Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-02 14:54:51.617 00:05:08.713 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-02 14:59:23.132 00:00:00.000 UDP 28.104.0.1:54058 -> 198.28.0.2:53 1 64 1 2025-11-02 14:59:23.132 00:00:00.000 UDP 28.104.0.1:35836 -> 198.28.0.2:53 1 64 1 2025-11-02 14:59:23.143 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54058 1 80 1 2025-11-02 14:59:23.144 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35836 1 109 1 2025-11-02 14:55:51.656 00:05:08.735 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-02 14:55:00.328 00:06:00.124 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-02 15:00:23.383 00:00:00.000 UDP 28.104.0.1:32828 -> 198.28.0.2:53 1 64 1 2025-11-02 15:00:23.383 00:00:00.000 UDP 28.104.0.1:57467 -> 198.28.0.2:53 1 64 1 2025-11-02 15:00:23.394 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57467 1 109 1 2025-11-02 15:00:23.394 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32828 1 80 1 2025-11-02 15:01:23.732 00:00:00.000 UDP 28.104.0.1:58886 -> 198.28.0.2:53 1 64 1 2025-11-02 15:01:23.732 00:00:00.000 UDP 28.104.0.1:33468 -> 198.28.0.2:53 1 64 1 2025-11-02 15:01:23.741 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58886 1 80 1 2025-11-02 15:01:23.741 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33468 1 109 1 2025-11-02 15:01:40.432 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-02 14:57:51.611 00:05:08.732 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-02 14:58:22.984 00:05:01.083 OSPF 28.0.2.1:0 -> 224.0.0.5:0 43 3056 1 2025-11-02 15:02:23.994 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39020 1 80 1 2025-11-02 15:02:23.994 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39140 1 109 1 2025-11-02 15:02:23.984 00:00:00.000 UDP 28.104.0.1:39020 -> 198.28.0.2:53 1 64 1 2025-11-02 15:02:23.984 00:00:00.000 UDP 28.104.0.1:39140 -> 198.28.0.2:53 1 64 1 2025-11-02 15:03:28.315 00:00:00.000 UDP 28.104.0.1:33988 -> 198.28.0.2:53 1 64 1 2025-11-02 15:03:28.315 00:00:00.000 UDP 28.104.0.1:59649 -> 198.28.0.2:53 1 64 1 2025-11-02 15:03:28.326 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33988 1 80 1 2025-11-02 15:03:28.326 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59649 1 109 1 2025-11-02 14:59:00.401 00:05:51.211 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-02 14:59:00.330 00:06:00.154 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-02 15:04:28.614 00:00:00.000 UDP 28.104.0.1:33696 -> 198.28.0.2:53 1 64 1 2025-11-02 15:04:28.614 00:00:00.000 UDP 28.104.0.1:51378 -> 198.28.0.2:53 1 64 1 2025-11-02 15:04:28.624 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51378 1 109 1 2025-11-02 15:04:28.624 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33696 1 80 1 2025-11-02 15:00:51.621 00:05:08.711 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-02 15:05:28.917 00:00:00.000 UDP 28.104.0.1:56324 -> 198.28.0.2:53 1 64 1 2025-11-02 15:05:28.917 00:00:00.000 UDP 28.104.0.1:54464 -> 198.28.0.2:53 1 64 1 2025-11-02 15:05:28.928 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56324 1 80 1 2025-11-02 15:05:28.928 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54464 1 109 1 2025-11-02 15:01:51.662 00:05:08.730 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-02 15:06:29.256 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58224 1 80 1 2025-11-02 15:06:29.257 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50460 1 109 1 2025-11-02 15:06:29.246 00:00:00.000 UDP 28.104.0.1:50460 -> 198.28.0.2:53 1 64 1 2025-11-02 15:06:29.246 00:00:00.000 UDP 28.104.0.1:58224 -> 198.28.0.2:53 1 64 1 2025-11-02 15:06:40.386 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-02 15:02:00.331 00:06:00.124 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-02 15:07:29.542 00:00:00.000 UDP 28.104.0.1:60359 -> 198.28.0.2:53 1 64 1 2025-11-02 15:07:29.541 00:00:00.000 UDP 28.104.0.1:37742 -> 198.28.0.2:53 1 64 1 2025-11-02 15:07:29.553 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60359 1 109 1 2025-11-02 15:07:29.553 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37742 1 80 1 2025-11-02 15:03:32.989 00:05:00.013 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2436 1 2025-11-02 15:03:51.611 00:05:08.731 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-02 15:08:29.811 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47357 1 80 1 2025-11-02 15:08:29.809 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58360 1 109 1 2025-11-02 15:08:29.800 00:00:00.000 UDP 28.104.0.1:47357 -> 198.28.0.2:53 1 64 1 2025-11-02 15:08:29.800 00:00:00.000 UDP 28.104.0.1:58360 -> 198.28.0.2:53 1 64 1 2025-11-02 15:09:30.078 00:00:00.000 UDP 28.104.0.1:44933 -> 198.28.0.2:53 1 64 1 2025-11-02 15:09:30.078 00:00:00.000 UDP 28.104.0.1:48367 -> 198.28.0.2:53 1 64 1 2025-11-02 15:09:30.089 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44933 1 80 1 2025-11-02 15:09:30.088 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48367 1 109 1 2025-11-02 15:05:00.402 00:05:51.211 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-02 15:10:30.377 00:00:00.000 UDP 28.104.0.1:50796 -> 198.28.0.2:53 1 64 1 2025-11-02 15:10:30.378 00:00:00.000 UDP 28.104.0.1:42323 -> 198.28.0.2:53 1 64 1 2025-11-02 15:10:30.388 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50796 1 109 1 2025-11-02 15:10:30.388 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42323 1 80 1 2025-11-02 15:06:00.333 00:06:00.154 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-02 15:06:51.622 00:05:08.711 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-02 15:11:30.737 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56318 1 80 1 2025-11-02 15:11:30.737 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42685 1 109 1 2025-11-02 15:11:30.725 00:00:00.000 UDP 28.104.0.1:42685 -> 198.28.0.2:53 1 64 1 2025-11-02 15:11:30.725 00:00:00.000 UDP 28.104.0.1:56318 -> 198.28.0.2:53 1 64 1 2025-11-02 15:11:40.646 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-02 15:07:51.662 00:05:08.730 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-02 15:12:31.056 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40093 1 80 1 2025-11-02 15:12:31.056 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35415 1 109 1 2025-11-02 15:12:31.046 00:00:00.000 UDP 28.104.0.1:40093 -> 198.28.0.2:53 1 64 1 2025-11-02 15:12:31.046 00:00:00.000 UDP 28.104.0.1:35415 -> 198.28.0.2:53 1 64 1 2025-11-02 15:08:43.002 00:05:10.046 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2384 1 2025-11-02 15:13:31.292 00:00:00.000 UDP 28.104.0.1:49217 -> 198.28.0.2:53 1 64 1 2025-11-02 15:13:31.292 00:00:00.000 UDP 28.104.0.1:42517 -> 198.28.0.2:53 1 64 1 2025-11-02 15:13:31.304 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42517 1 80 1 2025-11-02 15:13:31.302 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49217 1 109 1 2025-11-02 15:09:51.613 00:05:08.733 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-02 15:09:00.332 00:06:00.125 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-02 15:14:31.589 00:00:00.000 UDP 28.104.0.1:39369 -> 198.28.0.2:53 1 64 1 2025-11-02 15:14:31.589 00:00:00.000 UDP 28.104.0.1:53838 -> 198.28.0.2:53 1 64 1 2025-11-02 15:14:31.599 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53838 1 109 1 2025-11-02 15:14:31.599 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39369 1 80 1 2025-11-02 15:15:31.864 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53767 1 80 1 2025-11-02 15:15:31.865 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58102 1 109 1 2025-11-02 15:15:31.853 00:00:00.000 UDP 28.104.0.1:58102 -> 198.28.0.2:53 1 64 1 2025-11-02 15:15:31.853 00:00:00.000 UDP 28.104.0.1:53767 -> 198.28.0.2:53 1 64 1 2025-11-02 15:11:00.402 00:05:51.213 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-02 15:16:32.178 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38471 1 109 1 2025-11-02 15:16:32.178 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44857 1 80 1 2025-11-02 15:16:32.167 00:00:00.000 UDP 28.104.0.1:38471 -> 198.28.0.2:53 1 64 1 2025-11-02 15:16:32.168 00:00:00.000 UDP 28.104.0.1:44857 -> 198.28.0.2:53 1 64 1 2025-11-02 15:16:40.484 00:00:00.025 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-02 15:12:51.628 00:05:08.709 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-02 15:17:32.480 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33633 1 109 1 2025-11-02 15:17:32.480 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57482 1 80 1 2025-11-02 15:17:32.470 00:00:00.000 UDP 28.104.0.1:57482 -> 198.28.0.2:53 1 64 1 2025-11-02 15:17:32.470 00:00:00.000 UDP 28.104.0.1:33633 -> 198.28.0.2:53 1 64 1 2025-11-02 15:13:00.332 00:06:00.160 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-02 15:13:51.664 00:05:08.729 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-02 15:14:03.049 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2592 1 2025-11-02 15:18:32.785 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58912 1 80 1 2025-11-02 15:18:32.785 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44013 1 109 1 2025-11-02 15:18:32.773 00:00:00.000 UDP 28.104.0.1:44013 -> 198.28.0.2:53 1 64 1 2025-11-02 15:18:32.773 00:00:00.000 UDP 28.104.0.1:58912 -> 198.28.0.2:53 1 64 1 2025-11-02 15:19:33.043 00:00:00.000 UDP 28.104.0.1:42364 -> 198.28.0.2:53 1 64 1 2025-11-02 15:19:33.043 00:00:00.000 UDP 28.104.0.1:34921 -> 198.28.0.2:53 1 64 1 2025-11-02 15:19:33.053 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34921 1 109 1 2025-11-02 15:19:33.053 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42364 1 80 1 2025-11-02 15:15:51.615 00:05:08.732 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-02 15:20:33.344 00:00:00.000 UDP 28.104.0.1:42283 -> 198.28.0.2:53 1 64 1 2025-11-02 15:20:33.345 00:00:00.000 UDP 28.104.0.1:53744 -> 198.28.0.2:53 1 64 1 2025-11-02 15:20:33.355 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53744 1 109 1 2025-11-02 15:20:33.355 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42283 1 80 1 2025-11-02 15:16:00.336 00:06:00.123 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-02 15:21:33.710 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36134 1 109 1 2025-11-02 15:21:33.711 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50106 1 80 1 2025-11-02 15:21:33.701 00:00:00.000 UDP 28.104.0.1:36134 -> 198.28.0.2:53 1 64 1 2025-11-02 15:21:33.701 00:00:00.000 UDP 28.104.0.1:50106 -> 198.28.0.2:53 1 64 1 2025-11-02 15:21:41.360 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-02 15:17:00.403 00:05:51.215 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-02 15:22:34.008 00:00:00.000 UDP 28.104.0.1:34400 -> 198.28.0.2:53 1 64 1 2025-11-02 15:22:34.008 00:00:00.000 UDP 28.104.0.1:33295 -> 198.28.0.2:53 1 64 1 2025-11-02 15:22:34.025 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34400 1 109 1 2025-11-02 15:22:34.021 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33295 1 80 1 2025-11-02 15:18:51.629 00:05:08.710 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-02 15:23:34.261 00:00:00.000 UDP 28.104.0.1:33926 -> 198.28.0.2:53 1 64 1 2025-11-02 15:23:34.261 00:00:00.000 UDP 28.104.0.1:53508 -> 198.28.0.2:53 1 64 1 2025-11-02 15:23:34.272 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33926 1 109 1 2025-11-02 15:19:23.057 00:05:10.233 OSPF 28.0.2.1:0 -> 224.0.0.5:0 42 3100 1 2025-11-02 15:23:34.273 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53508 1 80 1 2025-11-02 15:19:51.667 00:05:08.733 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-02 15:24:34.567 00:00:00.000 UDP 28.104.0.1:32954 -> 198.28.0.2:53 1 64 1 2025-11-02 15:24:34.567 00:00:00.000 UDP 28.104.0.1:48686 -> 198.28.0.2:53 1 64 1 2025-11-02 15:24:34.577 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32954 1 109 1 2025-11-02 15:24:34.577 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48686 1 80 1 2025-11-02 15:20:00.336 00:06:00.157 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-02 15:25:34.820 00:00:00.000 UDP 28.104.0.1:45234 -> 198.28.0.2:53 1 64 1 2025-11-02 15:25:34.820 00:00:00.000 UDP 28.104.0.1:59327 -> 198.28.0.2:53 1 64 1 2025-11-02 15:25:34.830 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45234 1 80 1 2025-11-02 15:25:34.830 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59327 1 109 1 2025-11-02 15:21:51.619 00:05:08.729 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-02 15:26:35.134 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50076 1 80 1 2025-11-02 15:26:35.133 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47605 1 109 1 2025-11-02 15:26:35.124 00:00:00.000 UDP 28.104.0.1:50076 -> 198.28.0.2:53 1 64 1 2025-11-02 15:26:35.124 00:00:00.000 UDP 28.104.0.1:47605 -> 198.28.0.2:53 1 64 1 2025-11-02 15:26:40.721 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-02 15:27:35.435 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50273 1 109 1 2025-11-02 15:27:35.434 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51060 1 80 1 2025-11-02 15:27:35.424 00:00:00.000 UDP 28.104.0.1:50273 -> 198.28.0.2:53 1 64 1 2025-11-02 15:27:35.424 00:00:00.000 UDP 28.104.0.1:51060 -> 198.28.0.2:53 1 64 1 2025-11-02 15:23:00.412 00:05:51.212 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-02 15:23:00.337 00:06:00.123 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-02 15:28:35.691 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34227 1 109 1 2025-11-02 15:28:35.692 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48148 1 80 1 2025-11-02 15:28:35.681 00:00:00.000 UDP 28.104.0.1:48148 -> 198.28.0.2:53 1 64 1 2025-11-02 15:28:35.681 00:00:00.000 UDP 28.104.0.1:34227 -> 198.28.0.2:53 1 64 1 2025-11-02 15:24:43.062 00:05:10.009 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2708 1 2025-11-02 15:24:51.629 00:05:08.709 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-02 15:29:35.973 00:00:00.000 UDP 28.104.0.1:39298 -> 198.28.0.2:53 1 64 1 2025-11-02 15:29:35.973 00:00:00.000 UDP 28.104.0.1:59380 -> 198.28.0.2:53 1 64 1 2025-11-02 15:29:35.983 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39298 1 80 1 2025-11-02 15:29:35.983 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59380 1 109 1 2025-11-02 15:25:51.668 00:05:08.735 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-02 15:30:36.274 00:00:00.000 UDP 28.104.0.1:53701 -> 198.28.0.2:53 1 64 1 2025-11-02 15:30:36.274 00:00:00.000 UDP 28.104.0.1:43566 -> 198.28.0.2:53 1 64 1 2025-11-02 15:30:36.285 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53701 1 109 1 2025-11-02 15:30:36.285 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43566 1 80 1 2025-11-02 15:31:36.590 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33089 1 80 1 2025-11-02 15:31:36.590 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35219 1 109 1 2025-11-02 15:31:36.581 00:00:00.000 UDP 28.104.0.1:33089 -> 198.28.0.2:53 1 64 1 2025-11-02 15:31:36.581 00:00:00.000 UDP 28.104.0.1:35219 -> 198.28.0.2:53 1 64 1 2025-11-02 15:31:40.823 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-02 15:27:51.621 00:05:08.727 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-02 15:27:00.338 00:06:00.160 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-02 15:32:36.898 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49062 1 80 1 2025-11-02 15:32:36.898 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53574 1 109 1 2025-11-02 15:32:36.887 00:00:00.000 UDP 28.104.0.1:53574 -> 198.28.0.2:53 1 64 1 2025-11-02 15:32:36.887 00:00:00.000 UDP 28.104.0.1:49062 -> 198.28.0.2:53 1 64 1 2025-11-02 15:33:37.211 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48746 1 80 1 2025-11-02 15:33:37.211 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35205 1 109 1 2025-11-02 15:33:37.201 00:00:00.000 UDP 28.104.0.1:48746 -> 198.28.0.2:53 1 64 1 2025-11-02 15:33:37.201 00:00:00.000 UDP 28.104.0.1:35205 -> 198.28.0.2:53 1 64 1 2025-11-02 15:29:00.412 00:05:51.214 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-02 15:30:03.072 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2856 1 2025-11-02 15:34:37.501 00:00:00.000 UDP 28.104.0.1:39274 -> 198.28.0.2:53 1 64 1 2025-11-02 15:34:37.500 00:00:00.000 UDP 28.104.0.1:37676 -> 198.28.0.2:53 1 64 1 2025-11-02 15:34:37.510 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37676 1 80 1 2025-11-02 15:34:37.510 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39274 1 109 1 2025-11-02 15:30:51.633 00:05:08.705 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-02 15:30:00.337 00:06:00.123 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-02 15:35:37.802 00:00:00.000 UDP 28.104.0.1:60887 -> 198.28.0.2:53 1 64 1 2025-11-02 15:35:37.802 00:00:00.000 UDP 28.104.0.1:47887 -> 198.28.0.2:53 1 64 1 2025-11-02 15:35:37.813 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60887 1 109 1 2025-11-02 15:35:37.813 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47887 1 80 1 2025-11-02 15:31:51.674 00:05:08.730 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-02 15:36:40.972 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-02 15:36:38.079 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59729 1 80 1 2025-11-02 15:36:38.079 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59000 1 109 1 2025-11-02 15:36:38.068 00:00:00.000 UDP 28.104.0.1:59000 -> 198.28.0.2:53 1 64 1 2025-11-02 15:36:38.068 00:00:00.000 UDP 28.104.0.1:59729 -> 198.28.0.2:53 1 64 1 2025-11-02 15:37:38.317 00:00:00.000 UDP 28.104.0.1:48687 -> 198.28.0.2:53 1 64 1 2025-11-02 15:37:38.317 00:00:00.000 UDP 28.104.0.1:39981 -> 198.28.0.2:53 1 64 1 2025-11-02 15:37:38.327 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39981 1 80 1 2025-11-02 15:37:38.327 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48687 1 109 1 2025-11-02 15:33:51.625 00:05:08.726 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-02 15:38:38.577 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35474 1 80 1 2025-11-02 15:38:38.577 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34148 1 109 1 2025-11-02 15:38:38.566 00:00:00.000 UDP 28.104.0.1:35474 -> 198.28.0.2:53 1 64 1 2025-11-02 15:38:38.566 00:00:00.000 UDP 28.104.0.1:34148 -> 198.28.0.2:53 1 64 1 2025-11-02 15:34:00.339 00:06:00.163 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-02 15:35:23.077 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2528 1 2025-11-02 15:39:38.871 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53117 1 109 1 2025-11-02 15:39:38.871 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53217 1 80 1 2025-11-02 15:39:38.862 00:00:00.000 UDP 28.104.0.1:53117 -> 198.28.0.2:53 1 64 1 2025-11-02 15:39:38.861 00:00:00.000 UDP 28.104.0.1:53217 -> 198.28.0.2:53 1 64 1 2025-11-02 15:35:00.414 00:05:51.212 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-02 15:40:39.179 00:00:00.000 UDP 28.104.0.1:53053 -> 198.28.0.2:53 1 64 1 2025-11-02 15:40:39.179 00:00:00.000 UDP 28.104.0.1:48802 -> 198.28.0.2:53 1 64 1 2025-11-02 15:40:39.189 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48802 1 109 1 2025-11-02 15:40:39.189 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53053 1 80 1 2025-11-02 15:36:51.636 00:05:08.706 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-02 15:41:39.483 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37928 1 80 1 2025-11-02 15:41:40.998 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-02 15:41:39.483 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39974 1 109 1 2025-11-02 15:41:39.472 00:00:00.000 UDP 28.104.0.1:37928 -> 198.28.0.2:53 1 64 1 2025-11-02 15:41:39.473 00:00:00.000 UDP 28.104.0.1:39974 -> 198.28.0.2:53 1 64 1 2025-11-02 15:37:00.340 00:06:00.123 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-02 15:37:51.676 00:05:08.731 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-02 15:42:39.824 00:00:00.000 UDP 28.104.0.1:43310 -> 198.28.0.2:53 1 64 1 2025-11-02 15:42:39.824 00:00:00.000 UDP 28.104.0.1:46113 -> 198.28.0.2:53 1 64 1 2025-11-02 15:42:39.834 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43310 1 80 1 2025-11-02 15:42:39.834 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46113 1 109 1 2025-11-02 15:43:40.128 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60748 1 80 1 2025-11-02 15:43:40.128 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43131 1 109 1 2025-11-02 15:43:40.118 00:00:00.000 UDP 28.104.0.1:43131 -> 198.28.0.2:53 1 64 1 2025-11-02 15:43:40.118 00:00:00.000 UDP 28.104.0.1:60748 -> 198.28.0.2:53 1 64 1 2025-11-02 15:39:51.627 00:05:08.726 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-02 15:44:40.370 00:00:00.000 UDP 28.104.0.1:51707 -> 198.28.0.2:53 1 64 1 2025-11-02 15:44:40.370 00:00:00.000 UDP 28.104.0.1:39415 -> 198.28.0.2:53 1 64 1 2025-11-02 15:44:40.381 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51707 1 80 1 2025-11-02 15:44:40.381 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39415 1 109 1 2025-11-02 15:40:43.081 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2528 1 2025-11-02 15:45:40.680 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48866 1 109 1 2025-11-02 15:45:40.680 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34109 1 80 1 2025-11-02 15:45:40.671 00:00:00.000 UDP 28.104.0.1:48866 -> 198.28.0.2:53 1 64 1 2025-11-02 15:45:40.670 00:00:00.000 UDP 28.104.0.1:34109 -> 198.28.0.2:53 1 64 1 2025-11-02 15:41:00.417 00:05:51.211 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-02 15:41:00.342 00:06:00.163 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-02 15:46:40.986 00:00:00.000 UDP 28.104.0.1:57545 -> 198.28.0.2:53 1 64 1 2025-11-02 15:46:40.986 00:00:00.000 UDP 28.104.0.1:49282 -> 198.28.0.2:53 1 64 1 2025-11-02 15:46:41.030 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-02 15:46:40.997 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49282 1 80 1 2025-11-02 15:46:40.997 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57545 1 109 1 2025-11-02 15:42:51.637 00:05:08.707 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-02 15:47:41.285 00:00:00.000 UDP 28.104.0.1:55328 -> 198.28.0.2:53 1 64 1 2025-11-02 15:47:41.285 00:00:00.000 UDP 28.104.0.1:49325 -> 198.28.0.2:53 1 64 1 2025-11-02 15:47:41.296 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49325 1 109 1 2025-11-02 15:47:41.296 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55328 1 80 1 2025-11-02 15:43:51.676 00:05:08.732 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-02 15:48:41.586 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35056 1 80 1 2025-11-02 15:48:41.586 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57737 1 109 1 2025-11-02 15:48:41.575 00:00:00.000 UDP 28.104.0.1:57737 -> 198.28.0.2:53 1 64 1 2025-11-02 15:48:41.575 00:00:00.000 UDP 28.104.0.1:35056 -> 198.28.0.2:53 1 64 1 2025-11-02 15:44:00.342 00:06:00.122 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-02 15:49:41.867 00:00:00.000 UDP 28.104.0.1:56736 -> 198.28.0.2:53 1 64 1 2025-11-02 15:49:41.867 00:00:00.000 UDP 28.104.0.1:39338 -> 198.28.0.2:53 1 64 1 2025-11-02 15:49:41.879 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39338 1 80 1 2025-11-02 15:49:41.879 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56736 1 109 1 2025-11-02 15:45:51.629 00:05:08.734 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-02 15:46:03.086 00:05:10.584 OSPF 28.0.2.1:0 -> 224.0.0.5:0 42 3060 1 2025-11-02 15:50:42.204 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50442 1 109 1 2025-11-02 15:50:42.205 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35742 1 80 1 2025-11-02 15:50:42.194 00:00:00.000 UDP 28.104.0.1:35742 -> 198.28.0.2:53 1 64 1 2025-11-02 15:50:42.194 00:00:00.000 UDP 28.104.0.1:50442 -> 198.28.0.2:53 1 64 1 2025-11-02 15:51:41.358 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-02 15:51:42.496 00:00:00.000 UDP 28.104.0.1:48055 -> 198.28.0.2:53 1 64 1 2025-11-02 15:51:42.496 00:00:00.000 UDP 28.104.0.1:57253 -> 198.28.0.2:53 1 64 1 2025-11-02 15:51:42.506 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57253 1 109 1 2025-11-02 15:51:42.506 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48055 1 80 1 2025-11-02 15:47:00.417 00:05:51.211 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-02 15:52:42.818 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39460 1 109 1 2025-11-02 15:52:42.818 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44647 1 80 1 2025-11-02 15:52:42.808 00:00:00.000 UDP 28.104.0.1:39460 -> 198.28.0.2:53 1 64 1 2025-11-02 15:52:42.808 00:00:00.000 UDP 28.104.0.1:44647 -> 198.28.0.2:53 1 64 1 2025-11-02 15:48:00.345 00:06:00.161 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-02 15:48:51.638 00:05:08.714 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-02 15:53:43.103 00:00:00.000 UDP 28.104.0.1:60332 -> 198.28.0.2:53 1 64 1 2025-11-02 15:53:43.103 00:00:00.000 UDP 28.104.0.1:56166 -> 198.28.0.2:53 1 64 1 2025-11-02 15:53:43.112 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60332 1 109 1 2025-11-02 15:53:43.112 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56166 1 80 1 2025-11-02 15:49:51.678 00:05:08.731 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-02 15:54:43.362 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55393 1 109 1 2025-11-02 15:54:43.362 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41827 1 80 1 2025-11-02 15:54:43.352 00:00:00.000 UDP 28.104.0.1:41827 -> 198.28.0.2:53 1 64 1 2025-11-02 15:54:43.352 00:00:00.000 UDP 28.104.0.1:55393 -> 198.28.0.2:53 1 64 1 2025-11-02 15:51:23.091 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2648 1 2025-11-02 15:55:43.695 00:00:00.000 UDP 28.104.0.1:39278 -> 198.28.0.2:53 1 64 1 2025-11-02 15:55:43.695 00:00:00.000 UDP 28.104.0.1:44867 -> 198.28.0.2:53 1 64 1 2025-11-02 15:55:43.704 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44867 1 80 1 2025-11-02 15:55:43.704 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39278 1 109 1 2025-11-02 15:51:51.628 00:05:08.734 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-02 15:51:00.352 00:06:00.114 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-02 15:56:41.348 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-02 15:56:43.995 00:00:00.000 UDP 28.104.0.1:37220 -> 198.28.0.2:53 1 64 1 2025-11-02 15:56:43.996 00:00:00.000 UDP 28.104.0.1:44696 -> 198.28.0.2:53 1 64 1 2025-11-02 15:56:44.006 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37220 1 109 1 2025-11-02 15:56:44.006 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44696 1 80 1 2025-11-02 15:57:44.322 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55765 1 109 1 2025-11-02 15:57:44.322 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49956 1 80 1 2025-11-02 15:57:44.312 00:00:00.000 UDP 28.104.0.1:55765 -> 198.28.0.2:53 1 64 1 2025-11-02 15:57:44.312 00:00:00.000 UDP 28.104.0.1:49956 -> 198.28.0.2:53 1 64 1 2025-11-02 15:53:00.419 00:05:51.211 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-02 15:58:44.617 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54024 1 80 1 2025-11-02 15:58:44.616 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54184 1 109 1 2025-11-02 15:58:44.605 00:00:00.000 UDP 28.104.0.1:54184 -> 198.28.0.2:53 1 64 1 2025-11-02 15:58:44.605 00:00:00.000 UDP 28.104.0.1:54024 -> 198.28.0.2:53 1 64 1 Summary: total flows: 320, total bytes: 96097, total packets: 1418, avg bps: 200, avg pps: 0, avg bpp: 67 Time window: 2025-11-02 14:54:51 - 2025-11-02 15:58:51 Total flows processed: 320, passed: 320, Blocks skipped: 0, Bytes read: 33344 Sys: 0.0034s User: 0.0034s Wall: 0.0036s flows/second: 89813.8 Runtime: 0.0036s