Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-01 09:59:12.738 00:00:00.000 UDP 28.104.0.1:51335 -> 198.28.0.2:53 1 64 1 2025-10-01 09:59:12.738 00:00:00.000 UDP 28.104.0.1:50670 -> 198.28.0.2:53 1 64 1 2025-10-01 09:59:12.750 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51335 1 80 1 2025-10-01 09:59:12.749 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50670 1 109 1 2025-10-01 09:55:44.982 00:05:00.030 TCP 28.151.0.1:39145 -> 28.156.0.1:179 11 667 1 2025-10-01 10:00:13.053 00:00:00.000 UDP 28.104.0.1:33511 -> 198.28.0.2:53 1 64 1 2025-10-01 10:00:13.053 00:00:00.000 UDP 28.104.0.1:45298 -> 198.28.0.2:53 1 64 1 2025-10-01 10:00:13.063 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45298 1 109 1 2025-10-01 10:00:13.063 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33511 1 80 1 2025-10-01 09:55:45.064 00:05:50.635 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-01 09:56:35.750 00:05:09.255 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-01 09:55:45.056 00:06:00.067 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-01 10:01:09.891 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-01 10:01:13.367 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35059 1 80 1 2025-10-01 10:01:13.367 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36196 1 109 1 2025-10-01 10:01:13.357 00:00:00.000 UDP 28.104.0.1:35059 -> 198.28.0.2:53 1 64 1 2025-10-01 10:01:13.357 00:00:00.000 UDP 28.104.0.1:36196 -> 198.28.0.2:53 1 64 1 2025-10-01 09:57:17.863 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2524 1 2025-10-01 09:57:35.709 00:05:09.349 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-01 10:02:13.649 00:00:00.000 UDP 28.104.0.1:55339 -> 198.28.0.2:53 1 64 1 2025-10-01 10:02:13.648 00:00:00.000 UDP 28.104.0.1:55776 -> 198.28.0.2:53 1 64 1 2025-10-01 10:02:13.659 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55339 1 109 1 2025-10-01 10:02:13.658 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55776 1 80 1 2025-10-01 10:03:13.953 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43356 1 109 1 2025-10-01 10:03:13.953 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44919 1 80 1 2025-10-01 10:03:13.942 00:00:00.000 UDP 28.104.0.1:44919 -> 198.28.0.2:53 1 64 1 2025-10-01 10:03:13.942 00:00:00.000 UDP 28.104.0.1:43356 -> 198.28.0.2:53 1 64 1 2025-10-01 10:04:14.266 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47816 1 109 1 2025-10-01 10:04:14.266 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37683 1 80 1 2025-10-01 10:04:14.255 00:00:00.000 UDP 28.104.0.1:47816 -> 198.28.0.2:53 1 64 1 2025-10-01 10:04:14.255 00:00:00.000 UDP 28.104.0.1:37683 -> 198.28.0.2:53 1 64 1 2025-10-01 10:05:14.556 00:00:00.000 UDP 28.104.0.1:46103 -> 198.28.0.2:53 1 64 1 2025-10-01 10:05:14.557 00:00:00.000 UDP 28.104.0.1:44590 -> 198.28.0.2:53 1 64 1 2025-10-01 10:05:14.566 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44590 1 109 1 2025-10-01 10:05:14.566 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46103 1 80 1 2025-10-01 10:00:45.016 00:06:00.045 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-01 10:01:35.700 00:05:09.316 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-01 10:06:09.917 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-01 10:06:14.869 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53242 1 80 1 2025-10-01 10:06:14.869 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49569 1 109 1 2025-10-01 10:06:14.858 00:00:00.000 UDP 28.104.0.1:49569 -> 198.28.0.2:53 1 64 1 2025-10-01 10:06:14.858 00:00:00.000 UDP 28.104.0.1:53242 -> 198.28.0.2:53 1 64 1 2025-10-01 10:01:45.068 00:05:50.633 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-01 10:02:35.750 00:05:09.257 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-01 10:02:37.868 00:05:10.012 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2776 1 2025-10-01 10:07:15.191 00:00:00.000 UDP 28.104.0.1:39923 -> 198.28.0.2:53 1 64 1 2025-10-01 10:07:15.191 00:00:00.000 UDP 28.104.0.1:44827 -> 198.28.0.2:53 1 64 1 2025-10-01 10:07:15.203 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44827 1 109 1 2025-10-01 10:07:15.203 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39923 1 80 1 2025-10-01 10:02:45.057 00:06:00.066 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-01 10:03:35.709 00:05:09.353 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-01 10:08:15.492 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48251 1 109 1 2025-10-01 10:08:15.492 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57888 1 80 1 2025-10-01 10:08:15.482 00:00:00.000 UDP 28.104.0.1:48251 -> 198.28.0.2:53 1 64 1 2025-10-01 10:08:15.482 00:00:00.000 UDP 28.104.0.1:57888 -> 198.28.0.2:53 1 64 1 2025-10-01 10:09:15.771 00:00:00.000 UDP 28.104.0.1:40453 -> 198.28.0.2:53 1 64 1 2025-10-01 10:09:15.771 00:00:00.000 UDP 28.104.0.1:49975 -> 198.28.0.2:53 1 64 1 2025-10-01 10:09:15.780 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49975 1 109 1 2025-10-01 10:09:15.780 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40453 1 80 1 2025-10-01 10:10:16.053 00:00:00.000 UDP 28.104.0.1:34962 -> 198.28.0.2:53 1 64 1 2025-10-01 10:10:16.054 00:00:00.000 UDP 28.104.0.1:55988 -> 198.28.0.2:53 1 64 1 2025-10-01 10:10:16.063 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34962 1 80 1 2025-10-01 10:10:16.063 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55988 1 109 1 2025-10-01 10:11:09.954 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-01 10:11:16.356 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54659 1 80 1 2025-10-01 10:11:16.356 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49960 1 109 1 2025-10-01 10:11:16.346 00:00:00.000 UDP 28.104.0.1:54659 -> 198.28.0.2:53 1 64 1 2025-10-01 10:11:16.346 00:00:00.000 UDP 28.104.0.1:49960 -> 198.28.0.2:53 1 64 1 2025-10-01 10:07:35.701 00:05:09.317 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-01 10:07:57.880 00:05:00.509 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2972 1 2025-10-01 10:12:16.644 00:00:00.000 UDP 28.104.0.1:38442 -> 198.28.0.2:53 1 64 1 2025-10-01 10:12:16.644 00:00:00.000 UDP 28.104.0.1:41732 -> 198.28.0.2:53 1 64 1 2025-10-01 10:12:16.654 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41732 1 109 1 2025-10-01 10:12:16.654 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38442 1 80 1 2025-10-01 10:07:45.073 00:05:50.630 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-01 10:08:35.751 00:05:09.257 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-01 10:07:45.017 00:06:00.046 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-01 10:13:16.936 00:00:00.000 UDP 28.104.0.1:57763 -> 198.28.0.2:53 1 64 1 2025-10-01 10:13:16.936 00:00:00.000 UDP 28.104.0.1:44666 -> 198.28.0.2:53 1 64 1 2025-10-01 10:13:16.947 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57763 1 80 1 2025-10-01 10:13:16.947 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44666 1 109 1 2025-10-01 10:09:35.710 00:05:09.353 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-01 10:14:17.200 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39028 1 109 1 2025-10-01 10:14:17.200 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53013 1 80 1 2025-10-01 10:14:17.190 00:00:00.000 UDP 28.104.0.1:39028 -> 198.28.0.2:53 1 64 1 2025-10-01 10:14:17.190 00:00:00.000 UDP 28.104.0.1:53013 -> 198.28.0.2:53 1 64 1 2025-10-01 10:09:45.063 00:06:00.062 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-01 10:15:17.491 00:00:00.000 UDP 28.104.0.1:52402 -> 198.28.0.2:53 1 64 1 2025-10-01 10:15:17.491 00:00:00.000 UDP 28.104.0.1:58694 -> 198.28.0.2:53 1 64 1 2025-10-01 10:15:17.501 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52402 1 109 1 2025-10-01 10:15:17.501 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58694 1 80 1 2025-10-01 10:16:10.280 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-01 10:16:17.818 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48073 1 109 1 2025-10-01 10:16:17.819 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58647 1 80 1 2025-10-01 10:16:17.807 00:00:00.000 UDP 28.104.0.1:48073 -> 198.28.0.2:53 1 64 1 2025-10-01 10:16:17.808 00:00:00.000 UDP 28.104.0.1:58647 -> 198.28.0.2:53 1 64 1 2025-10-01 10:13:07.885 00:05:10.011 OSPF 28.0.2.1:0 -> 224.0.0.5:0 32 2176 1 2025-10-01 10:17:18.118 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43812 1 80 1 2025-10-01 10:17:18.118 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39151 1 109 1 2025-10-01 10:17:18.108 00:00:00.000 UDP 28.104.0.1:43812 -> 198.28.0.2:53 1 64 1 2025-10-01 10:17:18.108 00:00:00.000 UDP 28.104.0.1:39151 -> 198.28.0.2:53 1 64 1 2025-10-01 10:13:35.702 00:05:09.316 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-01 10:18:18.407 00:00:00.000 UDP 28.104.0.1:38593 -> 198.28.0.2:53 1 64 1 2025-10-01 10:18:18.407 00:00:00.000 UDP 28.104.0.1:51068 -> 198.28.0.2:53 1 64 1 2025-10-01 10:18:18.419 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38593 1 80 1 2025-10-01 10:18:18.419 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51068 1 109 1 2025-10-01 10:13:45.073 00:05:50.632 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-01 10:14:35.754 00:05:09.257 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-01 10:19:18.701 00:00:00.000 UDP 28.104.0.1:53855 -> 198.28.0.2:53 1 64 1 2025-10-01 10:19:18.701 00:00:00.000 UDP 28.104.0.1:46814 -> 198.28.0.2:53 1 64 1 2025-10-01 10:19:18.712 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53855 1 80 1 2025-10-01 10:19:18.712 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46814 1 109 1 2025-10-01 10:15:35.713 00:05:09.354 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-01 10:14:45.020 00:06:00.047 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-01 10:20:18.948 00:00:00.000 UDP 28.104.0.1:57931 -> 198.28.0.2:53 1 64 1 2025-10-01 10:20:18.948 00:00:00.000 UDP 28.104.0.1:54571 -> 198.28.0.2:53 1 64 1 2025-10-01 10:20:18.957 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57931 1 80 1 2025-10-01 10:20:18.957 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54571 1 109 1 2025-10-01 10:21:10.109 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-01 10:21:19.272 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35473 1 109 1 2025-10-01 10:21:19.272 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51308 1 80 1 2025-10-01 10:21:19.261 00:00:00.000 UDP 28.104.0.1:35473 -> 198.28.0.2:53 1 64 1 2025-10-01 10:21:19.260 00:00:00.000 UDP 28.104.0.1:51308 -> 198.28.0.2:53 1 64 1 2025-10-01 10:16:45.064 00:06:00.062 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-01 10:22:19.553 00:00:00.000 UDP 28.104.0.1:40423 -> 198.28.0.2:53 1 64 1 2025-10-01 10:22:19.552 00:00:00.000 UDP 28.104.0.1:44926 -> 198.28.0.2:53 1 64 1 2025-10-01 10:22:19.564 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44926 1 80 1 2025-10-01 10:22:19.564 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40423 1 109 1 2025-10-01 10:18:27.895 00:05:10.656 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2896 1 2025-10-01 10:23:19.864 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36032 1 109 1 2025-10-01 10:23:19.864 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48087 1 80 1 2025-10-01 10:23:19.854 00:00:00.000 UDP 28.104.0.1:36032 -> 198.28.0.2:53 1 64 1 2025-10-01 10:23:19.854 00:00:00.000 UDP 28.104.0.1:48087 -> 198.28.0.2:53 1 64 1 2025-10-01 10:19:35.705 00:05:09.318 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-01 10:24:20.174 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39218 1 109 1 2025-10-01 10:24:20.174 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36578 1 80 1 2025-10-01 10:24:20.163 00:00:00.000 UDP 28.104.0.1:36578 -> 198.28.0.2:53 1 64 1 2025-10-01 10:24:20.163 00:00:00.000 UDP 28.104.0.1:39218 -> 198.28.0.2:53 1 64 1 2025-10-01 10:19:45.073 00:05:50.633 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-01 10:20:35.755 00:05:09.258 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-01 10:25:20.473 00:00:00.000 UDP 28.104.0.1:52891 -> 198.28.0.2:53 1 64 1 2025-10-01 10:25:20.473 00:00:00.000 UDP 28.104.0.1:38860 -> 198.28.0.2:53 1 64 1 2025-10-01 10:25:20.486 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38860 1 109 1 2025-10-01 10:25:20.485 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52891 1 80 1 2025-10-01 10:21:35.717 00:05:09.350 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-01 10:26:10.303 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-01 10:26:24.669 00:00:00.000 UDP 28.104.0.1:50789 -> 198.28.0.2:53 1 64 1 2025-10-01 10:26:24.670 00:00:00.000 UDP 28.104.0.1:59655 -> 198.28.0.2:53 1 64 1 2025-10-01 10:26:24.680 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50789 1 80 1 2025-10-01 10:26:24.680 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59655 1 109 1 2025-10-01 10:21:45.018 00:06:00.050 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-01 10:27:24.981 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60127 1 109 1 2025-10-01 10:27:24.980 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60714 1 80 1 2025-10-01 10:27:24.970 00:00:00.000 UDP 28.104.0.1:60127 -> 198.28.0.2:53 1 64 1 2025-10-01 10:27:24.970 00:00:00.000 UDP 28.104.0.1:60714 -> 198.28.0.2:53 1 64 1 2025-10-01 10:23:47.901 00:05:10.009 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2768 1 2025-10-01 10:28:25.281 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37483 1 109 1 2025-10-01 10:28:25.281 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51224 1 80 1 2025-10-01 10:28:25.271 00:00:00.000 UDP 28.104.0.1:37483 -> 198.28.0.2:53 1 64 1 2025-10-01 10:28:25.271 00:00:00.000 UDP 28.104.0.1:51224 -> 198.28.0.2:53 1 64 1 2025-10-01 10:23:45.067 00:06:00.060 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-01 10:29:25.576 00:00:00.000 UDP 28.104.0.1:46987 -> 198.28.0.2:53 1 64 1 2025-10-01 10:29:25.576 00:00:00.000 UDP 28.104.0.1:55708 -> 198.28.0.2:53 1 64 1 2025-10-01 10:29:25.585 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46987 1 109 1 2025-10-01 10:29:25.586 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55708 1 80 1 2025-10-01 10:25:35.706 00:05:09.318 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-01 10:30:25.882 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53944 1 80 1 2025-10-01 10:30:25.882 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40802 1 109 1 2025-10-01 10:30:25.872 00:00:00.000 UDP 28.104.0.1:53944 -> 198.28.0.2:53 1 64 1 2025-10-01 10:30:25.872 00:00:00.000 UDP 28.104.0.1:40802 -> 198.28.0.2:53 1 64 1 2025-10-01 10:25:45.077 00:05:50.645 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-01 10:26:35.757 00:05:09.258 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-01 10:31:10.361 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-01 10:31:26.187 00:00:00.000 UDP 28.104.0.1:36729 -> 198.28.0.2:53 1 64 1 2025-10-01 10:31:26.187 00:00:00.000 UDP 28.104.0.1:36719 -> 198.28.0.2:53 1 64 1 2025-10-01 10:31:26.198 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36729 1 80 1 2025-10-01 10:31:26.198 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36719 1 109 1 2025-10-01 10:27:35.717 00:05:09.351 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-01 10:32:26.491 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49878 1 80 1 2025-10-01 10:32:26.491 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44137 1 109 1 2025-10-01 10:32:26.480 00:00:00.000 UDP 28.104.0.1:49878 -> 198.28.0.2:53 1 64 1 2025-10-01 10:32:26.480 00:00:00.000 UDP 28.104.0.1:44137 -> 198.28.0.2:53 1 64 1 2025-10-01 10:29:07.909 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2688 1 2025-10-01 10:33:27.265 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51999 1 109 1 2025-10-01 10:33:27.265 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56772 1 80 1 2025-10-01 10:33:27.255 00:00:00.000 UDP 28.104.0.1:51999 -> 198.28.0.2:53 1 64 1 2025-10-01 10:33:27.254 00:00:00.000 UDP 28.104.0.1:56772 -> 198.28.0.2:53 1 64 1 2025-10-01 10:28:45.022 00:06:00.046 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-01 10:34:27.548 00:00:00.000 UDP 28.104.0.1:44839 -> 198.28.0.2:53 1 64 1 2025-10-01 10:34:27.548 00:00:00.000 UDP 28.104.0.1:46524 -> 198.28.0.2:53 1 64 1 2025-10-01 10:34:27.558 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44839 1 109 1 2025-10-01 10:34:27.558 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46524 1 80 1 2025-10-01 10:35:27.802 00:00:00.000 UDP 28.104.0.1:47582 -> 198.28.0.2:53 1 64 1 2025-10-01 10:35:27.802 00:00:00.000 UDP 28.104.0.1:58810 -> 198.28.0.2:53 1 64 1 2025-10-01 10:35:27.812 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58810 1 80 1 2025-10-01 10:35:27.812 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47582 1 109 1 2025-10-01 10:30:45.069 00:06:00.062 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-01 10:31:35.723 00:05:09.304 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-01 10:36:10.382 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-01 10:36:28.107 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52196 1 109 1 2025-10-01 10:36:28.107 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48001 1 80 1 2025-10-01 10:36:28.097 00:00:00.000 UDP 28.104.0.1:52196 -> 198.28.0.2:53 1 64 1 2025-10-01 10:36:28.097 00:00:00.000 UDP 28.104.0.1:48001 -> 198.28.0.2:53 1 64 1 2025-10-01 10:31:45.078 00:05:50.645 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-01 10:32:35.773 00:05:09.243 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-01 10:37:28.399 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37093 1 80 1 2025-10-01 10:37:28.398 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43397 1 109 1 2025-10-01 10:37:28.388 00:00:00.000 UDP 28.104.0.1:37093 -> 198.28.0.2:53 1 64 1 2025-10-01 10:37:28.389 00:00:00.000 UDP 28.104.0.1:43397 -> 198.28.0.2:53 1 64 1 2025-10-01 10:33:35.733 00:05:09.336 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-01 10:38:28.687 00:00:00.000 UDP 28.104.0.1:38759 -> 198.28.0.2:53 1 64 1 2025-10-01 10:38:28.687 00:00:00.000 UDP 28.104.0.1:50410 -> 198.28.0.2:53 1 64 1 2025-10-01 10:38:28.697 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38759 1 109 1 2025-10-01 10:38:28.697 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50410 1 80 1 2025-10-01 10:34:27.914 00:05:10.872 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2996 1 2025-10-01 10:39:28.982 00:00:00.000 UDP 28.104.0.1:55549 -> 198.28.0.2:53 1 64 1 2025-10-01 10:39:28.982 00:00:00.000 UDP 28.104.0.1:51232 -> 198.28.0.2:53 1 64 1 2025-10-01 10:39:28.992 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55549 1 109 1 2025-10-01 10:39:28.992 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51232 1 80 1 2025-10-01 10:40:29.280 00:00:00.000 UDP 28.104.0.1:36912 -> 198.28.0.2:53 1 64 1 2025-10-01 10:40:29.280 00:00:00.000 UDP 28.104.0.1:37109 -> 198.28.0.2:53 1 64 1 2025-10-01 10:40:29.290 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37109 1 80 1 2025-10-01 10:40:29.290 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36912 1 109 1 2025-10-01 10:35:45.064 00:06:00.007 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-01 10:41:10.529 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-01 10:41:29.584 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42253 1 109 1 2025-10-01 10:41:29.584 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46391 1 80 1 2025-10-01 10:41:29.574 00:00:00.000 UDP 28.104.0.1:46391 -> 198.28.0.2:53 1 64 1 2025-10-01 10:41:29.574 00:00:00.000 UDP 28.104.0.1:42253 -> 198.28.0.2:53 1 64 1 2025-10-01 10:37:35.724 00:05:09.303 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-01 10:42:29.873 00:00:00.000 UDP 28.104.0.1:43925 -> 198.28.0.2:53 1 64 1 2025-10-01 10:42:29.873 00:00:00.000 UDP 28.104.0.1:50489 -> 198.28.0.2:53 1 64 1 2025-10-01 10:42:29.882 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43925 1 80 1 2025-10-01 10:42:29.882 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50489 1 109 1 2025-10-01 10:37:45.078 00:05:50.650 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-01 10:38:35.774 00:05:09.244 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-01 10:37:45.069 00:06:00.062 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-01 10:43:30.184 00:00:00.000 UDP 28.104.0.1:54862 -> 198.28.0.2:53 1 64 1 2025-10-01 10:43:30.184 00:00:00.000 UDP 28.104.0.1:55760 -> 198.28.0.2:53 1 64 1 2025-10-01 10:43:30.195 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54862 1 80 1 2025-10-01 10:43:30.195 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55760 1 109 1 2025-10-01 10:39:35.734 00:05:09.338 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-01 10:39:47.918 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2448 1 2025-10-01 10:44:30.488 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47835 1 109 1 2025-10-01 10:44:30.488 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55451 1 80 1 2025-10-01 10:44:30.477 00:00:00.000 UDP 28.104.0.1:55451 -> 198.28.0.2:53 1 64 1 2025-10-01 10:44:30.477 00:00:00.000 UDP 28.104.0.1:47835 -> 198.28.0.2:53 1 64 1 2025-10-01 10:45:30.731 00:00:00.000 UDP 28.104.0.1:38528 -> 198.28.0.2:53 1 64 1 2025-10-01 10:45:30.731 00:00:00.000 UDP 28.104.0.1:57313 -> 198.28.0.2:53 1 64 1 2025-10-01 10:45:30.743 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57313 1 80 1 2025-10-01 10:45:30.742 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38528 1 109 1 2025-10-01 10:46:10.571 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-01 10:46:31.070 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54194 1 80 1 2025-10-01 10:46:31.070 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36811 1 109 1 2025-10-01 10:46:31.051 00:00:00.000 UDP 28.104.0.1:36811 -> 198.28.0.2:53 1 64 1 2025-10-01 10:46:31.051 00:00:00.000 UDP 28.104.0.1:54194 -> 198.28.0.2:53 1 64 1 2025-10-01 10:47:31.313 00:00:00.000 UDP 28.104.0.1:43641 -> 198.28.0.2:53 1 64 1 2025-10-01 10:47:31.313 00:00:00.000 UDP 28.104.0.1:34779 -> 198.28.0.2:53 1 64 1 2025-10-01 10:47:31.324 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43641 1 80 1 2025-10-01 10:47:31.324 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34779 1 109 1 2025-10-01 10:42:45.024 00:06:00.050 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-01 10:43:35.728 00:05:09.300 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-01 10:48:31.617 00:00:00.000 UDP 28.104.0.1:40970 -> 198.28.0.2:53 1 64 1 2025-10-01 10:48:31.617 00:00:00.000 UDP 28.104.0.1:50083 -> 198.28.0.2:53 1 64 1 2025-10-01 10:48:31.626 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40970 1 80 1 2025-10-01 10:48:31.626 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50083 1 109 1 2025-10-01 10:43:45.082 00:05:50.648 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-01 10:44:35.778 00:05:09.240 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-01 10:45:07.923 00:05:10.016 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2544 1 2025-10-01 10:49:31.923 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58600 1 109 1 2025-10-01 10:49:31.923 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60227 1 80 1 2025-10-01 10:49:31.913 00:00:00.000 UDP 28.104.0.1:58600 -> 198.28.0.2:53 1 64 1 2025-10-01 10:49:31.913 00:00:00.000 UDP 28.104.0.1:60227 -> 198.28.0.2:53 1 64 1 2025-10-01 10:44:45.072 00:06:00.060 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-01 10:45:35.739 00:05:09.336 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-01 10:50:32.242 00:00:00.000 UDP 28.104.0.1:58451 -> 198.28.0.2:53 1 64 1 2025-10-01 10:50:32.242 00:00:00.000 UDP 28.104.0.1:58986 -> 198.28.0.2:53 1 64 1 2025-10-01 10:50:32.253 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58451 1 80 1 2025-10-01 10:50:32.252 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58986 1 109 1 2025-10-01 10:51:10.866 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-01 10:51:32.535 00:00:00.000 UDP 28.104.0.1:45253 -> 198.28.0.2:53 1 64 1 2025-10-01 10:51:32.535 00:00:00.000 UDP 28.104.0.1:40589 -> 198.28.0.2:53 1 64 1 2025-10-01 10:51:32.545 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40589 1 109 1 2025-10-01 10:51:32.545 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45253 1 80 1 2025-10-01 10:52:33.076 00:00:00.000 UDP 28.104.0.1:48424 -> 198.28.0.2:53 1 64 1 2025-10-01 10:52:33.077 00:00:00.000 UDP 28.104.0.1:59673 -> 198.28.0.2:53 1 64 1 2025-10-01 10:52:33.087 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59673 1 109 1 2025-10-01 10:52:33.086 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48424 1 80 1 2025-10-01 10:53:33.410 00:00:00.000 UDP 28.104.0.1:58329 -> 198.28.0.2:53 1 64 1 2025-10-01 10:53:33.410 00:00:00.000 UDP 28.104.0.1:44211 -> 198.28.0.2:53 1 64 1 2025-10-01 10:53:33.421 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58329 1 109 1 2025-10-01 10:53:33.421 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44211 1 80 1 2025-10-01 10:49:35.729 00:05:09.300 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-01 10:54:33.709 00:00:00.000 UDP 28.104.0.1:55864 -> 198.28.0.2:53 1 64 1 2025-10-01 10:54:33.709 00:00:00.000 UDP 28.104.0.1:36283 -> 198.28.0.2:53 1 64 1 2025-10-01 10:49:45.086 00:05:50.645 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-01 10:54:33.720 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55864 1 80 1 2025-10-01 10:54:33.720 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36283 1 109 1 2025-10-01 10:50:27.937 00:05:10.018 OSPF 28.0.2.1:0 -> 224.0.0.5:0 42 3020 1 2025-10-01 10:50:35.781 00:05:09.240 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-01 10:49:45.028 00:06:00.049 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-01 10:55:34.007 00:00:00.000 UDP 28.104.0.1:43442 -> 198.28.0.2:53 1 64 1 2025-10-01 10:55:34.007 00:00:00.000 UDP 28.104.0.1:35697 -> 198.28.0.2:53 1 64 1 2025-10-01 10:55:34.019 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43442 1 80 1 2025-10-01 10:55:34.019 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35697 1 109 1 2025-10-01 10:51:35.741 00:05:09.336 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-01 10:56:10.976 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-01 10:56:34.333 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52662 1 109 1 2025-10-01 10:56:34.333 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44181 1 80 1 2025-10-01 10:56:34.323 00:00:00.000 UDP 28.104.0.1:44181 -> 198.28.0.2:53 1 64 1 2025-10-01 10:56:34.323 00:00:00.000 UDP 28.104.0.1:52662 -> 198.28.0.2:53 1 64 1 2025-10-01 10:51:45.075 00:06:00.058 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-01 10:57:34.603 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47403 1 109 1 2025-10-01 10:57:34.603 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43761 1 80 1 2025-10-01 10:57:34.592 00:00:00.000 UDP 28.104.0.1:43761 -> 198.28.0.2:53 1 64 1 2025-10-01 10:57:34.592 00:00:00.000 UDP 28.104.0.1:47403 -> 198.28.0.2:53 1 64 1 2025-10-01 10:58:34.882 00:00:00.000 UDP 28.104.0.1:52805 -> 198.28.0.2:53 1 64 1 2025-10-01 10:58:34.882 00:00:00.000 UDP 28.104.0.1:46700 -> 198.28.0.2:53 1 64 1 2025-10-01 10:58:34.894 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46700 1 109 1 2025-10-01 10:58:34.893 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52805 1 80 1 Summary: total flows: 320, total bytes: 95938, total packets: 1414, avg bps: 203, avg pps: 0, avg bpp: 67 Time window: 2025-10-01 09:55:44 - 2025-10-01 10:58:34 Total flows processed: 320, passed: 320, Blocks skipped: 0, Bytes read: 33344 Sys: 0.0034s User: 0.0034s Wall: 0.0044s flows/second: 72794.1 Runtime: 0.0044s