Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-03 08:54:00.680 00:05:51.411 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-03 08:59:05.531 00:00:00.000 UDP 28.104.0.1:57904 -> 198.28.0.2:53 1 64 1 2025-11-03 08:59:05.531 00:00:00.000 UDP 28.104.0.1:60672 -> 198.28.0.2:53 1 64 1 2025-11-03 08:59:05.541 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60672 1 109 1 2025-11-03 08:59:05.541 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57904 1 80 1 2025-11-03 08:55:00.775 00:05:51.349 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-03 09:00:05.832 00:00:00.000 UDP 28.104.0.1:49220 -> 198.28.0.2:53 1 64 1 2025-11-03 09:00:05.832 00:00:00.000 UDP 28.104.0.1:36327 -> 198.28.0.2:53 1 64 1 2025-11-03 09:00:05.844 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36327 1 80 1 2025-11-03 09:00:05.844 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49220 1 109 1 2025-11-03 09:01:06.187 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55922 1 109 1 2025-11-03 09:01:06.187 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56546 1 80 1 2025-11-03 09:01:06.178 00:00:00.000 UDP 28.104.0.1:56546 -> 198.28.0.2:53 1 64 1 2025-11-03 09:01:06.178 00:00:00.000 UDP 28.104.0.1:55922 -> 198.28.0.2:53 1 64 1 2025-11-03 08:57:00.692 00:05:51.382 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-03 08:57:00.682 00:06:00.123 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-03 09:02:06.469 00:00:00.000 UDP 28.104.0.1:36578 -> 198.28.0.2:53 1 64 1 2025-11-03 09:02:06.469 00:00:00.000 UDP 28.104.0.1:55529 -> 198.28.0.2:53 1 64 1 2025-11-03 09:02:01.927 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-03 09:02:06.480 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55529 1 109 1 2025-11-03 09:02:06.480 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36578 1 80 1 2025-11-03 09:03:06.771 00:00:00.000 UDP 28.104.0.1:37802 -> 198.28.0.2:53 1 64 1 2025-11-03 09:03:06.772 00:00:00.000 UDP 28.104.0.1:45709 -> 198.28.0.2:53 1 64 1 2025-11-03 09:03:06.781 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37802 1 80 1 2025-11-03 09:03:06.781 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45709 1 109 1 2025-11-03 08:59:24.487 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2852 1 2025-11-03 08:59:00.787 00:05:51.288 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-03 09:04:07.070 00:00:00.000 UDP 28.104.0.1:50231 -> 198.28.0.2:53 1 64 1 2025-11-03 09:04:07.070 00:00:00.000 UDP 28.104.0.1:33426 -> 198.28.0.2:53 1 64 1 2025-11-03 09:04:07.081 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33426 1 80 1 2025-11-03 09:04:07.081 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50231 1 109 1 2025-11-03 09:00:00.682 00:05:51.403 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-03 09:00:00.683 00:06:00.119 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-03 09:05:07.368 00:00:00.000 UDP 28.104.0.1:40072 -> 198.28.0.2:53 1 64 1 2025-11-03 09:05:07.368 00:00:00.000 UDP 28.104.0.1:33525 -> 198.28.0.2:53 1 64 1 2025-11-03 09:05:07.380 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33525 1 109 1 2025-11-03 09:05:07.379 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40072 1 80 1 2025-11-03 09:01:00.777 00:05:51.349 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-03 09:06:07.676 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33541 1 109 1 2025-11-03 09:06:07.675 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58024 1 80 1 2025-11-03 09:06:07.665 00:00:00.000 UDP 28.104.0.1:33541 -> 198.28.0.2:53 1 64 1 2025-11-03 09:06:07.665 00:00:00.000 UDP 28.104.0.1:58024 -> 198.28.0.2:53 1 64 1 2025-11-03 09:07:01.893 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-03 09:07:07.976 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33412 1 80 1 2025-11-03 09:07:07.976 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56833 1 109 1 2025-11-03 09:07:07.966 00:00:00.000 UDP 28.104.0.1:56833 -> 198.28.0.2:53 1 64 1 2025-11-03 09:07:07.966 00:00:00.000 UDP 28.104.0.1:33412 -> 198.28.0.2:53 1 64 1 2025-11-03 09:03:00.692 00:05:51.384 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-03 09:08:08.261 00:00:00.000 UDP 28.104.0.1:59178 -> 198.28.0.2:53 1 64 1 2025-11-03 09:08:08.260 00:00:00.000 UDP 28.104.0.1:53264 -> 198.28.0.2:53 1 64 1 2025-11-03 09:08:08.271 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59178 1 109 1 2025-11-03 09:08:08.271 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53264 1 80 1 2025-11-03 09:04:44.496 00:05:10.591 OSPF 28.0.2.1:0 -> 224.0.0.5:0 44 3124 1 2025-11-03 09:04:00.683 00:06:00.125 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-03 09:09:08.563 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41159 1 109 1 2025-11-03 09:09:08.563 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54835 1 80 1 2025-11-03 09:09:08.553 00:00:00.000 UDP 28.104.0.1:54835 -> 198.28.0.2:53 1 64 1 2025-11-03 09:09:08.553 00:00:00.000 UDP 28.104.0.1:41159 -> 198.28.0.2:53 1 64 1 2025-11-03 09:05:00.788 00:05:51.296 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-03 09:10:08.857 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50670 1 109 1 2025-11-03 09:10:08.857 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36456 1 80 1 2025-11-03 09:10:08.847 00:00:00.000 UDP 28.104.0.1:50670 -> 198.28.0.2:53 1 64 1 2025-11-03 09:10:08.847 00:00:00.000 UDP 28.104.0.1:36456 -> 198.28.0.2:53 1 64 1 2025-11-03 09:06:00.682 00:05:51.411 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-03 09:11:09.117 00:00:00.000 UDP 28.104.0.1:45234 -> 198.28.0.2:53 1 64 1 2025-11-03 09:11:09.117 00:00:00.000 UDP 28.104.0.1:45505 -> 198.28.0.2:53 1 64 1 2025-11-03 09:11:09.128 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45505 1 80 1 2025-11-03 09:11:09.128 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45234 1 109 1 2025-11-03 09:07:00.778 00:05:51.356 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-03 09:07:00.683 00:06:00.119 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-03 09:12:02.026 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-03 09:12:09.386 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36579 1 80 1 2025-11-03 09:12:09.383 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46639 1 109 1 2025-11-03 09:12:09.373 00:00:00.000 UDP 28.104.0.1:46639 -> 198.28.0.2:53 1 64 1 2025-11-03 09:12:09.374 00:00:00.000 UDP 28.104.0.1:36579 -> 198.28.0.2:53 1 64 1 2025-11-03 09:13:09.647 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55641 1 80 1 2025-11-03 09:13:09.647 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51001 1 109 1 2025-11-03 09:13:09.637 00:00:00.000 UDP 28.104.0.1:51001 -> 198.28.0.2:53 1 64 1 2025-11-03 09:13:09.636 00:00:00.000 UDP 28.104.0.1:55641 -> 198.28.0.2:53 1 64 1 2025-11-03 09:09:00.693 00:05:51.390 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-03 09:14:09.952 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47290 1 80 1 2025-11-03 09:14:09.952 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33192 1 109 1 2025-11-03 09:14:09.941 00:00:00.000 UDP 28.104.0.1:47290 -> 198.28.0.2:53 1 64 1 2025-11-03 09:14:09.941 00:00:00.000 UDP 28.104.0.1:33192 -> 198.28.0.2:53 1 64 1 2025-11-03 09:10:04.505 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2440 1 2025-11-03 09:15:10.238 00:00:00.000 UDP 28.104.0.1:47073 -> 198.28.0.2:53 1 64 1 2025-11-03 09:15:10.238 00:00:00.000 UDP 28.104.0.1:34862 -> 198.28.0.2:53 1 64 1 2025-11-03 09:15:10.249 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47073 1 80 1 2025-11-03 09:15:10.249 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34862 1 109 1 2025-11-03 09:11:00.790 00:05:51.297 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-03 09:11:00.683 00:06:00.126 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-03 09:16:10.534 00:00:00.000 UDP 28.104.0.1:60720 -> 198.28.0.2:53 1 64 1 2025-11-03 09:16:10.534 00:00:00.000 UDP 28.104.0.1:55958 -> 198.28.0.2:53 1 64 1 2025-11-03 09:16:10.544 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60720 1 109 1 2025-11-03 09:16:10.544 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55958 1 80 1 2025-11-03 09:12:00.685 00:05:51.411 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-03 09:17:02.948 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-03 09:17:10.787 00:00:00.000 UDP 28.104.0.1:41643 -> 198.28.0.2:53 1 64 1 2025-11-03 09:17:10.787 00:00:00.000 UDP 28.104.0.1:54336 -> 198.28.0.2:53 1 64 1 2025-11-03 09:17:10.797 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54336 1 109 1 2025-11-03 09:17:10.797 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41643 1 80 1 2025-11-03 09:13:00.779 00:05:51.357 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-03 09:18:11.102 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37766 1 109 1 2025-11-03 09:18:11.102 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57325 1 80 1 2025-11-03 09:18:11.092 00:00:00.000 UDP 28.104.0.1:57325 -> 198.28.0.2:53 1 64 1 2025-11-03 09:18:11.092 00:00:00.000 UDP 28.104.0.1:37766 -> 198.28.0.2:53 1 64 1 2025-11-03 09:14:00.685 00:06:00.119 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-03 09:19:11.384 00:00:00.000 UDP 28.104.0.1:51966 -> 198.28.0.2:53 1 64 1 2025-11-03 09:19:11.384 00:00:00.000 UDP 28.104.0.1:55282 -> 198.28.0.2:53 1 64 1 2025-11-03 09:19:11.394 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55282 1 80 1 2025-11-03 09:19:11.394 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51966 1 109 1 2025-11-03 09:15:24.510 00:05:00.760 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2540 1 2025-11-03 09:15:00.695 00:05:51.391 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-03 09:20:11.683 00:00:00.000 UDP 28.104.0.1:58159 -> 198.28.0.2:53 1 64 1 2025-11-03 09:20:11.683 00:00:00.000 UDP 28.104.0.1:54699 -> 198.28.0.2:53 1 64 1 2025-11-03 09:20:11.695 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58159 1 80 1 2025-11-03 09:20:11.695 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54699 1 109 1 2025-11-03 09:21:11.990 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39457 1 80 1 2025-11-03 09:21:11.990 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54435 1 109 1 2025-11-03 09:21:11.982 00:00:00.000 UDP 28.104.0.1:54435 -> 198.28.0.2:53 1 64 1 2025-11-03 09:21:11.982 00:00:00.000 UDP 28.104.0.1:39457 -> 198.28.0.2:53 1 64 1 2025-11-03 09:17:00.790 00:05:51.297 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-03 09:22:02.288 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-03 09:22:12.289 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41386 1 109 1 2025-11-03 09:22:12.289 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34248 1 80 1 2025-11-03 09:22:12.279 00:00:00.000 UDP 28.104.0.1:34248 -> 198.28.0.2:53 1 64 1 2025-11-03 09:22:12.278 00:00:00.000 UDP 28.104.0.1:41386 -> 198.28.0.2:53 1 64 1 2025-11-03 09:18:00.685 00:05:51.412 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-03 09:18:00.685 00:06:00.125 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-03 09:23:12.594 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58495 1 80 1 2025-11-03 09:23:12.590 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36641 1 109 1 2025-11-03 09:23:12.580 00:00:00.000 UDP 28.104.0.1:36641 -> 198.28.0.2:53 1 64 1 2025-11-03 09:23:12.580 00:00:00.000 UDP 28.104.0.1:58495 -> 198.28.0.2:53 1 64 1 2025-11-03 09:19:00.779 00:05:51.358 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-03 09:24:12.898 00:00:00.000 UDP 28.104.0.1:44693 -> 198.28.0.2:53 1 64 1 2025-11-03 09:24:12.898 00:00:00.000 UDP 28.104.0.1:60992 -> 198.28.0.2:53 1 64 1 2025-11-03 09:24:12.909 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44693 1 109 1 2025-11-03 09:24:12.909 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60992 1 80 1 2025-11-03 09:20:34.514 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2448 1 2025-11-03 09:25:13.217 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33908 1 109 1 2025-11-03 09:25:13.217 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58175 1 80 1 2025-11-03 09:25:13.206 00:00:00.000 UDP 28.104.0.1:58175 -> 198.28.0.2:53 1 64 1 2025-11-03 09:25:13.206 00:00:00.000 UDP 28.104.0.1:33908 -> 198.28.0.2:53 1 64 1 2025-11-03 09:21:00.695 00:05:51.392 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-03 09:21:00.686 00:06:00.122 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-03 09:26:13.464 00:00:00.000 UDP 28.104.0.1:40510 -> 198.28.0.2:53 1 64 1 2025-11-03 09:26:13.464 00:00:00.000 UDP 28.104.0.1:33087 -> 198.28.0.2:53 1 64 1 2025-11-03 09:26:13.474 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40510 1 109 1 2025-11-03 09:26:13.474 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33087 1 80 1 2025-11-03 09:27:02.398 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-03 09:27:13.759 00:00:00.000 UDP 28.104.0.1:45704 -> 198.28.0.2:53 1 64 1 2025-11-03 09:27:13.759 00:00:00.000 UDP 28.104.0.1:46252 -> 198.28.0.2:53 1 64 1 2025-11-03 09:27:13.770 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46252 1 80 1 2025-11-03 09:27:13.769 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45704 1 109 1 2025-11-03 09:23:00.789 00:05:51.298 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-03 09:28:14.079 00:00:00.000 UDP 28.104.0.1:41779 -> 198.28.0.2:53 1 64 1 2025-11-03 09:28:14.079 00:00:00.000 UDP 28.104.0.1:44309 -> 198.28.0.2:53 1 64 1 2025-11-03 09:28:14.089 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44309 1 80 1 2025-11-03 09:28:14.090 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41779 1 109 1 2025-11-03 09:24:00.686 00:05:51.411 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-03 09:29:14.389 00:00:00.000 UDP 28.104.0.1:48281 -> 198.28.0.2:53 1 64 1 2025-11-03 09:29:14.389 00:00:00.000 UDP 28.104.0.1:44332 -> 198.28.0.2:53 1 64 1 2025-11-03 09:29:14.400 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44332 1 109 1 2025-11-03 09:29:14.400 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48281 1 80 1 2025-11-03 09:25:00.780 00:05:51.357 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-03 09:25:00.687 00:06:00.124 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-03 09:25:54.519 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 43 3164 1 2025-11-03 09:30:14.681 00:00:00.000 UDP 28.104.0.1:34796 -> 198.28.0.2:53 1 64 1 2025-11-03 09:30:14.681 00:00:00.000 UDP 28.104.0.1:35410 -> 198.28.0.2:53 1 64 1 2025-11-03 09:30:14.692 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35410 1 80 1 2025-11-03 09:30:14.692 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34796 1 109 1 2025-11-03 09:31:14.992 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48304 1 109 1 2025-11-03 09:31:14.992 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39930 1 80 1 2025-11-03 09:31:14.983 00:00:00.000 UDP 28.104.0.1:39930 -> 198.28.0.2:53 1 64 1 2025-11-03 09:31:14.983 00:00:00.000 UDP 28.104.0.1:48304 -> 198.28.0.2:53 1 64 1 2025-11-03 09:27:00.698 00:05:51.393 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-03 09:32:02.396 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-03 09:32:15.287 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45171 1 109 1 2025-11-03 09:32:15.287 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37441 1 80 1 2025-11-03 09:32:15.276 00:00:00.000 UDP 28.104.0.1:37441 -> 198.28.0.2:53 1 64 1 2025-11-03 09:32:15.276 00:00:00.000 UDP 28.104.0.1:45171 -> 198.28.0.2:53 1 64 1 2025-11-03 09:28:00.688 00:06:00.127 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-03 09:33:15.582 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53092 1 109 1 2025-11-03 09:33:15.583 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53326 1 80 1 2025-11-03 09:33:15.571 00:00:00.000 UDP 28.104.0.1:53092 -> 198.28.0.2:53 1 64 1 2025-11-03 09:33:15.571 00:00:00.000 UDP 28.104.0.1:53326 -> 198.28.0.2:53 1 64 1 2025-11-03 09:29:00.791 00:05:51.300 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-03 09:34:15.864 00:00:00.000 UDP 28.104.0.1:44609 -> 198.28.0.2:53 1 64 1 2025-11-03 09:34:15.864 00:00:00.000 UDP 28.104.0.1:47249 -> 198.28.0.2:53 1 64 1 2025-11-03 09:34:15.875 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47249 1 80 1 2025-11-03 09:34:15.875 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44609 1 109 1 2025-11-03 09:30:00.689 00:05:51.411 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-03 09:35:16.141 00:00:00.000 UDP 28.104.0.1:33576 -> 198.28.0.2:53 1 64 1 2025-11-03 09:35:16.141 00:00:00.000 UDP 28.104.0.1:44205 -> 198.28.0.2:53 1 64 1 2025-11-03 09:35:16.151 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33576 1 109 1 2025-11-03 09:35:16.150 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44205 1 80 1 2025-11-03 09:31:14.522 00:05:10.002 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2772 1 2025-11-03 09:31:00.780 00:05:51.361 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-03 09:36:16.986 00:00:00.000 UDP 28.104.0.1:45893 -> 198.28.0.2:53 1 64 1 2025-11-03 09:36:16.986 00:00:00.000 UDP 28.104.0.1:60723 -> 198.28.0.2:53 1 64 1 2025-11-03 09:36:16.996 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45893 1 80 1 2025-11-03 09:36:16.996 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60723 1 109 1 2025-11-03 09:32:00.690 00:06:00.123 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-03 09:37:03.190 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-03 09:37:17.277 00:00:00.000 UDP 28.104.0.1:49068 -> 198.28.0.2:53 1 64 1 2025-11-03 09:37:17.277 00:00:00.000 UDP 28.104.0.1:33234 -> 198.28.0.2:53 1 64 1 2025-11-03 09:37:17.286 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49068 1 80 1 2025-11-03 09:37:17.286 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33234 1 109 1 2025-11-03 09:33:00.700 00:05:51.394 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-03 09:38:17.552 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47322 1 80 1 2025-11-03 09:38:17.552 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54473 1 109 1 2025-11-03 09:38:17.542 00:00:00.000 UDP 28.104.0.1:54473 -> 198.28.0.2:53 1 64 1 2025-11-03 09:38:17.542 00:00:00.000 UDP 28.104.0.1:47322 -> 198.28.0.2:53 1 64 1 2025-11-03 09:39:17.842 00:00:00.000 UDP 28.104.0.1:36336 -> 198.28.0.2:53 1 64 1 2025-11-03 09:39:17.842 00:00:00.000 UDP 28.104.0.1:54773 -> 198.28.0.2:53 1 64 1 2025-11-03 09:39:17.853 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36336 1 80 1 2025-11-03 09:39:17.853 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54773 1 109 1 2025-11-03 09:35:00.792 00:05:51.302 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-03 09:35:00.692 00:06:00.129 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-03 09:40:18.135 00:00:00.000 UDP 28.104.0.1:57224 -> 198.28.0.2:53 1 64 1 2025-11-03 09:40:18.134 00:00:00.000 UDP 28.104.0.1:33674 -> 198.28.0.2:53 1 64 1 2025-11-03 09:40:18.145 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33674 1 109 1 2025-11-03 09:40:18.145 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57224 1 80 1 2025-11-03 09:36:34.526 00:05:10.010 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2812 1 2025-11-03 09:36:00.691 00:05:51.414 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-03 09:41:18.439 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51429 1 80 1 2025-11-03 09:41:18.439 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43099 1 109 1 2025-11-03 09:41:18.429 00:00:00.000 UDP 28.104.0.1:51429 -> 198.28.0.2:53 1 64 1 2025-11-03 09:41:18.429 00:00:00.000 UDP 28.104.0.1:43099 -> 198.28.0.2:53 1 64 1 2025-11-03 09:37:00.782 00:05:51.363 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-03 09:42:02.717 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-03 09:42:18.729 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48813 1 80 1 2025-11-03 09:42:18.728 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46792 1 109 1 2025-11-03 09:42:18.717 00:00:00.000 UDP 28.104.0.1:48813 -> 198.28.0.2:53 1 64 1 2025-11-03 09:42:18.717 00:00:00.000 UDP 28.104.0.1:46792 -> 198.28.0.2:53 1 64 1 2025-11-03 09:43:19.022 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48613 1 80 1 2025-11-03 09:43:19.023 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59770 1 109 1 2025-11-03 09:43:19.008 00:00:00.000 UDP 28.104.0.1:48613 -> 198.28.0.2:53 1 64 1 2025-11-03 09:43:19.008 00:00:00.000 UDP 28.104.0.1:59770 -> 198.28.0.2:53 1 64 1 2025-11-03 09:39:00.702 00:05:51.393 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-03 09:39:00.691 00:06:00.123 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-03 09:44:19.325 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48981 1 80 1 2025-11-03 09:44:19.324 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39470 1 109 1 2025-11-03 09:44:19.314 00:00:00.000 UDP 28.104.0.1:48981 -> 198.28.0.2:53 1 64 1 2025-11-03 09:44:19.313 00:00:00.000 UDP 28.104.0.1:39470 -> 198.28.0.2:53 1 64 1 2025-11-03 09:45:20.073 00:00:00.000 UDP 28.104.0.1:48866 -> 198.28.0.2:53 1 64 1 2025-11-03 09:45:20.073 00:00:00.000 UDP 28.104.0.1:52208 -> 198.28.0.2:53 1 64 1 2025-11-03 09:45:20.084 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52208 1 80 1 2025-11-03 09:45:20.084 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48866 1 109 1 2025-11-03 09:41:00.794 00:05:51.301 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-03 09:41:54.535 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2436 1 2025-11-03 09:46:20.422 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40931 1 109 1 2025-11-03 09:46:20.422 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35782 1 80 1 2025-11-03 09:46:20.412 00:00:00.000 UDP 28.104.0.1:35782 -> 198.28.0.2:53 1 64 1 2025-11-03 09:46:20.412 00:00:00.000 UDP 28.104.0.1:40931 -> 198.28.0.2:53 1 64 1 2025-11-03 09:42:00.694 00:05:51.411 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-03 09:42:00.693 00:06:00.129 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-03 09:47:02.915 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-03 09:47:20.703 00:00:00.000 UDP 28.104.0.1:34158 -> 198.28.0.2:53 1 64 1 2025-11-03 09:47:20.703 00:00:00.000 UDP 28.104.0.1:54964 -> 198.28.0.2:53 1 64 1 2025-11-03 09:47:20.713 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54964 1 80 1 2025-11-03 09:47:20.713 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34158 1 109 1 2025-11-03 09:43:00.784 00:05:51.361 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-03 09:48:21.008 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52667 1 109 1 2025-11-03 09:48:21.008 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33873 1 80 1 2025-11-03 09:48:20.996 00:00:00.000 UDP 28.104.0.1:52667 -> 198.28.0.2:53 1 64 1 2025-11-03 09:48:20.996 00:00:00.000 UDP 28.104.0.1:33873 -> 198.28.0.2:53 1 64 1 2025-11-03 09:49:21.302 00:00:00.000 UDP 28.104.0.1:50645 -> 198.28.0.2:53 1 64 1 2025-11-03 09:49:21.302 00:00:00.000 UDP 28.104.0.1:54028 -> 198.28.0.2:53 1 64 1 2025-11-03 09:49:21.315 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50645 1 80 1 2025-11-03 09:49:21.315 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54028 1 109 1 2025-11-03 09:45:00.703 00:05:51.392 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-03 09:50:21.603 00:00:00.000 UDP 28.104.0.1:48584 -> 198.28.0.2:53 1 64 1 2025-11-03 09:50:21.603 00:00:00.000 UDP 28.104.0.1:60291 -> 198.28.0.2:53 1 64 1 2025-11-03 09:50:21.615 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48584 1 109 1 2025-11-03 09:50:21.615 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60291 1 80 1 2025-11-03 09:46:00.693 00:06:00.123 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-03 09:51:21.907 00:00:00.000 UDP 28.104.0.1:37167 -> 198.28.0.2:53 1 64 1 2025-11-03 09:51:21.907 00:00:00.000 UDP 28.104.0.1:47972 -> 198.28.0.2:53 1 64 1 2025-11-03 09:51:21.917 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37167 1 80 1 2025-11-03 09:51:21.916 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47972 1 109 1 2025-11-03 09:47:14.540 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2384 1 2025-11-03 09:47:00.795 00:05:51.300 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-03 09:52:02.871 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-03 09:52:22.211 00:00:00.000 UDP 28.104.0.1:51634 -> 198.28.0.2:53 1 64 1 2025-11-03 09:52:22.210 00:00:00.000 UDP 28.104.0.1:59777 -> 198.28.0.2:53 1 64 1 2025-11-03 09:52:22.221 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51634 1 109 1 2025-11-03 09:52:22.220 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59777 1 80 1 2025-11-03 09:48:00.694 00:05:51.413 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-03 09:53:22.541 00:00:00.000 UDP 28.104.0.1:45980 -> 198.28.0.2:53 1 64 1 2025-11-03 09:53:22.541 00:00:00.000 UDP 28.104.0.1:33742 -> 198.28.0.2:53 1 64 1 2025-11-03 09:53:22.550 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33742 1 109 1 2025-11-03 09:53:22.550 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45980 1 80 1 2025-11-03 09:49:00.786 00:05:51.361 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-03 09:49:00.693 00:06:00.130 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-03 09:54:22.842 00:00:00.000 UDP 28.104.0.1:54369 -> 198.28.0.2:53 1 64 1 2025-11-03 09:54:22.842 00:00:00.000 UDP 28.104.0.1:39118 -> 198.28.0.2:53 1 64 1 2025-11-03 09:54:22.852 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54369 1 109 1 2025-11-03 09:54:22.852 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39118 1 80 1 2025-11-03 09:55:23.176 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51520 1 109 1 2025-11-03 09:55:23.176 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42763 1 80 1 2025-11-03 09:55:23.145 00:00:00.000 UDP 28.104.0.1:51520 -> 198.28.0.2:53 1 64 1 2025-11-03 09:55:23.145 00:00:00.000 UDP 28.104.0.1:42763 -> 198.28.0.2:53 1 64 1 2025-11-03 09:51:00.704 00:05:51.396 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-03 09:56:23.510 00:00:00.000 UDP 28.104.0.1:36043 -> 198.28.0.2:53 1 64 1 2025-11-03 09:56:23.511 00:00:00.000 UDP 28.104.0.1:37273 -> 198.28.0.2:53 1 64 1 2025-11-03 09:56:23.521 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36043 1 80 1 2025-11-03 09:56:23.524 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37273 1 109 1 2025-11-03 09:52:34.549 00:05:10.002 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2980 1 2025-11-03 09:57:03.125 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-03 09:57:23.812 00:00:00.000 UDP 28.104.0.1:39959 -> 198.28.0.2:53 1 64 1 2025-11-03 09:57:23.812 00:00:00.000 UDP 28.104.0.1:58904 -> 198.28.0.2:53 1 64 1 2025-11-03 09:57:23.822 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58904 1 80 1 2025-11-03 09:57:23.822 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39959 1 109 1 2025-11-03 09:53:00.797 00:05:51.302 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-03 09:53:00.694 00:06:00.130 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-03 09:58:24.114 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59186 1 80 1 2025-11-03 09:58:24.114 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58025 1 109 1 2025-11-03 09:58:24.104 00:00:00.000 UDP 28.104.0.1:59186 -> 198.28.0.2:53 1 64 1 2025-11-03 09:58:24.104 00:00:00.000 UDP 28.104.0.1:58025 -> 198.28.0.2:53 1 64 1 Summary: total flows: 320, total bytes: 96153, total packets: 1417, avg bps: 197, avg pps: 0, avg bpp: 67 Time window: 2025-11-03 08:54:00 - 2025-11-03 09:59:00 Total flows processed: 320, passed: 320, Blocks skipped: 0, Bytes read: 33344 Sys: 0.0026s User: 0.0043s Wall: 0.0038s flows/second: 83875.6 Runtime: 0.0038s