Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-25 08:56:56.319 00:02:00.002 TCP 28.154.0.1:179 -> 28.157.0.1:37077 3 213 1 2025-10-25 08:56:56.251 00:02:00.070 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-10-25 08:59:19.167 00:00:00.000 UDP 28.104.0.1:49227 -> 198.28.0.2:53 1 64 1 2025-10-25 08:59:19.167 00:00:00.000 UDP 28.104.0.1:52939 -> 198.28.0.2:53 1 64 1 2025-10-25 08:59:19.179 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52939 1 80 1 2025-10-25 08:59:19.179 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49227 1 109 1 2025-10-25 09:00:19.476 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60279 1 109 1 2025-10-25 09:00:19.476 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56458 1 80 1 2025-10-25 09:00:19.466 00:00:00.000 UDP 28.104.0.1:56458 -> 198.28.0.2:53 1 64 1 2025-10-25 09:00:19.466 00:00:00.000 UDP 28.104.0.1:60279 -> 198.28.0.2:53 1 64 1 2025-10-25 08:56:47.284 00:05:09.087 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-25 08:59:56.322 00:00:59.999 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 142 1 2025-10-25 08:59:56.252 00:01:00.069 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-25 09:01:19.731 00:00:00.000 UDP 28.104.0.1:59379 -> 198.28.0.2:53 1 64 1 2025-10-25 09:01:19.730 00:00:00.000 UDP 28.104.0.1:43776 -> 198.28.0.2:53 1 64 1 2025-10-25 09:01:19.740 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59379 1 80 1 2025-10-25 09:01:19.741 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43776 1 109 1 2025-10-25 08:56:56.319 00:05:50.976 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-25 09:02:20.059 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58062 1 109 1 2025-10-25 09:02:20.059 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38337 1 80 1 2025-10-25 09:02:20.049 00:00:00.000 UDP 28.104.0.1:58062 -> 198.28.0.2:53 1 64 1 2025-10-25 09:02:20.049 00:00:00.000 UDP 28.104.0.1:38337 -> 198.28.0.2:53 1 64 1 2025-10-25 08:58:16.321 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2772 1 2025-10-25 09:02:41.980 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-25 09:03:20.358 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36793 1 80 1 2025-10-25 09:03:20.358 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45731 1 109 1 2025-10-25 09:03:20.347 00:00:00.000 UDP 28.104.0.1:36793 -> 198.28.0.2:53 1 64 1 2025-10-25 09:03:20.347 00:00:00.000 UDP 28.104.0.1:45731 -> 198.28.0.2:53 1 64 1 2025-10-25 08:58:56.359 00:05:50.978 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-25 09:01:56.321 00:02:00.000 TCP 28.154.0.1:179 -> 28.157.0.1:37077 3 213 1 2025-10-25 09:04:20.652 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35046 1 80 1 2025-10-25 09:04:20.652 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50496 1 109 1 2025-10-25 09:04:20.642 00:00:00.000 UDP 28.104.0.1:50496 -> 198.28.0.2:53 1 64 1 2025-10-25 09:04:20.642 00:00:00.000 UDP 28.104.0.1:35046 -> 198.28.0.2:53 1 64 1 2025-10-25 08:59:56.332 00:05:50.954 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-25 09:05:20.946 00:00:00.000 UDP 28.104.0.1:57626 -> 198.28.0.2:53 1 64 1 2025-10-25 09:05:20.946 00:00:00.000 UDP 28.104.0.1:34134 -> 198.28.0.2:53 1 64 1 2025-10-25 09:05:20.957 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57626 1 80 1 2025-10-25 09:05:20.957 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34134 1 109 1 2025-10-25 09:04:56.322 00:01:00.000 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 142 1 2025-10-25 09:01:56.252 00:04:00.070 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-25 09:06:21.209 00:00:00.000 UDP 28.104.0.1:41603 -> 198.28.0.2:53 1 64 1 2025-10-25 09:06:21.209 00:00:00.000 UDP 28.104.0.1:54360 -> 198.28.0.2:53 1 64 1 2025-10-25 09:06:21.220 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41603 1 109 1 2025-10-25 09:06:21.220 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54360 1 80 1 2025-10-25 09:02:47.284 00:05:09.086 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-25 09:07:21.501 00:00:00.000 UDP 28.104.0.1:33360 -> 198.28.0.2:53 1 64 1 2025-10-25 09:07:21.501 00:00:00.000 UDP 28.104.0.1:53738 -> 198.28.0.2:53 1 64 1 2025-10-25 09:07:21.512 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53738 1 109 1 2025-10-25 09:07:21.512 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33360 1 80 1 2025-10-25 09:03:36.326 00:05:00.929 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2500 1 2025-10-25 09:07:42.145 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-25 09:02:56.322 00:05:50.976 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-25 09:08:21.794 00:00:00.000 UDP 28.104.0.1:57978 -> 198.28.0.2:53 1 64 1 2025-10-25 09:08:21.794 00:00:00.000 UDP 28.104.0.1:39318 -> 198.28.0.2:53 1 64 1 2025-10-25 09:08:21.805 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39318 1 80 1 2025-10-25 09:08:21.805 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57978 1 109 1 2025-10-25 09:06:56.324 00:02:00.000 TCP 28.154.0.1:179 -> 28.157.0.1:37077 3 213 1 2025-10-25 09:09:22.106 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39952 1 109 1 2025-10-25 09:09:22.106 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58264 1 80 1 2025-10-25 09:09:22.096 00:00:00.000 UDP 28.104.0.1:58264 -> 198.28.0.2:53 1 64 1 2025-10-25 09:09:22.096 00:00:00.000 UDP 28.104.0.1:39952 -> 198.28.0.2:53 1 64 1 2025-10-25 09:04:56.361 00:05:50.981 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-25 09:10:22.404 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39110 1 80 1 2025-10-25 09:10:22.404 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59311 1 109 1 2025-10-25 09:10:22.395 00:00:00.000 UDP 28.104.0.1:59311 -> 198.28.0.2:53 1 64 1 2025-10-25 09:10:22.395 00:00:00.000 UDP 28.104.0.1:39110 -> 198.28.0.2:53 1 64 1 2025-10-25 09:05:56.332 00:05:50.959 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-25 09:09:56.323 00:01:00.000 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 142 1 2025-10-25 09:06:56.252 00:04:00.071 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-25 09:11:22.696 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54951 1 80 1 2025-10-25 09:11:22.696 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58436 1 109 1 2025-10-25 09:11:22.687 00:00:00.000 UDP 28.104.0.1:58436 -> 198.28.0.2:53 1 64 1 2025-10-25 09:11:22.687 00:00:00.000 UDP 28.104.0.1:54951 -> 198.28.0.2:53 1 64 1 2025-10-25 09:12:22.982 00:00:00.000 UDP 28.104.0.1:52661 -> 198.28.0.2:53 1 64 1 2025-10-25 09:12:22.982 00:00:00.000 UDP 28.104.0.1:54372 -> 198.28.0.2:53 1 64 1 2025-10-25 09:12:22.992 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52661 1 109 1 2025-10-25 09:12:22.992 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54372 1 80 1 2025-10-25 09:12:42.328 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-25 09:08:47.287 00:05:09.095 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-25 09:08:46.331 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2900 1 2025-10-25 09:13:23.285 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37967 1 80 1 2025-10-25 09:13:23.285 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56205 1 109 1 2025-10-25 09:13:23.273 00:00:00.000 UDP 28.104.0.1:56205 -> 198.28.0.2:53 1 64 1 2025-10-25 09:13:23.273 00:00:00.000 UDP 28.104.0.1:37967 -> 198.28.0.2:53 1 64 1 2025-10-25 09:08:56.322 00:05:50.981 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-25 09:14:23.580 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49999 1 80 1 2025-10-25 09:14:23.580 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60355 1 109 1 2025-10-25 09:14:23.569 00:00:00.000 UDP 28.104.0.1:60355 -> 198.28.0.2:53 1 64 1 2025-10-25 09:14:23.569 00:00:00.000 UDP 28.104.0.1:49999 -> 198.28.0.2:53 1 64 1 2025-10-25 09:15:23.880 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35977 1 80 1 2025-10-25 09:15:23.881 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57528 1 109 1 2025-10-25 09:15:23.872 00:00:00.000 UDP 28.104.0.1:57528 -> 198.28.0.2:53 1 64 1 2025-10-25 09:15:23.872 00:00:00.000 UDP 28.104.0.1:35977 -> 198.28.0.2:53 1 64 1 2025-10-25 09:10:56.361 00:05:50.982 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-25 09:11:56.323 00:04:00.001 TCP 28.154.0.1:179 -> 28.157.0.1:37077 5 355 1 2025-10-25 09:11:56.253 00:04:00.071 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-25 09:16:24.170 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38114 1 109 1 2025-10-25 09:16:24.170 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57558 1 80 1 2025-10-25 09:16:24.160 00:00:00.000 UDP 28.104.0.1:57558 -> 198.28.0.2:53 1 64 1 2025-10-25 09:16:24.160 00:00:00.000 UDP 28.104.0.1:38114 -> 198.28.0.2:53 1 64 1 2025-10-25 09:11:56.333 00:05:50.960 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-25 09:17:24.467 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53885 1 109 1 2025-10-25 09:17:24.467 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48105 1 80 1 2025-10-25 09:17:24.456 00:00:00.000 UDP 28.104.0.1:53885 -> 198.28.0.2:53 1 64 1 2025-10-25 09:17:24.456 00:00:00.000 UDP 28.104.0.1:48105 -> 198.28.0.2:53 1 64 1 2025-10-25 09:17:42.261 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-25 09:14:06.336 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2528 1 2025-10-25 09:18:24.775 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43421 1 109 1 2025-10-25 09:18:24.775 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50233 1 80 1 2025-10-25 09:18:24.764 00:00:00.000 UDP 28.104.0.1:50233 -> 198.28.0.2:53 1 64 1 2025-10-25 09:18:24.764 00:00:00.000 UDP 28.104.0.1:43421 -> 198.28.0.2:53 1 64 1 2025-10-25 09:14:47.293 00:05:09.080 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-25 09:19:25.107 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35620 1 109 1 2025-10-25 09:19:25.107 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50306 1 80 1 2025-10-25 09:19:25.098 00:00:00.000 UDP 28.104.0.1:50306 -> 198.28.0.2:53 1 64 1 2025-10-25 09:19:25.098 00:00:00.000 UDP 28.104.0.1:35620 -> 198.28.0.2:53 1 64 1 2025-10-25 09:14:56.323 00:05:50.981 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-25 09:20:25.362 00:00:00.000 UDP 28.104.0.1:33457 -> 198.28.0.2:53 1 64 1 2025-10-25 09:20:25.361 00:00:00.000 UDP 28.104.0.1:59968 -> 198.28.0.2:53 1 64 1 2025-10-25 09:20:25.371 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33457 1 109 1 2025-10-25 09:20:25.371 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59968 1 80 1 2025-10-25 09:16:56.325 00:04:00.000 TCP 28.154.0.1:179 -> 28.157.0.1:37077 5 355 1 2025-10-25 09:16:56.256 00:04:00.069 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-25 09:21:25.663 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50021 1 80 1 2025-10-25 09:21:25.663 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51117 1 109 1 2025-10-25 09:21:25.653 00:00:00.000 UDP 28.104.0.1:51117 -> 198.28.0.2:53 1 64 1 2025-10-25 09:21:25.653 00:00:00.000 UDP 28.104.0.1:50021 -> 198.28.0.2:53 1 64 1 2025-10-25 09:16:56.364 00:05:50.981 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-25 09:22:25.965 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36019 1 80 1 2025-10-25 09:22:25.965 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50717 1 109 1 2025-10-25 09:22:25.953 00:00:00.000 UDP 28.104.0.1:36019 -> 198.28.0.2:53 1 64 1 2025-10-25 09:22:25.953 00:00:00.000 UDP 28.104.0.1:50717 -> 198.28.0.2:53 1 64 1 2025-10-25 09:22:42.270 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-25 09:17:56.334 00:05:50.960 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-25 09:21:56.325 00:01:00.000 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 142 1 2025-10-25 09:21:56.256 00:01:00.069 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-25 09:23:26.266 00:00:00.000 UDP 28.104.0.1:50628 -> 198.28.0.2:53 1 64 1 2025-10-25 09:23:26.265 00:00:00.000 UDP 28.104.0.1:38544 -> 198.28.0.2:53 1 64 1 2025-10-25 09:23:26.277 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38544 1 109 1 2025-10-25 09:23:26.277 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50628 1 80 1 2025-10-25 09:19:26.343 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2892 1 2025-10-25 09:24:26.568 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45772 1 109 1 2025-10-25 09:24:26.568 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40394 1 80 1 2025-10-25 09:24:26.558 00:00:00.000 UDP 28.104.0.1:40394 -> 198.28.0.2:53 1 64 1 2025-10-25 09:24:26.559 00:00:00.000 UDP 28.104.0.1:45772 -> 198.28.0.2:53 1 64 1 2025-10-25 09:20:47.294 00:05:09.080 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-25 09:25:26.807 00:00:00.000 UDP 28.104.0.1:46079 -> 198.28.0.2:53 1 64 1 2025-10-25 09:25:26.807 00:00:00.000 UDP 28.104.0.1:34185 -> 198.28.0.2:53 1 64 1 2025-10-25 09:25:26.817 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46079 1 109 1 2025-10-25 09:25:26.817 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34185 1 80 1 2025-10-25 09:20:56.326 00:05:50.982 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-25 09:23:56.326 00:02:00.000 TCP 28.154.0.1:179 -> 28.157.0.1:37077 3 213 1 2025-10-25 09:23:56.256 00:02:00.070 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-10-25 09:26:27.102 00:00:00.000 UDP 28.104.0.1:60996 -> 198.28.0.2:53 1 64 1 2025-10-25 09:26:27.102 00:00:00.000 UDP 28.104.0.1:60469 -> 198.28.0.2:53 1 64 1 2025-10-25 09:26:27.113 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60996 1 80 1 2025-10-25 09:26:27.113 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60469 1 109 1 2025-10-25 09:27:27.407 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38087 1 80 1 2025-10-25 09:27:27.407 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57015 1 109 1 2025-10-25 09:27:27.395 00:00:00.000 UDP 28.104.0.1:57015 -> 198.28.0.2:53 1 64 1 2025-10-25 09:27:27.396 00:00:00.000 UDP 28.104.0.1:38087 -> 198.28.0.2:53 1 64 1 2025-10-25 09:27:42.368 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-25 09:22:56.364 00:05:50.983 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-25 09:26:56.326 00:01:00.000 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 142 1 2025-10-25 09:26:56.257 00:01:00.069 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-25 09:28:29.267 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33010 1 109 1 2025-10-25 09:28:29.267 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57288 1 80 1 2025-10-25 09:28:29.258 00:00:00.000 UDP 28.104.0.1:57288 -> 198.28.0.2:53 1 64 1 2025-10-25 09:28:29.258 00:00:00.000 UDP 28.104.0.1:33010 -> 198.28.0.2:53 1 64 1 2025-10-25 09:23:56.336 00:05:50.961 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-25 09:24:46.351 00:05:10.011 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2856 1 2025-10-25 09:29:29.553 00:00:00.000 UDP 28.104.0.1:59381 -> 198.28.0.2:53 1 64 1 2025-10-25 09:29:29.553 00:00:00.000 UDP 28.104.0.1:58087 -> 198.28.0.2:53 1 64 1 2025-10-25 09:29:29.564 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58087 1 80 1 2025-10-25 09:29:29.564 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59381 1 109 1 2025-10-25 09:30:29.846 00:00:00.000 UDP 28.104.0.1:36159 -> 198.28.0.2:53 1 64 1 2025-10-25 09:30:29.846 00:00:00.000 UDP 28.104.0.1:46120 -> 198.28.0.2:53 1 64 1 2025-10-25 09:30:29.857 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46120 1 109 1 2025-10-25 09:30:29.855 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36159 1 80 1 2025-10-25 09:28:56.326 00:02:00.000 TCP 28.154.0.1:179 -> 28.157.0.1:37077 3 213 1 2025-10-25 09:28:56.258 00:02:00.068 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-10-25 09:26:47.296 00:05:09.080 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-25 09:31:30.637 00:00:00.000 UDP 28.104.0.1:37129 -> 198.28.0.2:53 1 64 1 2025-10-25 09:31:30.637 00:00:00.000 UDP 28.104.0.1:52533 -> 198.28.0.2:53 1 64 1 2025-10-25 09:31:30.647 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52533 1 80 1 2025-10-25 09:31:30.647 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37129 1 109 1 2025-10-25 09:26:56.326 00:05:50.981 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-25 09:32:30.947 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40000 1 80 1 2025-10-25 09:32:30.945 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36495 1 109 1 2025-10-25 09:32:30.935 00:00:00.000 UDP 28.104.0.1:36495 -> 198.28.0.2:53 1 64 1 2025-10-25 09:32:30.935 00:00:00.000 UDP 28.104.0.1:40000 -> 198.28.0.2:53 1 64 1 2025-10-25 09:32:42.627 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-25 09:31:56.328 00:01:00.000 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 142 1 2025-10-25 09:31:56.260 00:01:00.068 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-25 09:33:31.288 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50920 1 80 1 2025-10-25 09:33:31.288 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42269 1 109 1 2025-10-25 09:33:31.278 00:00:00.000 UDP 28.104.0.1:50920 -> 198.28.0.2:53 1 64 1 2025-10-25 09:33:31.278 00:00:00.000 UDP 28.104.0.1:42269 -> 198.28.0.2:53 1 64 1 2025-10-25 09:28:56.365 00:05:50.983 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-25 09:30:06.362 00:05:10.011 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2528 1 2025-10-25 09:34:31.577 00:00:00.000 UDP 28.104.0.1:39666 -> 198.28.0.2:53 1 64 1 2025-10-25 09:34:31.576 00:00:00.000 UDP 28.104.0.1:37704 -> 198.28.0.2:53 1 64 1 2025-10-25 09:34:31.586 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39666 1 80 1 2025-10-25 09:34:31.586 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37704 1 109 1 2025-10-25 09:29:56.337 00:05:50.961 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-25 09:35:31.839 00:00:00.000 UDP 28.104.0.1:58387 -> 198.28.0.2:53 1 64 1 2025-10-25 09:35:31.839 00:00:00.000 UDP 28.104.0.1:36614 -> 198.28.0.2:53 1 64 1 2025-10-25 09:35:31.849 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58387 1 80 1 2025-10-25 09:35:31.849 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36614 1 109 1 2025-10-25 09:33:56.328 00:02:00.000 TCP 28.154.0.1:179 -> 28.157.0.1:37077 3 213 1 2025-10-25 09:36:32.158 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38518 1 109 1 2025-10-25 09:36:32.158 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58581 1 80 1 2025-10-25 09:36:32.147 00:00:00.000 UDP 28.104.0.1:58581 -> 198.28.0.2:53 1 64 1 2025-10-25 09:36:32.147 00:00:00.000 UDP 28.104.0.1:38518 -> 198.28.0.2:53 1 64 1 2025-10-25 09:32:47.298 00:05:09.081 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-25 09:37:32.462 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39819 1 109 1 2025-10-25 09:37:32.462 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39048 1 80 1 2025-10-25 09:37:32.452 00:00:00.000 UDP 28.104.0.1:39819 -> 198.28.0.2:53 1 64 1 2025-10-25 09:37:32.452 00:00:00.000 UDP 28.104.0.1:39048 -> 198.28.0.2:53 1 64 1 2025-10-25 09:37:42.624 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-25 09:32:56.328 00:05:50.992 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-25 09:36:56.329 00:01:00.000 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 142 1 2025-10-25 09:33:56.259 00:04:00.070 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-25 09:38:32.743 00:00:00.000 UDP 28.104.0.1:58207 -> 198.28.0.2:53 1 64 1 2025-10-25 09:38:32.744 00:00:00.000 UDP 28.104.0.1:42377 -> 198.28.0.2:53 1 64 1 2025-10-25 09:38:32.753 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58207 1 80 1 2025-10-25 09:38:32.754 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42377 1 109 1 2025-10-25 09:39:33.067 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56410 1 109 1 2025-10-25 09:39:33.067 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44968 1 80 1 2025-10-25 09:39:33.058 00:00:00.000 UDP 28.104.0.1:56410 -> 198.28.0.2:53 1 64 1 2025-10-25 09:39:33.058 00:00:00.000 UDP 28.104.0.1:44968 -> 198.28.0.2:53 1 64 1 2025-10-25 09:35:26.373 00:05:10.012 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2816 1 2025-10-25 09:34:56.368 00:05:50.982 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-25 09:40:33.360 00:00:00.000 UDP 28.104.0.1:47131 -> 198.28.0.2:53 1 64 1 2025-10-25 09:40:33.360 00:00:00.000 UDP 28.104.0.1:45574 -> 198.28.0.2:53 1 64 1 2025-10-25 09:40:33.370 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47131 1 80 1 2025-10-25 09:40:33.370 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45574 1 109 1 2025-10-25 09:35:56.339 00:05:50.961 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-25 09:38:56.329 00:02:00.000 TCP 28.154.0.1:179 -> 28.157.0.1:37077 3 213 1 2025-10-25 09:41:33.623 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35282 1 80 1 2025-10-25 09:41:33.624 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48397 1 109 1 2025-10-25 09:41:33.615 00:00:00.000 UDP 28.104.0.1:48397 -> 198.28.0.2:53 1 64 1 2025-10-25 09:41:33.614 00:00:00.000 UDP 28.104.0.1:35282 -> 198.28.0.2:53 1 64 1 2025-10-25 09:42:33.924 00:00:00.000 UDP 28.104.0.1:56897 -> 198.28.0.2:53 1 64 1 2025-10-25 09:42:33.924 00:00:00.000 UDP 28.104.0.1:59968 -> 198.28.0.2:53 1 64 1 2025-10-25 09:42:33.934 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56897 1 109 1 2025-10-25 09:42:33.934 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59968 1 80 1 2025-10-25 09:42:42.701 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-25 09:41:56.330 00:01:00.000 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 142 1 2025-10-25 09:38:56.263 00:04:00.067 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-25 09:38:47.301 00:05:09.081 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-25 09:43:34.181 00:00:00.000 UDP 28.104.0.1:55263 -> 198.28.0.2:53 1 64 1 2025-10-25 09:43:34.181 00:00:00.000 UDP 28.104.0.1:54104 -> 198.28.0.2:53 1 64 1 2025-10-25 09:43:34.192 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55263 1 109 1 2025-10-25 09:43:34.192 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54104 1 80 1 2025-10-25 09:38:56.329 00:05:50.985 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-25 09:44:34.449 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43372 1 109 1 2025-10-25 09:44:34.449 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55451 1 80 1 2025-10-25 09:44:34.434 00:00:00.000 UDP 28.104.0.1:43372 -> 198.28.0.2:53 1 64 1 2025-10-25 09:44:34.434 00:00:00.000 UDP 28.104.0.1:55451 -> 198.28.0.2:53 1 64 1 2025-10-25 09:40:46.386 00:05:10.413 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2652 1 2025-10-25 09:45:34.738 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42129 1 109 1 2025-10-25 09:45:34.738 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51908 1 80 1 2025-10-25 09:45:34.727 00:00:00.000 UDP 28.104.0.1:51908 -> 198.28.0.2:53 1 64 1 2025-10-25 09:45:34.727 00:00:00.000 UDP 28.104.0.1:42129 -> 198.28.0.2:53 1 64 1 2025-10-25 09:40:56.369 00:05:50.985 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-25 09:43:56.329 00:02:00.001 TCP 28.154.0.1:179 -> 28.157.0.1:37077 3 213 1 2025-10-25 09:46:35.043 00:00:00.000 UDP 28.104.0.1:57722 -> 198.28.0.2:53 1 64 1 2025-10-25 09:46:35.043 00:00:00.000 UDP 28.104.0.1:51348 -> 198.28.0.2:53 1 64 1 2025-10-25 09:46:35.054 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57722 1 80 1 2025-10-25 09:46:35.054 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51348 1 109 1 2025-10-25 09:41:56.339 00:05:50.965 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-25 09:47:35.479 00:00:00.000 UDP 28.104.0.1:58964 -> 198.28.0.2:53 1 64 1 2025-10-25 09:47:35.479 00:00:00.000 UDP 28.104.0.1:51133 -> 198.28.0.2:53 1 64 1 2025-10-25 09:47:35.490 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58964 1 109 1 2025-10-25 09:47:35.490 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51133 1 80 1 2025-10-25 09:47:42.900 00:00:00.026 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-25 09:46:56.330 00:01:00.000 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 142 1 2025-10-25 09:43:56.263 00:04:00.067 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-25 09:48:35.790 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41477 1 109 1 2025-10-25 09:48:35.790 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41364 1 80 1 2025-10-25 09:48:35.779 00:00:00.000 UDP 28.104.0.1:41364 -> 198.28.0.2:53 1 64 1 2025-10-25 09:48:35.779 00:00:00.000 UDP 28.104.0.1:41477 -> 198.28.0.2:53 1 64 1 2025-10-25 09:44:47.305 00:05:09.081 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-25 09:49:36.077 00:00:00.000 UDP 28.104.0.1:41116 -> 198.28.0.2:53 1 64 1 2025-10-25 09:49:36.077 00:00:00.000 UDP 28.104.0.1:49322 -> 198.28.0.2:53 1 64 1 2025-10-25 09:49:36.089 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49322 1 80 1 2025-10-25 09:49:36.089 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41116 1 109 1 2025-10-25 09:44:56.329 00:05:50.985 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-25 09:46:06.393 00:05:10.036 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2728 1 2025-10-25 09:50:36.374 00:00:00.000 UDP 28.104.0.1:46679 -> 198.28.0.2:53 1 64 1 2025-10-25 09:50:36.374 00:00:00.000 UDP 28.104.0.1:39528 -> 198.28.0.2:53 1 64 1 2025-10-25 09:50:36.384 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46679 1 80 1 2025-10-25 09:50:36.385 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39528 1 109 1 2025-10-25 09:51:36.736 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34047 1 109 1 2025-10-25 09:51:36.736 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40192 1 80 1 2025-10-25 09:51:36.726 00:00:00.000 UDP 28.104.0.1:34047 -> 198.28.0.2:53 1 64 1 2025-10-25 09:51:36.726 00:00:00.000 UDP 28.104.0.1:40192 -> 198.28.0.2:53 1 64 1 2025-10-25 09:46:56.372 00:05:50.983 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-25 09:52:37.055 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57496 1 80 1 2025-10-25 09:52:37.055 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47157 1 109 1 2025-10-25 09:52:37.045 00:00:00.000 UDP 28.104.0.1:57496 -> 198.28.0.2:53 1 64 1 2025-10-25 09:52:37.045 00:00:00.000 UDP 28.104.0.1:47157 -> 198.28.0.2:53 1 64 1 2025-10-25 09:52:43.010 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-25 09:47:56.340 00:05:50.965 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-25 09:48:56.330 00:04:00.003 TCP 28.154.0.1:179 -> 28.157.0.1:37077 7 459 1 2025-10-25 09:48:56.264 00:04:00.069 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-25 09:53:37.303 00:00:00.000 UDP 28.104.0.1:34985 -> 198.28.0.2:53 1 64 1 2025-10-25 09:53:37.303 00:00:00.000 UDP 28.104.0.1:36334 -> 198.28.0.2:53 1 64 1 2025-10-25 09:53:37.314 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36334 1 109 1 2025-10-25 09:53:37.314 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34985 1 80 1 2025-10-25 09:54:37.609 00:00:00.000 UDP 28.104.0.1:50131 -> 198.28.0.2:53 1 64 1 2025-10-25 09:54:37.608 00:00:00.000 UDP 28.104.0.1:45452 -> 198.28.0.2:53 1 64 1 2025-10-25 09:54:37.619 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45452 1 80 1 2025-10-25 09:54:37.618 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50131 1 109 1 2025-10-25 09:50:47.304 00:05:09.082 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-25 09:53:56.332 00:01:00.001 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 142 1 2025-10-25 09:53:56.268 00:01:00.065 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-25 09:51:26.401 00:05:10.002 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2772 1 2025-10-25 09:55:37.918 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53725 1 80 1 2025-10-25 09:55:37.918 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53395 1 109 1 2025-10-25 09:55:37.906 00:00:00.000 UDP 28.104.0.1:53725 -> 198.28.0.2:53 1 64 1 2025-10-25 09:55:37.906 00:00:00.000 UDP 28.104.0.1:53395 -> 198.28.0.2:53 1 64 1 2025-10-25 09:50:56.332 00:05:50.984 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-25 09:56:38.202 00:00:00.000 UDP 28.104.0.1:34590 -> 198.28.0.2:53 1 64 1 2025-10-25 09:56:38.202 00:00:00.000 UDP 28.104.0.1:60352 -> 198.28.0.2:53 1 64 1 2025-10-25 09:56:38.212 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60352 1 109 1 2025-10-25 09:56:38.212 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34590 1 80 1 2025-10-25 09:57:38.508 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49918 1 80 1 2025-10-25 09:57:38.508 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48544 1 109 1 2025-10-25 09:57:38.497 00:00:00.000 UDP 28.104.0.1:49918 -> 198.28.0.2:53 1 64 1 2025-10-25 09:57:38.497 00:00:00.000 UDP 28.104.0.1:48544 -> 198.28.0.2:53 1 64 1 2025-10-25 09:57:42.928 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-25 09:52:56.374 00:05:50.981 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-25 09:55:56.333 00:02:00.000 TCP 28.154.0.1:179 -> 28.157.0.1:37077 3 213 1 2025-10-25 09:55:56.270 00:02:00.063 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-10-25 09:58:38.791 00:00:00.000 UDP 28.104.0.1:41947 -> 198.28.0.2:53 1 64 1 2025-10-25 09:58:38.791 00:00:00.000 UDP 28.104.0.1:60292 -> 198.28.0.2:53 1 64 1 2025-10-25 09:58:38.799 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60292 1 80 1 2025-10-25 09:58:38.800 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41947 1 109 1 2025-10-25 09:53:56.342 00:05:50.963 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 Summary: total flows: 342, total bytes: 93640, total packets: 1368, avg bps: 198, avg pps: 0, avg bpp: 68 Time window: 2025-10-25 08:56:47 - 2025-10-25 09:59:47 Total flows processed: 342, passed: 342, Blocks skipped: 0, Bytes read: 35632 Sys: 0.0030s User: 0.0050s Wall: 0.0040s flows/second: 85797.7 Runtime: 0.0040s