Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-17 19:59:03.747 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-17 19:54:52.726 00:05:51.038 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-17 19:59:48.058 00:00:00.000 UDP 28.104.0.1:40458 -> 198.28.0.2:53 1 64 1 2025-10-17 19:59:48.058 00:00:00.000 UDP 28.104.0.1:51921 -> 198.28.0.2:53 1 64 1 2025-10-17 19:59:48.069 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51921 1 109 1 2025-10-17 19:59:48.068 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40458 1 80 1 2025-10-17 19:56:11.045 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2876 1 2025-10-17 20:00:48.442 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52576 1 80 1 2025-10-17 20:00:48.443 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60274 1 109 1 2025-10-17 20:00:48.433 00:00:00.000 UDP 28.104.0.1:60274 -> 198.28.0.2:53 1 64 1 2025-10-17 20:00:48.432 00:00:00.000 UDP 28.104.0.1:52576 -> 198.28.0.2:53 1 64 1 2025-10-17 19:56:43.714 00:05:09.102 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-17 20:01:48.729 00:00:00.000 UDP 28.104.0.1:47631 -> 198.28.0.2:53 1 64 1 2025-10-17 20:01:48.729 00:00:00.000 UDP 28.104.0.1:39430 -> 198.28.0.2:53 1 64 1 2025-10-17 19:56:52.736 00:05:50.978 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-17 20:01:48.740 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47631 1 80 1 2025-10-17 20:01:48.740 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39430 1 109 1 2025-10-17 19:56:52.634 00:06:00.173 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-17 19:57:52.806 00:05:50.918 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-17 20:02:49.059 00:00:00.000 UDP 28.104.0.1:39376 -> 198.28.0.2:53 1 64 1 2025-10-17 20:02:49.059 00:00:00.000 UDP 28.104.0.1:46848 -> 198.28.0.2:53 1 64 1 2025-10-17 20:02:49.070 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39376 1 80 1 2025-10-17 20:02:49.070 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46848 1 109 1 2025-10-17 20:03:49.356 00:00:00.000 UDP 28.104.0.1:37138 -> 198.28.0.2:53 1 64 1 2025-10-17 20:03:49.356 00:00:00.000 UDP 28.104.0.1:57277 -> 198.28.0.2:53 1 64 1 2025-10-17 20:03:49.366 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57277 1 109 1 2025-10-17 20:03:49.365 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37138 1 80 1 2025-10-17 19:58:52.806 00:06:00.123 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-17 20:04:03.994 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-17 20:04:51.108 00:00:00.000 UDP 28.104.0.1:44686 -> 198.28.0.2:53 1 64 1 2025-10-17 20:04:51.108 00:00:00.000 UDP 28.104.0.1:54791 -> 198.28.0.2:53 1 64 1 2025-10-17 20:04:51.117 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54791 1 109 1 2025-10-17 20:04:51.118 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44686 1 80 1 2025-10-17 20:01:31.051 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2668 1 2025-10-17 20:00:52.727 00:05:51.039 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-17 20:05:51.363 00:00:00.000 UDP 28.104.0.1:58125 -> 198.28.0.2:53 1 64 1 2025-10-17 20:05:51.364 00:00:00.000 UDP 28.104.0.1:58300 -> 198.28.0.2:53 1 64 1 2025-10-17 20:05:51.374 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58300 1 109 1 2025-10-17 20:05:51.374 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58125 1 80 1 2025-10-17 20:06:51.631 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35584 1 109 1 2025-10-17 20:06:51.630 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46282 1 80 1 2025-10-17 20:06:51.621 00:00:00.000 UDP 28.104.0.1:35584 -> 198.28.0.2:53 1 64 1 2025-10-17 20:06:51.621 00:00:00.000 UDP 28.104.0.1:46282 -> 198.28.0.2:53 1 64 1 2025-10-17 20:02:43.713 00:05:09.108 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-17 20:02:52.743 00:05:50.973 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-17 20:07:52.619 00:00:00.000 UDP 28.104.0.1:45790 -> 198.28.0.2:53 1 64 1 2025-10-17 20:07:52.619 00:00:00.000 UDP 28.104.0.1:36991 -> 198.28.0.2:53 1 64 1 2025-10-17 20:07:52.631 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36991 1 80 1 2025-10-17 20:07:52.631 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45790 1 109 1 2025-10-17 20:03:52.809 00:05:50.917 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-17 20:08:52.881 00:00:00.000 UDP 28.104.0.1:36886 -> 198.28.0.2:53 1 64 1 2025-10-17 20:08:52.881 00:00:00.000 UDP 28.104.0.1:47481 -> 198.28.0.2:53 1 64 1 2025-10-17 20:03:52.636 00:06:00.177 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-17 20:08:52.892 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36886 1 109 1 2025-10-17 20:08:52.893 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47481 1 80 1 2025-10-17 20:09:03.984 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-17 20:09:53.189 00:00:00.000 UDP 28.104.0.1:53605 -> 198.28.0.2:53 1 64 1 2025-10-17 20:09:53.188 00:00:00.000 UDP 28.104.0.1:54981 -> 198.28.0.2:53 1 64 1 2025-10-17 20:09:53.199 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53605 1 109 1 2025-10-17 20:09:53.199 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54981 1 80 1 2025-10-17 20:05:52.811 00:06:00.117 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-17 20:10:53.543 00:00:00.000 UDP 28.104.0.1:42365 -> 198.28.0.2:53 1 64 1 2025-10-17 20:10:53.543 00:00:00.000 UDP 28.104.0.1:52876 -> 198.28.0.2:53 1 64 1 2025-10-17 20:10:53.554 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42365 1 109 1 2025-10-17 20:10:53.554 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52876 1 80 1 2025-10-17 20:06:51.058 00:05:10.013 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2508 1 2025-10-17 20:06:52.735 00:05:51.032 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-17 20:11:53.831 00:00:00.000 UDP 28.104.0.1:51735 -> 198.28.0.2:53 1 64 1 2025-10-17 20:11:53.831 00:00:00.000 UDP 28.104.0.1:57364 -> 198.28.0.2:53 1 64 1 2025-10-17 20:11:53.843 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57364 1 80 1 2025-10-17 20:11:53.842 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51735 1 109 1 2025-10-17 20:12:54.120 00:00:00.000 UDP 28.104.0.1:41200 -> 198.28.0.2:53 1 64 1 2025-10-17 20:12:54.120 00:00:00.000 UDP 28.104.0.1:54466 -> 198.28.0.2:53 1 64 1 2025-10-17 20:12:54.131 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41200 1 80 1 2025-10-17 20:08:43.716 00:05:09.108 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-17 20:12:54.132 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54466 1 109 1 2025-10-17 20:08:52.746 00:05:50.971 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-17 20:13:54.421 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54425 1 80 1 2025-10-17 20:13:54.421 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48722 1 109 1 2025-10-17 20:13:54.411 00:00:00.000 UDP 28.104.0.1:54425 -> 198.28.0.2:53 1 64 1 2025-10-17 20:13:54.411 00:00:00.000 UDP 28.104.0.1:48722 -> 198.28.0.2:53 1 64 1 2025-10-17 20:14:04.133 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-17 20:09:52.813 00:05:50.914 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-17 20:14:54.723 00:00:00.000 UDP 28.104.0.1:42200 -> 198.28.0.2:53 1 64 1 2025-10-17 20:14:54.723 00:00:00.000 UDP 28.104.0.1:54002 -> 198.28.0.2:53 1 64 1 2025-10-17 20:14:54.733 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54002 1 80 1 2025-10-17 20:14:54.733 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42200 1 109 1 2025-10-17 20:10:52.639 00:06:00.176 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-17 20:15:55.054 00:00:00.000 UDP 28.104.0.1:36786 -> 198.28.0.2:53 1 64 1 2025-10-17 20:15:55.054 00:00:00.000 UDP 28.104.0.1:44743 -> 198.28.0.2:53 1 64 1 2025-10-17 20:15:55.064 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44743 1 80 1 2025-10-17 20:15:55.064 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36786 1 109 1 2025-10-17 20:12:11.070 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2732 1 2025-10-17 20:16:55.543 00:00:00.000 UDP 28.104.0.1:58746 -> 198.28.0.2:53 1 64 1 2025-10-17 20:16:55.543 00:00:00.000 UDP 28.104.0.1:37252 -> 198.28.0.2:53 1 64 1 2025-10-17 20:16:55.555 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37252 1 109 1 2025-10-17 20:16:55.555 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58746 1 80 1 2025-10-17 20:12:52.737 00:05:51.036 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-17 20:17:55.836 00:00:00.000 UDP 28.104.0.1:43384 -> 198.28.0.2:53 1 64 1 2025-10-17 20:12:52.813 00:06:00.116 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-17 20:17:55.835 00:00:00.000 UDP 28.104.0.1:39569 -> 198.28.0.2:53 1 64 1 2025-10-17 20:17:55.846 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43384 1 109 1 2025-10-17 20:17:55.846 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39569 1 80 1 2025-10-17 20:18:56.142 00:00:00.000 UDP 28.104.0.1:60004 -> 198.28.0.2:53 1 64 1 2025-10-17 20:18:56.142 00:00:00.000 UDP 28.104.0.1:55768 -> 198.28.0.2:53 1 64 1 2025-10-17 20:14:43.718 00:05:09.108 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-17 20:18:56.152 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55768 1 109 1 2025-10-17 20:18:56.152 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60004 1 80 1 2025-10-17 20:19:04.237 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-17 20:14:52.747 00:05:50.972 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-17 20:19:56.451 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59469 1 109 1 2025-10-17 20:19:56.451 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56575 1 80 1 2025-10-17 20:19:56.440 00:00:00.000 UDP 28.104.0.1:56575 -> 198.28.0.2:53 1 64 1 2025-10-17 20:19:56.440 00:00:00.000 UDP 28.104.0.1:59469 -> 198.28.0.2:53 1 64 1 2025-10-17 20:15:52.814 00:05:50.913 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-17 20:20:56.734 00:00:00.000 UDP 28.104.0.1:53683 -> 198.28.0.2:53 1 64 1 2025-10-17 20:20:56.734 00:00:00.000 UDP 28.104.0.1:57495 -> 198.28.0.2:53 1 64 1 2025-10-17 20:20:56.744 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57495 1 80 1 2025-10-17 20:20:56.744 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53683 1 109 1 2025-10-17 20:17:31.074 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2884 1 2025-10-17 20:21:57.055 00:00:00.000 UDP 28.104.0.1:55859 -> 198.28.0.2:53 1 64 1 2025-10-17 20:21:57.055 00:00:00.000 UDP 28.104.0.1:38266 -> 198.28.0.2:53 1 64 1 2025-10-17 20:21:57.064 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55859 1 109 1 2025-10-17 20:21:57.064 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38266 1 80 1 2025-10-17 20:17:52.639 00:06:00.177 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-17 20:22:57.357 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57233 1 109 1 2025-10-17 20:22:57.357 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49050 1 80 1 2025-10-17 20:22:57.347 00:00:00.000 UDP 28.104.0.1:49050 -> 198.28.0.2:53 1 64 1 2025-10-17 20:22:57.347 00:00:00.000 UDP 28.104.0.1:57233 -> 198.28.0.2:53 1 64 1 2025-10-17 20:18:52.750 00:05:51.019 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-17 20:23:57.648 00:00:00.000 UDP 28.104.0.1:52539 -> 198.28.0.2:53 1 64 1 2025-10-17 20:23:57.648 00:00:00.000 UDP 28.104.0.1:43437 -> 198.28.0.2:53 1 64 1 2025-10-17 20:23:57.657 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52539 1 80 1 2025-10-17 20:23:57.657 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43437 1 109 1 2025-10-17 20:24:04.504 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-17 20:19:52.816 00:06:00.118 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-17 20:20:43.718 00:05:09.109 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-17 20:24:57.917 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41383 1 80 1 2025-10-17 20:24:57.917 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46354 1 109 1 2025-10-17 20:24:57.908 00:00:00.000 UDP 28.104.0.1:46354 -> 198.28.0.2:53 1 64 1 2025-10-17 20:24:57.908 00:00:00.000 UDP 28.104.0.1:41383 -> 198.28.0.2:53 1 64 1 2025-10-17 20:20:52.761 00:05:50.958 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-17 20:25:58.205 00:00:00.000 UDP 28.104.0.1:60951 -> 198.28.0.2:53 1 64 1 2025-10-17 20:25:58.204 00:00:00.000 UDP 28.104.0.1:34725 -> 198.28.0.2:53 1 64 1 2025-10-17 20:25:58.215 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60951 1 109 1 2025-10-17 20:25:58.215 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34725 1 80 1 2025-10-17 20:21:52.816 00:05:50.913 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-17 20:26:58.520 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34027 1 80 1 2025-10-17 20:22:51.079 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2916 1 2025-10-17 20:26:58.520 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37887 1 109 1 2025-10-17 20:26:58.509 00:00:00.000 UDP 28.104.0.1:37887 -> 198.28.0.2:53 1 64 1 2025-10-17 20:26:58.509 00:00:00.000 UDP 28.104.0.1:34027 -> 198.28.0.2:53 1 64 1 2025-10-17 20:27:58.820 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40070 1 109 1 2025-10-17 20:27:58.820 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41342 1 80 1 2025-10-17 20:27:58.810 00:00:00.000 UDP 28.104.0.1:41342 -> 198.28.0.2:53 1 64 1 2025-10-17 20:27:58.810 00:00:00.000 UDP 28.104.0.1:40070 -> 198.28.0.2:53 1 64 1 2025-10-17 20:28:59.120 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46927 1 109 1 2025-10-17 20:28:59.120 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50111 1 80 1 2025-10-17 20:28:59.110 00:00:00.000 UDP 28.104.0.1:46927 -> 198.28.0.2:53 1 64 1 2025-10-17 20:28:59.110 00:00:00.000 UDP 28.104.0.1:50111 -> 198.28.0.2:53 1 64 1 2025-10-17 20:29:04.486 00:00:00.025 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-17 20:24:52.751 00:05:51.019 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-17 20:29:59.415 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51028 1 109 1 2025-10-17 20:29:59.415 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36812 1 80 1 2025-10-17 20:24:52.640 00:06:00.178 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-17 20:29:59.404 00:00:00.000 UDP 28.104.0.1:51028 -> 198.28.0.2:53 1 64 1 2025-10-17 20:29:59.404 00:00:00.000 UDP 28.104.0.1:36812 -> 198.28.0.2:53 1 64 1 2025-10-17 20:26:43.718 00:05:09.111 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-17 20:30:59.711 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60753 1 80 1 2025-10-17 20:30:59.711 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35191 1 109 1 2025-10-17 20:30:59.702 00:00:00.000 UDP 28.104.0.1:35191 -> 198.28.0.2:53 1 64 1 2025-10-17 20:30:59.702 00:00:00.000 UDP 28.104.0.1:60753 -> 198.28.0.2:53 1 64 1 2025-10-17 20:26:52.762 00:05:50.958 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-17 20:26:52.818 00:06:00.116 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-17 20:32:00.018 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55681 1 80 1 2025-10-17 20:32:00.019 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45874 1 109 1 2025-10-17 20:32:00.005 00:00:00.000 UDP 28.104.0.1:45874 -> 198.28.0.2:53 1 64 1 2025-10-17 20:32:00.005 00:00:00.000 UDP 28.104.0.1:55681 -> 198.28.0.2:53 1 64 1 2025-10-17 20:28:11.082 00:05:10.010 OSPF 28.0.2.1:0 -> 224.0.0.5:0 34 2360 1 2025-10-17 20:27:52.818 00:05:50.913 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-17 20:33:00.326 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49738 1 80 1 2025-10-17 20:33:00.326 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48873 1 109 1 2025-10-17 20:33:00.317 00:00:00.000 UDP 28.104.0.1:48873 -> 198.28.0.2:53 1 64 1 2025-10-17 20:33:00.317 00:00:00.000 UDP 28.104.0.1:49738 -> 198.28.0.2:53 1 64 1 2025-10-17 20:34:00.631 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43583 1 109 1 2025-10-17 20:34:00.630 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52030 1 80 1 2025-10-17 20:34:00.621 00:00:00.000 UDP 28.104.0.1:52030 -> 198.28.0.2:53 1 64 1 2025-10-17 20:34:00.621 00:00:00.000 UDP 28.104.0.1:43583 -> 198.28.0.2:53 1 64 1 2025-10-17 20:34:04.480 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-17 20:35:00.921 00:00:00.000 UDP 28.104.0.1:34393 -> 198.28.0.2:53 1 64 1 2025-10-17 20:35:00.921 00:00:00.000 UDP 28.104.0.1:55908 -> 198.28.0.2:53 1 64 1 2025-10-17 20:35:00.933 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55908 1 80 1 2025-10-17 20:35:00.932 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34393 1 109 1 2025-10-17 20:30:52.752 00:05:51.019 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-17 20:36:01.253 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42614 1 80 1 2025-10-17 20:36:01.253 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60112 1 109 1 2025-10-17 20:36:01.244 00:00:00.000 UDP 28.104.0.1:42614 -> 198.28.0.2:53 1 64 1 2025-10-17 20:36:01.243 00:00:00.000 UDP 28.104.0.1:60112 -> 198.28.0.2:53 1 64 1 2025-10-17 20:31:52.643 00:06:00.178 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-17 20:37:01.541 00:00:00.000 UDP 28.104.0.1:49116 -> 198.28.0.2:53 1 64 1 2025-10-17 20:37:01.541 00:00:00.000 UDP 28.104.0.1:57779 -> 198.28.0.2:53 1 64 1 2025-10-17 20:32:43.721 00:05:09.110 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-17 20:37:01.552 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49116 1 109 1 2025-10-17 20:37:01.552 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57779 1 80 1 2025-10-17 20:33:31.091 00:05:10.118 OSPF 28.0.2.1:0 -> 224.0.0.5:0 42 2980 1 2025-10-17 20:32:52.763 00:05:50.958 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-17 20:38:01.846 00:00:00.000 UDP 28.104.0.1:45540 -> 198.28.0.2:53 1 64 1 2025-10-17 20:38:01.845 00:00:00.000 UDP 28.104.0.1:59138 -> 198.28.0.2:53 1 64 1 2025-10-17 20:38:01.855 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59138 1 80 1 2025-10-17 20:38:01.855 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45540 1 109 1 2025-10-17 20:33:52.821 00:05:50.911 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-17 20:33:52.820 00:06:00.116 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-17 20:39:02.136 00:00:00.000 UDP 28.104.0.1:59907 -> 198.28.0.2:53 1 64 1 2025-10-17 20:39:02.136 00:00:00.000 UDP 28.104.0.1:59429 -> 198.28.0.2:53 1 64 1 2025-10-17 20:39:04.642 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-17 20:39:02.147 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59429 1 80 1 2025-10-17 20:39:02.147 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59907 1 109 1 2025-10-17 20:40:02.400 00:00:00.000 UDP 28.104.0.1:39091 -> 198.28.0.2:53 1 64 1 2025-10-17 20:40:02.401 00:00:00.000 UDP 28.104.0.1:49714 -> 198.28.0.2:53 1 64 1 2025-10-17 20:40:02.410 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39091 1 80 1 2025-10-17 20:40:02.411 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49714 1 109 1 2025-10-17 20:41:02.655 00:00:00.000 UDP 28.104.0.1:33001 -> 198.28.0.2:53 1 64 1 2025-10-17 20:41:02.655 00:00:00.000 UDP 28.104.0.1:53558 -> 198.28.0.2:53 1 64 1 2025-10-17 20:41:02.665 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33001 1 109 1 2025-10-17 20:41:02.665 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53558 1 80 1 2025-10-17 20:36:52.756 00:05:51.017 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-17 20:42:03.606 00:00:00.000 UDP 28.104.0.1:53561 -> 198.28.0.2:53 1 64 1 2025-10-17 20:42:03.606 00:00:00.000 UDP 28.104.0.1:54540 -> 198.28.0.2:53 1 64 1 2025-10-17 20:42:03.617 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53561 1 80 1 2025-10-17 20:42:03.617 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54540 1 109 1 2025-10-17 20:38:43.721 00:05:09.111 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-17 20:43:03.894 00:00:00.000 UDP 28.104.0.1:49561 -> 198.28.0.2:53 1 64 1 2025-10-17 20:43:03.895 00:00:00.000 UDP 28.104.0.1:36030 -> 198.28.0.2:53 1 64 1 2025-10-17 20:38:51.098 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2528 1 2025-10-17 20:43:03.904 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49561 1 80 1 2025-10-17 20:43:03.905 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36030 1 109 1 2025-10-17 20:38:52.766 00:05:50.957 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-17 20:38:52.644 00:06:00.178 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-17 20:44:04.201 00:00:00.000 UDP 28.104.0.1:42618 -> 198.28.0.2:53 1 64 1 2025-10-17 20:44:04.202 00:00:00.000 UDP 28.104.0.1:45549 -> 198.28.0.2:53 1 64 1 2025-10-17 20:44:04.670 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-17 20:44:04.211 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42618 1 109 1 2025-10-17 20:44:04.212 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45549 1 80 1 2025-10-17 20:39:52.821 00:05:50.911 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-17 20:45:04.465 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42741 1 80 1 2025-10-17 20:45:04.465 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35147 1 109 1 2025-10-17 20:45:04.454 00:00:00.000 UDP 28.104.0.1:42741 -> 198.28.0.2:53 1 64 1 2025-10-17 20:45:04.454 00:00:00.000 UDP 28.104.0.1:35147 -> 198.28.0.2:53 1 64 1 2025-10-17 20:40:52.821 00:06:00.116 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-17 20:46:04.721 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40678 1 80 1 2025-10-17 20:46:04.722 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49040 1 109 1 2025-10-17 20:46:04.712 00:00:00.000 UDP 28.104.0.1:49040 -> 198.28.0.2:53 1 64 1 2025-10-17 20:46:04.712 00:00:00.000 UDP 28.104.0.1:40678 -> 198.28.0.2:53 1 64 1 2025-10-17 20:47:04.988 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48381 1 80 1 2025-10-17 20:47:04.988 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50444 1 109 1 2025-10-17 20:47:04.978 00:00:00.000 UDP 28.104.0.1:50444 -> 198.28.0.2:53 1 64 1 2025-10-17 20:47:04.978 00:00:00.000 UDP 28.104.0.1:48381 -> 198.28.0.2:53 1 64 1 2025-10-17 20:42:52.756 00:05:51.017 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-17 20:48:05.239 00:00:00.000 UDP 28.104.0.1:56703 -> 198.28.0.2:53 1 64 1 2025-10-17 20:48:05.239 00:00:00.000 UDP 28.104.0.1:53341 -> 198.28.0.2:53 1 64 1 2025-10-17 20:48:05.250 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53341 1 80 1 2025-10-17 20:48:05.250 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56703 1 109 1 2025-10-17 20:44:11.101 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 42 3020 1 2025-10-17 20:44:43.722 00:05:09.115 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-17 20:49:04.941 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-17 20:49:05.550 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59735 1 80 1 2025-10-17 20:49:05.550 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45437 1 109 1 2025-10-17 20:49:05.540 00:00:00.000 UDP 28.104.0.1:59735 -> 198.28.0.2:53 1 64 1 2025-10-17 20:49:05.539 00:00:00.000 UDP 28.104.0.1:45437 -> 198.28.0.2:53 1 64 1 2025-10-17 20:44:52.766 00:05:50.957 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-17 20:50:05.847 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49239 1 109 1 2025-10-17 20:50:05.846 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49554 1 80 1 2025-10-17 20:50:05.834 00:00:00.000 UDP 28.104.0.1:49554 -> 198.28.0.2:53 1 64 1 2025-10-17 20:50:05.834 00:00:00.000 UDP 28.104.0.1:49239 -> 198.28.0.2:53 1 64 1 2025-10-17 20:45:52.823 00:05:50.911 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-17 20:45:52.648 00:06:00.179 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-17 20:51:06.126 00:00:00.000 UDP 28.104.0.1:56908 -> 198.28.0.2:53 1 64 1 2025-10-17 20:51:06.126 00:00:00.000 UDP 28.104.0.1:54009 -> 198.28.0.2:53 1 64 1 2025-10-17 20:51:06.138 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56908 1 109 1 2025-10-17 20:51:06.138 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54009 1 80 1 2025-10-17 20:52:06.424 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49202 1 80 1 2025-10-17 20:52:06.424 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41618 1 109 1 2025-10-17 20:52:06.415 00:00:00.000 UDP 28.104.0.1:49202 -> 198.28.0.2:53 1 64 1 2025-10-17 20:52:06.415 00:00:00.000 UDP 28.104.0.1:41618 -> 198.28.0.2:53 1 64 1 2025-10-17 20:47:52.827 00:06:00.114 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-17 20:53:06.732 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35627 1 109 1 2025-10-17 20:53:06.733 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43432 1 80 1 2025-10-17 20:53:06.723 00:00:00.000 UDP 28.104.0.1:35627 -> 198.28.0.2:53 1 64 1 2025-10-17 20:53:06.724 00:00:00.000 UDP 28.104.0.1:43432 -> 198.28.0.2:53 1 64 1 2025-10-17 20:49:31.106 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2528 1 2025-10-17 20:48:52.757 00:05:51.017 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-17 20:54:05.072 00:00:00.043 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-17 20:54:07.407 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43940 1 80 1 2025-10-17 20:54:07.407 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36092 1 109 1 2025-10-17 20:54:07.397 00:00:00.000 UDP 28.104.0.1:36092 -> 198.28.0.2:53 1 64 1 2025-10-17 20:54:07.397 00:00:00.000 UDP 28.104.0.1:43940 -> 198.28.0.2:53 1 64 1 2025-10-17 20:50:43.723 00:05:09.113 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-17 20:55:07.699 00:00:00.000 UDP 28.104.0.1:45914 -> 198.28.0.2:53 1 64 1 2025-10-17 20:55:07.699 00:00:00.000 UDP 28.104.0.1:55069 -> 198.28.0.2:53 1 64 1 2025-10-17 20:55:07.711 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55069 1 109 1 2025-10-17 20:55:07.710 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45914 1 80 1 2025-10-17 20:50:52.769 00:05:50.957 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-17 20:56:08.048 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57978 1 80 1 2025-10-17 20:56:08.049 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41894 1 109 1 2025-10-17 20:56:08.040 00:00:00.000 UDP 28.104.0.1:41894 -> 198.28.0.2:53 1 64 1 2025-10-17 20:56:08.038 00:00:00.000 UDP 28.104.0.1:57978 -> 198.28.0.2:53 1 64 1 2025-10-17 20:51:52.827 00:05:50.908 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-17 20:57:08.330 00:00:00.000 UDP 28.104.0.1:42365 -> 198.28.0.2:53 1 64 1 2025-10-17 20:57:08.330 00:00:00.000 UDP 28.104.0.1:54943 -> 198.28.0.2:53 1 64 1 2025-10-17 20:57:08.341 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54943 1 109 1 2025-10-17 20:57:08.341 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42365 1 80 1 2025-10-17 20:52:52.650 00:06:00.180 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-17 20:58:08.587 00:00:00.000 UDP 28.104.0.1:36287 -> 198.28.0.2:53 1 64 1 2025-10-17 20:58:08.587 00:00:00.000 UDP 28.104.0.1:50689 -> 198.28.0.2:53 1 64 1 2025-10-17 20:58:08.598 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50689 1 109 1 2025-10-17 20:58:08.598 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36287 1 80 1 Summary: total flows: 316, total bytes: 95884, total packets: 1414, avg bps: 199, avg pps: 0, avg bpp: 67 Time window: 2025-10-17 19:54:52 - 2025-10-17 20:58:52 Total flows processed: 316, passed: 316, Blocks skipped: 0, Bytes read: 32928 Sys: 0.0047s User: 0.0028s Wall: 0.0046s flows/second: 68769.8 Runtime: 0.0046s