Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-25 12:59:46.852 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38070 1 109 1 2025-10-25 12:59:46.852 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43159 1 80 1 2025-10-25 12:59:46.843 00:00:00.000 UDP 28.104.0.1:43159 -> 198.28.0.2:53 1 64 1 2025-10-25 12:59:46.842 00:00:00.000 UDP 28.104.0.1:38070 -> 198.28.0.2:53 1 64 1 2025-10-25 12:58:56.386 00:01:00.012 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-25 12:55:56.317 00:04:00.069 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-25 13:00:47.168 00:00:00.000 UDP 28.104.0.1:49489 -> 198.28.0.2:53 1 64 1 2025-10-25 13:00:47.168 00:00:00.000 UDP 28.104.0.1:50399 -> 198.28.0.2:53 1 64 1 2025-10-25 13:00:47.179 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50399 1 109 1 2025-10-25 13:00:47.179 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49489 1 80 1 2025-10-25 12:56:47.364 00:05:09.080 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-25 13:01:47.520 00:00:00.000 UDP 28.104.0.1:60487 -> 198.28.0.2:53 1 64 1 2025-10-25 12:56:56.385 00:05:50.990 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-25 13:01:47.520 00:00:00.000 UDP 28.104.0.1:39860 -> 198.28.0.2:53 1 64 1 2025-10-25 13:01:47.530 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39860 1 109 1 2025-10-25 13:01:47.530 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60487 1 80 1 2025-10-25 12:57:46.612 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2652 1 2025-10-25 13:02:46.569 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-25 13:02:47.844 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50841 1 109 1 2025-10-25 13:02:47.844 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34755 1 80 1 2025-10-25 13:02:47.833 00:00:00.000 UDP 28.104.0.1:34755 -> 198.28.0.2:53 1 64 1 2025-10-25 13:02:47.833 00:00:00.000 UDP 28.104.0.1:50841 -> 198.28.0.2:53 1 64 1 2025-10-25 13:00:56.387 00:02:00.017 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-25 13:03:48.135 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56099 1 109 1 2025-10-25 13:03:48.136 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38040 1 80 1 2025-10-25 12:58:56.433 00:05:50.983 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-25 13:03:48.125 00:00:00.000 UDP 28.104.0.1:56099 -> 198.28.0.2:53 1 64 1 2025-10-25 13:03:48.125 00:00:00.000 UDP 28.104.0.1:38040 -> 198.28.0.2:53 1 64 1 2025-10-25 12:59:56.396 00:05:50.969 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-25 13:04:48.435 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45944 1 80 1 2025-10-25 13:04:48.435 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58360 1 109 1 2025-10-25 13:04:48.425 00:00:00.000 UDP 28.104.0.1:58360 -> 198.28.0.2:53 1 64 1 2025-10-25 13:04:48.425 00:00:00.000 UDP 28.104.0.1:45944 -> 198.28.0.2:53 1 64 1 2025-10-25 13:03:56.387 00:01:00.012 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-25 13:00:56.318 00:04:00.069 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-25 13:05:48.726 00:00:00.000 UDP 28.104.0.1:58320 -> 198.28.0.2:53 1 64 1 2025-10-25 13:05:48.726 00:00:00.000 UDP 28.104.0.1:34720 -> 198.28.0.2:53 1 64 1 2025-10-25 13:05:48.737 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34720 1 80 1 2025-10-25 13:05:48.737 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58320 1 109 1 2025-10-25 13:06:49.048 00:00:00.000 UDP 28.104.0.1:35005 -> 198.28.0.2:53 1 64 1 2025-10-25 13:06:49.048 00:00:00.000 UDP 28.104.0.1:54541 -> 198.28.0.2:53 1 64 1 2025-10-25 13:06:49.057 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35005 1 80 1 2025-10-25 13:06:49.057 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54541 1 109 1 2025-10-25 13:02:47.365 00:05:09.080 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-25 13:03:06.617 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2528 1 2025-10-25 13:02:56.388 00:05:50.989 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-25 13:07:49.304 00:00:00.000 UDP 28.104.0.1:40740 -> 198.28.0.2:53 1 64 1 2025-10-25 13:07:49.304 00:00:00.000 UDP 28.104.0.1:34523 -> 198.28.0.2:53 1 64 1 2025-10-25 13:07:47.009 00:00:00.020 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-25 13:07:49.315 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40740 1 109 1 2025-10-25 13:07:49.314 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34523 1 80 1 2025-10-25 13:08:49.547 00:00:00.000 UDP 28.104.0.1:45460 -> 198.28.0.2:53 1 64 1 2025-10-25 13:08:49.547 00:00:00.000 UDP 28.104.0.1:47977 -> 198.28.0.2:53 1 64 1 2025-10-25 13:08:49.560 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45460 1 80 1 2025-10-25 13:08:49.559 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47977 1 109 1 2025-10-25 13:09:49.865 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55616 1 109 1 2025-10-25 13:09:49.865 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53018 1 80 1 2025-10-25 13:04:56.433 00:05:50.983 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-25 13:09:49.854 00:00:00.000 UDP 28.104.0.1:53018 -> 198.28.0.2:53 1 64 1 2025-10-25 13:09:49.855 00:00:00.000 UDP 28.104.0.1:55616 -> 198.28.0.2:53 1 64 1 2025-10-25 13:05:56.387 00:04:00.014 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-10-25 13:05:56.319 00:04:00.069 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-25 13:10:50.138 00:00:00.000 UDP 28.104.0.1:49869 -> 198.28.0.2:53 1 64 1 2025-10-25 13:10:50.138 00:00:00.000 UDP 28.104.0.1:57592 -> 198.28.0.2:53 1 64 1 2025-10-25 13:05:56.397 00:05:50.969 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-25 13:10:50.148 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57592 1 109 1 2025-10-25 13:10:50.148 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49869 1 80 1 2025-10-25 13:11:50.500 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51636 1 80 1 2025-10-25 13:11:50.500 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57016 1 109 1 2025-10-25 13:11:50.490 00:00:00.000 UDP 28.104.0.1:57016 -> 198.28.0.2:53 1 64 1 2025-10-25 13:11:50.490 00:00:00.000 UDP 28.104.0.1:51636 -> 198.28.0.2:53 1 64 1 2025-10-25 13:10:56.387 00:01:00.014 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-25 13:10:56.320 00:01:00.067 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-25 13:08:26.624 00:05:10.002 OSPF 28.0.2.1:0 -> 224.0.0.5:0 42 3036 1 2025-10-25 13:12:46.960 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-25 13:12:50.796 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42182 1 109 1 2025-10-25 13:12:50.796 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36071 1 80 1 2025-10-25 13:12:50.786 00:00:00.000 UDP 28.104.0.1:36071 -> 198.28.0.2:53 1 64 1 2025-10-25 13:12:50.786 00:00:00.000 UDP 28.104.0.1:42182 -> 198.28.0.2:53 1 64 1 2025-10-25 13:08:47.366 00:05:09.079 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-25 13:13:51.104 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56254 1 80 1 2025-10-25 13:13:51.104 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54966 1 109 1 2025-10-25 13:13:51.094 00:00:00.000 UDP 28.104.0.1:56254 -> 198.28.0.2:53 1 64 1 2025-10-25 13:13:51.094 00:00:00.000 UDP 28.104.0.1:54966 -> 198.28.0.2:53 1 64 1 2025-10-25 13:08:56.387 00:05:50.990 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-25 13:14:52.059 00:00:00.000 UDP 28.104.0.1:49669 -> 198.28.0.2:53 1 64 1 2025-10-25 13:12:56.387 00:02:00.015 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-25 13:12:56.319 00:02:00.069 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-10-25 13:14:52.059 00:00:00.000 UDP 28.104.0.1:46940 -> 198.28.0.2:53 1 64 1 2025-10-25 13:14:52.071 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46940 1 109 1 2025-10-25 13:14:52.070 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49669 1 80 1 2025-10-25 13:10:56.434 00:05:50.983 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-25 13:15:52.368 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56440 1 80 1 2025-10-25 13:15:52.368 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59755 1 109 1 2025-10-25 13:15:52.357 00:00:00.000 UDP 28.104.0.1:59755 -> 198.28.0.2:53 1 64 1 2025-10-25 13:15:52.357 00:00:00.000 UDP 28.104.0.1:56440 -> 198.28.0.2:53 1 64 1 2025-10-25 13:11:56.397 00:05:50.970 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-25 13:16:52.659 00:00:00.000 UDP 28.104.0.1:46086 -> 198.28.0.2:53 1 64 1 2025-10-25 13:16:52.659 00:00:00.000 UDP 28.104.0.1:39996 -> 198.28.0.2:53 1 64 1 2025-10-25 13:15:56.389 00:01:00.014 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-25 13:15:56.321 00:01:00.068 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-25 13:16:52.669 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39996 1 80 1 2025-10-25 13:16:52.669 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46086 1 109 1 2025-10-25 13:17:47.276 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-25 13:17:52.953 00:00:00.000 UDP 28.104.0.1:56706 -> 198.28.0.2:53 1 64 1 2025-10-25 13:17:52.953 00:00:00.000 UDP 28.104.0.1:43716 -> 198.28.0.2:53 1 64 1 2025-10-25 13:17:52.963 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43716 1 109 1 2025-10-25 13:17:52.963 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56706 1 80 1 2025-10-25 13:13:46.626 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2736 1 2025-10-25 13:18:53.255 00:00:00.000 UDP 28.104.0.1:38927 -> 198.28.0.2:53 1 64 1 2025-10-25 13:18:53.255 00:00:00.000 UDP 28.104.0.1:40318 -> 198.28.0.2:53 1 64 1 2025-10-25 13:18:53.264 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40318 1 80 1 2025-10-25 13:14:47.367 00:05:09.082 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-25 13:18:53.264 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38927 1 109 1 2025-10-25 13:14:56.388 00:05:50.991 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-25 13:19:53.557 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33884 1 80 1 2025-10-25 13:19:53.557 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48505 1 109 1 2025-10-25 13:17:56.389 00:02:00.014 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-25 13:19:53.547 00:00:00.000 UDP 28.104.0.1:48505 -> 198.28.0.2:53 1 64 1 2025-10-25 13:17:56.322 00:02:00.067 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-10-25 13:19:53.547 00:00:00.000 UDP 28.104.0.1:33884 -> 198.28.0.2:53 1 64 1 2025-10-25 13:20:53.836 00:00:00.000 UDP 28.104.0.1:48565 -> 198.28.0.2:53 1 64 1 2025-10-25 13:20:53.835 00:00:00.000 UDP 28.104.0.1:44254 -> 198.28.0.2:53 1 64 1 2025-10-25 13:20:53.846 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48565 1 109 1 2025-10-25 13:20:53.846 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44254 1 80 1 2025-10-25 13:16:56.435 00:05:50.983 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-25 13:21:54.182 00:00:00.000 UDP 28.104.0.1:44634 -> 198.28.0.2:53 1 64 1 2025-10-25 13:21:54.182 00:00:00.000 UDP 28.104.0.1:41148 -> 198.28.0.2:53 1 64 1 2025-10-25 13:20:56.389 00:01:00.014 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-25 13:20:56.322 00:01:00.067 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-25 13:21:54.193 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44634 1 80 1 2025-10-25 13:21:54.192 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41148 1 109 1 2025-10-25 13:22:54.487 00:00:00.000 UDP 28.104.0.1:44691 -> 198.28.0.2:53 1 64 1 2025-10-25 13:22:54.487 00:00:00.000 UDP 28.104.0.1:59084 -> 198.28.0.2:53 1 64 1 2025-10-25 13:22:47.177 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-25 13:17:56.400 00:05:50.971 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-25 13:22:54.497 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59084 1 80 1 2025-10-25 13:22:54.497 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44691 1 109 1 2025-10-25 13:19:06.631 00:05:10.001 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2464 1 2025-10-25 13:23:54.788 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52327 1 80 1 2025-10-25 13:23:54.788 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47448 1 109 1 2025-10-25 13:23:54.778 00:00:00.000 UDP 28.104.0.1:47448 -> 198.28.0.2:53 1 64 1 2025-10-25 13:23:54.778 00:00:00.000 UDP 28.104.0.1:52327 -> 198.28.0.2:53 1 64 1 2025-10-25 13:24:55.124 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42983 1 80 1 2025-10-25 13:24:55.123 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51024 1 109 1 2025-10-25 13:24:55.112 00:00:00.000 UDP 28.104.0.1:42983 -> 198.28.0.2:53 1 64 1 2025-10-25 13:22:56.390 00:02:00.013 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-25 13:24:55.113 00:00:00.000 UDP 28.104.0.1:51024 -> 198.28.0.2:53 1 64 1 2025-10-25 13:22:56.322 00:02:00.069 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-10-25 13:20:47.368 00:05:09.088 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-25 13:20:56.389 00:05:50.992 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-25 13:25:55.423 00:00:00.000 UDP 28.104.0.1:43226 -> 198.28.0.2:53 1 64 1 2025-10-25 13:25:55.423 00:00:00.000 UDP 28.104.0.1:51968 -> 198.28.0.2:53 1 64 1 2025-10-25 13:25:55.433 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51968 1 80 1 2025-10-25 13:25:55.433 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43226 1 109 1 2025-10-25 13:26:55.727 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55160 1 80 1 2025-10-25 13:26:55.727 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54876 1 109 1 2025-10-25 13:26:55.716 00:00:00.000 UDP 28.104.0.1:54876 -> 198.28.0.2:53 1 64 1 2025-10-25 13:25:56.392 00:01:00.012 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-25 13:25:56.323 00:01:00.069 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-25 13:26:55.716 00:00:00.000 UDP 28.104.0.1:55160 -> 198.28.0.2:53 1 64 1 2025-10-25 13:22:56.438 00:05:50.983 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-25 13:27:47.466 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-25 13:27:56.037 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41597 1 80 1 2025-10-25 13:27:56.036 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53792 1 109 1 2025-10-25 13:27:56.027 00:00:00.000 UDP 28.104.0.1:41597 -> 198.28.0.2:53 1 64 1 2025-10-25 13:27:56.027 00:00:00.000 UDP 28.104.0.1:53792 -> 198.28.0.2:53 1 64 1 2025-10-25 13:24:26.630 00:05:10.002 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2896 1 2025-10-25 13:23:56.400 00:05:50.971 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-25 13:28:56.293 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57625 1 80 1 2025-10-25 13:28:56.293 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56660 1 109 1 2025-10-25 13:28:56.283 00:00:00.000 UDP 28.104.0.1:56660 -> 198.28.0.2:53 1 64 1 2025-10-25 13:28:56.283 00:00:00.000 UDP 28.104.0.1:57625 -> 198.28.0.2:53 1 64 1 2025-10-25 13:29:56.661 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46384 1 80 1 2025-10-25 13:29:56.662 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55450 1 109 1 2025-10-25 13:27:56.392 00:02:00.020 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-25 13:29:56.651 00:00:00.000 UDP 28.104.0.1:46384 -> 198.28.0.2:53 1 64 1 2025-10-25 13:29:56.651 00:00:00.000 UDP 28.104.0.1:55450 -> 198.28.0.2:53 1 64 1 2025-10-25 13:26:47.371 00:05:09.086 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-25 13:30:56.961 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47561 1 80 1 2025-10-25 13:30:56.961 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34720 1 109 1 2025-10-25 13:30:56.951 00:00:00.000 UDP 28.104.0.1:47561 -> 198.28.0.2:53 1 64 1 2025-10-25 13:30:56.951 00:00:00.000 UDP 28.104.0.1:34720 -> 198.28.0.2:53 1 64 1 2025-10-25 13:26:56.392 00:05:50.991 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-25 13:30:56.394 00:01:00.021 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-25 13:27:56.323 00:04:00.071 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-25 13:31:57.226 00:00:00.000 UDP 28.104.0.1:40117 -> 198.28.0.2:53 1 64 1 2025-10-25 13:31:57.226 00:00:00.000 UDP 28.104.0.1:36991 -> 198.28.0.2:53 1 64 1 2025-10-25 13:31:57.238 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40117 1 109 1 2025-10-25 13:31:57.240 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36991 1 80 1 2025-10-25 13:32:47.619 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-25 13:32:57.488 00:00:00.000 UDP 28.104.0.1:51410 -> 198.28.0.2:53 1 64 1 2025-10-25 13:32:57.487 00:00:00.000 UDP 28.104.0.1:45686 -> 198.28.0.2:53 1 64 1 2025-10-25 13:32:57.499 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45686 1 109 1 2025-10-25 13:32:57.499 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51410 1 80 1 2025-10-25 13:28:56.448 00:05:50.977 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-25 13:29:46.633 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2652 1 2025-10-25 13:33:57.804 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33910 1 80 1 2025-10-25 13:33:57.804 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45861 1 109 1 2025-10-25 13:33:57.794 00:00:00.000 UDP 28.104.0.1:33910 -> 198.28.0.2:53 1 64 1 2025-10-25 13:33:57.794 00:00:00.000 UDP 28.104.0.1:45861 -> 198.28.0.2:53 1 64 1 2025-10-25 13:29:56.405 00:05:50.969 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-25 13:34:58.091 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53328 1 80 1 2025-10-25 13:34:58.091 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56870 1 109 1 2025-10-25 13:32:56.397 00:02:00.020 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-25 13:34:58.081 00:00:00.000 UDP 28.104.0.1:56870 -> 198.28.0.2:53 1 64 1 2025-10-25 13:34:58.081 00:00:00.000 UDP 28.104.0.1:53328 -> 198.28.0.2:53 1 64 1 2025-10-25 13:35:58.371 00:00:00.000 UDP 28.104.0.1:49194 -> 198.28.0.2:53 1 64 1 2025-10-25 13:35:58.371 00:00:00.000 UDP 28.104.0.1:45600 -> 198.28.0.2:53 1 64 1 2025-10-25 13:35:58.381 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49194 1 109 1 2025-10-25 13:35:58.382 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45600 1 80 1 2025-10-25 13:35:56.397 00:01:00.021 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-25 13:32:56.328 00:04:00.069 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-25 13:36:58.661 00:00:00.000 UDP 28.104.0.1:47323 -> 198.28.0.2:53 1 64 1 2025-10-25 13:36:58.661 00:00:00.000 UDP 28.104.0.1:42614 -> 198.28.0.2:53 1 64 1 2025-10-25 13:36:58.671 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42614 1 80 1 2025-10-25 13:36:58.671 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47323 1 109 1 2025-10-25 13:32:47.373 00:05:09.085 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-25 13:32:56.396 00:05:50.990 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-25 13:37:47.506 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-25 13:37:58.954 00:00:00.000 UDP 28.104.0.1:52613 -> 198.28.0.2:53 1 64 1 2025-10-25 13:37:58.954 00:00:00.000 UDP 28.104.0.1:36092 -> 198.28.0.2:53 1 64 1 2025-10-25 13:37:58.965 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52613 1 109 1 2025-10-25 13:37:58.966 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36092 1 80 1 2025-10-25 13:37:56.397 00:01:00.021 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-25 13:37:56.329 00:01:00.068 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-25 13:38:59.216 00:00:00.000 UDP 28.104.0.1:34973 -> 198.28.0.2:53 1 64 1 2025-10-25 13:38:59.216 00:00:00.000 UDP 28.104.0.1:52922 -> 198.28.0.2:53 1 64 1 2025-10-25 13:38:59.228 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34973 1 109 1 2025-10-25 13:38:59.228 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52922 1 80 1 2025-10-25 13:35:06.641 00:05:10.562 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2972 1 2025-10-25 13:34:56.448 00:05:50.982 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-25 13:39:56.397 00:00:00.021 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 123 1 2025-10-25 13:40:00.067 00:00:00.000 UDP 28.104.0.1:52186 -> 198.28.0.2:53 1 64 1 2025-10-25 13:40:00.067 00:00:00.000 UDP 28.104.0.1:42652 -> 198.28.0.2:53 1 64 1 2025-10-25 13:40:00.077 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52186 1 80 1 2025-10-25 13:40:00.077 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42652 1 109 1 2025-10-25 13:35:56.406 00:05:50.970 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-25 13:41:00.370 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43797 1 109 1 2025-10-25 13:41:00.370 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59529 1 80 1 2025-10-25 13:41:00.359 00:00:00.000 UDP 28.104.0.1:43797 -> 198.28.0.2:53 1 64 1 2025-10-25 13:41:00.360 00:00:00.000 UDP 28.104.0.1:59529 -> 198.28.0.2:53 1 64 1 2025-10-25 13:40:56.396 00:01:00.022 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-25 13:39:56.328 00:02:00.068 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-10-25 13:42:00.785 00:00:00.000 UDP 28.104.0.1:57740 -> 198.28.0.2:53 1 64 1 2025-10-25 13:42:00.785 00:00:00.000 UDP 28.104.0.1:49122 -> 198.28.0.2:53 1 64 1 2025-10-25 13:42:00.795 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49122 1 80 1 2025-10-25 13:42:00.796 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57740 1 109 1 2025-10-25 13:42:47.831 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-25 13:38:47.375 00:05:09.084 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-25 13:43:01.106 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38123 1 80 1 2025-10-25 13:43:01.105 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43460 1 109 1 2025-10-25 13:43:01.096 00:00:00.000 UDP 28.104.0.1:38123 -> 198.28.0.2:53 1 64 1 2025-10-25 13:43:01.095 00:00:00.000 UDP 28.104.0.1:43460 -> 198.28.0.2:53 1 64 1 2025-10-25 13:38:56.397 00:05:50.991 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-25 13:42:56.397 00:01:00.022 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-25 13:42:56.330 00:01:00.067 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-25 13:44:01.395 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60303 1 80 1 2025-10-25 13:44:01.395 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49498 1 109 1 2025-10-25 13:44:01.386 00:00:00.000 UDP 28.104.0.1:49498 -> 198.28.0.2:53 1 64 1 2025-10-25 13:44:01.386 00:00:00.000 UDP 28.104.0.1:60303 -> 198.28.0.2:53 1 64 1 2025-10-25 13:40:26.644 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2736 1 2025-10-25 13:45:01.699 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43252 1 80 1 2025-10-25 13:45:01.700 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38946 1 109 1 2025-10-25 13:45:01.691 00:00:00.000 UDP 28.104.0.1:43252 -> 198.28.0.2:53 1 64 1 2025-10-25 13:45:01.691 00:00:00.000 UDP 28.104.0.1:38946 -> 198.28.0.2:53 1 64 1 2025-10-25 13:40:56.449 00:05:50.979 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-25 13:46:01.984 00:00:00.000 UDP 28.104.0.1:54692 -> 198.28.0.2:53 1 64 1 2025-10-25 13:46:01.984 00:00:00.000 UDP 28.104.0.1:52344 -> 198.28.0.2:53 1 64 1 2025-10-25 13:46:01.996 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52344 1 109 1 2025-10-25 13:46:01.996 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54692 1 80 1 2025-10-25 13:41:56.407 00:05:50.971 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-25 13:44:56.397 00:02:00.022 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-25 13:44:56.329 00:02:00.069 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-10-25 13:47:02.330 00:00:00.000 UDP 28.104.0.1:36855 -> 198.28.0.2:53 1 64 1 2025-10-25 13:47:02.329 00:00:00.000 UDP 28.104.0.1:41408 -> 198.28.0.2:53 1 64 1 2025-10-25 13:47:02.339 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41408 1 80 1 2025-10-25 13:47:02.339 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36855 1 109 1 2025-10-25 13:47:47.900 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-25 13:48:02.639 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47574 1 109 1 2025-10-25 13:48:02.640 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48157 1 80 1 2025-10-25 13:48:02.629 00:00:00.000 UDP 28.104.0.1:48157 -> 198.28.0.2:53 1 64 1 2025-10-25 13:48:02.629 00:00:00.000 UDP 28.104.0.1:47574 -> 198.28.0.2:53 1 64 1 2025-10-25 13:47:56.398 00:01:00.021 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-25 13:47:56.334 00:01:00.065 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-25 13:49:02.930 00:00:00.000 UDP 28.104.0.1:52083 -> 198.28.0.2:53 1 64 1 2025-10-25 13:49:02.930 00:00:00.000 UDP 28.104.0.1:34224 -> 198.28.0.2:53 1 64 1 2025-10-25 13:44:47.378 00:05:09.084 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-25 13:49:02.941 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34224 1 80 1 2025-10-25 13:49:02.942 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52083 1 109 1 2025-10-25 13:44:56.397 00:05:50.992 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-25 13:45:46.652 00:05:10.009 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2464 1 2025-10-25 13:50:03.232 00:00:00.000 UDP 28.104.0.1:53477 -> 198.28.0.2:53 1 64 1 2025-10-25 13:50:03.232 00:00:00.000 UDP 28.104.0.1:55957 -> 198.28.0.2:53 1 64 1 2025-10-25 13:50:03.241 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53477 1 80 1 2025-10-25 13:50:03.241 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55957 1 109 1 2025-10-25 13:51:03.531 00:00:00.000 UDP 28.104.0.1:58659 -> 198.28.0.2:53 1 64 1 2025-10-25 13:51:03.531 00:00:00.000 UDP 28.104.0.1:49374 -> 198.28.0.2:53 1 64 1 2025-10-25 13:51:03.542 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58659 1 80 1 2025-10-25 13:51:03.542 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49374 1 109 1 2025-10-25 13:46:56.450 00:05:50.982 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-25 13:49:56.399 00:02:00.021 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-25 13:49:56.341 00:02:00.059 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-10-25 13:52:03.843 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37717 1 109 1 2025-10-25 13:52:03.843 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34970 1 80 1 2025-10-25 13:52:03.833 00:00:00.000 UDP 28.104.0.1:37717 -> 198.28.0.2:53 1 64 1 2025-10-25 13:52:03.832 00:00:00.000 UDP 28.104.0.1:34970 -> 198.28.0.2:53 1 64 1 2025-10-25 13:52:47.919 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-25 13:47:56.409 00:05:50.970 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-25 13:53:04.141 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49942 1 80 1 2025-10-25 13:53:04.141 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38902 1 109 1 2025-10-25 13:53:04.131 00:00:00.000 UDP 28.104.0.1:38902 -> 198.28.0.2:53 1 64 1 2025-10-25 13:53:04.131 00:00:00.000 UDP 28.104.0.1:49942 -> 198.28.0.2:53 1 64 1 2025-10-25 13:52:56.400 00:01:00.022 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-25 13:52:56.345 00:01:00.055 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-10-25 13:54:04.440 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50510 1 109 1 2025-10-25 13:54:04.440 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46330 1 80 1 2025-10-25 13:54:04.430 00:00:00.000 UDP 28.104.0.1:46330 -> 198.28.0.2:53 1 64 1 2025-10-25 13:54:04.430 00:00:00.000 UDP 28.104.0.1:50510 -> 198.28.0.2:53 1 64 1 2025-10-25 13:50:47.379 00:05:09.082 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-25 13:55:04.731 00:00:00.000 UDP 28.104.0.1:49408 -> 198.28.0.2:53 1 64 1 2025-10-25 13:55:04.731 00:00:00.000 UDP 28.104.0.1:60925 -> 198.28.0.2:53 1 64 1 2025-10-25 13:55:04.742 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49408 1 109 1 2025-10-25 13:55:04.742 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60925 1 80 1 2025-10-25 13:51:06.661 00:05:10.010 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2768 1 2025-10-25 13:50:56.401 00:05:50.991 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-25 13:56:05.057 00:00:00.000 UDP 28.104.0.1:38478 -> 198.28.0.2:53 1 64 1 2025-10-25 13:56:05.057 00:00:00.000 UDP 28.104.0.1:36684 -> 198.28.0.2:53 1 64 1 2025-10-25 13:56:05.067 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38478 1 80 1 2025-10-25 13:56:05.067 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36684 1 109 1 2025-10-25 13:54:56.399 00:02:00.022 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-25 13:54:56.344 00:02:00.056 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-10-25 13:57:05.354 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39428 1 80 1 2025-10-25 13:57:05.354 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40425 1 109 1 2025-10-25 13:57:05.344 00:00:00.000 UDP 28.104.0.1:40425 -> 198.28.0.2:53 1 64 1 2025-10-25 13:57:05.343 00:00:00.000 UDP 28.104.0.1:39428 -> 198.28.0.2:53 1 64 1 2025-10-25 13:52:56.451 00:05:50.979 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-25 13:57:47.995 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-25 13:58:05.655 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53872 1 80 1 2025-10-25 13:58:05.655 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47164 1 109 1 2025-10-25 13:58:05.645 00:00:00.000 UDP 28.104.0.1:47164 -> 198.28.0.2:53 1 64 1 2025-10-25 13:58:05.645 00:00:00.000 UDP 28.104.0.1:53872 -> 198.28.0.2:53 1 64 1 2025-10-25 13:53:56.410 00:05:50.972 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 Summary: total flows: 343, total bytes: 96034, total packets: 1418, avg bps: 200, avg pps: 0, avg bpp: 67 Time window: 2025-10-25 12:55:56 - 2025-10-25 13:59:47 Total flows processed: 343, passed: 343, Blocks skipped: 0, Bytes read: 35736 Sys: 0.0100s User: 0.0050s Wall: 0.0106s flows/second: 32499.3 Runtime: 0.0106s