Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-17 16:58:53.502 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44979 1 80 1 2025-10-17 16:58:53.502 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59145 1 109 1 2025-10-17 16:58:53.492 00:00:00.000 UDP 28.104.0.1:59145 -> 198.28.0.2:53 1 64 1 2025-10-17 16:58:53.492 00:00:00.000 UDP 28.104.0.1:44979 -> 198.28.0.2:53 1 64 1 2025-10-17 16:59:00.215 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-17 16:54:52.661 00:05:51.030 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-17 16:59:53.784 00:00:00.000 UDP 28.104.0.1:38564 -> 198.28.0.2:53 1 64 1 2025-10-17 16:54:52.589 00:06:00.154 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-17 16:59:53.783 00:00:00.000 UDP 28.104.0.1:60658 -> 198.28.0.2:53 1 64 1 2025-10-17 16:59:53.794 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38564 1 109 1 2025-10-17 16:59:53.794 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60658 1 80 1 2025-10-17 16:55:50.799 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 42 3020 1 2025-10-17 17:00:54.092 00:00:00.000 UDP 28.104.0.1:37108 -> 198.28.0.2:53 1 64 1 2025-10-17 17:00:54.092 00:00:00.000 UDP 28.104.0.1:45517 -> 198.28.0.2:53 1 64 1 2025-10-17 16:56:43.639 00:05:09.115 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-17 17:00:54.103 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45517 1 80 1 2025-10-17 17:00:54.103 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37108 1 109 1 2025-10-17 16:56:52.672 00:05:50.969 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-17 17:01:54.357 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54915 1 80 1 2025-10-17 17:01:54.357 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42972 1 109 1 2025-10-17 17:01:54.346 00:00:00.000 UDP 28.104.0.1:54915 -> 198.28.0.2:53 1 64 1 2025-10-17 17:01:54.346 00:00:00.000 UDP 28.104.0.1:42972 -> 198.28.0.2:53 1 64 1 2025-10-17 16:56:52.741 00:06:00.123 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-17 16:57:52.741 00:05:50.910 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-17 17:02:54.701 00:00:00.000 UDP 28.104.0.1:59375 -> 198.28.0.2:53 1 64 1 2025-10-17 17:02:54.701 00:00:00.000 UDP 28.104.0.1:40488 -> 198.28.0.2:53 1 64 1 2025-10-17 17:02:54.711 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59375 1 109 1 2025-10-17 17:02:54.712 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40488 1 80 1 2025-10-17 17:03:54.973 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53912 1 109 1 2025-10-17 17:03:54.973 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47870 1 80 1 2025-10-17 17:03:54.962 00:00:00.000 UDP 28.104.0.1:47870 -> 198.28.0.2:53 1 64 1 2025-10-17 17:03:54.962 00:00:00.000 UDP 28.104.0.1:53912 -> 198.28.0.2:53 1 64 1 2025-10-17 17:04:00.318 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-17 17:04:55.269 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48093 1 80 1 2025-10-17 17:04:55.268 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60714 1 109 1 2025-10-17 17:04:55.260 00:00:00.000 UDP 28.104.0.1:48093 -> 198.28.0.2:53 1 64 1 2025-10-17 17:04:55.259 00:00:00.000 UDP 28.104.0.1:60714 -> 198.28.0.2:53 1 64 1 2025-10-17 17:01:10.806 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2772 1 2025-10-17 17:00:52.661 00:05:51.030 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-17 17:05:55.565 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55303 1 80 1 2025-10-17 17:05:55.565 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56635 1 109 1 2025-10-17 17:05:55.555 00:00:00.000 UDP 28.104.0.1:55303 -> 198.28.0.2:53 1 64 1 2025-10-17 17:05:55.555 00:00:00.000 UDP 28.104.0.1:56635 -> 198.28.0.2:53 1 64 1 2025-10-17 17:02:43.641 00:05:09.115 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-17 17:06:55.866 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49125 1 109 1 2025-10-17 17:06:55.866 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34303 1 80 1 2025-10-17 17:06:55.855 00:00:00.000 UDP 28.104.0.1:49125 -> 198.28.0.2:53 1 64 1 2025-10-17 17:06:55.856 00:00:00.000 UDP 28.104.0.1:34303 -> 198.28.0.2:53 1 64 1 2025-10-17 17:01:52.591 00:06:00.156 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-17 17:02:52.674 00:05:50.971 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-17 17:07:56.185 00:00:00.000 UDP 28.104.0.1:36343 -> 198.28.0.2:53 1 64 1 2025-10-17 17:07:56.186 00:00:00.000 UDP 28.104.0.1:56364 -> 198.28.0.2:53 1 64 1 2025-10-17 17:07:56.196 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36343 1 80 1 2025-10-17 17:07:56.196 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56364 1 109 1 2025-10-17 17:03:52.745 00:05:50.910 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-17 17:08:56.489 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38631 1 80 1 2025-10-17 17:08:56.489 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39118 1 109 1 2025-10-17 17:03:52.744 00:06:00.123 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-17 17:08:56.479 00:00:00.000 UDP 28.104.0.1:39118 -> 198.28.0.2:53 1 64 1 2025-10-17 17:08:56.479 00:00:00.000 UDP 28.104.0.1:38631 -> 198.28.0.2:53 1 64 1 2025-10-17 17:09:00.553 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-17 17:09:56.776 00:00:00.000 UDP 28.104.0.1:41053 -> 198.28.0.2:53 1 64 1 2025-10-17 17:09:56.776 00:00:00.000 UDP 28.104.0.1:34907 -> 198.28.0.2:53 1 64 1 2025-10-17 17:09:56.787 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41053 1 80 1 2025-10-17 17:09:56.788 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34907 1 109 1 2025-10-17 17:06:30.808 00:05:10.009 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2568 1 2025-10-17 17:10:57.061 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40707 1 109 1 2025-10-17 17:10:57.061 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44113 1 80 1 2025-10-17 17:10:57.051 00:00:00.000 UDP 28.104.0.1:40707 -> 198.28.0.2:53 1 64 1 2025-10-17 17:10:57.051 00:00:00.000 UDP 28.104.0.1:44113 -> 198.28.0.2:53 1 64 1 2025-10-17 17:06:52.665 00:05:51.032 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-17 17:11:57.342 00:00:00.000 UDP 28.104.0.1:46479 -> 198.28.0.2:53 1 64 1 2025-10-17 17:11:57.342 00:00:00.000 UDP 28.104.0.1:48717 -> 198.28.0.2:53 1 64 1 2025-10-17 17:11:57.355 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48717 1 109 1 2025-10-17 17:11:57.355 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46479 1 80 1 2025-10-17 17:08:43.644 00:05:09.112 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-17 17:12:57.632 00:00:00.000 UDP 28.104.0.1:54676 -> 198.28.0.2:53 1 64 1 2025-10-17 17:12:57.632 00:00:00.000 UDP 28.104.0.1:57784 -> 198.28.0.2:53 1 64 1 2025-10-17 17:12:57.642 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54676 1 109 1 2025-10-17 17:12:57.642 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57784 1 80 1 2025-10-17 17:08:52.676 00:05:50.970 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-17 17:13:57.899 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54502 1 109 1 2025-10-17 17:14:00.627 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-17 17:13:57.900 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54407 1 80 1 2025-10-17 17:08:52.592 00:06:00.155 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-17 17:13:57.889 00:00:00.000 UDP 28.104.0.1:54407 -> 198.28.0.2:53 1 64 1 2025-10-17 17:13:57.889 00:00:00.000 UDP 28.104.0.1:54502 -> 198.28.0.2:53 1 64 1 2025-10-17 17:09:52.747 00:05:50.912 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-17 17:14:58.209 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45694 1 109 1 2025-10-17 17:14:58.209 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39436 1 80 1 2025-10-17 17:14:58.201 00:00:00.000 UDP 28.104.0.1:39436 -> 198.28.0.2:53 1 64 1 2025-10-17 17:14:58.201 00:00:00.000 UDP 28.104.0.1:45694 -> 198.28.0.2:53 1 64 1 2025-10-17 17:10:52.747 00:06:00.121 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-17 17:15:58.493 00:00:00.000 UDP 28.104.0.1:41180 -> 198.28.0.2:53 1 64 1 2025-10-17 17:15:58.493 00:00:00.000 UDP 28.104.0.1:53558 -> 198.28.0.2:53 1 64 1 2025-10-17 17:11:50.818 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2896 1 2025-10-17 17:15:58.503 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41180 1 80 1 2025-10-17 17:15:58.504 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53558 1 109 1 2025-10-17 17:16:58.754 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35352 1 80 1 2025-10-17 17:16:58.755 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39102 1 109 1 2025-10-17 17:16:58.746 00:00:00.000 UDP 28.104.0.1:35352 -> 198.28.0.2:53 1 64 1 2025-10-17 17:16:58.746 00:00:00.000 UDP 28.104.0.1:39102 -> 198.28.0.2:53 1 64 1 2025-10-17 17:12:52.668 00:05:51.033 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-17 17:17:59.063 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38924 1 109 1 2025-10-17 17:17:59.061 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48291 1 80 1 2025-10-17 17:17:59.052 00:00:00.000 UDP 28.104.0.1:48291 -> 198.28.0.2:53 1 64 1 2025-10-17 17:17:59.052 00:00:00.000 UDP 28.104.0.1:38924 -> 198.28.0.2:53 1 64 1 2025-10-17 17:18:59.342 00:00:00.000 UDP 28.104.0.1:58036 -> 198.28.0.2:53 1 64 1 2025-10-17 17:18:59.341 00:00:00.000 UDP 28.104.0.1:53707 -> 198.28.0.2:53 1 64 1 2025-10-17 17:14:43.645 00:05:09.113 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-17 17:19:00.644 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-17 17:18:59.351 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58036 1 109 1 2025-10-17 17:18:59.350 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53707 1 80 1 2025-10-17 17:14:52.677 00:05:50.973 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-17 17:19:59.613 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35936 1 80 1 2025-10-17 17:19:59.612 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58102 1 109 1 2025-10-17 17:19:59.603 00:00:00.000 UDP 28.104.0.1:35936 -> 198.28.0.2:53 1 64 1 2025-10-17 17:19:59.603 00:00:00.000 UDP 28.104.0.1:58102 -> 198.28.0.2:53 1 64 1 2025-10-17 17:15:52.748 00:05:50.914 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-17 17:15:52.595 00:06:00.154 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-17 17:20:59.901 00:00:00.000 UDP 28.104.0.1:49953 -> 198.28.0.2:53 1 64 1 2025-10-17 17:20:59.901 00:00:00.000 UDP 28.104.0.1:50454 -> 198.28.0.2:53 1 64 1 2025-10-17 17:20:59.911 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49953 1 109 1 2025-10-17 17:20:59.911 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50454 1 80 1 2025-10-17 17:17:10.824 00:05:00.678 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2508 1 2025-10-17 17:22:00.212 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51868 1 80 1 2025-10-17 17:22:00.212 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43470 1 109 1 2025-10-17 17:22:00.201 00:00:00.000 UDP 28.104.0.1:51868 -> 198.28.0.2:53 1 64 1 2025-10-17 17:22:00.201 00:00:00.000 UDP 28.104.0.1:43470 -> 198.28.0.2:53 1 64 1 2025-10-17 17:23:00.510 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37505 1 80 1 2025-10-17 17:23:00.510 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57055 1 109 1 2025-10-17 17:17:52.748 00:06:00.123 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-17 17:23:00.500 00:00:00.000 UDP 28.104.0.1:37505 -> 198.28.0.2:53 1 64 1 2025-10-17 17:23:00.500 00:00:00.000 UDP 28.104.0.1:57055 -> 198.28.0.2:53 1 64 1 2025-10-17 17:18:52.668 00:05:51.033 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-17 17:24:00.752 00:00:00.000 UDP 28.104.0.1:58391 -> 198.28.0.2:53 1 64 1 2025-10-17 17:24:00.753 00:00:00.000 UDP 28.104.0.1:48105 -> 198.28.0.2:53 1 64 1 2025-10-17 17:24:00.808 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-17 17:24:00.763 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58391 1 109 1 2025-10-17 17:24:00.763 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48105 1 80 1 2025-10-17 17:20:43.652 00:05:09.113 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-17 17:25:01.060 00:00:00.000 UDP 28.104.0.1:50981 -> 198.28.0.2:53 1 64 1 2025-10-17 17:25:01.059 00:00:00.000 UDP 28.104.0.1:35282 -> 198.28.0.2:53 1 64 1 2025-10-17 17:25:01.069 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35282 1 80 1 2025-10-17 17:25:01.070 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50981 1 109 1 2025-10-17 17:20:52.679 00:05:50.973 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-17 17:26:01.358 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45380 1 109 1 2025-10-17 17:26:01.358 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57052 1 80 1 2025-10-17 17:26:01.348 00:00:00.000 UDP 28.104.0.1:57052 -> 198.28.0.2:53 1 64 1 2025-10-17 17:26:01.348 00:00:00.000 UDP 28.104.0.1:45380 -> 198.28.0.2:53 1 64 1 2025-10-17 17:22:20.831 00:05:00.730 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2952 1 2025-10-17 17:21:52.749 00:05:50.913 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-17 17:27:01.635 00:00:00.000 UDP 28.104.0.1:37725 -> 198.28.0.2:53 1 64 1 2025-10-17 17:27:01.635 00:00:00.000 UDP 28.104.0.1:54468 -> 198.28.0.2:53 1 64 1 2025-10-17 17:27:01.645 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37725 1 109 1 2025-10-17 17:27:01.645 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54468 1 80 1 2025-10-17 17:28:01.949 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60748 1 80 1 2025-10-17 17:28:01.949 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58017 1 109 1 2025-10-17 17:22:52.597 00:06:00.157 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-17 17:28:01.938 00:00:00.000 UDP 28.104.0.1:60748 -> 198.28.0.2:53 1 64 1 2025-10-17 17:28:01.938 00:00:00.000 UDP 28.104.0.1:58017 -> 198.28.0.2:53 1 64 1 2025-10-17 17:29:00.633 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-17 17:29:02.200 00:00:00.000 UDP 28.104.0.1:54822 -> 198.28.0.2:53 1 64 1 2025-10-17 17:29:02.200 00:00:00.000 UDP 28.104.0.1:43923 -> 198.28.0.2:53 1 64 1 2025-10-17 17:29:02.209 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54822 1 109 1 2025-10-17 17:29:02.209 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43923 1 80 1 2025-10-17 17:24:52.672 00:05:51.030 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-17 17:24:52.753 00:06:00.122 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-17 17:30:02.461 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40862 1 109 1 2025-10-17 17:30:02.461 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50986 1 80 1 2025-10-17 17:30:02.451 00:00:00.000 UDP 28.104.0.1:50986 -> 198.28.0.2:53 1 64 1 2025-10-17 17:30:02.451 00:00:00.000 UDP 28.104.0.1:40862 -> 198.28.0.2:53 1 64 1 2025-10-17 17:26:43.652 00:05:09.113 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-17 17:31:02.748 00:00:00.000 UDP 28.104.0.1:48729 -> 198.28.0.2:53 1 64 1 2025-10-17 17:31:02.749 00:00:00.000 UDP 28.104.0.1:45147 -> 198.28.0.2:53 1 64 1 2025-10-17 17:31:02.759 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45147 1 80 1 2025-10-17 17:31:02.758 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48729 1 109 1 2025-10-17 17:27:30.836 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2608 1 2025-10-17 17:26:52.681 00:05:50.971 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-17 17:32:03.065 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47127 1 109 1 2025-10-17 17:32:03.065 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50878 1 80 1 2025-10-17 17:32:03.053 00:00:00.000 UDP 28.104.0.1:47127 -> 198.28.0.2:53 1 64 1 2025-10-17 17:32:03.054 00:00:00.000 UDP 28.104.0.1:50878 -> 198.28.0.2:53 1 64 1 2025-10-17 17:27:52.753 00:05:50.909 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-17 17:33:03.441 00:00:00.000 UDP 28.104.0.1:47050 -> 198.28.0.2:53 1 64 1 2025-10-17 17:33:03.441 00:00:00.000 UDP 28.104.0.1:57642 -> 198.28.0.2:53 1 64 1 2025-10-17 17:33:03.452 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57642 1 109 1 2025-10-17 17:33:03.452 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47050 1 80 1 2025-10-17 17:34:01.022 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-17 17:34:03.761 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48593 1 80 1 2025-10-17 17:34:03.760 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49806 1 109 1 2025-10-17 17:34:03.751 00:00:00.000 UDP 28.104.0.1:48593 -> 198.28.0.2:53 1 64 1 2025-10-17 17:34:03.751 00:00:00.000 UDP 28.104.0.1:49806 -> 198.28.0.2:53 1 64 1 2025-10-17 17:29:52.600 00:06:00.157 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-17 17:35:04.066 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34447 1 80 1 2025-10-17 17:35:04.066 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53794 1 109 1 2025-10-17 17:35:04.056 00:00:00.000 UDP 28.104.0.1:34447 -> 198.28.0.2:53 1 64 1 2025-10-17 17:35:04.056 00:00:00.000 UDP 28.104.0.1:53794 -> 198.28.0.2:53 1 64 1 2025-10-17 17:30:52.675 00:05:51.029 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-17 17:36:04.360 00:00:00.000 UDP 28.104.0.1:50850 -> 198.28.0.2:53 1 64 1 2025-10-17 17:36:04.360 00:00:00.000 UDP 28.104.0.1:45507 -> 198.28.0.2:53 1 64 1 2025-10-17 17:36:04.370 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45507 1 80 1 2025-10-17 17:36:04.370 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50850 1 109 1 2025-10-17 17:31:52.755 00:06:00.122 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-17 17:32:43.652 00:05:09.114 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-17 17:32:50.839 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2692 1 2025-10-17 17:37:04.632 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50327 1 109 1 2025-10-17 17:37:04.632 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46892 1 80 1 2025-10-17 17:37:04.623 00:00:00.000 UDP 28.104.0.1:50327 -> 198.28.0.2:53 1 64 1 2025-10-17 17:37:04.623 00:00:00.000 UDP 28.104.0.1:46892 -> 198.28.0.2:53 1 64 1 2025-10-17 17:32:52.685 00:05:50.968 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-17 17:38:04.876 00:00:00.000 UDP 28.104.0.1:40848 -> 198.28.0.2:53 1 64 1 2025-10-17 17:38:04.876 00:00:00.000 UDP 28.104.0.1:35351 -> 198.28.0.2:53 1 64 1 2025-10-17 17:38:04.886 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35351 1 80 1 2025-10-17 17:38:04.886 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40848 1 109 1 2025-10-17 17:33:52.756 00:05:50.908 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-17 17:39:00.815 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-17 17:39:05.133 00:00:00.000 UDP 28.104.0.1:43921 -> 198.28.0.2:53 1 64 1 2025-10-17 17:39:05.133 00:00:00.000 UDP 28.104.0.1:50686 -> 198.28.0.2:53 1 64 1 2025-10-17 17:39:05.143 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43921 1 80 1 2025-10-17 17:39:05.143 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50686 1 109 1 2025-10-17 17:40:05.422 00:00:00.000 UDP 28.104.0.1:55778 -> 198.28.0.2:53 1 64 1 2025-10-17 17:40:05.423 00:00:00.000 UDP 28.104.0.1:54681 -> 198.28.0.2:53 1 64 1 2025-10-17 17:40:05.433 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54681 1 80 1 2025-10-17 17:40:05.433 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55778 1 109 1 2025-10-17 17:41:05.714 00:00:00.000 UDP 28.104.0.1:57800 -> 198.28.0.2:53 1 64 1 2025-10-17 17:41:05.715 00:00:00.000 UDP 28.104.0.1:41173 -> 198.28.0.2:53 1 64 1 2025-10-17 17:41:05.725 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57800 1 80 1 2025-10-17 17:41:05.725 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41173 1 109 1 2025-10-17 17:36:52.676 00:05:51.029 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-17 17:36:52.599 00:06:00.158 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-17 17:42:06.025 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41927 1 109 1 2025-10-17 17:42:06.024 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36352 1 80 1 2025-10-17 17:42:06.010 00:00:00.000 UDP 28.104.0.1:36352 -> 198.28.0.2:53 1 64 1 2025-10-17 17:42:06.015 00:00:00.000 UDP 28.104.0.1:41927 -> 198.28.0.2:53 1 64 1 2025-10-17 17:38:10.847 00:05:10.017 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2648 1 2025-10-17 17:38:43.653 00:05:09.114 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-17 17:43:06.311 00:00:00.000 UDP 28.104.0.1:55809 -> 198.28.0.2:53 1 64 1 2025-10-17 17:43:06.311 00:00:00.000 UDP 28.104.0.1:41495 -> 198.28.0.2:53 1 64 1 2025-10-17 17:43:06.322 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41495 1 80 1 2025-10-17 17:43:06.322 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55809 1 109 1 2025-10-17 17:38:52.688 00:05:50.968 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-17 17:38:52.756 00:06:00.123 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-17 17:44:01.042 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-17 17:44:07.329 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51620 1 109 1 2025-10-17 17:44:07.329 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60375 1 80 1 2025-10-17 17:44:07.319 00:00:00.000 UDP 28.104.0.1:60375 -> 198.28.0.2:53 1 64 1 2025-10-17 17:44:07.319 00:00:00.000 UDP 28.104.0.1:51620 -> 198.28.0.2:53 1 64 1 2025-10-17 17:39:52.756 00:05:50.910 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-17 17:45:07.607 00:00:00.000 UDP 28.104.0.1:38779 -> 198.28.0.2:53 1 64 1 2025-10-17 17:45:07.607 00:00:00.000 UDP 28.104.0.1:58486 -> 198.28.0.2:53 1 64 1 2025-10-17 17:45:07.619 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38779 1 109 1 2025-10-17 17:45:07.619 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58486 1 80 1 2025-10-17 17:46:07.914 00:00:00.000 UDP 28.104.0.1:46396 -> 198.28.0.2:53 1 64 1 2025-10-17 17:46:07.914 00:00:00.000 UDP 28.104.0.1:45482 -> 198.28.0.2:53 1 64 1 2025-10-17 17:46:07.924 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46396 1 80 1 2025-10-17 17:46:07.923 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45482 1 109 1 2025-10-17 17:47:08.238 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54060 1 109 1 2025-10-17 17:47:08.238 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40142 1 80 1 2025-10-17 17:47:08.227 00:00:00.000 UDP 28.104.0.1:40142 -> 198.28.0.2:53 1 64 1 2025-10-17 17:47:08.227 00:00:00.000 UDP 28.104.0.1:54060 -> 198.28.0.2:53 1 64 1 2025-10-17 17:43:21.796 00:05:09.057 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2768 1 2025-10-17 17:42:52.678 00:05:51.028 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-17 17:48:08.534 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33960 1 80 1 2025-10-17 17:48:08.534 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55475 1 109 1 2025-10-17 17:48:08.523 00:00:00.000 UDP 28.104.0.1:55475 -> 198.28.0.2:53 1 64 1 2025-10-17 17:48:08.523 00:00:00.000 UDP 28.104.0.1:33960 -> 198.28.0.2:53 1 64 1 2025-10-17 17:43:52.603 00:06:00.158 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-17 17:44:43.656 00:05:09.115 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-17 17:49:01.635 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-17 17:49:08.817 00:00:00.000 UDP 28.104.0.1:59473 -> 198.28.0.2:53 1 64 1 2025-10-17 17:49:08.817 00:00:00.000 UDP 28.104.0.1:39896 -> 198.28.0.2:53 1 64 1 2025-10-17 17:49:08.828 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59473 1 109 1 2025-10-17 17:49:08.828 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39896 1 80 1 2025-10-17 17:44:52.688 00:05:50.969 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-17 17:50:09.073 00:00:00.000 UDP 28.104.0.1:35663 -> 198.28.0.2:53 1 64 1 2025-10-17 17:50:09.073 00:00:00.000 UDP 28.104.0.1:34886 -> 198.28.0.2:53 1 64 1 2025-10-17 17:50:09.084 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35663 1 80 1 2025-10-17 17:50:09.084 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34886 1 109 1 2025-10-17 17:45:52.758 00:05:50.909 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-17 17:45:52.758 00:06:00.123 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-17 17:51:09.373 00:00:00.000 UDP 28.104.0.1:60054 -> 198.28.0.2:53 1 64 1 2025-10-17 17:51:09.373 00:00:00.000 UDP 28.104.0.1:55884 -> 198.28.0.2:53 1 64 1 2025-10-17 17:51:09.384 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60054 1 109 1 2025-10-17 17:51:09.384 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55884 1 80 1 2025-10-17 17:52:09.626 00:00:00.000 UDP 28.104.0.1:37026 -> 198.28.0.2:53 1 64 1 2025-10-17 17:52:09.626 00:00:00.000 UDP 28.104.0.1:57630 -> 198.28.0.2:53 1 64 1 2025-10-17 17:52:09.635 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57630 1 80 1 2025-10-17 17:52:09.635 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37026 1 109 1 2025-10-17 17:48:40.854 00:05:10.010 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2528 1 2025-10-17 17:53:09.944 00:00:00.000 UDP 28.104.0.1:57688 -> 198.28.0.2:53 1 64 1 2025-10-17 17:53:09.943 00:00:00.000 UDP 28.104.0.1:46997 -> 198.28.0.2:53 1 64 1 2025-10-17 17:53:09.954 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46997 1 80 1 2025-10-17 17:53:09.955 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57688 1 109 1 2025-10-17 17:48:52.680 00:05:51.027 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-17 17:54:01.444 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-17 17:54:10.204 00:00:00.000 UDP 28.104.0.1:58826 -> 198.28.0.2:53 1 64 1 2025-10-17 17:54:10.204 00:00:00.000 UDP 28.104.0.1:57113 -> 198.28.0.2:53 1 64 1 2025-10-17 17:54:10.214 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57113 1 109 1 2025-10-17 17:54:10.214 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58826 1 80 1 2025-10-17 17:50:43.657 00:05:09.114 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-17 17:55:10.507 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42726 1 109 1 2025-10-17 17:55:10.507 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41703 1 80 1 2025-10-17 17:55:10.495 00:00:00.000 UDP 28.104.0.1:41703 -> 198.28.0.2:53 1 64 1 2025-10-17 17:55:10.495 00:00:00.000 UDP 28.104.0.1:42726 -> 198.28.0.2:53 1 64 1 2025-10-17 17:50:52.691 00:05:50.968 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-17 17:50:52.602 00:06:00.160 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-17 17:56:10.788 00:00:00.000 UDP 28.104.0.1:36329 -> 198.28.0.2:53 1 64 1 2025-10-17 17:56:10.788 00:00:00.000 UDP 28.104.0.1:55943 -> 198.28.0.2:53 1 64 1 2025-10-17 17:56:10.798 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55943 1 80 1 2025-10-17 17:56:10.798 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36329 1 109 1 2025-10-17 17:51:52.760 00:05:50.909 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-17 17:57:11.060 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59765 1 80 1 2025-10-17 17:57:11.060 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43159 1 109 1 2025-10-17 17:57:11.050 00:00:00.000 UDP 28.104.0.1:59765 -> 198.28.0.2:53 1 64 1 2025-10-17 17:57:11.050 00:00:00.000 UDP 28.104.0.1:43159 -> 198.28.0.2:53 1 64 1 2025-10-17 17:52:52.760 00:06:00.125 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-17 17:58:11.320 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37912 1 80 1 2025-10-17 17:58:11.320 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52531 1 109 1 2025-10-17 17:54:00.864 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 44 3232 1 2025-10-17 17:58:11.310 00:00:00.000 UDP 28.104.0.1:52531 -> 198.28.0.2:53 1 64 1 2025-10-17 17:58:11.310 00:00:00.000 UDP 28.104.0.1:37912 -> 198.28.0.2:53 1 64 1 Summary: total flows: 322, total bytes: 100254, total packets: 1477, avg bps: 207, avg pps: 0, avg bpp: 67 Time window: 2025-10-17 16:54:52 - 2025-10-17 17:59:10 Total flows processed: 322, passed: 322, Blocks skipped: 0, Bytes read: 33552 Sys: 0.0023s User: 0.0046s Wall: 0.0038s flows/second: 85069.7 Runtime: 0.0038s