Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-03 01:54:51.879 00:05:08.667 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-03 01:59:27.248 00:00:00.000 UDP 28.104.0.1:46345 -> 198.28.0.2:53 1 64 1 2025-11-03 01:59:27.249 00:00:00.000 UDP 28.104.0.1:41534 -> 198.28.0.2:53 1 64 1 2025-11-03 01:59:27.258 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41534 1 109 1 2025-11-03 01:59:27.257 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46345 1 80 1 2025-11-03 01:55:51.918 00:05:08.717 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-03 02:00:27.550 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38518 1 80 1 2025-11-03 02:00:27.550 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35748 1 109 1 2025-11-03 02:00:27.540 00:00:00.000 UDP 28.104.0.1:35748 -> 198.28.0.2:53 1 64 1 2025-11-03 02:00:27.540 00:00:00.000 UDP 28.104.0.1:38518 -> 198.28.0.2:53 1 64 1 2025-11-03 02:01:27.909 00:00:00.000 UDP 28.104.0.1:40941 -> 198.28.0.2:53 1 64 1 2025-11-03 02:01:27.909 00:00:00.000 UDP 28.104.0.1:58452 -> 198.28.0.2:53 1 64 1 2025-11-03 02:01:27.919 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40941 1 80 1 2025-11-03 02:01:27.919 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58452 1 109 1 2025-11-03 02:01:53.445 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-03 01:57:51.868 00:05:08.688 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-03 01:57:00.545 00:06:00.144 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-03 02:02:28.182 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36220 1 109 1 2025-11-03 02:02:28.181 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45659 1 80 1 2025-11-03 02:02:28.171 00:00:00.000 UDP 28.104.0.1:36220 -> 198.28.0.2:53 1 64 1 2025-11-03 02:02:28.171 00:00:00.000 UDP 28.104.0.1:45659 -> 198.28.0.2:53 1 64 1 2025-11-03 01:58:33.958 00:05:10.011 OSPF 28.0.2.1:0 -> 224.0.0.5:0 42 3008 1 2025-11-03 02:03:28.521 00:00:00.000 UDP 28.104.0.1:45711 -> 198.28.0.2:53 1 64 1 2025-11-03 02:03:28.521 00:00:00.000 UDP 28.104.0.1:39257 -> 198.28.0.2:53 1 64 1 2025-11-03 02:03:28.531 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45711 1 109 1 2025-11-03 02:03:28.532 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39257 1 80 1 2025-11-03 01:59:00.643 00:05:51.227 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-03 02:04:28.870 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59049 1 80 1 2025-11-03 02:04:28.870 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50142 1 109 1 2025-11-03 02:04:28.862 00:00:00.000 UDP 28.104.0.1:59049 -> 198.28.0.2:53 1 64 1 2025-11-03 02:04:28.862 00:00:00.000 UDP 28.104.0.1:50142 -> 198.28.0.2:53 1 64 1 2025-11-03 02:00:51.879 00:05:08.667 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-03 02:00:00.545 00:06:00.124 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-03 02:05:29.183 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55493 1 109 1 2025-11-03 02:05:29.183 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41533 1 80 1 2025-11-03 02:05:29.173 00:00:00.000 UDP 28.104.0.1:55493 -> 198.28.0.2:53 1 64 1 2025-11-03 02:05:29.173 00:00:00.000 UDP 28.104.0.1:41533 -> 198.28.0.2:53 1 64 1 2025-11-03 02:01:51.920 00:05:08.718 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-03 02:06:29.476 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37965 1 80 1 2025-11-03 02:06:29.476 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52603 1 109 1 2025-11-03 02:06:29.465 00:00:00.000 UDP 28.104.0.1:37965 -> 198.28.0.2:53 1 64 1 2025-11-03 02:06:29.464 00:00:00.000 UDP 28.104.0.1:52603 -> 198.28.0.2:53 1 64 1 2025-11-03 02:06:53.659 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-03 02:07:29.760 00:00:00.000 UDP 28.104.0.1:44174 -> 198.28.0.2:53 1 64 1 2025-11-03 02:07:29.760 00:00:00.000 UDP 28.104.0.1:46982 -> 198.28.0.2:53 1 64 1 2025-11-03 02:07:29.770 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44174 1 109 1 2025-11-03 02:07:29.770 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46982 1 80 1 2025-11-03 02:03:51.871 00:05:08.688 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-03 02:03:53.971 00:05:10.010 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2528 1 2025-11-03 02:08:30.086 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47175 1 109 1 2025-11-03 02:08:30.085 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44745 1 80 1 2025-11-03 02:08:30.075 00:00:00.000 UDP 28.104.0.1:47175 -> 198.28.0.2:53 1 64 1 2025-11-03 02:08:30.075 00:00:00.000 UDP 28.104.0.1:44745 -> 198.28.0.2:53 1 64 1 2025-11-03 02:04:00.548 00:06:00.144 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-03 02:09:30.573 00:00:00.000 UDP 28.104.0.1:59344 -> 198.28.0.2:53 1 64 1 2025-11-03 02:09:30.573 00:00:00.000 UDP 28.104.0.1:50047 -> 198.28.0.2:53 1 64 1 2025-11-03 02:09:30.584 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59344 1 109 1 2025-11-03 02:09:30.584 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50047 1 80 1 2025-11-03 02:05:00.646 00:05:51.225 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-03 02:10:30.874 00:00:00.000 UDP 28.104.0.1:45497 -> 198.28.0.2:53 1 64 1 2025-11-03 02:10:30.874 00:00:00.000 UDP 28.104.0.1:43063 -> 198.28.0.2:53 1 64 1 2025-11-03 02:10:30.886 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43063 1 80 1 2025-11-03 02:10:30.886 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45497 1 109 1 2025-11-03 02:06:51.881 00:05:08.667 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-03 02:11:31.149 00:00:00.000 UDP 28.104.0.1:40235 -> 198.28.0.2:53 1 64 1 2025-11-03 02:11:31.149 00:00:00.000 UDP 28.104.0.1:51420 -> 198.28.0.2:53 1 64 1 2025-11-03 02:11:31.160 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51420 1 109 1 2025-11-03 02:11:31.160 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40235 1 80 1 2025-11-03 02:11:53.570 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-03 02:07:51.920 00:05:08.717 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-03 02:07:00.546 00:06:00.125 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-03 02:12:31.446 00:00:00.000 UDP 28.104.0.1:47917 -> 198.28.0.2:53 1 64 1 2025-11-03 02:12:31.446 00:00:00.000 UDP 28.104.0.1:53584 -> 198.28.0.2:53 1 64 1 2025-11-03 02:12:31.457 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53584 1 80 1 2025-11-03 02:12:31.458 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47917 1 109 1 2025-11-03 02:09:13.980 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 34 2320 1 2025-11-03 02:13:31.759 00:00:00.000 UDP 28.104.0.1:55775 -> 198.28.0.2:53 1 64 1 2025-11-03 02:13:31.759 00:00:00.000 UDP 28.104.0.1:50198 -> 198.28.0.2:53 1 64 1 2025-11-03 02:13:31.769 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50198 1 109 1 2025-11-03 02:13:31.769 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55775 1 80 1 2025-11-03 02:09:51.871 00:05:08.688 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-03 02:14:32.055 00:00:00.000 UDP 28.104.0.1:57364 -> 198.28.0.2:53 1 64 1 2025-11-03 02:14:32.055 00:00:00.000 UDP 28.104.0.1:39367 -> 198.28.0.2:53 1 64 1 2025-11-03 02:14:32.065 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57364 1 109 1 2025-11-03 02:14:32.065 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39367 1 80 1 2025-11-03 02:15:32.357 00:00:00.000 UDP 28.104.0.1:39482 -> 198.28.0.2:53 1 64 1 2025-11-03 02:15:32.358 00:00:00.000 UDP 28.104.0.1:41519 -> 198.28.0.2:53 1 64 1 2025-11-03 02:15:32.368 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41519 1 80 1 2025-11-03 02:15:32.368 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39482 1 109 1 2025-11-03 02:11:00.648 00:05:51.227 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-03 02:11:00.549 00:06:00.149 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-03 02:16:32.657 00:00:00.000 UDP 28.104.0.1:51561 -> 198.28.0.2:53 1 64 1 2025-11-03 02:16:32.658 00:00:00.000 UDP 28.104.0.1:53055 -> 198.28.0.2:53 1 64 1 2025-11-03 02:16:32.667 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51561 1 80 1 2025-11-03 02:16:32.668 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53055 1 109 1 2025-11-03 02:16:53.660 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-03 02:12:51.883 00:05:08.667 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-03 02:17:32.977 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46770 1 80 1 2025-11-03 02:17:32.977 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39589 1 109 1 2025-11-03 02:17:32.967 00:00:00.000 UDP 28.104.0.1:46770 -> 198.28.0.2:53 1 64 1 2025-11-03 02:17:32.966 00:00:00.000 UDP 28.104.0.1:39589 -> 198.28.0.2:53 1 64 1 2025-11-03 02:13:51.923 00:05:08.716 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-03 02:18:33.265 00:00:00.000 UDP 28.104.0.1:51856 -> 198.28.0.2:53 1 64 1 2025-11-03 02:18:33.265 00:00:00.000 UDP 28.104.0.1:52416 -> 198.28.0.2:53 1 64 1 2025-11-03 02:18:33.275 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52416 1 109 1 2025-11-03 02:18:33.275 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51856 1 80 1 2025-11-03 02:14:33.984 00:05:10.009 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2836 1 2025-11-03 02:14:00.548 00:06:00.126 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-03 02:19:33.555 00:00:00.000 UDP 28.104.0.1:34972 -> 198.28.0.2:53 1 64 1 2025-11-03 02:19:33.555 00:00:00.000 UDP 28.104.0.1:57122 -> 198.28.0.2:53 1 64 1 2025-11-03 02:19:33.565 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57122 1 109 1 2025-11-03 02:19:33.565 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34972 1 80 1 2025-11-03 02:15:51.874 00:05:08.687 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-03 02:20:33.857 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35806 1 109 1 2025-11-03 02:20:33.857 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55047 1 80 1 2025-11-03 02:20:33.846 00:00:00.000 UDP 28.104.0.1:35806 -> 198.28.0.2:53 1 64 1 2025-11-03 02:20:33.846 00:00:00.000 UDP 28.104.0.1:55047 -> 198.28.0.2:53 1 64 1 2025-11-03 02:21:34.148 00:00:00.000 UDP 28.104.0.1:54192 -> 198.28.0.2:53 1 64 1 2025-11-03 02:21:34.148 00:00:00.000 UDP 28.104.0.1:52588 -> 198.28.0.2:53 1 64 1 2025-11-03 02:21:34.159 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52588 1 80 1 2025-11-03 02:21:34.159 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54192 1 109 1 2025-11-03 02:21:53.903 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-03 02:17:00.649 00:05:51.228 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-03 02:22:34.438 00:00:00.000 UDP 28.104.0.1:53411 -> 198.28.0.2:53 1 64 1 2025-11-03 02:22:34.438 00:00:00.000 UDP 28.104.0.1:33498 -> 198.28.0.2:53 1 64 1 2025-11-03 02:22:34.449 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33498 1 109 1 2025-11-03 02:22:34.449 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53411 1 80 1 2025-11-03 02:18:00.549 00:06:00.146 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-03 02:18:51.885 00:05:08.666 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-03 02:23:34.746 00:00:00.000 UDP 28.104.0.1:49562 -> 198.28.0.2:53 1 64 1 2025-11-03 02:23:34.746 00:00:00.000 UDP 28.104.0.1:33607 -> 198.28.0.2:53 1 64 1 2025-11-03 02:23:34.757 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33607 1 109 1 2025-11-03 02:23:34.757 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49562 1 80 1 2025-11-03 02:19:51.925 00:05:08.715 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-03 02:19:53.993 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2872 1 2025-11-03 02:24:35.052 00:00:00.000 UDP 28.104.0.1:36529 -> 198.28.0.2:53 1 64 1 2025-11-03 02:24:35.052 00:00:00.000 UDP 28.104.0.1:52042 -> 198.28.0.2:53 1 64 1 2025-11-03 02:24:35.061 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52042 1 109 1 2025-11-03 02:24:35.061 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36529 1 80 1 2025-11-03 02:25:35.304 00:00:00.000 UDP 28.104.0.1:56098 -> 198.28.0.2:53 1 64 1 2025-11-03 02:25:35.304 00:00:00.000 UDP 28.104.0.1:51449 -> 198.28.0.2:53 1 64 1 2025-11-03 02:25:35.315 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56098 1 80 1 2025-11-03 02:25:35.316 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51449 1 109 1 2025-11-03 02:21:51.876 00:05:08.687 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-03 02:21:00.550 00:06:00.126 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-03 02:26:35.586 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37441 1 109 1 2025-11-03 02:26:35.586 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33050 1 80 1 2025-11-03 02:26:35.575 00:00:00.000 UDP 28.104.0.1:33050 -> 198.28.0.2:53 1 64 1 2025-11-03 02:26:35.575 00:00:00.000 UDP 28.104.0.1:37441 -> 198.28.0.2:53 1 64 1 2025-11-03 02:26:54.029 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-03 02:27:35.880 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37054 1 109 1 2025-11-03 02:27:35.880 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41839 1 80 1 2025-11-03 02:27:35.871 00:00:00.000 UDP 28.104.0.1:37054 -> 198.28.0.2:53 1 64 1 2025-11-03 02:27:35.871 00:00:00.000 UDP 28.104.0.1:41839 -> 198.28.0.2:53 1 64 1 2025-11-03 02:23:00.651 00:05:51.228 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-03 02:28:36.138 00:00:00.000 UDP 28.104.0.1:41921 -> 198.28.0.2:53 1 64 1 2025-11-03 02:28:36.139 00:00:00.000 UDP 28.104.0.1:50782 -> 198.28.0.2:53 1 64 1 2025-11-03 02:28:36.150 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50782 1 109 1 2025-11-03 02:28:36.149 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41921 1 80 1 2025-11-03 02:24:51.887 00:05:08.666 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-03 02:25:13.997 00:05:00.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 42 3156 1 2025-11-03 02:29:36.438 00:00:00.000 UDP 28.104.0.1:32908 -> 198.28.0.2:53 1 64 1 2025-11-03 02:29:36.438 00:00:00.000 UDP 28.104.0.1:42910 -> 198.28.0.2:53 1 64 1 2025-11-03 02:29:36.448 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32908 1 80 1 2025-11-03 02:29:36.448 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42910 1 109 1 2025-11-03 02:25:51.928 00:05:08.714 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-03 02:25:00.552 00:06:00.148 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-03 02:30:36.743 00:00:00.000 UDP 28.104.0.1:40449 -> 198.28.0.2:53 1 64 1 2025-11-03 02:30:36.743 00:00:00.000 UDP 28.104.0.1:35025 -> 198.28.0.2:53 1 64 1 2025-11-03 02:30:36.754 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35025 1 109 1 2025-11-03 02:30:36.753 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40449 1 80 1 2025-11-03 02:31:37.119 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40539 1 80 1 2025-11-03 02:31:37.119 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37774 1 109 1 2025-11-03 02:31:37.109 00:00:00.000 UDP 28.104.0.1:37774 -> 198.28.0.2:53 1 64 1 2025-11-03 02:31:37.109 00:00:00.000 UDP 28.104.0.1:40539 -> 198.28.0.2:53 1 64 1 2025-11-03 02:31:54.178 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-03 02:27:51.878 00:05:08.686 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-03 02:32:37.421 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53483 1 80 1 2025-11-03 02:32:37.421 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33287 1 109 1 2025-11-03 02:32:37.411 00:00:00.000 UDP 28.104.0.1:33287 -> 198.28.0.2:53 1 64 1 2025-11-03 02:32:37.411 00:00:00.000 UDP 28.104.0.1:53483 -> 198.28.0.2:53 1 64 1 2025-11-03 02:28:00.553 00:06:00.125 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-03 02:33:37.720 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38255 1 109 1 2025-11-03 02:33:37.720 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50460 1 80 1 2025-11-03 02:33:37.709 00:00:00.000 UDP 28.104.0.1:38255 -> 198.28.0.2:53 1 64 1 2025-11-03 02:33:37.709 00:00:00.000 UDP 28.104.0.1:50460 -> 198.28.0.2:53 1 64 1 2025-11-03 02:29:00.651 00:05:51.228 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-03 02:30:24.001 00:05:10.002 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2400 1 2025-11-03 02:34:38.032 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39254 1 109 1 2025-11-03 02:34:38.023 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35755 1 80 1 2025-11-03 02:34:38.019 00:00:00.000 UDP 28.104.0.1:39254 -> 198.28.0.2:53 1 64 1 2025-11-03 02:34:38.009 00:00:00.000 UDP 28.104.0.1:35755 -> 198.28.0.2:53 1 64 1 2025-11-03 02:30:51.888 00:05:08.666 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-03 02:35:38.326 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44380 1 80 1 2025-11-03 02:35:38.326 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35911 1 109 1 2025-11-03 02:35:38.316 00:00:00.000 UDP 28.104.0.1:35911 -> 198.28.0.2:53 1 64 1 2025-11-03 02:35:38.316 00:00:00.000 UDP 28.104.0.1:44380 -> 198.28.0.2:53 1 64 1 2025-11-03 02:31:51.928 00:05:08.715 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-03 02:36:38.612 00:00:00.000 UDP 28.104.0.1:33630 -> 198.28.0.2:53 1 64 1 2025-11-03 02:36:38.612 00:00:00.000 UDP 28.104.0.1:42832 -> 198.28.0.2:53 1 64 1 2025-11-03 02:36:38.623 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33630 1 109 1 2025-11-03 02:36:38.623 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42832 1 80 1 2025-11-03 02:36:54.066 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-03 02:32:00.554 00:06:00.149 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-03 02:37:38.860 00:00:00.000 UDP 28.104.0.1:46804 -> 198.28.0.2:53 1 64 1 2025-11-03 02:37:38.860 00:00:00.000 UDP 28.104.0.1:36268 -> 198.28.0.2:53 1 64 1 2025-11-03 02:37:38.870 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36268 1 80 1 2025-11-03 02:37:38.870 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46804 1 109 1 2025-11-03 02:33:51.880 00:05:08.686 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-03 02:38:39.177 00:00:00.000 UDP 28.104.0.1:58078 -> 198.28.0.2:53 1 64 1 2025-11-03 02:38:39.177 00:00:00.000 UDP 28.104.0.1:34379 -> 198.28.0.2:53 1 64 1 2025-11-03 02:38:39.188 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58078 1 109 1 2025-11-03 02:38:39.189 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34379 1 80 1 2025-11-03 02:39:39.490 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46418 1 80 1 2025-11-03 02:39:39.492 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53403 1 109 1 2025-11-03 02:39:39.481 00:00:00.000 UDP 28.104.0.1:53403 -> 198.28.0.2:53 1 64 1 2025-11-03 02:39:39.481 00:00:00.000 UDP 28.104.0.1:46418 -> 198.28.0.2:53 1 64 1 2025-11-03 02:35:00.654 00:05:51.227 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-03 02:35:44.004 00:05:10.040 OSPF 28.0.2.1:0 -> 224.0.0.5:0 34 2372 1 2025-11-03 02:35:00.555 00:06:00.124 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-03 02:40:39.779 00:00:00.000 UDP 28.104.0.1:53539 -> 198.28.0.2:53 1 64 1 2025-11-03 02:40:39.779 00:00:00.000 UDP 28.104.0.1:41898 -> 198.28.0.2:53 1 64 1 2025-11-03 02:40:39.789 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53539 1 109 1 2025-11-03 02:40:39.789 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41898 1 80 1 2025-11-03 02:36:51.890 00:05:08.665 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-03 02:41:40.079 00:00:00.000 UDP 28.104.0.1:46404 -> 198.28.0.2:53 1 64 1 2025-11-03 02:41:40.078 00:00:00.000 UDP 28.104.0.1:46111 -> 198.28.0.2:53 1 64 1 2025-11-03 02:41:40.088 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46404 1 80 1 2025-11-03 02:41:40.088 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46111 1 109 1 2025-11-03 02:41:54.363 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-03 02:37:51.931 00:05:08.715 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-03 02:42:40.376 00:00:00.000 UDP 28.104.0.1:56652 -> 198.28.0.2:53 1 64 1 2025-11-03 02:42:40.376 00:00:00.000 UDP 28.104.0.1:52048 -> 198.28.0.2:53 1 64 1 2025-11-03 02:42:40.385 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52048 1 80 1 2025-11-03 02:42:40.385 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56652 1 109 1 2025-11-03 02:43:40.680 00:00:00.000 UDP 28.104.0.1:48269 -> 198.28.0.2:53 1 64 1 2025-11-03 02:43:40.680 00:00:00.000 UDP 28.104.0.1:60495 -> 198.28.0.2:53 1 64 1 2025-11-03 02:43:40.690 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60495 1 109 1 2025-11-03 02:43:40.690 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48269 1 80 1 2025-11-03 02:39:00.554 00:06:00.151 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-03 02:39:51.881 00:05:08.685 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-03 02:44:40.944 00:00:00.000 UDP 28.104.0.1:58908 -> 198.28.0.2:53 1 64 1 2025-11-03 02:44:40.944 00:00:00.000 UDP 28.104.0.1:50213 -> 198.28.0.2:53 1 64 1 2025-11-03 02:44:40.954 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50213 1 109 1 2025-11-03 02:44:40.953 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58908 1 80 1 2025-11-03 02:41:04.043 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2592 1 2025-11-03 02:45:41.253 00:00:00.000 UDP 28.104.0.1:49143 -> 198.28.0.2:53 1 64 1 2025-11-03 02:45:41.253 00:00:00.000 UDP 28.104.0.1:38676 -> 198.28.0.2:53 1 64 1 2025-11-03 02:45:41.263 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49143 1 80 1 2025-11-03 02:45:41.263 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38676 1 109 1 2025-11-03 02:41:00.654 00:05:51.228 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-03 02:46:41.598 00:00:00.000 UDP 28.104.0.1:57444 -> 198.28.0.2:53 1 64 1 2025-11-03 02:46:41.597 00:00:00.000 UDP 28.104.0.1:60037 -> 198.28.0.2:53 1 64 1 2025-11-03 02:46:41.610 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60037 1 109 1 2025-11-03 02:46:41.610 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57444 1 80 1 2025-11-03 02:46:54.449 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-03 02:42:51.890 00:05:08.665 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-03 02:42:00.555 00:06:00.125 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-03 02:47:41.894 00:00:00.000 UDP 28.104.0.1:57936 -> 198.28.0.2:53 1 64 1 2025-11-03 02:47:41.894 00:00:00.000 UDP 28.104.0.1:42439 -> 198.28.0.2:53 1 64 1 2025-11-03 02:47:41.904 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57936 1 80 1 2025-11-03 02:47:41.904 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42439 1 109 1 2025-11-03 02:43:51.931 00:05:08.715 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-03 02:48:42.200 00:00:00.000 UDP 28.104.0.1:57712 -> 198.28.0.2:53 1 64 1 2025-11-03 02:48:42.200 00:00:00.000 UDP 28.104.0.1:42874 -> 198.28.0.2:53 1 64 1 2025-11-03 02:48:42.211 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57712 1 109 1 2025-11-03 02:48:42.211 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42874 1 80 1 2025-11-03 02:49:42.506 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46108 1 80 1 2025-11-03 02:49:42.506 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50232 1 109 1 2025-11-03 02:49:42.495 00:00:00.000 UDP 28.104.0.1:50232 -> 198.28.0.2:53 1 64 1 2025-11-03 02:49:42.495 00:00:00.000 UDP 28.104.0.1:46108 -> 198.28.0.2:53 1 64 1 2025-11-03 02:45:51.884 00:05:08.685 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-03 02:46:24.045 00:05:10.009 OSPF 28.0.2.1:0 -> 224.0.0.5:0 43 3164 1 2025-11-03 02:50:42.747 00:00:00.000 UDP 28.104.0.1:51740 -> 198.28.0.2:53 1 64 1 2025-11-03 02:50:42.748 00:00:00.000 UDP 28.104.0.1:35189 -> 198.28.0.2:53 1 64 1 2025-11-03 02:50:42.758 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51740 1 109 1 2025-11-03 02:50:42.758 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35189 1 80 1 2025-11-03 02:46:00.555 00:06:00.150 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-03 02:51:43.001 00:00:00.000 UDP 28.104.0.1:50282 -> 198.28.0.2:53 1 64 1 2025-11-03 02:51:43.001 00:00:00.000 UDP 28.104.0.1:52684 -> 198.28.0.2:53 1 64 1 2025-11-03 02:51:43.013 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52684 1 80 1 2025-11-03 02:51:43.011 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50282 1 109 1 2025-11-03 02:51:54.475 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-03 02:47:00.656 00:05:51.227 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-03 02:52:43.308 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48888 1 80 1 2025-11-03 02:52:43.308 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57610 1 109 1 2025-11-03 02:52:43.298 00:00:00.000 UDP 28.104.0.1:57610 -> 198.28.0.2:53 1 64 1 2025-11-03 02:52:43.298 00:00:00.000 UDP 28.104.0.1:48888 -> 198.28.0.2:53 1 64 1 2025-11-03 02:48:51.893 00:05:08.672 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-03 02:53:43.596 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45803 1 109 1 2025-11-03 02:53:43.596 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56480 1 80 1 2025-11-03 02:53:43.587 00:00:00.000 UDP 28.104.0.1:56480 -> 198.28.0.2:53 1 64 1 2025-11-03 02:53:43.587 00:00:00.000 UDP 28.104.0.1:45803 -> 198.28.0.2:53 1 64 1 2025-11-03 02:49:51.933 00:05:08.714 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-03 02:49:00.559 00:06:00.126 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-03 02:54:43.884 00:00:00.000 UDP 28.104.0.1:42255 -> 198.28.0.2:53 1 64 1 2025-11-03 02:54:43.884 00:00:00.000 UDP 28.104.0.1:45728 -> 198.28.0.2:53 1 64 1 2025-11-03 02:54:43.895 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45728 1 80 1 2025-11-03 02:54:43.895 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42255 1 109 1 2025-11-03 02:55:44.149 00:00:00.000 UDP 28.104.0.1:45685 -> 198.28.0.2:53 1 64 1 2025-11-03 02:55:44.149 00:00:00.000 UDP 28.104.0.1:53447 -> 198.28.0.2:53 1 64 1 2025-11-03 02:55:44.159 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53447 1 80 1 2025-11-03 02:55:44.160 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45685 1 109 1 2025-11-03 02:51:44.056 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 43 3060 1 2025-11-03 02:51:51.883 00:05:08.691 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-03 02:56:44.454 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60266 1 80 1 2025-11-03 02:56:44.454 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56262 1 109 1 2025-11-03 02:56:44.443 00:00:00.000 UDP 28.104.0.1:60266 -> 198.28.0.2:53 1 64 1 2025-11-03 02:56:44.443 00:00:00.000 UDP 28.104.0.1:56262 -> 198.28.0.2:53 1 64 1 2025-11-03 02:56:54.515 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-03 02:57:44.736 00:00:00.000 UDP 28.104.0.1:46325 -> 198.28.0.2:53 1 64 1 2025-11-03 02:57:44.736 00:00:00.000 UDP 28.104.0.1:43020 -> 198.28.0.2:53 1 64 1 2025-11-03 02:57:44.748 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46325 1 109 1 2025-11-03 02:57:44.749 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43020 1 80 1 2025-11-03 02:53:00.657 00:05:51.227 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-03 02:53:00.561 00:06:00.146 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-03 02:58:44.995 00:00:00.000 UDP 28.104.0.1:55382 -> 198.28.0.2:53 1 64 1 2025-11-03 02:58:44.996 00:00:00.000 UDP 28.104.0.1:45409 -> 198.28.0.2:53 1 64 1 2025-11-03 02:58:45.006 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55382 1 80 1 2025-11-03 02:58:45.006 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45409 1 109 1 Summary: total flows: 320, total bytes: 96509, total packets: 1420, avg bps: 200, avg pps: 0, avg bpp: 67 Time window: 2025-11-03 01:54:51 - 2025-11-03 02:59:00 Total flows processed: 320, passed: 320, Blocks skipped: 0, Bytes read: 33344 Sys: 0.0038s User: 0.0048s Wall: 0.0039s flows/second: 81324.4 Runtime: 0.0040s