Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-16 05:59:12.576 00:00:00.000 UDP 28.104.0.1:38709 -> 198.28.0.2:53 1 64 1 2025-10-16 05:59:12.575 00:00:00.000 UDP 28.104.0.1:48344 -> 198.28.0.2:53 1 64 1 2025-10-16 05:59:12.586 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38709 1 109 1 2025-10-16 05:59:12.586 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48344 1 80 1 2025-10-16 06:00:12.881 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46131 1 109 1 2025-10-16 06:00:12.881 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58146 1 80 1 2025-10-16 06:00:12.871 00:00:00.000 UDP 28.104.0.1:46131 -> 198.28.0.2:53 1 64 1 2025-10-16 06:00:12.871 00:00:00.000 UDP 28.104.0.1:58146 -> 198.28.0.2:53 1 64 1 2025-10-16 05:55:51.951 00:05:50.840 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-16 05:56:42.740 00:05:09.361 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-16 06:01:13.144 00:00:00.000 UDP 28.104.0.1:56279 -> 198.28.0.2:53 1 64 1 2025-10-16 06:01:13.144 00:00:00.000 UDP 28.104.0.1:36278 -> 198.28.0.2:53 1 64 1 2025-10-16 06:01:13.155 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36278 1 109 1 2025-10-16 06:01:13.155 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56279 1 80 1 2025-10-16 05:56:52.091 00:06:00.039 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-16 06:02:13.432 00:00:00.000 UDP 28.104.0.1:35236 -> 198.28.0.2:53 1 64 1 2025-10-16 06:02:13.432 00:00:00.000 UDP 28.104.0.1:50329 -> 198.28.0.2:53 1 64 1 2025-10-16 06:02:13.442 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50329 1 109 1 2025-10-16 06:02:13.442 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35236 1 80 1 2025-10-16 05:57:51.962 00:05:50.779 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-16 05:58:42.750 00:05:09.342 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-16 05:58:51.904 00:05:00.188 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-10-16 06:03:13.734 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56876 1 109 1 2025-10-16 06:03:13.734 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39095 1 80 1 2025-10-16 06:03:13.723 00:00:00.000 UDP 28.104.0.1:39095 -> 198.28.0.2:53 1 64 1 2025-10-16 06:03:13.723 00:00:00.000 UDP 28.104.0.1:56876 -> 198.28.0.2:53 1 64 1 2025-10-16 06:03:18.180 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-16 05:59:57.954 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2576 1 2025-10-16 06:04:14.047 00:00:00.000 UDP 28.104.0.1:57370 -> 198.28.0.2:53 1 64 1 2025-10-16 06:04:14.048 00:00:00.000 UDP 28.104.0.1:50932 -> 198.28.0.2:53 1 64 1 2025-10-16 06:04:14.059 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50932 1 109 1 2025-10-16 06:04:14.059 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57370 1 80 1 2025-10-16 06:05:14.312 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58810 1 80 1 2025-10-16 06:05:14.312 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55217 1 109 1 2025-10-16 06:05:14.302 00:00:00.000 UDP 28.104.0.1:58810 -> 198.28.0.2:53 1 64 1 2025-10-16 06:05:14.302 00:00:00.000 UDP 28.104.0.1:55217 -> 198.28.0.2:53 1 64 1 2025-10-16 06:06:14.569 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50754 1 80 1 2025-10-16 06:06:14.569 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34054 1 109 1 2025-10-16 06:06:14.560 00:00:00.000 UDP 28.104.0.1:50754 -> 198.28.0.2:53 1 64 1 2025-10-16 06:06:14.560 00:00:00.000 UDP 28.104.0.1:34054 -> 198.28.0.2:53 1 64 1 2025-10-16 06:01:51.954 00:05:50.837 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-16 06:02:42.742 00:05:09.362 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-16 06:07:14.901 00:00:00.000 UDP 28.104.0.1:58067 -> 198.28.0.2:53 1 64 1 2025-10-16 06:07:14.902 00:00:00.000 UDP 28.104.0.1:48787 -> 198.28.0.2:53 1 64 1 2025-10-16 06:07:14.913 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48787 1 80 1 2025-10-16 06:07:14.913 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58067 1 109 1 2025-10-16 06:08:15.201 00:00:00.000 UDP 28.104.0.1:37991 -> 198.28.0.2:53 1 64 1 2025-10-16 06:08:15.201 00:00:00.000 UDP 28.104.0.1:37840 -> 198.28.0.2:53 1 64 1 2025-10-16 06:08:15.211 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37840 1 80 1 2025-10-16 06:08:15.211 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37991 1 109 1 2025-10-16 06:08:18.188 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-16 06:03:51.964 00:05:50.777 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-16 06:03:52.092 00:06:00.039 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-16 06:04:42.751 00:05:09.344 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-16 06:04:51.911 00:05:00.184 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-10-16 06:09:15.515 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47969 1 80 1 2025-10-16 06:09:15.514 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35631 1 109 1 2025-10-16 06:09:15.503 00:00:00.000 UDP 28.104.0.1:35631 -> 198.28.0.2:53 1 64 1 2025-10-16 06:09:15.503 00:00:00.000 UDP 28.104.0.1:47969 -> 198.28.0.2:53 1 64 1 2025-10-16 06:05:17.958 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2528 1 2025-10-16 06:10:15.809 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44870 1 109 1 2025-10-16 06:10:15.809 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54296 1 80 1 2025-10-16 06:10:15.799 00:00:00.000 UDP 28.104.0.1:44870 -> 198.28.0.2:53 1 64 1 2025-10-16 06:10:15.799 00:00:00.000 UDP 28.104.0.1:54296 -> 198.28.0.2:53 1 64 1 2025-10-16 06:11:16.104 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41490 1 109 1 2025-10-16 06:11:16.103 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58290 1 80 1 2025-10-16 06:11:16.094 00:00:00.000 UDP 28.104.0.1:41490 -> 198.28.0.2:53 1 64 1 2025-10-16 06:11:16.094 00:00:00.000 UDP 28.104.0.1:58290 -> 198.28.0.2:53 1 64 1 2025-10-16 06:12:16.399 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52611 1 109 1 2025-10-16 06:12:16.399 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46936 1 80 1 2025-10-16 06:12:16.389 00:00:00.000 UDP 28.104.0.1:52611 -> 198.28.0.2:53 1 64 1 2025-10-16 06:12:16.389 00:00:00.000 UDP 28.104.0.1:46936 -> 198.28.0.2:53 1 64 1 2025-10-16 06:07:51.954 00:05:50.838 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-16 06:08:42.741 00:05:09.365 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-16 06:13:16.685 00:00:00.000 UDP 28.104.0.1:36156 -> 198.28.0.2:53 1 64 1 2025-10-16 06:13:16.685 00:00:00.000 UDP 28.104.0.1:44745 -> 198.28.0.2:53 1 64 1 2025-10-16 06:13:16.696 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36156 1 109 1 2025-10-16 06:13:16.696 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44745 1 80 1 2025-10-16 06:13:18.316 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-16 06:14:16.982 00:00:00.000 UDP 28.104.0.1:51409 -> 198.28.0.2:53 1 64 1 2025-10-16 06:14:16.982 00:00:00.000 UDP 28.104.0.1:58411 -> 198.28.0.2:53 1 64 1 2025-10-16 06:14:16.993 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58411 1 109 1 2025-10-16 06:14:16.993 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51409 1 80 1 2025-10-16 06:09:51.966 00:05:50.777 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-16 06:10:37.966 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 42 3020 1 2025-10-16 06:10:42.753 00:05:09.343 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-16 06:10:51.912 00:05:00.185 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-10-16 06:15:17.242 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60077 1 109 1 2025-10-16 06:15:17.241 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46046 1 80 1 2025-10-16 06:15:17.230 00:00:00.000 UDP 28.104.0.1:60077 -> 198.28.0.2:53 1 64 1 2025-10-16 06:15:17.230 00:00:00.000 UDP 28.104.0.1:46046 -> 198.28.0.2:53 1 64 1 2025-10-16 06:10:52.095 00:06:00.037 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-16 06:16:17.533 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47458 1 109 1 2025-10-16 06:16:17.534 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46234 1 80 1 2025-10-16 06:16:17.522 00:00:00.000 UDP 28.104.0.1:47458 -> 198.28.0.2:53 1 64 1 2025-10-16 06:16:17.523 00:00:00.000 UDP 28.104.0.1:46234 -> 198.28.0.2:53 1 64 1 2025-10-16 06:17:17.815 00:00:00.000 UDP 28.104.0.1:37677 -> 198.28.0.2:53 1 64 1 2025-10-16 06:17:17.815 00:00:00.000 UDP 28.104.0.1:42729 -> 198.28.0.2:53 1 64 1 2025-10-16 06:17:17.826 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37677 1 109 1 2025-10-16 06:17:17.825 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42729 1 80 1 2025-10-16 06:18:18.571 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-16 06:18:18.081 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48750 1 80 1 2025-10-16 06:18:18.081 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43827 1 109 1 2025-10-16 06:18:18.072 00:00:00.000 UDP 28.104.0.1:48750 -> 198.28.0.2:53 1 64 1 2025-10-16 06:18:18.072 00:00:00.000 UDP 28.104.0.1:43827 -> 198.28.0.2:53 1 64 1 2025-10-16 06:13:51.956 00:05:50.837 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-16 06:14:42.742 00:05:09.366 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-16 06:19:18.373 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33803 1 80 1 2025-10-16 06:19:18.373 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45542 1 109 1 2025-10-16 06:19:18.362 00:00:00.000 UDP 28.104.0.1:33803 -> 198.28.0.2:53 1 64 1 2025-10-16 06:19:18.362 00:00:00.000 UDP 28.104.0.1:45542 -> 198.28.0.2:53 1 64 1 2025-10-16 06:15:57.975 00:05:10.011 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2384 1 2025-10-16 06:20:18.663 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39097 1 80 1 2025-10-16 06:20:18.662 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33113 1 109 1 2025-10-16 06:20:18.652 00:00:00.000 UDP 28.104.0.1:33113 -> 198.28.0.2:53 1 64 1 2025-10-16 06:20:18.653 00:00:00.000 UDP 28.104.0.1:39097 -> 198.28.0.2:53 1 64 1 2025-10-16 06:15:51.966 00:05:50.778 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-16 06:16:42.753 00:05:09.345 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-16 06:16:51.913 00:05:00.185 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-10-16 06:21:18.912 00:00:00.000 UDP 28.104.0.1:41931 -> 198.28.0.2:53 1 64 1 2025-10-16 06:21:18.912 00:00:00.000 UDP 28.104.0.1:43578 -> 198.28.0.2:53 1 64 1 2025-10-16 06:21:18.923 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41931 1 109 1 2025-10-16 06:21:18.923 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43578 1 80 1 2025-10-16 06:22:19.221 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51133 1 80 1 2025-10-16 06:22:19.222 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39445 1 109 1 2025-10-16 06:22:19.212 00:00:00.000 UDP 28.104.0.1:51133 -> 198.28.0.2:53 1 64 1 2025-10-16 06:22:19.212 00:00:00.000 UDP 28.104.0.1:39445 -> 198.28.0.2:53 1 64 1 2025-10-16 06:17:52.098 00:06:00.037 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-16 06:23:18.845 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-16 06:23:19.512 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41878 1 109 1 2025-10-16 06:23:19.512 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54020 1 80 1 2025-10-16 06:23:19.504 00:00:00.000 UDP 28.104.0.1:41878 -> 198.28.0.2:53 1 64 1 2025-10-16 06:23:19.504 00:00:00.000 UDP 28.104.0.1:54020 -> 198.28.0.2:53 1 64 1 2025-10-16 06:24:19.814 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43819 1 80 1 2025-10-16 06:24:19.815 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37194 1 109 1 2025-10-16 06:24:19.804 00:00:00.000 UDP 28.104.0.1:43819 -> 198.28.0.2:53 1 64 1 2025-10-16 06:24:19.804 00:00:00.000 UDP 28.104.0.1:37194 -> 198.28.0.2:53 1 64 1 2025-10-16 06:19:51.957 00:05:50.845 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-16 06:20:42.743 00:05:09.366 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-16 06:25:20.105 00:00:00.000 UDP 28.104.0.1:42148 -> 198.28.0.2:53 1 64 1 2025-10-16 06:25:20.105 00:00:00.000 UDP 28.104.0.1:51232 -> 198.28.0.2:53 1 64 1 2025-10-16 06:25:20.114 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42148 1 80 1 2025-10-16 06:25:20.116 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51232 1 109 1 2025-10-16 06:21:17.987 00:05:10.011 OSPF 28.0.2.1:0 -> 224.0.0.5:0 43 3220 1 2025-10-16 06:26:20.402 00:00:00.000 UDP 28.104.0.1:49595 -> 198.28.0.2:53 1 64 1 2025-10-16 06:26:20.402 00:00:00.000 UDP 28.104.0.1:54733 -> 198.28.0.2:53 1 64 1 2025-10-16 06:26:20.412 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49595 1 80 1 2025-10-16 06:26:20.412 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54733 1 109 1 2025-10-16 06:21:51.968 00:05:50.777 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-16 06:22:42.753 00:05:09.346 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-16 06:22:51.914 00:05:00.185 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-10-16 06:27:20.694 00:00:00.000 UDP 28.104.0.1:36913 -> 198.28.0.2:53 1 64 1 2025-10-16 06:27:20.694 00:00:00.000 UDP 28.104.0.1:37396 -> 198.28.0.2:53 1 64 1 2025-10-16 06:27:20.705 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37396 1 80 1 2025-10-16 06:27:20.705 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36913 1 109 1 2025-10-16 06:28:20.949 00:00:00.000 UDP 28.104.0.1:55485 -> 198.28.0.2:53 1 64 1 2025-10-16 06:28:20.949 00:00:00.000 UDP 28.104.0.1:54740 -> 198.28.0.2:53 1 64 1 2025-10-16 06:28:18.645 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-16 06:28:20.960 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54740 1 80 1 2025-10-16 06:28:20.960 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55485 1 109 1 2025-10-16 06:29:21.259 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48346 1 109 1 2025-10-16 06:29:21.259 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37961 1 80 1 2025-10-16 06:29:21.249 00:00:00.000 UDP 28.104.0.1:48346 -> 198.28.0.2:53 1 64 1 2025-10-16 06:29:21.249 00:00:00.000 UDP 28.104.0.1:37961 -> 198.28.0.2:53 1 64 1 2025-10-16 06:24:52.099 00:06:00.036 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-16 06:30:21.546 00:00:00.000 UDP 28.104.0.1:32842 -> 198.28.0.2:53 1 64 1 2025-10-16 06:30:21.545 00:00:00.000 UDP 28.104.0.1:49929 -> 198.28.0.2:53 1 64 1 2025-10-16 06:30:21.556 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32842 1 109 1 2025-10-16 06:30:21.555 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49929 1 80 1 2025-10-16 06:26:37.997 00:05:00.711 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2644 1 2025-10-16 06:25:51.957 00:05:50.839 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-16 06:26:42.744 00:05:09.368 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-16 06:31:21.841 00:00:00.000 UDP 28.104.0.1:38330 -> 198.28.0.2:53 1 64 1 2025-10-16 06:31:21.842 00:00:00.000 UDP 28.104.0.1:41552 -> 198.28.0.2:53 1 64 1 2025-10-16 06:31:21.851 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38330 1 109 1 2025-10-16 06:31:21.852 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41552 1 80 1 2025-10-16 06:32:22.149 00:00:00.000 UDP 28.104.0.1:42092 -> 198.28.0.2:53 1 64 1 2025-10-16 06:32:22.149 00:00:00.000 UDP 28.104.0.1:53288 -> 198.28.0.2:53 1 64 1 2025-10-16 06:32:22.159 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42092 1 80 1 2025-10-16 06:32:22.159 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53288 1 109 1 2025-10-16 06:27:51.967 00:05:50.779 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-16 06:28:42.756 00:05:09.347 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-16 06:28:51.917 00:05:00.186 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-10-16 06:33:18.736 00:00:00.029 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-16 06:33:22.444 00:00:00.000 UDP 28.104.0.1:40633 -> 198.28.0.2:53 1 64 1 2025-10-16 06:33:22.444 00:00:00.000 UDP 28.104.0.1:45829 -> 198.28.0.2:53 1 64 1 2025-10-16 06:33:22.454 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40633 1 109 1 2025-10-16 06:33:22.454 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45829 1 80 1 2025-10-16 06:34:22.741 00:00:00.000 UDP 28.104.0.1:54435 -> 198.28.0.2:53 1 64 1 2025-10-16 06:34:22.741 00:00:00.000 UDP 28.104.0.1:60593 -> 198.28.0.2:53 1 64 1 2025-10-16 06:34:22.750 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60593 1 109 1 2025-10-16 06:34:22.750 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54435 1 80 1 2025-10-16 06:35:23.057 00:00:00.000 UDP 28.104.0.1:46387 -> 198.28.0.2:53 1 64 1 2025-10-16 06:35:23.057 00:00:00.000 UDP 28.104.0.1:36694 -> 198.28.0.2:53 1 64 1 2025-10-16 06:35:23.067 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36694 1 109 1 2025-10-16 06:35:23.067 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46387 1 80 1 2025-10-16 06:31:48.005 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2528 1 2025-10-16 06:36:23.315 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36680 1 80 1 2025-10-16 06:36:23.315 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51413 1 109 1 2025-10-16 06:36:23.304 00:00:00.000 UDP 28.104.0.1:51413 -> 198.28.0.2:53 1 64 1 2025-10-16 06:36:23.304 00:00:00.000 UDP 28.104.0.1:36680 -> 198.28.0.2:53 1 64 1 2025-10-16 06:31:51.961 00:05:50.838 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-16 06:32:42.746 00:05:09.366 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-16 06:31:52.103 00:06:00.034 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-16 06:37:23.657 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47492 1 80 1 2025-10-16 06:37:23.657 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53377 1 109 1 2025-10-16 06:37:23.646 00:00:00.000 UDP 28.104.0.1:47492 -> 198.28.0.2:53 1 64 1 2025-10-16 06:37:23.646 00:00:00.000 UDP 28.104.0.1:53377 -> 198.28.0.2:53 1 64 1 2025-10-16 06:38:18.877 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-16 06:38:23.938 00:00:00.000 UDP 28.104.0.1:47474 -> 198.28.0.2:53 1 64 1 2025-10-16 06:38:23.938 00:00:00.000 UDP 28.104.0.1:38309 -> 198.28.0.2:53 1 64 1 2025-10-16 06:38:23.947 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38309 1 109 1 2025-10-16 06:38:23.947 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47474 1 80 1 2025-10-16 06:33:51.971 00:05:50.777 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-16 06:34:42.757 00:05:09.347 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-16 06:34:51.918 00:05:00.186 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-10-16 06:39:24.230 00:00:00.000 UDP 28.104.0.1:36380 -> 198.28.0.2:53 1 64 1 2025-10-16 06:39:24.230 00:00:00.000 UDP 28.104.0.1:46653 -> 198.28.0.2:53 1 64 1 2025-10-16 06:39:24.240 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46653 1 80 1 2025-10-16 06:39:24.241 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36380 1 109 1 2025-10-16 06:40:24.523 00:00:00.000 UDP 28.104.0.1:34939 -> 198.28.0.2:53 1 64 1 2025-10-16 06:40:24.523 00:00:00.000 UDP 28.104.0.1:41222 -> 198.28.0.2:53 1 64 1 2025-10-16 06:40:24.534 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41222 1 109 1 2025-10-16 06:40:24.534 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34939 1 80 1 2025-10-16 06:37:08.007 00:05:10.043 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2876 1 2025-10-16 06:41:24.813 00:00:00.000 UDP 28.104.0.1:56881 -> 198.28.0.2:53 1 64 1 2025-10-16 06:41:24.813 00:00:00.000 UDP 28.104.0.1:46568 -> 198.28.0.2:53 1 64 1 2025-10-16 06:41:24.822 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46568 1 109 1 2025-10-16 06:41:24.823 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56881 1 80 1 2025-10-16 06:42:25.119 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53141 1 80 1 2025-10-16 06:42:25.119 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41736 1 109 1 2025-10-16 06:42:25.108 00:00:00.000 UDP 28.104.0.1:53141 -> 198.28.0.2:53 1 64 1 2025-10-16 06:42:25.108 00:00:00.000 UDP 28.104.0.1:41736 -> 198.28.0.2:53 1 64 1 2025-10-16 06:37:51.959 00:05:50.839 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-16 06:38:42.748 00:05:09.367 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-16 06:43:18.991 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-16 06:43:25.403 00:00:00.000 UDP 28.104.0.1:36945 -> 198.28.0.2:53 1 64 1 2025-10-16 06:43:25.403 00:00:00.000 UDP 28.104.0.1:50394 -> 198.28.0.2:53 1 64 1 2025-10-16 06:43:25.413 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36945 1 109 1 2025-10-16 06:43:25.413 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50394 1 80 1 2025-10-16 06:38:52.103 00:06:00.036 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-16 06:44:25.710 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57021 1 80 1 2025-10-16 06:44:25.710 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37820 1 109 1 2025-10-16 06:44:25.701 00:00:00.000 UDP 28.104.0.1:57021 -> 198.28.0.2:53 1 64 1 2025-10-16 06:44:25.701 00:00:00.000 UDP 28.104.0.1:37820 -> 198.28.0.2:53 1 64 1 2025-10-16 06:39:51.970 00:05:50.779 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-16 06:40:42.758 00:05:09.346 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-16 06:40:51.919 00:05:00.186 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-10-16 06:45:26.006 00:00:00.000 UDP 28.104.0.1:47026 -> 198.28.0.2:53 1 64 1 2025-10-16 06:45:26.006 00:00:00.000 UDP 28.104.0.1:48379 -> 198.28.0.2:53 1 64 1 2025-10-16 06:45:26.018 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48379 1 109 1 2025-10-16 06:45:26.017 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47026 1 80 1 2025-10-16 06:46:26.692 00:00:00.000 UDP 28.104.0.1:58163 -> 198.28.0.2:53 1 64 1 2025-10-16 06:46:26.692 00:00:00.000 UDP 28.104.0.1:45849 -> 198.28.0.2:53 1 64 1 2025-10-16 06:46:26.703 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45849 1 80 1 2025-10-16 06:46:26.703 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58163 1 109 1 2025-10-16 06:42:28.050 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2608 1 2025-10-16 06:47:26.995 00:00:00.000 UDP 28.104.0.1:43985 -> 198.28.0.2:53 1 64 1 2025-10-16 06:47:26.995 00:00:00.000 UDP 28.104.0.1:38507 -> 198.28.0.2:53 1 64 1 2025-10-16 06:47:27.007 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43985 1 80 1 2025-10-16 06:47:27.007 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38507 1 109 1 2025-10-16 06:48:19.071 00:00:00.038 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-16 06:48:27.289 00:00:00.000 UDP 28.104.0.1:47075 -> 198.28.0.2:53 1 64 1 2025-10-16 06:48:27.289 00:00:00.000 UDP 28.104.0.1:51309 -> 198.28.0.2:53 1 64 1 2025-10-16 06:48:27.302 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47075 1 109 1 2025-10-16 06:48:27.301 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51309 1 80 1 2025-10-16 06:43:51.961 00:05:50.839 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-16 06:44:42.749 00:05:09.369 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-16 06:49:27.540 00:00:00.000 UDP 28.104.0.1:54561 -> 198.28.0.2:53 1 64 1 2025-10-16 06:49:27.540 00:00:00.000 UDP 28.104.0.1:39136 -> 198.28.0.2:53 1 64 1 2025-10-16 06:49:27.550 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39136 1 109 1 2025-10-16 06:49:27.550 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54561 1 80 1 2025-10-16 06:50:27.848 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40325 1 109 1 2025-10-16 06:50:27.848 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36149 1 80 1 2025-10-16 06:50:27.836 00:00:00.000 UDP 28.104.0.1:36149 -> 198.28.0.2:53 1 64 1 2025-10-16 06:50:27.836 00:00:00.000 UDP 28.104.0.1:40325 -> 198.28.0.2:53 1 64 1 2025-10-16 06:45:51.975 00:05:50.776 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-16 06:45:52.105 00:06:00.035 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-16 06:46:42.759 00:05:09.350 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-16 06:46:51.921 00:05:00.188 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-10-16 06:51:28.215 00:00:00.000 UDP 28.104.0.1:40561 -> 198.28.0.2:53 1 64 1 2025-10-16 06:51:28.215 00:00:00.000 UDP 28.104.0.1:36901 -> 198.28.0.2:53 1 64 1 2025-10-16 06:51:28.225 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36901 1 109 1 2025-10-16 06:51:28.225 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40561 1 80 1 2025-10-16 06:47:48.058 00:05:10.012 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2812 1 2025-10-16 06:52:28.509 00:00:00.000 UDP 28.104.0.1:45901 -> 198.28.0.2:53 1 64 1 2025-10-16 06:52:28.509 00:00:00.000 UDP 28.104.0.1:60763 -> 198.28.0.2:53 1 64 1 2025-10-16 06:52:28.521 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60763 1 80 1 2025-10-16 06:52:28.521 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45901 1 109 1 2025-10-16 06:53:19.135 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-16 06:53:28.772 00:00:00.000 UDP 28.104.0.1:40708 -> 198.28.0.2:53 1 64 1 2025-10-16 06:53:28.772 00:00:00.000 UDP 28.104.0.1:59822 -> 198.28.0.2:53 1 64 1 2025-10-16 06:53:28.783 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40708 1 109 1 2025-10-16 06:53:28.783 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59822 1 80 1 2025-10-16 06:54:29.084 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42453 1 109 1 2025-10-16 06:54:29.084 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41820 1 80 1 2025-10-16 06:54:29.074 00:00:00.000 UDP 28.104.0.1:41820 -> 198.28.0.2:53 1 64 1 2025-10-16 06:54:29.074 00:00:00.000 UDP 28.104.0.1:42453 -> 198.28.0.2:53 1 64 1 2025-10-16 06:49:51.969 00:05:50.832 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-16 06:50:42.750 00:05:09.369 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-16 06:55:29.373 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51227 1 109 1 2025-10-16 06:55:29.373 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36942 1 80 1 2025-10-16 06:55:29.364 00:00:00.000 UDP 28.104.0.1:36942 -> 198.28.0.2:53 1 64 1 2025-10-16 06:55:29.364 00:00:00.000 UDP 28.104.0.1:51227 -> 198.28.0.2:53 1 64 1 2025-10-16 06:56:29.670 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48648 1 80 1 2025-10-16 06:56:29.670 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41385 1 109 1 2025-10-16 06:56:29.660 00:00:00.000 UDP 28.104.0.1:48648 -> 198.28.0.2:53 1 64 1 2025-10-16 06:56:29.660 00:00:00.000 UDP 28.104.0.1:41385 -> 198.28.0.2:53 1 64 1 2025-10-16 06:51:51.980 00:05:50.771 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-16 06:52:42.760 00:05:09.350 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-16 06:52:51.932 00:05:00.178 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-10-16 06:53:08.071 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2832 1 2025-10-16 06:57:29.968 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42979 1 109 1 2025-10-16 06:57:29.968 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60603 1 80 1 2025-10-16 06:57:29.958 00:00:00.000 UDP 28.104.0.1:60603 -> 198.28.0.2:53 1 64 1 2025-10-16 06:57:29.959 00:00:00.000 UDP 28.104.0.1:42979 -> 198.28.0.2:53 1 64 1 2025-10-16 06:52:52.109 00:06:00.033 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-16 06:58:19.298 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-16 06:58:30.239 00:00:00.000 UDP 28.104.0.1:42943 -> 198.28.0.2:53 1 64 1 2025-10-16 06:58:30.240 00:00:00.000 UDP 28.104.0.1:49714 -> 198.28.0.2:53 1 64 1 2025-10-16 06:58:30.249 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42943 1 80 1 2025-10-16 06:58:30.250 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49714 1 109 1 Summary: total flows: 322, total bytes: 96721, total packets: 1428, avg bps: 204, avg pps: 0, avg bpp: 67 Time window: 2025-10-16 05:55:51 - 2025-10-16 06:58:52 Total flows processed: 322, passed: 322, Blocks skipped: 0, Bytes read: 33552 Sys: 0.0032s User: 0.0032s Wall: 0.0036s flows/second: 89270.0 Runtime: 0.0036s