Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-25 04:59:22.926 00:00:00.000 UDP 28.104.0.1:59082 -> 198.28.0.2:53 1 64 1 2025-10-25 04:59:22.926 00:00:00.000 UDP 28.104.0.1:42707 -> 198.28.0.2:53 1 64 1 2025-10-25 04:59:22.938 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59082 1 109 1 2025-10-25 04:59:22.938 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42707 1 80 1 2025-10-25 04:55:56.252 00:04:00.000 TCP 28.154.0.1:179 -> 28.157.0.1:37077 5 355 1 2025-10-25 04:55:56.180 00:04:00.072 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-25 05:00:23.265 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41563 1 80 1 2025-10-25 05:00:23.265 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54680 1 109 1 2025-10-25 05:00:23.256 00:00:00.000 UDP 28.104.0.1:54680 -> 198.28.0.2:53 1 64 1 2025-10-25 05:00:23.256 00:00:00.000 UDP 28.104.0.1:41563 -> 198.28.0.2:53 1 64 1 2025-10-25 04:56:47.215 00:05:09.092 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-25 05:01:23.513 00:00:00.000 UDP 28.104.0.1:60936 -> 198.28.0.2:53 1 64 1 2025-10-25 05:01:23.513 00:00:00.000 UDP 28.104.0.1:44404 -> 198.28.0.2:53 1 64 1 2025-10-25 05:01:23.523 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44404 1 109 1 2025-10-25 05:01:23.523 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60936 1 80 1 2025-10-25 04:56:56.252 00:05:50.975 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-25 05:02:23.807 00:00:00.000 UDP 28.104.0.1:39490 -> 198.28.0.2:53 1 64 1 2025-10-25 05:02:23.806 00:00:00.000 UDP 28.104.0.1:54562 -> 198.28.0.2:53 1 64 1 2025-10-25 05:02:23.818 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39490 1 80 1 2025-10-25 05:02:23.817 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54562 1 109 1 2025-10-25 05:02:37.430 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-25 04:58:55.977 00:05:10.019 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2464 1 2025-10-25 05:03:24.117 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53271 1 109 1 2025-10-25 05:03:24.119 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43680 1 80 1 2025-10-25 05:03:24.106 00:00:00.000 UDP 28.104.0.1:43680 -> 198.28.0.2:53 1 64 1 2025-10-25 05:03:24.106 00:00:00.000 UDP 28.104.0.1:53271 -> 198.28.0.2:53 1 64 1 2025-10-25 04:58:56.296 00:05:50.971 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-25 05:04:24.417 00:00:00.000 UDP 28.104.0.1:52333 -> 198.28.0.2:53 1 64 1 2025-10-25 05:04:24.416 00:00:00.000 UDP 28.104.0.1:40459 -> 198.28.0.2:53 1 64 1 2025-10-25 05:04:24.426 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52333 1 109 1 2025-10-25 05:04:24.426 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40459 1 80 1 2025-10-25 04:59:56.263 00:05:50.954 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-25 05:00:56.252 00:04:00.045 TCP 28.154.0.1:179 -> 28.157.0.1:37077 8 511 1 2025-10-25 05:00:56.180 00:04:00.074 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-25 05:05:24.715 00:00:00.000 UDP 28.104.0.1:33359 -> 198.28.0.2:53 1 64 1 2025-10-25 05:05:24.715 00:00:00.000 UDP 28.104.0.1:38916 -> 198.28.0.2:53 1 64 1 2025-10-25 05:05:24.725 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33359 1 80 1 2025-10-25 05:05:24.725 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38916 1 109 1 2025-10-25 05:06:24.979 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37884 1 80 1 2025-10-25 05:06:24.980 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59471 1 109 1 2025-10-25 05:06:24.969 00:00:00.000 UDP 28.104.0.1:37884 -> 198.28.0.2:53 1 64 1 2025-10-25 05:06:24.969 00:00:00.000 UDP 28.104.0.1:59471 -> 198.28.0.2:53 1 64 1 2025-10-25 05:02:47.217 00:05:09.091 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-25 05:07:25.278 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46201 1 80 1 2025-10-25 05:07:25.279 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54227 1 109 1 2025-10-25 05:07:25.268 00:00:00.000 UDP 28.104.0.1:46201 -> 198.28.0.2:53 1 64 1 2025-10-25 05:07:25.269 00:00:00.000 UDP 28.104.0.1:54227 -> 198.28.0.2:53 1 64 1 2025-10-25 05:07:37.458 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-25 05:02:56.253 00:05:50.975 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-25 05:04:15.992 00:05:00.016 OSPF 28.0.2.1:0 -> 224.0.0.5:0 43 3112 1 2025-10-25 05:08:25.571 00:00:00.000 UDP 28.104.0.1:43498 -> 198.28.0.2:53 1 64 1 2025-10-25 05:08:25.571 00:00:00.000 UDP 28.104.0.1:58588 -> 198.28.0.2:53 1 64 1 2025-10-25 05:08:25.581 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58588 1 80 1 2025-10-25 05:08:25.581 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43498 1 109 1 2025-10-25 05:09:25.820 00:00:00.000 UDP 28.104.0.1:48601 -> 198.28.0.2:53 1 64 1 2025-10-25 05:09:25.820 00:00:00.000 UDP 28.104.0.1:32862 -> 198.28.0.2:53 1 64 1 2025-10-25 05:09:25.831 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48601 1 109 1 2025-10-25 05:09:25.831 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32862 1 80 1 2025-10-25 05:04:56.300 00:05:50.970 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-25 05:05:56.255 00:04:00.004 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-10-25 05:10:26.129 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49193 1 80 1 2025-10-25 05:10:26.129 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51013 1 109 1 2025-10-25 05:10:26.120 00:00:00.000 UDP 28.104.0.1:49193 -> 198.28.0.2:53 1 64 1 2025-10-25 05:10:26.120 00:00:00.000 UDP 28.104.0.1:51013 -> 198.28.0.2:53 1 64 1 2025-10-25 05:05:56.264 00:05:50.955 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-25 05:05:56.184 00:06:00.072 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-25 05:11:26.406 00:00:00.000 UDP 28.104.0.1:45459 -> 198.28.0.2:53 1 64 1 2025-10-25 05:11:26.406 00:00:00.000 UDP 28.104.0.1:43359 -> 198.28.0.2:53 1 64 1 2025-10-25 05:11:26.418 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43359 1 80 1 2025-10-25 05:11:26.418 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45459 1 109 1 2025-10-25 05:10:56.256 00:01:00.002 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-25 05:12:26.700 00:00:00.000 UDP 28.104.0.1:53670 -> 198.28.0.2:53 1 64 1 2025-10-25 05:12:26.700 00:00:00.000 UDP 28.104.0.1:52775 -> 198.28.0.2:53 1 64 1 2025-10-25 05:12:26.710 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52775 1 109 1 2025-10-25 05:12:26.710 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53670 1 80 1 2025-10-25 05:12:38.761 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-25 05:08:47.217 00:05:09.094 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-25 05:13:36.428 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46814 1 80 1 2025-10-25 05:09:26.008 00:05:10.036 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2816 1 2025-10-25 05:13:36.428 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50569 1 109 1 2025-10-25 05:13:36.417 00:00:00.000 UDP 28.104.0.1:46814 -> 198.28.0.2:53 1 64 1 2025-10-25 05:13:36.417 00:00:00.000 UDP 28.104.0.1:50569 -> 198.28.0.2:53 1 64 1 2025-10-25 05:08:56.255 00:05:50.973 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-25 05:14:36.716 00:00:00.000 UDP 28.104.0.1:56192 -> 198.28.0.2:53 1 64 1 2025-10-25 05:14:36.717 00:00:00.000 UDP 28.104.0.1:36522 -> 198.28.0.2:53 1 64 1 2025-10-25 05:14:36.725 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56192 1 80 1 2025-10-25 05:14:36.726 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36522 1 109 1 2025-10-25 05:12:56.256 00:02:00.003 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-25 05:15:37.047 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43937 1 80 1 2025-10-25 05:15:37.046 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43395 1 109 1 2025-10-25 05:15:37.036 00:00:00.000 UDP 28.104.0.1:43937 -> 198.28.0.2:53 1 64 1 2025-10-25 05:15:37.036 00:00:00.000 UDP 28.104.0.1:43395 -> 198.28.0.2:53 1 64 1 2025-10-25 05:10:56.301 00:05:50.968 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-25 05:16:37.298 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44083 1 80 1 2025-10-25 05:16:37.298 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38628 1 109 1 2025-10-25 05:16:37.288 00:00:00.000 UDP 28.104.0.1:44083 -> 198.28.0.2:53 1 64 1 2025-10-25 05:16:37.288 00:00:00.000 UDP 28.104.0.1:38628 -> 198.28.0.2:53 1 64 1 2025-10-25 05:11:56.266 00:05:50.953 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-25 05:15:56.257 00:01:00.004 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-25 05:12:56.186 00:04:00.071 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-25 05:17:37.593 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-25 05:17:49.909 00:00:00.000 UDP 28.104.0.1:33428 -> 198.28.0.2:53 1 64 1 2025-10-25 05:17:49.909 00:00:00.000 UDP 28.104.0.1:54700 -> 198.28.0.2:53 1 64 1 2025-10-25 05:17:49.921 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54700 1 80 1 2025-10-25 05:17:49.921 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33428 1 109 1 2025-10-25 05:18:50.216 00:00:00.000 UDP 28.104.0.1:34542 -> 198.28.0.2:53 1 64 1 2025-10-25 05:18:50.216 00:00:00.000 UDP 28.104.0.1:57368 -> 198.28.0.2:53 1 64 1 2025-10-25 05:18:50.226 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57368 1 80 1 2025-10-25 05:18:50.226 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34542 1 109 1 2025-10-25 05:14:47.219 00:05:09.095 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-25 05:14:46.045 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2528 1 2025-10-25 05:19:50.525 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55862 1 80 1 2025-10-25 05:19:50.524 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46065 1 109 1 2025-10-25 05:14:56.256 00:05:50.973 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-25 05:19:50.513 00:00:00.000 UDP 28.104.0.1:46065 -> 198.28.0.2:53 1 64 1 2025-10-25 05:19:50.513 00:00:00.000 UDP 28.104.0.1:55862 -> 198.28.0.2:53 1 64 1 2025-10-25 05:20:50.764 00:00:00.000 UDP 28.104.0.1:33017 -> 198.28.0.2:53 1 64 1 2025-10-25 05:20:50.764 00:00:00.000 UDP 28.104.0.1:50751 -> 198.28.0.2:53 1 64 1 2025-10-25 05:20:50.774 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50751 1 109 1 2025-10-25 05:20:50.775 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33017 1 80 1 2025-10-25 05:16:56.302 00:05:50.968 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-25 05:21:51.061 00:00:00.000 UDP 28.104.0.1:48498 -> 198.28.0.2:53 1 64 1 2025-10-25 05:21:51.061 00:00:00.000 UDP 28.104.0.1:34713 -> 198.28.0.2:53 1 64 1 2025-10-25 05:21:51.071 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34713 1 80 1 2025-10-25 05:21:51.071 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48498 1 109 1 2025-10-25 05:17:56.258 00:04:00.005 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-10-25 05:17:56.188 00:04:00.071 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-25 05:22:37.591 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-25 05:22:51.347 00:00:00.000 UDP 28.104.0.1:48668 -> 198.28.0.2:53 1 64 1 2025-10-25 05:22:51.347 00:00:00.000 UDP 28.104.0.1:50075 -> 198.28.0.2:53 1 64 1 2025-10-25 05:17:56.266 00:05:50.954 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-25 05:22:51.356 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48668 1 80 1 2025-10-25 05:22:51.356 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50075 1 109 1 2025-10-25 05:23:51.598 00:00:00.000 UDP 28.104.0.1:34542 -> 198.28.0.2:53 1 64 1 2025-10-25 05:23:51.598 00:00:00.000 UDP 28.104.0.1:34733 -> 198.28.0.2:53 1 64 1 2025-10-25 05:23:51.608 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34733 1 80 1 2025-10-25 05:23:51.608 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34542 1 109 1 2025-10-25 05:20:06.047 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2940 1 2025-10-25 05:20:47.220 00:05:09.093 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-25 05:25:03.096 00:00:00.000 UDP 28.104.0.1:51741 -> 198.28.0.2:53 1 64 1 2025-10-25 05:25:03.096 00:00:00.000 UDP 28.104.0.1:33459 -> 198.28.0.2:53 1 64 1 2025-10-25 05:25:03.107 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33459 1 80 1 2025-10-25 05:25:03.107 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51741 1 109 1 2025-10-25 05:20:56.258 00:05:50.974 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-25 05:26:03.355 00:00:00.000 UDP 28.104.0.1:49934 -> 198.28.0.2:53 1 64 1 2025-10-25 05:26:03.355 00:00:00.000 UDP 28.104.0.1:41514 -> 198.28.0.2:53 1 64 1 2025-10-25 05:26:03.366 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49934 1 109 1 2025-10-25 05:26:03.367 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41514 1 80 1 2025-10-25 05:22:56.259 00:04:00.006 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-10-25 05:22:56.189 00:04:00.071 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-25 05:27:03.659 00:00:00.000 UDP 28.104.0.1:47270 -> 198.28.0.2:53 1 64 1 2025-10-25 05:27:03.659 00:00:00.000 UDP 28.104.0.1:39113 -> 198.28.0.2:53 1 64 1 2025-10-25 05:27:03.672 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39113 1 80 1 2025-10-25 05:27:03.672 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47270 1 109 1 2025-10-25 05:27:37.779 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-25 05:22:56.303 00:05:50.969 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-25 05:28:03.971 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36591 1 80 1 2025-10-25 05:28:03.971 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38884 1 109 1 2025-10-25 05:28:03.961 00:00:00.000 UDP 28.104.0.1:38884 -> 198.28.0.2:53 1 64 1 2025-10-25 05:28:03.961 00:00:00.000 UDP 28.104.0.1:36591 -> 198.28.0.2:53 1 64 1 2025-10-25 05:23:56.268 00:05:50.955 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-25 05:29:04.265 00:00:00.000 UDP 28.104.0.1:37137 -> 198.28.0.2:53 1 64 1 2025-10-25 05:29:04.265 00:00:00.000 UDP 28.104.0.1:46062 -> 198.28.0.2:53 1 64 1 2025-10-25 05:29:04.275 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46062 1 109 1 2025-10-25 05:29:04.275 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37137 1 80 1 2025-10-25 05:25:26.052 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2596 1 2025-10-25 05:30:04.523 00:00:00.000 UDP 28.104.0.1:50511 -> 198.28.0.2:53 1 64 1 2025-10-25 05:30:04.523 00:00:00.000 UDP 28.104.0.1:40096 -> 198.28.0.2:53 1 64 1 2025-10-25 05:30:04.533 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40096 1 80 1 2025-10-25 05:30:04.533 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50511 1 109 1 2025-10-25 05:26:47.221 00:05:09.094 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-25 05:31:04.840 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51055 1 80 1 2025-10-25 05:31:04.840 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58676 1 109 1 2025-10-25 05:31:04.830 00:00:00.000 UDP 28.104.0.1:51055 -> 198.28.0.2:53 1 64 1 2025-10-25 05:31:04.830 00:00:00.000 UDP 28.104.0.1:58676 -> 198.28.0.2:53 1 64 1 2025-10-25 05:26:56.258 00:05:50.975 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-25 05:27:56.259 00:04:00.006 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-10-25 05:27:56.188 00:04:00.072 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-25 05:32:05.126 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49060 1 109 1 2025-10-25 05:32:05.127 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46859 1 80 1 2025-10-25 05:32:05.117 00:00:00.000 UDP 28.104.0.1:49060 -> 198.28.0.2:53 1 64 1 2025-10-25 05:32:05.116 00:00:00.000 UDP 28.104.0.1:46859 -> 198.28.0.2:53 1 64 1 2025-10-25 05:32:37.872 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-25 05:33:05.365 00:00:00.000 UDP 28.104.0.1:33748 -> 198.28.0.2:53 1 64 1 2025-10-25 05:33:05.366 00:00:00.000 UDP 28.104.0.1:48488 -> 198.28.0.2:53 1 64 1 2025-10-25 05:33:05.375 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33748 1 80 1 2025-10-25 05:33:05.376 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48488 1 109 1 2025-10-25 05:28:56.304 00:05:50.970 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-25 05:34:05.617 00:00:00.000 UDP 28.104.0.1:56575 -> 198.28.0.2:53 1 64 1 2025-10-25 05:34:05.617 00:00:00.000 UDP 28.104.0.1:60953 -> 198.28.0.2:53 1 64 1 2025-10-25 05:34:05.628 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60953 1 109 1 2025-10-25 05:34:05.628 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56575 1 80 1 2025-10-25 05:29:56.269 00:05:50.955 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-25 05:30:46.058 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2828 1 2025-10-25 05:35:05.912 00:00:00.000 UDP 28.104.0.1:52237 -> 198.28.0.2:53 1 64 1 2025-10-25 05:35:05.912 00:00:00.000 UDP 28.104.0.1:47395 -> 198.28.0.2:53 1 64 1 2025-10-25 05:35:05.921 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47395 1 109 1 2025-10-25 05:35:05.921 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52237 1 80 1 2025-10-25 05:36:12.500 00:00:00.000 UDP 28.104.0.1:60902 -> 198.28.0.2:53 1 64 1 2025-10-25 05:36:12.500 00:00:00.000 UDP 28.104.0.1:42117 -> 198.28.0.2:53 1 64 1 2025-10-25 05:36:12.509 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60902 1 109 1 2025-10-25 05:36:12.509 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42117 1 80 1 2025-10-25 05:32:56.259 00:04:00.006 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-10-25 05:32:56.188 00:04:00.072 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-25 05:32:47.224 00:05:09.092 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-25 05:37:12.811 00:00:00.000 UDP 28.104.0.1:57137 -> 198.28.0.2:53 1 64 1 2025-10-25 05:37:12.811 00:00:00.000 UDP 28.104.0.1:46022 -> 198.28.0.2:53 1 64 1 2025-10-25 05:37:12.823 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57137 1 80 1 2025-10-25 05:37:12.823 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46022 1 109 1 2025-10-25 05:37:38.044 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-25 05:32:56.259 00:05:50.976 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-25 05:38:13.110 00:00:00.000 UDP 28.104.0.1:54176 -> 198.28.0.2:53 1 64 1 2025-10-25 05:38:13.110 00:00:00.000 UDP 28.104.0.1:39368 -> 198.28.0.2:53 1 64 1 2025-10-25 05:38:13.121 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54176 1 109 1 2025-10-25 05:38:13.121 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39368 1 80 1 2025-10-25 05:39:13.416 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41272 1 109 1 2025-10-25 05:39:13.415 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42917 1 80 1 2025-10-25 05:39:13.405 00:00:00.000 UDP 28.104.0.1:42917 -> 198.28.0.2:53 1 64 1 2025-10-25 05:39:13.406 00:00:00.000 UDP 28.104.0.1:41272 -> 198.28.0.2:53 1 64 1 2025-10-25 05:34:56.306 00:05:50.970 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-25 05:40:13.711 00:00:00.000 UDP 28.104.0.1:56850 -> 198.28.0.2:53 1 64 1 2025-10-25 05:40:13.712 00:00:00.000 UDP 28.104.0.1:50153 -> 198.28.0.2:53 1 64 1 2025-10-25 05:36:06.062 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2900 1 2025-10-25 05:40:13.722 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50153 1 80 1 2025-10-25 05:40:13.722 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56850 1 109 1 2025-10-25 05:35:56.270 00:05:50.955 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-25 05:41:13.985 00:00:00.000 UDP 28.104.0.1:38160 -> 198.28.0.2:53 1 64 1 2025-10-25 05:41:13.985 00:00:00.000 UDP 28.104.0.1:57483 -> 198.28.0.2:53 1 64 1 2025-10-25 05:41:13.996 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38160 1 80 1 2025-10-25 05:41:13.996 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57483 1 109 1 2025-10-25 05:37:56.261 00:04:00.007 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-10-25 05:42:14.293 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51649 1 109 1 2025-10-25 05:42:14.293 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55788 1 80 1 2025-10-25 05:42:14.283 00:00:00.000 UDP 28.104.0.1:55788 -> 198.28.0.2:53 1 64 1 2025-10-25 05:42:14.283 00:00:00.000 UDP 28.104.0.1:51649 -> 198.28.0.2:53 1 64 1 2025-10-25 05:42:38.733 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-25 05:38:47.225 00:05:09.093 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-25 05:37:56.189 00:06:00.072 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-25 05:43:14.579 00:00:00.000 UDP 28.104.0.1:59278 -> 198.28.0.2:53 1 64 1 2025-10-25 05:43:14.579 00:00:00.000 UDP 28.104.0.1:49667 -> 198.28.0.2:53 1 64 1 2025-10-25 05:43:14.590 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59278 1 80 1 2025-10-25 05:43:14.590 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49667 1 109 1 2025-10-25 05:38:56.261 00:05:50.976 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-25 05:42:56.262 00:01:00.006 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-25 05:44:14.886 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48436 1 80 1 2025-10-25 05:44:14.885 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37273 1 109 1 2025-10-25 05:44:14.874 00:00:00.000 UDP 28.104.0.1:48436 -> 198.28.0.2:53 1 64 1 2025-10-25 05:44:14.874 00:00:00.000 UDP 28.104.0.1:37273 -> 198.28.0.2:53 1 64 1 2025-10-25 05:45:15.182 00:00:00.000 UDP 28.104.0.1:37274 -> 198.28.0.2:53 1 64 1 2025-10-25 05:45:15.182 00:00:00.000 UDP 28.104.0.1:38172 -> 198.28.0.2:53 1 64 1 2025-10-25 05:45:15.193 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37274 1 80 1 2025-10-25 05:45:15.193 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38172 1 109 1 2025-10-25 05:41:26.064 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2484 1 2025-10-25 05:40:56.307 00:05:50.972 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-25 05:46:15.854 00:00:00.000 UDP 28.104.0.1:39431 -> 198.28.0.2:53 1 64 1 2025-10-25 05:46:15.854 00:00:00.000 UDP 28.104.0.1:53083 -> 198.28.0.2:53 1 64 1 2025-10-25 05:46:15.864 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39431 1 80 1 2025-10-25 05:46:15.864 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53083 1 109 1 2025-10-25 05:41:56.271 00:05:50.957 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-25 05:44:56.262 00:02:00.007 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-25 05:47:16.172 00:00:00.000 UDP 28.104.0.1:47023 -> 198.28.0.2:53 1 64 1 2025-10-25 05:47:16.172 00:00:00.000 UDP 28.104.0.1:60973 -> 198.28.0.2:53 1 64 1 2025-10-25 05:47:16.183 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60973 1 109 1 2025-10-25 05:47:16.183 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47023 1 80 1 2025-10-25 05:47:38.054 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-25 05:48:16.479 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56147 1 109 1 2025-10-25 05:48:16.479 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32970 1 80 1 2025-10-25 05:48:16.470 00:00:00.000 UDP 28.104.0.1:32970 -> 198.28.0.2:53 1 64 1 2025-10-25 05:48:16.470 00:00:00.000 UDP 28.104.0.1:56147 -> 198.28.0.2:53 1 64 1 2025-10-25 05:47:56.263 00:01:00.008 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-25 05:44:56.193 00:04:00.070 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-25 05:44:47.226 00:05:09.093 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-25 05:49:16.770 00:00:00.000 UDP 28.104.0.1:46358 -> 198.28.0.2:53 1 64 1 2025-10-25 05:49:16.770 00:00:00.000 UDP 28.104.0.1:46097 -> 198.28.0.2:53 1 64 1 2025-10-25 05:49:16.781 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46358 1 109 1 2025-10-25 05:49:16.782 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46097 1 80 1 2025-10-25 05:44:56.264 00:05:50.977 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-25 05:50:17.089 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38280 1 80 1 2025-10-25 05:50:17.089 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39788 1 109 1 2025-10-25 05:50:17.080 00:00:00.000 UDP 28.104.0.1:38280 -> 198.28.0.2:53 1 64 1 2025-10-25 05:50:17.080 00:00:00.000 UDP 28.104.0.1:39788 -> 198.28.0.2:53 1 64 1 2025-10-25 05:46:46.070 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2772 1 2025-10-25 05:51:17.386 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50314 1 109 1 2025-10-25 05:51:17.386 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41371 1 80 1 2025-10-25 05:51:17.375 00:00:00.000 UDP 28.104.0.1:41371 -> 198.28.0.2:53 1 64 1 2025-10-25 05:51:17.375 00:00:00.000 UDP 28.104.0.1:50314 -> 198.28.0.2:53 1 64 1 2025-10-25 05:46:56.309 00:05:50.970 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-25 05:52:17.685 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45012 1 109 1 2025-10-25 05:52:17.685 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57562 1 80 1 2025-10-25 05:52:17.674 00:00:00.000 UDP 28.104.0.1:57562 -> 198.28.0.2:53 1 64 1 2025-10-25 05:52:17.674 00:00:00.000 UDP 28.104.0.1:45012 -> 198.28.0.2:53 1 64 1 2025-10-25 05:52:38.232 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-25 05:47:56.273 00:05:50.956 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-25 05:53:17.966 00:00:00.000 UDP 28.104.0.1:48468 -> 198.28.0.2:53 1 64 1 2025-10-25 05:53:17.966 00:00:00.000 UDP 28.104.0.1:54067 -> 198.28.0.2:53 1 64 1 2025-10-25 05:53:17.976 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48468 1 109 1 2025-10-25 05:53:17.976 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54067 1 80 1 2025-10-25 05:49:56.263 00:04:00.008 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-10-25 05:49:56.193 00:04:00.070 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-25 05:54:18.278 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55031 1 80 1 2025-10-25 05:54:18.278 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48133 1 109 1 2025-10-25 05:54:18.267 00:00:00.000 UDP 28.104.0.1:55031 -> 198.28.0.2:53 1 64 1 2025-10-25 05:54:18.267 00:00:00.000 UDP 28.104.0.1:48133 -> 198.28.0.2:53 1 64 1 2025-10-25 05:50:47.229 00:05:09.091 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-25 05:55:18.529 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40740 1 109 1 2025-10-25 05:55:18.529 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34009 1 80 1 2025-10-25 05:55:18.519 00:00:00.000 UDP 28.104.0.1:34009 -> 198.28.0.2:53 1 64 1 2025-10-25 05:55:18.519 00:00:00.000 UDP 28.104.0.1:40740 -> 198.28.0.2:53 1 64 1 2025-10-25 05:50:56.262 00:05:50.977 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-25 05:52:06.075 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2864 1 2025-10-25 05:56:18.810 00:00:00.000 UDP 28.104.0.1:40061 -> 198.28.0.2:53 1 64 1 2025-10-25 05:56:18.811 00:00:00.000 UDP 28.104.0.1:34241 -> 198.28.0.2:53 1 64 1 2025-10-25 05:56:18.822 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34241 1 80 1 2025-10-25 05:56:18.821 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40061 1 109 1 2025-10-25 05:57:19.113 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44080 1 80 1 2025-10-25 05:57:19.113 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40694 1 109 1 2025-10-25 05:57:19.102 00:00:00.000 UDP 28.104.0.1:44080 -> 198.28.0.2:53 1 64 1 2025-10-25 05:57:19.101 00:00:00.000 UDP 28.104.0.1:40694 -> 198.28.0.2:53 1 64 1 2025-10-25 05:57:38.181 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-25 05:52:56.310 00:05:50.970 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-25 05:58:19.360 00:00:00.000 UDP 28.104.0.1:54429 -> 198.28.0.2:53 1 64 1 2025-10-25 05:58:19.360 00:00:00.000 UDP 28.104.0.1:60110 -> 198.28.0.2:53 1 64 1 2025-10-25 05:58:19.371 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60110 1 109 1 2025-10-25 05:58:19.371 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54429 1 80 1 2025-10-25 05:53:56.273 00:05:50.957 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 Summary: total flows: 325, total bytes: 95701, total packets: 1408, avg bps: 199, avg pps: 0, avg bpp: 67 Time window: 2025-10-25 04:55:56 - 2025-10-25 05:59:47 Total flows processed: 325, passed: 325, Blocks skipped: 0, Bytes read: 33864 Sys: 0.0050s User: 0.0020s Wall: 0.0055s flows/second: 58695.7 Runtime: 0.0056s