Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-19 21:54:53.791 00:05:51.094 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-19 21:59:42.322 00:00:00.000 UDP 28.104.0.1:49539 -> 198.28.0.2:53 1 64 1 2025-10-19 21:59:42.322 00:00:00.000 UDP 28.104.0.1:49139 -> 198.28.0.2:53 1 64 1 2025-10-19 21:59:42.332 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49139 1 80 1 2025-10-19 21:59:42.332 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49539 1 109 1 2025-10-19 22:00:03.984 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-19 22:00:42.624 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59877 1 80 1 2025-10-19 22:00:42.624 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45333 1 109 1 2025-10-19 21:55:53.854 00:05:50.983 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-19 22:00:42.614 00:00:00.000 UDP 28.104.0.1:45333 -> 198.28.0.2:53 1 64 1 2025-10-19 22:00:42.614 00:00:00.000 UDP 28.104.0.1:59877 -> 198.28.0.2:53 1 64 1 2025-10-19 22:01:42.913 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43803 1 109 1 2025-10-19 22:01:42.913 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44034 1 80 1 2025-10-19 21:56:53.803 00:05:51.034 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-19 22:01:42.901 00:00:00.000 UDP 28.104.0.1:44034 -> 198.28.0.2:53 1 64 1 2025-10-19 22:01:42.901 00:00:00.000 UDP 28.104.0.1:43803 -> 198.28.0.2:53 1 64 1 2025-10-19 21:58:25.245 00:05:10.009 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2712 1 2025-10-19 22:02:43.220 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58889 1 80 1 2025-10-19 22:02:43.221 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42492 1 109 1 2025-10-19 22:02:43.210 00:00:00.000 UDP 28.104.0.1:58889 -> 198.28.0.2:53 1 64 1 2025-10-19 22:02:43.211 00:00:00.000 UDP 28.104.0.1:42492 -> 198.28.0.2:53 1 64 1 2025-10-19 21:57:53.843 00:05:51.005 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-19 21:57:53.843 00:06:00.065 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-19 21:57:53.708 00:06:00.138 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-19 22:03:43.550 00:00:00.000 UDP 28.104.0.1:40474 -> 198.28.0.2:53 1 64 1 2025-10-19 22:03:43.551 00:00:00.000 UDP 28.104.0.1:47229 -> 198.28.0.2:53 1 64 1 2025-10-19 22:03:43.561 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47229 1 109 1 2025-10-19 22:03:43.561 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40474 1 80 1 2025-10-19 22:04:43.946 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38969 1 109 1 2025-10-19 22:04:43.946 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50706 1 80 1 2025-10-19 22:04:43.936 00:00:00.000 UDP 28.104.0.1:50706 -> 198.28.0.2:53 1 64 1 2025-10-19 22:04:43.936 00:00:00.000 UDP 28.104.0.1:38969 -> 198.28.0.2:53 1 64 1 2025-10-19 22:05:04.026 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-19 22:00:53.792 00:05:51.096 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-19 22:05:44.249 00:00:00.000 UDP 28.104.0.1:39556 -> 198.28.0.2:53 1 64 1 2025-10-19 22:05:44.249 00:00:00.000 UDP 28.104.0.1:51077 -> 198.28.0.2:53 1 64 1 2025-10-19 22:05:44.259 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51077 1 80 1 2025-10-19 22:05:44.259 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39556 1 109 1 2025-10-19 22:06:44.563 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53271 1 109 1 2025-10-19 22:01:53.854 00:05:50.985 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-19 22:06:44.563 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41806 1 80 1 2025-10-19 22:06:44.553 00:00:00.000 UDP 28.104.0.1:41806 -> 198.28.0.2:53 1 64 1 2025-10-19 22:06:44.553 00:00:00.000 UDP 28.104.0.1:53271 -> 198.28.0.2:53 1 64 1 2025-10-19 22:02:53.802 00:05:51.036 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-19 22:07:44.858 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43129 1 109 1 2025-10-19 22:07:44.858 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33905 1 80 1 2025-10-19 22:07:44.847 00:00:00.000 UDP 28.104.0.1:33905 -> 198.28.0.2:53 1 64 1 2025-10-19 22:07:44.847 00:00:00.000 UDP 28.104.0.1:43129 -> 198.28.0.2:53 1 64 1 2025-10-19 22:03:45.255 00:05:10.822 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2568 1 2025-10-19 22:08:45.172 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40559 1 80 1 2025-10-19 22:08:45.172 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57206 1 109 1 2025-10-19 22:08:45.163 00:00:00.000 UDP 28.104.0.1:57206 -> 198.28.0.2:53 1 64 1 2025-10-19 22:03:53.847 00:05:51.002 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-19 22:08:45.163 00:00:00.000 UDP 28.104.0.1:40559 -> 198.28.0.2:53 1 64 1 2025-10-19 22:09:46.654 00:00:00.000 UDP 28.104.0.1:43657 -> 198.28.0.2:53 1 64 1 2025-10-19 22:09:46.654 00:00:00.000 UDP 28.104.0.1:36961 -> 198.28.0.2:53 1 64 1 2025-10-19 22:09:46.663 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36961 1 80 1 2025-10-19 22:09:46.663 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43657 1 109 1 2025-10-19 22:04:53.846 00:06:00.064 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-19 22:04:53.710 00:06:00.145 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-19 22:10:04.332 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-19 22:10:46.946 00:00:00.000 UDP 28.104.0.1:59596 -> 198.28.0.2:53 1 64 1 2025-10-19 22:10:46.946 00:00:00.000 UDP 28.104.0.1:55152 -> 198.28.0.2:53 1 64 1 2025-10-19 22:10:46.955 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55152 1 80 1 2025-10-19 22:10:46.955 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59596 1 109 1 2025-10-19 22:06:53.793 00:05:51.097 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-19 22:11:47.243 00:00:00.000 UDP 28.104.0.1:43220 -> 198.28.0.2:53 1 64 1 2025-10-19 22:11:47.243 00:00:00.000 UDP 28.104.0.1:50174 -> 198.28.0.2:53 1 64 1 2025-10-19 22:11:47.254 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43220 1 80 1 2025-10-19 22:11:47.254 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50174 1 109 1 2025-10-19 22:07:53.864 00:05:50.976 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-19 22:12:47.535 00:00:00.000 UDP 28.104.0.1:59970 -> 198.28.0.2:53 1 64 1 2025-10-19 22:12:47.535 00:00:00.000 UDP 28.104.0.1:36378 -> 198.28.0.2:53 1 64 1 2025-10-19 22:12:47.545 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36378 1 80 1 2025-10-19 22:12:47.545 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59970 1 109 1 2025-10-19 22:09:05.262 00:05:10.899 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2916 1 2025-10-19 22:08:53.805 00:05:51.035 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-19 22:13:47.850 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42593 1 109 1 2025-10-19 22:13:47.850 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44262 1 80 1 2025-10-19 22:13:47.840 00:00:00.000 UDP 28.104.0.1:42593 -> 198.28.0.2:53 1 64 1 2025-10-19 22:13:47.840 00:00:00.000 UDP 28.104.0.1:44262 -> 198.28.0.2:53 1 64 1 2025-10-19 22:14:48.141 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55847 1 80 1 2025-10-19 22:14:48.140 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34098 1 109 1 2025-10-19 22:09:53.854 00:05:50.996 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-19 22:14:48.129 00:00:00.000 UDP 28.104.0.1:55847 -> 198.28.0.2:53 1 64 1 2025-10-19 22:14:48.129 00:00:00.000 UDP 28.104.0.1:34098 -> 198.28.0.2:53 1 64 1 2025-10-19 22:15:04.301 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-19 22:15:48.390 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45481 1 80 1 2025-10-19 22:15:48.390 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34167 1 109 1 2025-10-19 22:15:48.381 00:00:00.000 UDP 28.104.0.1:34167 -> 198.28.0.2:53 1 64 1 2025-10-19 22:15:48.381 00:00:00.000 UDP 28.104.0.1:45481 -> 198.28.0.2:53 1 64 1 2025-10-19 22:16:48.642 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56925 1 80 1 2025-10-19 22:16:48.642 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39238 1 109 1 2025-10-19 22:16:48.632 00:00:00.000 UDP 28.104.0.1:56925 -> 198.28.0.2:53 1 64 1 2025-10-19 22:16:48.632 00:00:00.000 UDP 28.104.0.1:39238 -> 198.28.0.2:53 1 64 1 2025-10-19 22:11:53.856 00:06:00.060 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-19 22:11:53.712 00:06:00.145 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-19 22:12:53.796 00:05:51.095 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-19 22:17:50.489 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50282 1 109 1 2025-10-19 22:17:50.489 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39565 1 80 1 2025-10-19 22:17:50.478 00:00:00.000 UDP 28.104.0.1:39565 -> 198.28.0.2:53 1 64 1 2025-10-19 22:17:50.479 00:00:00.000 UDP 28.104.0.1:50282 -> 198.28.0.2:53 1 64 1 2025-10-19 22:14:25.280 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2672 1 2025-10-19 22:13:53.865 00:05:50.977 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-19 22:18:50.782 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42120 1 109 1 2025-10-19 22:18:50.782 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52853 1 80 1 2025-10-19 22:18:50.770 00:00:00.000 UDP 28.104.0.1:42120 -> 198.28.0.2:53 1 64 1 2025-10-19 22:18:50.770 00:00:00.000 UDP 28.104.0.1:52853 -> 198.28.0.2:53 1 64 1 2025-10-19 22:19:51.081 00:00:00.000 UDP 28.104.0.1:57555 -> 198.28.0.2:53 1 64 1 2025-10-19 22:19:51.081 00:00:00.000 UDP 28.104.0.1:36877 -> 198.28.0.2:53 1 64 1 2025-10-19 22:14:53.806 00:05:51.036 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-19 22:19:51.092 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57555 1 109 1 2025-10-19 22:19:51.092 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36877 1 80 1 2025-10-19 22:20:04.484 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-19 22:15:53.855 00:05:50.996 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-19 22:20:51.712 00:00:00.000 UDP 28.104.0.1:60431 -> 198.28.0.2:53 1 64 1 2025-10-19 22:20:51.713 00:00:00.000 UDP 28.104.0.1:43736 -> 198.28.0.2:53 1 64 1 2025-10-19 22:20:51.725 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43736 1 109 1 2025-10-19 22:20:51.724 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60431 1 80 1 2025-10-19 22:21:52.004 00:00:00.000 UDP 28.104.0.1:51088 -> 198.28.0.2:53 1 64 1 2025-10-19 22:21:52.004 00:00:00.000 UDP 28.104.0.1:50601 -> 198.28.0.2:53 1 64 1 2025-10-19 22:21:52.018 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51088 1 80 1 2025-10-19 22:21:52.015 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50601 1 109 1 2025-10-19 22:22:52.278 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57398 1 80 1 2025-10-19 22:22:52.279 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35620 1 109 1 2025-10-19 22:22:52.268 00:00:00.000 UDP 28.104.0.1:57398 -> 198.28.0.2:53 1 64 1 2025-10-19 22:22:52.268 00:00:00.000 UDP 28.104.0.1:35620 -> 198.28.0.2:53 1 64 1 2025-10-19 22:18:53.796 00:05:51.097 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-19 22:18:53.857 00:06:00.058 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-19 22:23:52.571 00:00:00.000 UDP 28.104.0.1:33956 -> 198.28.0.2:53 1 64 1 2025-10-19 22:18:53.714 00:06:00.146 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-19 22:23:52.571 00:00:00.000 UDP 28.104.0.1:34126 -> 198.28.0.2:53 1 64 1 2025-10-19 22:23:52.581 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34126 1 80 1 2025-10-19 22:19:45.287 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2708 1 2025-10-19 22:23:52.581 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33956 1 109 1 2025-10-19 22:19:53.866 00:05:50.977 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-19 22:24:52.871 00:00:00.000 UDP 28.104.0.1:50003 -> 198.28.0.2:53 1 64 1 2025-10-19 22:24:52.871 00:00:00.000 UDP 28.104.0.1:41165 -> 198.28.0.2:53 1 64 1 2025-10-19 22:24:52.882 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50003 1 109 1 2025-10-19 22:24:52.882 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41165 1 80 1 2025-10-19 22:25:03.931 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-19 22:20:53.808 00:05:51.035 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-19 22:25:53.357 00:00:00.000 UDP 28.104.0.1:40832 -> 198.28.0.2:53 1 64 1 2025-10-19 22:25:53.357 00:00:00.000 UDP 28.104.0.1:57265 -> 198.28.0.2:53 1 64 1 2025-10-19 22:25:53.367 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57265 1 80 1 2025-10-19 22:25:53.367 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40832 1 109 1 2025-10-19 22:21:53.857 00:05:50.997 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-19 22:26:53.651 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60499 1 109 1 2025-10-19 22:26:53.651 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45201 1 80 1 2025-10-19 22:26:53.641 00:00:00.000 UDP 28.104.0.1:60499 -> 198.28.0.2:53 1 64 1 2025-10-19 22:26:53.641 00:00:00.000 UDP 28.104.0.1:45201 -> 198.28.0.2:53 1 64 1 2025-10-19 22:27:53.904 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36612 1 80 1 2025-10-19 22:27:53.904 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55608 1 109 1 2025-10-19 22:27:53.894 00:00:00.000 UDP 28.104.0.1:36612 -> 198.28.0.2:53 1 64 1 2025-10-19 22:27:53.894 00:00:00.000 UDP 28.104.0.1:55608 -> 198.28.0.2:53 1 64 1 2025-10-19 22:28:54.232 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35217 1 80 1 2025-10-19 22:28:54.231 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33586 1 109 1 2025-10-19 22:28:54.220 00:00:00.000 UDP 28.104.0.1:33586 -> 198.28.0.2:53 1 64 1 2025-10-19 22:28:54.221 00:00:00.000 UDP 28.104.0.1:35217 -> 198.28.0.2:53 1 64 1 2025-10-19 22:25:05.293 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2920 1 2025-10-19 22:24:53.800 00:05:51.095 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-19 22:29:54.597 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34463 1 80 1 2025-10-19 22:29:54.597 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39381 1 109 1 2025-10-19 22:29:54.587 00:00:00.000 UDP 28.104.0.1:34463 -> 198.28.0.2:53 1 64 1 2025-10-19 22:29:54.586 00:00:00.000 UDP 28.104.0.1:39381 -> 198.28.0.2:53 1 64 1 2025-10-19 22:30:04.483 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-19 22:25:53.871 00:05:50.974 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-19 22:30:54.885 00:00:00.000 UDP 28.104.0.1:50747 -> 198.28.0.2:53 1 64 1 2025-10-19 22:30:54.885 00:00:00.000 UDP 28.104.0.1:45193 -> 198.28.0.2:53 1 64 1 2025-10-19 22:25:53.860 00:06:00.057 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-19 22:25:53.715 00:06:00.147 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-19 22:30:54.895 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50747 1 80 1 2025-10-19 22:30:54.895 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45193 1 109 1 2025-10-19 22:26:53.810 00:05:51.035 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-19 22:31:55.220 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57836 1 109 1 2025-10-19 22:31:55.220 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59234 1 80 1 2025-10-19 22:31:55.209 00:00:00.000 UDP 28.104.0.1:59234 -> 198.28.0.2:53 1 64 1 2025-10-19 22:31:55.209 00:00:00.000 UDP 28.104.0.1:57836 -> 198.28.0.2:53 1 64 1 2025-10-19 22:27:53.860 00:05:50.995 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-19 22:32:55.465 00:00:00.000 UDP 28.104.0.1:48450 -> 198.28.0.2:53 1 64 1 2025-10-19 22:32:55.465 00:00:00.000 UDP 28.104.0.1:56773 -> 198.28.0.2:53 1 64 1 2025-10-19 22:32:55.475 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48450 1 80 1 2025-10-19 22:32:55.476 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56773 1 109 1 2025-10-19 22:33:55.780 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49145 1 109 1 2025-10-19 22:33:55.780 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34901 1 80 1 2025-10-19 22:33:55.769 00:00:00.000 UDP 28.104.0.1:49145 -> 198.28.0.2:53 1 64 1 2025-10-19 22:33:55.769 00:00:00.000 UDP 28.104.0.1:34901 -> 198.28.0.2:53 1 64 1 2025-10-19 22:30:25.302 00:05:10.010 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2464 1 2025-10-19 22:34:56.089 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48870 1 80 1 2025-10-19 22:34:56.088 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53437 1 109 1 2025-10-19 22:34:56.079 00:00:00.000 UDP 28.104.0.1:53437 -> 198.28.0.2:53 1 64 1 2025-10-19 22:34:56.079 00:00:00.000 UDP 28.104.0.1:48870 -> 198.28.0.2:53 1 64 1 2025-10-19 22:35:05.127 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-19 22:30:53.801 00:05:51.095 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-19 22:35:56.376 00:00:00.000 UDP 28.104.0.1:50311 -> 198.28.0.2:53 1 64 1 2025-10-19 22:35:56.376 00:00:00.000 UDP 28.104.0.1:52838 -> 198.28.0.2:53 1 64 1 2025-10-19 22:35:56.386 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52838 1 109 1 2025-10-19 22:35:56.386 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50311 1 80 1 2025-10-19 22:31:53.872 00:05:50.973 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-19 22:36:56.679 00:00:00.000 UDP 28.104.0.1:45945 -> 198.28.0.2:53 1 64 1 2025-10-19 22:36:56.679 00:00:00.000 UDP 28.104.0.1:54902 -> 198.28.0.2:53 1 64 1 2025-10-19 22:36:56.691 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54902 1 80 1 2025-10-19 22:36:56.691 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45945 1 109 1 2025-10-19 22:32:53.811 00:05:51.035 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-19 22:37:56.989 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36472 1 80 1 2025-10-19 22:37:56.988 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43781 1 109 1 2025-10-19 22:37:56.978 00:00:00.000 UDP 28.104.0.1:43781 -> 198.28.0.2:53 1 64 1 2025-10-19 22:32:53.862 00:06:00.056 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-19 22:37:56.978 00:00:00.000 UDP 28.104.0.1:36472 -> 198.28.0.2:53 1 64 1 2025-10-19 22:32:53.719 00:06:00.144 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-19 22:33:53.863 00:05:50.993 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-19 22:38:57.336 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54781 1 80 1 2025-10-19 22:38:57.336 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50253 1 109 1 2025-10-19 22:38:57.325 00:00:00.000 UDP 28.104.0.1:50253 -> 198.28.0.2:53 1 64 1 2025-10-19 22:38:57.325 00:00:00.000 UDP 28.104.0.1:54781 -> 198.28.0.2:53 1 64 1 2025-10-19 22:35:45.313 00:05:10.009 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2896 1 2025-10-19 22:39:57.633 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50243 1 80 1 2025-10-19 22:39:57.632 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59601 1 109 1 2025-10-19 22:39:57.621 00:00:00.000 UDP 28.104.0.1:50243 -> 198.28.0.2:53 1 64 1 2025-10-19 22:39:57.621 00:00:00.000 UDP 28.104.0.1:59601 -> 198.28.0.2:53 1 64 1 2025-10-19 22:40:04.727 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-19 22:40:57.868 00:00:00.000 UDP 28.104.0.1:58021 -> 198.28.0.2:53 1 64 1 2025-10-19 22:40:57.868 00:00:00.000 UDP 28.104.0.1:50919 -> 198.28.0.2:53 1 64 1 2025-10-19 22:40:57.879 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58021 1 109 1 2025-10-19 22:40:57.879 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50919 1 80 1 2025-10-19 22:36:53.801 00:05:51.095 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-19 22:41:58.200 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45526 1 80 1 2025-10-19 22:41:58.200 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34055 1 109 1 2025-10-19 22:41:58.188 00:00:00.000 UDP 28.104.0.1:34055 -> 198.28.0.2:53 1 64 1 2025-10-19 22:41:58.188 00:00:00.000 UDP 28.104.0.1:45526 -> 198.28.0.2:53 1 64 1 2025-10-19 22:37:53.874 00:05:50.973 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-19 22:42:58.493 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60050 1 109 1 2025-10-19 22:42:58.493 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40610 1 80 1 2025-10-19 22:42:58.484 00:00:00.000 UDP 28.104.0.1:40610 -> 198.28.0.2:53 1 64 1 2025-10-19 22:42:58.484 00:00:00.000 UDP 28.104.0.1:60050 -> 198.28.0.2:53 1 64 1 2025-10-19 22:38:53.811 00:05:51.035 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-19 22:43:58.733 00:00:00.000 UDP 28.104.0.1:36458 -> 198.28.0.2:53 1 64 1 2025-10-19 22:43:58.733 00:00:00.000 UDP 28.104.0.1:59123 -> 198.28.0.2:53 1 64 1 2025-10-19 22:43:58.744 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36458 1 80 1 2025-10-19 22:43:58.744 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59123 1 109 1 2025-10-19 22:39:53.863 00:05:50.994 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-19 22:39:53.864 00:06:00.056 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-19 22:39:53.722 00:06:00.143 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-19 22:44:59.055 00:00:00.000 UDP 28.104.0.1:43678 -> 198.28.0.2:53 1 64 1 2025-10-19 22:44:59.055 00:00:00.000 UDP 28.104.0.1:48480 -> 198.28.0.2:53 1 64 1 2025-10-19 22:44:59.065 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43678 1 80 1 2025-10-19 22:44:59.065 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48480 1 109 1 2025-10-19 22:45:04.729 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-19 22:41:05.323 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2716 1 2025-10-19 22:45:59.354 00:00:00.000 UDP 28.104.0.1:59060 -> 198.28.0.2:53 1 64 1 2025-10-19 22:45:59.354 00:00:00.000 UDP 28.104.0.1:34680 -> 198.28.0.2:53 1 64 1 2025-10-19 22:45:59.366 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34680 1 80 1 2025-10-19 22:45:59.366 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59060 1 109 1 2025-10-19 22:46:59.667 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55690 1 109 1 2025-10-19 22:46:59.667 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35557 1 80 1 2025-10-19 22:46:59.657 00:00:00.000 UDP 28.104.0.1:55690 -> 198.28.0.2:53 1 64 1 2025-10-19 22:46:59.657 00:00:00.000 UDP 28.104.0.1:35557 -> 198.28.0.2:53 1 64 1 2025-10-19 22:42:53.804 00:05:51.094 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-19 22:48:00.272 00:00:00.000 UDP 28.104.0.1:33680 -> 198.28.0.2:53 1 64 1 2025-10-19 22:48:00.272 00:00:00.000 UDP 28.104.0.1:50219 -> 198.28.0.2:53 1 64 1 2025-10-19 22:48:00.283 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33680 1 80 1 2025-10-19 22:48:00.283 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50219 1 109 1 2025-10-19 22:43:53.874 00:05:50.974 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-19 22:49:00.562 00:00:00.000 UDP 28.104.0.1:60345 -> 198.28.0.2:53 1 64 1 2025-10-19 22:49:00.562 00:00:00.000 UDP 28.104.0.1:51004 -> 198.28.0.2:53 1 64 1 2025-10-19 22:49:00.572 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60345 1 80 1 2025-10-19 22:49:00.572 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51004 1 109 1 2025-10-19 22:44:53.813 00:05:51.035 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-19 22:50:00.868 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46527 1 109 1 2025-10-19 22:50:00.868 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39032 1 80 1 2025-10-19 22:50:00.859 00:00:00.000 UDP 28.104.0.1:39032 -> 198.28.0.2:53 1 64 1 2025-10-19 22:50:00.859 00:00:00.000 UDP 28.104.0.1:46527 -> 198.28.0.2:53 1 64 1 2025-10-19 22:50:04.910 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-19 22:46:25.329 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2860 1 2025-10-19 22:45:53.864 00:05:50.994 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-19 22:51:01.188 00:00:00.000 UDP 28.104.0.1:42620 -> 198.28.0.2:53 1 64 1 2025-10-19 22:51:01.188 00:00:00.000 UDP 28.104.0.1:45044 -> 198.28.0.2:53 1 64 1 2025-10-19 22:51:01.198 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45044 1 80 1 2025-10-19 22:51:01.198 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42620 1 109 1 2025-10-19 22:46:53.724 00:06:00.143 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-19 22:46:53.865 00:06:00.057 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-19 22:52:01.451 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53856 1 80 1 2025-10-19 22:52:01.452 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51860 1 109 1 2025-10-19 22:52:01.443 00:00:00.000 UDP 28.104.0.1:51860 -> 198.28.0.2:53 1 64 1 2025-10-19 22:52:01.442 00:00:00.000 UDP 28.104.0.1:53856 -> 198.28.0.2:53 1 64 1 2025-10-19 22:53:01.733 00:00:00.000 UDP 28.104.0.1:46328 -> 198.28.0.2:53 1 64 1 2025-10-19 22:53:01.733 00:00:00.000 UDP 28.104.0.1:48842 -> 198.28.0.2:53 1 64 1 2025-10-19 22:53:01.744 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46328 1 80 1 2025-10-19 22:53:01.744 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48842 1 109 1 2025-10-19 22:48:53.806 00:05:51.094 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-19 22:54:02.049 00:00:00.000 UDP 28.104.0.1:33325 -> 198.28.0.2:53 1 64 1 2025-10-19 22:54:02.049 00:00:00.000 UDP 28.104.0.1:41012 -> 198.28.0.2:53 1 64 1 2025-10-19 22:54:02.060 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41012 1 80 1 2025-10-19 22:54:02.060 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33325 1 109 1 2025-10-19 22:49:53.876 00:05:50.974 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-19 22:55:02.357 00:00:00.000 UDP 28.104.0.1:55618 -> 198.28.0.2:53 1 64 1 2025-10-19 22:55:02.357 00:00:00.000 UDP 28.104.0.1:48829 -> 198.28.0.2:53 1 64 1 2025-10-19 22:55:04.990 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-19 22:55:02.367 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55618 1 109 1 2025-10-19 22:55:02.367 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48829 1 80 1 2025-10-19 22:50:53.815 00:05:51.034 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-19 22:51:45.333 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2592 1 2025-10-19 22:56:02.618 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57773 1 109 1 2025-10-19 22:56:02.619 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49905 1 80 1 2025-10-19 22:56:02.609 00:00:00.000 UDP 28.104.0.1:49905 -> 198.28.0.2:53 1 64 1 2025-10-19 22:56:02.608 00:00:00.000 UDP 28.104.0.1:57773 -> 198.28.0.2:53 1 64 1 2025-10-19 22:51:53.866 00:05:50.995 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-19 22:57:02.899 00:00:00.000 UDP 28.104.0.1:47276 -> 198.28.0.2:53 1 64 1 2025-10-19 22:57:02.899 00:00:00.000 UDP 28.104.0.1:60162 -> 198.28.0.2:53 1 64 1 2025-10-19 22:57:02.909 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60162 1 109 1 2025-10-19 22:57:02.909 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47276 1 80 1 2025-10-19 22:58:03.212 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60592 1 80 1 2025-10-19 22:58:03.213 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50897 1 109 1 2025-10-19 22:58:03.202 00:00:00.000 UDP 28.104.0.1:60592 -> 198.28.0.2:53 1 64 1 2025-10-19 22:58:03.202 00:00:00.000 UDP 28.104.0.1:50897 -> 198.28.0.2:53 1 64 1 Summary: total flows: 315, total bytes: 95047, total packets: 1400, avg bps: 200, avg pps: 0, avg bpp: 67 Time window: 2025-10-19 21:54:53 - 2025-10-19 22:58:03 Total flows processed: 315, passed: 315, Blocks skipped: 0, Bytes read: 32824 Sys: 0.0037s User: 0.0019s Wall: 0.0036s flows/second: 88534.9 Runtime: 0.0036s