Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-26 01:59:20.122 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55358 1 80 1 2025-09-26 01:59:20.122 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42576 1 109 1 2025-09-26 01:59:20.111 00:00:00.000 UDP 28.104.0.1:42576 -> 198.28.0.2:53 1 64 1 2025-09-26 01:59:20.111 00:00:00.000 UDP 28.104.0.1:55358 -> 198.28.0.2:53 1 64 1 2025-09-26 02:00:20.416 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58197 1 109 1 2025-09-26 02:00:20.417 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58917 1 80 1 2025-09-26 02:00:20.408 00:00:00.000 UDP 28.104.0.1:58197 -> 198.28.0.2:53 1 64 1 2025-09-26 02:00:20.408 00:00:00.000 UDP 28.104.0.1:58917 -> 198.28.0.2:53 1 64 1 2025-09-26 02:01:20.702 00:00:00.000 UDP 28.104.0.1:59659 -> 198.28.0.2:53 1 64 1 2025-09-26 02:01:20.702 00:00:00.000 UDP 28.104.0.1:48681 -> 198.28.0.2:53 1 64 1 2025-09-26 02:01:20.713 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59659 1 80 1 2025-09-26 02:01:20.713 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48681 1 109 1 2025-09-26 01:57:33.262 00:05:08.080 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-26 01:57:47.250 00:05:10.014 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2772 1 2025-09-26 02:02:20.998 00:00:00.000 UDP 28.104.0.1:42548 -> 198.28.0.2:53 1 64 1 2025-09-26 02:02:20.998 00:00:00.000 UDP 28.104.0.1:48199 -> 198.28.0.2:53 1 64 1 2025-09-26 02:02:21.010 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42548 1 109 1 2025-09-26 02:02:21.010 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48199 1 80 1 2025-09-26 01:57:41.358 00:05:51.906 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-26 01:57:41.347 00:05:51.966 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-26 01:58:41.331 00:04:00.001 TCP 28.154.0.1:179 -> 28.157.0.1:37077 5 355 1 2025-09-26 01:58:41.253 00:04:00.079 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-26 02:03:21.306 00:00:00.000 UDP 28.104.0.1:55537 -> 198.28.0.2:53 1 64 1 2025-09-26 02:03:21.306 00:00:00.000 UDP 28.104.0.1:45042 -> 198.28.0.2:53 1 64 1 2025-09-26 02:03:21.315 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55537 1 109 1 2025-09-26 02:03:21.315 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45042 1 80 1 2025-09-26 01:58:41.331 00:05:51.942 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-26 02:03:35.718 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-26 02:04:21.559 00:00:00.000 UDP 28.104.0.1:45579 -> 198.28.0.2:53 1 64 1 2025-09-26 02:04:21.559 00:00:00.000 UDP 28.104.0.1:44788 -> 198.28.0.2:53 1 64 1 2025-09-26 02:04:21.570 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45579 1 109 1 2025-09-26 02:04:21.570 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44788 1 80 1 2025-09-26 02:03:41.332 00:01:00.000 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 142 1 2025-09-26 02:03:41.254 00:01:00.078 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-09-26 02:05:21.873 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54812 1 109 1 2025-09-26 02:05:21.873 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43058 1 80 1 2025-09-26 02:05:21.862 00:00:00.000 UDP 28.104.0.1:54812 -> 198.28.0.2:53 1 64 1 2025-09-26 02:05:21.862 00:00:00.000 UDP 28.104.0.1:43058 -> 198.28.0.2:53 1 64 1 2025-09-26 02:06:22.145 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41909 1 109 1 2025-09-26 02:06:22.146 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60422 1 80 1 2025-09-26 02:06:22.136 00:00:00.000 UDP 28.104.0.1:41909 -> 198.28.0.2:53 1 64 1 2025-09-26 02:06:22.136 00:00:00.000 UDP 28.104.0.1:60422 -> 198.28.0.2:53 1 64 1 2025-09-26 02:03:07.265 00:05:10.001 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2384 1 2025-09-26 02:07:22.481 00:00:00.000 UDP 28.104.0.1:42788 -> 198.28.0.2:53 1 64 1 2025-09-26 02:07:22.481 00:00:00.000 UDP 28.104.0.1:37852 -> 198.28.0.2:53 1 64 1 2025-09-26 02:07:22.492 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37852 1 109 1 2025-09-26 02:07:22.492 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42788 1 80 1 2025-09-26 02:05:41.335 00:02:00.001 TCP 28.154.0.1:179 -> 28.157.0.1:37077 3 213 1 2025-09-26 02:05:41.254 00:02:00.082 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-09-26 02:03:33.264 00:05:08.082 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-26 02:08:23.444 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38600 1 80 1 2025-09-26 02:08:23.445 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40186 1 109 1 2025-09-26 02:08:23.434 00:00:00.000 UDP 28.104.0.1:38600 -> 198.28.0.2:53 1 64 1 2025-09-26 02:08:23.434 00:00:00.000 UDP 28.104.0.1:40186 -> 198.28.0.2:53 1 64 1 2025-09-26 02:08:35.757 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-26 02:03:41.369 00:05:51.895 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-26 02:03:41.358 00:05:51.955 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-26 02:09:23.727 00:00:00.000 UDP 28.104.0.1:37352 -> 198.28.0.2:53 1 64 1 2025-09-26 02:09:23.727 00:00:00.000 UDP 28.104.0.1:34894 -> 198.28.0.2:53 1 64 1 2025-09-26 02:09:23.737 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37352 1 109 1 2025-09-26 02:09:23.737 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34894 1 80 1 2025-09-26 02:04:41.333 00:05:51.942 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-26 02:08:41.336 00:01:00.000 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 142 1 2025-09-26 02:08:41.256 00:01:00.080 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-09-26 02:10:24.045 00:00:00.000 UDP 28.104.0.1:48702 -> 198.28.0.2:53 1 64 1 2025-09-26 02:10:24.045 00:00:00.000 UDP 28.104.0.1:47541 -> 198.28.0.2:53 1 64 1 2025-09-26 02:10:24.055 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48702 1 109 1 2025-09-26 02:10:24.056 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47541 1 80 1 2025-09-26 02:11:24.338 00:00:00.000 UDP 28.104.0.1:38585 -> 198.28.0.2:53 1 64 1 2025-09-26 02:11:24.338 00:00:00.000 UDP 28.104.0.1:44503 -> 198.28.0.2:53 1 64 1 2025-09-26 02:11:24.348 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38585 1 80 1 2025-09-26 02:11:24.348 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44503 1 109 1 2025-09-26 02:12:24.644 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45250 1 109 1 2025-09-26 02:12:24.644 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52629 1 80 1 2025-09-26 02:12:24.633 00:00:00.000 UDP 28.104.0.1:52629 -> 198.28.0.2:53 1 64 1 2025-09-26 02:12:24.633 00:00:00.000 UDP 28.104.0.1:45250 -> 198.28.0.2:53 1 64 1 2025-09-26 02:08:27.267 00:05:10.002 OSPF 28.0.2.1:0 -> 224.0.0.5:0 44 3160 1 2025-09-26 02:10:41.335 00:02:00.000 TCP 28.154.0.1:179 -> 28.157.0.1:37077 3 213 1 2025-09-26 02:10:41.255 00:02:00.080 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-09-26 02:13:24.938 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53868 1 109 1 2025-09-26 02:13:24.938 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38787 1 80 1 2025-09-26 02:13:24.927 00:00:00.000 UDP 28.104.0.1:53868 -> 198.28.0.2:53 1 64 1 2025-09-26 02:13:24.927 00:00:00.000 UDP 28.104.0.1:38787 -> 198.28.0.2:53 1 64 1 2025-09-26 02:13:35.725 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-26 02:09:33.263 00:05:08.084 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-26 02:14:25.206 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39144 1 109 1 2025-09-26 02:14:25.206 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38555 1 80 1 2025-09-26 02:14:25.197 00:00:00.000 UDP 28.104.0.1:38555 -> 198.28.0.2:53 1 64 1 2025-09-26 02:14:25.197 00:00:00.000 UDP 28.104.0.1:39144 -> 198.28.0.2:53 1 64 1 2025-09-26 02:09:41.362 00:05:51.904 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-26 02:09:41.353 00:05:51.965 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-26 02:13:41.336 00:01:00.001 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 142 1 2025-09-26 02:13:41.256 00:01:00.081 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-09-26 02:15:25.459 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49210 1 80 1 2025-09-26 02:15:25.459 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45996 1 109 1 2025-09-26 02:15:25.449 00:00:00.000 UDP 28.104.0.1:45996 -> 198.28.0.2:53 1 64 1 2025-09-26 02:15:25.449 00:00:00.000 UDP 28.104.0.1:49210 -> 198.28.0.2:53 1 64 1 2025-09-26 02:10:41.337 00:05:51.940 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-26 02:16:25.746 00:00:00.000 UDP 28.104.0.1:44682 -> 198.28.0.2:53 1 64 1 2025-09-26 02:16:25.746 00:00:00.000 UDP 28.104.0.1:59381 -> 198.28.0.2:53 1 64 1 2025-09-26 02:16:25.756 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59381 1 109 1 2025-09-26 02:16:25.756 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44682 1 80 1 2025-09-26 02:17:26.056 00:00:00.000 UDP 28.104.0.1:53345 -> 198.28.0.2:53 1 64 1 2025-09-26 02:17:26.055 00:00:00.000 UDP 28.104.0.1:45570 -> 198.28.0.2:53 1 64 1 2025-09-26 02:17:26.066 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53345 1 109 1 2025-09-26 02:17:26.066 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45570 1 80 1 2025-09-26 02:15:41.339 00:02:00.000 TCP 28.154.0.1:179 -> 28.157.0.1:37077 3 213 1 2025-09-26 02:13:47.270 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2464 1 2025-09-26 02:18:26.368 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33775 1 109 1 2025-09-26 02:18:26.367 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36596 1 80 1 2025-09-26 02:18:26.357 00:00:00.000 UDP 28.104.0.1:33775 -> 198.28.0.2:53 1 64 1 2025-09-26 02:18:26.357 00:00:00.000 UDP 28.104.0.1:36596 -> 198.28.0.2:53 1 64 1 2025-09-26 02:18:35.933 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-26 02:19:26.650 00:00:00.000 UDP 28.104.0.1:55501 -> 198.28.0.2:53 1 64 1 2025-09-26 02:19:26.650 00:00:00.000 UDP 28.104.0.1:33324 -> 198.28.0.2:53 1 64 1 2025-09-26 02:19:26.660 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33324 1 109 1 2025-09-26 02:19:26.660 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55501 1 80 1 2025-09-26 02:15:33.266 00:05:08.104 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-26 02:18:41.339 00:01:00.021 TCP 28.154.0.1:179 -> 28.157.0.1:37077 3 194 1 2025-09-26 02:15:41.270 00:04:00.090 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-26 02:20:26.952 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45358 1 109 1 2025-09-26 02:20:26.952 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46107 1 80 1 2025-09-26 02:20:26.943 00:00:00.000 UDP 28.104.0.1:46107 -> 198.28.0.2:53 1 64 1 2025-09-26 02:20:26.943 00:00:00.000 UDP 28.104.0.1:45358 -> 198.28.0.2:53 1 64 1 2025-09-26 02:15:41.360 00:05:51.958 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-26 02:15:41.370 00:05:51.898 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-26 02:21:27.251 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60885 1 109 1 2025-09-26 02:21:27.251 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56021 1 80 1 2025-09-26 02:21:27.240 00:00:00.000 UDP 28.104.0.1:60885 -> 198.28.0.2:53 1 64 1 2025-09-26 02:21:27.240 00:00:00.000 UDP 28.104.0.1:56021 -> 198.28.0.2:53 1 64 1 2025-09-26 02:16:41.338 00:05:51.940 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-26 02:22:27.497 00:00:00.000 UDP 28.104.0.1:57025 -> 198.28.0.2:53 1 64 1 2025-09-26 02:22:27.497 00:00:00.000 UDP 28.104.0.1:58210 -> 198.28.0.2:53 1 64 1 2025-09-26 02:22:27.507 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57025 1 109 1 2025-09-26 02:22:27.507 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58210 1 80 1 2025-09-26 02:19:07.274 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 3056 1 2025-09-26 02:23:27.794 00:00:00.000 UDP 28.104.0.1:58672 -> 198.28.0.2:53 1 64 1 2025-09-26 02:23:27.794 00:00:00.000 UDP 28.104.0.1:56199 -> 198.28.0.2:53 1 64 1 2025-09-26 02:23:27.805 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58672 1 80 1 2025-09-26 02:23:27.805 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56199 1 109 1 2025-09-26 02:23:36.223 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-26 02:24:28.057 00:00:00.000 UDP 28.104.0.1:34678 -> 198.28.0.2:53 1 64 1 2025-09-26 02:24:28.058 00:00:00.000 UDP 28.104.0.1:35336 -> 198.28.0.2:53 1 64 1 2025-09-26 02:24:28.068 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35336 1 109 1 2025-09-26 02:24:28.068 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34678 1 80 1 2025-09-26 02:20:41.300 00:04:00.061 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-09-26 02:20:41.271 00:04:00.090 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-26 02:25:28.350 00:00:00.000 UDP 28.104.0.1:36620 -> 198.28.0.2:53 1 64 1 2025-09-26 02:25:28.349 00:00:00.000 UDP 28.104.0.1:53939 -> 198.28.0.2:53 1 64 1 2025-09-26 02:25:28.361 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53939 1 109 1 2025-09-26 02:25:28.360 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36620 1 80 1 2025-09-26 02:21:33.267 00:05:08.103 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-26 02:26:28.657 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47882 1 109 1 2025-09-26 02:26:28.657 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44171 1 80 1 2025-09-26 02:26:28.646 00:00:00.000 UDP 28.104.0.1:44171 -> 198.28.0.2:53 1 64 1 2025-09-26 02:26:28.646 00:00:00.000 UDP 28.104.0.1:47882 -> 198.28.0.2:53 1 64 1 2025-09-26 02:21:41.361 00:05:51.958 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-26 02:21:41.370 00:05:51.899 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-26 02:27:28.951 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59988 1 109 1 2025-09-26 02:27:28.952 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44425 1 80 1 2025-09-26 02:27:28.941 00:00:00.000 UDP 28.104.0.1:44425 -> 198.28.0.2:53 1 64 1 2025-09-26 02:27:28.940 00:00:00.000 UDP 28.104.0.1:59988 -> 198.28.0.2:53 1 64 1 2025-09-26 02:22:41.361 00:05:51.919 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-26 02:28:29.246 00:00:00.000 UDP 28.104.0.1:39380 -> 198.28.0.2:53 1 64 1 2025-09-26 02:28:29.246 00:00:00.000 UDP 28.104.0.1:45229 -> 198.28.0.2:53 1 64 1 2025-09-26 02:28:29.255 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39380 1 109 1 2025-09-26 02:28:29.255 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45229 1 80 1 2025-09-26 02:28:36.304 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-26 02:24:27.281 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2528 1 2025-09-26 02:29:29.501 00:00:00.000 UDP 28.104.0.1:42763 -> 198.28.0.2:53 1 64 1 2025-09-26 02:29:29.501 00:00:00.000 UDP 28.104.0.1:37250 -> 198.28.0.2:53 1 64 1 2025-09-26 02:29:29.511 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42763 1 109 1 2025-09-26 02:29:29.512 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37250 1 80 1 2025-09-26 02:25:41.310 00:04:00.051 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-09-26 02:25:41.289 00:04:00.072 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-26 02:30:29.775 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51317 1 109 1 2025-09-26 02:30:29.775 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52245 1 80 1 2025-09-26 02:30:29.764 00:00:00.000 UDP 28.104.0.1:51317 -> 198.28.0.2:53 1 64 1 2025-09-26 02:30:29.764 00:00:00.000 UDP 28.104.0.1:52245 -> 198.28.0.2:53 1 64 1 2025-09-26 02:31:30.078 00:00:00.000 UDP 28.104.0.1:38694 -> 198.28.0.2:53 1 64 1 2025-09-26 02:31:30.077 00:00:00.000 UDP 28.104.0.1:35836 -> 198.28.0.2:53 1 64 1 2025-09-26 02:31:30.089 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38694 1 109 1 2025-09-26 02:31:30.089 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35836 1 80 1 2025-09-26 02:27:33.269 00:05:08.103 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-26 02:32:30.376 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46097 1 109 1 2025-09-26 02:32:30.376 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42032 1 80 1 2025-09-26 02:32:30.365 00:00:00.000 UDP 28.104.0.1:46097 -> 198.28.0.2:53 1 64 1 2025-09-26 02:32:30.365 00:00:00.000 UDP 28.104.0.1:42032 -> 198.28.0.2:53 1 64 1 2025-09-26 02:27:41.362 00:05:51.965 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-26 02:27:41.372 00:05:51.899 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-26 02:33:30.664 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33325 1 109 1 2025-09-26 02:33:30.663 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45781 1 80 1 2025-09-26 02:33:36.265 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-26 02:33:30.653 00:00:00.000 UDP 28.104.0.1:45781 -> 198.28.0.2:53 1 64 1 2025-09-26 02:33:30.653 00:00:00.000 UDP 28.104.0.1:33325 -> 198.28.0.2:53 1 64 1 2025-09-26 02:28:41.361 00:05:51.919 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-26 02:29:47.285 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2484 1 2025-09-26 02:34:30.952 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52383 1 80 1 2025-09-26 02:34:30.952 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45613 1 109 1 2025-09-26 02:34:30.942 00:00:00.000 UDP 28.104.0.1:52383 -> 198.28.0.2:53 1 64 1 2025-09-26 02:34:30.941 00:00:00.000 UDP 28.104.0.1:45613 -> 198.28.0.2:53 1 64 1 2025-09-26 02:30:41.319 00:04:00.044 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-09-26 02:30:41.274 00:04:00.089 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-26 02:35:31.253 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49550 1 80 1 2025-09-26 02:35:31.253 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34896 1 109 1 2025-09-26 02:35:31.242 00:00:00.000 UDP 28.104.0.1:49550 -> 198.28.0.2:53 1 64 1 2025-09-26 02:35:31.242 00:00:00.000 UDP 28.104.0.1:34896 -> 198.28.0.2:53 1 64 1 2025-09-26 02:36:31.534 00:00:00.000 UDP 28.104.0.1:40298 -> 198.28.0.2:53 1 64 1 2025-09-26 02:36:31.534 00:00:00.000 UDP 28.104.0.1:49546 -> 198.28.0.2:53 1 64 1 2025-09-26 02:36:31.545 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40298 1 80 1 2025-09-26 02:36:31.545 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49546 1 109 1 2025-09-26 02:35:41.311 00:01:00.052 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-09-26 02:35:41.274 00:01:00.089 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-09-26 02:37:31.837 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47438 1 80 1 2025-09-26 02:37:31.837 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58682 1 109 1 2025-09-26 02:37:31.829 00:00:00.000 UDP 28.104.0.1:47438 -> 198.28.0.2:53 1 64 1 2025-09-26 02:37:31.828 00:00:00.000 UDP 28.104.0.1:58682 -> 198.28.0.2:53 1 64 1 2025-09-26 02:33:33.271 00:05:08.107 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-26 02:38:36.407 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-26 02:33:41.373 00:05:51.899 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-26 02:38:32.098 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55815 1 109 1 2025-09-26 02:38:32.098 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33215 1 80 1 2025-09-26 02:38:32.089 00:00:00.000 UDP 28.104.0.1:33215 -> 198.28.0.2:53 1 64 1 2025-09-26 02:33:41.364 00:05:51.959 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-26 02:38:32.089 00:00:00.000 UDP 28.104.0.1:55815 -> 198.28.0.2:53 1 64 1 2025-09-26 02:35:07.289 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 44 3180 1 2025-09-26 02:39:32.393 00:00:00.000 UDP 28.104.0.1:37308 -> 198.28.0.2:53 1 64 1 2025-09-26 02:34:41.363 00:05:51.919 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-26 02:39:32.394 00:00:00.000 UDP 28.104.0.1:47489 -> 198.28.0.2:53 1 64 1 2025-09-26 02:39:32.404 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47489 1 109 1 2025-09-26 02:39:32.404 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37308 1 80 1 2025-09-26 02:37:41.311 00:02:00.057 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-09-26 02:37:41.276 00:02:00.092 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-09-26 02:40:32.650 00:00:00.000 UDP 28.104.0.1:36814 -> 198.28.0.2:53 1 64 1 2025-09-26 02:40:32.650 00:00:00.000 UDP 28.104.0.1:33966 -> 198.28.0.2:53 1 64 1 2025-09-26 02:40:32.662 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36814 1 109 1 2025-09-26 02:40:32.661 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33966 1 80 1 2025-09-26 02:41:32.954 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37087 1 109 1 2025-09-26 02:41:32.954 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51020 1 80 1 2025-09-26 02:41:32.943 00:00:00.000 UDP 28.104.0.1:51020 -> 198.28.0.2:53 1 64 1 2025-09-26 02:41:32.944 00:00:00.000 UDP 28.104.0.1:37087 -> 198.28.0.2:53 1 64 1 2025-09-26 02:40:41.311 00:01:00.057 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-09-26 02:40:41.276 00:01:00.092 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-09-26 02:42:33.222 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57314 1 80 1 2025-09-26 02:42:33.221 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43592 1 109 1 2025-09-26 02:42:33.210 00:00:00.000 UDP 28.104.0.1:57314 -> 198.28.0.2:53 1 64 1 2025-09-26 02:42:33.209 00:00:00.000 UDP 28.104.0.1:43592 -> 198.28.0.2:53 1 64 1 2025-09-26 02:43:33.520 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42496 1 80 1 2025-09-26 02:43:33.519 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54072 1 109 1 2025-09-26 02:43:36.488 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-26 02:43:33.510 00:00:00.000 UDP 28.104.0.1:54072 -> 198.28.0.2:53 1 64 1 2025-09-26 02:43:33.510 00:00:00.000 UDP 28.104.0.1:42496 -> 198.28.0.2:53 1 64 1 2025-09-26 02:39:33.272 00:05:08.108 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-26 02:44:33.760 00:00:00.000 UDP 28.104.0.1:51784 -> 198.28.0.2:53 1 64 1 2025-09-26 02:39:41.369 00:05:51.955 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-26 02:44:33.760 00:00:00.000 UDP 28.104.0.1:37891 -> 198.28.0.2:53 1 64 1 2025-09-26 02:39:41.379 00:05:51.894 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-26 02:44:33.770 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37891 1 80 1 2025-09-26 02:44:33.769 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51784 1 109 1 2025-09-26 02:42:41.313 00:02:00.057 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-09-26 02:42:41.276 00:02:00.094 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-09-26 02:40:27.292 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2464 1 2025-09-26 02:45:34.055 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49210 1 80 1 2025-09-26 02:45:34.055 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57823 1 109 1 2025-09-26 02:45:34.044 00:00:00.000 UDP 28.104.0.1:57823 -> 198.28.0.2:53 1 64 1 2025-09-26 02:40:41.368 00:05:51.915 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-26 02:45:34.044 00:00:00.000 UDP 28.104.0.1:49210 -> 198.28.0.2:53 1 64 1 2025-09-26 02:46:34.447 00:00:00.000 UDP 28.104.0.1:56508 -> 198.28.0.2:53 1 64 1 2025-09-26 02:46:34.447 00:00:00.000 UDP 28.104.0.1:33556 -> 198.28.0.2:53 1 64 1 2025-09-26 02:46:34.457 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56508 1 80 1 2025-09-26 02:46:34.457 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33556 1 109 1 2025-09-26 02:45:41.313 00:01:00.056 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-09-26 02:45:41.276 00:01:00.093 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-09-26 02:47:34.751 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47229 1 109 1 2025-09-26 02:47:34.751 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52677 1 80 1 2025-09-26 02:47:34.740 00:00:00.000 UDP 28.104.0.1:47229 -> 198.28.0.2:53 1 64 1 2025-09-26 02:47:34.740 00:00:00.000 UDP 28.104.0.1:52677 -> 198.28.0.2:53 1 64 1 2025-09-26 02:48:35.054 00:00:00.000 UDP 28.104.0.1:56679 -> 198.28.0.2:53 1 64 1 2025-09-26 02:48:35.054 00:00:00.000 UDP 28.104.0.1:39894 -> 198.28.0.2:53 1 64 1 2025-09-26 02:48:36.402 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-26 02:48:35.065 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39894 1 80 1 2025-09-26 02:48:35.065 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56679 1 109 1 2025-09-26 02:49:35.348 00:00:00.000 UDP 28.104.0.1:46212 -> 198.28.0.2:53 1 64 1 2025-09-26 02:49:35.348 00:00:00.000 UDP 28.104.0.1:44970 -> 198.28.0.2:53 1 64 1 2025-09-26 02:49:35.358 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46212 1 80 1 2025-09-26 02:49:35.358 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44970 1 109 1 2025-09-26 02:45:33.273 00:05:08.108 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-26 02:47:41.354 00:02:00.016 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-09-26 02:45:47.295 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2652 1 2025-09-26 02:45:41.374 00:05:51.951 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-26 02:50:35.632 00:00:00.000 UDP 28.104.0.1:33395 -> 198.28.0.2:53 1 64 1 2025-09-26 02:50:35.632 00:00:00.000 UDP 28.104.0.1:54923 -> 198.28.0.2:53 1 64 1 2025-09-26 02:45:41.383 00:05:51.891 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-26 02:50:35.641 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54923 1 109 1 2025-09-26 02:50:35.641 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33395 1 80 1 2025-09-26 02:51:35.936 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51825 1 80 1 2025-09-26 02:51:35.936 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50346 1 109 1 2025-09-26 02:51:35.926 00:00:00.000 UDP 28.104.0.1:50346 -> 198.28.0.2:53 1 64 1 2025-09-26 02:46:41.369 00:05:51.915 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-26 02:51:35.926 00:00:00.000 UDP 28.104.0.1:51825 -> 198.28.0.2:53 1 64 1 2025-09-26 02:50:41.314 00:01:00.057 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-09-26 02:47:41.277 00:04:00.094 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-26 02:52:36.225 00:00:00.000 UDP 28.104.0.1:42859 -> 198.28.0.2:53 1 64 1 2025-09-26 02:52:36.225 00:00:00.000 UDP 28.104.0.1:33664 -> 198.28.0.2:53 1 64 1 2025-09-26 02:52:36.236 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42859 1 109 1 2025-09-26 02:52:36.236 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33664 1 80 1 2025-09-26 02:53:36.479 00:00:00.000 UDP 28.104.0.1:56541 -> 198.28.0.2:53 1 64 1 2025-09-26 02:53:36.479 00:00:00.000 UDP 28.104.0.1:59962 -> 198.28.0.2:53 1 64 1 2025-09-26 02:53:36.793 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-26 02:53:36.489 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56541 1 109 1 2025-09-26 02:53:36.489 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59962 1 80 1 2025-09-26 02:54:36.780 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55891 1 80 1 2025-09-26 02:54:36.780 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34315 1 109 1 2025-09-26 02:54:36.770 00:00:00.000 UDP 28.104.0.1:34315 -> 198.28.0.2:53 1 64 1 2025-09-26 02:54:36.770 00:00:00.000 UDP 28.104.0.1:55891 -> 198.28.0.2:53 1 64 1 2025-09-26 02:51:07.301 00:05:10.742 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2772 1 2025-09-26 02:55:37.075 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56821 1 80 1 2025-09-26 02:55:37.074 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55122 1 109 1 2025-09-26 02:55:37.062 00:00:00.000 UDP 28.104.0.1:55122 -> 198.28.0.2:53 1 64 1 2025-09-26 02:55:37.062 00:00:00.000 UDP 28.104.0.1:56821 -> 198.28.0.2:53 1 64 1 2025-09-26 02:51:33.274 00:05:08.111 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-26 02:51:41.376 00:05:51.953 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-26 02:51:41.385 00:05:51.894 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-26 02:56:37.358 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37686 1 109 1 2025-09-26 02:56:37.358 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35842 1 80 1 2025-09-26 02:56:37.349 00:00:00.000 UDP 28.104.0.1:35842 -> 198.28.0.2:53 1 64 1 2025-09-26 02:52:41.314 00:04:00.062 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-09-26 02:52:41.278 00:04:00.098 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-26 02:56:37.349 00:00:00.000 UDP 28.104.0.1:37686 -> 198.28.0.2:53 1 64 1 2025-09-26 02:57:37.614 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48481 1 109 1 2025-09-26 02:57:37.614 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41053 1 80 1 2025-09-26 02:52:41.372 00:05:51.917 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-26 02:57:37.605 00:00:00.000 UDP 28.104.0.1:48481 -> 198.28.0.2:53 1 64 1 2025-09-26 02:57:37.605 00:00:00.000 UDP 28.104.0.1:41053 -> 198.28.0.2:53 1 64 1 2025-09-26 02:58:36.794 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-26 02:58:37.893 00:00:00.000 UDP 28.104.0.1:39374 -> 198.28.0.2:53 1 64 1 2025-09-26 02:58:37.893 00:00:00.000 UDP 28.104.0.1:56528 -> 198.28.0.2:53 1 64 1 2025-09-26 02:58:37.902 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39374 1 80 1 2025-09-26 02:58:37.903 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56528 1 109 1 Summary: total flows: 339, total bytes: 94902, total packets: 1394, avg bps: 207, avg pps: 0, avg bpp: 68 Time window: 2025-09-26 01:57:33 - 2025-09-26 02:58:37 Total flows processed: 339, passed: 339, Blocks skipped: 0, Bytes read: 35320 Sys: 0.0043s User: 0.0026s Wall: 0.0041s flows/second: 81805.9 Runtime: 0.0042s