Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-17 00:59:03.184 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38135 1 80 1 2025-10-17 00:59:03.184 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43394 1 109 1 2025-10-17 00:59:03.173 00:00:00.000 UDP 28.104.0.1:38135 -> 198.28.0.2:53 1 64 1 2025-10-17 00:59:03.173 00:00:00.000 UDP 28.104.0.1:43394 -> 198.28.0.2:53 1 64 1 2025-10-17 00:54:52.379 00:05:50.911 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-17 01:00:03.469 00:00:00.000 UDP 28.104.0.1:56038 -> 198.28.0.2:53 1 64 1 2025-10-17 01:00:03.469 00:00:00.000 UDP 28.104.0.1:60206 -> 198.28.0.2:53 1 64 1 2025-10-17 01:00:03.479 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60206 1 80 1 2025-10-17 01:00:03.479 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56038 1 109 1 2025-10-17 00:55:52.283 00:06:00.189 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-17 00:56:43.239 00:05:09.244 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-17 01:01:03.738 00:00:00.000 UDP 28.104.0.1:47536 -> 198.28.0.2:53 1 64 1 2025-10-17 01:01:03.738 00:00:00.000 UDP 28.104.0.1:48771 -> 198.28.0.2:53 1 64 1 2025-10-17 01:01:03.749 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47536 1 80 1 2025-10-17 01:01:03.749 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48771 1 109 1 2025-10-17 00:56:52.389 00:05:50.851 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-17 01:02:03.991 00:00:00.000 UDP 28.104.0.1:60463 -> 198.28.0.2:53 1 64 1 2025-10-17 01:02:03.991 00:00:00.000 UDP 28.104.0.1:38448 -> 198.28.0.2:53 1 64 1 2025-10-17 01:02:04.001 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38448 1 109 1 2025-10-17 01:02:04.001 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60463 1 80 1 2025-10-17 00:57:59.606 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2976 1 2025-10-17 00:57:52.472 00:05:50.778 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-17 00:57:52.472 00:06:00.054 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-17 01:03:04.313 00:00:00.000 UDP 28.104.0.1:50273 -> 198.28.0.2:53 1 64 1 2025-10-17 01:03:04.313 00:00:00.000 UDP 28.104.0.1:39256 -> 198.28.0.2:53 1 64 1 2025-10-17 01:03:04.324 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50273 1 109 1 2025-10-17 01:03:04.324 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39256 1 80 1 2025-10-17 01:03:41.383 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-17 01:04:04.608 00:00:00.000 UDP 28.104.0.1:45284 -> 198.28.0.2:53 1 64 1 2025-10-17 01:04:04.608 00:00:00.000 UDP 28.104.0.1:36091 -> 198.28.0.2:53 1 64 1 2025-10-17 01:04:04.616 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36091 1 80 1 2025-10-17 01:04:04.617 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45284 1 109 1 2025-10-17 01:05:04.918 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36820 1 80 1 2025-10-17 01:05:04.918 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57772 1 109 1 2025-10-17 01:05:04.909 00:00:00.000 UDP 28.104.0.1:57772 -> 198.28.0.2:53 1 64 1 2025-10-17 01:05:04.909 00:00:00.000 UDP 28.104.0.1:36820 -> 198.28.0.2:53 1 64 1 2025-10-17 01:00:52.379 00:05:50.913 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-17 01:06:05.220 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34102 1 109 1 2025-10-17 01:06:05.220 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38717 1 80 1 2025-10-17 01:06:05.210 00:00:00.000 UDP 28.104.0.1:34102 -> 198.28.0.2:53 1 64 1 2025-10-17 01:06:05.210 00:00:00.000 UDP 28.104.0.1:38717 -> 198.28.0.2:53 1 64 1 2025-10-17 01:02:43.241 00:05:09.245 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-17 01:07:05.510 00:00:00.000 UDP 28.104.0.1:57948 -> 198.28.0.2:53 1 64 1 2025-10-17 01:07:05.510 00:00:00.000 UDP 28.104.0.1:33927 -> 198.28.0.2:53 1 64 1 2025-10-17 01:07:05.520 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33927 1 109 1 2025-10-17 01:07:05.520 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57948 1 80 1 2025-10-17 01:03:19.612 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2512 1 2025-10-17 01:02:52.388 00:05:50.855 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-17 01:02:52.284 00:06:00.190 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-17 01:08:05.885 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36462 1 80 1 2025-10-17 01:08:05.885 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37985 1 109 1 2025-10-17 01:08:05.875 00:00:00.000 UDP 28.104.0.1:36462 -> 198.28.0.2:53 1 64 1 2025-10-17 01:08:05.875 00:00:00.000 UDP 28.104.0.1:37985 -> 198.28.0.2:53 1 64 1 2025-10-17 01:08:41.070 00:00:00.038 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-17 01:03:52.472 00:05:50.782 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-17 01:09:06.133 00:00:00.000 UDP 28.104.0.1:56496 -> 198.28.0.2:53 1 64 1 2025-10-17 01:09:06.133 00:00:00.000 UDP 28.104.0.1:39863 -> 198.28.0.2:53 1 64 1 2025-10-17 01:09:06.142 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56496 1 80 1 2025-10-17 01:09:06.142 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39863 1 109 1 2025-10-17 01:04:52.474 00:06:00.056 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-17 01:10:06.440 00:00:00.000 UDP 28.104.0.1:37719 -> 198.28.0.2:53 1 64 1 2025-10-17 01:10:06.440 00:00:00.000 UDP 28.104.0.1:51693 -> 198.28.0.2:53 1 64 1 2025-10-17 01:10:06.450 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37719 1 109 1 2025-10-17 01:10:06.450 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51693 1 80 1 2025-10-17 01:11:07.077 00:00:00.000 UDP 28.104.0.1:48580 -> 198.28.0.2:53 1 64 1 2025-10-17 01:11:07.077 00:00:00.000 UDP 28.104.0.1:51125 -> 198.28.0.2:53 1 64 1 2025-10-17 01:11:07.087 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51125 1 80 1 2025-10-17 01:11:07.087 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48580 1 109 1 2025-10-17 01:06:52.380 00:05:50.916 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-17 01:12:07.961 00:00:00.000 UDP 28.104.0.1:59244 -> 198.28.0.2:53 1 64 1 2025-10-17 01:12:07.961 00:00:00.000 UDP 28.104.0.1:47059 -> 198.28.0.2:53 1 64 1 2025-10-17 01:12:07.972 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59244 1 80 1 2025-10-17 01:12:07.971 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47059 1 109 1 2025-10-17 01:08:39.618 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2812 1 2025-10-17 01:08:43.246 00:05:09.242 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-17 01:13:08.255 00:00:00.000 UDP 28.104.0.1:54559 -> 198.28.0.2:53 1 64 1 2025-10-17 01:13:08.255 00:00:00.000 UDP 28.104.0.1:55343 -> 198.28.0.2:53 1 64 1 2025-10-17 01:13:08.267 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55343 1 109 1 2025-10-17 01:13:08.266 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54559 1 80 1 2025-10-17 01:13:41.191 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-17 01:08:52.390 00:05:50.857 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-17 01:14:08.510 00:00:00.000 UDP 28.104.0.1:59739 -> 198.28.0.2:53 1 64 1 2025-10-17 01:14:08.510 00:00:00.000 UDP 28.104.0.1:51142 -> 198.28.0.2:53 1 64 1 2025-10-17 01:14:08.521 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59739 1 109 1 2025-10-17 01:14:08.521 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51142 1 80 1 2025-10-17 01:09:52.476 00:05:50.783 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-17 01:09:52.285 00:06:00.191 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-17 01:15:08.806 00:00:00.000 UDP 28.104.0.1:48089 -> 198.28.0.2:53 1 64 1 2025-10-17 01:15:08.805 00:00:00.000 UDP 28.104.0.1:35873 -> 198.28.0.2:53 1 64 1 2025-10-17 01:15:08.815 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35873 1 109 1 2025-10-17 01:15:08.816 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48089 1 80 1 2025-10-17 01:16:09.084 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48011 1 109 1 2025-10-17 01:16:09.085 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60081 1 80 1 2025-10-17 01:16:09.074 00:00:00.000 UDP 28.104.0.1:60081 -> 198.28.0.2:53 1 64 1 2025-10-17 01:16:09.073 00:00:00.000 UDP 28.104.0.1:48011 -> 198.28.0.2:53 1 64 1 2025-10-17 01:11:52.476 00:06:00.057 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-17 01:17:09.386 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49174 1 80 1 2025-10-17 01:17:09.386 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49748 1 109 1 2025-10-17 01:17:09.377 00:00:00.000 UDP 28.104.0.1:49748 -> 198.28.0.2:53 1 64 1 2025-10-17 01:17:09.377 00:00:00.000 UDP 28.104.0.1:49174 -> 198.28.0.2:53 1 64 1 2025-10-17 01:12:52.380 00:05:50.918 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-17 01:13:59.622 00:05:00.944 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2704 1 2025-10-17 01:18:09.672 00:00:00.000 UDP 28.104.0.1:56164 -> 198.28.0.2:53 1 64 1 2025-10-17 01:18:09.672 00:00:00.000 UDP 28.104.0.1:43796 -> 198.28.0.2:53 1 64 1 2025-10-17 01:18:09.681 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43796 1 109 1 2025-10-17 01:18:09.681 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56164 1 80 1 2025-10-17 01:18:41.348 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-17 01:14:43.248 00:05:09.240 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-17 01:19:09.977 00:00:00.000 UDP 28.104.0.1:53181 -> 198.28.0.2:53 1 64 1 2025-10-17 01:19:09.978 00:00:00.000 UDP 28.104.0.1:54506 -> 198.28.0.2:53 1 64 1 2025-10-17 01:19:09.988 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53181 1 80 1 2025-10-17 01:19:09.988 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54506 1 109 1 2025-10-17 01:14:52.390 00:05:50.857 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-17 01:20:10.280 00:00:00.000 UDP 28.104.0.1:40941 -> 198.28.0.2:53 1 64 1 2025-10-17 01:20:10.280 00:00:00.000 UDP 28.104.0.1:33098 -> 198.28.0.2:53 1 64 1 2025-10-17 01:20:10.292 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40941 1 109 1 2025-10-17 01:20:10.290 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33098 1 80 1 2025-10-17 01:15:52.476 00:05:50.781 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-17 01:21:10.574 00:00:00.000 UDP 28.104.0.1:58911 -> 198.28.0.2:53 1 64 1 2025-10-17 01:21:10.574 00:00:00.000 UDP 28.104.0.1:46378 -> 198.28.0.2:53 1 64 1 2025-10-17 01:21:10.585 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46378 1 80 1 2025-10-17 01:21:10.585 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58911 1 109 1 2025-10-17 01:16:52.287 00:06:00.192 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-17 01:22:10.863 00:00:00.000 UDP 28.104.0.1:58730 -> 198.28.0.2:53 1 64 1 2025-10-17 01:22:10.863 00:00:00.000 UDP 28.104.0.1:58509 -> 198.28.0.2:53 1 64 1 2025-10-17 01:22:10.873 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58509 1 80 1 2025-10-17 01:22:10.872 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58730 1 109 1 2025-10-17 01:23:11.180 00:00:00.000 UDP 28.104.0.1:60905 -> 198.28.0.2:53 1 64 1 2025-10-17 01:23:11.180 00:00:00.000 UDP 28.104.0.1:48853 -> 198.28.0.2:53 1 64 1 2025-10-17 01:23:11.192 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48853 1 109 1 2025-10-17 01:23:11.191 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60905 1 80 1 2025-10-17 01:19:09.630 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2628 1 2025-10-17 01:23:41.313 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-17 01:18:52.382 00:05:50.917 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-17 01:18:52.477 00:06:00.057 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-17 01:24:11.475 00:00:00.000 UDP 28.104.0.1:40903 -> 198.28.0.2:53 1 64 1 2025-10-17 01:24:11.475 00:00:00.000 UDP 28.104.0.1:38019 -> 198.28.0.2:53 1 64 1 2025-10-17 01:24:11.484 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38019 1 80 1 2025-10-17 01:24:11.484 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40903 1 109 1 2025-10-17 01:20:43.248 00:05:09.241 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-17 01:25:11.729 00:00:00.000 UDP 28.104.0.1:45967 -> 198.28.0.2:53 1 64 1 2025-10-17 01:25:11.729 00:00:00.000 UDP 28.104.0.1:41047 -> 198.28.0.2:53 1 64 1 2025-10-17 01:25:11.740 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41047 1 109 1 2025-10-17 01:25:11.740 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45967 1 80 1 2025-10-17 01:20:52.393 00:05:50.857 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-17 01:26:12.064 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34634 1 80 1 2025-10-17 01:26:12.064 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40047 1 109 1 2025-10-17 01:26:12.054 00:00:00.000 UDP 28.104.0.1:34634 -> 198.28.0.2:53 1 64 1 2025-10-17 01:26:12.054 00:00:00.000 UDP 28.104.0.1:40047 -> 198.28.0.2:53 1 64 1 2025-10-17 01:21:52.477 00:05:50.782 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-17 01:27:12.324 00:00:00.000 UDP 28.104.0.1:37395 -> 198.28.0.2:53 1 64 1 2025-10-17 01:27:12.326 00:00:00.000 UDP 28.104.0.1:49556 -> 198.28.0.2:53 1 64 1 2025-10-17 01:27:12.337 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49556 1 80 1 2025-10-17 01:27:12.335 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37395 1 109 1 2025-10-17 01:28:12.678 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55339 1 109 1 2025-10-17 01:28:12.678 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54985 1 80 1 2025-10-17 01:28:12.668 00:00:00.000 UDP 28.104.0.1:55339 -> 198.28.0.2:53 1 64 1 2025-10-17 01:28:12.668 00:00:00.000 UDP 28.104.0.1:54985 -> 198.28.0.2:53 1 64 1 2025-10-17 01:28:41.391 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-17 01:24:29.637 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2524 1 2025-10-17 01:23:52.288 00:06:00.191 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-17 01:29:12.966 00:00:00.000 UDP 28.104.0.1:36422 -> 198.28.0.2:53 1 64 1 2025-10-17 01:29:12.966 00:00:00.000 UDP 28.104.0.1:56398 -> 198.28.0.2:53 1 64 1 2025-10-17 01:29:12.979 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56398 1 80 1 2025-10-17 01:29:12.978 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36422 1 109 1 2025-10-17 01:24:52.382 00:05:50.918 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-17 01:30:13.272 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40679 1 109 1 2025-10-17 01:30:13.271 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40353 1 80 1 2025-10-17 01:30:13.262 00:00:00.000 UDP 28.104.0.1:40353 -> 198.28.0.2:53 1 64 1 2025-10-17 01:30:13.262 00:00:00.000 UDP 28.104.0.1:40679 -> 198.28.0.2:53 1 64 1 2025-10-17 01:25:52.479 00:06:00.060 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-17 01:26:43.249 00:05:09.240 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-17 01:31:13.559 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46564 1 109 1 2025-10-17 01:31:13.559 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51836 1 80 1 2025-10-17 01:31:13.548 00:00:00.000 UDP 28.104.0.1:46564 -> 198.28.0.2:53 1 64 1 2025-10-17 01:31:13.548 00:00:00.000 UDP 28.104.0.1:51836 -> 198.28.0.2:53 1 64 1 2025-10-17 01:26:52.393 00:05:50.858 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-17 01:32:13.851 00:00:00.000 UDP 28.104.0.1:40122 -> 198.28.0.2:53 1 64 1 2025-10-17 01:32:13.850 00:00:00.000 UDP 28.104.0.1:55971 -> 198.28.0.2:53 1 64 1 2025-10-17 01:32:13.860 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40122 1 109 1 2025-10-17 01:32:13.860 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55971 1 80 1 2025-10-17 01:27:52.480 00:05:50.782 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-17 01:33:14.414 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37835 1 109 1 2025-10-17 01:33:14.414 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45961 1 80 1 2025-10-17 01:33:14.404 00:00:00.000 UDP 28.104.0.1:37835 -> 198.28.0.2:53 1 64 1 2025-10-17 01:33:14.404 00:00:00.000 UDP 28.104.0.1:45961 -> 198.28.0.2:53 1 64 1 2025-10-17 01:33:41.585 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-17 01:29:49.642 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2896 1 2025-10-17 01:34:14.710 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41003 1 80 1 2025-10-17 01:34:14.710 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54308 1 109 1 2025-10-17 01:34:14.699 00:00:00.000 UDP 28.104.0.1:54308 -> 198.28.0.2:53 1 64 1 2025-10-17 01:34:14.699 00:00:00.000 UDP 28.104.0.1:41003 -> 198.28.0.2:53 1 64 1 2025-10-17 01:35:14.974 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60263 1 109 1 2025-10-17 01:35:14.974 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34730 1 80 1 2025-10-17 01:35:14.964 00:00:00.000 UDP 28.104.0.1:34730 -> 198.28.0.2:53 1 64 1 2025-10-17 01:35:14.964 00:00:00.000 UDP 28.104.0.1:60263 -> 198.28.0.2:53 1 64 1 2025-10-17 01:30:52.384 00:05:50.917 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-17 01:30:52.290 00:06:00.193 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-17 01:36:15.255 00:00:00.000 UDP 28.104.0.1:48045 -> 198.28.0.2:53 1 64 1 2025-10-17 01:36:15.255 00:00:00.000 UDP 28.104.0.1:56262 -> 198.28.0.2:53 1 64 1 2025-10-17 01:36:15.263 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48045 1 80 1 2025-10-17 01:36:15.263 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56262 1 109 1 2025-10-17 01:32:43.250 00:05:09.243 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-17 01:37:15.564 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33983 1 80 1 2025-10-17 01:37:15.564 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52646 1 109 1 2025-10-17 01:37:15.555 00:00:00.000 UDP 28.104.0.1:52646 -> 198.28.0.2:53 1 64 1 2025-10-17 01:37:15.555 00:00:00.000 UDP 28.104.0.1:33983 -> 198.28.0.2:53 1 64 1 2025-10-17 01:32:52.395 00:05:50.856 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-17 01:32:52.479 00:06:00.060 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-17 01:38:15.865 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55431 1 109 1 2025-10-17 01:38:15.865 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55746 1 80 1 2025-10-17 01:38:15.855 00:00:00.000 UDP 28.104.0.1:55746 -> 198.28.0.2:53 1 64 1 2025-10-17 01:38:15.855 00:00:00.000 UDP 28.104.0.1:55431 -> 198.28.0.2:53 1 64 1 2025-10-17 01:38:41.615 00:00:00.025 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-17 01:33:52.482 00:05:50.780 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-17 01:39:16.173 00:00:00.000 UDP 28.104.0.1:51307 -> 198.28.0.2:53 1 64 1 2025-10-17 01:39:16.173 00:00:00.000 UDP 28.104.0.1:59960 -> 198.28.0.2:53 1 64 1 2025-10-17 01:39:16.185 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59960 1 109 1 2025-10-17 01:39:16.185 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51307 1 80 1 2025-10-17 01:35:09.647 00:05:10.011 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2656 1 2025-10-17 01:40:16.467 00:00:00.000 UDP 28.104.0.1:60609 -> 198.28.0.2:53 1 64 1 2025-10-17 01:40:16.467 00:00:00.000 UDP 28.104.0.1:39145 -> 198.28.0.2:53 1 64 1 2025-10-17 01:40:16.477 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60609 1 80 1 2025-10-17 01:40:16.477 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39145 1 109 1 2025-10-17 01:41:16.773 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34671 1 109 1 2025-10-17 01:41:16.773 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37781 1 80 1 2025-10-17 01:41:16.762 00:00:00.000 UDP 28.104.0.1:34671 -> 198.28.0.2:53 1 64 1 2025-10-17 01:41:16.762 00:00:00.000 UDP 28.104.0.1:37781 -> 198.28.0.2:53 1 64 1 2025-10-17 01:36:52.386 00:05:50.917 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-17 01:42:17.056 00:00:00.000 UDP 28.104.0.1:51159 -> 198.28.0.2:53 1 64 1 2025-10-17 01:42:17.056 00:00:00.000 UDP 28.104.0.1:52461 -> 198.28.0.2:53 1 64 1 2025-10-17 01:42:17.067 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51159 1 109 1 2025-10-17 01:42:17.067 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52461 1 80 1 2025-10-17 01:38:43.250 00:05:09.244 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-17 01:37:52.293 00:06:00.192 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-17 01:43:17.372 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47355 1 109 1 2025-10-17 01:43:17.373 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39871 1 80 1 2025-10-17 01:43:17.363 00:00:00.000 UDP 28.104.0.1:39871 -> 198.28.0.2:53 1 64 1 2025-10-17 01:43:17.362 00:00:00.000 UDP 28.104.0.1:47355 -> 198.28.0.2:53 1 64 1 2025-10-17 01:43:41.748 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-17 01:38:52.396 00:05:50.857 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-17 01:44:17.660 00:00:00.000 UDP 28.104.0.1:53187 -> 198.28.0.2:53 1 64 1 2025-10-17 01:44:17.660 00:00:00.000 UDP 28.104.0.1:45065 -> 198.28.0.2:53 1 64 1 2025-10-17 01:44:17.670 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45065 1 109 1 2025-10-17 01:44:17.670 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53187 1 80 1 2025-10-17 01:40:29.659 00:05:10.282 OSPF 28.0.2.1:0 -> 224.0.0.5:0 43 3152 1 2025-10-17 01:39:52.483 00:05:50.781 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-17 01:39:52.484 00:06:00.062 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-17 01:45:17.967 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51108 1 109 1 2025-10-17 01:45:17.967 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57309 1 80 1 2025-10-17 01:45:17.953 00:00:00.000 UDP 28.104.0.1:57309 -> 198.28.0.2:53 1 64 1 2025-10-17 01:45:17.953 00:00:00.000 UDP 28.104.0.1:51108 -> 198.28.0.2:53 1 64 1 2025-10-17 01:46:18.299 00:00:00.000 UDP 28.104.0.1:44615 -> 198.28.0.2:53 1 64 1 2025-10-17 01:46:18.299 00:00:00.000 UDP 28.104.0.1:50652 -> 198.28.0.2:53 1 64 1 2025-10-17 01:46:18.310 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50652 1 109 1 2025-10-17 01:46:18.310 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44615 1 80 1 2025-10-17 01:47:18.690 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50363 1 80 1 2025-10-17 01:47:18.690 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36194 1 109 1 2025-10-17 01:47:18.679 00:00:00.000 UDP 28.104.0.1:50363 -> 198.28.0.2:53 1 64 1 2025-10-17 01:47:18.679 00:00:00.000 UDP 28.104.0.1:36194 -> 198.28.0.2:53 1 64 1 2025-10-17 01:42:52.386 00:05:50.919 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-17 01:48:18.984 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59642 1 109 1 2025-10-17 01:48:18.984 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52017 1 80 1 2025-10-17 01:48:18.975 00:00:00.000 UDP 28.104.0.1:59642 -> 198.28.0.2:53 1 64 1 2025-10-17 01:48:18.975 00:00:00.000 UDP 28.104.0.1:52017 -> 198.28.0.2:53 1 64 1 2025-10-17 01:48:42.036 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-17 01:44:43.252 00:05:09.243 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-17 01:49:19.287 00:00:00.000 UDP 28.104.0.1:40393 -> 198.28.0.2:53 1 64 1 2025-10-17 01:49:19.287 00:00:00.000 UDP 28.104.0.1:44527 -> 198.28.0.2:53 1 64 1 2025-10-17 01:49:19.298 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40393 1 80 1 2025-10-17 01:49:19.298 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44527 1 109 1 2025-10-17 01:44:52.398 00:05:50.857 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-17 01:44:52.293 00:06:00.192 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-17 01:45:49.668 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2400 1 2025-10-17 01:50:19.592 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33581 1 109 1 2025-10-17 01:50:19.592 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51681 1 80 1 2025-10-17 01:50:19.581 00:00:00.000 UDP 28.104.0.1:33581 -> 198.28.0.2:53 1 64 1 2025-10-17 01:50:19.581 00:00:00.000 UDP 28.104.0.1:51681 -> 198.28.0.2:53 1 64 1 2025-10-17 01:45:52.492 00:05:50.774 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-17 01:51:19.880 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38176 1 80 1 2025-10-17 01:51:19.880 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57818 1 109 1 2025-10-17 01:51:19.870 00:00:00.000 UDP 28.104.0.1:38176 -> 198.28.0.2:53 1 64 1 2025-10-17 01:51:19.870 00:00:00.000 UDP 28.104.0.1:57818 -> 198.28.0.2:53 1 64 1 2025-10-17 01:46:52.485 00:06:00.061 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-17 01:52:20.189 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35162 1 109 1 2025-10-17 01:52:20.190 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42321 1 80 1 2025-10-17 01:52:20.180 00:00:00.000 UDP 28.104.0.1:42321 -> 198.28.0.2:53 1 64 1 2025-10-17 01:52:20.180 00:00:00.000 UDP 28.104.0.1:35162 -> 198.28.0.2:53 1 64 1 2025-10-17 01:53:20.472 00:00:00.000 UDP 28.104.0.1:53106 -> 198.28.0.2:53 1 64 1 2025-10-17 01:53:20.472 00:00:00.000 UDP 28.104.0.1:48512 -> 198.28.0.2:53 1 64 1 2025-10-17 01:53:20.484 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53106 1 80 1 2025-10-17 01:53:20.484 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48512 1 109 1 2025-10-17 01:53:41.977 00:00:00.025 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-17 01:48:52.390 00:05:50.918 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-17 01:54:20.774 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56584 1 109 1 2025-10-17 01:54:20.774 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33275 1 80 1 2025-10-17 01:54:20.765 00:00:00.000 UDP 28.104.0.1:56584 -> 198.28.0.2:53 1 64 1 2025-10-17 01:54:20.765 00:00:00.000 UDP 28.104.0.1:33275 -> 198.28.0.2:53 1 64 1 2025-10-17 01:50:43.255 00:05:09.242 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-17 01:55:21.082 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45352 1 80 1 2025-10-17 01:51:09.673 00:05:10.013 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2812 1 2025-10-17 01:55:21.082 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53649 1 109 1 2025-10-17 01:55:21.071 00:00:00.000 UDP 28.104.0.1:53649 -> 198.28.0.2:53 1 64 1 2025-10-17 01:55:21.072 00:00:00.000 UDP 28.104.0.1:45352 -> 198.28.0.2:53 1 64 1 2025-10-17 01:50:52.399 00:05:50.858 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-17 01:56:21.379 00:00:00.000 UDP 28.104.0.1:39604 -> 198.28.0.2:53 1 64 1 2025-10-17 01:56:21.379 00:00:00.000 UDP 28.104.0.1:57207 -> 198.28.0.2:53 1 64 1 2025-10-17 01:56:21.390 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57207 1 109 1 2025-10-17 01:56:21.390 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39604 1 80 1 2025-10-17 01:51:52.485 00:05:50.782 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-17 01:51:52.294 00:06:00.193 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-17 01:57:21.675 00:00:00.000 UDP 28.104.0.1:40375 -> 198.28.0.2:53 1 64 1 2025-10-17 01:57:21.675 00:00:00.000 UDP 28.104.0.1:52405 -> 198.28.0.2:53 1 64 1 2025-10-17 01:57:21.685 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52405 1 109 1 2025-10-17 01:57:21.685 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40375 1 80 1 2025-10-17 01:58:21.976 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44498 1 80 1 2025-10-17 01:58:21.976 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47208 1 109 1 2025-10-17 01:58:21.967 00:00:00.000 UDP 28.104.0.1:47208 -> 198.28.0.2:53 1 64 1 2025-10-17 01:58:21.967 00:00:00.000 UDP 28.104.0.1:44498 -> 198.28.0.2:53 1 64 1 2025-10-17 01:58:42.555 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 Summary: total flows: 320, total bytes: 96273, total packets: 1418, avg bps: 201, avg pps: 0, avg bpp: 67 Time window: 2025-10-17 00:54:52 - 2025-10-17 01:58:42 Total flows processed: 320, passed: 320, Blocks skipped: 0, Bytes read: 33344 Sys: 0.0038s User: 0.0019s Wall: 0.0024s flows/second: 135875.4 Runtime: 0.0024s