Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-26 03:59:04.646 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39572 1 80 1 2025-09-26 03:59:04.646 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33610 1 109 1 2025-09-26 03:59:04.635 00:00:00.000 UDP 28.104.0.1:39572 -> 198.28.0.2:53 1 64 1 2025-09-26 03:59:04.635 00:00:00.000 UDP 28.104.0.1:33610 -> 198.28.0.2:53 1 64 1 2025-09-26 03:55:07.411 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2628 1 2025-09-26 04:00:04.904 00:00:00.000 UDP 28.104.0.1:60338 -> 198.28.0.2:53 1 64 1 2025-09-26 04:00:04.904 00:00:00.000 UDP 28.104.0.1:52311 -> 198.28.0.2:53 1 64 1 2025-09-26 04:00:04.914 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52311 1 109 1 2025-09-26 04:00:04.914 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60338 1 80 1 2025-09-26 03:59:41.388 00:01:00.000 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 142 1 2025-09-26 03:56:41.306 00:04:00.082 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-26 04:01:05.223 00:00:00.000 UDP 28.104.0.1:60484 -> 198.28.0.2:53 1 64 1 2025-09-26 04:01:05.223 00:00:00.000 UDP 28.104.0.1:36187 -> 198.28.0.2:53 1 64 1 2025-09-26 04:01:05.233 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36187 1 109 1 2025-09-26 04:01:05.233 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60484 1 80 1 2025-09-26 03:57:33.299 00:05:08.099 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-26 04:02:05.872 00:00:00.000 UDP 28.104.0.1:57413 -> 198.28.0.2:53 1 64 1 2025-09-26 04:02:05.872 00:00:00.000 UDP 28.104.0.1:52748 -> 198.28.0.2:53 1 64 1 2025-09-26 04:02:05.886 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52748 1 80 1 2025-09-26 04:02:05.883 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57413 1 109 1 2025-09-26 03:57:41.411 00:05:51.888 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-26 03:57:41.401 00:05:51.947 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-26 04:03:06.223 00:00:00.000 UDP 28.104.0.1:58488 -> 198.28.0.2:53 1 64 1 2025-09-26 04:03:06.224 00:00:00.000 UDP 28.104.0.1:48194 -> 198.28.0.2:53 1 64 1 2025-09-26 04:03:06.238 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48194 1 80 1 2025-09-26 04:03:06.234 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58488 1 109 1 2025-09-26 03:58:41.387 00:05:51.922 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-26 04:01:41.387 00:02:00.001 TCP 28.154.0.1:179 -> 28.157.0.1:37077 3 213 1 2025-09-26 04:03:38.181 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-26 04:04:06.515 00:00:00.000 UDP 28.104.0.1:37176 -> 198.28.0.2:53 1 64 1 2025-09-26 04:04:06.516 00:00:00.000 UDP 28.104.0.1:53389 -> 198.28.0.2:53 1 64 1 2025-09-26 04:04:06.525 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37176 1 80 1 2025-09-26 04:04:06.525 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53389 1 109 1 2025-09-26 04:00:27.419 00:05:00.719 OSPF 28.0.2.1:0 -> 224.0.0.5:0 42 3012 1 2025-09-26 04:05:06.810 00:00:00.000 UDP 28.104.0.1:52529 -> 198.28.0.2:53 1 64 1 2025-09-26 04:05:06.810 00:00:00.000 UDP 28.104.0.1:39472 -> 198.28.0.2:53 1 64 1 2025-09-26 04:05:06.822 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39472 1 80 1 2025-09-26 04:05:06.822 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52529 1 109 1 2025-09-26 04:04:41.388 00:01:00.008 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 142 1 2025-09-26 04:01:41.314 00:04:00.082 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-26 04:06:07.122 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36397 1 109 1 2025-09-26 04:06:07.122 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47274 1 80 1 2025-09-26 04:06:07.111 00:00:00.000 UDP 28.104.0.1:36397 -> 198.28.0.2:53 1 64 1 2025-09-26 04:06:07.111 00:00:00.000 UDP 28.104.0.1:47274 -> 198.28.0.2:53 1 64 1 2025-09-26 04:07:07.415 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56907 1 109 1 2025-09-26 04:07:07.415 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36634 1 80 1 2025-09-26 04:07:07.405 00:00:00.000 UDP 28.104.0.1:56907 -> 198.28.0.2:53 1 64 1 2025-09-26 04:07:07.405 00:00:00.000 UDP 28.104.0.1:36634 -> 198.28.0.2:53 1 64 1 2025-09-26 04:03:33.298 00:05:08.101 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-26 04:08:07.699 00:00:00.000 UDP 28.104.0.1:48982 -> 198.28.0.2:53 1 64 1 2025-09-26 04:08:07.699 00:00:00.000 UDP 28.104.0.1:59448 -> 198.28.0.2:53 1 64 1 2025-09-26 04:08:07.709 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48982 1 80 1 2025-09-26 04:08:07.709 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59448 1 109 1 2025-09-26 04:03:41.412 00:05:51.887 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-26 04:08:38.258 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-26 04:03:41.403 00:05:51.947 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-26 04:06:41.390 00:02:00.000 TCP 28.154.0.1:179 -> 28.157.0.1:37077 3 213 1 2025-09-26 04:09:08.021 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58774 1 80 1 2025-09-26 04:09:08.024 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47278 1 109 1 2025-09-26 04:09:08.010 00:00:00.000 UDP 28.104.0.1:58774 -> 198.28.0.2:53 1 64 1 2025-09-26 04:09:08.014 00:00:00.000 UDP 28.104.0.1:47278 -> 198.28.0.2:53 1 64 1 2025-09-26 04:04:41.387 00:05:51.922 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-26 04:05:37.437 00:05:10.002 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2608 1 2025-09-26 04:10:08.305 00:00:00.000 UDP 28.104.0.1:55280 -> 198.28.0.2:53 1 64 1 2025-09-26 04:10:08.305 00:00:00.000 UDP 28.104.0.1:51322 -> 198.28.0.2:53 1 64 1 2025-09-26 04:10:08.316 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51322 1 80 1 2025-09-26 04:10:08.316 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55280 1 109 1 2025-09-26 04:09:41.390 00:01:00.000 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 142 1 2025-09-26 04:06:41.319 00:04:00.071 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-26 04:11:08.604 00:00:00.000 UDP 28.104.0.1:46931 -> 198.28.0.2:53 1 64 1 2025-09-26 04:11:08.604 00:00:00.000 UDP 28.104.0.1:50592 -> 198.28.0.2:53 1 64 1 2025-09-26 04:11:08.614 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46931 1 109 1 2025-09-26 04:11:08.614 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50592 1 80 1 2025-09-26 04:12:08.911 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47196 1 80 1 2025-09-26 04:12:08.913 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55489 1 109 1 2025-09-26 04:12:08.902 00:00:00.000 UDP 28.104.0.1:47196 -> 198.28.0.2:53 1 64 1 2025-09-26 04:12:08.903 00:00:00.000 UDP 28.104.0.1:55489 -> 198.28.0.2:53 1 64 1 2025-09-26 04:11:41.391 00:01:00.000 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 142 1 2025-09-26 04:11:41.317 00:01:00.074 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-09-26 04:13:09.238 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46201 1 80 1 2025-09-26 04:13:09.240 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33477 1 109 1 2025-09-26 04:13:09.227 00:00:00.000 UDP 28.104.0.1:33477 -> 198.28.0.2:53 1 64 1 2025-09-26 04:13:09.227 00:00:00.000 UDP 28.104.0.1:46201 -> 198.28.0.2:53 1 64 1 2025-09-26 04:13:38.113 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-26 04:09:33.299 00:05:08.104 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-26 04:14:09.554 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34501 1 109 1 2025-09-26 04:14:09.554 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46958 1 80 1 2025-09-26 04:14:09.543 00:00:00.000 UDP 28.104.0.1:46958 -> 198.28.0.2:53 1 64 1 2025-09-26 04:14:09.543 00:00:00.000 UDP 28.104.0.1:34501 -> 198.28.0.2:53 1 64 1 2025-09-26 04:09:41.414 00:05:51.887 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-26 04:09:41.405 00:05:51.946 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-26 04:15:09.852 00:00:00.000 UDP 28.104.0.1:53161 -> 198.28.0.2:53 1 64 1 2025-09-26 04:15:09.852 00:00:00.000 UDP 28.104.0.1:51100 -> 198.28.0.2:53 1 64 1 2025-09-26 04:15:09.863 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51100 1 80 1 2025-09-26 04:10:57.440 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2652 1 2025-09-26 04:15:09.863 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53161 1 109 1 2025-09-26 04:10:41.391 00:05:51.920 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-26 04:13:41.394 00:02:00.000 TCP 28.154.0.1:179 -> 28.157.0.1:37077 3 213 1 2025-09-26 04:13:41.318 00:02:00.076 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-09-26 04:16:10.127 00:00:00.000 UDP 28.104.0.1:59903 -> 198.28.0.2:53 1 64 1 2025-09-26 04:16:10.127 00:00:00.000 UDP 28.104.0.1:42974 -> 198.28.0.2:53 1 64 1 2025-09-26 04:16:10.138 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42974 1 109 1 2025-09-26 04:16:10.139 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59903 1 80 1 2025-09-26 04:17:10.443 00:00:00.000 UDP 28.104.0.1:53387 -> 198.28.0.2:53 1 64 1 2025-09-26 04:17:10.442 00:00:00.000 UDP 28.104.0.1:34292 -> 198.28.0.2:53 1 64 1 2025-09-26 04:17:10.452 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34292 1 80 1 2025-09-26 04:17:10.452 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53387 1 109 1 2025-09-26 04:16:41.394 00:01:00.000 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 142 1 2025-09-26 04:16:41.318 00:01:00.076 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-09-26 04:18:11.239 00:00:00.000 UDP 28.104.0.1:53622 -> 198.28.0.2:53 1 64 1 2025-09-26 04:18:11.239 00:00:00.000 UDP 28.104.0.1:35357 -> 198.28.0.2:53 1 64 1 2025-09-26 04:18:11.248 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53622 1 109 1 2025-09-26 04:18:11.248 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35357 1 80 1 2025-09-26 04:18:38.328 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-26 04:19:11.538 00:00:00.000 UDP 28.104.0.1:55064 -> 198.28.0.2:53 1 64 1 2025-09-26 04:19:11.538 00:00:00.000 UDP 28.104.0.1:44807 -> 198.28.0.2:53 1 64 1 2025-09-26 04:19:11.549 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55064 1 80 1 2025-09-26 04:19:11.549 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44807 1 109 1 2025-09-26 04:15:33.300 00:05:08.104 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-26 04:20:11.832 00:00:00.000 UDP 28.104.0.1:39557 -> 198.28.0.2:53 1 64 1 2025-09-26 04:20:11.832 00:00:00.000 UDP 28.104.0.1:54634 -> 198.28.0.2:53 1 64 1 2025-09-26 04:20:11.842 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54634 1 109 1 2025-09-26 04:20:11.842 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39557 1 80 1 2025-09-26 04:16:17.446 00:05:10.002 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2672 1 2025-09-26 04:15:41.416 00:05:51.886 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-26 04:15:41.405 00:05:51.947 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-26 04:18:41.393 00:02:00.001 TCP 28.154.0.1:179 -> 28.157.0.1:37077 3 213 1 2025-09-26 04:18:41.322 00:02:00.072 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-09-26 04:21:12.130 00:00:00.000 UDP 28.104.0.1:37237 -> 198.28.0.2:53 1 64 1 2025-09-26 04:21:12.131 00:00:00.000 UDP 28.104.0.1:40523 -> 198.28.0.2:53 1 64 1 2025-09-26 04:21:12.141 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37237 1 80 1 2025-09-26 04:21:12.141 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40523 1 109 1 2025-09-26 04:16:41.394 00:05:51.918 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-26 04:22:12.381 00:00:00.000 UDP 28.104.0.1:43420 -> 198.28.0.2:53 1 64 1 2025-09-26 04:22:12.381 00:00:00.000 UDP 28.104.0.1:56254 -> 198.28.0.2:53 1 64 1 2025-09-26 04:22:12.391 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56254 1 80 1 2025-09-26 04:22:12.391 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43420 1 109 1 2025-09-26 04:21:41.398 00:00:59.996 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 142 1 2025-09-26 04:21:41.323 00:01:00.071 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-09-26 04:23:12.682 00:00:00.000 UDP 28.104.0.1:34615 -> 198.28.0.2:53 1 64 1 2025-09-26 04:23:12.682 00:00:00.000 UDP 28.104.0.1:37348 -> 198.28.0.2:53 1 64 1 2025-09-26 04:23:12.694 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37348 1 109 1 2025-09-26 04:23:12.693 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34615 1 80 1 2025-09-26 04:23:38.495 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-26 04:24:12.982 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42363 1 80 1 2025-09-26 04:24:12.983 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40906 1 109 1 2025-09-26 04:24:12.973 00:00:00.000 UDP 28.104.0.1:42363 -> 198.28.0.2:53 1 64 1 2025-09-26 04:24:12.974 00:00:00.000 UDP 28.104.0.1:40906 -> 198.28.0.2:53 1 64 1 2025-09-26 04:25:13.286 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54989 1 80 1 2025-09-26 04:25:13.286 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34624 1 109 1 2025-09-26 04:25:13.276 00:00:00.000 UDP 28.104.0.1:54989 -> 198.28.0.2:53 1 64 1 2025-09-26 04:25:13.276 00:00:00.000 UDP 28.104.0.1:34624 -> 198.28.0.2:53 1 64 1 2025-09-26 04:21:33.302 00:05:08.104 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-26 04:23:41.395 00:02:00.001 TCP 28.154.0.1:179 -> 28.157.0.1:37077 3 213 1 2025-09-26 04:23:41.324 00:02:00.072 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-09-26 04:21:37.448 00:05:10.985 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2772 1 2025-09-26 04:26:14.200 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54622 1 80 1 2025-09-26 04:26:14.200 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42484 1 109 1 2025-09-26 04:26:14.191 00:00:00.000 UDP 28.104.0.1:42484 -> 198.28.0.2:53 1 64 1 2025-09-26 04:26:14.191 00:00:00.000 UDP 28.104.0.1:54622 -> 198.28.0.2:53 1 64 1 2025-09-26 04:21:41.418 00:05:51.886 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-26 04:21:41.407 00:05:51.947 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-26 04:27:14.447 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52123 1 80 1 2025-09-26 04:27:14.447 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53729 1 109 1 2025-09-26 04:27:14.438 00:00:00.000 UDP 28.104.0.1:52123 -> 198.28.0.2:53 1 64 1 2025-09-26 04:27:14.438 00:00:00.000 UDP 28.104.0.1:53729 -> 198.28.0.2:53 1 64 1 2025-09-26 04:22:41.394 00:05:51.920 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-26 04:26:41.397 00:01:00.000 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 142 1 2025-09-26 04:26:41.326 00:01:00.071 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-09-26 04:28:14.740 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36020 1 109 1 2025-09-26 04:28:14.740 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47733 1 80 1 2025-09-26 04:28:14.730 00:00:00.000 UDP 28.104.0.1:47733 -> 198.28.0.2:53 1 64 1 2025-09-26 04:28:14.730 00:00:00.000 UDP 28.104.0.1:36020 -> 198.28.0.2:53 1 64 1 2025-09-26 04:28:39.016 00:00:00.020 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-26 04:29:14.993 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35107 1 109 1 2025-09-26 04:29:14.993 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48036 1 80 1 2025-09-26 04:29:14.984 00:00:00.000 UDP 28.104.0.1:48036 -> 198.28.0.2:53 1 64 1 2025-09-26 04:29:14.984 00:00:00.000 UDP 28.104.0.1:35107 -> 198.28.0.2:53 1 64 1 2025-09-26 04:30:15.282 00:00:00.000 UDP 28.104.0.1:56399 -> 198.28.0.2:53 1 64 1 2025-09-26 04:30:15.282 00:00:00.000 UDP 28.104.0.1:33163 -> 198.28.0.2:53 1 64 1 2025-09-26 04:30:15.292 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56399 1 109 1 2025-09-26 04:30:15.292 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33163 1 80 1 2025-09-26 04:28:41.396 00:02:00.002 TCP 28.154.0.1:179 -> 28.157.0.1:37077 3 213 1 2025-09-26 04:28:41.325 00:02:00.073 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-09-26 04:26:57.452 00:05:10.012 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2400 1 2025-09-26 04:31:15.542 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48602 1 80 1 2025-09-26 04:31:15.543 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36274 1 109 1 2025-09-26 04:31:15.531 00:00:00.000 UDP 28.104.0.1:36274 -> 198.28.0.2:53 1 64 1 2025-09-26 04:31:15.531 00:00:00.000 UDP 28.104.0.1:48602 -> 198.28.0.2:53 1 64 1 2025-09-26 04:27:33.304 00:05:08.107 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-26 04:32:15.833 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56022 1 109 1 2025-09-26 04:32:15.832 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34130 1 80 1 2025-09-26 04:32:15.822 00:00:00.000 UDP 28.104.0.1:56022 -> 198.28.0.2:53 1 64 1 2025-09-26 04:32:15.822 00:00:00.000 UDP 28.104.0.1:34130 -> 198.28.0.2:53 1 64 1 2025-09-26 04:27:41.408 00:05:51.950 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-26 04:27:41.417 00:05:51.889 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-26 04:31:41.399 00:01:00.003 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 142 1 2025-09-26 04:31:41.327 00:01:00.075 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-09-26 04:33:16.115 00:00:00.000 UDP 28.104.0.1:43584 -> 198.28.0.2:53 1 64 1 2025-09-26 04:33:16.116 00:00:00.000 UDP 28.104.0.1:54851 -> 198.28.0.2:53 1 64 1 2025-09-26 04:33:16.127 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54851 1 109 1 2025-09-26 04:33:16.126 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43584 1 80 1 2025-09-26 04:28:41.396 00:05:51.923 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-26 04:33:38.684 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-26 04:34:16.403 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34787 1 80 1 2025-09-26 04:34:16.403 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40523 1 109 1 2025-09-26 04:34:16.393 00:00:00.000 UDP 28.104.0.1:40523 -> 198.28.0.2:53 1 64 1 2025-09-26 04:34:16.393 00:00:00.000 UDP 28.104.0.1:34787 -> 198.28.0.2:53 1 64 1 2025-09-26 04:35:16.702 00:00:00.000 UDP 28.104.0.1:53552 -> 198.28.0.2:53 1 64 1 2025-09-26 04:35:16.702 00:00:00.000 UDP 28.104.0.1:50541 -> 198.28.0.2:53 1 64 1 2025-09-26 04:35:16.713 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53552 1 80 1 2025-09-26 04:35:16.713 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50541 1 109 1 2025-09-26 04:33:41.403 00:01:59.999 TCP 28.154.0.1:179 -> 28.157.0.1:37077 3 213 1 2025-09-26 04:36:16.996 00:00:00.000 UDP 28.104.0.1:48273 -> 198.28.0.2:53 1 64 1 2025-09-26 04:36:16.996 00:00:00.000 UDP 28.104.0.1:38895 -> 198.28.0.2:53 1 64 1 2025-09-26 04:36:17.008 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48273 1 109 1 2025-09-26 04:36:17.008 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38895 1 80 1 2025-09-26 04:32:17.465 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 45 3224 1 2025-09-26 04:37:17.298 00:00:00.000 UDP 28.104.0.1:42202 -> 198.28.0.2:53 1 64 1 2025-09-26 04:37:17.298 00:00:00.000 UDP 28.104.0.1:44762 -> 198.28.0.2:53 1 64 1 2025-09-26 04:37:17.309 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44762 1 80 1 2025-09-26 04:37:17.309 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42202 1 109 1 2025-09-26 04:33:33.306 00:05:08.122 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-26 04:36:41.403 00:01:00.019 TCP 28.154.0.1:179 -> 28.157.0.1:37077 3 194 1 2025-09-26 04:33:41.334 00:04:00.088 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-26 04:38:17.623 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40416 1 80 1 2025-09-26 04:38:17.623 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50058 1 109 1 2025-09-26 04:38:17.614 00:00:00.000 UDP 28.104.0.1:40416 -> 198.28.0.2:53 1 64 1 2025-09-26 04:38:17.614 00:00:00.000 UDP 28.104.0.1:50058 -> 198.28.0.2:53 1 64 1 2025-09-26 04:33:41.422 00:05:51.889 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-26 04:33:41.411 00:05:51.950 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-26 04:38:38.848 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-26 04:39:17.918 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57996 1 80 1 2025-09-26 04:39:17.918 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41855 1 109 1 2025-09-26 04:39:17.907 00:00:00.000 UDP 28.104.0.1:57996 -> 198.28.0.2:53 1 64 1 2025-09-26 04:39:17.907 00:00:00.000 UDP 28.104.0.1:41855 -> 198.28.0.2:53 1 64 1 2025-09-26 04:34:41.401 00:05:51.919 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-26 04:40:18.224 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41766 1 109 1 2025-09-26 04:40:18.224 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35521 1 80 1 2025-09-26 04:40:18.214 00:00:00.000 UDP 28.104.0.1:35521 -> 198.28.0.2:53 1 64 1 2025-09-26 04:40:18.214 00:00:00.000 UDP 28.104.0.1:41766 -> 198.28.0.2:53 1 64 1 2025-09-26 04:41:18.503 00:00:00.000 UDP 28.104.0.1:40900 -> 198.28.0.2:53 1 64 1 2025-09-26 04:41:18.503 00:00:00.000 UDP 28.104.0.1:43563 -> 198.28.0.2:53 1 64 1 2025-09-26 04:41:18.514 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40900 1 80 1 2025-09-26 04:41:18.514 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43563 1 109 1 2025-09-26 04:37:37.469 00:05:10.001 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2528 1 2025-09-26 04:42:18.752 00:00:00.000 UDP 28.104.0.1:40254 -> 198.28.0.2:53 1 64 1 2025-09-26 04:42:18.752 00:00:00.000 UDP 28.104.0.1:60258 -> 198.28.0.2:53 1 64 1 2025-09-26 04:42:18.763 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40254 1 80 1 2025-09-26 04:42:18.763 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60258 1 109 1 2025-09-26 04:38:41.379 00:04:00.051 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-09-26 04:38:41.339 00:04:00.091 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-26 04:43:19.061 00:00:00.000 UDP 28.104.0.1:42157 -> 198.28.0.2:53 1 64 1 2025-09-26 04:43:19.062 00:00:00.000 UDP 28.104.0.1:34137 -> 198.28.0.2:53 1 64 1 2025-09-26 04:43:19.074 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42157 1 109 1 2025-09-26 04:43:19.074 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34137 1 80 1 2025-09-26 04:43:38.931 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-26 04:39:33.311 00:05:08.123 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-26 04:44:19.353 00:00:00.000 UDP 28.104.0.1:42885 -> 198.28.0.2:53 1 64 1 2025-09-26 04:44:19.352 00:00:00.000 UDP 28.104.0.1:52440 -> 198.28.0.2:53 1 64 1 2025-09-26 04:44:19.363 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52440 1 109 1 2025-09-26 04:44:19.363 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42885 1 80 1 2025-09-26 04:39:41.422 00:05:51.890 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-26 04:39:41.412 00:05:51.950 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-26 04:43:41.379 00:01:00.044 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-09-26 04:43:41.336 00:01:00.087 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-09-26 04:45:19.647 00:00:00.000 UDP 28.104.0.1:48669 -> 198.28.0.2:53 1 64 1 2025-09-26 04:45:19.647 00:00:00.000 UDP 28.104.0.1:52407 -> 198.28.0.2:53 1 64 1 2025-09-26 04:45:19.657 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48669 1 80 1 2025-09-26 04:45:19.657 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52407 1 109 1 2025-09-26 04:40:41.419 00:05:51.902 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-26 04:46:19.937 00:00:00.000 UDP 28.104.0.1:32861 -> 198.28.0.2:53 1 64 1 2025-09-26 04:46:19.937 00:00:00.000 UDP 28.104.0.1:49166 -> 198.28.0.2:53 1 64 1 2025-09-26 04:46:19.947 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49166 1 109 1 2025-09-26 04:46:19.948 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32861 1 80 1 2025-09-26 04:42:57.471 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2956 1 2025-09-26 04:47:20.261 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58975 1 80 1 2025-09-26 04:47:20.261 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35125 1 109 1 2025-09-26 04:47:20.251 00:00:00.000 UDP 28.104.0.1:58975 -> 198.28.0.2:53 1 64 1 2025-09-26 04:47:20.251 00:00:00.000 UDP 28.104.0.1:35125 -> 198.28.0.2:53 1 64 1 2025-09-26 04:45:41.380 00:02:00.043 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-09-26 04:45:41.337 00:02:00.086 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-09-26 04:48:20.545 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40597 1 109 1 2025-09-26 04:48:20.545 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54101 1 80 1 2025-09-26 04:48:20.535 00:00:00.000 UDP 28.104.0.1:54101 -> 198.28.0.2:53 1 64 1 2025-09-26 04:48:20.535 00:00:00.000 UDP 28.104.0.1:40597 -> 198.28.0.2:53 1 64 1 2025-09-26 04:48:39.325 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-26 04:49:20.798 00:00:00.000 UDP 28.104.0.1:53833 -> 198.28.0.2:53 1 64 1 2025-09-26 04:49:20.799 00:00:00.000 UDP 28.104.0.1:52814 -> 198.28.0.2:53 1 64 1 2025-09-26 04:49:20.809 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53833 1 109 1 2025-09-26 04:49:20.809 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52814 1 80 1 2025-09-26 04:48:41.383 00:01:00.040 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-09-26 04:48:41.336 00:01:00.087 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-09-26 04:45:33.311 00:05:08.123 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-26 04:50:21.127 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56223 1 80 1 2025-09-26 04:50:21.127 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59050 1 109 1 2025-09-26 04:50:21.116 00:00:00.000 UDP 28.104.0.1:56223 -> 198.28.0.2:53 1 64 1 2025-09-26 04:50:21.116 00:00:00.000 UDP 28.104.0.1:59050 -> 198.28.0.2:53 1 64 1 2025-09-26 04:45:41.423 00:05:51.891 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-26 04:45:41.412 00:05:51.951 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-26 04:51:21.426 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55537 1 80 1 2025-09-26 04:51:21.426 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43164 1 109 1 2025-09-26 04:51:21.416 00:00:00.000 UDP 28.104.0.1:55537 -> 198.28.0.2:53 1 64 1 2025-09-26 04:51:21.416 00:00:00.000 UDP 28.104.0.1:43164 -> 198.28.0.2:53 1 64 1 2025-09-26 04:46:41.424 00:05:51.902 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-26 04:52:21.708 00:00:00.000 UDP 28.104.0.1:42828 -> 198.28.0.2:53 1 64 1 2025-09-26 04:52:21.708 00:00:00.000 UDP 28.104.0.1:34472 -> 198.28.0.2:53 1 64 1 2025-09-26 04:52:21.719 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42828 1 80 1 2025-09-26 04:52:21.719 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34472 1 109 1 2025-09-26 04:48:17.476 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2464 1 2025-09-26 04:50:41.381 00:02:00.045 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-09-26 04:50:41.338 00:02:00.088 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-09-26 04:53:22.009 00:00:00.000 UDP 28.104.0.1:55132 -> 198.28.0.2:53 1 64 1 2025-09-26 04:53:22.009 00:00:00.000 UDP 28.104.0.1:40905 -> 198.28.0.2:53 1 64 1 2025-09-26 04:53:22.018 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55132 1 80 1 2025-09-26 04:53:22.018 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40905 1 109 1 2025-09-26 04:53:39.039 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-26 04:54:22.306 00:00:00.000 UDP 28.104.0.1:52472 -> 198.28.0.2:53 1 64 1 2025-09-26 04:54:22.305 00:00:00.000 UDP 28.104.0.1:58224 -> 198.28.0.2:53 1 64 1 2025-09-26 04:54:22.316 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58224 1 80 1 2025-09-26 04:54:22.316 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52472 1 109 1 2025-09-26 04:53:41.387 00:01:00.040 TCP 28.154.0.1:179 -> 28.157.0.1:37077 3 194 1 2025-09-26 04:53:41.341 00:01:00.086 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-09-26 04:55:22.603 00:00:00.000 UDP 28.104.0.1:43986 -> 198.28.0.2:53 1 64 1 2025-09-26 04:55:22.603 00:00:00.000 UDP 28.104.0.1:49856 -> 198.28.0.2:53 1 64 1 2025-09-26 04:55:22.615 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43986 1 109 1 2025-09-26 04:55:22.615 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49856 1 80 1 2025-09-26 04:51:33.313 00:05:08.124 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-26 04:56:22.909 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42695 1 109 1 2025-09-26 04:56:22.909 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55962 1 80 1 2025-09-26 04:56:22.899 00:00:00.000 UDP 28.104.0.1:55962 -> 198.28.0.2:53 1 64 1 2025-09-26 04:56:22.899 00:00:00.000 UDP 28.104.0.1:42695 -> 198.28.0.2:53 1 64 1 2025-09-26 04:51:41.428 00:05:51.889 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-26 04:51:41.417 00:05:51.949 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-26 04:57:23.202 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41379 1 109 1 2025-09-26 04:57:23.202 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51614 1 80 1 2025-09-26 04:57:23.191 00:00:00.000 UDP 28.104.0.1:51614 -> 198.28.0.2:53 1 64 1 2025-09-26 04:57:23.191 00:00:00.000 UDP 28.104.0.1:41379 -> 198.28.0.2:53 1 64 1 2025-09-26 04:52:41.426 00:05:51.901 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-26 04:55:41.428 00:02:00.000 TCP 28.154.0.1:179 -> 28.157.0.1:37077 3 213 1 2025-09-26 04:55:41.344 00:02:00.084 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-09-26 04:53:37.483 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2484 1 2025-09-26 04:58:23.502 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41006 1 80 1 2025-09-26 04:58:23.502 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55721 1 109 1 2025-09-26 04:58:23.491 00:00:00.000 UDP 28.104.0.1:55721 -> 198.28.0.2:53 1 64 1 2025-09-26 04:58:23.492 00:00:00.000 UDP 28.104.0.1:41006 -> 198.28.0.2:53 1 64 1 2025-09-26 04:58:39.143 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 Summary: total flows: 347, total bytes: 96663, total packets: 1415, avg bps: 202, avg pps: 0, avg bpp: 68 Time window: 2025-09-26 03:55:07 - 2025-09-26 04:58:47 Total flows processed: 347, passed: 347, Blocks skipped: 0, Bytes read: 36152 Sys: 0.0030s User: 0.0040s Wall: 0.0085s flows/second: 40741.9 Runtime: 0.0085s