Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-01 15:54:50.889 00:05:08.999 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-01 15:59:19.506 00:00:00.000 UDP 28.104.0.1:41311 -> 198.28.0.2:53 1 64 1 2025-11-01 15:59:19.506 00:00:00.000 UDP 28.104.0.1:59478 -> 198.28.0.2:53 1 64 1 2025-11-01 15:59:19.516 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41311 1 80 1 2025-11-01 15:59:19.516 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59478 1 109 1 2025-11-01 16:00:19.750 00:00:00.000 UDP 28.104.0.1:60448 -> 198.28.0.2:53 1 64 1 2025-11-01 16:00:19.750 00:00:00.000 UDP 28.104.0.1:54355 -> 198.28.0.2:53 1 64 1 2025-11-01 16:00:19.761 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54355 1 109 1 2025-11-01 16:00:19.760 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60448 1 80 1 2025-11-01 15:55:59.926 00:05:51.004 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-01 16:01:12.614 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-01 16:01:20.062 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60200 1 109 1 2025-11-01 16:01:20.062 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51799 1 80 1 2025-11-01 16:01:20.053 00:00:00.000 UDP 28.104.0.1:60200 -> 198.28.0.2:53 1 64 1 2025-11-01 16:01:20.053 00:00:00.000 UDP 28.104.0.1:51799 -> 198.28.0.2:53 1 64 1 2025-11-01 15:57:59.889 00:05:00.194 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-01 16:02:20.351 00:00:00.000 UDP 28.104.0.1:39251 -> 198.28.0.2:53 1 64 1 2025-11-01 16:02:20.351 00:00:00.000 UDP 28.104.0.1:53182 -> 198.28.0.2:53 1 64 1 2025-11-01 16:02:20.361 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39251 1 109 1 2025-11-01 16:02:20.361 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53182 1 80 1 2025-11-01 15:57:59.898 00:05:50.984 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-01 16:03:20.664 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48342 1 80 1 2025-11-01 16:03:20.664 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43055 1 109 1 2025-11-01 16:03:20.653 00:00:00.000 UDP 28.104.0.1:48342 -> 198.28.0.2:53 1 64 1 2025-11-01 16:03:20.653 00:00:00.000 UDP 28.104.0.1:43055 -> 198.28.0.2:53 1 64 1 2025-11-01 16:00:01.191 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 3032 1 2025-11-01 16:04:20.959 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40516 1 80 1 2025-11-01 16:04:20.959 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36281 1 109 1 2025-11-01 16:04:20.950 00:00:00.000 UDP 28.104.0.1:40516 -> 198.28.0.2:53 1 64 1 2025-11-01 16:04:20.950 00:00:00.000 UDP 28.104.0.1:36281 -> 198.28.0.2:53 1 64 1 2025-11-01 15:59:59.936 00:05:50.946 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-01 16:00:50.890 00:05:09.000 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-01 15:59:59.888 00:06:00.054 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-01 16:05:21.257 00:00:00.000 UDP 28.104.0.1:56208 -> 198.28.0.2:53 1 64 1 2025-11-01 16:05:21.257 00:00:00.000 UDP 28.104.0.1:45116 -> 198.28.0.2:53 1 64 1 2025-11-01 16:05:21.268 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56208 1 109 1 2025-11-01 16:05:21.268 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45116 1 80 1 2025-11-01 16:06:12.506 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-01 16:06:21.864 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47218 1 80 1 2025-11-01 16:06:21.865 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52638 1 109 1 2025-11-01 16:06:21.854 00:00:00.000 UDP 28.104.0.1:47218 -> 198.28.0.2:53 1 64 1 2025-11-01 16:06:21.855 00:00:00.000 UDP 28.104.0.1:52638 -> 198.28.0.2:53 1 64 1 2025-11-01 16:01:59.926 00:05:51.010 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-01 16:07:22.128 00:00:00.000 UDP 28.104.0.1:42082 -> 198.28.0.2:53 1 64 1 2025-11-01 16:07:22.129 00:00:00.000 UDP 28.104.0.1:46859 -> 198.28.0.2:53 1 64 1 2025-11-01 16:07:22.139 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42082 1 80 1 2025-11-01 16:07:22.139 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46859 1 109 1 2025-11-01 16:03:59.889 00:05:00.194 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-01 16:08:22.444 00:00:00.000 UDP 28.104.0.1:53259 -> 198.28.0.2:53 1 64 1 2025-11-01 16:08:22.444 00:00:00.000 UDP 28.104.0.1:38135 -> 198.28.0.2:53 1 64 1 2025-11-01 16:08:22.454 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53259 1 109 1 2025-11-01 16:08:22.454 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38135 1 80 1 2025-11-01 16:03:59.899 00:05:50.984 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-01 16:09:22.739 00:00:00.000 UDP 28.104.0.1:52600 -> 198.28.0.2:53 1 64 1 2025-11-01 16:09:22.739 00:00:00.000 UDP 28.104.0.1:42646 -> 198.28.0.2:53 1 64 1 2025-11-01 16:09:22.749 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42646 1 80 1 2025-11-01 16:09:22.749 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52600 1 109 1 2025-11-01 16:05:21.196 00:05:10.043 OSPF 28.0.2.1:0 -> 224.0.0.5:0 42 3068 1 2025-11-01 16:10:23.065 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43883 1 109 1 2025-11-01 16:10:23.065 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46671 1 80 1 2025-11-01 16:10:23.054 00:00:00.000 UDP 28.104.0.1:46671 -> 198.28.0.2:53 1 64 1 2025-11-01 16:10:23.054 00:00:00.000 UDP 28.104.0.1:43883 -> 198.28.0.2:53 1 64 1 2025-11-01 16:05:59.938 00:05:50.945 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-01 16:06:50.893 00:05:08.998 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-01 16:11:12.594 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-01 16:11:23.358 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41480 1 80 1 2025-11-01 16:11:23.358 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52037 1 109 1 2025-11-01 16:11:23.349 00:00:00.000 UDP 28.104.0.1:52037 -> 198.28.0.2:53 1 64 1 2025-11-01 16:11:23.348 00:00:00.000 UDP 28.104.0.1:41480 -> 198.28.0.2:53 1 64 1 2025-11-01 16:06:59.890 00:06:00.054 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-01 16:12:23.657 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52979 1 109 1 2025-11-01 16:12:23.658 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52861 1 80 1 2025-11-01 16:12:23.647 00:00:00.000 UDP 28.104.0.1:52979 -> 198.28.0.2:53 1 64 1 2025-11-01 16:12:23.647 00:00:00.000 UDP 28.104.0.1:52861 -> 198.28.0.2:53 1 64 1 2025-11-01 16:07:59.930 00:05:51.004 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-01 16:13:23.957 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39844 1 80 1 2025-11-01 16:13:23.957 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42790 1 109 1 2025-11-01 16:13:23.946 00:00:00.000 UDP 28.104.0.1:42790 -> 198.28.0.2:53 1 64 1 2025-11-01 16:13:23.946 00:00:00.000 UDP 28.104.0.1:39844 -> 198.28.0.2:53 1 64 1 2025-11-01 16:09:59.891 00:05:00.194 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-01 16:14:24.251 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56502 1 80 1 2025-11-01 16:14:24.251 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52931 1 109 1 2025-11-01 16:14:24.241 00:00:00.000 UDP 28.104.0.1:52931 -> 198.28.0.2:53 1 64 1 2025-11-01 16:14:24.241 00:00:00.000 UDP 28.104.0.1:56502 -> 198.28.0.2:53 1 64 1 2025-11-01 16:09:59.901 00:05:50.983 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-01 16:10:41.204 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 34 2320 1 2025-11-01 16:15:24.534 00:00:00.000 UDP 28.104.0.1:34608 -> 198.28.0.2:53 1 64 1 2025-11-01 16:15:24.534 00:00:00.000 UDP 28.104.0.1:46647 -> 198.28.0.2:53 1 64 1 2025-11-01 16:15:24.544 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34608 1 109 1 2025-11-01 16:15:24.545 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46647 1 80 1 2025-11-01 16:16:13.478 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-01 16:16:24.854 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38067 1 80 1 2025-11-01 16:16:24.854 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44866 1 109 1 2025-11-01 16:16:24.843 00:00:00.000 UDP 28.104.0.1:44866 -> 198.28.0.2:53 1 64 1 2025-11-01 16:16:24.843 00:00:00.000 UDP 28.104.0.1:38067 -> 198.28.0.2:53 1 64 1 2025-11-01 16:11:59.941 00:05:50.944 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-01 16:12:50.893 00:05:09.000 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-01 16:17:25.163 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57793 1 80 1 2025-11-01 16:17:25.162 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34644 1 109 1 2025-11-01 16:17:25.152 00:00:00.000 UDP 28.104.0.1:57793 -> 198.28.0.2:53 1 64 1 2025-11-01 16:17:25.151 00:00:00.000 UDP 28.104.0.1:34644 -> 198.28.0.2:53 1 64 1 2025-11-01 16:18:25.450 00:00:00.000 UDP 28.104.0.1:55554 -> 198.28.0.2:53 1 64 1 2025-11-01 16:18:25.451 00:00:00.000 UDP 28.104.0.1:49588 -> 198.28.0.2:53 1 64 1 2025-11-01 16:18:25.460 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49588 1 109 1 2025-11-01 16:18:25.460 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55554 1 80 1 2025-11-01 16:13:59.930 00:05:51.004 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-01 16:13:59.891 00:06:00.054 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-01 16:19:26.191 00:00:00.000 UDP 28.104.0.1:46179 -> 198.28.0.2:53 1 64 1 2025-11-01 16:19:26.191 00:00:00.000 UDP 28.104.0.1:55096 -> 198.28.0.2:53 1 64 1 2025-11-01 16:19:26.200 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46179 1 109 1 2025-11-01 16:19:26.200 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55096 1 80 1 2025-11-01 16:15:59.892 00:05:00.194 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-01 16:16:01.208 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2628 1 2025-11-01 16:20:26.491 00:00:00.000 UDP 28.104.0.1:43341 -> 198.28.0.2:53 1 64 1 2025-11-01 16:20:26.491 00:00:00.000 UDP 28.104.0.1:38693 -> 198.28.0.2:53 1 64 1 2025-11-01 16:20:26.501 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38693 1 109 1 2025-11-01 16:20:26.501 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43341 1 80 1 2025-11-01 16:15:59.902 00:05:50.984 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-01 16:21:12.939 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-01 16:21:26.758 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35795 1 109 1 2025-11-01 16:21:26.758 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41852 1 80 1 2025-11-01 16:21:26.748 00:00:00.000 UDP 28.104.0.1:35795 -> 198.28.0.2:53 1 64 1 2025-11-01 16:21:26.748 00:00:00.000 UDP 28.104.0.1:41852 -> 198.28.0.2:53 1 64 1 2025-11-01 16:22:27.070 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47070 1 109 1 2025-11-01 16:22:27.070 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46547 1 80 1 2025-11-01 16:22:27.060 00:00:00.000 UDP 28.104.0.1:46547 -> 198.28.0.2:53 1 64 1 2025-11-01 16:22:27.060 00:00:00.000 UDP 28.104.0.1:47070 -> 198.28.0.2:53 1 64 1 2025-11-01 16:17:59.943 00:05:50.943 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-01 16:18:50.897 00:05:08.997 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-01 16:23:27.378 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42294 1 109 1 2025-11-01 16:23:27.378 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49070 1 80 1 2025-11-01 16:23:27.367 00:00:00.000 UDP 28.104.0.1:49070 -> 198.28.0.2:53 1 64 1 2025-11-01 16:23:27.368 00:00:00.000 UDP 28.104.0.1:42294 -> 198.28.0.2:53 1 64 1 2025-11-01 16:24:27.662 00:00:00.000 UDP 28.104.0.1:57169 -> 198.28.0.2:53 1 64 1 2025-11-01 16:24:27.662 00:00:00.000 UDP 28.104.0.1:39133 -> 198.28.0.2:53 1 64 1 2025-11-01 16:24:27.671 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57169 1 80 1 2025-11-01 16:24:27.671 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39133 1 109 1 2025-11-01 16:19:59.933 00:05:51.004 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-01 16:25:27.990 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36750 1 80 1 2025-11-01 16:25:27.989 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47218 1 109 1 2025-11-01 16:25:27.979 00:00:00.000 UDP 28.104.0.1:47218 -> 198.28.0.2:53 1 64 1 2025-11-01 16:25:27.979 00:00:00.000 UDP 28.104.0.1:36750 -> 198.28.0.2:53 1 64 1 2025-11-01 16:21:21.215 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 34 2384 1 2025-11-01 16:21:59.893 00:05:00.197 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-01 16:20:59.893 00:06:00.055 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-01 16:26:13.146 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-01 16:26:28.304 00:00:00.000 UDP 28.104.0.1:59028 -> 198.28.0.2:53 1 64 1 2025-11-01 16:26:28.305 00:00:00.000 UDP 28.104.0.1:37214 -> 198.28.0.2:53 1 64 1 2025-11-01 16:26:28.315 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59028 1 80 1 2025-11-01 16:26:28.316 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37214 1 109 1 2025-11-01 16:21:59.903 00:05:50.983 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-01 16:27:28.619 00:00:00.000 UDP 28.104.0.1:33381 -> 198.28.0.2:53 1 64 1 2025-11-01 16:27:28.619 00:00:00.000 UDP 28.104.0.1:33420 -> 198.28.0.2:53 1 64 1 2025-11-01 16:27:28.629 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33420 1 109 1 2025-11-01 16:27:28.629 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33381 1 80 1 2025-11-01 16:28:31.260 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34854 1 80 1 2025-11-01 16:28:31.261 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60948 1 109 1 2025-11-01 16:28:31.250 00:00:00.000 UDP 28.104.0.1:60948 -> 198.28.0.2:53 1 64 1 2025-11-01 16:28:31.250 00:00:00.000 UDP 28.104.0.1:34854 -> 198.28.0.2:53 1 64 1 2025-11-01 16:23:59.944 00:05:50.946 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-01 16:24:50.897 00:05:08.998 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-01 16:29:31.546 00:00:00.000 UDP 28.104.0.1:34898 -> 198.28.0.2:53 1 64 1 2025-11-01 16:29:31.546 00:00:00.000 UDP 28.104.0.1:60610 -> 198.28.0.2:53 1 64 1 2025-11-01 16:29:31.556 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34898 1 80 1 2025-11-01 16:29:31.556 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60610 1 109 1 2025-11-01 16:30:31.838 00:00:00.000 UDP 28.104.0.1:44717 -> 198.28.0.2:53 1 64 1 2025-11-01 16:30:31.838 00:00:00.000 UDP 28.104.0.1:43876 -> 198.28.0.2:53 1 64 1 2025-11-01 16:30:31.850 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44717 1 80 1 2025-11-01 16:30:31.850 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43876 1 109 1 2025-11-01 16:25:59.934 00:05:51.007 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-01 16:26:41.220 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 45 3308 1 2025-11-01 16:31:13.232 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-01 16:31:32.131 00:00:00.000 UDP 28.104.0.1:51096 -> 198.28.0.2:53 1 64 1 2025-11-01 16:31:32.131 00:00:00.000 UDP 28.104.0.1:38503 -> 198.28.0.2:53 1 64 1 2025-11-01 16:31:32.141 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38503 1 80 1 2025-11-01 16:31:32.141 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51096 1 109 1 2025-11-01 16:27:59.895 00:05:00.193 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-01 16:32:32.434 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38139 1 80 1 2025-11-01 16:32:32.433 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58036 1 109 1 2025-11-01 16:32:32.422 00:00:00.000 UDP 28.104.0.1:58036 -> 198.28.0.2:53 1 64 1 2025-11-01 16:32:32.423 00:00:00.000 UDP 28.104.0.1:38139 -> 198.28.0.2:53 1 64 1 2025-11-01 16:27:59.905 00:05:50.987 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-01 16:27:59.894 00:06:00.055 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-01 16:33:32.726 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51150 1 109 1 2025-11-01 16:33:32.726 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45740 1 80 1 2025-11-01 16:33:32.717 00:00:00.000 UDP 28.104.0.1:45740 -> 198.28.0.2:53 1 64 1 2025-11-01 16:33:32.717 00:00:00.000 UDP 28.104.0.1:51150 -> 198.28.0.2:53 1 64 1 2025-11-01 16:34:32.972 00:00:00.000 UDP 28.104.0.1:56536 -> 198.28.0.2:53 1 64 1 2025-11-01 16:34:32.972 00:00:00.000 UDP 28.104.0.1:55057 -> 198.28.0.2:53 1 64 1 2025-11-01 16:34:32.981 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55057 1 109 1 2025-11-01 16:34:32.980 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56536 1 80 1 2025-11-01 16:29:59.945 00:05:50.947 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-01 16:30:50.901 00:05:08.996 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-01 16:35:33.277 00:00:00.000 UDP 28.104.0.1:35881 -> 198.28.0.2:53 1 64 1 2025-11-01 16:35:33.277 00:00:00.000 UDP 28.104.0.1:37600 -> 198.28.0.2:53 1 64 1 2025-11-01 16:35:33.288 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37600 1 109 1 2025-11-01 16:35:33.287 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35881 1 80 1 2025-11-01 16:36:13.305 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-01 16:32:01.225 00:05:11.029 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2708 1 2025-11-01 16:36:33.587 00:00:00.000 UDP 28.104.0.1:44073 -> 198.28.0.2:53 1 64 1 2025-11-01 16:36:33.587 00:00:00.000 UDP 28.104.0.1:50832 -> 198.28.0.2:53 1 64 1 2025-11-01 16:36:33.598 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50832 1 109 1 2025-11-01 16:36:33.598 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44073 1 80 1 2025-11-01 16:31:59.934 00:05:51.009 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-01 16:37:33.848 00:00:00.000 UDP 28.104.0.1:60693 -> 198.28.0.2:53 1 64 1 2025-11-01 16:37:33.848 00:00:00.000 UDP 28.104.0.1:56243 -> 198.28.0.2:53 1 64 1 2025-11-01 16:37:33.858 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60693 1 80 1 2025-11-01 16:37:33.858 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56243 1 109 1 2025-11-01 16:33:59.896 00:05:00.192 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-01 16:38:34.181 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45011 1 109 1 2025-11-01 16:38:34.181 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46480 1 80 1 2025-11-01 16:38:34.170 00:00:00.000 UDP 28.104.0.1:46480 -> 198.28.0.2:53 1 64 1 2025-11-01 16:38:34.170 00:00:00.000 UDP 28.104.0.1:45011 -> 198.28.0.2:53 1 64 1 2025-11-01 16:33:59.906 00:05:50.995 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-01 16:39:34.489 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34812 1 80 1 2025-11-01 16:39:34.489 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45325 1 109 1 2025-11-01 16:39:34.478 00:00:00.000 UDP 28.104.0.1:45325 -> 198.28.0.2:53 1 64 1 2025-11-01 16:39:34.478 00:00:00.000 UDP 28.104.0.1:34812 -> 198.28.0.2:53 1 64 1 2025-11-01 16:34:59.896 00:06:00.055 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-01 16:40:34.779 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55499 1 80 1 2025-11-01 16:40:34.779 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56395 1 109 1 2025-11-01 16:40:34.771 00:00:00.000 UDP 28.104.0.1:56395 -> 198.28.0.2:53 1 64 1 2025-11-01 16:40:34.771 00:00:00.000 UDP 28.104.0.1:55499 -> 198.28.0.2:53 1 64 1 2025-11-01 16:35:59.946 00:05:50.959 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-01 16:36:50.903 00:05:08.995 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-01 16:41:13.334 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-01 16:37:21.230 00:05:10.009 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2856 1 2025-11-01 16:41:35.081 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53022 1 109 1 2025-11-01 16:41:35.081 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58636 1 80 1 2025-11-01 16:41:35.071 00:00:00.000 UDP 28.104.0.1:58636 -> 198.28.0.2:53 1 64 1 2025-11-01 16:41:35.071 00:00:00.000 UDP 28.104.0.1:53022 -> 198.28.0.2:53 1 64 1 2025-11-01 16:42:35.360 00:00:00.000 UDP 28.104.0.1:34925 -> 198.28.0.2:53 1 64 1 2025-11-01 16:42:35.361 00:00:00.000 UDP 28.104.0.1:55866 -> 198.28.0.2:53 1 64 1 2025-11-01 16:42:35.370 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55866 1 80 1 2025-11-01 16:42:35.370 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34925 1 109 1 2025-11-01 16:37:59.937 00:05:51.018 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-01 16:43:35.652 00:00:00.000 UDP 28.104.0.1:39809 -> 198.28.0.2:53 1 64 1 2025-11-01 16:43:35.652 00:00:00.000 UDP 28.104.0.1:37975 -> 198.28.0.2:53 1 64 1 2025-11-01 16:43:35.663 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37975 1 109 1 2025-11-01 16:43:35.663 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39809 1 80 1 2025-11-01 16:39:59.896 00:05:00.193 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-01 16:44:35.970 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39560 1 80 1 2025-11-01 16:44:35.970 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53519 1 109 1 2025-11-01 16:44:35.959 00:00:00.000 UDP 28.104.0.1:39560 -> 198.28.0.2:53 1 64 1 2025-11-01 16:44:35.959 00:00:00.000 UDP 28.104.0.1:53519 -> 198.28.0.2:53 1 64 1 2025-11-01 16:39:59.907 00:05:51.000 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-01 16:45:36.263 00:00:00.000 UDP 28.104.0.1:60911 -> 198.28.0.2:53 1 64 1 2025-11-01 16:45:36.263 00:00:00.000 UDP 28.104.0.1:54886 -> 198.28.0.2:53 1 64 1 2025-11-01 16:45:36.272 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54886 1 80 1 2025-11-01 16:45:36.272 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60911 1 109 1 2025-11-01 16:46:13.386 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-01 16:46:36.557 00:00:00.000 UDP 28.104.0.1:32779 -> 198.28.0.2:53 1 64 1 2025-11-01 16:46:36.557 00:00:00.000 UDP 28.104.0.1:57248 -> 198.28.0.2:53 1 64 1 2025-11-01 16:46:36.568 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57248 1 80 1 2025-11-01 16:46:36.569 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32779 1 109 1 2025-11-01 16:41:59.948 00:05:50.958 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-01 16:42:41.238 00:05:10.150 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2516 1 2025-11-01 16:42:50.916 00:05:08.985 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-01 16:41:59.899 00:06:00.055 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-01 16:47:36.858 00:00:00.000 UDP 28.104.0.1:39273 -> 198.28.0.2:53 1 64 1 2025-11-01 16:47:36.858 00:00:00.000 UDP 28.104.0.1:34197 -> 198.28.0.2:53 1 64 1 2025-11-01 16:47:36.869 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39273 1 80 1 2025-11-01 16:47:36.869 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34197 1 109 1 2025-11-01 16:48:37.187 00:00:00.000 UDP 28.104.0.1:46982 -> 198.28.0.2:53 1 64 1 2025-11-01 16:48:37.187 00:00:00.000 UDP 28.104.0.1:39679 -> 198.28.0.2:53 1 64 1 2025-11-01 16:48:37.199 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39679 1 109 1 2025-11-01 16:48:37.200 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46982 1 80 1 2025-11-01 16:43:59.937 00:05:51.020 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-01 16:49:37.494 00:00:00.000 UDP 28.104.0.1:48535 -> 198.28.0.2:53 1 64 1 2025-11-01 16:49:37.494 00:00:00.000 UDP 28.104.0.1:49545 -> 198.28.0.2:53 1 64 1 2025-11-01 16:49:37.504 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48535 1 109 1 2025-11-01 16:49:37.504 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49545 1 80 1 2025-11-01 16:45:59.898 00:05:00.192 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-01 16:50:37.794 00:00:00.000 UDP 28.104.0.1:48361 -> 198.28.0.2:53 1 64 1 2025-11-01 16:50:37.794 00:00:00.000 UDP 28.104.0.1:53810 -> 198.28.0.2:53 1 64 1 2025-11-01 16:50:37.805 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53810 1 109 1 2025-11-01 16:50:37.805 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48361 1 80 1 2025-11-01 16:45:59.908 00:05:51.006 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-01 16:51:13.694 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-01 16:51:38.115 00:00:00.000 UDP 28.104.0.1:41153 -> 198.28.0.2:53 1 64 1 2025-11-01 16:51:38.115 00:00:00.000 UDP 28.104.0.1:39983 -> 198.28.0.2:53 1 64 1 2025-11-01 16:51:38.124 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39983 1 109 1 2025-11-01 16:51:38.124 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41153 1 80 1 2025-11-01 16:48:01.254 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 34 2320 1 2025-11-01 16:52:38.413 00:00:00.000 UDP 28.104.0.1:53508 -> 198.28.0.2:53 1 64 1 2025-11-01 16:52:38.413 00:00:00.000 UDP 28.104.0.1:35940 -> 198.28.0.2:53 1 64 1 2025-11-01 16:52:38.425 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35940 1 80 1 2025-11-01 16:52:38.425 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53508 1 109 1 2025-11-01 16:47:59.949 00:05:50.965 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-01 16:48:50.918 00:05:08.982 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-01 16:53:38.733 00:00:00.000 UDP 28.104.0.1:37609 -> 198.28.0.2:53 1 64 1 2025-11-01 16:53:38.733 00:00:00.000 UDP 28.104.0.1:35912 -> 198.28.0.2:53 1 64 1 2025-11-01 16:53:38.743 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37609 1 109 1 2025-11-01 16:53:38.743 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35912 1 80 1 2025-11-01 16:48:59.899 00:06:00.055 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-01 16:54:39.062 00:00:00.000 UDP 28.104.0.1:42195 -> 198.28.0.2:53 1 64 1 2025-11-01 16:54:39.062 00:00:00.000 UDP 28.104.0.1:47620 -> 198.28.0.2:53 1 64 1 2025-11-01 16:54:39.074 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47620 1 109 1 2025-11-01 16:54:39.072 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42195 1 80 1 2025-11-01 16:49:59.938 00:05:51.028 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-01 16:55:39.341 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59442 1 80 1 2025-11-01 16:55:39.341 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50088 1 109 1 2025-11-01 16:55:39.330 00:00:00.000 UDP 28.104.0.1:59442 -> 198.28.0.2:53 1 64 1 2025-11-01 16:55:39.330 00:00:00.000 UDP 28.104.0.1:50088 -> 198.28.0.2:53 1 64 1 2025-11-01 16:51:59.900 00:05:00.192 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-01 16:56:13.580 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-01 16:56:39.654 00:00:00.000 UDP 28.104.0.1:56222 -> 198.28.0.2:53 1 64 1 2025-11-01 16:56:39.654 00:00:00.000 UDP 28.104.0.1:46191 -> 198.28.0.2:53 1 64 1 2025-11-01 16:56:39.665 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46191 1 109 1 2025-11-01 16:56:39.665 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56222 1 80 1 2025-11-01 16:51:59.910 00:05:51.006 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-01 16:53:21.262 00:05:10.242 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2800 1 2025-11-01 16:57:39.915 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53270 1 109 1 2025-11-01 16:57:39.916 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51430 1 80 1 2025-11-01 16:57:39.905 00:00:00.000 UDP 28.104.0.1:51430 -> 198.28.0.2:53 1 64 1 2025-11-01 16:57:39.905 00:00:00.000 UDP 28.104.0.1:53270 -> 198.28.0.2:53 1 64 1 2025-11-01 16:58:40.215 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50153 1 109 1 2025-11-01 16:58:40.215 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52226 1 80 1 2025-11-01 16:58:40.204 00:00:00.000 UDP 28.104.0.1:52226 -> 198.28.0.2:53 1 64 1 2025-11-01 16:58:40.204 00:00:00.000 UDP 28.104.0.1:50153 -> 198.28.0.2:53 1 64 1 2025-11-01 16:53:59.950 00:05:50.966 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 Summary: total flows: 321, total bytes: 95772, total packets: 1410, avg bps: 196, avg pps: 0, avg bpp: 67 Time window: 2025-11-01 15:54:50 - 2025-11-01 16:59:50 Total flows processed: 321, passed: 321, Blocks skipped: 0, Bytes read: 33448 Sys: 0.0054s User: 0.0022s Wall: 0.0035s flows/second: 92750.9 Runtime: 0.0035s