Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-20 15:54:45.229 00:05:08.989 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-20 15:53:54.031 00:06:00.155 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-20 15:59:23.719 00:00:00.000 UDP 28.104.0.1:47531 -> 198.28.0.2:53 1 64 1 2025-10-20 15:59:23.719 00:00:00.000 UDP 28.104.0.1:44974 -> 198.28.0.2:53 1 64 1 2025-10-20 15:59:23.731 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47531 1 109 1 2025-10-20 15:59:23.731 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44974 1 80 1 2025-10-20 15:54:54.195 00:05:50.986 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-20 16:00:23.972 00:00:00.000 UDP 28.104.0.1:44306 -> 198.28.0.2:53 1 64 1 2025-10-20 16:00:23.972 00:00:00.000 UDP 28.104.0.1:34821 -> 198.28.0.2:53 1 64 1 2025-10-20 16:00:25.711 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-20 16:00:23.982 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34821 1 109 1 2025-10-20 16:00:23.982 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44306 1 80 1 2025-10-20 16:01:24.281 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47697 1 80 1 2025-10-20 16:01:24.281 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57093 1 109 1 2025-10-20 16:01:24.271 00:00:00.000 UDP 28.104.0.1:47697 -> 198.28.0.2:53 1 64 1 2025-10-20 16:01:24.271 00:00:00.000 UDP 28.104.0.1:57093 -> 198.28.0.2:53 1 64 1 2025-10-20 15:56:54.228 00:05:50.953 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-20 15:57:36.865 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 3016 1 2025-10-20 16:02:24.574 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41375 1 80 1 2025-10-20 16:02:24.574 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43152 1 109 1 2025-10-20 16:02:24.564 00:00:00.000 UDP 28.104.0.1:43152 -> 198.28.0.2:53 1 64 1 2025-10-20 16:02:24.564 00:00:00.000 UDP 28.104.0.1:41375 -> 198.28.0.2:53 1 64 1 2025-10-20 15:57:54.186 00:05:51.006 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-20 16:03:32.696 00:00:00.000 UDP 28.104.0.1:52386 -> 198.28.0.2:53 1 64 1 2025-10-20 16:03:32.696 00:00:00.000 UDP 28.104.0.1:49718 -> 198.28.0.2:53 1 64 1 2025-10-20 16:03:32.708 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52386 1 109 1 2025-10-20 16:03:32.709 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49718 1 80 1 2025-10-20 16:04:32.988 00:00:00.000 UDP 28.104.0.1:41744 -> 198.28.0.2:53 1 64 1 2025-10-20 16:04:32.988 00:00:00.000 UDP 28.104.0.1:40952 -> 198.28.0.2:53 1 64 1 2025-10-20 16:04:32.999 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40952 1 109 1 2025-10-20 16:04:32.998 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41744 1 80 1 2025-10-20 16:00:45.232 00:05:08.989 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-20 15:59:54.188 00:06:00.069 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-20 16:05:25.635 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-20 16:05:33.311 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45914 1 109 1 2025-10-20 16:05:33.310 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48280 1 80 1 2025-10-20 16:05:33.301 00:00:00.000 UDP 28.104.0.1:45914 -> 198.28.0.2:53 1 64 1 2025-10-20 16:05:33.300 00:00:00.000 UDP 28.104.0.1:48280 -> 198.28.0.2:53 1 64 1 2025-10-20 16:00:54.197 00:05:50.986 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-20 16:00:54.037 00:06:00.152 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-20 16:06:33.604 00:00:00.000 UDP 28.104.0.1:55542 -> 198.28.0.2:53 1 64 1 2025-10-20 16:06:33.604 00:00:00.000 UDP 28.104.0.1:43678 -> 198.28.0.2:53 1 64 1 2025-10-20 16:06:33.615 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55542 1 109 1 2025-10-20 16:06:33.615 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43678 1 80 1 2025-10-20 16:02:56.871 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2528 1 2025-10-20 16:07:33.919 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53787 1 80 1 2025-10-20 16:07:33.919 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54319 1 109 1 2025-10-20 16:07:33.908 00:00:00.000 UDP 28.104.0.1:54319 -> 198.28.0.2:53 1 64 1 2025-10-20 16:07:33.908 00:00:00.000 UDP 28.104.0.1:53787 -> 198.28.0.2:53 1 64 1 2025-10-20 16:02:54.229 00:05:50.954 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-20 16:08:34.228 00:00:00.000 UDP 28.104.0.1:50240 -> 198.28.0.2:53 1 64 1 2025-10-20 16:08:34.228 00:00:00.000 UDP 28.104.0.1:36615 -> 198.28.0.2:53 1 64 1 2025-10-20 16:08:34.241 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50240 1 109 1 2025-10-20 16:08:34.240 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36615 1 80 1 2025-10-20 16:03:54.186 00:05:51.007 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-20 16:09:34.538 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34875 1 109 1 2025-10-20 16:09:34.538 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60034 1 80 1 2025-10-20 16:09:34.528 00:00:00.000 UDP 28.104.0.1:34875 -> 198.28.0.2:53 1 64 1 2025-10-20 16:09:34.528 00:00:00.000 UDP 28.104.0.1:60034 -> 198.28.0.2:53 1 64 1 2025-10-20 16:10:25.793 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-20 16:10:34.834 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39788 1 109 1 2025-10-20 16:10:34.833 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56733 1 80 1 2025-10-20 16:10:34.823 00:00:00.000 UDP 28.104.0.1:56733 -> 198.28.0.2:53 1 64 1 2025-10-20 16:10:34.823 00:00:00.000 UDP 28.104.0.1:39788 -> 198.28.0.2:53 1 64 1 2025-10-20 16:06:45.234 00:05:08.995 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-20 16:11:35.084 00:00:00.000 UDP 28.104.0.1:38493 -> 198.28.0.2:53 1 64 1 2025-10-20 16:11:35.084 00:00:00.000 UDP 28.104.0.1:37797 -> 198.28.0.2:53 1 64 1 2025-10-20 16:11:35.095 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37797 1 80 1 2025-10-20 16:11:35.095 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38493 1 109 1 2025-10-20 16:06:54.196 00:05:50.987 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-20 16:06:54.187 00:06:00.084 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-20 16:08:16.878 00:05:10.695 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2892 1 2025-10-20 16:12:40.250 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34148 1 80 1 2025-10-20 16:12:40.250 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55136 1 109 1 2025-10-20 16:12:40.241 00:00:00.000 UDP 28.104.0.1:55136 -> 198.28.0.2:53 1 64 1 2025-10-20 16:12:40.241 00:00:00.000 UDP 28.104.0.1:34148 -> 198.28.0.2:53 1 64 1 2025-10-20 16:07:54.037 00:06:00.152 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-20 16:13:40.539 00:00:00.000 UDP 28.104.0.1:35333 -> 198.28.0.2:53 1 64 1 2025-10-20 16:13:40.539 00:00:00.000 UDP 28.104.0.1:49081 -> 198.28.0.2:53 1 64 1 2025-10-20 16:13:40.549 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35333 1 109 1 2025-10-20 16:13:40.549 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49081 1 80 1 2025-10-20 16:08:54.230 00:05:50.956 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-20 16:14:40.850 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49128 1 109 1 2025-10-20 16:14:40.850 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59844 1 80 1 2025-10-20 16:14:40.839 00:00:00.000 UDP 28.104.0.1:59844 -> 198.28.0.2:53 1 64 1 2025-10-20 16:14:40.839 00:00:00.000 UDP 28.104.0.1:49128 -> 198.28.0.2:53 1 64 1 2025-10-20 16:09:54.189 00:05:51.006 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-20 16:15:25.895 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-20 16:15:41.146 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33541 1 80 1 2025-10-20 16:15:41.147 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41146 1 109 1 2025-10-20 16:15:41.136 00:00:00.000 UDP 28.104.0.1:33541 -> 198.28.0.2:53 1 64 1 2025-10-20 16:15:41.136 00:00:00.000 UDP 28.104.0.1:41146 -> 198.28.0.2:53 1 64 1 2025-10-20 16:16:41.400 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46010 1 109 1 2025-10-20 16:16:41.400 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49714 1 80 1 2025-10-20 16:16:41.391 00:00:00.000 UDP 28.104.0.1:49714 -> 198.28.0.2:53 1 64 1 2025-10-20 16:16:41.392 00:00:00.000 UDP 28.104.0.1:46010 -> 198.28.0.2:53 1 64 1 2025-10-20 16:12:45.234 00:05:08.989 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-20 16:17:41.690 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58661 1 109 1 2025-10-20 16:17:41.690 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50993 1 80 1 2025-10-20 16:17:41.680 00:00:00.000 UDP 28.104.0.1:50993 -> 198.28.0.2:53 1 64 1 2025-10-20 16:17:41.680 00:00:00.000 UDP 28.104.0.1:58661 -> 198.28.0.2:53 1 64 1 2025-10-20 16:12:54.199 00:05:50.986 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-20 16:13:36.882 00:05:10.049 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2528 1 2025-10-20 16:18:41.986 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58445 1 80 1 2025-10-20 16:18:41.986 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59909 1 109 1 2025-10-20 16:18:41.976 00:00:00.000 UDP 28.104.0.1:59909 -> 198.28.0.2:53 1 64 1 2025-10-20 16:18:41.976 00:00:00.000 UDP 28.104.0.1:58445 -> 198.28.0.2:53 1 64 1 2025-10-20 16:13:54.189 00:06:00.084 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-20 16:19:42.274 00:00:00.000 UDP 28.104.0.1:39404 -> 198.28.0.2:53 1 64 1 2025-10-20 16:19:42.274 00:00:00.000 UDP 28.104.0.1:58616 -> 198.28.0.2:53 1 64 1 2025-10-20 16:14:54.232 00:05:50.953 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-20 16:19:42.284 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39404 1 80 1 2025-10-20 16:19:42.284 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58616 1 109 1 2025-10-20 16:14:54.073 00:06:00.118 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-20 16:20:25.877 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-20 16:15:54.190 00:05:51.006 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-20 16:20:42.528 00:00:00.000 UDP 28.104.0.1:46279 -> 198.28.0.2:53 1 64 1 2025-10-20 16:20:42.528 00:00:00.000 UDP 28.104.0.1:53751 -> 198.28.0.2:53 1 64 1 2025-10-20 16:20:42.538 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53751 1 80 1 2025-10-20 16:20:42.538 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46279 1 109 1 2025-10-20 16:21:42.839 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60820 1 80 1 2025-10-20 16:21:42.839 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49652 1 109 1 2025-10-20 16:21:42.829 00:00:00.000 UDP 28.104.0.1:49652 -> 198.28.0.2:53 1 64 1 2025-10-20 16:21:42.829 00:00:00.000 UDP 28.104.0.1:60820 -> 198.28.0.2:53 1 64 1 2025-10-20 16:22:43.133 00:00:00.000 UDP 28.104.0.1:43442 -> 198.28.0.2:53 1 64 1 2025-10-20 16:22:43.133 00:00:00.000 UDP 28.104.0.1:49079 -> 198.28.0.2:53 1 64 1 2025-10-20 16:22:43.142 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49079 1 109 1 2025-10-20 16:22:43.142 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43442 1 80 1 2025-10-20 16:18:45.235 00:05:08.989 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-20 16:18:56.893 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2716 1 2025-10-20 16:23:43.456 00:00:00.000 UDP 28.104.0.1:39825 -> 198.28.0.2:53 1 64 1 2025-10-20 16:23:43.457 00:00:00.000 UDP 28.104.0.1:60176 -> 198.28.0.2:53 1 64 1 2025-10-20 16:18:54.201 00:05:50.986 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-20 16:23:43.467 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39825 1 80 1 2025-10-20 16:23:43.467 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60176 1 109 1 2025-10-20 16:24:43.755 00:00:00.000 UDP 28.104.0.1:37333 -> 198.28.0.2:53 1 64 1 2025-10-20 16:24:43.755 00:00:00.000 UDP 28.104.0.1:53450 -> 198.28.0.2:53 1 64 1 2025-10-20 16:24:43.765 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53450 1 80 1 2025-10-20 16:24:43.765 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37333 1 109 1 2025-10-20 16:25:26.244 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-20 16:20:54.234 00:05:50.953 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-20 16:25:44.073 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38961 1 109 1 2025-10-20 16:25:44.073 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43224 1 80 1 2025-10-20 16:25:44.063 00:00:00.000 UDP 28.104.0.1:38961 -> 198.28.0.2:53 1 64 1 2025-10-20 16:25:44.063 00:00:00.000 UDP 28.104.0.1:43224 -> 198.28.0.2:53 1 64 1 2025-10-20 16:20:54.191 00:06:00.083 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-20 16:26:46.385 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46905 1 109 1 2025-10-20 16:26:46.384 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47599 1 80 1 2025-10-20 16:26:46.375 00:00:00.000 UDP 28.104.0.1:46905 -> 198.28.0.2:53 1 64 1 2025-10-20 16:26:46.375 00:00:00.000 UDP 28.104.0.1:47599 -> 198.28.0.2:53 1 64 1 2025-10-20 16:21:54.192 00:05:51.005 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-20 16:21:54.079 00:06:00.116 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-20 16:27:46.689 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43783 1 80 1 2025-10-20 16:27:46.689 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43457 1 109 1 2025-10-20 16:27:46.679 00:00:00.000 UDP 28.104.0.1:43783 -> 198.28.0.2:53 1 64 1 2025-10-20 16:27:46.679 00:00:00.000 UDP 28.104.0.1:43457 -> 198.28.0.2:53 1 64 1 2025-10-20 16:24:16.895 00:05:10.022 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2608 1 2025-10-20 16:28:46.946 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56512 1 109 1 2025-10-20 16:28:46.946 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50655 1 80 1 2025-10-20 16:28:46.936 00:00:00.000 UDP 28.104.0.1:50655 -> 198.28.0.2:53 1 64 1 2025-10-20 16:28:46.936 00:00:00.000 UDP 28.104.0.1:56512 -> 198.28.0.2:53 1 64 1 2025-10-20 16:24:45.236 00:05:08.988 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-20 16:24:54.202 00:05:50.986 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-20 16:29:47.252 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58056 1 80 1 2025-10-20 16:29:47.252 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34563 1 109 1 2025-10-20 16:29:47.242 00:00:00.000 UDP 28.104.0.1:34563 -> 198.28.0.2:53 1 64 1 2025-10-20 16:29:47.241 00:00:00.000 UDP 28.104.0.1:58056 -> 198.28.0.2:53 1 64 1 2025-10-20 16:30:26.318 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-20 16:30:47.546 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46058 1 109 1 2025-10-20 16:30:47.546 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53121 1 80 1 2025-10-20 16:30:47.536 00:00:00.000 UDP 28.104.0.1:46058 -> 198.28.0.2:53 1 64 1 2025-10-20 16:30:47.536 00:00:00.000 UDP 28.104.0.1:53121 -> 198.28.0.2:53 1 64 1 2025-10-20 16:26:54.234 00:05:50.956 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-20 16:31:47.838 00:00:00.000 UDP 28.104.0.1:32800 -> 198.28.0.2:53 1 64 1 2025-10-20 16:31:47.839 00:00:00.000 UDP 28.104.0.1:49365 -> 198.28.0.2:53 1 64 1 2025-10-20 16:31:47.850 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49365 1 109 1 2025-10-20 16:31:47.850 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32800 1 80 1 2025-10-20 16:27:54.193 00:05:51.008 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-20 16:32:48.151 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46133 1 109 1 2025-10-20 16:32:48.151 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58238 1 80 1 2025-10-20 16:32:48.141 00:00:00.000 UDP 28.104.0.1:46133 -> 198.28.0.2:53 1 64 1 2025-10-20 16:32:48.140 00:00:00.000 UDP 28.104.0.1:58238 -> 198.28.0.2:53 1 64 1 2025-10-20 16:27:54.195 00:06:00.084 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-20 16:33:48.401 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48362 1 80 1 2025-10-20 16:29:36.918 00:05:10.002 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2836 1 2025-10-20 16:33:48.401 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38128 1 109 1 2025-10-20 16:33:48.390 00:00:00.000 UDP 28.104.0.1:38128 -> 198.28.0.2:53 1 64 1 2025-10-20 16:33:48.390 00:00:00.000 UDP 28.104.0.1:48362 -> 198.28.0.2:53 1 64 1 2025-10-20 16:28:54.081 00:06:00.115 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-20 16:34:48.655 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60302 1 80 1 2025-10-20 16:34:48.655 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50277 1 109 1 2025-10-20 16:34:48.644 00:00:00.000 UDP 28.104.0.1:50277 -> 198.28.0.2:53 1 64 1 2025-10-20 16:34:48.644 00:00:00.000 UDP 28.104.0.1:60302 -> 198.28.0.2:53 1 64 1 2025-10-20 16:30:45.240 00:05:08.988 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-20 16:35:26.230 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-20 16:30:54.205 00:05:50.987 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-20 16:35:48.899 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54592 1 109 1 2025-10-20 16:35:48.899 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41816 1 80 1 2025-10-20 16:35:48.889 00:00:00.000 UDP 28.104.0.1:41816 -> 198.28.0.2:53 1 64 1 2025-10-20 16:35:48.889 00:00:00.000 UDP 28.104.0.1:54592 -> 198.28.0.2:53 1 64 1 2025-10-20 16:36:49.219 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36729 1 109 1 2025-10-20 16:36:49.219 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37093 1 80 1 2025-10-20 16:36:49.209 00:00:00.000 UDP 28.104.0.1:37093 -> 198.28.0.2:53 1 64 1 2025-10-20 16:36:49.209 00:00:00.000 UDP 28.104.0.1:36729 -> 198.28.0.2:53 1 64 1 2025-10-20 16:37:49.527 00:00:00.000 UDP 28.104.0.1:43691 -> 198.28.0.2:53 1 64 1 2025-10-20 16:37:49.527 00:00:00.000 UDP 28.104.0.1:44764 -> 198.28.0.2:53 1 64 1 2025-10-20 16:32:54.236 00:05:50.955 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-20 16:37:49.537 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44764 1 80 1 2025-10-20 16:37:49.537 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43691 1 109 1 2025-10-20 16:33:54.196 00:05:51.006 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-20 16:38:49.790 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43239 1 80 1 2025-10-20 16:38:49.791 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52012 1 109 1 2025-10-20 16:38:49.781 00:00:00.000 UDP 28.104.0.1:43239 -> 198.28.0.2:53 1 64 1 2025-10-20 16:38:49.781 00:00:00.000 UDP 28.104.0.1:52012 -> 198.28.0.2:53 1 64 1 2025-10-20 16:34:56.919 00:05:00.084 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2724 1 2025-10-20 16:39:50.095 00:00:00.000 UDP 28.104.0.1:33658 -> 198.28.0.2:53 1 64 1 2025-10-20 16:39:50.095 00:00:00.000 UDP 28.104.0.1:52511 -> 198.28.0.2:53 1 64 1 2025-10-20 16:39:50.105 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52511 1 80 1 2025-10-20 16:39:50.105 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33658 1 109 1 2025-10-20 16:34:54.196 00:06:00.088 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-20 16:40:26.327 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-20 16:40:50.359 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40512 1 80 1 2025-10-20 16:40:50.359 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36796 1 109 1 2025-10-20 16:40:50.348 00:00:00.000 UDP 28.104.0.1:36796 -> 198.28.0.2:53 1 64 1 2025-10-20 16:40:50.348 00:00:00.000 UDP 28.104.0.1:40512 -> 198.28.0.2:53 1 64 1 2025-10-20 16:36:45.241 00:05:08.990 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-20 16:35:54.080 00:06:00.116 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-20 16:36:54.205 00:05:50.986 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-20 16:41:50.617 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40215 1 80 1 2025-10-20 16:41:50.617 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59207 1 109 1 2025-10-20 16:41:50.606 00:00:00.000 UDP 28.104.0.1:59207 -> 198.28.0.2:53 1 64 1 2025-10-20 16:41:50.606 00:00:00.000 UDP 28.104.0.1:40215 -> 198.28.0.2:53 1 64 1 2025-10-20 16:42:57.326 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37532 1 80 1 2025-10-20 16:42:57.326 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60747 1 109 1 2025-10-20 16:42:57.315 00:00:00.000 UDP 28.104.0.1:60747 -> 198.28.0.2:53 1 64 1 2025-10-20 16:42:57.315 00:00:00.000 UDP 28.104.0.1:37532 -> 198.28.0.2:53 1 64 1 2025-10-20 16:38:54.240 00:05:50.952 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-20 16:43:57.622 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42482 1 80 1 2025-10-20 16:43:57.622 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33004 1 109 1 2025-10-20 16:43:57.612 00:00:00.000 UDP 28.104.0.1:42482 -> 198.28.0.2:53 1 64 1 2025-10-20 16:43:57.612 00:00:00.000 UDP 28.104.0.1:33004 -> 198.28.0.2:53 1 64 1 2025-10-20 16:40:06.928 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2736 1 2025-10-20 16:39:54.196 00:05:51.006 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-20 16:44:57.882 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46331 1 80 1 2025-10-20 16:44:57.882 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53767 1 109 1 2025-10-20 16:44:57.871 00:00:00.000 UDP 28.104.0.1:53767 -> 198.28.0.2:53 1 64 1 2025-10-20 16:44:57.871 00:00:00.000 UDP 28.104.0.1:46331 -> 198.28.0.2:53 1 64 1 2025-10-20 16:45:26.582 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-20 16:45:58.193 00:00:00.000 UDP 28.104.0.1:53327 -> 198.28.0.2:53 1 64 1 2025-10-20 16:45:58.193 00:00:00.000 UDP 28.104.0.1:46908 -> 198.28.0.2:53 1 64 1 2025-10-20 16:45:58.203 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53327 1 80 1 2025-10-20 16:45:58.204 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46908 1 109 1 2025-10-20 16:42:45.242 00:05:08.991 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-20 16:41:54.197 00:06:00.088 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-20 16:46:58.505 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54318 1 80 1 2025-10-20 16:46:58.506 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53968 1 109 1 2025-10-20 16:46:58.496 00:00:00.000 UDP 28.104.0.1:53968 -> 198.28.0.2:53 1 64 1 2025-10-20 16:46:58.496 00:00:00.000 UDP 28.104.0.1:54318 -> 198.28.0.2:53 1 64 1 2025-10-20 16:42:54.206 00:05:50.986 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-20 16:42:54.081 00:06:00.118 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-20 16:47:58.766 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58531 1 109 1 2025-10-20 16:47:58.766 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33950 1 80 1 2025-10-20 16:47:58.757 00:00:00.000 UDP 28.104.0.1:58531 -> 198.28.0.2:53 1 64 1 2025-10-20 16:47:58.757 00:00:00.000 UDP 28.104.0.1:33950 -> 198.28.0.2:53 1 64 1 2025-10-20 16:48:59.064 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40541 1 109 1 2025-10-20 16:48:59.064 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36885 1 80 1 2025-10-20 16:48:59.054 00:00:00.000 UDP 28.104.0.1:36885 -> 198.28.0.2:53 1 64 1 2025-10-20 16:48:59.054 00:00:00.000 UDP 28.104.0.1:40541 -> 198.28.0.2:53 1 64 1 2025-10-20 16:45:26.935 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2528 1 2025-10-20 16:44:54.243 00:05:50.950 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-20 16:49:59.353 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46081 1 80 1 2025-10-20 16:49:59.353 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52609 1 109 1 2025-10-20 16:49:59.342 00:00:00.000 UDP 28.104.0.1:46081 -> 198.28.0.2:53 1 64 1 2025-10-20 16:49:59.341 00:00:00.000 UDP 28.104.0.1:52609 -> 198.28.0.2:53 1 64 1 2025-10-20 16:50:26.642 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-20 16:45:54.198 00:05:51.006 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-20 16:50:59.632 00:00:00.000 UDP 28.104.0.1:47431 -> 198.28.0.2:53 1 64 1 2025-10-20 16:50:59.632 00:00:00.000 UDP 28.104.0.1:38000 -> 198.28.0.2:53 1 64 1 2025-10-20 16:50:59.643 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38000 1 109 1 2025-10-20 16:50:59.643 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47431 1 80 1 2025-10-20 16:51:59.930 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53318 1 80 1 2025-10-20 16:51:59.930 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36125 1 109 1 2025-10-20 16:51:59.921 00:00:00.000 UDP 28.104.0.1:36125 -> 198.28.0.2:53 1 64 1 2025-10-20 16:51:59.921 00:00:00.000 UDP 28.104.0.1:53318 -> 198.28.0.2:53 1 64 1 2025-10-20 16:48:45.243 00:05:08.991 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-20 16:53:00.246 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46974 1 80 1 2025-10-20 16:53:00.246 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41386 1 109 1 2025-10-20 16:53:00.236 00:00:00.000 UDP 28.104.0.1:46974 -> 198.28.0.2:53 1 64 1 2025-10-20 16:53:00.236 00:00:00.000 UDP 28.104.0.1:41386 -> 198.28.0.2:53 1 64 1 2025-10-20 16:48:54.208 00:05:50.986 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-20 16:48:54.198 00:06:00.090 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-20 16:54:00.551 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36480 1 109 1 2025-10-20 16:54:00.551 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56316 1 80 1 2025-10-20 16:54:00.540 00:00:00.000 UDP 28.104.0.1:56316 -> 198.28.0.2:53 1 64 1 2025-10-20 16:54:00.540 00:00:00.000 UDP 28.104.0.1:36480 -> 198.28.0.2:53 1 64 1 2025-10-20 16:49:54.083 00:06:00.120 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-20 16:55:00.836 00:00:00.000 UDP 28.104.0.1:48288 -> 198.28.0.2:53 1 64 1 2025-10-20 16:55:00.836 00:00:00.000 UDP 28.104.0.1:55150 -> 198.28.0.2:53 1 64 1 2025-10-20 16:55:00.846 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55150 1 109 1 2025-10-20 16:50:46.943 00:05:10.335 OSPF 28.0.2.1:0 -> 224.0.0.5:0 42 3020 1 2025-10-20 16:55:00.846 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48288 1 80 1 2025-10-20 16:55:26.812 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-20 16:50:54.246 00:05:50.954 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-20 16:56:01.141 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47617 1 109 1 2025-10-20 16:56:01.141 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35880 1 80 1 2025-10-20 16:56:01.131 00:00:00.000 UDP 28.104.0.1:35880 -> 198.28.0.2:53 1 64 1 2025-10-20 16:56:01.131 00:00:00.000 UDP 28.104.0.1:47617 -> 198.28.0.2:53 1 64 1 2025-10-20 16:51:54.197 00:05:51.006 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-20 16:57:01.439 00:00:00.000 UDP 28.104.0.1:45577 -> 198.28.0.2:53 1 64 1 2025-10-20 16:57:01.439 00:00:00.000 UDP 28.104.0.1:34463 -> 198.28.0.2:53 1 64 1 2025-10-20 16:57:01.449 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34463 1 109 1 2025-10-20 16:57:01.449 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45577 1 80 1 2025-10-20 16:58:01.746 00:00:00.000 UDP 28.104.0.1:60332 -> 198.28.0.2:53 1 64 1 2025-10-20 16:58:01.746 00:00:00.000 UDP 28.104.0.1:56568 -> 198.28.0.2:53 1 64 1 2025-10-20 16:58:01.757 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60332 1 109 1 2025-10-20 16:58:01.757 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56568 1 80 1 Summary: total flows: 316, total bytes: 96016, total packets: 1417, avg bps: 199, avg pps: 0, avg bpp: 67 Time window: 2025-10-20 15:53:54 - 2025-10-20 16:58:01 Total flows processed: 316, passed: 316, Blocks skipped: 0, Bytes read: 32928 Sys: 0.0050s User: 0.0020s Wall: 0.0035s flows/second: 89162.5 Runtime: 0.0036s