Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-21 04:54:45.497 00:05:08.969 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-21 04:59:00.191 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50995 1 109 1 2025-10-21 04:59:00.191 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34189 1 80 1 2025-10-21 04:59:00.180 00:00:00.000 UDP 28.104.0.1:34189 -> 198.28.0.2:53 1 64 1 2025-10-21 04:59:00.180 00:00:00.000 UDP 28.104.0.1:50995 -> 198.28.0.2:53 1 64 1 2025-10-21 04:54:54.393 00:05:51.055 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-21 05:00:00.433 00:00:00.000 UDP 28.104.0.1:57970 -> 198.28.0.2:53 1 64 1 2025-10-21 05:00:00.433 00:00:00.000 UDP 28.104.0.1:59968 -> 198.28.0.2:53 1 64 1 2025-10-21 05:00:00.443 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57970 1 80 1 2025-10-21 05:00:00.443 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59968 1 109 1 2025-10-21 05:00:41.306 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-21 05:01:00.691 00:00:00.000 UDP 28.104.0.1:50986 -> 198.28.0.2:53 1 64 1 2025-10-21 05:01:00.691 00:00:00.000 UDP 28.104.0.1:54791 -> 198.28.0.2:53 1 64 1 2025-10-21 05:01:00.701 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54791 1 109 1 2025-10-21 05:01:00.700 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50986 1 80 1 2025-10-21 04:56:54.475 00:05:50.973 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-21 04:56:54.385 00:06:00.137 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-21 05:02:00.984 00:00:00.000 UDP 28.104.0.1:56279 -> 198.28.0.2:53 1 64 1 2025-10-21 05:02:00.984 00:00:00.000 UDP 28.104.0.1:36032 -> 198.28.0.2:53 1 64 1 2025-10-21 05:02:00.993 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56279 1 109 1 2025-10-21 05:02:00.993 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36032 1 80 1 2025-10-21 04:57:54.383 00:05:51.074 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-21 04:57:54.295 00:06:00.097 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-21 05:03:01.304 00:00:00.000 UDP 28.104.0.1:59041 -> 198.28.0.2:53 1 64 1 2025-10-21 05:03:01.304 00:00:00.000 UDP 28.104.0.1:49318 -> 198.28.0.2:53 1 64 1 2025-10-21 05:03:01.315 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59041 1 109 1 2025-10-21 05:03:01.315 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49318 1 80 1 2025-10-21 05:04:01.607 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55959 1 109 1 2025-10-21 05:04:01.608 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59853 1 80 1 2025-10-21 05:04:01.597 00:00:00.000 UDP 28.104.0.1:55959 -> 198.28.0.2:53 1 64 1 2025-10-21 05:04:01.597 00:00:00.000 UDP 28.104.0.1:59853 -> 198.28.0.2:53 1 64 1 2025-10-21 04:59:57.921 00:05:10.018 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2832 1 2025-10-21 05:00:45.498 00:05:08.972 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-21 05:05:01.893 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34110 1 109 1 2025-10-21 05:05:01.893 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59769 1 80 1 2025-10-21 05:05:01.883 00:00:00.000 UDP 28.104.0.1:59769 -> 198.28.0.2:53 1 64 1 2025-10-21 05:05:01.883 00:00:00.000 UDP 28.104.0.1:34110 -> 198.28.0.2:53 1 64 1 2025-10-21 05:05:41.523 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-21 05:00:54.398 00:05:51.050 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-21 05:06:02.198 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49183 1 80 1 2025-10-21 05:06:02.197 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55289 1 109 1 2025-10-21 05:06:02.188 00:00:00.000 UDP 28.104.0.1:55289 -> 198.28.0.2:53 1 64 1 2025-10-21 05:06:02.188 00:00:00.000 UDP 28.104.0.1:49183 -> 198.28.0.2:53 1 64 1 2025-10-21 05:07:02.510 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53148 1 109 1 2025-10-21 05:07:02.509 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53026 1 80 1 2025-10-21 05:07:02.499 00:00:00.000 UDP 28.104.0.1:53148 -> 198.28.0.2:53 1 64 1 2025-10-21 05:07:02.498 00:00:00.000 UDP 28.104.0.1:53026 -> 198.28.0.2:53 1 64 1 2025-10-21 05:02:54.478 00:05:50.970 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-21 05:08:02.793 00:00:00.000 UDP 28.104.0.1:54304 -> 198.28.0.2:53 1 64 1 2025-10-21 05:08:02.793 00:00:00.000 UDP 28.104.0.1:54558 -> 198.28.0.2:53 1 64 1 2025-10-21 05:08:02.803 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54304 1 80 1 2025-10-21 05:08:02.803 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54558 1 109 1 2025-10-21 05:03:54.392 00:05:51.066 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-21 05:03:54.393 00:06:00.134 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-21 05:09:03.109 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60480 1 80 1 2025-10-21 05:09:03.109 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57050 1 109 1 2025-10-21 05:09:03.098 00:00:00.000 UDP 28.104.0.1:57050 -> 198.28.0.2:53 1 64 1 2025-10-21 05:09:03.098 00:00:00.000 UDP 28.104.0.1:60480 -> 198.28.0.2:53 1 64 1 2025-10-21 05:05:17.939 00:05:10.035 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2648 1 2025-10-21 05:04:54.298 00:06:00.094 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-21 05:10:03.392 00:00:00.000 UDP 28.104.0.1:34366 -> 198.28.0.2:53 1 64 1 2025-10-21 05:10:03.392 00:00:00.000 UDP 28.104.0.1:49566 -> 198.28.0.2:53 1 64 1 2025-10-21 05:10:03.404 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49566 1 109 1 2025-10-21 05:10:03.404 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34366 1 80 1 2025-10-21 05:10:41.292 00:00:00.027 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-21 05:06:45.499 00:05:08.972 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-21 05:11:03.695 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42724 1 109 1 2025-10-21 05:11:03.695 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58394 1 80 1 2025-10-21 05:11:03.686 00:00:00.000 UDP 28.104.0.1:42724 -> 198.28.0.2:53 1 64 1 2025-10-21 05:11:03.686 00:00:00.000 UDP 28.104.0.1:58394 -> 198.28.0.2:53 1 64 1 2025-10-21 05:06:54.401 00:05:51.048 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-21 05:12:03.968 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37860 1 109 1 2025-10-21 05:12:03.969 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58333 1 80 1 2025-10-21 05:12:03.958 00:00:00.000 UDP 28.104.0.1:37860 -> 198.28.0.2:53 1 64 1 2025-10-21 05:12:03.958 00:00:00.000 UDP 28.104.0.1:58333 -> 198.28.0.2:53 1 64 1 2025-10-21 05:13:04.256 00:00:00.000 UDP 28.104.0.1:33240 -> 198.28.0.2:53 1 64 1 2025-10-21 05:13:04.256 00:00:00.000 UDP 28.104.0.1:51171 -> 198.28.0.2:53 1 64 1 2025-10-21 05:13:04.265 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51171 1 80 1 2025-10-21 05:13:04.265 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33240 1 109 1 2025-10-21 05:08:54.480 00:05:50.972 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-21 05:14:04.553 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53934 1 109 1 2025-10-21 05:14:04.553 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35704 1 80 1 2025-10-21 05:14:04.543 00:00:00.000 UDP 28.104.0.1:35704 -> 198.28.0.2:53 1 64 1 2025-10-21 05:14:04.543 00:00:00.000 UDP 28.104.0.1:53934 -> 198.28.0.2:53 1 64 1 2025-10-21 05:09:54.391 00:05:51.071 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-21 05:10:37.949 00:05:10.014 OSPF 28.0.2.1:0 -> 224.0.0.5:0 42 3072 1 2025-10-21 05:15:04.833 00:00:00.000 UDP 28.104.0.1:37395 -> 198.28.0.2:53 1 64 1 2025-10-21 05:15:04.833 00:00:00.000 UDP 28.104.0.1:56077 -> 198.28.0.2:53 1 64 1 2025-10-21 05:15:04.844 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56077 1 109 1 2025-10-21 05:15:04.844 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37395 1 80 1 2025-10-21 05:15:41.737 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-21 05:10:54.391 00:06:00.136 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-21 05:16:05.135 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60378 1 109 1 2025-10-21 05:16:05.135 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54557 1 80 1 2025-10-21 05:16:05.125 00:00:00.000 UDP 28.104.0.1:54557 -> 198.28.0.2:53 1 64 1 2025-10-21 05:16:05.125 00:00:00.000 UDP 28.104.0.1:60378 -> 198.28.0.2:53 1 64 1 2025-10-21 05:12:45.499 00:05:08.979 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-21 05:11:54.302 00:06:00.093 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-21 05:17:05.411 00:00:00.000 UDP 28.104.0.1:33161 -> 198.28.0.2:53 1 64 1 2025-10-21 05:17:05.411 00:00:00.000 UDP 28.104.0.1:55394 -> 198.28.0.2:53 1 64 1 2025-10-21 05:17:05.422 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33161 1 80 1 2025-10-21 05:17:05.421 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55394 1 109 1 2025-10-21 05:12:54.404 00:05:51.047 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-21 05:18:05.704 00:00:00.000 UDP 28.104.0.1:35779 -> 198.28.0.2:53 1 64 1 2025-10-21 05:18:05.704 00:00:00.000 UDP 28.104.0.1:53585 -> 198.28.0.2:53 1 64 1 2025-10-21 05:18:05.718 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53585 1 109 1 2025-10-21 05:18:05.718 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35779 1 80 1 2025-10-21 05:19:06.018 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34987 1 109 1 2025-10-21 05:19:06.021 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54735 1 80 1 2025-10-21 05:19:06.007 00:00:00.000 UDP 28.104.0.1:34987 -> 198.28.0.2:53 1 64 1 2025-10-21 05:19:06.007 00:00:00.000 UDP 28.104.0.1:54735 -> 198.28.0.2:53 1 64 1 2025-10-21 05:14:54.481 00:05:50.971 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-21 05:20:06.319 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34184 1 109 1 2025-10-21 05:20:06.319 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44001 1 80 1 2025-10-21 05:20:06.311 00:00:00.000 UDP 28.104.0.1:44001 -> 198.28.0.2:53 1 64 1 2025-10-21 05:20:06.311 00:00:00.000 UDP 28.104.0.1:34184 -> 198.28.0.2:53 1 64 1 2025-10-21 05:15:57.963 00:05:10.010 OSPF 28.0.2.1:0 -> 224.0.0.5:0 42 3096 1 2025-10-21 05:20:41.649 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-21 05:15:54.394 00:05:51.068 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-21 05:21:06.597 00:00:00.000 UDP 28.104.0.1:50494 -> 198.28.0.2:53 1 64 1 2025-10-21 05:21:06.597 00:00:00.000 UDP 28.104.0.1:41973 -> 198.28.0.2:53 1 64 1 2025-10-21 05:21:06.608 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50494 1 109 1 2025-10-21 05:21:06.608 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41973 1 80 1 2025-10-21 05:22:06.863 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60644 1 109 1 2025-10-21 05:22:06.863 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38869 1 80 1 2025-10-21 05:22:06.854 00:00:00.000 UDP 28.104.0.1:38869 -> 198.28.0.2:53 1 64 1 2025-10-21 05:22:06.854 00:00:00.000 UDP 28.104.0.1:60644 -> 198.28.0.2:53 1 64 1 2025-10-21 05:18:45.502 00:05:08.978 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-21 05:17:54.395 00:06:00.134 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-21 05:23:07.189 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34627 1 109 1 2025-10-21 05:23:07.188 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52635 1 80 1 2025-10-21 05:23:07.179 00:00:00.000 UDP 28.104.0.1:34627 -> 198.28.0.2:53 1 64 1 2025-10-21 05:23:07.178 00:00:00.000 UDP 28.104.0.1:52635 -> 198.28.0.2:53 1 64 1 2025-10-21 05:18:54.405 00:05:51.048 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-21 05:18:54.304 00:06:00.092 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-21 05:24:07.480 00:00:00.000 UDP 28.104.0.1:53982 -> 198.28.0.2:53 1 64 1 2025-10-21 05:24:07.480 00:00:00.000 UDP 28.104.0.1:36810 -> 198.28.0.2:53 1 64 1 2025-10-21 05:24:07.489 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53982 1 109 1 2025-10-21 05:24:07.489 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36810 1 80 1 2025-10-21 05:25:07.784 00:00:00.000 UDP 28.104.0.1:33804 -> 198.28.0.2:53 1 64 1 2025-10-21 05:25:07.783 00:00:00.000 UDP 28.104.0.1:36349 -> 198.28.0.2:53 1 64 1 2025-10-21 05:25:07.794 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33804 1 80 1 2025-10-21 05:25:07.794 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36349 1 109 1 2025-10-21 05:21:17.974 00:05:10.401 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2384 1 2025-10-21 05:25:41.664 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-21 05:20:54.489 00:05:50.964 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-21 05:26:08.092 00:00:00.000 UDP 28.104.0.1:58740 -> 198.28.0.2:53 1 64 1 2025-10-21 05:26:08.092 00:00:00.000 UDP 28.104.0.1:40361 -> 198.28.0.2:53 1 64 1 2025-10-21 05:26:08.102 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40361 1 80 1 2025-10-21 05:26:08.102 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58740 1 109 1 2025-10-21 05:21:54.395 00:05:51.069 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-21 05:27:08.397 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51936 1 80 1 2025-10-21 05:27:08.398 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55349 1 109 1 2025-10-21 05:27:08.388 00:00:00.000 UDP 28.104.0.1:55349 -> 198.28.0.2:53 1 64 1 2025-10-21 05:27:08.388 00:00:00.000 UDP 28.104.0.1:51936 -> 198.28.0.2:53 1 64 1 2025-10-21 05:28:08.703 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36675 1 80 1 2025-10-21 05:28:08.703 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42561 1 109 1 2025-10-21 05:28:08.693 00:00:00.000 UDP 28.104.0.1:36675 -> 198.28.0.2:53 1 64 1 2025-10-21 05:28:08.693 00:00:00.000 UDP 28.104.0.1:42561 -> 198.28.0.2:53 1 64 1 2025-10-21 05:24:45.503 00:05:08.978 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-21 05:29:08.998 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58893 1 80 1 2025-10-21 05:29:08.997 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56348 1 109 1 2025-10-21 05:29:08.988 00:00:00.000 UDP 28.104.0.1:58893 -> 198.28.0.2:53 1 64 1 2025-10-21 05:29:08.987 00:00:00.000 UDP 28.104.0.1:56348 -> 198.28.0.2:53 1 64 1 2025-10-21 05:24:54.405 00:05:51.049 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-21 05:24:54.396 00:06:00.134 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-21 05:30:09.339 00:00:00.000 UDP 28.104.0.1:44509 -> 198.28.0.2:53 1 64 1 2025-10-21 05:30:09.339 00:00:00.000 UDP 28.104.0.1:58749 -> 198.28.0.2:53 1 64 1 2025-10-21 05:30:09.350 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58749 1 80 1 2025-10-21 05:30:09.350 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44509 1 109 1 2025-10-21 05:30:41.967 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-21 05:26:37.982 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2504 1 2025-10-21 05:25:54.308 00:06:00.089 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-21 05:31:09.650 00:00:00.000 UDP 28.104.0.1:49918 -> 198.28.0.2:53 1 64 1 2025-10-21 05:31:09.650 00:00:00.000 UDP 28.104.0.1:43577 -> 198.28.0.2:53 1 64 1 2025-10-21 05:31:09.661 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49918 1 109 1 2025-10-21 05:31:09.661 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43577 1 80 1 2025-10-21 05:26:54.491 00:05:50.964 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-21 05:32:09.974 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35615 1 80 1 2025-10-21 05:32:09.975 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42557 1 109 1 2025-10-21 05:32:09.965 00:00:00.000 UDP 28.104.0.1:35615 -> 198.28.0.2:53 1 64 1 2025-10-21 05:32:09.965 00:00:00.000 UDP 28.104.0.1:42557 -> 198.28.0.2:53 1 64 1 2025-10-21 05:27:54.396 00:05:51.069 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-21 05:33:10.283 00:00:00.000 UDP 28.104.0.1:48887 -> 198.28.0.2:53 1 64 1 2025-10-21 05:33:10.283 00:00:00.000 UDP 28.104.0.1:54665 -> 198.28.0.2:53 1 64 1 2025-10-21 05:33:10.294 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54665 1 109 1 2025-10-21 05:33:10.294 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48887 1 80 1 2025-10-21 05:34:10.593 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53167 1 109 1 2025-10-21 05:34:10.593 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59653 1 80 1 2025-10-21 05:34:10.584 00:00:00.000 UDP 28.104.0.1:59653 -> 198.28.0.2:53 1 64 1 2025-10-21 05:34:10.584 00:00:00.000 UDP 28.104.0.1:53167 -> 198.28.0.2:53 1 64 1 2025-10-21 05:30:45.505 00:05:08.978 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-21 05:35:10.883 00:00:00.000 UDP 28.104.0.1:57452 -> 198.28.0.2:53 1 64 1 2025-10-21 05:35:10.883 00:00:00.000 UDP 28.104.0.1:46721 -> 198.28.0.2:53 1 64 1 2025-10-21 05:35:10.894 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46721 1 80 1 2025-10-21 05:35:10.894 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57452 1 109 1 2025-10-21 05:35:41.761 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-21 05:30:54.407 00:05:51.051 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-21 05:36:11.227 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36089 1 109 1 2025-10-21 05:31:57.988 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2816 1 2025-10-21 05:36:11.227 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42624 1 80 1 2025-10-21 05:36:11.216 00:00:00.000 UDP 28.104.0.1:42624 -> 198.28.0.2:53 1 64 1 2025-10-21 05:36:11.216 00:00:00.000 UDP 28.104.0.1:36089 -> 198.28.0.2:53 1 64 1 2025-10-21 05:31:54.397 00:06:00.134 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-21 05:37:11.525 00:00:00.000 UDP 28.104.0.1:53325 -> 198.28.0.2:53 1 64 1 2025-10-21 05:37:11.526 00:00:00.000 UDP 28.104.0.1:51223 -> 198.28.0.2:53 1 64 1 2025-10-21 05:37:11.536 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53325 1 80 1 2025-10-21 05:37:11.536 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51223 1 109 1 2025-10-21 05:32:54.492 00:05:50.966 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-21 05:32:54.313 00:06:00.088 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-21 05:38:11.830 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53153 1 109 1 2025-10-21 05:38:11.830 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50263 1 80 1 2025-10-21 05:38:11.820 00:00:00.000 UDP 28.104.0.1:53153 -> 198.28.0.2:53 1 64 1 2025-10-21 05:38:11.820 00:00:00.000 UDP 28.104.0.1:50263 -> 198.28.0.2:53 1 64 1 2025-10-21 05:33:54.396 00:05:51.072 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-21 05:39:12.147 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53599 1 109 1 2025-10-21 05:39:12.147 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56480 1 80 1 2025-10-21 05:39:12.137 00:00:00.000 UDP 28.104.0.1:53599 -> 198.28.0.2:53 1 64 1 2025-10-21 05:39:12.137 00:00:00.000 UDP 28.104.0.1:56480 -> 198.28.0.2:53 1 64 1 2025-10-21 05:40:12.426 00:00:00.000 UDP 28.104.0.1:33421 -> 198.28.0.2:53 1 64 1 2025-10-21 05:40:12.426 00:00:00.000 UDP 28.104.0.1:50175 -> 198.28.0.2:53 1 64 1 2025-10-21 05:40:12.436 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50175 1 80 1 2025-10-21 05:40:12.436 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33421 1 109 1 2025-10-21 05:40:42.148 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-21 05:36:45.508 00:05:08.978 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-21 05:41:12.722 00:00:00.000 UDP 28.104.0.1:34404 -> 198.28.0.2:53 1 64 1 2025-10-21 05:41:12.723 00:00:00.000 UDP 28.104.0.1:52185 -> 198.28.0.2:53 1 64 1 2025-10-21 05:41:12.733 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52185 1 109 1 2025-10-21 05:41:12.732 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34404 1 80 1 2025-10-21 05:37:17.994 00:05:10.002 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2604 1 2025-10-21 05:36:54.409 00:05:51.049 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-21 05:42:13.067 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44478 1 80 1 2025-10-21 05:42:13.067 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50583 1 109 1 2025-10-21 05:42:13.056 00:00:00.000 UDP 28.104.0.1:44478 -> 198.28.0.2:53 1 64 1 2025-10-21 05:42:13.056 00:00:00.000 UDP 28.104.0.1:50583 -> 198.28.0.2:53 1 64 1 2025-10-21 05:43:13.368 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60277 1 80 1 2025-10-21 05:43:13.368 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46503 1 109 1 2025-10-21 05:43:13.359 00:00:00.000 UDP 28.104.0.1:60277 -> 198.28.0.2:53 1 64 1 2025-10-21 05:43:13.359 00:00:00.000 UDP 28.104.0.1:46503 -> 198.28.0.2:53 1 64 1 2025-10-21 05:38:54.496 00:05:50.963 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-21 05:38:54.399 00:06:00.134 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-21 05:44:13.671 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50969 1 80 1 2025-10-21 05:44:13.671 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46883 1 109 1 2025-10-21 05:44:13.661 00:00:00.000 UDP 28.104.0.1:46883 -> 198.28.0.2:53 1 64 1 2025-10-21 05:44:13.661 00:00:00.000 UDP 28.104.0.1:50969 -> 198.28.0.2:53 1 64 1 2025-10-21 05:39:54.399 00:05:51.070 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-21 05:39:54.312 00:06:00.090 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-21 05:45:13.933 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45427 1 80 1 2025-10-21 05:45:13.933 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35319 1 109 1 2025-10-21 05:45:13.923 00:00:00.000 UDP 28.104.0.1:35319 -> 198.28.0.2:53 1 64 1 2025-10-21 05:45:13.922 00:00:00.000 UDP 28.104.0.1:45427 -> 198.28.0.2:53 1 64 1 2025-10-21 05:45:42.116 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-21 05:46:17.088 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36820 1 109 1 2025-10-21 05:46:17.088 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46044 1 80 1 2025-10-21 05:46:17.080 00:00:00.000 UDP 28.104.0.1:36820 -> 198.28.0.2:53 1 64 1 2025-10-21 05:46:17.080 00:00:00.000 UDP 28.104.0.1:46044 -> 198.28.0.2:53 1 64 1 2025-10-21 05:42:37.996 00:05:00.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2480 1 2025-10-21 05:42:45.509 00:05:08.980 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-21 05:47:17.374 00:00:00.000 UDP 28.104.0.1:55506 -> 198.28.0.2:53 1 64 1 2025-10-21 05:47:17.374 00:00:00.000 UDP 28.104.0.1:60484 -> 198.28.0.2:53 1 64 1 2025-10-21 05:47:17.385 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60484 1 109 1 2025-10-21 05:47:17.385 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55506 1 80 1 2025-10-21 05:42:54.413 00:05:51.048 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-21 05:48:17.696 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51274 1 80 1 2025-10-21 05:48:17.696 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47500 1 109 1 2025-10-21 05:48:17.685 00:00:00.000 UDP 28.104.0.1:47500 -> 198.28.0.2:53 1 64 1 2025-10-21 05:48:17.685 00:00:00.000 UDP 28.104.0.1:51274 -> 198.28.0.2:53 1 64 1 2025-10-21 05:49:17.996 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44477 1 109 1 2025-10-21 05:49:17.996 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42759 1 80 1 2025-10-21 05:49:17.986 00:00:00.000 UDP 28.104.0.1:42759 -> 198.28.0.2:53 1 64 1 2025-10-21 05:49:17.986 00:00:00.000 UDP 28.104.0.1:44477 -> 198.28.0.2:53 1 64 1 2025-10-21 05:44:54.496 00:05:50.964 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-21 05:50:18.296 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57248 1 80 1 2025-10-21 05:50:18.296 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58393 1 109 1 2025-10-21 05:50:18.285 00:00:00.000 UDP 28.104.0.1:58393 -> 198.28.0.2:53 1 64 1 2025-10-21 05:50:18.285 00:00:00.000 UDP 28.104.0.1:57248 -> 198.28.0.2:53 1 64 1 2025-10-21 05:50:42.281 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-21 05:45:54.402 00:05:51.068 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-21 05:45:54.404 00:06:00.133 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-21 05:51:18.589 00:00:00.000 UDP 28.104.0.1:36488 -> 198.28.0.2:53 1 64 1 2025-10-21 05:51:18.589 00:00:00.000 UDP 28.104.0.1:54332 -> 198.28.0.2:53 1 64 1 2025-10-21 05:51:18.599 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36488 1 109 1 2025-10-21 05:51:18.599 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54332 1 80 1 2025-10-21 05:46:54.314 00:06:00.089 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-21 05:47:48.000 00:05:10.010 OSPF 28.0.2.1:0 -> 224.0.0.5:0 43 3140 1 2025-10-21 05:52:18.903 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58733 1 80 1 2025-10-21 05:52:18.903 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36035 1 109 1 2025-10-21 05:52:18.893 00:00:00.000 UDP 28.104.0.1:58733 -> 198.28.0.2:53 1 64 1 2025-10-21 05:52:18.893 00:00:00.000 UDP 28.104.0.1:36035 -> 198.28.0.2:53 1 64 1 2025-10-21 05:48:45.511 00:05:08.979 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-21 05:53:19.224 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60378 1 109 1 2025-10-21 05:53:19.224 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41618 1 80 1 2025-10-21 05:53:19.216 00:00:00.000 UDP 28.104.0.1:60378 -> 198.28.0.2:53 1 64 1 2025-10-21 05:53:19.216 00:00:00.000 UDP 28.104.0.1:41618 -> 198.28.0.2:53 1 64 1 2025-10-21 05:48:54.413 00:05:51.049 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-21 05:54:19.517 00:00:00.000 UDP 28.104.0.1:57231 -> 198.28.0.2:53 1 64 1 2025-10-21 05:54:19.517 00:00:00.000 UDP 28.104.0.1:40699 -> 198.28.0.2:53 1 64 1 2025-10-21 05:54:19.527 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40699 1 80 1 2025-10-21 05:54:19.528 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57231 1 109 1 2025-10-21 05:55:19.831 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45863 1 80 1 2025-10-21 05:55:19.831 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45983 1 109 1 2025-10-21 05:55:19.820 00:00:00.000 UDP 28.104.0.1:45863 -> 198.28.0.2:53 1 64 1 2025-10-21 05:55:19.820 00:00:00.000 UDP 28.104.0.1:45983 -> 198.28.0.2:53 1 64 1 2025-10-21 05:55:42.625 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-21 05:50:54.499 00:05:50.963 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-21 05:56:20.123 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43589 1 109 1 2025-10-21 05:56:20.123 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35229 1 80 1 2025-10-21 05:56:20.113 00:00:00.000 UDP 28.104.0.1:43589 -> 198.28.0.2:53 1 64 1 2025-10-21 05:56:20.113 00:00:00.000 UDP 28.104.0.1:35229 -> 198.28.0.2:53 1 64 1 2025-10-21 05:51:54.404 00:05:51.069 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-21 05:53:08.023 00:05:10.020 OSPF 28.0.2.1:0 -> 224.0.0.5:0 34 2360 1 2025-10-21 05:57:20.419 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58535 1 80 1 2025-10-21 05:57:20.421 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38549 1 109 1 2025-10-21 05:57:20.408 00:00:00.000 UDP 28.104.0.1:38549 -> 198.28.0.2:53 1 64 1 2025-10-21 05:57:20.408 00:00:00.000 UDP 28.104.0.1:58535 -> 198.28.0.2:53 1 64 1 2025-10-21 05:52:54.403 00:06:00.135 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-21 05:58:20.829 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45475 1 109 1 2025-10-21 05:58:20.826 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53173 1 80 1 2025-10-21 05:58:20.816 00:00:00.000 UDP 28.104.0.1:53173 -> 198.28.0.2:53 1 64 1 2025-10-21 05:58:20.816 00:00:00.000 UDP 28.104.0.1:45475 -> 198.28.0.2:53 1 64 1 Summary: total flows: 320, total bytes: 96137, total packets: 1416, avg bps: 199, avg pps: 0, avg bpp: 67 Time window: 2025-10-21 04:54:45 - 2025-10-21 05:58:54 Total flows processed: 320, passed: 320, Blocks skipped: 0, Bytes read: 33344 Sys: 0.0031s User: 0.0031s Wall: 0.0037s flows/second: 86810.5 Runtime: 0.0037s