Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-25 11:56:56.369 00:02:00.012 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-25 11:59:18.804 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59906 1 80 1 2025-10-25 11:59:18.804 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47183 1 109 1 2025-10-25 11:59:18.793 00:00:00.000 UDP 28.104.0.1:47183 -> 198.28.0.2:53 1 64 1 2025-10-25 11:59:18.794 00:00:00.000 UDP 28.104.0.1:59906 -> 198.28.0.2:53 1 64 1 2025-10-25 12:00:19.066 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54552 1 80 1 2025-10-25 12:00:19.067 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46228 1 109 1 2025-10-25 12:00:19.056 00:00:00.000 UDP 28.104.0.1:54552 -> 198.28.0.2:53 1 64 1 2025-10-25 12:00:19.057 00:00:00.000 UDP 28.104.0.1:46228 -> 198.28.0.2:53 1 64 1 2025-10-25 11:59:56.369 00:01:00.012 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-25 11:56:56.305 00:04:00.064 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-25 11:56:47.348 00:05:09.080 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-25 12:01:19.349 00:00:00.000 UDP 28.104.0.1:37017 -> 198.28.0.2:53 1 64 1 2025-10-25 12:01:19.349 00:00:00.000 UDP 28.104.0.1:58981 -> 198.28.0.2:53 1 64 1 2025-10-25 12:01:19.359 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37017 1 109 1 2025-10-25 12:01:19.358 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58981 1 80 1 2025-10-25 11:56:56.368 00:05:50.992 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-25 12:02:20.430 00:00:00.000 UDP 28.104.0.1:45680 -> 198.28.0.2:53 1 64 1 2025-10-25 12:02:20.430 00:00:00.000 UDP 28.104.0.1:53091 -> 198.28.0.2:53 1 64 1 2025-10-25 12:02:20.441 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45680 1 109 1 2025-10-25 12:02:20.441 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53091 1 80 1 2025-10-25 12:02:45.856 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-25 12:01:56.305 00:01:00.065 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-25 12:03:20.744 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36911 1 80 1 2025-10-25 11:59:06.550 00:05:10.002 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2752 1 2025-10-25 12:03:20.743 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47704 1 109 1 2025-10-25 12:03:20.733 00:00:00.000 UDP 28.104.0.1:47704 -> 198.28.0.2:53 1 64 1 2025-10-25 12:03:20.734 00:00:00.000 UDP 28.104.0.1:36911 -> 198.28.0.2:53 1 64 1 2025-10-25 11:58:56.417 00:05:50.982 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-25 12:04:21.053 00:00:00.000 UDP 28.104.0.1:56264 -> 198.28.0.2:53 1 64 1 2025-10-25 12:04:21.053 00:00:00.000 UDP 28.104.0.1:41103 -> 198.28.0.2:53 1 64 1 2025-10-25 12:04:21.065 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41103 1 80 1 2025-10-25 12:04:21.064 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56264 1 109 1 2025-10-25 11:59:56.378 00:05:50.971 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-25 12:05:21.356 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33596 1 109 1 2025-10-25 12:05:21.356 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36663 1 80 1 2025-10-25 12:05:21.346 00:00:00.000 UDP 28.104.0.1:36663 -> 198.28.0.2:53 1 64 1 2025-10-25 12:05:21.346 00:00:00.000 UDP 28.104.0.1:33596 -> 198.28.0.2:53 1 64 1 2025-10-25 12:01:56.369 00:04:00.014 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-10-25 12:03:56.305 00:02:00.064 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-10-25 12:06:21.618 00:00:00.000 UDP 28.104.0.1:35700 -> 198.28.0.2:53 1 64 1 2025-10-25 12:06:21.618 00:00:00.000 UDP 28.104.0.1:39132 -> 198.28.0.2:53 1 64 1 2025-10-25 12:06:21.628 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39132 1 109 1 2025-10-25 12:06:21.628 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35700 1 80 1 2025-10-25 12:02:47.349 00:05:09.080 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-25 12:07:21.919 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54548 1 109 1 2025-10-25 12:07:21.919 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59493 1 80 1 2025-10-25 12:07:21.908 00:00:00.000 UDP 28.104.0.1:54548 -> 198.28.0.2:53 1 64 1 2025-10-25 12:07:21.908 00:00:00.000 UDP 28.104.0.1:59493 -> 198.28.0.2:53 1 64 1 2025-10-25 12:07:45.710 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-25 12:02:56.370 00:05:50.995 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-25 12:06:56.371 00:01:00.014 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-25 12:06:56.309 00:01:00.062 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-25 12:08:22.174 00:00:00.000 UDP 28.104.0.1:44990 -> 198.28.0.2:53 1 64 1 2025-10-25 12:08:22.174 00:00:00.000 UDP 28.104.0.1:44306 -> 198.28.0.2:53 1 64 1 2025-10-25 12:08:22.182 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44990 1 80 1 2025-10-25 12:08:22.182 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44306 1 109 1 2025-10-25 12:04:26.551 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2652 1 2025-10-25 12:09:22.479 00:00:00.000 UDP 28.104.0.1:52530 -> 198.28.0.2:53 1 64 1 2025-10-25 12:09:22.479 00:00:00.000 UDP 28.104.0.1:40983 -> 198.28.0.2:53 1 64 1 2025-10-25 12:09:22.490 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52530 1 109 1 2025-10-25 12:09:22.490 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40983 1 80 1 2025-10-25 12:04:56.418 00:05:50.986 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-25 12:10:22.739 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43466 1 109 1 2025-10-25 12:10:22.739 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40005 1 80 1 2025-10-25 12:10:22.729 00:00:00.000 UDP 28.104.0.1:40005 -> 198.28.0.2:53 1 64 1 2025-10-25 12:10:22.729 00:00:00.000 UDP 28.104.0.1:43466 -> 198.28.0.2:53 1 64 1 2025-10-25 12:05:56.380 00:05:50.975 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-25 12:08:56.373 00:02:00.014 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-25 12:08:56.310 00:02:00.064 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-10-25 12:11:23.465 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50579 1 80 1 2025-10-25 12:11:23.465 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39260 1 109 1 2025-10-25 12:11:23.457 00:00:00.000 UDP 28.104.0.1:50579 -> 198.28.0.2:53 1 64 1 2025-10-25 12:11:23.457 00:00:00.000 UDP 28.104.0.1:39260 -> 198.28.0.2:53 1 64 1 2025-10-25 12:12:23.745 00:00:00.000 UDP 28.104.0.1:36831 -> 198.28.0.2:53 1 64 1 2025-10-25 12:12:23.745 00:00:00.000 UDP 28.104.0.1:59102 -> 198.28.0.2:53 1 64 1 2025-10-25 12:12:23.756 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59102 1 80 1 2025-10-25 12:12:23.756 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36831 1 109 1 2025-10-25 12:12:45.977 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-25 12:11:56.373 00:01:00.013 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-25 12:11:56.309 00:01:00.065 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-25 12:08:47.354 00:05:09.079 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-25 12:13:24.067 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56846 1 109 1 2025-10-25 12:13:24.067 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54508 1 80 1 2025-10-25 12:13:24.056 00:00:00.000 UDP 28.104.0.1:54508 -> 198.28.0.2:53 1 64 1 2025-10-25 12:13:24.057 00:00:00.000 UDP 28.104.0.1:56846 -> 198.28.0.2:53 1 64 1 2025-10-25 12:08:56.373 00:05:50.995 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-25 12:09:46.556 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2728 1 2025-10-25 12:14:24.366 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34238 1 80 1 2025-10-25 12:14:24.366 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33643 1 109 1 2025-10-25 12:14:24.356 00:00:00.000 UDP 28.104.0.1:33643 -> 198.28.0.2:53 1 64 1 2025-10-25 12:14:24.355 00:00:00.000 UDP 28.104.0.1:34238 -> 198.28.0.2:53 1 64 1 2025-10-25 12:15:24.658 00:00:00.000 UDP 28.104.0.1:41825 -> 198.28.0.2:53 1 64 1 2025-10-25 12:15:24.658 00:00:00.000 UDP 28.104.0.1:38960 -> 198.28.0.2:53 1 64 1 2025-10-25 12:15:24.668 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38960 1 109 1 2025-10-25 12:15:24.668 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41825 1 80 1 2025-10-25 12:10:56.421 00:05:50.986 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-25 12:13:56.374 00:02:00.013 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-25 12:13:56.310 00:02:00.066 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-10-25 12:16:24.969 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59566 1 80 1 2025-10-25 12:16:24.969 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52595 1 109 1 2025-10-25 12:16:24.960 00:00:00.000 UDP 28.104.0.1:59566 -> 198.28.0.2:53 1 64 1 2025-10-25 12:16:24.960 00:00:00.000 UDP 28.104.0.1:52595 -> 198.28.0.2:53 1 64 1 2025-10-25 12:11:56.382 00:05:50.975 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-25 12:17:25.270 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37250 1 80 1 2025-10-25 12:17:25.270 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48252 1 109 1 2025-10-25 12:17:25.261 00:00:00.000 UDP 28.104.0.1:48252 -> 198.28.0.2:53 1 64 1 2025-10-25 12:17:25.261 00:00:00.000 UDP 28.104.0.1:37250 -> 198.28.0.2:53 1 64 1 2025-10-25 12:17:45.872 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-25 12:16:56.374 00:01:00.013 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-25 12:16:56.309 00:01:00.065 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-25 12:18:25.561 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40461 1 80 1 2025-10-25 12:18:25.561 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58452 1 109 1 2025-10-25 12:18:25.550 00:00:00.000 UDP 28.104.0.1:40461 -> 198.28.0.2:53 1 64 1 2025-10-25 12:18:25.550 00:00:00.000 UDP 28.104.0.1:58452 -> 198.28.0.2:53 1 64 1 2025-10-25 12:14:47.356 00:05:09.077 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-25 12:15:06.564 00:05:10.002 OSPF 28.0.2.1:0 -> 224.0.0.5:0 42 3044 1 2025-10-25 12:19:25.836 00:00:00.000 UDP 28.104.0.1:57766 -> 198.28.0.2:53 1 64 1 2025-10-25 12:19:25.836 00:00:00.000 UDP 28.104.0.1:48357 -> 198.28.0.2:53 1 64 1 2025-10-25 12:19:25.846 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48357 1 80 1 2025-10-25 12:19:25.846 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57766 1 109 1 2025-10-25 12:14:56.374 00:05:50.995 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-25 12:20:26.143 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42125 1 80 1 2025-10-25 12:20:26.144 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40025 1 109 1 2025-10-25 12:20:26.132 00:00:00.000 UDP 28.104.0.1:42125 -> 198.28.0.2:53 1 64 1 2025-10-25 12:20:26.133 00:00:00.000 UDP 28.104.0.1:40025 -> 198.28.0.2:53 1 64 1 2025-10-25 12:18:56.374 00:02:00.013 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-25 12:18:56.309 00:02:00.065 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-10-25 12:21:26.445 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47211 1 109 1 2025-10-25 12:21:26.445 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51767 1 80 1 2025-10-25 12:21:26.436 00:00:00.000 UDP 28.104.0.1:47211 -> 198.28.0.2:53 1 64 1 2025-10-25 12:21:26.437 00:00:00.000 UDP 28.104.0.1:51767 -> 198.28.0.2:53 1 64 1 2025-10-25 12:16:56.423 00:05:50.986 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-25 12:22:26.744 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36744 1 109 1 2025-10-25 12:22:26.743 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57324 1 80 1 2025-10-25 12:22:26.734 00:00:00.000 UDP 28.104.0.1:36744 -> 198.28.0.2:53 1 64 1 2025-10-25 12:22:26.733 00:00:00.000 UDP 28.104.0.1:57324 -> 198.28.0.2:53 1 64 1 2025-10-25 12:22:46.047 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-25 12:17:56.385 00:05:50.974 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-25 12:21:56.376 00:01:00.014 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-25 12:21:56.312 00:01:00.065 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-25 12:23:27.058 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46647 1 109 1 2025-10-25 12:23:27.058 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44812 1 80 1 2025-10-25 12:23:27.048 00:00:00.000 UDP 28.104.0.1:44812 -> 198.28.0.2:53 1 64 1 2025-10-25 12:23:27.047 00:00:00.000 UDP 28.104.0.1:46647 -> 198.28.0.2:53 1 64 1 2025-10-25 12:24:27.366 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49680 1 80 1 2025-10-25 12:24:27.366 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49233 1 109 1 2025-10-25 12:24:27.354 00:00:00.000 UDP 28.104.0.1:49233 -> 198.28.0.2:53 1 64 1 2025-10-25 12:24:27.354 00:00:00.000 UDP 28.104.0.1:49680 -> 198.28.0.2:53 1 64 1 2025-10-25 12:20:26.566 00:05:10.012 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2464 1 2025-10-25 12:20:47.359 00:05:09.076 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-25 12:25:27.645 00:00:00.000 UDP 28.104.0.1:47425 -> 198.28.0.2:53 1 64 1 2025-10-25 12:25:27.644 00:00:00.000 UDP 28.104.0.1:37209 -> 198.28.0.2:53 1 64 1 2025-10-25 12:25:27.654 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37209 1 80 1 2025-10-25 12:25:27.654 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47425 1 109 1 2025-10-25 12:20:56.374 00:05:50.994 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-25 12:23:56.376 00:02:00.013 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-25 12:26:27.936 00:00:00.000 UDP 28.104.0.1:40487 -> 198.28.0.2:53 1 64 1 2025-10-25 12:26:27.936 00:00:00.000 UDP 28.104.0.1:44785 -> 198.28.0.2:53 1 64 1 2025-10-25 12:26:27.947 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40487 1 80 1 2025-10-25 12:26:27.947 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44785 1 109 1 2025-10-25 12:27:28.235 00:00:00.000 UDP 28.104.0.1:57529 -> 198.28.0.2:53 1 64 1 2025-10-25 12:27:28.236 00:00:00.000 UDP 28.104.0.1:46452 -> 198.28.0.2:53 1 64 1 2025-10-25 12:27:28.246 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46452 1 80 1 2025-10-25 12:27:28.246 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57529 1 109 1 2025-10-25 12:27:46.038 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-25 12:22:56.423 00:05:50.990 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-25 12:26:56.375 00:01:00.014 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-25 12:23:56.309 00:04:00.066 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-25 12:28:28.500 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47998 1 80 1 2025-10-25 12:28:28.500 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49646 1 109 1 2025-10-25 12:28:28.489 00:00:00.000 UDP 28.104.0.1:49646 -> 198.28.0.2:53 1 64 1 2025-10-25 12:28:28.488 00:00:00.000 UDP 28.104.0.1:47998 -> 198.28.0.2:53 1 64 1 2025-10-25 12:23:56.386 00:05:50.973 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-25 12:29:28.853 00:00:00.000 UDP 28.104.0.1:56982 -> 198.28.0.2:53 1 64 1 2025-10-25 12:29:28.853 00:00:00.000 UDP 28.104.0.1:50697 -> 198.28.0.2:53 1 64 1 2025-10-25 12:29:28.865 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50697 1 80 1 2025-10-25 12:29:28.865 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56982 1 109 1 2025-10-25 12:25:46.578 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2932 1 2025-10-25 12:30:29.171 00:00:00.000 UDP 28.104.0.1:33947 -> 198.28.0.2:53 1 64 1 2025-10-25 12:30:29.171 00:00:00.000 UDP 28.104.0.1:39896 -> 198.28.0.2:53 1 64 1 2025-10-25 12:30:29.182 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33947 1 109 1 2025-10-25 12:30:29.182 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39896 1 80 1 2025-10-25 12:28:56.376 00:02:00.013 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-25 12:26:47.359 00:05:09.076 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-25 12:31:29.468 00:00:00.000 UDP 28.104.0.1:53631 -> 198.28.0.2:53 1 64 1 2025-10-25 12:31:29.468 00:00:00.000 UDP 28.104.0.1:49966 -> 198.28.0.2:53 1 64 1 2025-10-25 12:31:29.479 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49966 1 109 1 2025-10-25 12:31:29.479 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53631 1 80 1 2025-10-25 12:26:56.376 00:05:50.993 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-25 12:32:29.770 00:00:00.000 UDP 28.104.0.1:40129 -> 198.28.0.2:53 1 64 1 2025-10-25 12:32:29.770 00:00:00.000 UDP 28.104.0.1:47110 -> 198.28.0.2:53 1 64 1 2025-10-25 12:32:29.781 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40129 1 80 1 2025-10-25 12:32:29.781 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47110 1 109 1 2025-10-25 12:32:46.448 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-25 12:31:56.377 00:01:00.013 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-25 12:28:56.311 00:04:00.067 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-25 12:33:30.066 00:00:00.000 UDP 28.104.0.1:50218 -> 198.28.0.2:53 1 64 1 2025-10-25 12:33:30.066 00:00:00.000 UDP 28.104.0.1:51192 -> 198.28.0.2:53 1 64 1 2025-10-25 12:33:30.077 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51192 1 80 1 2025-10-25 12:33:30.077 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50218 1 109 1 2025-10-25 12:28:56.425 00:05:50.986 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-25 12:34:30.365 00:00:00.000 UDP 28.104.0.1:39862 -> 198.28.0.2:53 1 64 1 2025-10-25 12:34:30.365 00:00:00.000 UDP 28.104.0.1:59065 -> 198.28.0.2:53 1 64 1 2025-10-25 12:34:30.377 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39862 1 109 1 2025-10-25 12:34:30.377 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59065 1 80 1 2025-10-25 12:29:56.386 00:05:50.977 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-25 12:33:56.315 00:01:00.065 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-25 12:31:06.586 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2704 1 2025-10-25 12:35:30.669 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60570 1 80 1 2025-10-25 12:35:30.669 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46672 1 109 1 2025-10-25 12:35:30.660 00:00:00.000 UDP 28.104.0.1:46672 -> 198.28.0.2:53 1 64 1 2025-10-25 12:35:30.660 00:00:00.000 UDP 28.104.0.1:60570 -> 198.28.0.2:53 1 64 1 2025-10-25 12:36:31.016 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53545 1 80 1 2025-10-25 12:36:31.016 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35940 1 109 1 2025-10-25 12:36:31.005 00:00:00.000 UDP 28.104.0.1:53545 -> 198.28.0.2:53 1 64 1 2025-10-25 12:36:31.005 00:00:00.000 UDP 28.104.0.1:35940 -> 198.28.0.2:53 1 64 1 2025-10-25 12:32:47.360 00:05:09.076 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-25 12:37:31.259 00:00:00.000 UDP 28.104.0.1:59888 -> 198.28.0.2:53 1 64 1 2025-10-25 12:37:31.259 00:00:00.000 UDP 28.104.0.1:57503 -> 198.28.0.2:53 1 64 1 2025-10-25 12:37:31.271 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59888 1 80 1 2025-10-25 12:37:31.270 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57503 1 109 1 2025-10-25 12:37:45.817 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-25 12:32:56.379 00:05:50.992 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-25 12:33:56.378 00:04:00.014 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-10-25 12:35:56.313 00:02:00.066 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-10-25 12:38:31.553 00:00:00.000 UDP 28.104.0.1:55597 -> 198.28.0.2:53 1 64 1 2025-10-25 12:38:31.553 00:00:00.000 UDP 28.104.0.1:52867 -> 198.28.0.2:53 1 64 1 2025-10-25 12:38:31.564 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55597 1 80 1 2025-10-25 12:38:31.564 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52867 1 109 1 2025-10-25 12:39:31.803 00:00:00.000 UDP 28.104.0.1:45216 -> 198.28.0.2:53 1 64 1 2025-10-25 12:39:31.803 00:00:00.000 UDP 28.104.0.1:42763 -> 198.28.0.2:53 1 64 1 2025-10-25 12:39:31.813 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42763 1 80 1 2025-10-25 12:39:31.814 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45216 1 109 1 2025-10-25 12:34:56.425 00:05:50.986 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-25 12:38:56.379 00:01:00.014 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-25 12:38:56.314 00:01:00.065 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-25 12:36:26.591 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2688 1 2025-10-25 12:40:40.957 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48289 1 109 1 2025-10-25 12:40:40.957 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41158 1 80 1 2025-10-25 12:40:40.947 00:00:00.000 UDP 28.104.0.1:41158 -> 198.28.0.2:53 1 64 1 2025-10-25 12:40:40.947 00:00:00.000 UDP 28.104.0.1:48289 -> 198.28.0.2:53 1 64 1 2025-10-25 12:35:56.389 00:05:50.972 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-25 12:41:41.245 00:00:00.000 UDP 28.104.0.1:35724 -> 198.28.0.2:53 1 64 1 2025-10-25 12:41:41.245 00:00:00.000 UDP 28.104.0.1:33623 -> 198.28.0.2:53 1 64 1 2025-10-25 12:41:41.256 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33623 1 109 1 2025-10-25 12:41:41.256 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35724 1 80 1 2025-10-25 12:42:41.530 00:00:00.000 UDP 28.104.0.1:35769 -> 198.28.0.2:53 1 64 1 2025-10-25 12:42:41.530 00:00:00.000 UDP 28.104.0.1:59634 -> 198.28.0.2:53 1 64 1 2025-10-25 12:42:41.541 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35769 1 80 1 2025-10-25 12:42:41.541 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59634 1 109 1 2025-10-25 12:42:46.508 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-25 12:40:56.379 00:02:00.014 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-25 12:40:56.314 00:02:00.065 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-10-25 12:38:47.362 00:05:09.078 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-25 12:43:42.204 00:00:00.000 UDP 28.104.0.1:49874 -> 198.28.0.2:53 1 64 1 2025-10-25 12:43:42.204 00:00:00.000 UDP 28.104.0.1:44967 -> 198.28.0.2:53 1 64 1 2025-10-25 12:43:42.215 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44967 1 80 1 2025-10-25 12:43:42.215 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49874 1 109 1 2025-10-25 12:38:56.379 00:05:51.000 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-25 12:44:42.498 00:00:00.000 UDP 28.104.0.1:46438 -> 198.28.0.2:53 1 64 1 2025-10-25 12:44:42.498 00:00:00.000 UDP 28.104.0.1:52419 -> 198.28.0.2:53 1 64 1 2025-10-25 12:44:42.509 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46438 1 109 1 2025-10-25 12:44:42.508 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52419 1 80 1 2025-10-25 12:43:56.379 00:01:00.015 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-25 12:43:56.315 00:01:00.065 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-25 12:45:42.805 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47035 1 109 1 2025-10-25 12:45:42.805 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59505 1 80 1 2025-10-25 12:45:42.797 00:00:00.000 UDP 28.104.0.1:59505 -> 198.28.0.2:53 1 64 1 2025-10-25 12:45:42.797 00:00:00.000 UDP 28.104.0.1:47035 -> 198.28.0.2:53 1 64 1 2025-10-25 12:40:56.428 00:05:50.984 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-25 12:41:46.594 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2876 1 2025-10-25 12:46:43.101 00:00:00.000 UDP 28.104.0.1:37678 -> 198.28.0.2:53 1 64 1 2025-10-25 12:46:43.101 00:00:00.000 UDP 28.104.0.1:59638 -> 198.28.0.2:53 1 64 1 2025-10-25 12:46:43.112 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37678 1 109 1 2025-10-25 12:46:43.112 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59638 1 80 1 2025-10-25 12:41:56.389 00:05:50.973 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-25 12:47:43.401 00:00:00.000 UDP 28.104.0.1:39967 -> 198.28.0.2:53 1 64 1 2025-10-25 12:47:43.402 00:00:00.000 UDP 28.104.0.1:33983 -> 198.28.0.2:53 1 64 1 2025-10-25 12:47:46.536 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-25 12:47:43.411 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39967 1 109 1 2025-10-25 12:47:43.411 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33983 1 80 1 2025-10-25 12:45:56.380 00:02:00.014 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-25 12:45:56.314 00:02:00.067 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-10-25 12:48:43.659 00:00:00.000 UDP 28.104.0.1:57716 -> 198.28.0.2:53 1 64 1 2025-10-25 12:48:43.659 00:00:00.000 UDP 28.104.0.1:36999 -> 198.28.0.2:53 1 64 1 2025-10-25 12:48:43.668 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57716 1 109 1 2025-10-25 12:48:43.668 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36999 1 80 1 2025-10-25 12:44:47.363 00:05:09.079 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-25 12:49:43.950 00:00:00.000 UDP 28.104.0.1:44334 -> 198.28.0.2:53 1 64 1 2025-10-25 12:49:43.950 00:00:00.000 UDP 28.104.0.1:60375 -> 198.28.0.2:53 1 64 1 2025-10-25 12:49:43.959 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44334 1 109 1 2025-10-25 12:49:43.959 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60375 1 80 1 2025-10-25 12:44:56.380 00:05:50.992 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-25 12:48:56.382 00:01:00.019 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-25 12:48:56.316 00:01:00.067 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-25 12:50:44.267 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36475 1 109 1 2025-10-25 12:50:44.267 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57437 1 80 1 2025-10-25 12:50:44.256 00:00:00.000 UDP 28.104.0.1:57437 -> 198.28.0.2:53 1 64 1 2025-10-25 12:50:44.256 00:00:00.000 UDP 28.104.0.1:36475 -> 198.28.0.2:53 1 64 1 2025-10-25 12:47:06.601 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2816 1 2025-10-25 12:51:44.544 00:00:00.000 UDP 28.104.0.1:48203 -> 198.28.0.2:53 1 64 1 2025-10-25 12:51:44.544 00:00:00.000 UDP 28.104.0.1:51367 -> 198.28.0.2:53 1 64 1 2025-10-25 12:51:44.555 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48203 1 109 1 2025-10-25 12:51:44.555 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51367 1 80 1 2025-10-25 12:46:56.430 00:05:50.983 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-25 12:52:46.637 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-25 12:52:44.845 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45771 1 109 1 2025-10-25 12:52:44.845 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35166 1 80 1 2025-10-25 12:52:44.836 00:00:00.000 UDP 28.104.0.1:45771 -> 198.28.0.2:53 1 64 1 2025-10-25 12:52:44.836 00:00:00.000 UDP 28.104.0.1:35166 -> 198.28.0.2:53 1 64 1 2025-10-25 12:47:56.392 00:05:50.971 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-25 12:50:56.385 00:02:00.013 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-25 12:50:56.316 00:02:00.068 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-10-25 12:53:45.100 00:00:00.000 UDP 28.104.0.1:54281 -> 198.28.0.2:53 1 64 1 2025-10-25 12:53:45.100 00:00:00.000 UDP 28.104.0.1:37917 -> 198.28.0.2:53 1 64 1 2025-10-25 12:53:45.110 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54281 1 109 1 2025-10-25 12:53:45.110 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37917 1 80 1 2025-10-25 12:54:45.392 00:00:00.000 UDP 28.104.0.1:46624 -> 198.28.0.2:53 1 64 1 2025-10-25 12:54:45.391 00:00:00.000 UDP 28.104.0.1:33693 -> 198.28.0.2:53 1 64 1 2025-10-25 12:54:45.401 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33693 1 109 1 2025-10-25 12:54:45.401 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46624 1 80 1 2025-10-25 12:53:56.385 00:01:00.014 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-25 12:53:56.317 00:01:00.068 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-25 12:50:47.363 00:05:09.080 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-25 12:55:45.645 00:00:00.000 UDP 28.104.0.1:56819 -> 198.28.0.2:53 1 64 1 2025-10-25 12:55:45.645 00:00:00.000 UDP 28.104.0.1:60714 -> 198.28.0.2:53 1 64 1 2025-10-25 12:55:45.655 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60714 1 109 1 2025-10-25 12:55:45.655 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56819 1 80 1 2025-10-25 12:50:56.383 00:05:50.989 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-25 12:52:26.605 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2896 1 2025-10-25 12:56:45.944 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44023 1 109 1 2025-10-25 12:56:45.943 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35378 1 80 1 2025-10-25 12:56:45.934 00:00:00.000 UDP 28.104.0.1:44023 -> 198.28.0.2:53 1 64 1 2025-10-25 12:56:45.934 00:00:00.000 UDP 28.104.0.1:35378 -> 198.28.0.2:53 1 64 1 2025-10-25 12:57:46.755 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-25 12:57:46.245 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41693 1 80 1 2025-10-25 12:57:46.244 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43853 1 109 1 2025-10-25 12:57:46.235 00:00:00.000 UDP 28.104.0.1:43853 -> 198.28.0.2:53 1 64 1 2025-10-25 12:57:46.236 00:00:00.000 UDP 28.104.0.1:41693 -> 198.28.0.2:53 1 64 1 2025-10-25 12:52:56.432 00:05:50.982 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-25 12:55:56.385 00:02:00.014 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-25 12:58:46.540 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52848 1 80 1 2025-10-25 12:58:46.541 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53533 1 109 1 2025-10-25 12:58:46.530 00:00:00.000 UDP 28.104.0.1:52848 -> 198.28.0.2:53 1 64 1 2025-10-25 12:58:46.530 00:00:00.000 UDP 28.104.0.1:53533 -> 198.28.0.2:53 1 64 1 2025-10-25 12:53:56.394 00:05:50.971 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 Summary: total flows: 347, total bytes: 96999, total packets: 1429, avg bps: 205, avg pps: 0, avg bpp: 67 Time window: 2025-10-25 11:56:47 - 2025-10-25 12:59:47 Total flows processed: 347, passed: 347, Blocks skipped: 0, Bytes read: 36152 Sys: 0.0030s User: 0.0040s Wall: 0.0051s flows/second: 67918.4 Runtime: 0.0051s