Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-30 15:58:52.824 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48016 1 80 1 2025-10-30 15:58:52.821 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42365 1 109 1 2025-10-30 15:58:52.811 00:00:00.000 UDP 28.104.0.1:42365 -> 198.28.0.2:53 1 64 1 2025-10-30 15:58:52.811 00:00:00.000 UDP 28.104.0.1:48016 -> 198.28.0.2:53 1 64 1 2025-10-30 15:53:59.065 00:06:00.118 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-30 15:54:49.696 00:05:09.369 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-30 15:54:58.962 00:05:00.103 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-10-30 15:55:26.969 00:05:10.941 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 3064 1 2025-10-30 15:54:58.977 00:05:50.712 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-30 15:59:53.115 00:00:00.000 UDP 28.104.0.1:59442 -> 198.28.0.2:53 1 64 1 2025-10-30 15:59:53.115 00:00:00.000 UDP 28.104.0.1:46277 -> 198.28.0.2:53 1 64 1 2025-10-30 15:59:53.127 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59442 1 109 1 2025-10-30 15:59:53.126 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46277 1 80 1 2025-10-30 16:00:14.790 00:00:00.014 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-30 16:00:53.442 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58094 1 80 1 2025-10-30 16:00:53.442 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46933 1 109 1 2025-10-30 16:00:53.432 00:00:00.000 UDP 28.104.0.1:58094 -> 198.28.0.2:53 1 64 1 2025-10-30 16:00:53.432 00:00:00.000 UDP 28.104.0.1:46933 -> 198.28.0.2:53 1 64 1 2025-10-30 15:56:58.968 00:05:50.772 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-30 16:01:53.737 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41410 1 80 1 2025-10-30 16:01:53.736 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55432 1 109 1 2025-10-30 16:01:53.728 00:00:00.000 UDP 28.104.0.1:41410 -> 198.28.0.2:53 1 64 1 2025-10-30 16:01:53.728 00:00:00.000 UDP 28.104.0.1:55432 -> 198.28.0.2:53 1 64 1 2025-10-30 16:02:53.992 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53678 1 80 1 2025-10-30 16:02:53.992 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49104 1 109 1 2025-10-30 16:02:53.981 00:00:00.000 UDP 28.104.0.1:53678 -> 198.28.0.2:53 1 64 1 2025-10-30 16:02:53.981 00:00:00.000 UDP 28.104.0.1:49104 -> 198.28.0.2:53 1 64 1 2025-10-30 15:58:49.687 00:05:09.389 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-30 16:03:54.285 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34535 1 80 1 2025-10-30 16:03:54.285 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52624 1 109 1 2025-10-30 16:03:54.275 00:00:00.000 UDP 28.104.0.1:34535 -> 198.28.0.2:53 1 64 1 2025-10-30 16:03:54.275 00:00:00.000 UDP 28.104.0.1:52624 -> 198.28.0.2:53 1 64 1 2025-10-30 16:04:54.575 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58579 1 109 1 2025-10-30 16:04:54.575 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42463 1 80 1 2025-10-30 16:04:54.565 00:00:00.000 UDP 28.104.0.1:58579 -> 198.28.0.2:53 1 64 1 2025-10-30 16:04:54.565 00:00:00.000 UDP 28.104.0.1:42463 -> 198.28.0.2:53 1 64 1 2025-10-30 16:00:49.699 00:05:09.368 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-30 16:00:58.964 00:05:00.103 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-10-30 16:00:46.973 00:05:10.019 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2912 1 2025-10-30 16:05:15.064 00:00:00.037 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-30 16:05:54.818 00:00:00.000 UDP 28.104.0.1:48911 -> 198.28.0.2:53 1 64 1 2025-10-30 16:05:54.818 00:00:00.000 UDP 28.104.0.1:54038 -> 198.28.0.2:53 1 64 1 2025-10-30 16:00:58.977 00:05:50.712 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-30 16:05:54.826 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54038 1 109 1 2025-10-30 16:05:54.827 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48911 1 80 1 2025-10-30 16:00:59.066 00:06:00.119 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-30 16:06:55.602 00:00:00.000 UDP 28.104.0.1:43279 -> 198.28.0.2:53 1 64 1 2025-10-30 16:06:55.601 00:00:00.000 UDP 28.104.0.1:46042 -> 198.28.0.2:53 1 64 1 2025-10-30 16:06:55.612 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43279 1 80 1 2025-10-30 16:06:55.611 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46042 1 109 1 2025-10-30 16:02:58.969 00:05:50.773 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-30 16:07:55.905 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44556 1 80 1 2025-10-30 16:07:55.905 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39351 1 109 1 2025-10-30 16:07:55.895 00:00:00.000 UDP 28.104.0.1:39351 -> 198.28.0.2:53 1 64 1 2025-10-30 16:07:55.895 00:00:00.000 UDP 28.104.0.1:44556 -> 198.28.0.2:53 1 64 1 2025-10-30 16:08:56.228 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47491 1 80 1 2025-10-30 16:08:56.228 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53929 1 109 1 2025-10-30 16:08:56.219 00:00:00.000 UDP 28.104.0.1:53929 -> 198.28.0.2:53 1 64 1 2025-10-30 16:08:56.219 00:00:00.000 UDP 28.104.0.1:47491 -> 198.28.0.2:53 1 64 1 2025-10-30 16:04:49.690 00:05:09.387 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-30 16:09:56.525 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37901 1 80 1 2025-10-30 16:09:56.526 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52781 1 109 1 2025-10-30 16:09:56.514 00:00:00.000 UDP 28.104.0.1:37901 -> 198.28.0.2:53 1 64 1 2025-10-30 16:09:56.514 00:00:00.000 UDP 28.104.0.1:52781 -> 198.28.0.2:53 1 64 1 2025-10-30 16:06:06.991 00:05:00.010 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2396 1 2025-10-30 16:10:14.951 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-30 16:10:56.816 00:00:00.000 UDP 28.104.0.1:47184 -> 198.28.0.2:53 1 64 1 2025-10-30 16:10:56.816 00:00:00.000 UDP 28.104.0.1:40540 -> 198.28.0.2:53 1 64 1 2025-10-30 16:10:56.826 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47184 1 109 1 2025-10-30 16:10:56.826 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40540 1 80 1 2025-10-30 16:06:49.701 00:05:09.367 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-30 16:06:58.965 00:05:00.103 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-10-30 16:06:58.980 00:05:50.713 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-30 16:11:57.131 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42423 1 80 1 2025-10-30 16:11:57.131 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45528 1 109 1 2025-10-30 16:11:57.122 00:00:00.000 UDP 28.104.0.1:42423 -> 198.28.0.2:53 1 64 1 2025-10-30 16:11:57.122 00:00:00.000 UDP 28.104.0.1:45528 -> 198.28.0.2:53 1 64 1 2025-10-30 16:12:57.403 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52870 1 109 1 2025-10-30 16:12:57.403 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59906 1 80 1 2025-10-30 16:12:57.392 00:00:00.000 UDP 28.104.0.1:52870 -> 198.28.0.2:53 1 64 1 2025-10-30 16:07:59.067 00:06:00.121 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-30 16:12:57.393 00:00:00.000 UDP 28.104.0.1:59906 -> 198.28.0.2:53 1 64 1 2025-10-30 16:08:58.970 00:05:50.772 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-30 16:13:57.692 00:00:00.000 UDP 28.104.0.1:43444 -> 198.28.0.2:53 1 64 1 2025-10-30 16:13:57.692 00:00:00.000 UDP 28.104.0.1:42444 -> 198.28.0.2:53 1 64 1 2025-10-30 16:13:57.702 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43444 1 109 1 2025-10-30 16:13:57.702 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42444 1 80 1 2025-10-30 16:14:58.003 00:00:00.000 UDP 28.104.0.1:43177 -> 198.28.0.2:53 1 64 1 2025-10-30 16:14:58.004 00:00:00.000 UDP 28.104.0.1:34409 -> 198.28.0.2:53 1 64 1 2025-10-30 16:10:49.692 00:05:09.388 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-30 16:14:58.015 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34409 1 80 1 2025-10-30 16:14:58.015 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43177 1 109 1 2025-10-30 16:15:15.151 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-30 16:11:17.003 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2384 1 2025-10-30 16:15:58.334 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53968 1 80 1 2025-10-30 16:15:58.334 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34826 1 109 1 2025-10-30 16:15:58.325 00:00:00.000 UDP 28.104.0.1:53968 -> 198.28.0.2:53 1 64 1 2025-10-30 16:15:58.325 00:00:00.000 UDP 28.104.0.1:34826 -> 198.28.0.2:53 1 64 1 2025-10-30 16:16:58.698 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33842 1 80 1 2025-10-30 16:16:58.698 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57863 1 109 1 2025-10-30 16:12:49.701 00:05:09.368 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-30 16:12:58.966 00:05:00.103 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-10-30 16:16:58.687 00:00:00.000 UDP 28.104.0.1:57863 -> 198.28.0.2:53 1 64 1 2025-10-30 16:16:58.687 00:00:00.000 UDP 28.104.0.1:33842 -> 198.28.0.2:53 1 64 1 2025-10-30 16:12:58.981 00:05:50.713 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-30 16:17:58.992 00:00:00.000 UDP 28.104.0.1:34414 -> 198.28.0.2:53 1 64 1 2025-10-30 16:17:58.992 00:00:00.000 UDP 28.104.0.1:57684 -> 198.28.0.2:53 1 64 1 2025-10-30 16:17:59.004 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34414 1 80 1 2025-10-30 16:17:59.004 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57684 1 109 1 2025-10-30 16:18:59.299 00:00:00.000 UDP 28.104.0.1:55280 -> 198.28.0.2:53 1 64 1 2025-10-30 16:18:59.300 00:00:00.000 UDP 28.104.0.1:53963 -> 198.28.0.2:53 1 64 1 2025-10-30 16:18:59.308 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55280 1 80 1 2025-10-30 16:18:59.309 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53963 1 109 1 2025-10-30 16:14:58.972 00:05:50.774 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-30 16:19:59.601 00:00:00.000 UDP 28.104.0.1:58716 -> 198.28.0.2:53 1 64 1 2025-10-30 16:14:59.068 00:06:00.123 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-30 16:19:59.601 00:00:00.000 UDP 28.104.0.1:36322 -> 198.28.0.2:53 1 64 1 2025-10-30 16:19:59.611 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58716 1 80 1 2025-10-30 16:19:59.611 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36322 1 109 1 2025-10-30 16:20:15.042 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-30 16:16:37.009 00:05:10.037 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2656 1 2025-10-30 16:20:59.906 00:00:00.000 UDP 28.104.0.1:43281 -> 198.28.0.2:53 1 64 1 2025-10-30 16:20:59.906 00:00:00.000 UDP 28.104.0.1:42384 -> 198.28.0.2:53 1 64 1 2025-10-30 16:20:59.916 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43281 1 109 1 2025-10-30 16:16:49.694 00:05:09.387 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-30 16:20:59.916 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42384 1 80 1 2025-10-30 16:22:00.218 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37377 1 109 1 2025-10-30 16:22:00.218 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39411 1 80 1 2025-10-30 16:22:00.208 00:00:00.000 UDP 28.104.0.1:37377 -> 198.28.0.2:53 1 64 1 2025-10-30 16:22:00.208 00:00:00.000 UDP 28.104.0.1:39411 -> 198.28.0.2:53 1 64 1 2025-10-30 16:23:00.511 00:00:00.000 UDP 28.104.0.1:37513 -> 198.28.0.2:53 1 64 1 2025-10-30 16:18:49.704 00:05:09.366 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-30 16:18:58.967 00:05:00.104 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-10-30 16:23:00.511 00:00:00.000 UDP 28.104.0.1:42328 -> 198.28.0.2:53 1 64 1 2025-10-30 16:23:00.521 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42328 1 80 1 2025-10-30 16:23:00.521 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37513 1 109 1 2025-10-30 16:18:58.984 00:05:50.712 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-30 16:24:00.824 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58371 1 80 1 2025-10-30 16:24:00.824 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45428 1 109 1 2025-10-30 16:24:00.814 00:00:00.000 UDP 28.104.0.1:45428 -> 198.28.0.2:53 1 64 1 2025-10-30 16:24:00.813 00:00:00.000 UDP 28.104.0.1:58371 -> 198.28.0.2:53 1 64 1 2025-10-30 16:25:01.117 00:00:00.000 UDP 28.104.0.1:49446 -> 198.28.0.2:53 1 64 1 2025-10-30 16:25:01.118 00:00:00.000 UDP 28.104.0.1:58247 -> 198.28.0.2:53 1 64 1 2025-10-30 16:25:01.128 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58247 1 109 1 2025-10-30 16:25:01.128 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49446 1 80 1 2025-10-30 16:25:16.009 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-30 16:20:58.974 00:05:50.773 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-30 16:26:01.433 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44559 1 80 1 2025-10-30 16:26:01.434 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58491 1 109 1 2025-10-30 16:26:01.423 00:00:00.000 UDP 28.104.0.1:44559 -> 198.28.0.2:53 1 64 1 2025-10-30 16:26:01.423 00:00:00.000 UDP 28.104.0.1:58491 -> 198.28.0.2:53 1 64 1 2025-10-30 16:21:57.047 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2892 1 2025-10-30 16:22:49.697 00:05:09.386 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-30 16:27:01.687 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37047 1 80 1 2025-10-30 16:27:01.687 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41636 1 109 1 2025-10-30 16:27:01.676 00:00:00.000 UDP 28.104.0.1:37047 -> 198.28.0.2:53 1 64 1 2025-10-30 16:21:59.071 00:06:00.125 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-30 16:27:01.676 00:00:00.000 UDP 28.104.0.1:41636 -> 198.28.0.2:53 1 64 1 2025-10-30 16:28:01.980 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57908 1 109 1 2025-10-30 16:28:01.980 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34042 1 80 1 2025-10-30 16:28:01.969 00:00:00.000 UDP 28.104.0.1:57908 -> 198.28.0.2:53 1 64 1 2025-10-30 16:28:01.969 00:00:00.000 UDP 28.104.0.1:34042 -> 198.28.0.2:53 1 64 1 2025-10-30 16:24:49.706 00:05:09.366 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-30 16:24:58.971 00:05:00.101 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-10-30 16:29:02.228 00:00:00.000 UDP 28.104.0.1:44769 -> 198.28.0.2:53 1 64 1 2025-10-30 16:29:02.228 00:00:00.000 UDP 28.104.0.1:50525 -> 198.28.0.2:53 1 64 1 2025-10-30 16:29:02.237 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50525 1 109 1 2025-10-30 16:29:02.237 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44769 1 80 1 2025-10-30 16:24:58.986 00:05:50.713 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-30 16:30:02.528 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60671 1 109 1 2025-10-30 16:30:02.529 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50904 1 80 1 2025-10-30 16:30:02.518 00:00:00.000 UDP 28.104.0.1:50904 -> 198.28.0.2:53 1 64 1 2025-10-30 16:30:02.518 00:00:00.000 UDP 28.104.0.1:60671 -> 198.28.0.2:53 1 64 1 2025-10-30 16:30:15.293 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-30 16:31:02.768 00:00:00.000 UDP 28.104.0.1:56072 -> 198.28.0.2:53 1 64 1 2025-10-30 16:31:02.768 00:00:00.000 UDP 28.104.0.1:44997 -> 198.28.0.2:53 1 64 1 2025-10-30 16:31:02.780 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56072 1 109 1 2025-10-30 16:31:02.779 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44997 1 80 1 2025-10-30 16:27:17.054 00:05:10.010 OSPF 28.0.2.1:0 -> 224.0.0.5:0 44 3160 1 2025-10-30 16:26:58.977 00:05:50.772 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-30 16:32:03.058 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54787 1 80 1 2025-10-30 16:32:03.058 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59331 1 109 1 2025-10-30 16:32:03.047 00:00:00.000 UDP 28.104.0.1:54787 -> 198.28.0.2:53 1 64 1 2025-10-30 16:32:03.047 00:00:00.000 UDP 28.104.0.1:59331 -> 198.28.0.2:53 1 64 1 2025-10-30 16:33:03.352 00:00:00.000 UDP 28.104.0.1:40142 -> 198.28.0.2:53 1 64 1 2025-10-30 16:33:03.352 00:00:00.000 UDP 28.104.0.1:44190 -> 198.28.0.2:53 1 64 1 2025-10-30 16:28:49.698 00:05:09.384 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-30 16:33:03.362 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44190 1 109 1 2025-10-30 16:33:03.362 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40142 1 80 1 2025-10-30 16:28:59.073 00:06:00.128 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-30 16:34:03.650 00:00:00.000 UDP 28.104.0.1:59743 -> 198.28.0.2:53 1 64 1 2025-10-30 16:34:03.650 00:00:00.000 UDP 28.104.0.1:53538 -> 198.28.0.2:53 1 64 1 2025-10-30 16:34:03.661 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53538 1 109 1 2025-10-30 16:34:03.661 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59743 1 80 1 2025-10-30 16:30:49.708 00:05:09.365 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-30 16:30:58.972 00:05:00.101 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-10-30 16:35:03.963 00:00:00.000 UDP 28.104.0.1:54883 -> 198.28.0.2:53 1 64 1 2025-10-30 16:35:03.963 00:00:00.000 UDP 28.104.0.1:40865 -> 198.28.0.2:53 1 64 1 2025-10-30 16:35:03.974 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54883 1 109 1 2025-10-30 16:35:03.974 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40865 1 80 1 2025-10-30 16:35:15.447 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-30 16:30:58.987 00:05:50.712 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-30 16:36:04.946 00:00:00.000 UDP 28.104.0.1:53169 -> 198.28.0.2:53 1 64 1 2025-10-30 16:36:04.946 00:00:00.000 UDP 28.104.0.1:49780 -> 198.28.0.2:53 1 64 1 2025-10-30 16:36:04.956 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53169 1 109 1 2025-10-30 16:36:04.956 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49780 1 80 1 2025-10-30 16:32:37.065 00:05:10.010 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2504 1 2025-10-30 16:37:05.300 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58980 1 80 1 2025-10-30 16:37:05.300 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56123 1 109 1 2025-10-30 16:37:05.289 00:00:00.000 UDP 28.104.0.1:56123 -> 198.28.0.2:53 1 64 1 2025-10-30 16:37:05.290 00:00:00.000 UDP 28.104.0.1:58980 -> 198.28.0.2:53 1 64 1 2025-10-30 16:32:58.979 00:05:50.771 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-30 16:38:05.593 00:00:00.000 UDP 28.104.0.1:49995 -> 198.28.0.2:53 1 64 1 2025-10-30 16:38:05.593 00:00:00.000 UDP 28.104.0.1:43204 -> 198.28.0.2:53 1 64 1 2025-10-30 16:38:05.604 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49995 1 80 1 2025-10-30 16:38:05.604 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43204 1 109 1 2025-10-30 16:34:49.699 00:05:09.385 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-30 16:39:06.547 00:00:00.000 UDP 28.104.0.1:59282 -> 198.28.0.2:53 1 64 1 2025-10-30 16:39:06.547 00:00:00.000 UDP 28.104.0.1:54211 -> 198.28.0.2:53 1 64 1 2025-10-30 16:39:06.558 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59282 1 109 1 2025-10-30 16:39:06.558 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54211 1 80 1 2025-10-30 16:40:06.866 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44125 1 109 1 2025-10-30 16:40:06.866 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53523 1 80 1 2025-10-30 16:40:06.856 00:00:00.000 UDP 28.104.0.1:53523 -> 198.28.0.2:53 1 64 1 2025-10-30 16:40:06.855 00:00:00.000 UDP 28.104.0.1:44125 -> 198.28.0.2:53 1 64 1 2025-10-30 16:40:15.948 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-30 16:35:59.074 00:06:00.128 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-30 16:36:49.710 00:05:09.365 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-30 16:36:58.976 00:05:00.099 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-10-30 16:41:07.192 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54045 1 80 1 2025-10-30 16:41:07.192 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49663 1 109 1 2025-10-30 16:41:07.182 00:00:00.000 UDP 28.104.0.1:49663 -> 198.28.0.2:53 1 64 1 2025-10-30 16:41:07.182 00:00:00.000 UDP 28.104.0.1:54045 -> 198.28.0.2:53 1 64 1 2025-10-30 16:36:58.989 00:05:50.712 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-30 16:42:07.485 00:00:00.000 UDP 28.104.0.1:38292 -> 198.28.0.2:53 1 64 1 2025-10-30 16:42:07.486 00:00:00.000 UDP 28.104.0.1:56697 -> 198.28.0.2:53 1 64 1 2025-10-30 16:42:07.497 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38292 1 109 1 2025-10-30 16:37:57.076 00:05:10.024 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2464 1 2025-10-30 16:42:07.497 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56697 1 80 1 2025-10-30 16:43:07.742 00:00:00.000 UDP 28.104.0.1:58456 -> 198.28.0.2:53 1 64 1 2025-10-30 16:43:07.742 00:00:00.000 UDP 28.104.0.1:45333 -> 198.28.0.2:53 1 64 1 2025-10-30 16:43:07.752 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45333 1 109 1 2025-10-30 16:43:07.752 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58456 1 80 1 2025-10-30 16:38:58.979 00:05:50.772 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-30 16:44:08.057 00:00:00.000 UDP 28.104.0.1:40141 -> 198.28.0.2:53 1 64 1 2025-10-30 16:44:08.056 00:00:00.000 UDP 28.104.0.1:41500 -> 198.28.0.2:53 1 64 1 2025-10-30 16:44:08.066 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40141 1 109 1 2025-10-30 16:44:08.066 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41500 1 80 1 2025-10-30 16:40:49.701 00:05:09.388 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-30 16:45:08.363 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35238 1 80 1 2025-10-30 16:45:08.363 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48367 1 109 1 2025-10-30 16:45:08.354 00:00:00.000 UDP 28.104.0.1:35238 -> 198.28.0.2:53 1 64 1 2025-10-30 16:45:08.354 00:00:00.000 UDP 28.104.0.1:48367 -> 198.28.0.2:53 1 64 1 2025-10-30 16:45:15.610 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-30 16:46:08.653 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44311 1 109 1 2025-10-30 16:46:08.653 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46665 1 80 1 2025-10-30 16:46:08.644 00:00:00.000 UDP 28.104.0.1:46665 -> 198.28.0.2:53 1 64 1 2025-10-30 16:46:08.644 00:00:00.000 UDP 28.104.0.1:44311 -> 198.28.0.2:53 1 64 1 2025-10-30 16:42:49.710 00:05:09.368 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-30 16:42:58.977 00:05:00.101 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-10-30 16:47:08.965 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38496 1 80 1 2025-10-30 16:47:08.965 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45970 1 109 1 2025-10-30 16:47:08.954 00:00:00.000 UDP 28.104.0.1:45970 -> 198.28.0.2:53 1 64 1 2025-10-30 16:47:08.954 00:00:00.000 UDP 28.104.0.1:38496 -> 198.28.0.2:53 1 64 1 2025-10-30 16:43:17.100 00:05:10.001 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2528 1 2025-10-30 16:42:58.989 00:05:50.713 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-30 16:42:59.076 00:06:00.131 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-30 16:48:09.269 00:00:00.000 UDP 28.104.0.1:42372 -> 198.28.0.2:53 1 64 1 2025-10-30 16:48:09.269 00:00:00.000 UDP 28.104.0.1:50398 -> 198.28.0.2:53 1 64 1 2025-10-30 16:48:09.279 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50398 1 109 1 2025-10-30 16:48:09.279 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42372 1 80 1 2025-10-30 16:49:09.581 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35161 1 109 1 2025-10-30 16:49:09.580 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52393 1 80 1 2025-10-30 16:49:09.570 00:00:00.000 UDP 28.104.0.1:52393 -> 198.28.0.2:53 1 64 1 2025-10-30 16:49:09.571 00:00:00.000 UDP 28.104.0.1:35161 -> 198.28.0.2:53 1 64 1 2025-10-30 16:44:58.981 00:05:50.772 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-30 16:50:09.872 00:00:00.000 UDP 28.104.0.1:53061 -> 198.28.0.2:53 1 64 1 2025-10-30 16:50:09.872 00:00:00.000 UDP 28.104.0.1:41010 -> 198.28.0.2:53 1 64 1 2025-10-30 16:50:09.884 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41010 1 80 1 2025-10-30 16:50:09.883 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53061 1 109 1 2025-10-30 16:50:15.728 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-30 16:46:49.700 00:05:09.389 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-30 16:51:10.145 00:00:00.000 UDP 28.104.0.1:44913 -> 198.28.0.2:53 1 64 1 2025-10-30 16:51:10.144 00:00:00.000 UDP 28.104.0.1:38748 -> 198.28.0.2:53 1 64 1 2025-10-30 16:51:10.156 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44913 1 109 1 2025-10-30 16:51:10.155 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38748 1 80 1 2025-10-30 16:52:10.438 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57343 1 109 1 2025-10-30 16:52:10.438 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34242 1 80 1 2025-10-30 16:52:10.427 00:00:00.000 UDP 28.104.0.1:57343 -> 198.28.0.2:53 1 64 1 2025-10-30 16:52:10.427 00:00:00.000 UDP 28.104.0.1:34242 -> 198.28.0.2:53 1 64 1 2025-10-30 16:48:37.100 00:05:10.002 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2956 1 2025-10-30 16:48:49.712 00:05:09.367 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-30 16:48:58.979 00:05:00.101 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-10-30 16:53:10.730 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34175 1 109 1 2025-10-30 16:53:10.730 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40777 1 80 1 2025-10-30 16:53:10.719 00:00:00.000 UDP 28.104.0.1:34175 -> 198.28.0.2:53 1 64 1 2025-10-30 16:53:10.720 00:00:00.000 UDP 28.104.0.1:40777 -> 198.28.0.2:53 1 64 1 2025-10-30 16:48:58.991 00:05:50.713 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-30 16:54:10.991 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60853 1 80 1 2025-10-30 16:54:10.991 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36209 1 109 1 2025-10-30 16:54:10.980 00:00:00.000 UDP 28.104.0.1:36209 -> 198.28.0.2:53 1 64 1 2025-10-30 16:54:10.980 00:00:00.000 UDP 28.104.0.1:60853 -> 198.28.0.2:53 1 64 1 2025-10-30 16:49:59.080 00:06:00.129 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-30 16:55:11.291 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46690 1 109 1 2025-10-30 16:55:11.291 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41236 1 80 1 2025-10-30 16:55:11.280 00:00:00.000 UDP 28.104.0.1:41236 -> 198.28.0.2:53 1 64 1 2025-10-30 16:55:11.280 00:00:00.000 UDP 28.104.0.1:46690 -> 198.28.0.2:53 1 64 1 2025-10-30 16:55:15.901 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-30 16:50:58.982 00:05:50.773 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-30 16:56:11.593 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33445 1 109 1 2025-10-30 16:56:11.593 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44527 1 80 1 2025-10-30 16:56:11.582 00:00:00.000 UDP 28.104.0.1:44527 -> 198.28.0.2:53 1 64 1 2025-10-30 16:56:11.582 00:00:00.000 UDP 28.104.0.1:33445 -> 198.28.0.2:53 1 64 1 2025-10-30 16:52:49.703 00:05:09.387 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-30 16:57:11.881 00:00:00.000 UDP 28.104.0.1:39633 -> 198.28.0.2:53 1 64 1 2025-10-30 16:57:11.880 00:00:00.000 UDP 28.104.0.1:36003 -> 198.28.0.2:53 1 64 1 2025-10-30 16:57:11.891 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39633 1 80 1 2025-10-30 16:57:11.891 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36003 1 109 1 2025-10-30 16:53:57.103 00:05:10.761 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2692 1 2025-10-30 16:58:12.185 00:00:00.000 UDP 28.104.0.1:56458 -> 198.28.0.2:53 1 64 1 2025-10-30 16:58:12.185 00:00:00.000 UDP 28.104.0.1:49795 -> 198.28.0.2:53 1 64 1 2025-10-30 16:58:12.197 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56458 1 80 1 2025-10-30 16:58:12.195 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49795 1 109 1 Summary: total flows: 323, total bytes: 99301, total packets: 1459, avg bps: 203, avg pps: 0, avg bpp: 68 Time window: 2025-10-30 15:53:59 - 2025-10-30 16:59:07 Total flows processed: 323, passed: 323, Blocks skipped: 0, Bytes read: 33656 Sys: 0.0050s User: 0.0030s Wall: 0.0043s flows/second: 75010.3 Runtime: 0.0043s