Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-12 15:59:07.397 00:00:00.000 UDP 28.104.0.1:60351 -> 198.28.0.2:53 1 64 1 2025-10-12 15:59:07.397 00:00:00.000 UDP 28.104.0.1:60830 -> 198.28.0.2:53 1 64 1 2025-10-12 15:59:07.408 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60830 1 109 1 2025-10-12 15:59:07.408 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60351 1 80 1 2025-10-12 16:00:07.655 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35420 1 80 1 2025-10-12 16:00:07.655 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45286 1 109 1 2025-10-12 16:00:07.644 00:00:00.000 UDP 28.104.0.1:35420 -> 198.28.0.2:53 1 64 1 2025-10-12 16:00:07.644 00:00:00.000 UDP 28.104.0.1:45286 -> 198.28.0.2:53 1 64 1 2025-10-12 16:01:07.939 00:00:00.000 UDP 28.104.0.1:48594 -> 198.28.0.2:53 1 64 1 2025-10-12 16:01:07.939 00:00:00.000 UDP 28.104.0.1:34077 -> 198.28.0.2:53 1 64 1 2025-10-12 16:01:07.949 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48594 1 109 1 2025-10-12 16:01:07.949 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34077 1 80 1 2025-10-12 16:01:34.604 00:00:00.025 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-12 15:56:50.251 00:05:50.997 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-12 16:02:08.253 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50007 1 80 1 2025-10-12 16:02:08.253 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44356 1 109 1 2025-10-12 16:02:08.242 00:00:00.000 UDP 28.104.0.1:50007 -> 198.28.0.2:53 1 64 1 2025-10-12 16:02:08.242 00:00:00.000 UDP 28.104.0.1:44356 -> 198.28.0.2:53 1 64 1 2025-10-12 15:57:50.359 00:05:50.839 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-12 15:58:30.894 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2608 1 2025-10-12 15:57:50.244 00:06:00.106 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-12 16:03:08.546 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37542 1 80 1 2025-10-12 16:03:08.546 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34671 1 109 1 2025-10-12 16:03:08.535 00:00:00.000 UDP 28.104.0.1:34671 -> 198.28.0.2:53 1 64 1 2025-10-12 16:03:08.535 00:00:00.000 UDP 28.104.0.1:37542 -> 198.28.0.2:53 1 64 1 2025-10-12 15:58:50.262 00:05:50.936 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-12 16:04:08.793 00:00:00.000 UDP 28.104.0.1:34257 -> 198.28.0.2:53 1 64 1 2025-10-12 16:04:08.793 00:00:00.000 UDP 28.104.0.1:57359 -> 198.28.0.2:53 1 64 1 2025-10-12 16:04:08.803 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57359 1 80 1 2025-10-12 16:04:08.803 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34257 1 109 1 2025-10-12 15:59:50.349 00:05:50.860 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-12 15:59:50.349 00:06:00.168 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-12 16:05:09.091 00:00:00.000 UDP 28.104.0.1:52123 -> 198.28.0.2:53 1 64 1 2025-10-12 16:05:09.091 00:00:00.000 UDP 28.104.0.1:52168 -> 198.28.0.2:53 1 64 1 2025-10-12 16:05:09.102 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52168 1 80 1 2025-10-12 16:05:09.101 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52123 1 109 1 2025-10-12 16:06:09.891 00:00:00.000 UDP 28.104.0.1:44403 -> 198.28.0.2:53 1 64 1 2025-10-12 16:06:09.891 00:00:00.000 UDP 28.104.0.1:48506 -> 198.28.0.2:53 1 64 1 2025-10-12 16:06:09.901 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48506 1 109 1 2025-10-12 16:06:09.901 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44403 1 80 1 2025-10-12 16:06:34.770 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-12 16:07:10.155 00:00:00.000 UDP 28.104.0.1:55326 -> 198.28.0.2:53 1 64 1 2025-10-12 16:07:10.155 00:00:00.000 UDP 28.104.0.1:44535 -> 198.28.0.2:53 1 64 1 2025-10-12 16:07:10.165 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44535 1 109 1 2025-10-12 16:07:10.165 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55326 1 80 1 2025-10-12 16:02:50.253 00:05:50.995 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-12 16:03:50.897 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 34 2320 1 2025-10-12 16:08:10.456 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41248 1 109 1 2025-10-12 16:08:10.456 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58973 1 80 1 2025-10-12 16:08:10.446 00:00:00.000 UDP 28.104.0.1:58973 -> 198.28.0.2:53 1 64 1 2025-10-12 16:08:10.446 00:00:00.000 UDP 28.104.0.1:41248 -> 198.28.0.2:53 1 64 1 2025-10-12 16:03:50.360 00:05:50.839 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-12 16:09:10.742 00:00:00.000 UDP 28.104.0.1:49267 -> 198.28.0.2:53 1 64 1 2025-10-12 16:09:10.742 00:00:00.000 UDP 28.104.0.1:39258 -> 198.28.0.2:53 1 64 1 2025-10-12 16:09:10.752 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49267 1 109 1 2025-10-12 16:09:10.752 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39258 1 80 1 2025-10-12 16:04:50.263 00:05:50.936 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-12 16:04:50.244 00:06:00.107 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-12 16:10:11.056 00:00:00.000 UDP 28.104.0.1:55519 -> 198.28.0.2:53 1 64 1 2025-10-12 16:10:11.055 00:00:00.000 UDP 28.104.0.1:47895 -> 198.28.0.2:53 1 64 1 2025-10-12 16:10:11.065 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55519 1 109 1 2025-10-12 16:10:11.065 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47895 1 80 1 2025-10-12 16:05:50.350 00:05:50.859 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-12 16:11:11.346 00:00:00.000 UDP 28.104.0.1:37226 -> 198.28.0.2:53 1 64 1 2025-10-12 16:11:11.347 00:00:00.000 UDP 28.104.0.1:47439 -> 198.28.0.2:53 1 64 1 2025-10-12 16:11:11.357 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37226 1 109 1 2025-10-12 16:11:11.357 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47439 1 80 1 2025-10-12 16:11:35.119 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-12 16:06:50.350 00:06:00.168 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-12 16:12:11.598 00:00:00.000 UDP 28.104.0.1:49049 -> 198.28.0.2:53 1 64 1 2025-10-12 16:12:11.598 00:00:00.000 UDP 28.104.0.1:56078 -> 198.28.0.2:53 1 64 1 2025-10-12 16:12:11.609 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56078 1 109 1 2025-10-12 16:12:11.609 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49049 1 80 1 2025-10-12 16:13:11.963 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47458 1 80 1 2025-10-12 16:13:11.963 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56455 1 109 1 2025-10-12 16:13:11.952 00:00:00.000 UDP 28.104.0.1:47458 -> 198.28.0.2:53 1 64 1 2025-10-12 16:13:11.952 00:00:00.000 UDP 28.104.0.1:56455 -> 198.28.0.2:53 1 64 1 2025-10-12 16:09:10.904 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 45 3444 1 2025-10-12 16:08:50.254 00:05:50.996 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-12 16:14:12.263 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47299 1 80 1 2025-10-12 16:14:12.263 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49619 1 109 1 2025-10-12 16:14:12.254 00:00:00.000 UDP 28.104.0.1:47299 -> 198.28.0.2:53 1 64 1 2025-10-12 16:14:12.253 00:00:00.000 UDP 28.104.0.1:49619 -> 198.28.0.2:53 1 64 1 2025-10-12 16:09:50.360 00:05:50.839 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-12 16:15:12.505 00:00:00.000 UDP 28.104.0.1:37412 -> 198.28.0.2:53 1 64 1 2025-10-12 16:15:12.505 00:00:00.000 UDP 28.104.0.1:59534 -> 198.28.0.2:53 1 64 1 2025-10-12 16:15:12.515 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59534 1 109 1 2025-10-12 16:15:12.515 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37412 1 80 1 2025-10-12 16:10:50.265 00:05:50.935 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-12 16:16:12.811 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54251 1 80 1 2025-10-12 16:16:12.811 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51438 1 109 1 2025-10-12 16:16:12.800 00:00:00.000 UDP 28.104.0.1:51438 -> 198.28.0.2:53 1 64 1 2025-10-12 16:16:12.800 00:00:00.000 UDP 28.104.0.1:54251 -> 198.28.0.2:53 1 64 1 2025-10-12 16:16:35.189 00:00:00.026 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-12 16:11:50.351 00:05:50.859 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-12 16:11:50.245 00:06:00.107 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-12 16:17:13.109 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45007 1 109 1 2025-10-12 16:17:13.109 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45630 1 80 1 2025-10-12 16:17:13.099 00:00:00.000 UDP 28.104.0.1:45007 -> 198.28.0.2:53 1 64 1 2025-10-12 16:17:13.099 00:00:00.000 UDP 28.104.0.1:45630 -> 198.28.0.2:53 1 64 1 2025-10-12 16:18:13.399 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38074 1 80 1 2025-10-12 16:18:13.399 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49863 1 109 1 2025-10-12 16:18:13.390 00:00:00.000 UDP 28.104.0.1:49863 -> 198.28.0.2:53 1 64 1 2025-10-12 16:18:13.390 00:00:00.000 UDP 28.104.0.1:38074 -> 198.28.0.2:53 1 64 1 2025-10-12 16:14:30.910 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2448 1 2025-10-12 16:13:50.352 00:06:00.167 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-12 16:19:13.689 00:00:00.000 UDP 28.104.0.1:35286 -> 198.28.0.2:53 1 64 1 2025-10-12 16:19:13.689 00:00:00.000 UDP 28.104.0.1:44158 -> 198.28.0.2:53 1 64 1 2025-10-12 16:19:13.699 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44158 1 109 1 2025-10-12 16:19:13.699 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35286 1 80 1 2025-10-12 16:14:50.255 00:05:50.995 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-12 16:20:13.944 00:00:00.000 UDP 28.104.0.1:58491 -> 198.28.0.2:53 1 64 1 2025-10-12 16:20:13.944 00:00:00.000 UDP 28.104.0.1:49306 -> 198.28.0.2:53 1 64 1 2025-10-12 16:20:13.954 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49306 1 80 1 2025-10-12 16:20:13.954 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58491 1 109 1 2025-10-12 16:15:50.364 00:05:50.838 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-12 16:21:14.246 00:00:00.000 UDP 28.104.0.1:55098 -> 198.28.0.2:53 1 64 1 2025-10-12 16:21:14.246 00:00:00.000 UDP 28.104.0.1:44282 -> 198.28.0.2:53 1 64 1 2025-10-12 16:21:14.257 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55098 1 109 1 2025-10-12 16:21:14.258 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44282 1 80 1 2025-10-12 16:21:34.959 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-12 16:16:50.265 00:05:50.935 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-12 16:22:14.504 00:00:00.000 UDP 28.104.0.1:50896 -> 198.28.0.2:53 1 64 1 2025-10-12 16:22:14.504 00:00:00.000 UDP 28.104.0.1:57749 -> 198.28.0.2:53 1 64 1 2025-10-12 16:22:14.515 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50896 1 80 1 2025-10-12 16:22:14.515 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57749 1 109 1 2025-10-12 16:17:50.352 00:05:50.860 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-12 16:23:14.805 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49216 1 109 1 2025-10-12 16:23:14.805 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36051 1 80 1 2025-10-12 16:23:14.794 00:00:00.000 UDP 28.104.0.1:49216 -> 198.28.0.2:53 1 64 1 2025-10-12 16:23:14.794 00:00:00.000 UDP 28.104.0.1:36051 -> 198.28.0.2:53 1 64 1 2025-10-12 16:18:50.249 00:06:00.106 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-12 16:19:50.918 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 42 3020 1 2025-10-12 16:24:15.113 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45692 1 80 1 2025-10-12 16:24:15.114 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58584 1 109 1 2025-10-12 16:24:15.102 00:00:00.000 UDP 28.104.0.1:58584 -> 198.28.0.2:53 1 64 1 2025-10-12 16:24:15.102 00:00:00.000 UDP 28.104.0.1:45692 -> 198.28.0.2:53 1 64 1 2025-10-12 16:25:15.391 00:00:00.000 UDP 28.104.0.1:36974 -> 198.28.0.2:53 1 64 1 2025-10-12 16:25:15.391 00:00:00.000 UDP 28.104.0.1:58243 -> 198.28.0.2:53 1 64 1 2025-10-12 16:25:15.402 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58243 1 80 1 2025-10-12 16:25:15.402 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36974 1 109 1 2025-10-12 16:20:50.256 00:05:50.996 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-12 16:20:50.353 00:06:00.168 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-12 16:26:15.684 00:00:00.000 UDP 28.104.0.1:53419 -> 198.28.0.2:53 1 64 1 2025-10-12 16:26:15.684 00:00:00.000 UDP 28.104.0.1:57019 -> 198.28.0.2:53 1 64 1 2025-10-12 16:26:15.694 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53419 1 109 1 2025-10-12 16:26:15.694 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57019 1 80 1 2025-10-12 16:26:35.150 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-12 16:21:50.362 00:05:50.840 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-12 16:27:16.691 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60825 1 109 1 2025-10-12 16:27:16.691 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54264 1 80 1 2025-10-12 16:27:16.681 00:00:00.000 UDP 28.104.0.1:54264 -> 198.28.0.2:53 1 64 1 2025-10-12 16:27:16.681 00:00:00.000 UDP 28.104.0.1:60825 -> 198.28.0.2:53 1 64 1 2025-10-12 16:22:50.268 00:05:50.936 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-12 16:28:16.931 00:00:00.000 UDP 28.104.0.1:49312 -> 198.28.0.2:53 1 64 1 2025-10-12 16:28:16.932 00:00:00.000 UDP 28.104.0.1:60024 -> 198.28.0.2:53 1 64 1 2025-10-12 16:28:16.942 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49312 1 109 1 2025-10-12 16:28:16.942 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60024 1 80 1 2025-10-12 16:23:50.352 00:05:50.860 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-12 16:29:17.234 00:00:00.000 UDP 28.104.0.1:40371 -> 198.28.0.2:53 1 64 1 2025-10-12 16:29:17.234 00:00:00.000 UDP 28.104.0.1:34458 -> 198.28.0.2:53 1 64 1 2025-10-12 16:29:17.244 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34458 1 80 1 2025-10-12 16:25:10.925 00:05:10.011 OSPF 28.0.2.1:0 -> 224.0.0.5:0 34 2336 1 2025-10-12 16:29:17.244 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40371 1 109 1 2025-10-12 16:30:17.538 00:00:00.000 UDP 28.104.0.1:40572 -> 198.28.0.2:53 1 64 1 2025-10-12 16:30:17.537 00:00:00.000 UDP 28.104.0.1:50881 -> 198.28.0.2:53 1 64 1 2025-10-12 16:30:17.548 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50881 1 109 1 2025-10-12 16:30:17.548 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40572 1 80 1 2025-10-12 16:25:50.252 00:06:00.103 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-12 16:31:17.831 00:00:00.000 UDP 28.104.0.1:59073 -> 198.28.0.2:53 1 64 1 2025-10-12 16:31:17.831 00:00:00.000 UDP 28.104.0.1:39780 -> 198.28.0.2:53 1 64 1 2025-10-12 16:31:17.841 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59073 1 109 1 2025-10-12 16:31:17.841 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39780 1 80 1 2025-10-12 16:31:35.276 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-12 16:26:50.262 00:05:50.992 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-12 16:32:18.123 00:00:00.000 UDP 28.104.0.1:49720 -> 198.28.0.2:53 1 64 1 2025-10-12 16:32:18.123 00:00:00.000 UDP 28.104.0.1:36193 -> 198.28.0.2:53 1 64 1 2025-10-12 16:32:18.132 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49720 1 80 1 2025-10-12 16:32:18.132 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36193 1 109 1 2025-10-12 16:27:50.366 00:05:50.838 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-12 16:27:50.355 00:06:00.167 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-12 16:33:18.492 00:00:00.000 UDP 28.104.0.1:60540 -> 198.28.0.2:53 1 64 1 2025-10-12 16:33:18.492 00:00:00.000 UDP 28.104.0.1:37340 -> 198.28.0.2:53 1 64 1 2025-10-12 16:33:18.503 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37340 1 80 1 2025-10-12 16:33:18.503 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60540 1 109 1 2025-10-12 16:28:50.268 00:05:50.935 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-12 16:34:18.788 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32928 1 80 1 2025-10-12 16:34:18.788 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45189 1 109 1 2025-10-12 16:34:18.777 00:00:00.000 UDP 28.104.0.1:45189 -> 198.28.0.2:53 1 64 1 2025-10-12 16:34:18.777 00:00:00.000 UDP 28.104.0.1:32928 -> 198.28.0.2:53 1 64 1 2025-10-12 16:30:21.508 00:05:09.423 OSPF 28.0.2.1:0 -> 224.0.0.5:0 34 2316 1 2025-10-12 16:29:50.356 00:05:50.857 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-12 16:35:19.104 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50602 1 80 1 2025-10-12 16:35:19.104 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58302 1 109 1 2025-10-12 16:35:19.094 00:00:00.000 UDP 28.104.0.1:58302 -> 198.28.0.2:53 1 64 1 2025-10-12 16:35:19.094 00:00:00.000 UDP 28.104.0.1:50602 -> 198.28.0.2:53 1 64 1 2025-10-12 16:36:19.396 00:00:00.000 UDP 28.104.0.1:46569 -> 198.28.0.2:53 1 64 1 2025-10-12 16:36:19.395 00:00:00.000 UDP 28.104.0.1:45054 -> 198.28.0.2:53 1 64 1 2025-10-12 16:36:19.407 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45054 1 109 1 2025-10-12 16:36:19.408 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46569 1 80 1 2025-10-12 16:36:35.417 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-12 16:37:19.694 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33580 1 80 1 2025-10-12 16:37:19.694 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45537 1 109 1 2025-10-12 16:37:19.683 00:00:00.000 UDP 28.104.0.1:45537 -> 198.28.0.2:53 1 64 1 2025-10-12 16:37:19.683 00:00:00.000 UDP 28.104.0.1:33580 -> 198.28.0.2:53 1 64 1 2025-10-12 16:32:50.259 00:05:50.996 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-12 16:32:50.254 00:06:00.103 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-12 16:38:19.986 00:00:00.000 UDP 28.104.0.1:54849 -> 198.28.0.2:53 1 64 1 2025-10-12 16:38:19.986 00:00:00.000 UDP 28.104.0.1:60747 -> 198.28.0.2:53 1 64 1 2025-10-12 16:38:19.996 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60747 1 80 1 2025-10-12 16:38:19.996 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54849 1 109 1 2025-10-12 16:33:50.365 00:05:50.842 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-12 16:39:20.285 00:00:00.000 UDP 28.104.0.1:46200 -> 198.28.0.2:53 1 64 1 2025-10-12 16:39:20.285 00:00:00.000 UDP 28.104.0.1:43704 -> 198.28.0.2:53 1 64 1 2025-10-12 16:39:20.294 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46200 1 80 1 2025-10-12 16:39:20.294 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43704 1 109 1 2025-10-12 16:34:50.270 00:05:50.937 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-12 16:35:40.933 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 42 3116 1 2025-10-12 16:34:50.356 00:06:00.168 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-12 16:40:20.587 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47803 1 80 1 2025-10-12 16:40:20.587 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58050 1 109 1 2025-10-12 16:40:20.576 00:00:00.000 UDP 28.104.0.1:58050 -> 198.28.0.2:53 1 64 1 2025-10-12 16:40:20.576 00:00:00.000 UDP 28.104.0.1:47803 -> 198.28.0.2:53 1 64 1 2025-10-12 16:35:50.356 00:05:50.862 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-12 16:41:20.873 00:00:00.000 UDP 28.104.0.1:45061 -> 198.28.0.2:53 1 64 1 2025-10-12 16:41:20.873 00:00:00.000 UDP 28.104.0.1:45703 -> 198.28.0.2:53 1 64 1 2025-10-12 16:41:20.885 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45061 1 109 1 2025-10-12 16:41:20.886 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45703 1 80 1 2025-10-12 16:41:35.336 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-12 16:42:21.182 00:00:00.000 UDP 28.104.0.1:33802 -> 198.28.0.2:53 1 64 1 2025-10-12 16:42:21.182 00:00:00.000 UDP 28.104.0.1:58569 -> 198.28.0.2:53 1 64 1 2025-10-12 16:42:21.191 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58569 1 109 1 2025-10-12 16:42:21.191 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33802 1 80 1 2025-10-12 16:43:21.489 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39646 1 80 1 2025-10-12 16:43:21.489 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41217 1 109 1 2025-10-12 16:43:21.481 00:00:00.000 UDP 28.104.0.1:39646 -> 198.28.0.2:53 1 64 1 2025-10-12 16:43:21.481 00:00:00.000 UDP 28.104.0.1:41217 -> 198.28.0.2:53 1 64 1 2025-10-12 16:38:50.262 00:05:50.999 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-12 16:44:21.726 00:00:00.000 UDP 28.104.0.1:36407 -> 198.28.0.2:53 1 64 1 2025-10-12 16:44:21.726 00:00:00.000 UDP 28.104.0.1:41251 -> 198.28.0.2:53 1 64 1 2025-10-12 16:44:21.737 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36407 1 80 1 2025-10-12 16:44:21.737 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41251 1 109 1 2025-10-12 16:39:50.366 00:05:50.844 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-12 16:39:50.256 00:06:00.103 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-12 16:41:00.936 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2736 1 2025-10-12 16:45:22.044 00:00:00.000 UDP 28.104.0.1:51691 -> 198.28.0.2:53 1 64 1 2025-10-12 16:45:22.044 00:00:00.000 UDP 28.104.0.1:45643 -> 198.28.0.2:53 1 64 1 2025-10-12 16:45:22.055 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51691 1 109 1 2025-10-12 16:45:22.055 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45643 1 80 1 2025-10-12 16:40:50.271 00:05:50.938 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-12 16:46:22.333 00:00:00.000 UDP 28.104.0.1:59194 -> 198.28.0.2:53 1 64 1 2025-10-12 16:46:22.334 00:00:00.000 UDP 28.104.0.1:56262 -> 198.28.0.2:53 1 64 1 2025-10-12 16:46:22.343 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59194 1 80 1 2025-10-12 16:46:22.343 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56262 1 109 1 2025-10-12 16:46:35.535 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-12 16:41:50.358 00:05:50.863 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-12 16:41:50.359 00:06:00.165 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-12 16:47:22.636 00:00:00.000 UDP 28.104.0.1:44331 -> 198.28.0.2:53 1 64 1 2025-10-12 16:47:22.636 00:00:00.000 UDP 28.104.0.1:34896 -> 198.28.0.2:53 1 64 1 2025-10-12 16:47:22.646 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44331 1 80 1 2025-10-12 16:47:22.646 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34896 1 109 1 2025-10-12 16:48:22.943 00:00:00.000 UDP 28.104.0.1:58515 -> 198.28.0.2:53 1 64 1 2025-10-12 16:48:22.943 00:00:00.000 UDP 28.104.0.1:55387 -> 198.28.0.2:53 1 64 1 2025-10-12 16:48:22.953 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55387 1 80 1 2025-10-12 16:48:22.953 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58515 1 109 1 2025-10-12 16:49:23.251 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45182 1 109 1 2025-10-12 16:49:23.251 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36281 1 80 1 2025-10-12 16:49:23.241 00:00:00.000 UDP 28.104.0.1:36281 -> 198.28.0.2:53 1 64 1 2025-10-12 16:49:23.241 00:00:00.000 UDP 28.104.0.1:45182 -> 198.28.0.2:53 1 64 1 2025-10-12 16:44:50.263 00:05:51.000 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-12 16:50:23.547 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40951 1 109 1 2025-10-12 16:50:23.547 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48146 1 80 1 2025-10-12 16:50:23.536 00:00:00.000 UDP 28.104.0.1:40951 -> 198.28.0.2:53 1 64 1 2025-10-12 16:50:23.536 00:00:00.000 UDP 28.104.0.1:48146 -> 198.28.0.2:53 1 64 1 2025-10-12 16:46:20.941 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2592 1 2025-10-12 16:45:50.369 00:05:50.843 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-12 16:51:23.847 00:00:00.000 UDP 28.104.0.1:38757 -> 198.28.0.2:53 1 64 1 2025-10-12 16:51:23.848 00:00:00.000 UDP 28.104.0.1:56180 -> 198.28.0.2:53 1 64 1 2025-10-12 16:51:23.858 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38757 1 109 1 2025-10-12 16:51:23.858 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56180 1 80 1 2025-10-12 16:51:35.653 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-12 16:46:50.273 00:05:50.940 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-12 16:46:50.257 00:06:00.105 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-12 16:52:24.120 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57389 1 80 1 2025-10-12 16:52:24.120 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43131 1 109 1 2025-10-12 16:52:24.112 00:00:00.000 UDP 28.104.0.1:57389 -> 198.28.0.2:53 1 64 1 2025-10-12 16:52:24.112 00:00:00.000 UDP 28.104.0.1:43131 -> 198.28.0.2:53 1 64 1 2025-10-12 16:47:50.360 00:05:50.862 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-12 16:53:24.404 00:00:00.000 UDP 28.104.0.1:47507 -> 198.28.0.2:53 1 64 1 2025-10-12 16:53:24.404 00:00:00.000 UDP 28.104.0.1:49745 -> 198.28.0.2:53 1 64 1 2025-10-12 16:53:24.415 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49745 1 80 1 2025-10-12 16:53:24.415 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47507 1 109 1 2025-10-12 16:48:50.361 00:06:00.164 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-12 16:54:24.667 00:00:00.000 UDP 28.104.0.1:60832 -> 198.28.0.2:53 1 64 1 2025-10-12 16:54:24.667 00:00:00.000 UDP 28.104.0.1:45079 -> 198.28.0.2:53 1 64 1 2025-10-12 16:54:24.677 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60832 1 109 1 2025-10-12 16:54:24.677 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45079 1 80 1 2025-10-12 16:55:24.964 00:00:00.000 UDP 28.104.0.1:57366 -> 198.28.0.2:53 1 64 1 2025-10-12 16:55:24.964 00:00:00.000 UDP 28.104.0.1:43935 -> 198.28.0.2:53 1 64 1 2025-10-12 16:55:24.975 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43935 1 80 1 2025-10-12 16:55:24.975 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57366 1 109 1 2025-10-12 16:50:50.267 00:05:50.997 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-12 16:51:40.945 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2876 1 2025-10-12 16:56:25.262 00:00:00.000 UDP 28.104.0.1:56549 -> 198.28.0.2:53 1 64 1 2025-10-12 16:56:25.262 00:00:00.000 UDP 28.104.0.1:59424 -> 198.28.0.2:53 1 64 1 2025-10-12 16:56:25.272 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59424 1 80 1 2025-10-12 16:56:25.272 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56549 1 109 1 2025-10-12 16:56:35.833 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-12 16:51:50.372 00:05:50.841 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-12 16:57:25.515 00:00:00.000 UDP 28.104.0.1:52073 -> 198.28.0.2:53 1 64 1 2025-10-12 16:57:25.515 00:00:00.000 UDP 28.104.0.1:33624 -> 198.28.0.2:53 1 64 1 2025-10-12 16:57:25.526 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33624 1 80 1 2025-10-12 16:57:25.526 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52073 1 109 1 2025-10-12 16:52:50.277 00:05:50.937 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-12 16:58:25.831 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56731 1 80 1 2025-10-12 16:58:25.832 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51419 1 109 1 2025-10-12 16:58:25.820 00:00:00.000 UDP 28.104.0.1:56731 -> 198.28.0.2:53 1 64 1 2025-10-12 16:58:25.821 00:00:00.000 UDP 28.104.0.1:51419 -> 198.28.0.2:53 1 64 1 2025-10-12 16:53:50.361 00:05:50.862 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-12 16:53:50.261 00:06:00.101 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 Summary: total flows: 320, total bytes: 96013, total packets: 1416, avg bps: 203, avg pps: 0, avg bpp: 67 Time window: 2025-10-12 15:56:50 - 2025-10-12 16:59:50 Total flows processed: 320, passed: 320, Blocks skipped: 0, Bytes read: 33344 Sys: 0.0033s User: 0.0033s Wall: 0.0042s flows/second: 76849.5 Runtime: 0.0042s