025-09-25 04:53:10.183 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-25 04:53:44.948 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39760 1 109 1 2025-09-25 04:53:44.948 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37257 1 80 1 2025-09-25 04:53:44.937 00:00:00.000 UDP 28.104.0.1:39760 -> 198.28.0.2:53 1 64 1 2025-09-25 04:53:44.937 00:00:00.000 UDP 28.104.0.1:37257 -> 198.28.0.2:53 1 64 1 2025-09-25 04:54:45.211 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50071 1 109 1 2025-09-25 04:54:45.211 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49853 1 80 1 2025-09-25 04:54:45.202 00:00:00.000 UDP 28.104.0.1:49853 -> 198.28.0.2:53 1 64 1 2025-09-25 04:54:45.202 00:00:00.000 UDP 28.104.0.1:50071 -> 198.28.0.2:53 1 64 1 2025-09-25 04:55:45.494 00:00:00.000 UDP 28.104.0.1:39765 -> 198.28.0.2:53 1 64 1 2025-09-25 04:55:45.495 00:00:00.000 UDP 28.104.0.1:50364 -> 198.28.0.2:53 1 64 1 2025-09-25 04:55:45.506 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39765 1 109 1 2025-09-25 04:55:45.507 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50364 1 80 1 2025-09-25 04:52:15.392 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2692 1 2025-09-25 04:51:40.770 00:05:52.155 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-25 04:52:32.873 00:05:07.658 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-25 04:52:32.873 00:05:07.908 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-25 04:56:45.764 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44390 1 109 1 2025-09-25 04:56:45.764 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59772 1 80 1 2025-09-25 04:56:45.753 00:00:00.000 UDP 28.104.0.1:44390 -> 198.28.0.2:53 1 64 1 2025-09-25 04:56:45.754 00:00:00.000 UDP 28.104.0.1:59772 -> 198.28.0.2:53 1 64 1 2025-09-25 04:53:32.884 00:05:07.633 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-25 04:57:46.107 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60204 1 109 1 2025-09-25 04:57:46.107 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34757 1 80 1 2025-09-25 04:57:46.097 00:00:00.000 UDP 28.104.0.1:60204 -> 198.28.0.2:53 1 64 1 2025-09-25 04:57:46.098 00:00:00.000 UDP 28.104.0.1:34757 -> 198.28.0.2:53 1 64 1 2025-09-25 04:58:10.332 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-25 04:58:46.392 00:00:00.000 UDP 28.104.0.1:32818 -> 198.28.0.2:53 1 64 1 2025-09-25 04:58:46.392 00:00:00.000 UDP 28.104.0.1:43816 -> 198.28.0.2:53 1 64 1 2025-09-25 04:58:46.403 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43816 1 109 1 2025-09-25 04:58:46.403 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32818 1 80 1 Summary: total flows: 319, total bytes: 95332, total packets: 1403, avg bps: 208, avg pps: 0, avg bpp: 67 Time window: 2025-09-25 03:57:40 - 2025-09-25 04:58:46 Total flows processed: 319, passed: 319, Blocks skipped: 0, Bytes read: 33240 Sys: 0.0022s User: 0.0044s Wall: 0.0046s flows/second: 70080.8 Runtime: 0.0046s