Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-03 15:55:36.738 00:05:09.326 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-03 15:55:36.690 00:05:09.515 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-03 15:55:36.690 00:05:09.385 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-03 15:59:47.089 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50003 1 80 1 2025-10-03 15:59:47.089 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56194 1 109 1 2025-10-03 15:59:47.078 00:00:00.000 UDP 28.104.0.1:56194 -> 198.28.0.2:53 1 64 1 2025-10-03 15:59:47.078 00:00:00.000 UDP 28.104.0.1:50003 -> 198.28.0.2:53 1 64 1 2025-10-03 16:00:47.371 00:00:00.000 UDP 28.104.0.1:54629 -> 198.28.0.2:53 1 64 1 2025-10-03 16:00:47.371 00:00:00.000 UDP 28.104.0.1:57955 -> 198.28.0.2:53 1 64 1 2025-10-03 16:00:47.382 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57955 1 109 1 2025-10-03 16:00:47.382 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54629 1 80 1 2025-10-03 15:57:36.698 00:05:09.496 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-03 16:01:47.674 00:00:00.000 UDP 28.104.0.1:57260 -> 198.28.0.2:53 1 64 1 2025-10-03 16:01:47.674 00:00:00.000 UDP 28.104.0.1:55458 -> 198.28.0.2:53 1 64 1 2025-10-03 16:01:47.684 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57260 1 109 1 2025-10-03 16:01:47.684 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55458 1 80 1 2025-10-03 16:02:14.786 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-03 16:02:48.152 00:00:00.000 UDP 28.104.0.1:47809 -> 198.28.0.2:53 1 64 1 2025-10-03 16:02:48.152 00:00:00.000 UDP 28.104.0.1:57993 -> 198.28.0.2:53 1 64 1 2025-10-03 16:02:48.161 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57993 1 80 1 2025-10-03 16:02:48.161 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47809 1 109 1 2025-10-03 15:58:42.490 00:05:10.009 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2512 1 2025-10-03 15:59:46.195 00:04:00.000 TCP 28.154.0.1:179 -> 28.157.0.1:37077 5 355 1 2025-10-03 15:58:46.033 00:06:00.007 TCP 28.154.0.1:179 -> 28.155.0.1:36643 13 790 1 2025-10-03 16:03:48.501 00:00:00.000 UDP 28.104.0.1:35589 -> 198.28.0.2:53 1 64 1 2025-10-03 16:03:48.501 00:00:00.000 UDP 28.104.0.1:55482 -> 198.28.0.2:53 1 64 1 2025-10-03 16:03:48.513 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35589 1 80 1 2025-10-03 16:03:48.512 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55482 1 109 1 2025-10-03 16:04:48.761 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44222 1 109 1 2025-10-03 16:04:48.761 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53600 1 80 1 2025-10-03 16:04:48.751 00:00:00.000 UDP 28.104.0.1:53600 -> 198.28.0.2:53 1 64 1 2025-10-03 16:04:48.751 00:00:00.000 UDP 28.104.0.1:44222 -> 198.28.0.2:53 1 64 1 2025-10-03 16:01:36.739 00:05:09.325 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-03 16:01:36.689 00:05:09.517 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-03 16:01:36.689 00:05:09.385 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-03 16:05:49.054 00:00:00.000 UDP 28.104.0.1:50506 -> 198.28.0.2:53 1 64 1 2025-10-03 16:05:49.054 00:00:00.000 UDP 28.104.0.1:45187 -> 198.28.0.2:53 1 64 1 2025-10-03 16:05:49.065 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50506 1 109 1 2025-10-03 16:05:49.065 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45187 1 80 1 2025-10-03 16:06:49.366 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43885 1 109 1 2025-10-03 16:06:49.366 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47878 1 80 1 2025-10-03 16:06:49.355 00:00:00.000 UDP 28.104.0.1:43885 -> 198.28.0.2:53 1 64 1 2025-10-03 16:06:49.355 00:00:00.000 UDP 28.104.0.1:47878 -> 198.28.0.2:53 1 64 1 2025-10-03 16:07:14.804 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-03 16:03:36.703 00:05:09.495 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-03 16:07:49.666 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38475 1 109 1 2025-10-03 16:07:49.666 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54173 1 80 1 2025-10-03 16:07:49.657 00:00:00.000 UDP 28.104.0.1:38475 -> 198.28.0.2:53 1 64 1 2025-10-03 16:07:49.657 00:00:00.000 UDP 28.104.0.1:54173 -> 198.28.0.2:53 1 64 1 2025-10-03 16:04:02.499 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2604 1 2025-10-03 16:04:46.197 00:04:00.001 TCP 28.154.0.1:179 -> 28.157.0.1:37077 5 355 1 2025-10-03 16:08:49.956 00:00:00.000 UDP 28.104.0.1:34354 -> 198.28.0.2:53 1 64 1 2025-10-03 16:08:49.956 00:00:00.000 UDP 28.104.0.1:43612 -> 198.28.0.2:53 1 64 1 2025-10-03 16:08:49.968 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43612 1 80 1 2025-10-03 16:08:49.967 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34354 1 109 1 2025-10-03 16:04:46.196 00:06:00.001 TCP 28.154.0.1:179 -> 28.155.0.1:36643 13 809 1 2025-10-03 16:09:50.259 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52159 1 80 1 2025-10-03 16:09:50.259 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45894 1 109 1 2025-10-03 16:09:50.248 00:00:00.000 UDP 28.104.0.1:52159 -> 198.28.0.2:53 1 64 1 2025-10-03 16:09:50.248 00:00:00.000 UDP 28.104.0.1:45894 -> 198.28.0.2:53 1 64 1 2025-10-03 16:09:46.198 00:01:00.000 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 142 1 2025-10-03 16:10:50.557 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47344 1 80 1 2025-10-03 16:10:50.558 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37470 1 109 1 2025-10-03 16:10:50.548 00:00:00.000 UDP 28.104.0.1:47344 -> 198.28.0.2:53 1 64 1 2025-10-03 16:10:50.549 00:00:00.000 UDP 28.104.0.1:37470 -> 198.28.0.2:53 1 64 1 2025-10-03 16:07:36.743 00:05:09.322 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-03 16:07:36.693 00:05:09.514 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-03 16:07:36.693 00:05:09.382 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-03 16:11:50.863 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47251 1 80 1 2025-10-03 16:11:50.863 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34251 1 109 1 2025-10-03 16:11:50.853 00:00:00.000 UDP 28.104.0.1:47251 -> 198.28.0.2:53 1 64 1 2025-10-03 16:11:50.853 00:00:00.000 UDP 28.104.0.1:34251 -> 198.28.0.2:53 1 64 1 2025-10-03 16:12:15.144 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-03 16:12:51.463 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44252 1 109 1 2025-10-03 16:12:51.463 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60263 1 80 1 2025-10-03 16:12:51.453 00:00:00.000 UDP 28.104.0.1:44252 -> 198.28.0.2:53 1 64 1 2025-10-03 16:12:51.453 00:00:00.000 UDP 28.104.0.1:60263 -> 198.28.0.2:53 1 64 1 2025-10-03 16:09:22.502 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2872 1 2025-10-03 16:09:36.703 00:05:09.495 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-03 16:13:51.761 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42478 1 109 1 2025-10-03 16:13:51.762 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36487 1 80 1 2025-10-03 16:13:51.751 00:00:00.000 UDP 28.104.0.1:36487 -> 198.28.0.2:53 1 64 1 2025-10-03 16:13:51.751 00:00:00.000 UDP 28.104.0.1:42478 -> 198.28.0.2:53 1 64 1 2025-10-03 16:14:52.066 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54990 1 80 1 2025-10-03 16:14:52.066 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39703 1 109 1 2025-10-03 16:14:52.055 00:00:00.000 UDP 28.104.0.1:54990 -> 198.28.0.2:53 1 64 1 2025-10-03 16:14:52.055 00:00:00.000 UDP 28.104.0.1:39703 -> 198.28.0.2:53 1 64 1 2025-10-03 16:11:46.197 00:04:00.001 TCP 28.154.0.1:179 -> 28.157.0.1:37077 5 355 1 2025-10-03 16:11:46.039 00:04:00.159 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-03 16:15:52.313 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59244 1 109 1 2025-10-03 16:15:52.313 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56833 1 80 1 2025-10-03 16:15:52.303 00:00:00.000 UDP 28.104.0.1:56833 -> 198.28.0.2:53 1 64 1 2025-10-03 16:15:52.303 00:00:00.000 UDP 28.104.0.1:59244 -> 198.28.0.2:53 1 64 1 2025-10-03 16:16:52.619 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42827 1 109 1 2025-10-03 16:16:52.619 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53042 1 80 1 2025-10-03 16:16:52.608 00:00:00.000 UDP 28.104.0.1:42827 -> 198.28.0.2:53 1 64 1 2025-10-03 16:16:52.608 00:00:00.000 UDP 28.104.0.1:53042 -> 198.28.0.2:53 1 64 1 2025-10-03 16:17:15.056 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-03 16:13:36.744 00:05:09.323 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-03 16:13:36.694 00:05:09.514 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-03 16:13:36.694 00:05:09.383 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-03 16:17:52.908 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45681 1 109 1 2025-10-03 16:17:52.908 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45586 1 80 1 2025-10-03 16:17:52.898 00:00:00.000 UDP 28.104.0.1:45586 -> 198.28.0.2:53 1 64 1 2025-10-03 16:17:52.898 00:00:00.000 UDP 28.104.0.1:45681 -> 198.28.0.2:53 1 64 1 2025-10-03 16:18:53.206 00:00:00.000 UDP 28.104.0.1:39905 -> 198.28.0.2:53 1 64 1 2025-10-03 16:18:53.206 00:00:00.000 UDP 28.104.0.1:36322 -> 198.28.0.2:53 1 64 1 2025-10-03 16:14:42.505 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 42 2984 1 2025-10-03 16:18:53.216 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36322 1 80 1 2025-10-03 16:18:53.216 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39905 1 109 1 2025-10-03 16:15:36.704 00:05:09.494 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-03 16:19:53.502 00:00:00.000 UDP 28.104.0.1:60806 -> 198.28.0.2:53 1 64 1 2025-10-03 16:19:53.502 00:00:00.000 UDP 28.104.0.1:44359 -> 198.28.0.2:53 1 64 1 2025-10-03 16:19:53.512 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60806 1 80 1 2025-10-03 16:19:53.515 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44359 1 109 1 2025-10-03 16:16:46.198 00:04:00.001 TCP 28.154.0.1:179 -> 28.157.0.1:37077 5 355 1 2025-10-03 16:16:46.038 00:04:00.161 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-03 16:20:53.757 00:00:00.000 UDP 28.104.0.1:43240 -> 198.28.0.2:53 1 64 1 2025-10-03 16:20:53.757 00:00:00.000 UDP 28.104.0.1:44620 -> 198.28.0.2:53 1 64 1 2025-10-03 16:20:53.768 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44620 1 109 1 2025-10-03 16:20:53.768 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43240 1 80 1 2025-10-03 16:21:54.033 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38990 1 109 1 2025-10-03 16:21:54.029 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55886 1 80 1 2025-10-03 16:21:54.017 00:00:00.000 UDP 28.104.0.1:55886 -> 198.28.0.2:53 1 64 1 2025-10-03 16:21:54.021 00:00:00.000 UDP 28.104.0.1:38990 -> 198.28.0.2:53 1 64 1 2025-10-03 16:22:15.097 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-03 16:22:54.286 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41539 1 80 1 2025-10-03 16:22:54.286 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57241 1 109 1 2025-10-03 16:22:54.275 00:00:00.000 UDP 28.104.0.1:57241 -> 198.28.0.2:53 1 64 1 2025-10-03 16:22:54.275 00:00:00.000 UDP 28.104.0.1:41539 -> 198.28.0.2:53 1 64 1 2025-10-03 16:19:36.697 00:05:09.380 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-03 16:19:36.748 00:05:09.320 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-03 16:19:36.697 00:05:09.512 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-03 16:23:54.578 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59399 1 109 1 2025-10-03 16:23:54.579 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43462 1 80 1 2025-10-03 16:23:54.568 00:00:00.000 UDP 28.104.0.1:59399 -> 198.28.0.2:53 1 64 1 2025-10-03 16:23:54.568 00:00:00.000 UDP 28.104.0.1:43462 -> 198.28.0.2:53 1 64 1 2025-10-03 16:20:02.511 00:05:10.010 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2488 1 2025-10-03 16:24:54.872 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49566 1 80 1 2025-10-03 16:24:54.872 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38181 1 109 1 2025-10-03 16:24:54.861 00:00:00.000 UDP 28.104.0.1:49566 -> 198.28.0.2:53 1 64 1 2025-10-03 16:24:54.861 00:00:00.000 UDP 28.104.0.1:38181 -> 198.28.0.2:53 1 64 1 2025-10-03 16:21:46.199 00:04:00.002 TCP 28.154.0.1:179 -> 28.157.0.1:37077 5 355 1 2025-10-03 16:21:36.707 00:05:09.494 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-03 16:25:55.172 00:00:00.000 UDP 28.104.0.1:40764 -> 198.28.0.2:53 1 64 1 2025-10-03 16:25:55.172 00:00:00.000 UDP 28.104.0.1:43408 -> 198.28.0.2:53 1 64 1 2025-10-03 16:25:55.182 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43408 1 80 1 2025-10-03 16:25:55.182 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40764 1 109 1 2025-10-03 16:21:46.065 00:06:00.136 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-03 16:26:55.425 00:00:00.000 UDP 28.104.0.1:40511 -> 198.28.0.2:53 1 64 1 2025-10-03 16:26:55.425 00:00:00.000 UDP 28.104.0.1:52662 -> 198.28.0.2:53 1 64 1 2025-10-03 16:26:55.435 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52662 1 80 1 2025-10-03 16:26:55.435 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40511 1 109 1 2025-10-03 16:27:15.347 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-03 16:27:55.726 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48962 1 109 1 2025-10-03 16:27:55.726 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35571 1 80 1 2025-10-03 16:27:55.716 00:00:00.000 UDP 28.104.0.1:35571 -> 198.28.0.2:53 1 64 1 2025-10-03 16:27:55.716 00:00:00.000 UDP 28.104.0.1:48962 -> 198.28.0.2:53 1 64 1 2025-10-03 16:28:56.006 00:00:00.000 UDP 28.104.0.1:43898 -> 198.28.0.2:53 1 64 1 2025-10-03 16:28:56.006 00:00:00.000 UDP 28.104.0.1:33813 -> 198.28.0.2:53 1 64 1 2025-10-03 16:28:56.016 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33813 1 109 1 2025-10-03 16:28:56.016 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43898 1 80 1 2025-10-03 16:25:22.520 00:05:10.016 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2824 1 2025-10-03 16:25:36.748 00:05:09.325 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-03 16:25:36.698 00:05:09.514 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-03 16:25:36.698 00:05:09.385 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-03 16:29:56.759 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54871 1 109 1 2025-10-03 16:29:56.760 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57165 1 80 1 2025-10-03 16:29:56.750 00:00:00.000 UDP 28.104.0.1:54871 -> 198.28.0.2:53 1 64 1 2025-10-03 16:29:56.750 00:00:00.000 UDP 28.104.0.1:57165 -> 198.28.0.2:53 1 64 1 2025-10-03 16:26:46.201 00:04:00.001 TCP 28.154.0.1:179 -> 28.157.0.1:37077 5 355 1 2025-10-03 16:30:57.075 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38435 1 109 1 2025-10-03 16:30:57.075 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41997 1 80 1 2025-10-03 16:30:57.065 00:00:00.000 UDP 28.104.0.1:38435 -> 198.28.0.2:53 1 64 1 2025-10-03 16:30:57.065 00:00:00.000 UDP 28.104.0.1:41997 -> 198.28.0.2:53 1 64 1 2025-10-03 16:27:36.711 00:05:09.491 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-03 16:31:57.986 00:00:00.000 UDP 28.104.0.1:58251 -> 198.28.0.2:53 1 64 1 2025-10-03 16:31:57.986 00:00:00.000 UDP 28.104.0.1:47496 -> 198.28.0.2:53 1 64 1 2025-10-03 16:31:57.996 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58251 1 109 1 2025-10-03 16:31:57.996 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47496 1 80 1 2025-10-03 16:32:15.460 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-03 16:32:58.279 00:00:00.000 UDP 28.104.0.1:49523 -> 198.28.0.2:53 1 64 1 2025-10-03 16:32:58.279 00:00:00.000 UDP 28.104.0.1:39334 -> 198.28.0.2:53 1 64 1 2025-10-03 16:32:58.288 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49523 1 80 1 2025-10-03 16:32:58.289 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39334 1 109 1 2025-10-03 16:28:46.071 00:06:00.131 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-03 16:33:58.630 00:00:00.000 UDP 28.104.0.1:43782 -> 198.28.0.2:53 1 64 1 2025-10-03 16:33:58.630 00:00:00.000 UDP 28.104.0.1:59945 -> 198.28.0.2:53 1 64 1 2025-10-03 16:33:58.641 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43782 1 80 1 2025-10-03 16:33:58.640 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59945 1 109 1 2025-10-03 16:30:42.536 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2588 1 2025-10-03 16:34:58.938 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47939 1 80 1 2025-10-03 16:34:58.938 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59814 1 109 1 2025-10-03 16:34:58.928 00:00:00.000 UDP 28.104.0.1:59814 -> 198.28.0.2:53 1 64 1 2025-10-03 16:34:58.928 00:00:00.000 UDP 28.104.0.1:47939 -> 198.28.0.2:53 1 64 1 2025-10-03 16:31:36.752 00:05:09.327 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-03 16:31:46.202 00:04:00.000 TCP 28.154.0.1:179 -> 28.157.0.1:37077 5 355 1 2025-10-03 16:31:36.702 00:05:09.511 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-03 16:31:36.702 00:05:09.389 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-03 16:35:59.249 00:00:00.000 UDP 28.104.0.1:34404 -> 198.28.0.2:53 1 64 1 2025-10-03 16:35:59.249 00:00:00.000 UDP 28.104.0.1:55489 -> 198.28.0.2:53 1 64 1 2025-10-03 16:35:59.260 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55489 1 80 1 2025-10-03 16:35:59.259 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34404 1 109 1 2025-10-03 16:36:59.516 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51254 1 80 1 2025-10-03 16:36:59.516 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46780 1 109 1 2025-10-03 16:36:59.505 00:00:00.000 UDP 28.104.0.1:51254 -> 198.28.0.2:53 1 64 1 2025-10-03 16:36:59.505 00:00:00.000 UDP 28.104.0.1:46780 -> 198.28.0.2:53 1 64 1 2025-10-03 16:37:15.356 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-03 16:33:36.712 00:05:09.491 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-03 16:37:59.812 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51165 1 80 1 2025-10-03 16:37:59.812 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58188 1 109 1 2025-10-03 16:37:59.803 00:00:00.000 UDP 28.104.0.1:51165 -> 198.28.0.2:53 1 64 1 2025-10-03 16:37:59.803 00:00:00.000 UDP 28.104.0.1:58188 -> 198.28.0.2:53 1 64 1 2025-10-03 16:39:00.126 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34038 1 80 1 2025-10-03 16:39:00.126 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38125 1 109 1 2025-10-03 16:39:00.115 00:00:00.000 UDP 28.104.0.1:34038 -> 198.28.0.2:53 1 64 1 2025-10-03 16:39:00.115 00:00:00.000 UDP 28.104.0.1:38125 -> 198.28.0.2:53 1 64 1 2025-10-03 16:40:00.464 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46120 1 109 1 2025-10-03 16:40:00.464 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53359 1 80 1 2025-10-03 16:40:00.453 00:00:00.000 UDP 28.104.0.1:46120 -> 198.28.0.2:53 1 64 1 2025-10-03 16:40:00.453 00:00:00.000 UDP 28.104.0.1:53359 -> 198.28.0.2:53 1 64 1 2025-10-03 16:36:02.545 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2688 1 2025-10-03 16:36:46.202 00:04:00.001 TCP 28.154.0.1:179 -> 28.157.0.1:37077 5 355 1 2025-10-03 16:35:46.072 00:06:00.001 TCP 28.154.0.1:179 -> 28.155.0.1:36643 13 790 1 2025-10-03 16:41:00.756 00:00:00.000 UDP 28.104.0.1:53924 -> 198.28.0.2:53 1 64 1 2025-10-03 16:41:00.756 00:00:00.000 UDP 28.104.0.1:58068 -> 198.28.0.2:53 1 64 1 2025-10-03 16:41:00.767 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53924 1 80 1 2025-10-03 16:41:00.767 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58068 1 109 1 2025-10-03 16:37:36.753 00:05:09.327 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-03 16:37:36.703 00:05:09.511 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-03 16:37:36.703 00:05:09.386 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-03 16:42:01.059 00:00:00.000 UDP 28.104.0.1:35536 -> 198.28.0.2:53 1 64 1 2025-10-03 16:42:01.058 00:00:00.000 UDP 28.104.0.1:41801 -> 198.28.0.2:53 1 64 1 2025-10-03 16:42:01.069 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35536 1 80 1 2025-10-03 16:42:01.068 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41801 1 109 1 2025-10-03 16:42:15.352 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-03 16:41:46.203 00:01:00.001 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 142 1 2025-10-03 16:41:46.203 00:01:00.001 TCP 28.154.0.1:179 -> 28.155.0.1:36643 3 194 1 2025-10-03 16:43:01.355 00:00:00.000 UDP 28.104.0.1:43966 -> 198.28.0.2:53 1 64 1 2025-10-03 16:43:01.355 00:00:00.000 UDP 28.104.0.1:60076 -> 198.28.0.2:53 1 64 1 2025-10-03 16:43:01.364 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43966 1 80 1 2025-10-03 16:43:01.364 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60076 1 109 1 2025-10-03 16:39:36.715 00:05:09.490 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-03 16:44:01.655 00:00:00.000 UDP 28.104.0.1:46789 -> 198.28.0.2:53 1 64 1 2025-10-03 16:44:01.655 00:00:00.000 UDP 28.104.0.1:33776 -> 198.28.0.2:53 1 64 1 2025-10-03 16:44:01.666 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33776 1 109 1 2025-10-03 16:44:01.666 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46789 1 80 1 2025-10-03 16:45:01.947 00:00:00.000 UDP 28.104.0.1:35831 -> 198.28.0.2:53 1 64 1 2025-10-03 16:45:01.947 00:00:00.000 UDP 28.104.0.1:44877 -> 198.28.0.2:53 1 64 1 2025-10-03 16:45:01.958 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35831 1 80 1 2025-10-03 16:45:01.958 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44877 1 109 1 2025-10-03 16:41:22.550 00:05:10.016 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2792 1 2025-10-03 16:46:02.247 00:00:00.000 UDP 28.104.0.1:43186 -> 198.28.0.2:53 1 64 1 2025-10-03 16:46:02.247 00:00:00.000 UDP 28.104.0.1:48785 -> 198.28.0.2:53 1 64 1 2025-10-03 16:46:02.257 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48785 1 109 1 2025-10-03 16:46:02.258 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43186 1 80 1 2025-10-03 16:47:02.779 00:00:00.000 UDP 28.104.0.1:38324 -> 198.28.0.2:53 1 64 1 2025-10-03 16:47:02.779 00:00:00.000 UDP 28.104.0.1:47783 -> 198.28.0.2:53 1 64 1 2025-10-03 16:47:02.790 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47783 1 109 1 2025-10-03 16:47:02.790 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38324 1 80 1 2025-10-03 16:47:15.902 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-03 16:43:36.705 00:05:09.510 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-03 16:43:36.705 00:05:09.387 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-03 16:43:46.204 00:04:00.001 TCP 28.154.0.1:179 -> 28.157.0.1:37077 5 355 1 2025-10-03 16:43:46.073 00:04:00.132 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-03 16:43:36.758 00:05:09.324 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-03 16:48:03.087 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56996 1 109 1 2025-10-03 16:48:03.087 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55244 1 80 1 2025-10-03 16:48:03.076 00:00:00.000 UDP 28.104.0.1:56996 -> 198.28.0.2:53 1 64 1 2025-10-03 16:48:03.076 00:00:00.000 UDP 28.104.0.1:55244 -> 198.28.0.2:53 1 64 1 2025-10-03 16:49:03.393 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37622 1 109 1 2025-10-03 16:49:03.394 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57422 1 80 1 2025-10-03 16:49:03.383 00:00:00.000 UDP 28.104.0.1:37622 -> 198.28.0.2:53 1 64 1 2025-10-03 16:49:03.384 00:00:00.000 UDP 28.104.0.1:57422 -> 198.28.0.2:53 1 64 1 2025-10-03 16:45:36.718 00:05:09.489 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-03 16:50:03.687 00:00:00.000 UDP 28.104.0.1:55735 -> 198.28.0.2:53 1 64 1 2025-10-03 16:50:03.688 00:00:00.000 UDP 28.104.0.1:35359 -> 198.28.0.2:53 1 64 1 2025-10-03 16:50:03.699 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55735 1 80 1 2025-10-03 16:50:03.698 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35359 1 109 1 2025-10-03 16:46:42.566 00:05:10.010 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2920 1 2025-10-03 16:51:03.990 00:00:00.000 UDP 28.104.0.1:42347 -> 198.28.0.2:53 1 64 1 2025-10-03 16:51:03.990 00:00:00.000 UDP 28.104.0.1:39872 -> 198.28.0.2:53 1 64 1 2025-10-03 16:51:04.003 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39872 1 109 1 2025-10-03 16:51:04.002 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42347 1 80 1 2025-10-03 16:52:04.305 00:00:00.000 UDP 28.104.0.1:33901 -> 198.28.0.2:53 1 64 1 2025-10-03 16:52:04.306 00:00:00.000 UDP 28.104.0.1:44535 -> 198.28.0.2:53 1 64 1 2025-10-03 16:52:04.319 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33901 1 80 1 2025-10-03 16:52:04.317 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44535 1 109 1 2025-10-03 16:52:15.766 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-03 16:48:46.206 00:04:00.001 TCP 28.154.0.1:179 -> 28.157.0.1:37077 5 355 1 2025-10-03 16:48:46.078 00:04:00.129 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-03 16:53:04.618 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50599 1 109 1 2025-10-03 16:53:04.618 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39866 1 80 1 2025-10-03 16:53:04.610 00:00:00.000 UDP 28.104.0.1:39866 -> 198.28.0.2:53 1 64 1 2025-10-03 16:53:04.609 00:00:00.000 UDP 28.104.0.1:50599 -> 198.28.0.2:53 1 64 1 2025-10-03 16:49:36.757 00:05:09.324 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-03 16:49:36.707 00:05:09.511 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-03 16:49:36.707 00:05:09.384 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-03 16:54:04.902 00:00:00.000 UDP 28.104.0.1:54215 -> 198.28.0.2:53 1 64 1 2025-10-03 16:54:04.902 00:00:00.000 UDP 28.104.0.1:37176 -> 198.28.0.2:53 1 64 1 2025-10-03 16:54:04.913 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37176 1 80 1 2025-10-03 16:54:04.913 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54215 1 109 1 2025-10-03 16:55:05.200 00:00:00.000 UDP 28.104.0.1:58148 -> 198.28.0.2:53 1 64 1 2025-10-03 16:55:05.200 00:00:00.000 UDP 28.104.0.1:57874 -> 198.28.0.2:53 1 64 1 2025-10-03 16:55:05.210 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57874 1 80 1 2025-10-03 16:55:05.210 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58148 1 109 1 2025-10-03 16:51:36.717 00:05:09.490 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-03 16:56:05.495 00:00:00.000 UDP 28.104.0.1:59051 -> 198.28.0.2:53 1 64 1 2025-10-03 16:56:05.495 00:00:00.000 UDP 28.104.0.1:48354 -> 198.28.0.2:53 1 64 1 2025-10-03 16:56:05.505 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48354 1 109 1 2025-10-03 16:56:05.505 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59051 1 80 1 2025-10-03 16:52:02.577 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2876 1 2025-10-03 16:57:05.794 00:00:00.000 UDP 28.104.0.1:57003 -> 198.28.0.2:53 1 64 1 2025-10-03 16:57:05.794 00:00:00.000 UDP 28.104.0.1:40448 -> 198.28.0.2:53 1 64 1 2025-10-03 16:57:05.805 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57003 1 80 1 2025-10-03 16:57:05.805 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40448 1 109 1 2025-10-03 16:57:15.860 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-03 16:53:46.207 00:04:00.001 TCP 28.154.0.1:179 -> 28.157.0.1:37077 5 355 1 2025-10-03 16:58:06.056 00:00:00.000 UDP 28.104.0.1:37560 -> 198.28.0.2:53 1 64 1 2025-10-03 16:58:06.056 00:00:00.000 UDP 28.104.0.1:53711 -> 198.28.0.2:53 1 64 1 2025-10-03 16:58:06.066 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53711 1 109 1 2025-10-03 16:58:06.066 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37560 1 80 1 2025-10-03 16:53:46.080 00:06:00.128 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 Summary: total flows: 323, total bytes: 93210, total packets: 1362, avg bps: 193, avg pps: 0, avg bpp: 68 Time window: 2025-10-03 15:55:36 - 2025-10-03 16:59:46 Total flows processed: 323, passed: 323, Blocks skipped: 0, Bytes read: 33656 Sys: 0.0044s User: 0.0022s Wall: 0.0043s flows/second: 75239.4 Runtime: 0.0043s