Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-24 21:54:56.130 00:04:00.018 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-10-24 21:58:54.936 00:00:00.000 UDP 28.104.0.1:43261 -> 198.28.0.2:53 1 64 1 2025-10-24 21:58:54.936 00:00:00.000 UDP 28.104.0.1:57298 -> 198.28.0.2:53 1 64 1 2025-10-24 21:58:54.945 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57298 1 109 1 2025-10-24 21:58:54.945 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43261 1 80 1 2025-10-24 21:59:55.250 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53523 1 109 1 2025-10-24 21:59:55.250 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60551 1 80 1 2025-10-24 21:59:55.239 00:00:00.000 UDP 28.104.0.1:60551 -> 198.28.0.2:53 1 64 1 2025-10-24 21:59:55.239 00:00:00.000 UDP 28.104.0.1:53523 -> 198.28.0.2:53 1 64 1 2025-10-24 21:56:47.107 00:05:09.069 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-24 22:00:55.585 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38510 1 109 1 2025-10-24 22:00:55.585 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58291 1 80 1 2025-10-24 22:00:55.575 00:00:00.000 UDP 28.104.0.1:38510 -> 198.28.0.2:53 1 64 1 2025-10-24 22:00:55.575 00:00:00.000 UDP 28.104.0.1:58291 -> 198.28.0.2:53 1 64 1 2025-10-24 21:56:56.129 00:05:50.989 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-24 22:01:55.879 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58855 1 109 1 2025-10-24 22:01:55.879 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48579 1 80 1 2025-10-24 22:01:55.868 00:00:00.000 UDP 28.104.0.1:48579 -> 198.28.0.2:53 1 64 1 2025-10-24 22:01:55.869 00:00:00.000 UDP 28.104.0.1:58855 -> 198.28.0.2:53 1 64 1 2025-10-24 22:02:28.762 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-24 22:02:56.186 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49384 1 80 1 2025-10-24 22:02:56.186 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54253 1 109 1 2025-10-24 22:02:56.176 00:00:00.000 UDP 28.104.0.1:49384 -> 198.28.0.2:53 1 64 1 2025-10-24 22:02:56.176 00:00:00.000 UDP 28.104.0.1:54253 -> 198.28.0.2:53 1 64 1 2025-10-24 21:59:05.413 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 45 3168 1 2025-10-24 21:58:56.166 00:05:50.993 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-24 22:03:56.466 00:00:00.000 UDP 28.104.0.1:60735 -> 198.28.0.2:53 1 64 1 2025-10-24 22:03:56.466 00:00:00.000 UDP 28.104.0.1:43550 -> 198.28.0.2:53 1 64 1 2025-10-24 21:58:56.020 00:06:00.112 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-24 22:03:56.476 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43550 1 109 1 2025-10-24 22:03:56.476 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60735 1 80 1 2025-10-24 21:59:56.140 00:05:50.968 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-24 22:04:56.764 00:00:00.000 UDP 28.104.0.1:44185 -> 198.28.0.2:53 1 64 1 2025-10-24 21:59:56.131 00:06:00.018 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-24 22:04:56.764 00:00:00.000 UDP 28.104.0.1:46273 -> 198.28.0.2:53 1 64 1 2025-10-24 22:04:56.773 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44185 1 80 1 2025-10-24 22:04:56.773 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46273 1 109 1 2025-10-24 22:05:57.076 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46140 1 109 1 2025-10-24 22:05:57.076 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60132 1 80 1 2025-10-24 22:05:57.066 00:00:00.000 UDP 28.104.0.1:46140 -> 198.28.0.2:53 1 64 1 2025-10-24 22:05:57.066 00:00:00.000 UDP 28.104.0.1:60132 -> 198.28.0.2:53 1 64 1 2025-10-24 22:02:47.107 00:05:09.070 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-24 22:06:57.364 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45834 1 80 1 2025-10-24 22:06:57.364 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53081 1 109 1 2025-10-24 22:06:57.355 00:00:00.000 UDP 28.104.0.1:53081 -> 198.28.0.2:53 1 64 1 2025-10-24 22:06:57.355 00:00:00.000 UDP 28.104.0.1:45834 -> 198.28.0.2:53 1 64 1 2025-10-24 22:07:28.854 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-24 22:02:56.131 00:05:50.989 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-24 22:07:57.604 00:00:00.000 UDP 28.104.0.1:60295 -> 198.28.0.2:53 1 64 1 2025-10-24 22:07:57.604 00:00:00.000 UDP 28.104.0.1:37880 -> 198.28.0.2:53 1 64 1 2025-10-24 22:07:57.616 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60295 1 109 1 2025-10-24 22:07:57.616 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37880 1 80 1 2025-10-24 22:04:25.418 00:05:10.009 OSPF 28.0.2.1:0 -> 224.0.0.5:0 33 2240 1 2025-10-24 22:08:57.902 00:00:00.000 UDP 28.104.0.1:35202 -> 198.28.0.2:53 1 64 1 2025-10-24 22:08:57.902 00:00:00.000 UDP 28.104.0.1:44136 -> 198.28.0.2:53 1 64 1 2025-10-24 22:08:57.912 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35202 1 80 1 2025-10-24 22:08:57.912 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44136 1 109 1 2025-10-24 22:04:56.167 00:05:50.993 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-24 22:09:58.838 00:00:00.000 UDP 28.104.0.1:35363 -> 198.28.0.2:53 1 64 1 2025-10-24 22:09:58.838 00:00:00.000 UDP 28.104.0.1:44630 -> 198.28.0.2:53 1 64 1 2025-10-24 22:09:58.849 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35363 1 80 1 2025-10-24 22:09:58.849 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44630 1 109 1 2025-10-24 22:05:56.141 00:05:50.968 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-24 22:06:56.131 00:04:00.018 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-10-24 22:05:56.020 00:05:00.112 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-10-24 22:10:59.129 00:00:00.000 UDP 28.104.0.1:59676 -> 198.28.0.2:53 1 64 1 2025-10-24 22:10:59.129 00:00:00.000 UDP 28.104.0.1:44849 -> 198.28.0.2:53 1 64 1 2025-10-24 22:10:59.139 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59676 1 80 1 2025-10-24 22:10:59.139 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44849 1 109 1 2025-10-24 22:11:59.395 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52954 1 109 1 2025-10-24 22:11:59.396 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45562 1 80 1 2025-10-24 22:11:59.384 00:00:00.000 UDP 28.104.0.1:52954 -> 198.28.0.2:53 1 64 1 2025-10-24 22:11:59.384 00:00:00.000 UDP 28.104.0.1:45562 -> 198.28.0.2:53 1 64 1 2025-10-24 22:12:28.895 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-24 22:08:47.110 00:05:09.069 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-24 22:12:59.688 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48262 1 109 1 2025-10-24 22:12:59.690 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59370 1 80 1 2025-10-24 22:12:59.679 00:00:00.000 UDP 28.104.0.1:59370 -> 198.28.0.2:53 1 64 1 2025-10-24 22:12:59.679 00:00:00.000 UDP 28.104.0.1:48262 -> 198.28.0.2:53 1 64 1 2025-10-24 22:08:56.131 00:05:50.989 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-24 22:09:45.428 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 42 2976 1 2025-10-24 22:14:00.005 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47824 1 109 1 2025-10-24 22:14:00.006 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45288 1 80 1 2025-10-24 22:13:59.994 00:00:00.000 UDP 28.104.0.1:45288 -> 198.28.0.2:53 1 64 1 2025-10-24 22:13:59.994 00:00:00.000 UDP 28.104.0.1:47824 -> 198.28.0.2:53 1 64 1 2025-10-24 22:15:00.298 00:00:00.000 UDP 28.104.0.1:47361 -> 198.28.0.2:53 1 64 1 2025-10-24 22:15:00.298 00:00:00.000 UDP 28.104.0.1:37473 -> 198.28.0.2:53 1 64 1 2025-10-24 22:15:00.308 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37473 1 109 1 2025-10-24 22:15:00.308 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47361 1 80 1 2025-10-24 22:10:56.168 00:05:50.993 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-24 22:16:00.598 00:00:00.000 UDP 28.104.0.1:57623 -> 198.28.0.2:53 1 64 1 2025-10-24 22:16:00.598 00:00:00.000 UDP 28.104.0.1:43544 -> 198.28.0.2:53 1 64 1 2025-10-24 22:16:00.610 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43544 1 80 1 2025-10-24 22:16:00.610 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57623 1 109 1 2025-10-24 22:11:56.142 00:05:50.970 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-24 22:11:56.132 00:06:00.019 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-24 22:11:56.027 00:06:00.108 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-24 22:17:00.900 00:00:00.000 UDP 28.104.0.1:35629 -> 198.28.0.2:53 1 64 1 2025-10-24 22:17:00.900 00:00:00.000 UDP 28.104.0.1:52106 -> 198.28.0.2:53 1 64 1 2025-10-24 22:17:00.911 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35629 1 80 1 2025-10-24 22:17:00.911 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52106 1 109 1 2025-10-24 22:17:29.150 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-24 22:18:01.224 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36104 1 109 1 2025-10-24 22:18:01.224 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36428 1 80 1 2025-10-24 22:18:01.214 00:00:00.000 UDP 28.104.0.1:36104 -> 198.28.0.2:53 1 64 1 2025-10-24 22:18:01.214 00:00:00.000 UDP 28.104.0.1:36428 -> 198.28.0.2:53 1 64 1 2025-10-24 22:19:01.493 00:00:00.000 UDP 28.104.0.1:45457 -> 198.28.0.2:53 1 64 1 2025-10-24 22:19:01.493 00:00:00.000 UDP 28.104.0.1:44630 -> 198.28.0.2:53 1 64 1 2025-10-24 22:14:47.111 00:05:09.072 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-24 22:19:01.503 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44630 1 109 1 2025-10-24 22:19:01.503 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45457 1 80 1 2025-10-24 22:15:05.435 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2796 1 2025-10-24 22:14:56.132 00:05:50.991 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-24 22:20:01.796 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49086 1 80 1 2025-10-24 22:20:01.796 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47990 1 109 1 2025-10-24 22:20:01.785 00:00:00.000 UDP 28.104.0.1:49086 -> 198.28.0.2:53 1 64 1 2025-10-24 22:20:01.785 00:00:00.000 UDP 28.104.0.1:47990 -> 198.28.0.2:53 1 64 1 2025-10-24 22:18:56.134 00:02:00.018 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-24 22:21:02.063 00:00:00.000 UDP 28.104.0.1:45347 -> 198.28.0.2:53 1 64 1 2025-10-24 22:21:02.063 00:00:00.000 UDP 28.104.0.1:45480 -> 198.28.0.2:53 1 64 1 2025-10-24 22:21:02.074 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45480 1 80 1 2025-10-24 22:21:02.073 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45347 1 109 1 2025-10-24 22:16:56.171 00:05:50.992 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-24 22:22:02.363 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45351 1 80 1 2025-10-24 22:22:02.363 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56070 1 109 1 2025-10-24 22:22:02.353 00:00:00.000 UDP 28.104.0.1:45351 -> 198.28.0.2:53 1 64 1 2025-10-24 22:22:02.353 00:00:00.000 UDP 28.104.0.1:56070 -> 198.28.0.2:53 1 64 1 2025-10-24 22:22:29.257 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-24 22:17:56.145 00:05:50.968 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-24 22:23:02.624 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55727 1 109 1 2025-10-24 22:23:02.624 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41754 1 80 1 2025-10-24 22:23:02.614 00:00:00.000 UDP 28.104.0.1:55727 -> 198.28.0.2:53 1 64 1 2025-10-24 22:23:02.614 00:00:00.000 UDP 28.104.0.1:41754 -> 198.28.0.2:53 1 64 1 2025-10-24 22:18:56.031 00:06:00.105 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-24 22:24:02.921 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48670 1 80 1 2025-10-24 22:24:02.921 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49877 1 109 1 2025-10-24 22:24:02.911 00:00:00.000 UDP 28.104.0.1:49877 -> 198.28.0.2:53 1 64 1 2025-10-24 22:24:02.910 00:00:00.000 UDP 28.104.0.1:48670 -> 198.28.0.2:53 1 64 1 2025-10-24 22:20:25.443 00:05:10.012 OSPF 28.0.2.1:0 -> 224.0.0.5:0 34 2320 1 2025-10-24 22:20:47.112 00:05:09.072 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-24 22:25:03.231 00:00:00.000 UDP 28.104.0.1:42069 -> 198.28.0.2:53 1 64 1 2025-10-24 22:25:03.232 00:00:00.000 UDP 28.104.0.1:55822 -> 198.28.0.2:53 1 64 1 2025-10-24 22:25:03.241 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42069 1 80 1 2025-10-24 22:25:03.242 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55822 1 109 1 2025-10-24 22:20:56.134 00:05:50.989 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-24 22:21:56.136 00:04:00.017 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-10-24 22:26:03.526 00:00:00.000 UDP 28.104.0.1:33705 -> 198.28.0.2:53 1 64 1 2025-10-24 22:26:03.526 00:00:00.000 UDP 28.104.0.1:55414 -> 198.28.0.2:53 1 64 1 2025-10-24 22:26:03.536 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55414 1 80 1 2025-10-24 22:26:03.536 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33705 1 109 1 2025-10-24 22:27:04.098 00:00:00.000 UDP 28.104.0.1:48669 -> 198.28.0.2:53 1 64 1 2025-10-24 22:27:04.098 00:00:00.000 UDP 28.104.0.1:58577 -> 198.28.0.2:53 1 64 1 2025-10-24 22:27:04.108 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48669 1 109 1 2025-10-24 22:27:04.108 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58577 1 80 1 2025-10-24 22:27:29.308 00:00:00.020 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-24 22:22:56.174 00:05:50.991 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-24 22:28:04.365 00:00:00.000 UDP 28.104.0.1:59351 -> 198.28.0.2:53 1 64 1 2025-10-24 22:28:04.365 00:00:00.000 UDP 28.104.0.1:59570 -> 198.28.0.2:53 1 64 1 2025-10-24 22:28:04.376 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59570 1 80 1 2025-10-24 22:28:04.376 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59351 1 109 1 2025-10-24 22:23:56.146 00:05:50.968 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-24 22:29:04.881 00:00:00.000 UDP 28.104.0.1:35636 -> 198.28.0.2:53 1 64 1 2025-10-24 22:29:04.881 00:00:00.000 UDP 28.104.0.1:50865 -> 198.28.0.2:53 1 64 1 2025-10-24 22:29:04.892 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50865 1 80 1 2025-10-24 22:29:04.892 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35636 1 109 1 2025-10-24 22:25:45.455 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 45 3308 1 2025-10-24 22:30:05.198 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56661 1 80 1 2025-10-24 22:30:05.199 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41776 1 109 1 2025-10-24 22:30:05.187 00:00:00.000 UDP 28.104.0.1:56661 -> 198.28.0.2:53 1 64 1 2025-10-24 22:30:05.188 00:00:00.000 UDP 28.104.0.1:41776 -> 198.28.0.2:53 1 64 1 2025-10-24 22:26:56.136 00:04:00.019 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-10-24 22:25:56.030 00:06:00.002 TCP 28.154.0.1:179 -> 28.155.0.1:36643 13 790 1 2025-10-24 22:26:47.112 00:05:09.076 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-24 22:31:05.477 00:00:00.000 UDP 28.104.0.1:43102 -> 198.28.0.2:53 1 64 1 2025-10-24 22:31:05.477 00:00:00.000 UDP 28.104.0.1:42193 -> 198.28.0.2:53 1 64 1 2025-10-24 22:31:05.488 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43102 1 109 1 2025-10-24 22:31:05.488 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42193 1 80 1 2025-10-24 22:26:56.136 00:05:50.988 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-24 22:32:05.780 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40236 1 109 1 2025-10-24 22:32:05.780 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48904 1 80 1 2025-10-24 22:32:05.767 00:00:00.000 UDP 28.104.0.1:48904 -> 198.28.0.2:53 1 64 1 2025-10-24 22:32:05.767 00:00:00.000 UDP 28.104.0.1:40236 -> 198.28.0.2:53 1 64 1 2025-10-24 22:32:29.472 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-24 22:33:06.075 00:00:00.000 UDP 28.104.0.1:43662 -> 198.28.0.2:53 1 64 1 2025-10-24 22:33:06.075 00:00:00.000 UDP 28.104.0.1:39838 -> 198.28.0.2:53 1 64 1 2025-10-24 22:33:06.084 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43662 1 109 1 2025-10-24 22:33:06.084 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39838 1 80 1 2025-10-24 22:28:56.175 00:05:50.990 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-24 22:34:06.370 00:00:00.000 UDP 28.104.0.1:54625 -> 198.28.0.2:53 1 64 1 2025-10-24 22:34:06.370 00:00:00.000 UDP 28.104.0.1:37858 -> 198.28.0.2:53 1 64 1 2025-10-24 22:34:06.381 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37858 1 80 1 2025-10-24 22:34:06.382 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54625 1 109 1 2025-10-24 22:29:56.149 00:05:50.966 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-24 22:35:06.667 00:00:00.000 UDP 28.104.0.1:41742 -> 198.28.0.2:53 1 64 1 2025-10-24 22:35:06.667 00:00:00.000 UDP 28.104.0.1:55129 -> 198.28.0.2:53 1 64 1 2025-10-24 22:35:06.677 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55129 1 80 1 2025-10-24 22:35:06.677 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41742 1 109 1 2025-10-24 22:31:05.460 00:05:10.012 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2400 1 2025-10-24 22:31:56.138 00:04:00.016 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-10-24 22:36:06.981 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54327 1 109 1 2025-10-24 22:36:06.982 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38231 1 80 1 2025-10-24 22:36:06.971 00:00:00.000 UDP 28.104.0.1:38231 -> 198.28.0.2:53 1 64 1 2025-10-24 22:36:06.971 00:00:00.000 UDP 28.104.0.1:54327 -> 198.28.0.2:53 1 64 1 2025-10-24 22:31:56.139 00:06:00.001 TCP 28.154.0.1:179 -> 28.155.0.1:36643 13 809 1 2025-10-24 22:32:47.114 00:05:09.076 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-24 22:37:07.271 00:00:00.000 UDP 28.104.0.1:55022 -> 198.28.0.2:53 1 64 1 2025-10-24 22:37:07.271 00:00:00.000 UDP 28.104.0.1:38871 -> 198.28.0.2:53 1 64 1 2025-10-24 22:37:07.281 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55022 1 109 1 2025-10-24 22:37:07.281 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38871 1 80 1 2025-10-24 22:37:29.503 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-24 22:32:56.140 00:05:50.986 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-24 22:38:07.577 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54104 1 80 1 2025-10-24 22:38:07.576 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47247 1 109 1 2025-10-24 22:38:07.566 00:00:00.000 UDP 28.104.0.1:47247 -> 198.28.0.2:53 1 64 1 2025-10-24 22:38:07.566 00:00:00.000 UDP 28.104.0.1:54104 -> 198.28.0.2:53 1 64 1 2025-10-24 22:39:07.865 00:00:00.000 UDP 28.104.0.1:33828 -> 198.28.0.2:53 1 64 1 2025-10-24 22:39:07.865 00:00:00.000 UDP 28.104.0.1:39725 -> 198.28.0.2:53 1 64 1 2025-10-24 22:39:07.875 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33828 1 80 1 2025-10-24 22:39:07.875 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39725 1 109 1 2025-10-24 22:34:56.179 00:05:50.987 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-24 22:40:08.206 00:00:00.000 UDP 28.104.0.1:58418 -> 198.28.0.2:53 1 64 1 2025-10-24 22:40:08.206 00:00:00.000 UDP 28.104.0.1:55168 -> 198.28.0.2:53 1 64 1 2025-10-24 22:40:08.218 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58418 1 80 1 2025-10-24 22:40:08.218 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55168 1 109 1 2025-10-24 22:36:25.472 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2896 1 2025-10-24 22:35:56.150 00:05:50.966 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-24 22:41:08.540 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40794 1 109 1 2025-10-24 22:41:08.541 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35373 1 80 1 2025-10-24 22:41:08.530 00:00:00.000 UDP 28.104.0.1:40794 -> 198.28.0.2:53 1 64 1 2025-10-24 22:41:08.530 00:00:00.000 UDP 28.104.0.1:35373 -> 198.28.0.2:53 1 64 1 2025-10-24 22:36:56.141 00:06:00.014 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-24 22:42:08.835 00:00:00.000 UDP 28.104.0.1:59635 -> 198.28.0.2:53 1 64 1 2025-10-24 22:42:08.835 00:00:00.000 UDP 28.104.0.1:36883 -> 198.28.0.2:53 1 64 1 2025-10-24 22:42:08.847 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36883 1 80 1 2025-10-24 22:42:08.847 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59635 1 109 1 2025-10-24 22:42:29.711 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-24 22:38:56.033 00:04:00.108 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-24 22:38:47.115 00:05:09.076 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-24 22:43:09.134 00:00:00.000 UDP 28.104.0.1:39355 -> 198.28.0.2:53 1 64 1 2025-10-24 22:43:09.134 00:00:00.000 UDP 28.104.0.1:42706 -> 198.28.0.2:53 1 64 1 2025-10-24 22:43:09.145 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39355 1 109 1 2025-10-24 22:43:09.145 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42706 1 80 1 2025-10-24 22:38:56.140 00:05:50.986 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-24 22:44:09.472 00:00:00.000 UDP 28.104.0.1:42347 -> 198.28.0.2:53 1 64 1 2025-10-24 22:44:09.471 00:00:00.000 UDP 28.104.0.1:58691 -> 198.28.0.2:53 1 64 1 2025-10-24 22:44:09.481 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58691 1 80 1 2025-10-24 22:44:09.481 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42347 1 109 1 2025-10-24 22:45:12.736 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44346 1 109 1 2025-10-24 22:45:12.736 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40306 1 80 1 2025-10-24 22:45:12.728 00:00:00.000 UDP 28.104.0.1:44346 -> 198.28.0.2:53 1 64 1 2025-10-24 22:45:12.728 00:00:00.000 UDP 28.104.0.1:40306 -> 198.28.0.2:53 1 64 1 2025-10-24 22:40:56.180 00:05:50.986 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-24 22:41:45.480 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2636 1 2025-10-24 22:46:13.047 00:00:00.000 UDP 28.104.0.1:47259 -> 198.28.0.2:53 1 64 1 2025-10-24 22:46:13.047 00:00:00.000 UDP 28.104.0.1:35745 -> 198.28.0.2:53 1 64 1 2025-10-24 22:46:13.057 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35745 1 109 1 2025-10-24 22:46:13.057 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47259 1 80 1 2025-10-24 22:41:56.152 00:05:50.965 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-24 22:47:13.350 00:00:00.000 UDP 28.104.0.1:47098 -> 198.28.0.2:53 1 64 1 2025-10-24 22:47:13.350 00:00:00.000 UDP 28.104.0.1:42337 -> 198.28.0.2:53 1 64 1 2025-10-24 22:47:13.360 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42337 1 80 1 2025-10-24 22:47:13.360 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47098 1 109 1 2025-10-24 22:47:29.671 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-24 22:43:56.142 00:04:00.015 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-10-24 22:43:56.035 00:04:00.109 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-24 22:48:13.659 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42537 1 109 1 2025-10-24 22:48:13.659 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44905 1 80 1 2025-10-24 22:48:13.649 00:00:00.000 UDP 28.104.0.1:42537 -> 198.28.0.2:53 1 64 1 2025-10-24 22:48:13.649 00:00:00.000 UDP 28.104.0.1:44905 -> 198.28.0.2:53 1 64 1 2025-10-24 22:44:47.116 00:05:09.076 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-24 22:49:13.942 00:00:00.000 UDP 28.104.0.1:47200 -> 198.28.0.2:53 1 64 1 2025-10-24 22:49:13.942 00:00:00.000 UDP 28.104.0.1:56994 -> 198.28.0.2:53 1 64 1 2025-10-24 22:49:13.953 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56994 1 80 1 2025-10-24 22:49:13.953 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47200 1 109 1 2025-10-24 22:44:56.143 00:05:50.985 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-24 22:50:14.257 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56112 1 109 1 2025-10-24 22:50:14.257 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44926 1 80 1 2025-10-24 22:50:14.246 00:00:00.000 UDP 28.104.0.1:56112 -> 198.28.0.2:53 1 64 1 2025-10-24 22:50:14.246 00:00:00.000 UDP 28.104.0.1:44926 -> 198.28.0.2:53 1 64 1 2025-10-24 22:51:14.537 00:00:00.000 UDP 28.104.0.1:32879 -> 198.28.0.2:53 1 64 1 2025-10-24 22:51:14.537 00:00:00.000 UDP 28.104.0.1:54410 -> 198.28.0.2:53 1 64 1 2025-10-24 22:47:05.486 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2464 1 2025-10-24 22:51:14.546 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32879 1 80 1 2025-10-24 22:51:14.546 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54410 1 109 1 2025-10-24 22:46:56.181 00:05:50.986 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-24 22:52:14.840 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37305 1 80 1 2025-10-24 22:52:14.840 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53093 1 109 1 2025-10-24 22:52:14.829 00:00:00.000 UDP 28.104.0.1:37305 -> 198.28.0.2:53 1 64 1 2025-10-24 22:52:14.829 00:00:00.000 UDP 28.104.0.1:53093 -> 198.28.0.2:53 1 64 1 2025-10-24 22:52:29.689 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-24 22:47:56.153 00:05:50.964 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-24 22:48:56.143 00:04:00.015 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-10-24 22:53:15.088 00:00:00.000 UDP 28.104.0.1:47505 -> 198.28.0.2:53 1 64 1 2025-10-24 22:53:15.088 00:00:00.000 UDP 28.104.0.1:48194 -> 198.28.0.2:53 1 64 1 2025-10-24 22:53:15.098 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47505 1 80 1 2025-10-24 22:53:15.098 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48194 1 109 1 2025-10-24 22:48:56.036 00:06:00.115 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-24 22:54:15.347 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43141 1 80 1 2025-10-24 22:54:15.347 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40143 1 109 1 2025-10-24 22:54:15.338 00:00:00.000 UDP 28.104.0.1:43141 -> 198.28.0.2:53 1 64 1 2025-10-24 22:54:15.338 00:00:00.000 UDP 28.104.0.1:40143 -> 198.28.0.2:53 1 64 1 2025-10-24 22:50:47.117 00:05:09.075 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-24 22:55:15.631 00:00:00.000 UDP 28.104.0.1:47811 -> 198.28.0.2:53 1 64 1 2025-10-24 22:55:15.631 00:00:00.000 UDP 28.104.0.1:33330 -> 198.28.0.2:53 1 64 1 2025-10-24 22:55:15.641 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47811 1 80 1 2025-10-24 22:55:15.640 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33330 1 109 1 2025-10-24 22:50:56.144 00:05:50.984 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-24 22:56:15.981 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46461 1 109 1 2025-10-24 22:56:15.981 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42320 1 80 1 2025-10-24 22:56:15.971 00:00:00.000 UDP 28.104.0.1:46461 -> 198.28.0.2:53 1 64 1 2025-10-24 22:56:15.971 00:00:00.000 UDP 28.104.0.1:42320 -> 198.28.0.2:53 1 64 1 2025-10-24 22:52:25.492 00:05:10.041 OSPF 28.0.2.1:0 -> 224.0.0.5:0 42 3052 1 2025-10-24 22:57:16.264 00:00:00.000 UDP 28.104.0.1:54329 -> 198.28.0.2:53 1 64 1 2025-10-24 22:57:16.264 00:00:00.000 UDP 28.104.0.1:57139 -> 198.28.0.2:53 1 64 1 2025-10-24 22:57:16.275 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54329 1 80 1 2025-10-24 22:57:16.275 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57139 1 109 1 2025-10-24 22:57:29.823 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-24 22:52:56.182 00:05:50.987 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-24 22:53:56.150 00:04:00.008 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-10-24 22:58:16.562 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44373 1 80 1 2025-10-24 22:58:16.560 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52232 1 109 1 2025-10-24 22:58:16.551 00:00:00.000 UDP 28.104.0.1:52232 -> 198.28.0.2:53 1 64 1 2025-10-24 22:58:16.551 00:00:00.000 UDP 28.104.0.1:44373 -> 198.28.0.2:53 1 64 1 2025-10-24 22:53:56.160 00:05:50.959 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 Summary: total flows: 324, total bytes: 96703, total packets: 1427, avg bps: 198, avg pps: 0, avg bpp: 67 Time window: 2025-10-24 21:54:56 - 2025-10-24 22:59:47 Total flows processed: 324, passed: 324, Blocks skipped: 0, Bytes read: 33760 Sys: 0.0042s User: 0.0031s Wall: 0.0040s flows/second: 80478.2 Runtime: 0.0040s