Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-04 05:54:53.762 00:05:00.532 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2620 1 2025-10-04 05:59:10.360 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40054 1 109 1 2025-10-04 05:59:10.359 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40121 1 80 1 2025-10-04 05:59:10.348 00:00:00.000 UDP 28.104.0.1:40121 -> 198.28.0.2:53 1 64 1 2025-10-04 05:59:10.348 00:00:00.000 UDP 28.104.0.1:40054 -> 198.28.0.2:53 1 64 1 2025-10-04 05:54:46.315 00:05:50.704 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-04 05:55:36.967 00:05:09.520 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-04 05:55:36.967 00:05:09.361 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-04 06:00:10.649 00:00:00.000 UDP 28.104.0.1:34715 -> 198.28.0.2:53 1 64 1 2025-10-04 06:00:10.649 00:00:00.000 UDP 28.104.0.1:53512 -> 198.28.0.2:53 1 64 1 2025-10-04 06:00:10.659 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34715 1 80 1 2025-10-04 06:00:10.660 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53512 1 109 1 2025-10-04 05:59:46.415 00:01:00.061 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-04 05:56:46.315 00:04:00.160 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-04 06:01:10.947 00:00:00.000 UDP 28.104.0.1:58946 -> 198.28.0.2:53 1 64 1 2025-10-04 06:01:10.947 00:00:00.000 UDP 28.104.0.1:46458 -> 198.28.0.2:53 1 64 1 2025-10-04 06:01:10.957 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46458 1 80 1 2025-10-04 06:01:10.957 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58946 1 109 1 2025-10-04 05:57:36.977 00:05:09.498 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-04 06:02:11.256 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55286 1 109 1 2025-10-04 06:02:11.257 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57150 1 80 1 2025-10-04 06:02:11.246 00:00:00.000 UDP 28.104.0.1:57150 -> 198.28.0.2:53 1 64 1 2025-10-04 06:02:11.245 00:00:00.000 UDP 28.104.0.1:55286 -> 198.28.0.2:53 1 64 1 2025-10-04 06:02:31.530 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-04 06:01:46.416 00:01:00.060 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-04 06:01:46.317 00:01:00.159 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-04 06:03:11.502 00:00:00.000 UDP 28.104.0.1:52768 -> 198.28.0.2:53 1 64 1 2025-10-04 06:03:11.502 00:00:00.000 UDP 28.104.0.1:44123 -> 198.28.0.2:53 1 64 1 2025-10-04 06:03:11.515 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44123 1 109 1 2025-10-04 06:03:11.514 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52768 1 80 1 2025-10-04 06:03:46.422 00:00:00.057 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 123 1 2025-10-04 06:04:11.819 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39253 1 80 1 2025-10-04 06:04:11.819 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46841 1 109 1 2025-10-04 06:04:11.809 00:00:00.000 UDP 28.104.0.1:46841 -> 198.28.0.2:53 1 64 1 2025-10-04 06:04:11.809 00:00:00.000 UDP 28.104.0.1:39253 -> 198.28.0.2:53 1 64 1 2025-10-04 06:00:03.771 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2792 1 2025-10-04 06:05:12.108 00:00:00.000 UDP 28.104.0.1:47245 -> 198.28.0.2:53 1 64 1 2025-10-04 06:05:12.108 00:00:00.000 UDP 28.104.0.1:42895 -> 198.28.0.2:53 1 64 1 2025-10-04 06:05:12.118 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42895 1 109 1 2025-10-04 06:05:12.118 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47245 1 80 1 2025-10-04 06:00:46.317 00:05:50.704 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-04 06:04:46.418 00:01:00.060 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-04 06:03:46.317 00:02:00.161 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-10-04 06:01:36.968 00:05:09.520 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-04 06:01:36.968 00:05:09.359 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-04 06:06:12.408 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45856 1 80 1 2025-10-04 06:06:12.408 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47063 1 109 1 2025-10-04 06:06:12.398 00:00:00.000 UDP 28.104.0.1:45856 -> 198.28.0.2:53 1 64 1 2025-10-04 06:06:12.398 00:00:00.000 UDP 28.104.0.1:47063 -> 198.28.0.2:53 1 64 1 2025-10-04 06:07:12.694 00:00:00.000 UDP 28.104.0.1:34628 -> 198.28.0.2:53 1 64 1 2025-10-04 06:07:12.694 00:00:00.000 UDP 28.104.0.1:37517 -> 198.28.0.2:53 1 64 1 2025-10-04 06:07:12.704 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34628 1 80 1 2025-10-04 06:07:12.703 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37517 1 109 1 2025-10-04 06:07:31.658 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-04 06:06:46.418 00:01:00.060 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-04 06:06:46.318 00:01:00.160 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-04 06:03:36.979 00:05:09.499 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-04 06:08:13.052 00:00:00.000 UDP 28.104.0.1:33198 -> 198.28.0.2:53 1 64 1 2025-10-04 06:08:13.052 00:00:00.000 UDP 28.104.0.1:36586 -> 198.28.0.2:53 1 64 1 2025-10-04 06:08:13.063 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33198 1 80 1 2025-10-04 06:08:13.063 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36586 1 109 1 2025-10-04 06:09:13.345 00:00:00.000 UDP 28.104.0.1:48409 -> 198.28.0.2:53 1 64 1 2025-10-04 06:09:13.345 00:00:00.000 UDP 28.104.0.1:58995 -> 198.28.0.2:53 1 64 1 2025-10-04 06:09:13.356 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48409 1 80 1 2025-10-04 06:09:13.357 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58995 1 109 1 2025-10-04 06:05:23.775 00:05:10.009 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2796 1 2025-10-04 06:10:13.646 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48834 1 80 1 2025-10-04 06:10:13.646 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44571 1 109 1 2025-10-04 06:10:13.636 00:00:00.000 UDP 28.104.0.1:48834 -> 198.28.0.2:53 1 64 1 2025-10-04 06:10:13.636 00:00:00.000 UDP 28.104.0.1:44571 -> 198.28.0.2:53 1 64 1 2025-10-04 06:08:46.421 00:02:00.058 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-04 06:08:46.320 00:02:00.159 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-10-04 06:11:13.927 00:00:00.000 UDP 28.104.0.1:59509 -> 198.28.0.2:53 1 64 1 2025-10-04 06:11:13.927 00:00:00.000 UDP 28.104.0.1:41605 -> 198.28.0.2:53 1 64 1 2025-10-04 06:11:13.937 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59509 1 109 1 2025-10-04 06:11:13.938 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41605 1 80 1 2025-10-04 06:06:46.319 00:05:50.704 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-04 06:07:36.970 00:05:09.361 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-04 06:07:36.970 00:05:09.519 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-04 06:12:14.236 00:00:00.000 UDP 28.104.0.1:54340 -> 198.28.0.2:53 1 64 1 2025-10-04 06:12:14.236 00:00:00.000 UDP 28.104.0.1:47337 -> 198.28.0.2:53 1 64 1 2025-10-04 06:12:14.246 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54340 1 80 1 2025-10-04 06:12:14.246 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47337 1 109 1 2025-10-04 06:12:31.817 00:00:00.020 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-04 06:11:46.422 00:01:00.057 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-04 06:11:46.320 00:01:00.159 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-04 06:13:14.528 00:00:00.000 UDP 28.104.0.1:59567 -> 198.28.0.2:53 1 64 1 2025-10-04 06:13:14.528 00:00:00.000 UDP 28.104.0.1:56256 -> 198.28.0.2:53 1 64 1 2025-10-04 06:13:14.538 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59567 1 80 1 2025-10-04 06:13:14.538 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56256 1 109 1 2025-10-04 06:09:36.981 00:05:09.499 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-04 06:14:14.787 00:00:00.000 UDP 28.104.0.1:44476 -> 198.28.0.2:53 1 64 1 2025-10-04 06:14:14.786 00:00:00.000 UDP 28.104.0.1:48013 -> 198.28.0.2:53 1 64 1 2025-10-04 06:14:14.797 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44476 1 80 1 2025-10-04 06:14:14.797 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48013 1 109 1 2025-10-04 06:10:43.785 00:05:00.743 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2744 1 2025-10-04 06:15:15.069 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54563 1 109 1 2025-10-04 06:15:15.068 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35162 1 80 1 2025-10-04 06:15:15.058 00:00:00.000 UDP 28.104.0.1:35162 -> 198.28.0.2:53 1 64 1 2025-10-04 06:15:15.058 00:00:00.000 UDP 28.104.0.1:54563 -> 198.28.0.2:53 1 64 1 2025-10-04 06:13:46.423 00:02:00.058 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-04 06:13:46.321 00:02:00.160 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-10-04 06:16:15.371 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55534 1 80 1 2025-10-04 06:16:15.371 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50796 1 109 1 2025-10-04 06:16:15.361 00:00:00.000 UDP 28.104.0.1:55534 -> 198.28.0.2:53 1 64 1 2025-10-04 06:16:15.361 00:00:00.000 UDP 28.104.0.1:50796 -> 198.28.0.2:53 1 64 1 2025-10-04 06:17:15.650 00:00:00.000 UDP 28.104.0.1:36760 -> 198.28.0.2:53 1 64 1 2025-10-04 06:17:15.651 00:00:00.000 UDP 28.104.0.1:49406 -> 198.28.0.2:53 1 64 1 2025-10-04 06:17:15.661 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36760 1 80 1 2025-10-04 06:17:15.661 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49406 1 109 1 2025-10-04 06:17:32.008 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-04 06:12:46.321 00:05:50.702 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-04 06:13:36.970 00:05:09.521 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-04 06:13:36.970 00:05:09.364 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-04 06:16:46.424 00:01:00.057 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-04 06:16:46.332 00:01:00.149 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-04 06:18:15.954 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60448 1 80 1 2025-10-04 06:18:15.954 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56146 1 109 1 2025-10-04 06:18:15.946 00:00:00.000 UDP 28.104.0.1:60448 -> 198.28.0.2:53 1 64 1 2025-10-04 06:18:15.946 00:00:00.000 UDP 28.104.0.1:56146 -> 198.28.0.2:53 1 64 1 2025-10-04 06:19:25.955 00:00:00.000 UDP 28.104.0.1:60822 -> 198.28.0.2:53 1 64 1 2025-10-04 06:19:25.955 00:00:00.000 UDP 28.104.0.1:32776 -> 198.28.0.2:53 1 64 1 2025-10-04 06:19:25.964 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32776 1 80 1 2025-10-04 06:19:25.964 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60822 1 109 1 2025-10-04 06:15:36.982 00:05:09.501 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-04 06:15:53.794 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2404 1 2025-10-04 06:20:26.223 00:00:00.000 UDP 28.104.0.1:40079 -> 198.28.0.2:53 1 64 1 2025-10-04 06:20:26.223 00:00:00.000 UDP 28.104.0.1:58467 -> 198.28.0.2:53 1 64 1 2025-10-04 06:20:26.233 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40079 1 80 1 2025-10-04 06:20:26.233 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58467 1 109 1 2025-10-04 06:18:46.424 00:02:00.058 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-04 06:18:46.332 00:02:00.150 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-10-04 06:21:26.487 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38428 1 109 1 2025-10-04 06:21:26.487 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56646 1 80 1 2025-10-04 06:21:26.476 00:00:00.000 UDP 28.104.0.1:38428 -> 198.28.0.2:53 1 64 1 2025-10-04 06:21:26.476 00:00:00.000 UDP 28.104.0.1:56646 -> 198.28.0.2:53 1 64 1 2025-10-04 06:22:26.783 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34449 1 80 1 2025-10-04 06:22:26.783 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33776 1 109 1 2025-10-04 06:22:26.772 00:00:00.000 UDP 28.104.0.1:33776 -> 198.28.0.2:53 1 64 1 2025-10-04 06:22:26.773 00:00:00.000 UDP 28.104.0.1:34449 -> 198.28.0.2:53 1 64 1 2025-10-04 06:22:32.036 00:00:00.029 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-04 06:21:46.424 00:01:00.058 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-04 06:21:46.333 00:01:00.149 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-04 06:23:27.088 00:00:00.000 UDP 28.104.0.1:41126 -> 198.28.0.2:53 1 64 1 2025-10-04 06:23:27.088 00:00:00.000 UDP 28.104.0.1:45382 -> 198.28.0.2:53 1 64 1 2025-10-04 06:23:27.100 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45382 1 109 1 2025-10-04 06:23:27.100 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41126 1 80 1 2025-10-04 06:18:46.324 00:05:50.699 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-04 06:19:36.973 00:05:09.364 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-04 06:19:36.972 00:05:09.522 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-04 06:24:27.405 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41189 1 109 1 2025-10-04 06:24:27.406 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38974 1 80 1 2025-10-04 06:24:27.395 00:00:00.000 UDP 28.104.0.1:38974 -> 198.28.0.2:53 1 64 1 2025-10-04 06:24:27.395 00:00:00.000 UDP 28.104.0.1:41189 -> 198.28.0.2:53 1 64 1 2025-10-04 06:21:13.797 00:05:10.010 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2668 1 2025-10-04 06:25:27.723 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46706 1 80 1 2025-10-04 06:25:27.725 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47922 1 109 1 2025-10-04 06:25:27.713 00:00:00.000 UDP 28.104.0.1:46706 -> 198.28.0.2:53 1 64 1 2025-10-04 06:25:27.713 00:00:00.000 UDP 28.104.0.1:47922 -> 198.28.0.2:53 1 64 1 2025-10-04 06:23:46.425 00:02:00.058 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-04 06:21:36.983 00:05:09.501 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-04 06:26:27.994 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50080 1 109 1 2025-10-04 06:26:27.994 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50422 1 80 1 2025-10-04 06:26:27.985 00:00:00.000 UDP 28.104.0.1:50422 -> 198.28.0.2:53 1 64 1 2025-10-04 06:26:27.984 00:00:00.000 UDP 28.104.0.1:50080 -> 198.28.0.2:53 1 64 1 2025-10-04 06:27:28.288 00:00:00.000 UDP 28.104.0.1:58078 -> 198.28.0.2:53 1 64 1 2025-10-04 06:27:28.288 00:00:00.000 UDP 28.104.0.1:58867 -> 198.28.0.2:53 1 64 1 2025-10-04 06:27:31.952 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-04 06:27:28.298 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58078 1 80 1 2025-10-04 06:27:28.298 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58867 1 109 1 2025-10-04 06:26:46.426 00:01:00.057 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-04 06:23:46.333 00:04:00.150 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-04 06:28:28.592 00:00:00.000 UDP 28.104.0.1:54964 -> 198.28.0.2:53 1 64 1 2025-10-04 06:28:28.592 00:00:00.000 UDP 28.104.0.1:60518 -> 198.28.0.2:53 1 64 1 2025-10-04 06:28:28.602 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60518 1 109 1 2025-10-04 06:28:28.602 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54964 1 80 1 2025-10-04 06:29:28.891 00:00:00.000 UDP 28.104.0.1:51065 -> 198.28.0.2:53 1 64 1 2025-10-04 06:29:28.891 00:00:00.000 UDP 28.104.0.1:58025 -> 198.28.0.2:53 1 64 1 2025-10-04 06:29:28.902 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51065 1 109 1 2025-10-04 06:29:28.902 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58025 1 80 1 2025-10-04 06:24:46.327 00:05:50.698 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-04 06:25:36.975 00:05:09.519 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-04 06:25:36.975 00:05:09.364 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-04 06:30:29.153 00:00:00.000 UDP 28.104.0.1:59623 -> 198.28.0.2:53 1 64 1 2025-10-04 06:30:29.153 00:00:00.000 UDP 28.104.0.1:37704 -> 198.28.0.2:53 1 64 1 2025-10-04 06:30:29.163 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37704 1 80 1 2025-10-04 06:30:29.163 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59623 1 109 1 2025-10-04 06:26:33.807 00:05:10.979 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2788 1 2025-10-04 06:28:46.425 00:02:00.058 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-04 06:31:30.007 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36640 1 109 1 2025-10-04 06:31:30.006 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36028 1 80 1 2025-10-04 06:31:29.995 00:00:00.000 UDP 28.104.0.1:36028 -> 198.28.0.2:53 1 64 1 2025-10-04 06:31:29.995 00:00:00.000 UDP 28.104.0.1:36640 -> 198.28.0.2:53 1 64 1 2025-10-04 06:27:36.985 00:05:09.498 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-04 06:32:31.376 00:00:00.000 UDP 28.104.0.1:43232 -> 198.28.0.2:53 1 64 1 2025-10-04 06:32:31.375 00:00:00.000 UDP 28.104.0.1:54840 -> 198.28.0.2:53 1 64 1 2025-10-04 06:32:31.386 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54840 1 80 1 2025-10-04 06:32:31.390 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43232 1 109 1 2025-10-04 06:32:33.543 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-04 06:31:46.427 00:01:00.057 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-04 06:28:46.334 00:04:00.150 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-04 06:33:31.851 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46389 1 109 1 2025-10-04 06:33:31.851 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55587 1 80 1 2025-10-04 06:33:31.840 00:00:00.000 UDP 28.104.0.1:55587 -> 198.28.0.2:53 1 64 1 2025-10-04 06:33:31.840 00:00:00.000 UDP 28.104.0.1:46389 -> 198.28.0.2:53 1 64 1 2025-10-04 06:34:32.103 00:00:00.000 UDP 28.104.0.1:39983 -> 198.28.0.2:53 1 64 1 2025-10-04 06:34:32.103 00:00:00.000 UDP 28.104.0.1:33794 -> 198.28.0.2:53 1 64 1 2025-10-04 06:34:32.113 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39983 1 80 1 2025-10-04 06:34:32.113 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33794 1 109 1 2025-10-04 06:33:46.428 00:01:00.056 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-04 06:33:46.334 00:01:00.150 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-04 06:35:32.411 00:00:00.000 UDP 28.104.0.1:52044 -> 198.28.0.2:53 1 64 1 2025-10-04 06:35:32.411 00:00:00.000 UDP 28.104.0.1:54245 -> 198.28.0.2:53 1 64 1 2025-10-04 06:35:32.422 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54245 1 109 1 2025-10-04 06:35:32.422 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52044 1 80 1 2025-10-04 06:30:46.328 00:05:50.709 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-04 06:35:46.428 00:00:00.056 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 123 1 2025-10-04 06:31:36.975 00:05:09.520 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-04 06:31:36.975 00:05:09.365 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-04 06:31:53.810 00:05:10.019 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2804 1 2025-10-04 06:36:32.709 00:00:00.000 UDP 28.104.0.1:53998 -> 198.28.0.2:53 1 64 1 2025-10-04 06:36:32.709 00:00:00.000 UDP 28.104.0.1:40278 -> 198.28.0.2:53 1 64 1 2025-10-04 06:36:32.719 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53998 1 109 1 2025-10-04 06:36:32.719 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40278 1 80 1 2025-10-04 06:37:33.053 00:00:00.000 UDP 28.104.0.1:43432 -> 198.28.0.2:53 1 64 1 2025-10-04 06:37:33.053 00:00:00.000 UDP 28.104.0.1:46704 -> 198.28.0.2:53 1 64 1 2025-10-04 06:37:32.341 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-04 06:37:33.063 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43432 1 109 1 2025-10-04 06:37:33.063 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46704 1 80 1 2025-10-04 06:36:46.428 00:01:00.057 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-04 06:35:46.335 00:02:00.150 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-10-04 06:33:36.985 00:05:09.499 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-04 06:38:33.356 00:00:00.000 UDP 28.104.0.1:36256 -> 198.28.0.2:53 1 64 1 2025-10-04 06:38:33.356 00:00:00.000 UDP 28.104.0.1:45489 -> 198.28.0.2:53 1 64 1 2025-10-04 06:38:33.365 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45489 1 109 1 2025-10-04 06:38:33.365 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36256 1 80 1 2025-10-04 06:39:33.656 00:00:00.000 UDP 28.104.0.1:49777 -> 198.28.0.2:53 1 64 1 2025-10-04 06:39:33.656 00:00:00.000 UDP 28.104.0.1:47977 -> 198.28.0.2:53 1 64 1 2025-10-04 06:39:33.666 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49777 1 109 1 2025-10-04 06:39:33.666 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47977 1 80 1 2025-10-04 06:38:46.429 00:01:00.056 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-04 06:38:46.336 00:01:00.149 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-04 06:40:33.952 00:00:00.000 UDP 28.104.0.1:56985 -> 198.28.0.2:53 1 64 1 2025-10-04 06:40:33.952 00:00:00.000 UDP 28.104.0.1:39118 -> 198.28.0.2:53 1 64 1 2025-10-04 06:40:33.963 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56985 1 109 1 2025-10-04 06:40:33.962 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39118 1 80 1 2025-10-04 06:37:13.829 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2592 1 2025-10-04 06:41:34.212 00:00:00.000 UDP 28.104.0.1:33502 -> 198.28.0.2:53 1 64 1 2025-10-04 06:41:34.212 00:00:00.000 UDP 28.104.0.1:58298 -> 198.28.0.2:53 1 64 1 2025-10-04 06:41:34.224 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33502 1 80 1 2025-10-04 06:41:34.224 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58298 1 109 1 2025-10-04 06:36:46.329 00:05:50.709 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-04 06:37:36.987 00:05:09.509 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-04 06:37:36.987 00:05:09.354 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-04 06:42:32.416 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-04 06:42:34.516 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46571 1 80 1 2025-10-04 06:42:34.516 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40030 1 109 1 2025-10-04 06:42:34.505 00:00:00.000 UDP 28.104.0.1:46571 -> 198.28.0.2:53 1 64 1 2025-10-04 06:42:34.505 00:00:00.000 UDP 28.104.0.1:40030 -> 198.28.0.2:53 1 64 1 2025-10-04 06:40:46.430 00:02:00.055 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-04 06:40:46.336 00:02:00.149 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-10-04 06:43:34.820 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53592 1 109 1 2025-10-04 06:43:34.821 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47550 1 80 1 2025-10-04 06:43:34.809 00:00:00.000 UDP 28.104.0.1:53592 -> 198.28.0.2:53 1 64 1 2025-10-04 06:43:34.809 00:00:00.000 UDP 28.104.0.1:47550 -> 198.28.0.2:53 1 64 1 2025-10-04 06:39:36.997 00:05:09.489 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-04 06:44:35.100 00:00:00.000 UDP 28.104.0.1:37269 -> 198.28.0.2:53 1 64 1 2025-10-04 06:44:35.100 00:00:00.000 UDP 28.104.0.1:57392 -> 198.28.0.2:53 1 64 1 2025-10-04 06:44:35.110 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57392 1 109 1 2025-10-04 06:44:35.110 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37269 1 80 1 2025-10-04 06:43:46.431 00:01:00.055 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-04 06:43:46.337 00:01:00.149 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-04 06:45:35.386 00:00:00.000 UDP 28.104.0.1:44869 -> 198.28.0.2:53 1 64 1 2025-10-04 06:45:35.386 00:00:00.000 UDP 28.104.0.1:56960 -> 198.28.0.2:53 1 64 1 2025-10-04 06:45:35.397 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44869 1 80 1 2025-10-04 06:45:35.397 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56960 1 109 1 2025-10-04 06:46:35.682 00:00:00.000 UDP 28.104.0.1:44881 -> 198.28.0.2:53 1 64 1 2025-10-04 06:46:35.682 00:00:00.000 UDP 28.104.0.1:49585 -> 198.28.0.2:53 1 64 1 2025-10-04 06:46:35.691 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49585 1 80 1 2025-10-04 06:46:35.691 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44881 1 109 1 2025-10-04 06:42:33.836 00:05:10.012 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2748 1 2025-10-04 06:47:31.738 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-04 06:47:35.973 00:00:00.000 UDP 28.104.0.1:45798 -> 198.28.0.2:53 1 64 1 2025-10-04 06:47:35.973 00:00:00.000 UDP 28.104.0.1:60965 -> 198.28.0.2:53 1 64 1 2025-10-04 06:47:35.983 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45798 1 109 1 2025-10-04 06:47:35.983 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60965 1 80 1 2025-10-04 06:42:46.330 00:05:50.709 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-04 06:45:46.432 00:02:00.055 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-04 06:45:46.338 00:02:00.149 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-10-04 06:43:36.988 00:05:09.509 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-04 06:43:36.988 00:05:09.356 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-04 06:48:39.118 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52459 1 80 1 2025-10-04 06:48:39.118 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59907 1 109 1 2025-10-04 06:48:39.108 00:00:00.000 UDP 28.104.0.1:52459 -> 198.28.0.2:53 1 64 1 2025-10-04 06:48:39.108 00:00:00.000 UDP 28.104.0.1:59907 -> 198.28.0.2:53 1 64 1 2025-10-04 06:49:39.425 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35883 1 109 1 2025-10-04 06:49:39.425 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49604 1 80 1 2025-10-04 06:49:39.414 00:00:00.000 UDP 28.104.0.1:35883 -> 198.28.0.2:53 1 64 1 2025-10-04 06:45:36.998 00:05:00.003 TCP 28.154.0.1:41239 -> 28.151.0.1:179 11 667 1 2025-10-04 06:49:39.414 00:00:00.000 UDP 28.104.0.1:49604 -> 198.28.0.2:53 1 64 1 2025-10-04 06:48:46.432 00:01:00.056 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-04 06:48:46.341 00:01:00.147 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-04 06:50:39.720 00:00:00.000 UDP 28.104.0.1:48502 -> 198.28.0.2:53 1 64 1 2025-10-04 06:50:39.720 00:00:00.000 UDP 28.104.0.1:44150 -> 198.28.0.2:53 1 64 1 2025-10-04 06:50:39.731 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44150 1 80 1 2025-10-04 06:50:39.731 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48502 1 109 1 2025-10-04 06:51:40.052 00:00:00.000 UDP 28.104.0.1:58988 -> 198.28.0.2:53 1 64 1 2025-10-04 06:51:40.052 00:00:00.000 UDP 28.104.0.1:50590 -> 198.28.0.2:53 1 64 1 2025-10-04 06:51:40.062 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50590 1 109 1 2025-10-04 06:51:40.062 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58988 1 80 1 2025-10-04 06:47:53.847 00:05:00.271 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2664 1 2025-10-04 06:52:40.367 00:00:00.000 UDP 28.104.0.1:37665 -> 198.28.0.2:53 1 64 1 2025-10-04 06:52:40.367 00:00:00.000 UDP 28.104.0.1:58658 -> 198.28.0.2:53 1 64 1 2025-10-04 06:52:32.523 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-04 06:52:40.376 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37665 1 80 1 2025-10-04 06:52:40.376 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58658 1 109 1 2025-10-04 06:50:46.435 00:02:00.052 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-04 06:50:46.342 00:02:00.145 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-10-04 06:53:40.645 00:00:00.000 UDP 28.104.0.1:40713 -> 198.28.0.2:53 1 64 1 2025-10-04 06:53:40.645 00:00:00.000 UDP 28.104.0.1:41586 -> 198.28.0.2:53 1 64 1 2025-10-04 06:48:46.334 00:05:50.708 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-04 06:53:40.656 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40713 1 109 1 2025-10-04 06:53:40.656 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41586 1 80 1 2025-10-04 06:49:36.990 00:05:09.509 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-04 06:49:36.990 00:05:09.363 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-04 06:54:40.940 00:00:00.000 UDP 28.104.0.1:34744 -> 198.28.0.2:53 1 64 1 2025-10-04 06:54:40.940 00:00:00.000 UDP 28.104.0.1:34963 -> 198.28.0.2:53 1 64 1 2025-10-04 06:54:40.951 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34744 1 80 1 2025-10-04 06:54:40.951 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34963 1 109 1 2025-10-04 06:53:46.433 00:01:00.055 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-04 06:53:46.342 00:01:00.146 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-04 06:50:46.490 00:05:50.514 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-04 06:55:41.237 00:00:00.000 UDP 28.104.0.1:35258 -> 198.28.0.2:53 1 64 1 2025-10-04 06:55:41.237 00:00:00.000 UDP 28.104.0.1:51624 -> 198.28.0.2:53 1 64 1 2025-10-04 06:55:41.247 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35258 1 80 1 2025-10-04 06:55:41.247 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51624 1 109 1 2025-10-04 06:56:41.530 00:00:00.000 UDP 28.104.0.1:56745 -> 198.28.0.2:53 1 64 1 2025-10-04 06:56:41.530 00:00:00.000 UDP 28.104.0.1:47694 -> 198.28.0.2:53 1 64 1 2025-10-04 06:56:41.540 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56745 1 80 1 2025-10-04 06:56:41.540 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47694 1 109 1 2025-10-04 06:53:03.850 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2852 1 2025-10-04 06:57:41.833 00:00:00.000 UDP 28.104.0.1:56545 -> 198.28.0.2:53 1 64 1 2025-10-04 06:57:41.833 00:00:00.000 UDP 28.104.0.1:54973 -> 198.28.0.2:53 1 64 1 2025-10-04 06:57:32.604 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-04 06:57:41.843 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56545 1 80 1 2025-10-04 06:57:41.843 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54973 1 109 1 2025-10-04 06:55:46.433 00:02:00.065 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-04 06:58:42.133 00:00:00.000 UDP 28.104.0.1:48506 -> 198.28.0.2:53 1 64 1 2025-10-04 06:58:42.133 00:00:00.000 UDP 28.104.0.1:58801 -> 198.28.0.2:53 1 64 1 2025-10-04 06:58:42.144 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48506 1 80 1 2025-10-04 06:58:42.144 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58801 1 109 1 Summary: total flows: 351, total bytes: 98479, total packets: 1450, avg bps: 205, avg pps: 0, avg bpp: 67 Time window: 2025-10-04 05:54:46 - 2025-10-04 06:58:42 Total flows processed: 351, passed: 351, Blocks skipped: 0, Bytes read: 36568 Sys: 0.0038s User: 0.0028s Wall: 0.0040s flows/second: 86753.1 Runtime: 0.0041s