Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-11 15:59:02.982 00:00:00.000 UDP 28.104.0.1:56427 -> 198.28.0.2:53 1 64 1 2025-10-11 15:59:02.982 00:00:00.000 UDP 28.104.0.1:53380 -> 198.28.0.2:53 1 64 1 2025-10-11 15:59:02.993 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56427 1 80 1 2025-10-11 15:59:02.993 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53380 1 109 1 2025-10-11 15:54:49.851 00:05:50.856 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-11 16:00:03.286 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60868 1 109 1 2025-10-11 16:00:03.286 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36432 1 80 1 2025-10-11 16:00:03.276 00:00:00.000 UDP 28.104.0.1:36432 -> 198.28.0.2:53 1 64 1 2025-10-11 16:00:03.276 00:00:00.000 UDP 28.104.0.1:60868 -> 198.28.0.2:53 1 64 1 2025-10-11 15:56:49.851 00:05:00.269 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-10-11 16:01:03.529 00:00:00.000 UDP 28.104.0.1:43104 -> 198.28.0.2:53 1 64 1 2025-10-11 16:01:03.529 00:00:00.000 UDP 28.104.0.1:36572 -> 198.28.0.2:53 1 64 1 2025-10-11 16:01:05.493 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-11 16:01:03.541 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43104 1 109 1 2025-10-11 16:01:03.540 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36572 1 80 1 2025-10-11 15:56:49.794 00:06:00.061 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-11 16:02:03.781 00:00:00.000 UDP 28.104.0.1:33150 -> 198.28.0.2:53 1 64 1 2025-10-11 16:02:03.781 00:00:00.000 UDP 28.104.0.1:49075 -> 198.28.0.2:53 1 64 1 2025-10-11 16:02:03.793 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49075 1 80 1 2025-10-11 16:02:03.793 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33150 1 109 1 2025-10-11 15:57:58.823 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2384 1 2025-10-11 15:57:49.785 00:05:50.962 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-11 16:03:04.073 00:00:00.000 UDP 28.104.0.1:42283 -> 198.28.0.2:53 1 64 1 2025-10-11 16:03:04.073 00:00:00.000 UDP 28.104.0.1:46810 -> 198.28.0.2:53 1 64 1 2025-10-11 16:03:04.083 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46810 1 109 1 2025-10-11 16:03:04.083 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42283 1 80 1 2025-10-11 15:58:49.863 00:05:50.833 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-11 16:04:04.394 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41239 1 109 1 2025-10-11 16:04:04.394 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51115 1 80 1 2025-10-11 16:04:04.384 00:00:00.000 UDP 28.104.0.1:51115 -> 198.28.0.2:53 1 64 1 2025-10-11 16:04:04.383 00:00:00.000 UDP 28.104.0.1:41239 -> 198.28.0.2:53 1 64 1 2025-10-11 15:59:49.795 00:05:50.901 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-11 16:05:04.688 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32981 1 109 1 2025-10-11 16:05:04.688 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32801 1 80 1 2025-10-11 16:05:04.677 00:00:00.000 UDP 28.104.0.1:32981 -> 198.28.0.2:53 1 64 1 2025-10-11 16:05:04.677 00:00:00.000 UDP 28.104.0.1:32801 -> 198.28.0.2:53 1 64 1 2025-10-11 16:00:49.856 00:05:50.851 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-11 16:06:04.944 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60131 1 80 1 2025-10-11 16:06:04.944 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34473 1 109 1 2025-10-11 16:06:05.868 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-11 16:06:04.933 00:00:00.000 UDP 28.104.0.1:60131 -> 198.28.0.2:53 1 64 1 2025-10-11 16:06:04.933 00:00:00.000 UDP 28.104.0.1:34473 -> 198.28.0.2:53 1 64 1 2025-10-11 16:02:49.856 00:05:00.266 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-10-11 16:07:05.232 00:00:00.000 UDP 28.104.0.1:41199 -> 198.28.0.2:53 1 64 1 2025-10-11 16:07:05.232 00:00:00.000 UDP 28.104.0.1:52336 -> 198.28.0.2:53 1 64 1 2025-10-11 16:07:05.242 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52336 1 109 1 2025-10-11 16:07:05.242 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41199 1 80 1 2025-10-11 16:03:18.828 00:05:10.011 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 3008 1 2025-10-11 16:08:05.519 00:00:00.000 UDP 28.104.0.1:43339 -> 198.28.0.2:53 1 64 1 2025-10-11 16:08:05.519 00:00:00.000 UDP 28.104.0.1:44442 -> 198.28.0.2:53 1 64 1 2025-10-11 16:08:05.529 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43339 1 109 1 2025-10-11 16:08:05.529 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44442 1 80 1 2025-10-11 16:03:49.791 00:05:50.956 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-11 16:03:49.803 00:06:00.056 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-11 16:09:05.812 00:00:00.000 UDP 28.104.0.1:46142 -> 198.28.0.2:53 1 64 1 2025-10-11 16:09:05.812 00:00:00.000 UDP 28.104.0.1:52733 -> 198.28.0.2:53 1 64 1 2025-10-11 16:09:05.822 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46142 1 80 1 2025-10-11 16:09:05.822 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52733 1 109 1 2025-10-11 16:04:49.865 00:05:50.832 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-11 16:10:06.116 00:00:00.000 UDP 28.104.0.1:43171 -> 198.28.0.2:53 1 64 1 2025-10-11 16:10:06.116 00:00:00.000 UDP 28.104.0.1:50640 -> 198.28.0.2:53 1 64 1 2025-10-11 16:10:06.127 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43171 1 80 1 2025-10-11 16:10:06.129 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50640 1 109 1 2025-10-11 16:05:49.799 00:05:50.899 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-11 16:11:05.885 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-11 16:11:06.418 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56922 1 109 1 2025-10-11 16:11:06.418 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35697 1 80 1 2025-10-11 16:11:06.409 00:00:00.000 UDP 28.104.0.1:56922 -> 198.28.0.2:53 1 64 1 2025-10-11 16:11:06.409 00:00:00.000 UDP 28.104.0.1:35697 -> 198.28.0.2:53 1 64 1 2025-10-11 16:06:49.858 00:05:50.850 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-11 16:12:06.667 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52569 1 80 1 2025-10-11 16:12:06.667 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34336 1 109 1 2025-10-11 16:12:06.658 00:00:00.000 UDP 28.104.0.1:52569 -> 198.28.0.2:53 1 64 1 2025-10-11 16:12:06.658 00:00:00.000 UDP 28.104.0.1:34336 -> 198.28.0.2:53 1 64 1 2025-10-11 16:08:49.862 00:05:00.260 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-10-11 16:08:38.840 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2544 1 2025-10-11 16:13:06.966 00:00:00.000 UDP 28.104.0.1:60074 -> 198.28.0.2:53 1 64 1 2025-10-11 16:13:06.966 00:00:00.000 UDP 28.104.0.1:49553 -> 198.28.0.2:53 1 64 1 2025-10-11 16:13:06.975 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60074 1 80 1 2025-10-11 16:13:06.975 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49553 1 109 1 2025-10-11 16:14:07.267 00:00:00.000 UDP 28.104.0.1:34571 -> 198.28.0.2:53 1 64 1 2025-10-11 16:14:07.266 00:00:00.000 UDP 28.104.0.1:56006 -> 198.28.0.2:53 1 64 1 2025-10-11 16:14:07.277 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56006 1 109 1 2025-10-11 16:14:07.276 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34571 1 80 1 2025-10-11 16:09:49.793 00:05:50.956 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-11 16:15:07.522 00:00:00.000 UDP 28.104.0.1:42854 -> 198.28.0.2:53 1 64 1 2025-10-11 16:15:07.522 00:00:00.000 UDP 28.104.0.1:57779 -> 198.28.0.2:53 1 64 1 2025-10-11 16:15:07.532 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42854 1 109 1 2025-10-11 16:15:07.532 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57779 1 80 1 2025-10-11 16:10:49.869 00:05:50.830 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-11 16:10:49.804 00:06:00.057 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-11 16:16:05.959 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-11 16:16:08.066 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56744 1 109 1 2025-10-11 16:16:08.066 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47124 1 80 1 2025-10-11 16:16:08.055 00:00:00.000 UDP 28.104.0.1:56744 -> 198.28.0.2:53 1 64 1 2025-10-11 16:16:08.055 00:00:00.000 UDP 28.104.0.1:47124 -> 198.28.0.2:53 1 64 1 2025-10-11 16:11:49.804 00:05:50.896 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-11 16:17:08.348 00:00:00.000 UDP 28.104.0.1:48539 -> 198.28.0.2:53 1 64 1 2025-10-11 16:17:08.348 00:00:00.000 UDP 28.104.0.1:33476 -> 198.28.0.2:53 1 64 1 2025-10-11 16:17:08.358 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33476 1 109 1 2025-10-11 16:17:08.358 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48539 1 80 1 2025-10-11 16:12:49.860 00:05:50.850 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-11 16:18:08.649 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35320 1 80 1 2025-10-11 16:13:58.843 00:05:10.012 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2464 1 2025-10-11 16:18:08.650 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60020 1 109 1 2025-10-11 16:18:08.639 00:00:00.000 UDP 28.104.0.1:60020 -> 198.28.0.2:53 1 64 1 2025-10-11 16:18:08.639 00:00:00.000 UDP 28.104.0.1:35320 -> 198.28.0.2:53 1 64 1 2025-10-11 16:14:49.860 00:05:00.266 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-10-11 16:19:09.279 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42895 1 80 1 2025-10-11 16:19:09.279 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46832 1 109 1 2025-10-11 16:19:09.270 00:00:00.000 UDP 28.104.0.1:46832 -> 198.28.0.2:53 1 64 1 2025-10-11 16:19:09.269 00:00:00.000 UDP 28.104.0.1:42895 -> 198.28.0.2:53 1 64 1 2025-10-11 16:20:09.560 00:00:00.000 UDP 28.104.0.1:47409 -> 198.28.0.2:53 1 64 1 2025-10-11 16:20:09.560 00:00:00.000 UDP 28.104.0.1:53567 -> 198.28.0.2:53 1 64 1 2025-10-11 16:20:09.570 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47409 1 109 1 2025-10-11 16:20:09.569 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53567 1 80 1 2025-10-11 16:15:49.794 00:05:50.957 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-11 16:21:06.114 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-11 16:21:09.869 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34707 1 80 1 2025-10-11 16:21:09.869 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59996 1 109 1 2025-10-11 16:21:09.858 00:00:00.000 UDP 28.104.0.1:59996 -> 198.28.0.2:53 1 64 1 2025-10-11 16:21:09.858 00:00:00.000 UDP 28.104.0.1:34707 -> 198.28.0.2:53 1 64 1 2025-10-11 16:16:49.872 00:05:50.830 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-11 16:22:10.181 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35112 1 80 1 2025-10-11 16:22:10.181 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54732 1 109 1 2025-10-11 16:22:10.171 00:00:00.000 UDP 28.104.0.1:35112 -> 198.28.0.2:53 1 64 1 2025-10-11 16:22:10.171 00:00:00.000 UDP 28.104.0.1:54732 -> 198.28.0.2:53 1 64 1 2025-10-11 16:17:49.804 00:05:50.899 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-11 16:17:49.805 00:06:00.059 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-11 16:23:10.477 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49982 1 80 1 2025-10-11 16:23:10.477 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60101 1 109 1 2025-10-11 16:23:10.467 00:00:00.000 UDP 28.104.0.1:49982 -> 198.28.0.2:53 1 64 1 2025-10-11 16:23:10.467 00:00:00.000 UDP 28.104.0.1:60101 -> 198.28.0.2:53 1 64 1 2025-10-11 16:19:18.855 00:05:10.018 OSPF 28.0.2.1:0 -> 224.0.0.5:0 42 3156 1 2025-10-11 16:18:49.862 00:05:50.853 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-11 16:24:10.728 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44799 1 80 1 2025-10-11 16:24:10.728 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45084 1 109 1 2025-10-11 16:24:10.719 00:00:00.000 UDP 28.104.0.1:44799 -> 198.28.0.2:53 1 64 1 2025-10-11 16:24:10.719 00:00:00.000 UDP 28.104.0.1:45084 -> 198.28.0.2:53 1 64 1 2025-10-11 16:20:49.861 00:05:00.266 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-10-11 16:25:11.038 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42490 1 80 1 2025-10-11 16:25:11.038 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35906 1 109 1 2025-10-11 16:25:11.028 00:00:00.000 UDP 28.104.0.1:35906 -> 198.28.0.2:53 1 64 1 2025-10-11 16:25:11.028 00:00:00.000 UDP 28.104.0.1:42490 -> 198.28.0.2:53 1 64 1 2025-10-11 16:26:06.228 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-11 16:26:11.282 00:00:00.000 UDP 28.104.0.1:41828 -> 198.28.0.2:53 1 64 1 2025-10-11 16:26:11.282 00:00:00.000 UDP 28.104.0.1:42882 -> 198.28.0.2:53 1 64 1 2025-10-11 16:26:11.291 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41828 1 109 1 2025-10-11 16:26:11.291 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42882 1 80 1 2025-10-11 16:21:49.796 00:05:50.958 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-11 16:27:11.585 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51393 1 109 1 2025-10-11 16:27:11.585 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42710 1 80 1 2025-10-11 16:27:11.575 00:00:00.000 UDP 28.104.0.1:51393 -> 198.28.0.2:53 1 64 1 2025-10-11 16:27:11.575 00:00:00.000 UDP 28.104.0.1:42710 -> 198.28.0.2:53 1 64 1 2025-10-11 16:22:49.872 00:05:50.832 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-11 16:28:11.828 00:00:00.000 UDP 28.104.0.1:51553 -> 198.28.0.2:53 1 64 1 2025-10-11 16:28:11.828 00:00:00.000 UDP 28.104.0.1:37908 -> 198.28.0.2:53 1 64 1 2025-10-11 16:28:11.840 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51553 1 80 1 2025-10-11 16:28:11.839 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37908 1 109 1 2025-10-11 16:23:49.807 00:05:50.898 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-11 16:24:38.873 00:05:10.009 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2656 1 2025-10-11 16:29:12.141 00:00:00.000 UDP 28.104.0.1:33983 -> 198.28.0.2:53 1 64 1 2025-10-11 16:29:12.140 00:00:00.000 UDP 28.104.0.1:44113 -> 198.28.0.2:53 1 64 1 2025-10-11 16:29:12.151 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33983 1 80 1 2025-10-11 16:29:12.151 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44113 1 109 1 2025-10-11 16:24:49.864 00:05:50.850 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-11 16:24:49.806 00:06:00.062 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-11 16:30:12.431 00:00:00.000 UDP 28.104.0.1:57948 -> 198.28.0.2:53 1 64 1 2025-10-11 16:30:12.431 00:00:00.000 UDP 28.104.0.1:55802 -> 198.28.0.2:53 1 64 1 2025-10-11 16:30:12.443 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55802 1 80 1 2025-10-11 16:30:12.443 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57948 1 109 1 2025-10-11 16:26:49.866 00:05:00.262 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-10-11 16:31:06.270 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-11 16:31:12.728 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48864 1 109 1 2025-10-11 16:31:12.728 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45856 1 80 1 2025-10-11 16:31:12.717 00:00:00.000 UDP 28.104.0.1:48864 -> 198.28.0.2:53 1 64 1 2025-10-11 16:31:12.717 00:00:00.000 UDP 28.104.0.1:45856 -> 198.28.0.2:53 1 64 1 2025-10-11 16:32:16.988 00:00:00.000 UDP 28.104.0.1:35218 -> 198.28.0.2:53 1 64 1 2025-10-11 16:32:16.988 00:00:00.000 UDP 28.104.0.1:38402 -> 198.28.0.2:53 1 64 1 2025-10-11 16:32:16.998 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38402 1 80 1 2025-10-11 16:32:16.998 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35218 1 109 1 2025-10-11 16:27:49.797 00:05:50.958 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-11 16:33:17.300 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43194 1 80 1 2025-10-11 16:33:17.300 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51960 1 109 1 2025-10-11 16:33:17.292 00:00:00.000 UDP 28.104.0.1:43194 -> 198.28.0.2:53 1 64 1 2025-10-11 16:33:17.291 00:00:00.000 UDP 28.104.0.1:51960 -> 198.28.0.2:53 1 64 1 2025-10-11 16:28:49.878 00:05:50.828 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-11 16:29:58.883 00:05:10.011 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2940 1 2025-10-11 16:34:17.582 00:00:00.000 UDP 28.104.0.1:35427 -> 198.28.0.2:53 1 64 1 2025-10-11 16:34:17.583 00:00:00.000 UDP 28.104.0.1:37366 -> 198.28.0.2:53 1 64 1 2025-10-11 16:34:17.592 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35427 1 109 1 2025-10-11 16:34:17.593 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37366 1 80 1 2025-10-11 16:29:49.809 00:05:50.896 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-11 16:35:17.884 00:00:00.000 UDP 28.104.0.1:53775 -> 198.28.0.2:53 1 64 1 2025-10-11 16:35:17.885 00:00:00.000 UDP 28.104.0.1:34686 -> 198.28.0.2:53 1 64 1 2025-10-11 16:35:17.895 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34686 1 80 1 2025-10-11 16:35:17.894 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53775 1 109 1 2025-10-11 16:30:49.867 00:05:50.848 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-11 16:36:07.074 00:00:00.027 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-11 16:36:18.203 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55923 1 109 1 2025-10-11 16:36:18.203 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39816 1 80 1 2025-10-11 16:36:18.192 00:00:00.000 UDP 28.104.0.1:55923 -> 198.28.0.2:53 1 64 1 2025-10-11 16:36:18.192 00:00:00.000 UDP 28.104.0.1:39816 -> 198.28.0.2:53 1 64 1 2025-10-11 16:32:49.875 00:05:00.257 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-10-11 16:31:49.807 00:06:00.068 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-11 16:37:18.496 00:00:00.000 UDP 28.104.0.1:49956 -> 198.28.0.2:53 1 64 1 2025-10-11 16:37:18.496 00:00:00.000 UDP 28.104.0.1:46135 -> 198.28.0.2:53 1 64 1 2025-10-11 16:37:18.506 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46135 1 109 1 2025-10-11 16:37:18.506 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49956 1 80 1 2025-10-11 16:38:18.808 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47601 1 80 1 2025-10-11 16:38:18.808 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48491 1 109 1 2025-10-11 16:38:18.798 00:00:00.000 UDP 28.104.0.1:48491 -> 198.28.0.2:53 1 64 1 2025-10-11 16:38:18.798 00:00:00.000 UDP 28.104.0.1:47601 -> 198.28.0.2:53 1 64 1 2025-10-11 16:33:49.798 00:05:50.961 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-11 16:39:19.069 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57695 1 80 1 2025-10-11 16:39:19.069 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50918 1 109 1 2025-10-11 16:39:19.059 00:00:00.000 UDP 28.104.0.1:50918 -> 198.28.0.2:53 1 64 1 2025-10-11 16:39:19.059 00:00:00.000 UDP 28.104.0.1:57695 -> 198.28.0.2:53 1 64 1 2025-10-11 16:35:18.894 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2608 1 2025-10-11 16:34:49.884 00:05:50.824 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-11 16:40:19.357 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46973 1 109 1 2025-10-11 16:40:19.357 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58109 1 80 1 2025-10-11 16:40:19.347 00:00:00.000 UDP 28.104.0.1:58109 -> 198.28.0.2:53 1 64 1 2025-10-11 16:40:19.347 00:00:00.000 UDP 28.104.0.1:46973 -> 198.28.0.2:53 1 64 1 2025-10-11 16:35:49.809 00:05:50.900 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-11 16:41:06.626 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-11 16:41:20.282 00:00:00.000 UDP 28.104.0.1:48241 -> 198.28.0.2:53 1 64 1 2025-10-11 16:41:20.282 00:00:00.000 UDP 28.104.0.1:49158 -> 198.28.0.2:53 1 64 1 2025-10-11 16:41:20.293 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49158 1 80 1 2025-10-11 16:41:20.293 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48241 1 109 1 2025-10-11 16:36:49.874 00:05:50.844 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-11 16:42:20.597 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51414 1 80 1 2025-10-11 16:42:20.596 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60591 1 109 1 2025-10-11 16:42:20.586 00:00:00.000 UDP 28.104.0.1:51414 -> 198.28.0.2:53 1 64 1 2025-10-11 16:42:20.587 00:00:00.000 UDP 28.104.0.1:60591 -> 198.28.0.2:53 1 64 1 2025-10-11 16:38:49.875 00:05:00.257 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-10-11 16:43:20.847 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57395 1 109 1 2025-10-11 16:43:20.847 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60810 1 80 1 2025-10-11 16:43:20.838 00:00:00.000 UDP 28.104.0.1:57395 -> 198.28.0.2:53 1 64 1 2025-10-11 16:43:20.838 00:00:00.000 UDP 28.104.0.1:60810 -> 198.28.0.2:53 1 64 1 2025-10-11 16:38:49.813 00:06:00.064 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-11 16:44:21.129 00:00:00.000 UDP 28.104.0.1:41884 -> 198.28.0.2:53 1 64 1 2025-10-11 16:44:21.129 00:00:00.000 UDP 28.104.0.1:49668 -> 198.28.0.2:53 1 64 1 2025-10-11 16:44:21.139 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49668 1 109 1 2025-10-11 16:44:21.140 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41884 1 80 1 2025-10-11 16:39:49.799 00:05:50.962 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-11 16:40:38.902 00:05:10.009 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2464 1 2025-10-11 16:45:21.390 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37255 1 80 1 2025-10-11 16:45:21.390 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49987 1 109 1 2025-10-11 16:45:21.380 00:00:00.000 UDP 28.104.0.1:37255 -> 198.28.0.2:53 1 64 1 2025-10-11 16:45:21.380 00:00:00.000 UDP 28.104.0.1:49987 -> 198.28.0.2:53 1 64 1 2025-10-11 16:40:49.886 00:05:50.824 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-11 16:46:06.434 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-11 16:46:21.666 00:00:00.000 UDP 28.104.0.1:39453 -> 198.28.0.2:53 1 64 1 2025-10-11 16:46:21.666 00:00:00.000 UDP 28.104.0.1:44472 -> 198.28.0.2:53 1 64 1 2025-10-11 16:46:21.676 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44472 1 80 1 2025-10-11 16:46:21.676 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39453 1 109 1 2025-10-11 16:41:49.809 00:05:50.902 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-11 16:47:21.960 00:00:00.000 UDP 28.104.0.1:53619 -> 198.28.0.2:53 1 64 1 2025-10-11 16:47:21.960 00:00:00.000 UDP 28.104.0.1:41090 -> 198.28.0.2:53 1 64 1 2025-10-11 16:47:21.969 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41090 1 80 1 2025-10-11 16:47:21.969 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53619 1 109 1 2025-10-11 16:42:49.875 00:05:50.846 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-11 16:48:22.259 00:00:00.000 UDP 28.104.0.1:47976 -> 198.28.0.2:53 1 64 1 2025-10-11 16:48:22.260 00:00:00.000 UDP 28.104.0.1:58164 -> 198.28.0.2:53 1 64 1 2025-10-11 16:48:22.271 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58164 1 109 1 2025-10-11 16:48:22.271 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47976 1 80 1 2025-10-11 16:44:49.876 00:05:00.259 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-10-11 16:49:22.520 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38708 1 80 1 2025-10-11 16:49:22.521 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48176 1 109 1 2025-10-11 16:49:22.511 00:00:00.000 UDP 28.104.0.1:48176 -> 198.28.0.2:53 1 64 1 2025-10-11 16:49:22.511 00:00:00.000 UDP 28.104.0.1:38708 -> 198.28.0.2:53 1 64 1 2025-10-11 16:45:58.910 00:05:00.857 OSPF 28.0.2.1:0 -> 224.0.0.5:0 42 3128 1 2025-10-11 16:50:22.819 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40539 1 80 1 2025-10-11 16:50:22.819 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51044 1 109 1 2025-10-11 16:50:22.809 00:00:00.000 UDP 28.104.0.1:40539 -> 198.28.0.2:53 1 64 1 2025-10-11 16:50:22.809 00:00:00.000 UDP 28.104.0.1:51044 -> 198.28.0.2:53 1 64 1 2025-10-11 16:45:49.801 00:05:50.964 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-11 16:45:49.816 00:06:00.065 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-11 16:51:06.682 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-11 16:51:23.111 00:00:00.000 UDP 28.104.0.1:60528 -> 198.28.0.2:53 1 64 1 2025-10-11 16:51:23.111 00:00:00.000 UDP 28.104.0.1:57079 -> 198.28.0.2:53 1 64 1 2025-10-11 16:51:23.122 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57079 1 80 1 2025-10-11 16:51:23.121 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60528 1 109 1 2025-10-11 16:46:49.887 00:05:50.826 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-11 16:52:23.438 00:00:00.000 UDP 28.104.0.1:59164 -> 198.28.0.2:53 1 64 1 2025-10-11 16:52:23.437 00:00:00.000 UDP 28.104.0.1:54133 -> 198.28.0.2:53 1 64 1 2025-10-11 16:52:23.450 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59164 1 109 1 2025-10-11 16:52:23.450 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54133 1 80 1 2025-10-11 16:47:49.810 00:05:50.904 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-11 16:53:23.745 00:00:00.000 UDP 28.104.0.1:42785 -> 198.28.0.2:53 1 64 1 2025-10-11 16:53:23.745 00:00:00.000 UDP 28.104.0.1:56115 -> 198.28.0.2:53 1 64 1 2025-10-11 16:53:23.755 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56115 1 80 1 2025-10-11 16:53:23.755 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42785 1 109 1 2025-10-11 16:48:49.877 00:05:50.847 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-11 16:54:23.997 00:00:00.000 UDP 28.104.0.1:46008 -> 198.28.0.2:53 1 64 1 2025-10-11 16:54:23.997 00:00:00.000 UDP 28.104.0.1:44125 -> 198.28.0.2:53 1 64 1 2025-10-11 16:54:24.009 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46008 1 109 1 2025-10-11 16:54:24.009 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44125 1 80 1 2025-10-11 16:50:49.880 00:05:00.254 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-10-11 16:51:08.916 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2640 1 2025-10-11 16:55:24.297 00:00:00.000 UDP 28.104.0.1:33166 -> 198.28.0.2:53 1 64 1 2025-10-11 16:55:24.296 00:00:00.000 UDP 28.104.0.1:43514 -> 198.28.0.2:53 1 64 1 2025-10-11 16:55:24.306 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43514 1 109 1 2025-10-11 16:55:24.307 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33166 1 80 1 2025-10-11 16:56:07.883 00:00:00.020 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-11 16:56:24.646 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56432 1 80 1 2025-10-11 16:56:24.647 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37371 1 109 1 2025-10-11 16:56:24.635 00:00:00.000 UDP 28.104.0.1:37371 -> 198.28.0.2:53 1 64 1 2025-10-11 16:56:24.635 00:00:00.000 UDP 28.104.0.1:56432 -> 198.28.0.2:53 1 64 1 2025-10-11 16:51:49.803 00:05:50.961 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-11 16:57:24.940 00:00:00.000 UDP 28.104.0.1:44012 -> 198.28.0.2:53 1 64 1 2025-10-11 16:57:24.940 00:00:00.000 UDP 28.104.0.1:59962 -> 198.28.0.2:53 1 64 1 2025-10-11 16:57:24.949 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44012 1 80 1 2025-10-11 16:57:24.949 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59962 1 109 1 2025-10-11 16:52:49.891 00:05:50.823 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-11 16:52:49.818 00:06:00.065 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-11 16:58:25.258 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34892 1 80 1 2025-10-11 16:58:25.259 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45407 1 109 1 2025-10-11 16:58:25.247 00:00:00.000 UDP 28.104.0.1:45407 -> 198.28.0.2:53 1 64 1 2025-10-11 16:58:25.247 00:00:00.000 UDP 28.104.0.1:34892 -> 198.28.0.2:53 1 64 1 2025-10-11 16:53:49.813 00:05:50.901 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 Summary: total flows: 322, total bytes: 96685, total packets: 1426, avg bps: 198, avg pps: 0, avg bpp: 67 Time window: 2025-10-11 15:54:49 - 2025-10-11 16:59:40 Total flows processed: 322, passed: 322, Blocks skipped: 0, Bytes read: 33552 Sys: 0.0032s User: 0.0032s Wall: 0.0043s flows/second: 75160.9 Runtime: 0.0043s