Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-20 14:54:45.209 00:05:08.996 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-20 14:59:04.868 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34469 1 80 1 2025-10-20 14:59:04.868 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56374 1 109 1 2025-10-20 14:59:04.857 00:00:00.000 UDP 28.104.0.1:56374 -> 198.28.0.2:53 1 64 1 2025-10-20 14:59:04.857 00:00:00.000 UDP 28.104.0.1:34469 -> 198.28.0.2:53 1 64 1 2025-10-20 14:54:54.175 00:05:50.985 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-20 15:00:05.184 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56012 1 109 1 2025-10-20 15:00:05.184 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55697 1 80 1 2025-10-20 15:00:05.174 00:00:00.000 UDP 28.104.0.1:56012 -> 198.28.0.2:53 1 64 1 2025-10-20 15:00:05.174 00:00:00.000 UDP 28.104.0.1:55697 -> 198.28.0.2:53 1 64 1 2025-10-20 15:00:24.511 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-20 15:01:05.468 00:00:00.000 UDP 28.104.0.1:46694 -> 198.28.0.2:53 1 64 1 2025-10-20 15:01:05.468 00:00:00.000 UDP 28.104.0.1:36140 -> 198.28.0.2:53 1 64 1 2025-10-20 15:01:05.478 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36140 1 80 1 2025-10-20 15:01:05.478 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46694 1 109 1 2025-10-20 14:56:54.214 00:05:50.947 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-20 14:56:54.167 00:06:00.069 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-20 15:02:05.775 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35815 1 80 1 2025-10-20 15:02:05.774 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46673 1 109 1 2025-10-20 15:02:05.765 00:00:00.000 UDP 28.104.0.1:35815 -> 198.28.0.2:53 1 64 1 2025-10-20 15:02:05.765 00:00:00.000 UDP 28.104.0.1:46673 -> 198.28.0.2:53 1 64 1 2025-10-20 14:57:54.166 00:05:51.005 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-20 14:57:54.016 00:06:00.155 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-20 15:03:06.070 00:00:00.000 UDP 28.104.0.1:37695 -> 198.28.0.2:53 1 64 1 2025-10-20 15:03:06.069 00:00:00.000 UDP 28.104.0.1:43246 -> 198.28.0.2:53 1 64 1 2025-10-20 15:03:06.081 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37695 1 80 1 2025-10-20 15:03:06.081 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43246 1 109 1 2025-10-20 14:59:16.778 00:05:00.736 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2784 1 2025-10-20 15:04:06.419 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40387 1 109 1 2025-10-20 15:04:06.419 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33473 1 80 1 2025-10-20 15:04:06.411 00:00:00.000 UDP 28.104.0.1:40387 -> 198.28.0.2:53 1 64 1 2025-10-20 15:04:06.411 00:00:00.000 UDP 28.104.0.1:33473 -> 198.28.0.2:53 1 64 1 2025-10-20 15:00:45.210 00:05:08.995 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-20 15:05:06.711 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57197 1 80 1 2025-10-20 15:05:06.711 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51833 1 109 1 2025-10-20 15:05:06.700 00:00:00.000 UDP 28.104.0.1:51833 -> 198.28.0.2:53 1 64 1 2025-10-20 15:05:06.700 00:00:00.000 UDP 28.104.0.1:57197 -> 198.28.0.2:53 1 64 1 2025-10-20 15:05:24.709 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-20 15:00:54.180 00:05:50.982 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-20 15:06:07.002 00:00:00.000 UDP 28.104.0.1:57113 -> 198.28.0.2:53 1 64 1 2025-10-20 15:06:07.003 00:00:00.000 UDP 28.104.0.1:52523 -> 198.28.0.2:53 1 64 1 2025-10-20 15:06:07.013 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52523 1 80 1 2025-10-20 15:06:07.013 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57113 1 109 1 2025-10-20 15:07:07.259 00:00:00.000 UDP 28.104.0.1:44202 -> 198.28.0.2:53 1 64 1 2025-10-20 15:07:07.259 00:00:00.000 UDP 28.104.0.1:58184 -> 198.28.0.2:53 1 64 1 2025-10-20 15:07:07.270 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58184 1 109 1 2025-10-20 15:07:07.271 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44202 1 80 1 2025-10-20 15:02:54.216 00:05:50.946 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-20 15:08:07.551 00:00:00.000 UDP 28.104.0.1:36487 -> 198.28.0.2:53 1 64 1 2025-10-20 15:08:07.551 00:00:00.000 UDP 28.104.0.1:50265 -> 198.28.0.2:53 1 64 1 2025-10-20 15:08:07.562 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36487 1 109 1 2025-10-20 15:08:07.562 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50265 1 80 1 2025-10-20 15:04:26.781 00:05:00.809 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2604 1 2025-10-20 15:03:54.171 00:05:51.000 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-20 15:03:54.172 00:06:00.065 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-20 15:09:07.841 00:00:00.000 UDP 28.104.0.1:56895 -> 198.28.0.2:53 1 64 1 2025-10-20 15:09:07.841 00:00:00.000 UDP 28.104.0.1:46839 -> 198.28.0.2:53 1 64 1 2025-10-20 15:09:07.853 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56895 1 109 1 2025-10-20 15:09:07.853 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46839 1 80 1 2025-10-20 15:04:54.019 00:06:00.155 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-20 15:10:08.133 00:00:00.000 UDP 28.104.0.1:40604 -> 198.28.0.2:53 1 64 1 2025-10-20 15:10:08.133 00:00:00.000 UDP 28.104.0.1:46874 -> 198.28.0.2:53 1 64 1 2025-10-20 15:10:08.144 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46874 1 109 1 2025-10-20 15:10:08.144 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40604 1 80 1 2025-10-20 15:10:24.603 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-20 15:06:45.211 00:05:08.996 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-20 15:11:08.440 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57318 1 80 1 2025-10-20 15:11:08.440 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56113 1 109 1 2025-10-20 15:11:08.429 00:00:00.000 UDP 28.104.0.1:57318 -> 198.28.0.2:53 1 64 1 2025-10-20 15:11:08.429 00:00:00.000 UDP 28.104.0.1:56113 -> 198.28.0.2:53 1 64 1 2025-10-20 15:06:54.182 00:05:50.981 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-20 15:12:08.731 00:00:00.000 UDP 28.104.0.1:51611 -> 198.28.0.2:53 1 64 1 2025-10-20 15:12:08.730 00:00:00.000 UDP 28.104.0.1:36995 -> 198.28.0.2:53 1 64 1 2025-10-20 15:12:08.741 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36995 1 80 1 2025-10-20 15:12:08.742 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51611 1 109 1 2025-10-20 15:13:09.054 00:00:00.000 UDP 28.104.0.1:59958 -> 198.28.0.2:53 1 64 1 2025-10-20 15:13:09.054 00:00:00.000 UDP 28.104.0.1:46451 -> 198.28.0.2:53 1 64 1 2025-10-20 15:13:09.065 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59958 1 80 1 2025-10-20 15:13:09.065 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46451 1 109 1 2025-10-20 15:08:54.216 00:05:50.947 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-20 15:09:36.784 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2504 1 2025-10-20 15:14:09.353 00:00:00.000 UDP 28.104.0.1:42759 -> 198.28.0.2:53 1 64 1 2025-10-20 15:14:09.353 00:00:00.000 UDP 28.104.0.1:39755 -> 198.28.0.2:53 1 64 1 2025-10-20 15:14:09.366 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39755 1 109 1 2025-10-20 15:14:09.366 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42759 1 80 1 2025-10-20 15:09:54.174 00:05:51.001 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-20 15:15:09.645 00:00:00.000 UDP 28.104.0.1:57145 -> 198.28.0.2:53 1 64 1 2025-10-20 15:15:09.645 00:00:00.000 UDP 28.104.0.1:59775 -> 198.28.0.2:53 1 64 1 2025-10-20 15:15:09.655 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57145 1 80 1 2025-10-20 15:15:09.655 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59775 1 109 1 2025-10-20 15:15:24.739 00:00:00.026 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-20 15:10:54.175 00:06:00.064 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-20 15:16:10.262 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59407 1 80 1 2025-10-20 15:16:10.260 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50842 1 109 1 2025-10-20 15:16:10.250 00:00:00.000 UDP 28.104.0.1:59407 -> 198.28.0.2:53 1 64 1 2025-10-20 15:16:10.250 00:00:00.000 UDP 28.104.0.1:50842 -> 198.28.0.2:53 1 64 1 2025-10-20 15:12:45.213 00:05:08.996 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-20 15:11:54.020 00:06:00.155 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-20 15:17:10.556 00:00:00.000 UDP 28.104.0.1:57595 -> 198.28.0.2:53 1 64 1 2025-10-20 15:17:10.556 00:00:00.000 UDP 28.104.0.1:38353 -> 198.28.0.2:53 1 64 1 2025-10-20 15:17:10.567 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38353 1 80 1 2025-10-20 15:17:10.568 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57595 1 109 1 2025-10-20 15:12:54.185 00:05:50.981 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-20 15:18:10.891 00:00:00.000 UDP 28.104.0.1:51373 -> 198.28.0.2:53 1 64 1 2025-10-20 15:18:10.891 00:00:00.000 UDP 28.104.0.1:37609 -> 198.28.0.2:53 1 64 1 2025-10-20 15:18:10.901 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37609 1 109 1 2025-10-20 15:18:10.901 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51373 1 80 1 2025-10-20 15:19:11.211 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46675 1 80 1 2025-10-20 15:19:11.211 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51234 1 109 1 2025-10-20 15:14:56.791 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2736 1 2025-10-20 15:19:11.199 00:00:00.000 UDP 28.104.0.1:46675 -> 198.28.0.2:53 1 64 1 2025-10-20 15:19:11.199 00:00:00.000 UDP 28.104.0.1:51234 -> 198.28.0.2:53 1 64 1 2025-10-20 15:14:54.218 00:05:50.948 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-20 15:20:11.502 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52257 1 109 1 2025-10-20 15:20:11.502 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35160 1 80 1 2025-10-20 15:20:11.492 00:00:00.000 UDP 28.104.0.1:35160 -> 198.28.0.2:53 1 64 1 2025-10-20 15:20:11.492 00:00:00.000 UDP 28.104.0.1:52257 -> 198.28.0.2:53 1 64 1 2025-10-20 15:20:24.885 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-20 15:15:54.175 00:05:51.001 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-20 15:21:11.789 00:00:00.000 UDP 28.104.0.1:37539 -> 198.28.0.2:53 1 64 1 2025-10-20 15:21:11.789 00:00:00.000 UDP 28.104.0.1:44525 -> 198.28.0.2:53 1 64 1 2025-10-20 15:21:11.799 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37539 1 80 1 2025-10-20 15:21:11.798 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44525 1 109 1 2025-10-20 15:22:12.107 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40301 1 109 1 2025-10-20 15:22:12.106 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57591 1 80 1 2025-10-20 15:22:12.096 00:00:00.000 UDP 28.104.0.1:40301 -> 198.28.0.2:53 1 64 1 2025-10-20 15:22:12.096 00:00:00.000 UDP 28.104.0.1:57591 -> 198.28.0.2:53 1 64 1 2025-10-20 15:18:45.216 00:05:08.993 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-20 15:17:54.176 00:06:00.067 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-20 15:23:12.408 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38999 1 80 1 2025-10-20 15:23:12.408 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60558 1 109 1 2025-10-20 15:23:12.397 00:00:00.000 UDP 28.104.0.1:38999 -> 198.28.0.2:53 1 64 1 2025-10-20 15:23:12.397 00:00:00.000 UDP 28.104.0.1:60558 -> 198.28.0.2:53 1 64 1 2025-10-20 15:18:54.185 00:05:50.982 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-20 15:18:54.021 00:06:00.157 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-20 15:24:13.158 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41734 1 109 1 2025-10-20 15:24:13.158 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34800 1 80 1 2025-10-20 15:24:13.148 00:00:00.000 UDP 28.104.0.1:34800 -> 198.28.0.2:53 1 64 1 2025-10-20 15:24:13.148 00:00:00.000 UDP 28.104.0.1:41734 -> 198.28.0.2:53 1 64 1 2025-10-20 15:20:16.795 00:05:10.010 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2876 1 2025-10-20 15:25:13.450 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39795 1 80 1 2025-10-20 15:25:13.450 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33619 1 109 1 2025-10-20 15:25:13.440 00:00:00.000 UDP 28.104.0.1:33619 -> 198.28.0.2:53 1 64 1 2025-10-20 15:25:13.440 00:00:00.000 UDP 28.104.0.1:39795 -> 198.28.0.2:53 1 64 1 2025-10-20 15:25:24.909 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-20 15:20:54.219 00:05:50.949 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-20 15:26:13.731 00:00:00.000 UDP 28.104.0.1:59024 -> 198.28.0.2:53 1 64 1 2025-10-20 15:26:13.730 00:00:00.000 UDP 28.104.0.1:53904 -> 198.28.0.2:53 1 64 1 2025-10-20 15:26:13.741 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59024 1 80 1 2025-10-20 15:26:13.741 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53904 1 109 1 2025-10-20 15:21:54.176 00:05:51.002 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-20 15:27:14.165 00:00:00.000 UDP 28.104.0.1:47214 -> 198.28.0.2:53 1 64 1 2025-10-20 15:27:14.165 00:00:00.000 UDP 28.104.0.1:50663 -> 198.28.0.2:53 1 64 1 2025-10-20 15:27:14.175 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47214 1 109 1 2025-10-20 15:27:14.175 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50663 1 80 1 2025-10-20 15:28:14.467 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59316 1 109 1 2025-10-20 15:28:14.467 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48886 1 80 1 2025-10-20 15:28:14.456 00:00:00.000 UDP 28.104.0.1:59316 -> 198.28.0.2:53 1 64 1 2025-10-20 15:28:14.456 00:00:00.000 UDP 28.104.0.1:48886 -> 198.28.0.2:53 1 64 1 2025-10-20 15:24:45.218 00:05:08.991 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-20 15:29:14.774 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48333 1 80 1 2025-10-20 15:29:14.774 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58806 1 109 1 2025-10-20 15:29:14.762 00:00:00.000 UDP 28.104.0.1:58806 -> 198.28.0.2:53 1 64 1 2025-10-20 15:29:14.762 00:00:00.000 UDP 28.104.0.1:48333 -> 198.28.0.2:53 1 64 1 2025-10-20 15:24:54.187 00:05:50.983 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-20 15:25:36.804 00:05:10.011 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2592 1 2025-10-20 15:24:54.177 00:06:00.066 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-20 15:30:15.065 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48776 1 80 1 2025-10-20 15:30:15.066 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50512 1 109 1 2025-10-20 15:30:15.057 00:00:00.000 UDP 28.104.0.1:50512 -> 198.28.0.2:53 1 64 1 2025-10-20 15:30:15.056 00:00:00.000 UDP 28.104.0.1:48776 -> 198.28.0.2:53 1 64 1 2025-10-20 15:30:25.165 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-20 15:25:54.026 00:06:00.152 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-20 15:31:15.318 00:00:00.000 UDP 28.104.0.1:51520 -> 198.28.0.2:53 1 64 1 2025-10-20 15:31:15.318 00:00:00.000 UDP 28.104.0.1:48864 -> 198.28.0.2:53 1 64 1 2025-10-20 15:31:15.328 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48864 1 109 1 2025-10-20 15:31:15.328 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51520 1 80 1 2025-10-20 15:26:54.219 00:05:50.954 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-20 15:32:15.621 00:00:00.000 UDP 28.104.0.1:36659 -> 198.28.0.2:53 1 64 1 2025-10-20 15:32:15.621 00:00:00.000 UDP 28.104.0.1:37012 -> 198.28.0.2:53 1 64 1 2025-10-20 15:32:15.631 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36659 1 80 1 2025-10-20 15:32:15.631 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37012 1 109 1 2025-10-20 15:27:54.178 00:05:51.005 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-20 15:33:15.927 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49147 1 109 1 2025-10-20 15:33:15.927 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47948 1 80 1 2025-10-20 15:33:15.917 00:00:00.000 UDP 28.104.0.1:49147 -> 198.28.0.2:53 1 64 1 2025-10-20 15:33:15.917 00:00:00.000 UDP 28.104.0.1:47948 -> 198.28.0.2:53 1 64 1 2025-10-20 15:34:16.248 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36242 1 109 1 2025-10-20 15:34:16.248 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59374 1 80 1 2025-10-20 15:34:16.238 00:00:00.000 UDP 28.104.0.1:59374 -> 198.28.0.2:53 1 64 1 2025-10-20 15:34:16.238 00:00:00.000 UDP 28.104.0.1:36242 -> 198.28.0.2:53 1 64 1 2025-10-20 15:30:45.221 00:05:08.989 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-20 15:30:56.815 00:05:10.011 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2936 1 2025-10-20 15:35:16.555 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47270 1 80 1 2025-10-20 15:35:16.554 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51045 1 109 1 2025-10-20 15:35:16.543 00:00:00.000 UDP 28.104.0.1:47270 -> 198.28.0.2:53 1 64 1 2025-10-20 15:35:16.543 00:00:00.000 UDP 28.104.0.1:51045 -> 198.28.0.2:53 1 64 1 2025-10-20 15:35:25.050 00:00:00.068 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-20 15:30:54.188 00:05:50.987 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-20 15:36:16.812 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56788 1 80 1 2025-10-20 15:36:16.812 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36265 1 109 1 2025-10-20 15:36:16.803 00:00:00.000 UDP 28.104.0.1:36265 -> 198.28.0.2:53 1 64 1 2025-10-20 15:36:16.803 00:00:00.000 UDP 28.104.0.1:56788 -> 198.28.0.2:53 1 64 1 2025-10-20 15:31:54.178 00:06:00.066 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-20 15:37:17.117 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51624 1 80 1 2025-10-20 15:37:17.117 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55989 1 109 1 2025-10-20 15:37:17.106 00:00:00.000 UDP 28.104.0.1:51624 -> 198.28.0.2:53 1 64 1 2025-10-20 15:37:17.106 00:00:00.000 UDP 28.104.0.1:55989 -> 198.28.0.2:53 1 64 1 2025-10-20 15:32:54.219 00:05:50.956 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-20 15:32:54.029 00:06:00.153 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-20 15:38:17.412 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47550 1 109 1 2025-10-20 15:38:17.412 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41730 1 80 1 2025-10-20 15:38:17.401 00:00:00.000 UDP 28.104.0.1:41730 -> 198.28.0.2:53 1 64 1 2025-10-20 15:38:17.400 00:00:00.000 UDP 28.104.0.1:47550 -> 198.28.0.2:53 1 64 1 2025-10-20 15:33:54.179 00:05:51.007 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-20 15:39:17.703 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57732 1 80 1 2025-10-20 15:39:17.703 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50922 1 109 1 2025-10-20 15:39:17.692 00:00:00.000 UDP 28.104.0.1:50922 -> 198.28.0.2:53 1 64 1 2025-10-20 15:39:17.693 00:00:00.000 UDP 28.104.0.1:57732 -> 198.28.0.2:53 1 64 1 2025-10-20 15:40:18.003 00:00:00.000 UDP 28.104.0.1:33955 -> 198.28.0.2:53 1 64 1 2025-10-20 15:40:18.003 00:00:00.000 UDP 28.104.0.1:46811 -> 198.28.0.2:53 1 64 1 2025-10-20 15:40:18.014 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46811 1 109 1 2025-10-20 15:40:18.014 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33955 1 80 1 2025-10-20 15:40:25.387 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-20 15:36:16.826 00:05:10.010 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2584 1 2025-10-20 15:36:45.226 00:05:08.987 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-20 15:41:18.337 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55024 1 109 1 2025-10-20 15:41:18.337 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51053 1 80 1 2025-10-20 15:41:18.326 00:00:00.000 UDP 28.104.0.1:55024 -> 198.28.0.2:53 1 64 1 2025-10-20 15:41:18.327 00:00:00.000 UDP 28.104.0.1:51053 -> 198.28.0.2:53 1 64 1 2025-10-20 15:36:54.189 00:05:50.986 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-20 15:42:18.627 00:00:00.000 UDP 28.104.0.1:35287 -> 198.28.0.2:53 1 64 1 2025-10-20 15:42:18.627 00:00:00.000 UDP 28.104.0.1:52001 -> 198.28.0.2:53 1 64 1 2025-10-20 15:42:18.637 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35287 1 80 1 2025-10-20 15:42:18.637 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52001 1 109 1 2025-10-20 15:43:18.915 00:00:00.000 UDP 28.104.0.1:58364 -> 198.28.0.2:53 1 64 1 2025-10-20 15:43:18.915 00:00:00.000 UDP 28.104.0.1:56901 -> 198.28.0.2:53 1 64 1 2025-10-20 15:43:18.925 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56901 1 80 1 2025-10-20 15:43:18.925 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58364 1 109 1 2025-10-20 15:38:54.221 00:05:50.956 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-20 15:38:54.181 00:06:00.070 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-20 15:44:19.223 00:00:00.000 UDP 28.104.0.1:57912 -> 198.28.0.2:53 1 64 1 2025-10-20 15:44:19.223 00:00:00.000 UDP 28.104.0.1:50269 -> 198.28.0.2:53 1 64 1 2025-10-20 15:44:19.233 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57912 1 109 1 2025-10-20 15:44:19.233 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50269 1 80 1 2025-10-20 15:39:54.182 00:05:51.006 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-20 15:39:54.031 00:06:00.152 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-20 15:45:19.529 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54680 1 80 1 2025-10-20 15:45:19.529 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46449 1 109 1 2025-10-20 15:45:19.519 00:00:00.000 UDP 28.104.0.1:46449 -> 198.28.0.2:53 1 64 1 2025-10-20 15:45:19.519 00:00:00.000 UDP 28.104.0.1:54680 -> 198.28.0.2:53 1 64 1 2025-10-20 15:45:25.585 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-20 15:41:36.838 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2708 1 2025-10-20 15:46:19.825 00:00:00.000 UDP 28.104.0.1:42058 -> 198.28.0.2:53 1 64 1 2025-10-20 15:46:19.825 00:00:00.000 UDP 28.104.0.1:33299 -> 198.28.0.2:53 1 64 1 2025-10-20 15:46:19.835 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33299 1 80 1 2025-10-20 15:46:19.835 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42058 1 109 1 2025-10-20 15:42:45.226 00:05:08.991 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-20 15:47:20.129 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54619 1 109 1 2025-10-20 15:47:20.129 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36509 1 80 1 2025-10-20 15:47:20.118 00:00:00.000 UDP 28.104.0.1:54619 -> 198.28.0.2:53 1 64 1 2025-10-20 15:47:20.118 00:00:00.000 UDP 28.104.0.1:36509 -> 198.28.0.2:53 1 64 1 2025-10-20 15:42:54.192 00:05:50.985 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-20 15:48:20.423 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33079 1 80 1 2025-10-20 15:48:20.423 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49995 1 109 1 2025-10-20 15:48:20.413 00:00:00.000 UDP 28.104.0.1:33079 -> 198.28.0.2:53 1 64 1 2025-10-20 15:48:20.413 00:00:00.000 UDP 28.104.0.1:49995 -> 198.28.0.2:53 1 64 1 2025-10-20 15:49:20.731 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50310 1 109 1 2025-10-20 15:49:20.731 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56951 1 80 1 2025-10-20 15:49:20.720 00:00:00.000 UDP 28.104.0.1:56951 -> 198.28.0.2:53 1 64 1 2025-10-20 15:49:20.720 00:00:00.000 UDP 28.104.0.1:50310 -> 198.28.0.2:53 1 64 1 2025-10-20 15:44:54.227 00:05:50.951 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-20 15:50:21.059 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56547 1 80 1 2025-10-20 15:50:21.059 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49038 1 109 1 2025-10-20 15:50:21.048 00:00:00.000 UDP 28.104.0.1:49038 -> 198.28.0.2:53 1 64 1 2025-10-20 15:50:21.048 00:00:00.000 UDP 28.104.0.1:56547 -> 198.28.0.2:53 1 64 1 2025-10-20 15:50:25.460 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-20 15:45:54.183 00:05:51.005 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-20 15:45:54.182 00:06:00.072 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-20 15:46:56.845 00:05:10.012 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2464 1 2025-10-20 15:51:21.347 00:00:00.000 UDP 28.104.0.1:52711 -> 198.28.0.2:53 1 64 1 2025-10-20 15:51:21.347 00:00:00.000 UDP 28.104.0.1:53348 -> 198.28.0.2:53 1 64 1 2025-10-20 15:51:21.356 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53348 1 109 1 2025-10-20 15:51:21.355 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52711 1 80 1 2025-10-20 15:46:54.031 00:06:00.154 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-20 15:52:21.660 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55069 1 109 1 2025-10-20 15:52:21.660 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60424 1 80 1 2025-10-20 15:52:21.650 00:00:00.000 UDP 28.104.0.1:55069 -> 198.28.0.2:53 1 64 1 2025-10-20 15:52:21.650 00:00:00.000 UDP 28.104.0.1:60424 -> 198.28.0.2:53 1 64 1 2025-10-20 15:48:45.228 00:05:08.990 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-20 15:53:21.907 00:00:00.000 UDP 28.104.0.1:33375 -> 198.28.0.2:53 1 64 1 2025-10-20 15:53:21.907 00:00:00.000 UDP 28.104.0.1:49993 -> 198.28.0.2:53 1 64 1 2025-10-20 15:53:21.918 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33375 1 80 1 2025-10-20 15:53:21.918 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49993 1 109 1 2025-10-20 15:48:54.192 00:05:50.988 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-20 15:54:22.189 00:00:00.000 UDP 28.104.0.1:60547 -> 198.28.0.2:53 1 64 1 2025-10-20 15:54:22.189 00:00:00.000 UDP 28.104.0.1:49841 -> 198.28.0.2:53 1 64 1 2025-10-20 15:54:22.200 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49841 1 109 1 2025-10-20 15:54:22.200 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60547 1 80 1 2025-10-20 15:55:22.496 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58387 1 80 1 2025-10-20 15:55:22.497 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57390 1 109 1 2025-10-20 15:55:25.380 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-20 15:55:22.487 00:00:00.000 UDP 28.104.0.1:58387 -> 198.28.0.2:53 1 64 1 2025-10-20 15:55:22.487 00:00:00.000 UDP 28.104.0.1:57390 -> 198.28.0.2:53 1 64 1 2025-10-20 15:50:54.227 00:05:50.954 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-20 15:56:22.791 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59194 1 109 1 2025-10-20 15:56:22.791 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47734 1 80 1 2025-10-20 15:56:22.781 00:00:00.000 UDP 28.104.0.1:47734 -> 198.28.0.2:53 1 64 1 2025-10-20 15:56:22.780 00:00:00.000 UDP 28.104.0.1:59194 -> 198.28.0.2:53 1 64 1 2025-10-20 15:52:16.856 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2992 1 2025-10-20 15:51:54.184 00:05:51.008 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-20 15:57:23.113 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52053 1 109 1 2025-10-20 15:57:23.113 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43392 1 80 1 2025-10-20 15:57:23.104 00:00:00.000 UDP 28.104.0.1:52053 -> 198.28.0.2:53 1 64 1 2025-10-20 15:57:23.104 00:00:00.000 UDP 28.104.0.1:43392 -> 198.28.0.2:53 1 64 1 2025-10-20 15:52:54.185 00:06:00.070 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-20 15:58:23.410 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58814 1 80 1 2025-10-20 15:58:23.411 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56579 1 109 1 2025-10-20 15:58:23.400 00:00:00.000 UDP 28.104.0.1:58814 -> 198.28.0.2:53 1 64 1 2025-10-20 15:58:23.401 00:00:00.000 UDP 28.104.0.1:56579 -> 198.28.0.2:53 1 64 1 Summary: total flows: 320, total bytes: 95981, total packets: 1415, avg bps: 199, avg pps: 0, avg bpp: 67 Time window: 2025-10-20 14:54:45 - 2025-10-20 15:58:54 Total flows processed: 320, passed: 320, Blocks skipped: 0, Bytes read: 33344 Sys: 0.0038s User: 0.0029s Wall: 0.0026s flows/second: 122517.3 Runtime: 0.0026s