Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-05 14:59:09.903 00:00:00.000 UDP 28.104.0.1:58505 -> 198.28.0.2:53 1 64 1 2025-10-05 14:59:09.903 00:00:00.000 UDP 28.104.0.1:44331 -> 198.28.0.2:53 1 64 1 2025-10-05 14:59:09.913 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44331 1 80 1 2025-10-05 14:59:09.913 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58505 1 109 1 2025-10-05 14:54:46.952 00:05:50.745 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-05 14:54:47.101 00:06:00.004 TCP 28.154.0.1:179 -> 28.157.0.1:37077 7 497 1 2025-10-05 14:55:37.646 00:05:09.469 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-05 14:55:37.646 00:05:09.318 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-05 15:00:10.162 00:00:00.000 UDP 28.104.0.1:38430 -> 198.28.0.2:53 1 64 1 2025-10-05 15:00:10.162 00:00:00.000 UDP 28.104.0.1:46925 -> 198.28.0.2:53 1 64 1 2025-10-05 15:00:10.173 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38430 1 80 1 2025-10-05 15:00:10.173 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46925 1 109 1 2025-10-05 14:56:37.656 00:05:09.449 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-05 15:01:10.464 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59597 1 80 1 2025-10-05 15:01:10.463 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43194 1 109 1 2025-10-05 15:01:10.452 00:00:00.000 UDP 28.104.0.1:59597 -> 198.28.0.2:53 1 64 1 2025-10-05 15:01:10.452 00:00:00.000 UDP 28.104.0.1:43194 -> 198.28.0.2:53 1 64 1 2025-10-05 15:02:10.761 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49726 1 80 1 2025-10-05 15:02:10.761 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34692 1 109 1 2025-10-05 15:02:10.751 00:00:00.000 UDP 28.104.0.1:49726 -> 198.28.0.2:53 1 64 1 2025-10-05 15:02:10.751 00:00:00.000 UDP 28.104.0.1:34692 -> 198.28.0.2:53 1 64 1 2025-10-05 15:03:11.490 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-05 15:03:11.098 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50695 1 80 1 2025-10-05 15:03:11.098 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37922 1 109 1 2025-10-05 15:03:11.088 00:00:00.000 UDP 28.104.0.1:37922 -> 198.28.0.2:53 1 64 1 2025-10-05 15:03:11.089 00:00:00.000 UDP 28.104.0.1:50695 -> 198.28.0.2:53 1 64 1 2025-10-05 14:59:46.928 00:05:00.178 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-10-05 15:04:11.385 00:00:00.000 UDP 28.104.0.1:53895 -> 198.28.0.2:53 1 64 1 2025-10-05 15:04:11.386 00:00:00.000 UDP 28.104.0.1:57241 -> 198.28.0.2:53 1 64 1 2025-10-05 14:59:56.482 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 43 3200 1 2025-10-05 15:04:11.396 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53895 1 80 1 2025-10-05 15:04:11.396 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57241 1 109 1 2025-10-05 15:05:11.727 00:00:00.000 UDP 28.104.0.1:59886 -> 198.28.0.2:53 1 64 1 2025-10-05 15:05:11.727 00:00:00.000 UDP 28.104.0.1:40083 -> 198.28.0.2:53 1 64 1 2025-10-05 15:05:11.738 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40083 1 109 1 2025-10-05 15:05:11.739 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59886 1 80 1 2025-10-05 15:00:46.954 00:05:50.746 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-05 15:01:37.647 00:05:09.469 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-05 15:01:37.647 00:05:09.325 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-05 15:06:12.041 00:00:00.000 UDP 28.104.0.1:39185 -> 198.28.0.2:53 1 64 1 2025-10-05 15:06:12.040 00:00:00.000 UDP 28.104.0.1:50801 -> 198.28.0.2:53 1 64 1 2025-10-05 15:06:12.051 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39185 1 80 1 2025-10-05 15:06:12.051 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50801 1 109 1 2025-10-05 15:01:47.105 00:06:00.001 TCP 28.154.0.1:179 -> 28.157.0.1:37077 7 497 1 2025-10-05 15:02:37.659 00:05:09.447 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-05 15:07:12.364 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35976 1 109 1 2025-10-05 15:07:12.364 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33174 1 80 1 2025-10-05 15:07:12.353 00:00:00.000 UDP 28.104.0.1:33174 -> 198.28.0.2:53 1 64 1 2025-10-05 15:07:12.353 00:00:00.000 UDP 28.104.0.1:35976 -> 198.28.0.2:53 1 64 1 2025-10-05 15:08:11.184 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-05 15:08:12.669 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50159 1 109 1 2025-10-05 15:08:12.669 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38901 1 80 1 2025-10-05 15:08:12.658 00:00:00.000 UDP 28.104.0.1:38901 -> 198.28.0.2:53 1 64 1 2025-10-05 15:08:12.658 00:00:00.000 UDP 28.104.0.1:50159 -> 198.28.0.2:53 1 64 1 2025-10-05 15:09:12.969 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59370 1 109 1 2025-10-05 15:09:12.968 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58329 1 80 1 2025-10-05 15:09:12.957 00:00:00.000 UDP 28.104.0.1:59370 -> 198.28.0.2:53 1 64 1 2025-10-05 15:09:12.957 00:00:00.000 UDP 28.104.0.1:58329 -> 198.28.0.2:53 1 64 1 2025-10-05 15:05:16.489 00:05:10.009 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2792 1 2025-10-05 15:05:46.929 00:05:00.177 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-10-05 15:10:13.262 00:00:00.000 UDP 28.104.0.1:49395 -> 198.28.0.2:53 1 64 1 2025-10-05 15:10:13.262 00:00:00.000 UDP 28.104.0.1:60803 -> 198.28.0.2:53 1 64 1 2025-10-05 15:10:13.272 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60803 1 80 1 2025-10-05 15:10:13.272 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49395 1 109 1 2025-10-05 15:11:13.558 00:00:00.000 UDP 28.104.0.1:54617 -> 198.28.0.2:53 1 64 1 2025-10-05 15:11:13.558 00:00:00.000 UDP 28.104.0.1:37478 -> 198.28.0.2:53 1 64 1 2025-10-05 15:11:13.568 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37478 1 80 1 2025-10-05 15:11:13.568 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54617 1 109 1 2025-10-05 15:06:46.961 00:05:50.739 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-05 15:07:37.649 00:05:09.467 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-05 15:07:37.649 00:05:09.322 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-05 15:12:13.865 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48187 1 109 1 2025-10-05 15:12:13.865 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45468 1 80 1 2025-10-05 15:12:13.855 00:00:00.000 UDP 28.104.0.1:45468 -> 198.28.0.2:53 1 64 1 2025-10-05 15:12:13.855 00:00:00.000 UDP 28.104.0.1:48187 -> 198.28.0.2:53 1 64 1 2025-10-05 15:08:37.659 00:05:09.447 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-05 15:13:11.477 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-05 15:13:14.191 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37802 1 80 1 2025-10-05 15:13:14.191 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35015 1 109 1 2025-10-05 15:13:14.181 00:00:00.000 UDP 28.104.0.1:37802 -> 198.28.0.2:53 1 64 1 2025-10-05 15:13:14.181 00:00:00.000 UDP 28.104.0.1:35015 -> 198.28.0.2:53 1 64 1 2025-10-05 15:08:47.105 00:06:00.001 TCP 28.154.0.1:179 -> 28.157.0.1:37077 7 497 1 2025-10-05 15:14:14.494 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48135 1 109 1 2025-10-05 15:14:14.494 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43464 1 80 1 2025-10-05 15:14:14.485 00:00:00.000 UDP 28.104.0.1:48135 -> 198.28.0.2:53 1 64 1 2025-10-05 15:14:14.485 00:00:00.000 UDP 28.104.0.1:43464 -> 198.28.0.2:53 1 64 1 2025-10-05 15:10:36.497 00:05:10.009 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2384 1 2025-10-05 15:15:14.799 00:00:00.000 UDP 28.104.0.1:59878 -> 198.28.0.2:53 1 64 1 2025-10-05 15:15:14.799 00:00:00.000 UDP 28.104.0.1:49274 -> 198.28.0.2:53 1 64 1 2025-10-05 15:15:14.810 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59878 1 80 1 2025-10-05 15:15:14.809 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49274 1 109 1 2025-10-05 15:11:46.930 00:05:00.176 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-10-05 15:16:15.110 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59532 1 80 1 2025-10-05 15:16:15.110 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55291 1 109 1 2025-10-05 15:16:15.100 00:00:00.000 UDP 28.104.0.1:59532 -> 198.28.0.2:53 1 64 1 2025-10-05 15:16:15.100 00:00:00.000 UDP 28.104.0.1:55291 -> 198.28.0.2:53 1 64 1 2025-10-05 15:17:15.406 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56896 1 109 1 2025-10-05 15:17:15.406 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55944 1 80 1 2025-10-05 15:17:15.397 00:00:00.000 UDP 28.104.0.1:55944 -> 198.28.0.2:53 1 64 1 2025-10-05 15:17:15.397 00:00:00.000 UDP 28.104.0.1:56896 -> 198.28.0.2:53 1 64 1 2025-10-05 15:12:46.962 00:05:50.744 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-05 15:13:37.650 00:05:09.466 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-05 15:13:37.650 00:05:09.322 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-05 15:18:11.560 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-05 15:18:15.691 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52455 1 109 1 2025-10-05 15:18:15.691 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59306 1 80 1 2025-10-05 15:18:15.682 00:00:00.000 UDP 28.104.0.1:52455 -> 198.28.0.2:53 1 64 1 2025-10-05 15:18:15.682 00:00:00.000 UDP 28.104.0.1:59306 -> 198.28.0.2:53 1 64 1 2025-10-05 15:14:37.661 00:05:09.447 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-05 15:19:15.932 00:00:00.000 UDP 28.104.0.1:34044 -> 198.28.0.2:53 1 64 1 2025-10-05 15:19:15.932 00:00:00.000 UDP 28.104.0.1:50344 -> 198.28.0.2:53 1 64 1 2025-10-05 15:19:15.942 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50344 1 80 1 2025-10-05 15:19:15.942 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34044 1 109 1 2025-10-05 15:15:56.507 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2608 1 2025-10-05 15:20:16.258 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55770 1 109 1 2025-10-05 15:20:16.258 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38019 1 80 1 2025-10-05 15:20:16.249 00:00:00.000 UDP 28.104.0.1:38019 -> 198.28.0.2:53 1 64 1 2025-10-05 15:20:16.249 00:00:00.000 UDP 28.104.0.1:55770 -> 198.28.0.2:53 1 64 1 2025-10-05 15:15:47.106 00:06:00.001 TCP 28.154.0.1:179 -> 28.157.0.1:37077 7 497 1 2025-10-05 15:21:16.556 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43788 1 80 1 2025-10-05 15:21:16.555 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35311 1 109 1 2025-10-05 15:21:16.544 00:00:00.000 UDP 28.104.0.1:35311 -> 198.28.0.2:53 1 64 1 2025-10-05 15:21:16.545 00:00:00.000 UDP 28.104.0.1:43788 -> 198.28.0.2:53 1 64 1 2025-10-05 15:17:46.931 00:05:00.176 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-10-05 15:22:16.859 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56277 1 80 1 2025-10-05 15:22:16.860 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58808 1 109 1 2025-10-05 15:22:16.848 00:00:00.000 UDP 28.104.0.1:58808 -> 198.28.0.2:53 1 64 1 2025-10-05 15:22:16.848 00:00:00.000 UDP 28.104.0.1:56277 -> 198.28.0.2:53 1 64 1 2025-10-05 15:23:17.165 00:00:00.000 UDP 28.104.0.1:44059 -> 198.28.0.2:53 1 64 1 2025-10-05 15:23:17.165 00:00:00.000 UDP 28.104.0.1:58799 -> 198.28.0.2:53 1 64 1 2025-10-05 15:23:12.175 00:00:00.020 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-05 15:23:17.177 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44059 1 109 1 2025-10-05 15:23:17.176 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58799 1 80 1 2025-10-05 15:18:46.963 00:05:50.743 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-05 15:19:37.656 00:05:09.319 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-05 15:19:37.656 00:05:09.462 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-05 15:24:17.475 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60306 1 80 1 2025-10-05 15:24:17.475 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36286 1 109 1 2025-10-05 15:24:17.465 00:00:00.000 UDP 28.104.0.1:60306 -> 198.28.0.2:53 1 64 1 2025-10-05 15:24:17.465 00:00:00.000 UDP 28.104.0.1:36286 -> 198.28.0.2:53 1 64 1 2025-10-05 15:20:37.665 00:05:09.442 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-05 15:25:17.778 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38548 1 80 1 2025-10-05 15:25:17.778 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60277 1 109 1 2025-10-05 15:25:17.767 00:00:00.000 UDP 28.104.0.1:60277 -> 198.28.0.2:53 1 64 1 2025-10-05 15:25:17.767 00:00:00.000 UDP 28.104.0.1:38548 -> 198.28.0.2:53 1 64 1 2025-10-05 15:21:16.510 00:05:10.009 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2700 1 2025-10-05 15:26:18.087 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41239 1 109 1 2025-10-05 15:26:18.087 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54501 1 80 1 2025-10-05 15:26:18.077 00:00:00.000 UDP 28.104.0.1:41239 -> 198.28.0.2:53 1 64 1 2025-10-05 15:26:18.077 00:00:00.000 UDP 28.104.0.1:54501 -> 198.28.0.2:53 1 64 1 2025-10-05 15:27:18.394 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33367 1 80 1 2025-10-05 15:27:18.394 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40660 1 109 1 2025-10-05 15:27:18.384 00:00:00.000 UDP 28.104.0.1:40660 -> 198.28.0.2:53 1 64 1 2025-10-05 15:27:18.384 00:00:00.000 UDP 28.104.0.1:33367 -> 198.28.0.2:53 1 64 1 2025-10-05 15:22:47.107 00:06:00.001 TCP 28.154.0.1:179 -> 28.157.0.1:37077 7 497 1 2025-10-05 15:23:46.933 00:05:00.175 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-10-05 15:28:11.705 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-05 15:28:18.695 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50211 1 109 1 2025-10-05 15:28:18.695 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48086 1 80 1 2025-10-05 15:28:18.684 00:00:00.000 UDP 28.104.0.1:50211 -> 198.28.0.2:53 1 64 1 2025-10-05 15:28:18.684 00:00:00.000 UDP 28.104.0.1:48086 -> 198.28.0.2:53 1 64 1 2025-10-05 15:29:18.987 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46106 1 80 1 2025-10-05 15:29:18.987 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35984 1 109 1 2025-10-05 15:29:18.976 00:00:00.000 UDP 28.104.0.1:46106 -> 198.28.0.2:53 1 64 1 2025-10-05 15:29:18.976 00:00:00.000 UDP 28.104.0.1:35984 -> 198.28.0.2:53 1 64 1 2025-10-05 15:24:46.964 00:05:50.743 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-05 15:25:37.655 00:05:09.463 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-05 15:25:37.655 00:05:09.321 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-05 15:30:19.282 00:00:00.000 UDP 28.104.0.1:34213 -> 198.28.0.2:53 1 64 1 2025-10-05 15:30:19.282 00:00:00.000 UDP 28.104.0.1:59945 -> 198.28.0.2:53 1 64 1 2025-10-05 15:30:19.293 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59945 1 109 1 2025-10-05 15:30:19.293 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34213 1 80 1 2025-10-05 15:26:36.519 00:05:10.015 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2652 1 2025-10-05 15:26:37.665 00:05:09.442 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-05 15:31:19.610 00:00:00.000 UDP 28.104.0.1:32944 -> 198.28.0.2:53 1 64 1 2025-10-05 15:31:19.611 00:00:00.000 UDP 28.104.0.1:50744 -> 198.28.0.2:53 1 64 1 2025-10-05 15:31:19.622 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32944 1 109 1 2025-10-05 15:31:19.624 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50744 1 80 1 2025-10-05 15:32:19.942 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57901 1 109 1 2025-10-05 15:32:19.942 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35850 1 80 1 2025-10-05 15:32:19.931 00:00:00.000 UDP 28.104.0.1:35850 -> 198.28.0.2:53 1 64 1 2025-10-05 15:32:19.931 00:00:00.000 UDP 28.104.0.1:57901 -> 198.28.0.2:53 1 64 1 2025-10-05 15:33:12.039 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-05 15:33:20.248 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35995 1 80 1 2025-10-05 15:33:20.248 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54575 1 109 1 2025-10-05 15:33:20.239 00:00:00.000 UDP 28.104.0.1:35995 -> 198.28.0.2:53 1 64 1 2025-10-05 15:33:20.239 00:00:00.000 UDP 28.104.0.1:54575 -> 198.28.0.2:53 1 64 1 2025-10-05 15:29:46.938 00:05:00.175 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-10-05 15:34:20.503 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38842 1 80 1 2025-10-05 15:34:20.503 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53395 1 109 1 2025-10-05 15:34:20.492 00:00:00.000 UDP 28.104.0.1:38842 -> 198.28.0.2:53 1 64 1 2025-10-05 15:34:20.492 00:00:00.000 UDP 28.104.0.1:53395 -> 198.28.0.2:53 1 64 1 2025-10-05 15:29:47.108 00:06:00.005 TCP 28.154.0.1:179 -> 28.157.0.1:37077 7 497 1 2025-10-05 15:35:20.786 00:00:00.000 UDP 28.104.0.1:46018 -> 198.28.0.2:53 1 64 1 2025-10-05 15:35:20.786 00:00:00.000 UDP 28.104.0.1:43411 -> 198.28.0.2:53 1 64 1 2025-10-05 15:35:20.797 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43411 1 80 1 2025-10-05 15:35:20.796 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46018 1 109 1 2025-10-05 15:30:46.965 00:05:50.743 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-05 15:31:37.658 00:05:09.465 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-05 15:31:37.658 00:05:09.319 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-05 15:31:56.542 00:05:09.996 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2956 1 2025-10-05 15:36:21.082 00:00:00.000 UDP 28.104.0.1:40848 -> 198.28.0.2:53 1 64 1 2025-10-05 15:36:21.082 00:00:00.000 UDP 28.104.0.1:42264 -> 198.28.0.2:53 1 64 1 2025-10-05 15:36:21.093 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40848 1 80 1 2025-10-05 15:36:21.093 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42264 1 109 1 2025-10-05 15:32:37.667 00:05:09.445 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-05 15:37:21.383 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59260 1 80 1 2025-10-05 15:37:21.383 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57214 1 109 1 2025-10-05 15:37:21.373 00:00:00.000 UDP 28.104.0.1:57214 -> 198.28.0.2:53 1 64 1 2025-10-05 15:37:21.373 00:00:00.000 UDP 28.104.0.1:59260 -> 198.28.0.2:53 1 64 1 2025-10-05 15:38:12.028 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-05 15:38:21.671 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39359 1 109 1 2025-10-05 15:38:21.671 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45708 1 80 1 2025-10-05 15:38:21.661 00:00:00.000 UDP 28.104.0.1:39359 -> 198.28.0.2:53 1 64 1 2025-10-05 15:38:21.661 00:00:00.000 UDP 28.104.0.1:45708 -> 198.28.0.2:53 1 64 1 2025-10-05 15:39:21.916 00:00:00.000 UDP 28.104.0.1:56535 -> 198.28.0.2:53 1 64 1 2025-10-05 15:39:21.916 00:00:00.000 UDP 28.104.0.1:44468 -> 198.28.0.2:53 1 64 1 2025-10-05 15:39:21.926 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44468 1 80 1 2025-10-05 15:39:21.926 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56535 1 109 1 2025-10-05 15:35:46.936 00:05:00.177 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-10-05 15:40:22.241 00:00:00.000 UDP 28.104.0.1:46176 -> 198.28.0.2:53 1 64 1 2025-10-05 15:40:22.242 00:00:00.000 UDP 28.104.0.1:43527 -> 198.28.0.2:53 1 64 1 2025-10-05 15:40:22.253 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43527 1 80 1 2025-10-05 15:40:22.253 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46176 1 109 1 2025-10-05 15:37:16.538 00:05:10.001 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2772 1 2025-10-05 15:41:28.792 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57137 1 109 1 2025-10-05 15:41:28.792 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43239 1 80 1 2025-10-05 15:41:28.782 00:00:00.000 UDP 28.104.0.1:57137 -> 198.28.0.2:53 1 64 1 2025-10-05 15:41:28.782 00:00:00.000 UDP 28.104.0.1:43239 -> 198.28.0.2:53 1 64 1 2025-10-05 15:36:46.967 00:05:50.742 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-05 15:37:37.659 00:05:09.464 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-05 15:37:37.659 00:05:09.320 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-05 15:36:47.113 00:06:00.001 TCP 28.154.0.1:179 -> 28.157.0.1:37077 7 497 1 2025-10-05 15:42:29.092 00:00:00.000 UDP 28.104.0.1:39648 -> 198.28.0.2:53 1 64 1 2025-10-05 15:42:29.092 00:00:00.000 UDP 28.104.0.1:38476 -> 198.28.0.2:53 1 64 1 2025-10-05 15:42:29.102 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39648 1 80 1 2025-10-05 15:42:29.102 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38476 1 109 1 2025-10-05 15:38:37.668 00:05:09.445 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-05 15:43:12.051 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-05 15:43:29.414 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38791 1 109 1 2025-10-05 15:43:29.414 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49342 1 80 1 2025-10-05 15:43:29.404 00:00:00.000 UDP 28.104.0.1:38791 -> 198.28.0.2:53 1 64 1 2025-10-05 15:43:29.404 00:00:00.000 UDP 28.104.0.1:49342 -> 198.28.0.2:53 1 64 1 2025-10-05 15:44:29.687 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60003 1 80 1 2025-10-05 15:44:29.687 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40180 1 109 1 2025-10-05 15:44:29.676 00:00:00.000 UDP 28.104.0.1:40180 -> 198.28.0.2:53 1 64 1 2025-10-05 15:44:29.676 00:00:00.000 UDP 28.104.0.1:60003 -> 198.28.0.2:53 1 64 1 2025-10-05 15:45:29.981 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37426 1 80 1 2025-10-05 15:45:29.981 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50107 1 109 1 2025-10-05 15:45:29.971 00:00:00.000 UDP 28.104.0.1:50107 -> 198.28.0.2:53 1 64 1 2025-10-05 15:45:29.971 00:00:00.000 UDP 28.104.0.1:37426 -> 198.28.0.2:53 1 64 1 2025-10-05 15:41:46.937 00:05:00.177 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-10-05 15:46:30.356 00:00:00.000 UDP 28.104.0.1:55313 -> 198.28.0.2:53 1 64 1 2025-10-05 15:46:30.356 00:00:00.000 UDP 28.104.0.1:46641 -> 198.28.0.2:53 1 64 1 2025-10-05 15:46:30.365 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46641 1 109 1 2025-10-05 15:46:30.365 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55313 1 80 1 2025-10-05 15:42:36.539 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2384 1 2025-10-05 15:47:30.661 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51931 1 80 1 2025-10-05 15:47:30.662 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35323 1 109 1 2025-10-05 15:47:30.651 00:00:00.000 UDP 28.104.0.1:35323 -> 198.28.0.2:53 1 64 1 2025-10-05 15:47:30.651 00:00:00.000 UDP 28.104.0.1:51931 -> 198.28.0.2:53 1 64 1 2025-10-05 15:42:46.968 00:05:50.742 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-05 15:43:37.659 00:05:09.466 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-05 15:43:37.659 00:05:09.321 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-05 15:48:12.301 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-05 15:48:30.927 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36033 1 109 1 2025-10-05 15:48:30.927 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47354 1 80 1 2025-10-05 15:48:30.916 00:00:00.000 UDP 28.104.0.1:36033 -> 198.28.0.2:53 1 64 1 2025-10-05 15:48:30.916 00:00:00.000 UDP 28.104.0.1:47354 -> 198.28.0.2:53 1 64 1 2025-10-05 15:43:47.114 00:06:00.002 TCP 28.154.0.1:179 -> 28.157.0.1:37077 7 497 1 2025-10-05 15:44:37.670 00:05:09.446 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-05 15:49:31.240 00:00:00.000 UDP 28.104.0.1:32829 -> 198.28.0.2:53 1 64 1 2025-10-05 15:49:31.240 00:00:00.000 UDP 28.104.0.1:42786 -> 198.28.0.2:53 1 64 1 2025-10-05 15:49:31.252 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32829 1 109 1 2025-10-05 15:49:31.252 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42786 1 80 1 2025-10-05 15:50:31.534 00:00:00.000 UDP 28.104.0.1:49167 -> 198.28.0.2:53 1 64 1 2025-10-05 15:50:31.534 00:00:00.000 UDP 28.104.0.1:38691 -> 198.28.0.2:53 1 64 1 2025-10-05 15:50:31.542 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38691 1 80 1 2025-10-05 15:50:31.543 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49167 1 109 1 2025-10-05 15:51:31.791 00:00:00.000 UDP 28.104.0.1:42256 -> 198.28.0.2:53 1 64 1 2025-10-05 15:51:31.791 00:00:00.000 UDP 28.104.0.1:40063 -> 198.28.0.2:53 1 64 1 2025-10-05 15:51:31.801 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42256 1 80 1 2025-10-05 15:51:31.801 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40063 1 109 1 2025-10-05 15:47:46.938 00:05:00.177 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-10-05 15:47:56.546 00:05:10.011 OSPF 28.0.2.1:0 -> 224.0.0.5:0 42 2896 1 2025-10-05 15:52:32.114 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60768 1 109 1 2025-10-05 15:52:32.114 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60640 1 80 1 2025-10-05 15:52:32.104 00:00:00.000 UDP 28.104.0.1:60768 -> 198.28.0.2:53 1 64 1 2025-10-05 15:52:32.104 00:00:00.000 UDP 28.104.0.1:60640 -> 198.28.0.2:53 1 64 1 2025-10-05 15:53:12.293 00:00:00.025 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-05 15:53:32.398 00:00:00.000 UDP 28.104.0.1:48219 -> 198.28.0.2:53 1 64 1 2025-10-05 15:53:32.398 00:00:00.000 UDP 28.104.0.1:39180 -> 198.28.0.2:53 1 64 1 2025-10-05 15:53:32.410 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48219 1 109 1 2025-10-05 15:53:32.409 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39180 1 80 1 2025-10-05 15:48:46.970 00:05:50.740 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-05 15:49:37.660 00:05:09.465 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-05 15:49:37.660 00:05:09.323 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-05 15:54:32.700 00:00:00.000 UDP 28.104.0.1:38466 -> 198.28.0.2:53 1 64 1 2025-10-05 15:54:32.700 00:00:00.000 UDP 28.104.0.1:41717 -> 198.28.0.2:53 1 64 1 2025-10-05 15:54:32.719 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41717 1 80 1 2025-10-05 15:54:32.709 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38466 1 109 1 2025-10-05 15:50:37.670 00:05:09.446 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-05 15:55:33.013 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42481 1 80 1 2025-10-05 15:55:33.012 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60786 1 109 1 2025-10-05 15:55:33.003 00:00:00.000 UDP 28.104.0.1:42481 -> 198.28.0.2:53 1 64 1 2025-10-05 15:55:33.003 00:00:00.000 UDP 28.104.0.1:60786 -> 198.28.0.2:53 1 64 1 2025-10-05 15:50:47.115 00:06:00.001 TCP 28.154.0.1:179 -> 28.157.0.1:37077 7 497 1 2025-10-05 15:56:33.299 00:00:00.000 UDP 28.104.0.1:49381 -> 198.28.0.2:53 1 64 1 2025-10-05 15:56:33.299 00:00:00.000 UDP 28.104.0.1:45335 -> 198.28.0.2:53 1 64 1 2025-10-05 15:56:33.309 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49381 1 109 1 2025-10-05 15:56:33.309 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45335 1 80 1 2025-10-05 15:53:16.557 00:05:10.202 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2692 1 2025-10-05 15:57:33.605 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60133 1 109 1 2025-10-05 15:57:33.605 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52253 1 80 1 2025-10-05 15:57:33.594 00:00:00.000 UDP 28.104.0.1:60133 -> 198.28.0.2:53 1 64 1 2025-10-05 15:57:33.594 00:00:00.000 UDP 28.104.0.1:52253 -> 198.28.0.2:53 1 64 1 2025-10-05 15:53:46.939 00:05:00.177 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-10-05 15:58:12.383 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-05 15:58:33.889 00:00:00.000 UDP 28.104.0.1:34428 -> 198.28.0.2:53 1 64 1 2025-10-05 15:58:33.889 00:00:00.000 UDP 28.104.0.1:44491 -> 198.28.0.2:53 1 64 1 2025-10-05 15:58:33.899 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44491 1 109 1 2025-10-05 15:58:33.899 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34428 1 80 1 Summary: total flows: 322, total bytes: 93453, total packets: 1362, avg bps: 194, avg pps: 0, avg bpp: 68 Time window: 2025-10-05 14:54:46 - 2025-10-05 15:58:47 Total flows processed: 322, passed: 322, Blocks skipped: 0, Bytes read: 33552 Sys: 0.0053s User: 0.0018s Wall: 0.0044s flows/second: 73500.2 Runtime: 0.0044s