Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-14 16:59:45.879 00:00:00.000 UDP 28.104.0.1:41868 -> 198.28.0.2:53 1 64 1 2025-10-14 16:59:45.880 00:00:00.000 UDP 28.104.0.1:32829 -> 198.28.0.2:53 1 64 1 2025-10-14 16:59:45.890 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41868 1 80 1 2025-10-14 16:59:45.891 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32829 1 109 1 2025-10-14 16:57:51.383 00:02:00.058 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-14 16:56:14.766 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2796 1 2025-10-14 16:55:51.160 00:05:50.983 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-14 17:00:46.135 00:00:00.000 UDP 28.104.0.1:34703 -> 198.28.0.2:53 1 64 1 2025-10-14 17:00:46.135 00:00:00.000 UDP 28.104.0.1:44085 -> 198.28.0.2:53 1 64 1 2025-10-14 17:00:46.145 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44085 1 80 1 2025-10-14 17:00:46.145 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34703 1 109 1 2025-10-14 17:01:46.391 00:00:00.000 UDP 28.104.0.1:32946 -> 198.28.0.2:53 1 64 1 2025-10-14 17:01:46.391 00:00:00.000 UDP 28.104.0.1:33407 -> 198.28.0.2:53 1 64 1 2025-10-14 16:56:51.391 00:05:50.702 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-14 17:01:46.400 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32946 1 109 1 2025-10-14 17:01:46.401 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33407 1 80 1 2025-10-14 17:00:51.383 00:01:00.057 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-14 16:57:51.203 00:04:00.180 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-14 17:02:33.498 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-14 17:02:46.768 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35112 1 109 1 2025-10-14 16:57:51.171 00:05:50.921 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-14 17:02:46.768 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46815 1 80 1 2025-10-14 17:02:46.759 00:00:00.000 UDP 28.104.0.1:35112 -> 198.28.0.2:53 1 64 1 2025-10-14 17:02:46.759 00:00:00.000 UDP 28.104.0.1:46815 -> 198.28.0.2:53 1 64 1 2025-10-14 16:58:51.383 00:05:50.720 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-14 17:03:47.059 00:00:00.000 UDP 28.104.0.1:35112 -> 198.28.0.2:53 1 64 1 2025-10-14 17:03:47.059 00:00:00.000 UDP 28.104.0.1:36178 -> 198.28.0.2:53 1 64 1 2025-10-14 17:03:47.069 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35112 1 109 1 2025-10-14 17:03:47.069 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36178 1 80 1 2025-10-14 17:04:47.347 00:00:00.000 UDP 28.104.0.1:52196 -> 198.28.0.2:53 1 64 1 2025-10-14 17:02:51.383 00:02:00.058 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-14 17:04:47.347 00:00:00.000 UDP 28.104.0.1:37428 -> 198.28.0.2:53 1 64 1 2025-10-14 17:04:47.358 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52196 1 109 1 2025-10-14 17:04:47.358 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37428 1 80 1 2025-10-14 17:01:34.775 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2768 1 2025-10-14 17:05:47.644 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53054 1 80 1 2025-10-14 17:05:47.644 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41247 1 109 1 2025-10-14 17:05:47.634 00:00:00.000 UDP 28.104.0.1:41247 -> 198.28.0.2:53 1 64 1 2025-10-14 17:05:47.634 00:00:00.000 UDP 28.104.0.1:53054 -> 198.28.0.2:53 1 64 1 2025-10-14 17:01:51.161 00:05:50.983 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-14 17:06:47.941 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33674 1 109 1 2025-10-14 17:06:47.941 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51457 1 80 1 2025-10-14 17:06:47.931 00:00:00.000 UDP 28.104.0.1:51457 -> 198.28.0.2:53 1 64 1 2025-10-14 17:05:51.384 00:01:00.059 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-14 17:02:51.204 00:04:00.181 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-14 17:06:47.931 00:00:00.000 UDP 28.104.0.1:33674 -> 198.28.0.2:53 1 64 1 2025-10-14 17:07:33.736 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-14 17:02:51.393 00:05:50.701 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-14 17:07:48.248 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55775 1 109 1 2025-10-14 17:07:48.248 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42776 1 80 1 2025-10-14 17:07:48.238 00:00:00.000 UDP 28.104.0.1:55775 -> 198.28.0.2:53 1 64 1 2025-10-14 17:07:48.239 00:00:00.000 UDP 28.104.0.1:42776 -> 198.28.0.2:53 1 64 1 2025-10-14 17:03:51.172 00:05:50.922 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-14 17:08:48.541 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38397 1 80 1 2025-10-14 17:08:48.541 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43187 1 109 1 2025-10-14 17:08:48.531 00:00:00.000 UDP 28.104.0.1:38397 -> 198.28.0.2:53 1 64 1 2025-10-14 17:08:48.530 00:00:00.000 UDP 28.104.0.1:43187 -> 198.28.0.2:53 1 64 1 2025-10-14 17:04:51.385 00:05:50.721 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-14 17:09:48.784 00:00:00.000 UDP 28.104.0.1:58938 -> 198.28.0.2:53 1 64 1 2025-10-14 17:09:48.784 00:00:00.000 UDP 28.104.0.1:36248 -> 198.28.0.2:53 1 64 1 2025-10-14 17:07:51.385 00:02:00.057 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-14 17:09:48.795 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36248 1 80 1 2025-10-14 17:09:48.795 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58938 1 109 1 2025-10-14 17:10:49.096 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51641 1 109 1 2025-10-14 17:10:49.097 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41003 1 80 1 2025-10-14 17:10:49.085 00:00:00.000 UDP 28.104.0.1:51641 -> 198.28.0.2:53 1 64 1 2025-10-14 17:10:49.086 00:00:00.000 UDP 28.104.0.1:41003 -> 198.28.0.2:53 1 64 1 2025-10-14 17:06:54.778 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 32 2176 1 2025-10-14 17:10:51.389 00:01:00.064 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-14 17:11:49.415 00:00:00.000 UDP 28.104.0.1:42231 -> 198.28.0.2:53 1 64 1 2025-10-14 17:07:51.205 00:04:00.181 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-14 17:11:49.415 00:00:00.000 UDP 28.104.0.1:46389 -> 198.28.0.2:53 1 64 1 2025-10-14 17:11:49.425 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42231 1 80 1 2025-10-14 17:11:49.425 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46389 1 109 1 2025-10-14 17:12:33.676 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-14 17:07:51.167 00:05:50.981 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-14 17:12:49.717 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59969 1 80 1 2025-10-14 17:12:49.717 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51943 1 109 1 2025-10-14 17:12:49.708 00:00:00.000 UDP 28.104.0.1:59969 -> 198.28.0.2:53 1 64 1 2025-10-14 17:12:49.708 00:00:00.000 UDP 28.104.0.1:51943 -> 198.28.0.2:53 1 64 1 2025-10-14 17:13:50.004 00:00:00.000 UDP 28.104.0.1:60571 -> 198.28.0.2:53 1 64 1 2025-10-14 17:13:50.003 00:00:00.000 UDP 28.104.0.1:58719 -> 198.28.0.2:53 1 64 1 2025-10-14 17:08:51.396 00:05:50.703 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-14 17:13:50.015 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60571 1 109 1 2025-10-14 17:13:50.017 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58719 1 80 1 2025-10-14 17:09:51.175 00:05:50.924 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-14 17:14:50.302 00:00:00.000 UDP 28.104.0.1:57400 -> 198.28.0.2:53 1 64 1 2025-10-14 17:14:50.302 00:00:00.000 UDP 28.104.0.1:37671 -> 198.28.0.2:53 1 64 1 2025-10-14 17:12:51.386 00:02:00.058 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-14 17:14:50.314 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57400 1 80 1 2025-10-14 17:14:50.315 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37671 1 109 1 2025-10-14 17:10:51.390 00:05:50.720 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-14 17:15:50.606 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33449 1 80 1 2025-10-14 17:15:50.606 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43823 1 109 1 2025-10-14 17:15:50.597 00:00:00.000 UDP 28.104.0.1:43823 -> 198.28.0.2:53 1 64 1 2025-10-14 17:15:50.597 00:00:00.000 UDP 28.104.0.1:33449 -> 198.28.0.2:53 1 64 1 2025-10-14 17:12:14.782 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 43 3280 1 2025-10-14 17:16:50.944 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37793 1 80 1 2025-10-14 17:16:50.944 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57227 1 109 1 2025-10-14 17:15:51.388 00:01:00.057 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-14 17:12:51.206 00:04:00.182 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-14 17:16:50.934 00:00:00.000 UDP 28.104.0.1:57227 -> 198.28.0.2:53 1 64 1 2025-10-14 17:16:50.934 00:00:00.000 UDP 28.104.0.1:37793 -> 198.28.0.2:53 1 64 1 2025-10-14 17:17:33.779 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-14 17:17:51.244 00:00:00.000 UDP 28.104.0.1:36756 -> 198.28.0.2:53 1 64 1 2025-10-14 17:17:51.244 00:00:00.000 UDP 28.104.0.1:57353 -> 198.28.0.2:53 1 64 1 2025-10-14 17:17:51.255 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36756 1 80 1 2025-10-14 17:17:51.255 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57353 1 109 1 2025-10-14 17:13:51.166 00:05:50.984 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-14 17:18:51.546 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56051 1 109 1 2025-10-14 17:18:51.546 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60882 1 80 1 2025-10-14 17:18:51.537 00:00:00.000 UDP 28.104.0.1:56051 -> 198.28.0.2:53 1 64 1 2025-10-14 17:18:51.536 00:00:00.000 UDP 28.104.0.1:60882 -> 198.28.0.2:53 1 64 1 2025-10-14 17:19:51.824 00:00:00.000 UDP 28.104.0.1:42795 -> 198.28.0.2:53 1 64 1 2025-10-14 17:17:51.387 00:02:00.058 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-14 17:19:51.824 00:00:00.000 UDP 28.104.0.1:45295 -> 198.28.0.2:53 1 64 1 2025-10-14 17:14:51.398 00:05:50.702 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-14 17:19:51.836 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45295 1 109 1 2025-10-14 17:19:51.836 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42795 1 80 1 2025-10-14 17:15:51.176 00:05:50.923 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-14 17:20:52.118 00:00:00.000 UDP 28.104.0.1:46679 -> 198.28.0.2:53 1 64 1 2025-10-14 17:20:52.118 00:00:00.000 UDP 28.104.0.1:34048 -> 198.28.0.2:53 1 64 1 2025-10-14 17:20:52.128 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46679 1 80 1 2025-10-14 17:20:52.128 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34048 1 109 1 2025-10-14 17:16:51.388 00:05:50.723 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-14 17:17:34.791 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2592 1 2025-10-14 17:20:51.390 00:01:00.056 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-14 17:17:51.208 00:04:00.181 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-14 17:21:52.457 00:00:00.000 UDP 28.104.0.1:55375 -> 198.28.0.2:53 1 64 1 2025-10-14 17:21:52.457 00:00:00.000 UDP 28.104.0.1:48612 -> 198.28.0.2:53 1 64 1 2025-10-14 17:21:52.467 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48612 1 109 1 2025-10-14 17:21:52.467 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55375 1 80 1 2025-10-14 17:22:33.871 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-14 17:22:52.760 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36064 1 109 1 2025-10-14 17:22:52.760 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60706 1 80 1 2025-10-14 17:22:52.750 00:00:00.000 UDP 28.104.0.1:36064 -> 198.28.0.2:53 1 64 1 2025-10-14 17:22:52.750 00:00:00.000 UDP 28.104.0.1:60706 -> 198.28.0.2:53 1 64 1 2025-10-14 17:23:53.067 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36899 1 80 1 2025-10-14 17:23:53.067 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48400 1 109 1 2025-10-14 17:23:53.058 00:00:00.000 UDP 28.104.0.1:48400 -> 198.28.0.2:53 1 64 1 2025-10-14 17:23:53.058 00:00:00.000 UDP 28.104.0.1:36899 -> 198.28.0.2:53 1 64 1 2025-10-14 17:19:51.166 00:05:50.985 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-14 17:22:51.389 00:02:00.059 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-14 17:24:53.323 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59769 1 80 1 2025-10-14 17:24:53.323 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51038 1 109 1 2025-10-14 17:24:53.315 00:00:00.000 UDP 28.104.0.1:59769 -> 198.28.0.2:53 1 64 1 2025-10-14 17:24:53.315 00:00:00.000 UDP 28.104.0.1:51038 -> 198.28.0.2:53 1 64 1 2025-10-14 17:20:51.399 00:05:50.702 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-14 17:25:53.603 00:00:00.000 UDP 28.104.0.1:36575 -> 198.28.0.2:53 1 64 1 2025-10-14 17:25:53.603 00:00:00.000 UDP 28.104.0.1:44288 -> 198.28.0.2:53 1 64 1 2025-10-14 17:25:53.612 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44288 1 109 1 2025-10-14 17:25:53.612 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36575 1 80 1 2025-10-14 17:21:51.179 00:05:50.924 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-14 17:25:51.392 00:01:00.057 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-14 17:22:51.207 00:04:00.185 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-14 17:26:53.943 00:00:00.000 UDP 28.104.0.1:49164 -> 198.28.0.2:53 1 64 1 2025-10-14 17:26:53.943 00:00:00.000 UDP 28.104.0.1:34148 -> 198.28.0.2:53 1 64 1 2025-10-14 17:26:53.954 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49164 1 109 1 2025-10-14 17:26:53.954 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34148 1 80 1 2025-10-14 17:22:54.797 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2528 1 2025-10-14 17:27:34.175 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-14 17:22:51.389 00:05:50.723 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-14 17:27:54.256 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43772 1 109 1 2025-10-14 17:27:54.256 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50388 1 80 1 2025-10-14 17:27:54.245 00:00:00.000 UDP 28.104.0.1:43772 -> 198.28.0.2:53 1 64 1 2025-10-14 17:27:54.245 00:00:00.000 UDP 28.104.0.1:50388 -> 198.28.0.2:53 1 64 1 2025-10-14 17:27:51.392 00:01:00.059 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-14 17:27:51.206 00:01:00.186 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-14 17:28:54.551 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49794 1 109 1 2025-10-14 17:28:54.550 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58339 1 80 1 2025-10-14 17:28:54.541 00:00:00.000 UDP 28.104.0.1:58339 -> 198.28.0.2:53 1 64 1 2025-10-14 17:28:54.542 00:00:00.000 UDP 28.104.0.1:49794 -> 198.28.0.2:53 1 64 1 2025-10-14 17:29:54.844 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45627 1 109 1 2025-10-14 17:29:54.845 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54855 1 80 1 2025-10-14 17:29:54.835 00:00:00.000 UDP 28.104.0.1:45627 -> 198.28.0.2:53 1 64 1 2025-10-14 17:29:54.836 00:00:00.000 UDP 28.104.0.1:54855 -> 198.28.0.2:53 1 64 1 2025-10-14 17:25:51.168 00:05:50.985 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-14 17:31:01.637 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47716 1 109 1 2025-10-14 17:31:01.637 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53216 1 80 1 2025-10-14 17:31:01.627 00:00:00.000 UDP 28.104.0.1:47716 -> 198.28.0.2:53 1 64 1 2025-10-14 17:31:01.627 00:00:00.000 UDP 28.104.0.1:53216 -> 198.28.0.2:53 1 64 1 2025-10-14 17:26:51.402 00:05:50.700 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-14 17:29:51.393 00:02:00.059 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-14 17:32:01.982 00:00:00.000 UDP 28.104.0.1:34188 -> 198.28.0.2:53 1 64 1 2025-10-14 17:32:01.982 00:00:00.000 UDP 28.104.0.1:48890 -> 198.28.0.2:53 1 64 1 2025-10-14 17:32:01.991 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48890 1 109 1 2025-10-14 17:32:01.991 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34188 1 80 1 2025-10-14 17:28:14.803 00:05:10.010 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2940 1 2025-10-14 17:32:34.239 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-14 17:27:51.178 00:05:50.924 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-14 17:33:02.276 00:00:00.000 UDP 28.104.0.1:52873 -> 198.28.0.2:53 1 64 1 2025-10-14 17:33:02.276 00:00:00.000 UDP 28.104.0.1:44025 -> 198.28.0.2:53 1 64 1 2025-10-14 17:33:02.285 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44025 1 109 1 2025-10-14 17:33:02.285 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52873 1 80 1 2025-10-14 17:28:51.392 00:05:50.722 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-14 17:32:51.393 00:01:00.059 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-14 17:29:51.207 00:04:00.186 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-14 17:34:02.536 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53947 1 109 1 2025-10-14 17:34:02.536 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34435 1 80 1 2025-10-14 17:34:02.526 00:00:00.000 UDP 28.104.0.1:34435 -> 198.28.0.2:53 1 64 1 2025-10-14 17:34:02.526 00:00:00.000 UDP 28.104.0.1:53947 -> 198.28.0.2:53 1 64 1 2025-10-14 17:35:02.838 00:00:00.000 UDP 28.104.0.1:48887 -> 198.28.0.2:53 1 64 1 2025-10-14 17:35:02.838 00:00:00.000 UDP 28.104.0.1:58983 -> 198.28.0.2:53 1 64 1 2025-10-14 17:35:02.848 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58983 1 80 1 2025-10-14 17:35:02.848 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48887 1 109 1 2025-10-14 17:36:03.132 00:00:00.000 UDP 28.104.0.1:44775 -> 198.28.0.2:53 1 64 1 2025-10-14 17:36:03.132 00:00:00.000 UDP 28.104.0.1:38206 -> 198.28.0.2:53 1 64 1 2025-10-14 17:36:03.141 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44775 1 80 1 2025-10-14 17:36:03.141 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38206 1 109 1 2025-10-14 17:31:51.168 00:05:50.988 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-14 17:34:51.394 00:02:00.058 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-14 17:37:03.726 00:00:00.000 UDP 28.104.0.1:39087 -> 198.28.0.2:53 1 64 1 2025-10-14 17:37:03.726 00:00:00.000 UDP 28.104.0.1:56664 -> 198.28.0.2:53 1 64 1 2025-10-14 17:37:03.735 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56664 1 109 1 2025-10-14 17:37:03.736 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39087 1 80 1 2025-10-14 17:37:33.979 00:00:00.033 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-14 17:32:51.404 00:05:50.703 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-14 17:33:34.812 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2464 1 2025-10-14 17:38:04.045 00:00:00.000 UDP 28.104.0.1:42496 -> 198.28.0.2:53 1 64 1 2025-10-14 17:38:04.044 00:00:00.000 UDP 28.104.0.1:35074 -> 198.28.0.2:53 1 64 1 2025-10-14 17:38:04.055 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42496 1 80 1 2025-10-14 17:38:04.055 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35074 1 109 1 2025-10-14 17:33:51.179 00:05:50.928 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-14 17:37:51.396 00:01:00.059 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-14 17:34:51.208 00:04:00.188 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-14 17:39:04.344 00:00:00.000 UDP 28.104.0.1:60336 -> 198.28.0.2:53 1 64 1 2025-10-14 17:39:04.345 00:00:00.000 UDP 28.104.0.1:54059 -> 198.28.0.2:53 1 64 1 2025-10-14 17:39:04.354 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54059 1 80 1 2025-10-14 17:39:04.354 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60336 1 109 1 2025-10-14 17:34:51.393 00:05:50.724 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-14 17:40:05.072 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44101 1 109 1 2025-10-14 17:40:05.072 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37259 1 80 1 2025-10-14 17:40:05.062 00:00:00.000 UDP 28.104.0.1:44101 -> 198.28.0.2:53 1 64 1 2025-10-14 17:40:05.062 00:00:00.000 UDP 28.104.0.1:37259 -> 198.28.0.2:53 1 64 1 2025-10-14 17:41:05.351 00:00:00.000 UDP 28.104.0.1:37924 -> 198.28.0.2:53 1 64 1 2025-10-14 17:41:05.352 00:00:00.000 UDP 28.104.0.1:35463 -> 198.28.0.2:53 1 64 1 2025-10-14 17:41:05.360 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37924 1 80 1 2025-10-14 17:41:05.361 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35463 1 109 1 2025-10-14 17:39:51.395 00:02:00.060 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-14 17:42:05.642 00:00:00.000 UDP 28.104.0.1:53271 -> 198.28.0.2:53 1 64 1 2025-10-14 17:42:05.642 00:00:00.000 UDP 28.104.0.1:53000 -> 198.28.0.2:53 1 64 1 2025-10-14 17:42:05.654 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53000 1 109 1 2025-10-14 17:42:05.654 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53271 1 80 1 2025-10-14 17:42:34.568 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-14 17:37:51.170 00:05:50.988 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-14 17:38:54.818 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2624 1 2025-10-14 17:43:05.943 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54399 1 80 1 2025-10-14 17:43:05.943 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36611 1 109 1 2025-10-14 17:43:05.933 00:00:00.000 UDP 28.104.0.1:36611 -> 198.28.0.2:53 1 64 1 2025-10-14 17:43:05.933 00:00:00.000 UDP 28.104.0.1:54399 -> 198.28.0.2:53 1 64 1 2025-10-14 17:38:51.406 00:05:50.703 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-14 17:42:51.400 00:01:00.066 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-14 17:39:51.209 00:04:00.190 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-14 17:44:06.199 00:00:00.000 UDP 28.104.0.1:39880 -> 198.28.0.2:53 1 64 1 2025-10-14 17:44:06.199 00:00:00.000 UDP 28.104.0.1:34428 -> 198.28.0.2:53 1 64 1 2025-10-14 17:44:06.211 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39880 1 80 1 2025-10-14 17:44:06.211 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34428 1 109 1 2025-10-14 17:39:51.180 00:05:50.929 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-14 17:45:06.466 00:00:00.000 UDP 28.104.0.1:44095 -> 198.28.0.2:53 1 64 1 2025-10-14 17:45:06.466 00:00:00.000 UDP 28.104.0.1:50684 -> 198.28.0.2:53 1 64 1 2025-10-14 17:45:06.478 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44095 1 109 1 2025-10-14 17:45:06.478 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50684 1 80 1 2025-10-14 17:40:51.396 00:05:50.724 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-14 17:46:06.768 00:00:00.000 UDP 28.104.0.1:59462 -> 198.28.0.2:53 1 64 1 2025-10-14 17:46:06.768 00:00:00.000 UDP 28.104.0.1:41662 -> 198.28.0.2:53 1 64 1 2025-10-14 17:46:06.778 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41662 1 80 1 2025-10-14 17:46:06.778 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59462 1 109 1 2025-10-14 17:44:51.399 00:02:00.060 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-14 17:47:07.078 00:00:00.000 UDP 28.104.0.1:42779 -> 198.28.0.2:53 1 64 1 2025-10-14 17:47:07.078 00:00:00.000 UDP 28.104.0.1:49207 -> 198.28.0.2:53 1 64 1 2025-10-14 17:47:07.088 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49207 1 109 1 2025-10-14 17:47:07.088 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42779 1 80 1 2025-10-14 17:47:34.590 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-14 17:48:07.337 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40858 1 80 1 2025-10-14 17:48:07.337 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44970 1 109 1 2025-10-14 17:48:07.327 00:00:00.000 UDP 28.104.0.1:44970 -> 198.28.0.2:53 1 64 1 2025-10-14 17:48:07.327 00:00:00.000 UDP 28.104.0.1:40858 -> 198.28.0.2:53 1 64 1 2025-10-14 17:44:14.826 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 44 3204 1 2025-10-14 17:43:51.171 00:05:50.990 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-14 17:47:51.401 00:01:00.059 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-14 17:44:51.212 00:04:00.189 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-14 17:49:07.627 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52502 1 80 1 2025-10-14 17:49:07.627 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48672 1 109 1 2025-10-14 17:49:07.617 00:00:00.000 UDP 28.104.0.1:52502 -> 198.28.0.2:53 1 64 1 2025-10-14 17:49:07.617 00:00:00.000 UDP 28.104.0.1:48672 -> 198.28.0.2:53 1 64 1 2025-10-14 17:44:51.409 00:05:50.701 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-14 17:50:07.922 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42233 1 109 1 2025-10-14 17:50:07.921 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55553 1 80 1 2025-10-14 17:50:07.910 00:00:00.000 UDP 28.104.0.1:42233 -> 198.28.0.2:53 1 64 1 2025-10-14 17:50:07.910 00:00:00.000 UDP 28.104.0.1:55553 -> 198.28.0.2:53 1 64 1 2025-10-14 17:45:51.180 00:05:50.930 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-14 17:51:08.216 00:00:00.000 UDP 28.104.0.1:33780 -> 198.28.0.2:53 1 64 1 2025-10-14 17:51:08.216 00:00:00.000 UDP 28.104.0.1:40609 -> 198.28.0.2:53 1 64 1 2025-10-14 17:51:08.227 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33780 1 80 1 2025-10-14 17:51:08.227 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40609 1 109 1 2025-10-14 17:46:51.400 00:05:50.721 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-14 17:49:51.401 00:02:00.060 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-14 17:52:08.522 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54993 1 109 1 2025-10-14 17:52:08.522 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49264 1 80 1 2025-10-14 17:52:08.512 00:00:00.000 UDP 28.104.0.1:54993 -> 198.28.0.2:53 1 64 1 2025-10-14 17:52:08.512 00:00:00.000 UDP 28.104.0.1:49264 -> 198.28.0.2:53 1 64 1 2025-10-14 17:52:34.622 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-14 17:53:08.831 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54248 1 80 1 2025-10-14 17:53:08.831 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33001 1 109 1 2025-10-14 17:53:08.820 00:00:00.000 UDP 28.104.0.1:54248 -> 198.28.0.2:53 1 64 1 2025-10-14 17:53:08.820 00:00:00.000 UDP 28.104.0.1:33001 -> 198.28.0.2:53 1 64 1 2025-10-14 17:49:34.831 00:05:10.013 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2512 1 2025-10-14 17:52:51.403 00:01:00.060 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-14 17:49:51.214 00:04:00.189 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-14 17:54:09.119 00:00:00.000 UDP 28.104.0.1:51795 -> 198.28.0.2:53 1 64 1 2025-10-14 17:54:09.119 00:00:00.000 UDP 28.104.0.1:43879 -> 198.28.0.2:53 1 64 1 2025-10-14 17:54:09.131 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51795 1 80 1 2025-10-14 17:54:09.131 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43879 1 109 1 2025-10-14 17:49:51.172 00:05:50.989 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-14 17:55:09.438 00:00:00.000 UDP 28.104.0.1:56509 -> 198.28.0.2:53 1 64 1 2025-10-14 17:55:09.438 00:00:00.000 UDP 28.104.0.1:48934 -> 198.28.0.2:53 1 64 1 2025-10-14 17:55:09.447 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48934 1 109 1 2025-10-14 17:55:09.448 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56509 1 80 1 2025-10-14 17:50:51.411 00:05:50.700 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-14 17:56:10.004 00:00:00.000 UDP 28.104.0.1:49792 -> 198.28.0.2:53 1 64 1 2025-10-14 17:56:10.004 00:00:00.000 UDP 28.104.0.1:55603 -> 198.28.0.2:53 1 64 1 2025-10-14 17:56:10.018 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49792 1 109 1 2025-10-14 17:56:10.015 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55603 1 80 1 2025-10-14 17:51:51.182 00:05:50.930 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-14 17:54:51.402 00:02:00.060 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-14 17:57:10.306 00:00:00.000 UDP 28.104.0.1:48456 -> 198.28.0.2:53 1 64 1 2025-10-14 17:57:10.306 00:00:00.000 UDP 28.104.0.1:45948 -> 198.28.0.2:53 1 64 1 2025-10-14 17:57:10.316 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45948 1 80 1 2025-10-14 17:57:10.316 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48456 1 109 1 2025-10-14 17:57:34.726 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-14 17:52:51.401 00:05:50.720 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-14 17:58:10.613 00:00:00.000 UDP 28.104.0.1:51918 -> 198.28.0.2:53 1 64 1 2025-10-14 17:58:10.613 00:00:00.000 UDP 28.104.0.1:60528 -> 198.28.0.2:53 1 64 1 2025-10-14 17:58:10.623 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60528 1 80 1 2025-10-14 17:58:10.623 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51918 1 109 1 2025-10-14 17:57:51.405 00:01:00.057 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-14 17:54:51.215 00:04:00.190 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 Summary: total flows: 337, total bytes: 96383, total packets: 1423, avg bps: 203, avg pps: 0, avg bpp: 67 Time window: 2025-10-14 16:55:51 - 2025-10-14 17:58:51 Total flows processed: 337, passed: 337, Blocks skipped: 0, Bytes read: 35112 Sys: 0.0040s User: 0.0030s Wall: 0.0042s flows/second: 80526.4 Runtime: 0.0042s