Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-04 00:54:52.569 00:05:08.543 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-04 00:59:06.209 00:00:00.000 UDP 28.104.0.1:52130 -> 198.28.0.2:53 1 64 1 2025-11-04 00:59:06.209 00:00:00.000 UDP 28.104.0.1:47400 -> 198.28.0.2:53 1 64 1 2025-11-04 00:59:06.218 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52130 1 109 1 2025-11-04 00:59:06.218 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47400 1 80 1 2025-11-04 01:00:07.077 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45048 1 80 1 2025-11-04 01:00:07.077 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50001 1 109 1 2025-11-04 01:00:07.067 00:00:00.000 UDP 28.104.0.1:50001 -> 198.28.0.2:53 1 64 1 2025-11-04 01:00:07.068 00:00:00.000 UDP 28.104.0.1:45048 -> 198.28.0.2:53 1 64 1 2025-11-04 00:56:01.046 00:06:00.006 TCP 28.154.0.1:179 -> 28.157.0.1:37077 13 809 1 2025-11-04 00:56:01.046 00:06:00.111 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-04 00:56:52.520 00:05:08.543 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-04 01:01:07.364 00:00:00.000 UDP 28.104.0.1:48697 -> 198.28.0.2:53 1 64 1 2025-11-04 01:01:07.365 00:00:00.000 UDP 28.104.0.1:47261 -> 198.28.0.2:53 1 64 1 2025-11-04 01:01:07.375 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47261 1 109 1 2025-11-04 01:01:07.375 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48697 1 80 1 2025-11-04 00:57:45.737 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2464 1 2025-11-04 01:02:07.652 00:00:00.000 UDP 28.104.0.1:45235 -> 198.28.0.2:53 1 64 1 2025-11-04 01:02:07.652 00:00:00.000 UDP 28.104.0.1:37077 -> 198.28.0.2:53 1 64 1 2025-11-04 01:02:07.663 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37077 1 80 1 2025-11-04 01:02:07.663 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45235 1 109 1 2025-11-04 01:02:21.926 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-04 01:03:07.908 00:00:00.000 UDP 28.104.0.1:50099 -> 198.28.0.2:53 1 64 1 2025-11-04 01:03:07.908 00:00:00.000 UDP 28.104.0.1:37721 -> 198.28.0.2:53 1 64 1 2025-11-04 00:58:52.524 00:05:08.600 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-04 01:03:07.919 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37721 1 109 1 2025-11-04 01:03:07.919 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50099 1 80 1 2025-11-04 00:59:52.533 00:05:08.519 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-04 01:04:08.220 00:00:00.000 UDP 28.104.0.1:42225 -> 198.28.0.2:53 1 64 1 2025-11-04 01:04:08.219 00:00:00.000 UDP 28.104.0.1:60680 -> 198.28.0.2:53 1 64 1 2025-11-04 01:04:08.229 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60680 1 80 1 2025-11-04 01:04:08.229 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42225 1 109 1 2025-11-04 01:00:52.575 00:05:08.538 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-04 01:05:08.519 00:00:00.000 UDP 28.104.0.1:55004 -> 198.28.0.2:53 1 64 1 2025-11-04 01:05:08.519 00:00:00.000 UDP 28.104.0.1:34487 -> 198.28.0.2:53 1 64 1 2025-11-04 01:05:08.530 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55004 1 109 1 2025-11-04 01:05:08.530 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34487 1 80 1 2025-11-04 01:06:08.782 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38264 1 109 1 2025-11-04 01:06:08.783 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49707 1 80 1 2025-11-04 01:06:08.772 00:00:00.000 UDP 28.104.0.1:49707 -> 198.28.0.2:53 1 64 1 2025-11-04 01:06:08.772 00:00:00.000 UDP 28.104.0.1:38264 -> 198.28.0.2:53 1 64 1 2025-11-04 01:02:01.166 00:06:00.003 TCP 28.154.0.1:179 -> 28.157.0.1:37077 13 790 1 2025-11-04 01:02:52.524 00:05:08.538 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-04 01:07:09.079 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36288 1 80 1 2025-11-04 01:07:09.079 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58494 1 109 1 2025-11-04 01:07:09.068 00:00:00.000 UDP 28.104.0.1:36288 -> 198.28.0.2:53 1 64 1 2025-11-04 01:07:09.068 00:00:00.000 UDP 28.104.0.1:58494 -> 198.28.0.2:53 1 64 1 2025-11-04 01:03:05.740 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2384 1 2025-11-04 01:07:21.310 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-04 01:03:01.053 00:05:00.108 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-04 01:08:09.374 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39672 1 109 1 2025-11-04 01:08:09.373 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60418 1 80 1 2025-11-04 01:08:09.363 00:00:00.000 UDP 28.104.0.1:60418 -> 198.28.0.2:53 1 64 1 2025-11-04 01:08:09.364 00:00:00.000 UDP 28.104.0.1:39672 -> 198.28.0.2:53 1 64 1 2025-11-04 01:04:52.525 00:05:08.598 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-04 01:09:10.298 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39796 1 109 1 2025-11-04 01:09:10.298 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58116 1 80 1 2025-11-04 01:09:10.288 00:00:00.000 UDP 28.104.0.1:58116 -> 198.28.0.2:53 1 64 1 2025-11-04 01:09:10.288 00:00:00.000 UDP 28.104.0.1:39796 -> 198.28.0.2:53 1 64 1 2025-11-04 01:05:52.539 00:05:08.515 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-04 01:10:10.591 00:00:00.000 UDP 28.104.0.1:49778 -> 198.28.0.2:53 1 64 1 2025-11-04 01:10:10.591 00:00:00.000 UDP 28.104.0.1:38181 -> 198.28.0.2:53 1 64 1 2025-11-04 01:10:10.602 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49778 1 109 1 2025-11-04 01:10:10.602 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38181 1 80 1 2025-11-04 01:06:52.575 00:05:08.538 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-04 01:11:10.899 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56744 1 109 1 2025-11-04 01:11:10.899 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54135 1 80 1 2025-11-04 01:11:10.890 00:00:00.000 UDP 28.104.0.1:54135 -> 198.28.0.2:53 1 64 1 2025-11-04 01:11:10.890 00:00:00.000 UDP 28.104.0.1:56744 -> 198.28.0.2:53 1 64 1 2025-11-04 01:12:11.194 00:00:00.000 UDP 28.104.0.1:53010 -> 198.28.0.2:53 1 64 1 2025-11-04 01:12:11.194 00:00:00.000 UDP 28.104.0.1:58378 -> 198.28.0.2:53 1 64 1 2025-11-04 01:12:11.205 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53010 1 109 1 2025-11-04 01:12:11.204 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58378 1 80 1 2025-11-04 01:12:21.428 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-04 01:08:25.747 00:05:10.150 OSPF 28.0.2.1:0 -> 224.0.0.5:0 46 3452 1 2025-11-04 01:09:01.054 00:04:00.108 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-11-04 01:09:01.054 00:04:00.115 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-11-04 01:08:52.525 00:05:08.539 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-04 01:13:11.492 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57120 1 80 1 2025-11-04 01:13:11.492 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46185 1 109 1 2025-11-04 01:13:11.483 00:00:00.000 UDP 28.104.0.1:46185 -> 198.28.0.2:53 1 64 1 2025-11-04 01:13:11.483 00:00:00.000 UDP 28.104.0.1:57120 -> 198.28.0.2:53 1 64 1 2025-11-04 01:14:11.788 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46568 1 80 1 2025-11-04 01:14:11.788 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38696 1 109 1 2025-11-04 01:14:11.778 00:00:00.000 UDP 28.104.0.1:38696 -> 198.28.0.2:53 1 64 1 2025-11-04 01:14:11.778 00:00:00.000 UDP 28.104.0.1:46568 -> 198.28.0.2:53 1 64 1 2025-11-04 01:10:52.525 00:05:08.600 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-04 01:15:12.080 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55510 1 80 1 2025-11-04 01:15:12.080 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40742 1 109 1 2025-11-04 01:15:12.071 00:00:00.000 UDP 28.104.0.1:55510 -> 198.28.0.2:53 1 64 1 2025-11-04 01:15:12.070 00:00:00.000 UDP 28.104.0.1:40742 -> 198.28.0.2:53 1 64 1 2025-11-04 01:11:52.536 00:05:08.518 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-04 01:16:12.372 00:00:00.000 UDP 28.104.0.1:53076 -> 198.28.0.2:53 1 64 1 2025-11-04 01:16:12.372 00:00:00.000 UDP 28.104.0.1:45977 -> 198.28.0.2:53 1 64 1 2025-11-04 01:16:12.382 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45977 1 80 1 2025-11-04 01:16:12.382 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53076 1 109 1 2025-11-04 01:12:52.576 00:05:08.539 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-04 01:17:12.771 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54552 1 80 1 2025-11-04 01:17:12.771 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44055 1 109 1 2025-11-04 01:17:12.761 00:00:00.000 UDP 28.104.0.1:54552 -> 198.28.0.2:53 1 64 1 2025-11-04 01:17:12.761 00:00:00.000 UDP 28.104.0.1:44055 -> 198.28.0.2:53 1 64 1 2025-11-04 01:17:21.505 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-04 01:13:45.755 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2628 1 2025-11-04 01:18:13.064 00:00:00.000 UDP 28.104.0.1:53579 -> 198.28.0.2:53 1 64 1 2025-11-04 01:18:13.064 00:00:00.000 UDP 28.104.0.1:38867 -> 198.28.0.2:53 1 64 1 2025-11-04 01:18:13.073 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53579 1 109 1 2025-11-04 01:18:13.073 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38867 1 80 1 2025-11-04 01:14:01.054 00:06:00.116 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-04 01:14:01.054 00:06:00.109 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-04 01:14:52.528 00:05:08.538 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-04 01:19:13.324 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55218 1 109 1 2025-11-04 01:19:13.324 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47419 1 80 1 2025-11-04 01:19:13.314 00:00:00.000 UDP 28.104.0.1:47419 -> 198.28.0.2:53 1 64 1 2025-11-04 01:19:13.314 00:00:00.000 UDP 28.104.0.1:55218 -> 198.28.0.2:53 1 64 1 2025-11-04 01:20:14.211 00:00:00.000 UDP 28.104.0.1:42285 -> 198.28.0.2:53 1 64 1 2025-11-04 01:20:14.211 00:00:00.000 UDP 28.104.0.1:55268 -> 198.28.0.2:53 1 64 1 2025-11-04 01:20:14.222 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42285 1 80 1 2025-11-04 01:20:14.222 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55268 1 109 1 2025-11-04 01:16:52.527 00:05:08.599 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-04 01:21:14.498 00:00:00.000 UDP 28.104.0.1:42335 -> 198.28.0.2:53 1 64 1 2025-11-04 01:21:14.499 00:00:00.000 UDP 28.104.0.1:43975 -> 198.28.0.2:53 1 64 1 2025-11-04 01:21:14.509 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43975 1 109 1 2025-11-04 01:21:14.509 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42335 1 80 1 2025-11-04 01:17:52.538 00:05:08.517 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-04 01:22:14.786 00:00:00.000 UDP 28.104.0.1:45015 -> 198.28.0.2:53 1 64 1 2025-11-04 01:22:14.786 00:00:00.000 UDP 28.104.0.1:58754 -> 198.28.0.2:53 1 64 1 2025-11-04 01:22:14.797 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45015 1 80 1 2025-11-04 01:22:14.797 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58754 1 109 1 2025-11-04 01:22:21.650 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-04 01:18:52.578 00:05:08.539 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-04 01:23:15.055 00:00:00.000 UDP 28.104.0.1:48337 -> 198.28.0.2:53 1 64 1 2025-11-04 01:23:15.055 00:00:00.000 UDP 28.104.0.1:52663 -> 198.28.0.2:53 1 64 1 2025-11-04 01:23:15.067 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52663 1 80 1 2025-11-04 01:23:15.067 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48337 1 109 1 2025-11-04 01:19:05.762 00:05:10.305 OSPF 28.0.2.1:0 -> 224.0.0.5:0 44 3152 1 2025-11-04 01:24:15.310 00:00:00.000 UDP 28.104.0.1:42105 -> 198.28.0.2:53 1 64 1 2025-11-04 01:24:15.310 00:00:00.000 UDP 28.104.0.1:51390 -> 198.28.0.2:53 1 64 1 2025-11-04 01:24:15.321 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51390 1 80 1 2025-11-04 01:24:15.321 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42105 1 109 1 2025-11-04 01:20:52.528 00:05:08.537 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-04 01:25:15.561 00:00:00.000 UDP 28.104.0.1:42082 -> 198.28.0.2:53 1 64 1 2025-11-04 01:25:15.561 00:00:00.000 UDP 28.104.0.1:53264 -> 198.28.0.2:53 1 64 1 2025-11-04 01:25:15.571 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42082 1 80 1 2025-11-04 01:25:15.571 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53264 1 109 1 2025-11-04 01:21:01.055 00:06:00.125 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-04 01:21:01.055 00:06:00.108 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-04 01:26:15.865 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42633 1 109 1 2025-11-04 01:26:15.866 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60296 1 80 1 2025-11-04 01:26:15.855 00:00:00.000 UDP 28.104.0.1:60296 -> 198.28.0.2:53 1 64 1 2025-11-04 01:26:15.854 00:00:00.000 UDP 28.104.0.1:42633 -> 198.28.0.2:53 1 64 1 2025-11-04 01:22:52.529 00:05:08.598 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-04 01:27:16.170 00:00:00.000 UDP 28.104.0.1:35408 -> 198.28.0.2:53 1 64 1 2025-11-04 01:27:16.170 00:00:00.000 UDP 28.104.0.1:42097 -> 198.28.0.2:53 1 64 1 2025-11-04 01:27:16.181 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35408 1 109 1 2025-11-04 01:27:16.181 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42097 1 80 1 2025-11-04 01:27:21.608 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-04 01:23:52.538 00:05:08.518 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-04 01:28:16.475 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51877 1 80 1 2025-11-04 01:28:16.475 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54013 1 109 1 2025-11-04 01:28:16.465 00:00:00.000 UDP 28.104.0.1:54013 -> 198.28.0.2:53 1 64 1 2025-11-04 01:28:16.465 00:00:00.000 UDP 28.104.0.1:51877 -> 198.28.0.2:53 1 64 1 2025-11-04 01:24:25.767 00:05:10.012 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2464 1 2025-11-04 01:24:52.578 00:05:08.538 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-04 01:29:16.760 00:00:00.000 UDP 28.104.0.1:60019 -> 198.28.0.2:53 1 64 1 2025-11-04 01:29:16.760 00:00:00.000 UDP 28.104.0.1:36326 -> 198.28.0.2:53 1 64 1 2025-11-04 01:29:16.770 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36326 1 109 1 2025-11-04 01:29:16.770 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60019 1 80 1 2025-11-04 01:30:17.069 00:00:00.000 UDP 28.104.0.1:48081 -> 198.28.0.2:53 1 64 1 2025-11-04 01:30:17.070 00:00:00.000 UDP 28.104.0.1:60007 -> 198.28.0.2:53 1 64 1 2025-11-04 01:30:17.078 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60007 1 109 1 2025-11-04 01:30:17.078 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48081 1 80 1 2025-11-04 01:26:52.528 00:05:08.538 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-04 01:31:17.357 00:00:00.000 UDP 28.104.0.1:40672 -> 198.28.0.2:53 1 64 1 2025-11-04 01:31:17.357 00:00:00.000 UDP 28.104.0.1:41841 -> 198.28.0.2:53 1 64 1 2025-11-04 01:31:17.367 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41841 1 109 1 2025-11-04 01:31:17.367 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40672 1 80 1 2025-11-04 01:32:17.649 00:00:00.000 UDP 28.104.0.1:40412 -> 198.28.0.2:53 1 64 1 2025-11-04 01:32:17.649 00:00:00.000 UDP 28.104.0.1:33081 -> 198.28.0.2:53 1 64 1 2025-11-04 01:32:21.645 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-04 01:32:17.659 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33081 1 80 1 2025-11-04 01:32:17.659 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40412 1 109 1 2025-11-04 01:28:01.056 00:06:00.001 TCP 28.154.0.1:179 -> 28.157.0.1:37077 13 809 1 2025-11-04 01:28:01.056 00:06:00.001 TCP 28.154.0.1:179 -> 28.155.0.1:36643 13 809 1 2025-11-04 01:28:52.530 00:05:08.598 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-04 01:33:17.943 00:00:00.000 UDP 28.104.0.1:45981 -> 198.28.0.2:53 1 64 1 2025-11-04 01:33:17.943 00:00:00.000 UDP 28.104.0.1:32905 -> 198.28.0.2:53 1 64 1 2025-11-04 01:33:17.954 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45981 1 109 1 2025-11-04 01:33:17.954 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32905 1 80 1 2025-11-04 01:29:45.777 00:05:00.466 OSPF 28.0.2.1:0 -> 224.0.0.5:0 34 2316 1 2025-11-04 01:29:52.541 00:05:08.517 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-04 01:34:18.207 00:00:00.000 UDP 28.104.0.1:59050 -> 198.28.0.2:53 1 64 1 2025-11-04 01:34:18.207 00:00:00.000 UDP 28.104.0.1:55609 -> 198.28.0.2:53 1 64 1 2025-11-04 01:34:18.218 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55609 1 80 1 2025-11-04 01:34:18.217 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59050 1 109 1 2025-11-04 01:30:52.580 00:05:08.538 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-04 01:35:18.462 00:00:00.000 UDP 28.104.0.1:44280 -> 198.28.0.2:53 1 64 1 2025-11-04 01:35:18.461 00:00:00.000 UDP 28.104.0.1:51691 -> 198.28.0.2:53 1 64 1 2025-11-04 01:35:18.474 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44280 1 80 1 2025-11-04 01:35:18.473 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51691 1 109 1 2025-11-04 01:36:18.755 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53982 1 80 1 2025-11-04 01:36:18.755 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36483 1 109 1 2025-11-04 01:36:18.745 00:00:00.000 UDP 28.104.0.1:36483 -> 198.28.0.2:53 1 64 1 2025-11-04 01:36:18.745 00:00:00.000 UDP 28.104.0.1:53982 -> 198.28.0.2:53 1 64 1 2025-11-04 01:32:52.561 00:05:08.507 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-04 01:37:19.054 00:00:00.000 UDP 28.104.0.1:43877 -> 198.28.0.2:53 1 64 1 2025-11-04 01:37:19.054 00:00:00.000 UDP 28.104.0.1:50124 -> 198.28.0.2:53 1 64 1 2025-11-04 01:37:21.812 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-04 01:37:19.064 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43877 1 109 1 2025-11-04 01:37:19.064 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50124 1 80 1 2025-11-04 01:38:19.356 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49995 1 109 1 2025-11-04 01:38:19.356 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33107 1 80 1 2025-11-04 01:38:19.346 00:00:00.000 UDP 28.104.0.1:33107 -> 198.28.0.2:53 1 64 1 2025-11-04 01:38:19.346 00:00:00.000 UDP 28.104.0.1:49995 -> 198.28.0.2:53 1 64 1 2025-11-04 01:34:55.788 00:05:00.532 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2888 1 2025-11-04 01:34:52.561 00:05:08.568 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-04 01:34:01.165 00:06:00.001 TCP 28.154.0.1:179 -> 28.155.0.1:36643 13 790 1 2025-11-04 01:34:01.181 00:06:00.003 TCP 28.154.0.1:179 -> 28.157.0.1:37077 13 790 1 2025-11-04 01:39:19.603 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51700 1 109 1 2025-11-04 01:39:19.604 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56451 1 80 1 2025-11-04 01:39:19.593 00:00:00.000 UDP 28.104.0.1:51700 -> 198.28.0.2:53 1 64 1 2025-11-04 01:39:19.592 00:00:00.000 UDP 28.104.0.1:56451 -> 198.28.0.2:53 1 64 1 2025-11-04 01:35:52.571 00:05:08.487 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-04 01:40:19.863 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52830 1 109 1 2025-11-04 01:40:19.863 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60756 1 80 1 2025-11-04 01:40:19.852 00:00:00.000 UDP 28.104.0.1:60756 -> 198.28.0.2:53 1 64 1 2025-11-04 01:40:19.851 00:00:00.000 UDP 28.104.0.1:52830 -> 198.28.0.2:53 1 64 1 2025-11-04 01:36:52.612 00:05:08.507 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-04 01:41:20.176 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60945 1 109 1 2025-11-04 01:41:20.177 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54146 1 80 1 2025-11-04 01:41:20.165 00:00:00.000 UDP 28.104.0.1:54146 -> 198.28.0.2:53 1 64 1 2025-11-04 01:41:20.165 00:00:00.000 UDP 28.104.0.1:60945 -> 198.28.0.2:53 1 64 1 2025-11-04 01:42:21.937 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-04 01:42:20.468 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53550 1 109 1 2025-11-04 01:42:20.468 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46688 1 80 1 2025-11-04 01:42:20.459 00:00:00.000 UDP 28.104.0.1:53550 -> 198.28.0.2:53 1 64 1 2025-11-04 01:42:20.459 00:00:00.000 UDP 28.104.0.1:46688 -> 198.28.0.2:53 1 64 1 2025-11-04 01:38:52.565 00:05:08.505 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-04 01:43:20.753 00:00:00.000 UDP 28.104.0.1:52054 -> 198.28.0.2:53 1 64 1 2025-11-04 01:43:20.753 00:00:00.000 UDP 28.104.0.1:52804 -> 198.28.0.2:53 1 64 1 2025-11-04 01:43:20.765 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52054 1 80 1 2025-11-04 01:43:20.765 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52804 1 109 1 2025-11-04 01:40:05.794 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2736 1 2025-11-04 01:44:21.025 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57972 1 80 1 2025-11-04 01:44:21.021 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37383 1 109 1 2025-11-04 01:44:21.010 00:00:00.000 UDP 28.104.0.1:37383 -> 198.28.0.2:53 1 64 1 2025-11-04 01:44:21.014 00:00:00.000 UDP 28.104.0.1:57972 -> 198.28.0.2:53 1 64 1 2025-11-04 01:40:52.564 00:05:08.565 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-04 01:41:01.058 00:04:00.126 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-11-04 01:41:01.058 00:04:00.109 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-11-04 01:45:21.314 00:00:00.000 UDP 28.104.0.1:39093 -> 198.28.0.2:53 1 64 1 2025-11-04 01:45:21.314 00:00:00.000 UDP 28.104.0.1:58234 -> 198.28.0.2:53 1 64 1 2025-11-04 01:45:21.325 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58234 1 80 1 2025-11-04 01:45:21.326 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39093 1 109 1 2025-11-04 01:41:52.576 00:05:08.485 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-04 01:46:21.820 00:00:00.000 UDP 28.104.0.1:46255 -> 198.28.0.2:53 1 64 1 2025-11-04 01:46:21.821 00:00:00.000 UDP 28.104.0.1:46602 -> 198.28.0.2:53 1 64 1 2025-11-04 01:46:21.830 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46602 1 109 1 2025-11-04 01:46:21.830 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46255 1 80 1 2025-11-04 01:42:52.615 00:05:08.505 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-04 01:47:22.120 00:00:00.000 UDP 28.104.0.1:46370 -> 198.28.0.2:53 1 64 1 2025-11-04 01:47:22.121 00:00:00.000 UDP 28.104.0.1:47983 -> 198.28.0.2:53 1 64 1 2025-11-04 01:47:22.565 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-04 01:47:22.132 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47983 1 109 1 2025-11-04 01:47:22.132 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46370 1 80 1 2025-11-04 01:48:22.417 00:00:00.000 UDP 28.104.0.1:55914 -> 198.28.0.2:53 1 64 1 2025-11-04 01:48:22.417 00:00:00.000 UDP 28.104.0.1:55208 -> 198.28.0.2:53 1 64 1 2025-11-04 01:48:22.428 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55208 1 109 1 2025-11-04 01:48:22.429 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55914 1 80 1 2025-11-04 01:44:52.564 00:05:08.506 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-04 01:49:22.755 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48753 1 109 1 2025-11-04 01:49:22.755 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55494 1 80 1 2025-11-04 01:49:22.745 00:00:00.000 UDP 28.104.0.1:48753 -> 198.28.0.2:53 1 64 1 2025-11-04 01:49:22.745 00:00:00.000 UDP 28.104.0.1:55494 -> 198.28.0.2:53 1 64 1 2025-11-04 01:45:25.802 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 42 3036 1 2025-11-04 01:50:23.053 00:00:00.000 UDP 28.104.0.1:40489 -> 198.28.0.2:53 1 64 1 2025-11-04 01:50:23.053 00:00:00.000 UDP 28.104.0.1:49922 -> 198.28.0.2:53 1 64 1 2025-11-04 01:50:23.064 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49922 1 109 1 2025-11-04 01:50:23.064 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40489 1 80 1 2025-11-04 01:46:01.060 00:06:00.127 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-04 01:46:01.060 00:06:00.109 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-04 01:46:52.564 00:05:08.566 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-04 01:51:23.364 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37713 1 80 1 2025-11-04 01:51:23.363 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43511 1 109 1 2025-11-04 01:51:23.353 00:00:00.000 UDP 28.104.0.1:43511 -> 198.28.0.2:53 1 64 1 2025-11-04 01:51:23.353 00:00:00.000 UDP 28.104.0.1:37713 -> 198.28.0.2:53 1 64 1 2025-11-04 01:47:52.578 00:05:08.483 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-04 01:52:22.167 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-04 01:52:23.680 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60545 1 109 1 2025-11-04 01:52:23.680 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51187 1 80 1 2025-11-04 01:52:23.670 00:00:00.000 UDP 28.104.0.1:51187 -> 198.28.0.2:53 1 64 1 2025-11-04 01:52:23.670 00:00:00.000 UDP 28.104.0.1:60545 -> 198.28.0.2:53 1 64 1 2025-11-04 01:48:52.616 00:05:08.506 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-04 01:53:23.977 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34773 1 80 1 2025-11-04 01:53:23.977 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47171 1 109 1 2025-11-04 01:53:23.966 00:00:00.000 UDP 28.104.0.1:34773 -> 198.28.0.2:53 1 64 1 2025-11-04 01:53:23.966 00:00:00.000 UDP 28.104.0.1:47171 -> 198.28.0.2:53 1 64 1 2025-11-04 01:54:24.282 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38008 1 109 1 2025-11-04 01:54:24.281 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45318 1 80 1 2025-11-04 01:54:24.273 00:00:00.000 UDP 28.104.0.1:45318 -> 198.28.0.2:53 1 64 1 2025-11-04 01:54:24.273 00:00:00.000 UDP 28.104.0.1:38008 -> 198.28.0.2:53 1 64 1 2025-11-04 01:50:45.805 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2592 1 2025-11-04 01:50:52.566 00:05:08.506 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-04 01:55:24.525 00:00:00.000 UDP 28.104.0.1:51223 -> 198.28.0.2:53 1 64 1 2025-11-04 01:55:24.525 00:00:00.000 UDP 28.104.0.1:56309 -> 198.28.0.2:53 1 64 1 2025-11-04 01:55:24.536 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56309 1 80 1 2025-11-04 01:55:24.536 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51223 1 109 1 2025-11-04 01:56:24.829 00:00:00.000 UDP 28.104.0.1:46407 -> 198.28.0.2:53 1 64 1 2025-11-04 01:56:24.829 00:00:00.000 UDP 28.104.0.1:35714 -> 198.28.0.2:53 1 64 1 2025-11-04 01:56:24.839 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46407 1 109 1 2025-11-04 01:56:24.839 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35714 1 80 1 2025-11-04 01:52:52.566 00:05:08.566 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-04 01:57:22.377 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-04 01:57:25.108 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49825 1 80 1 2025-11-04 01:57:25.108 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42074 1 109 1 2025-11-04 01:57:25.097 00:00:00.000 UDP 28.104.0.1:42074 -> 198.28.0.2:53 1 64 1 2025-11-04 01:57:25.097 00:00:00.000 UDP 28.104.0.1:49825 -> 198.28.0.2:53 1 64 1 2025-11-04 01:53:01.061 00:06:00.128 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-04 01:53:52.576 00:05:08.486 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-04 01:53:01.061 00:06:00.109 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-04 01:58:25.382 00:00:00.000 UDP 28.104.0.1:51670 -> 198.28.0.2:53 1 64 1 2025-11-04 01:58:25.382 00:00:00.000 UDP 28.104.0.1:55331 -> 198.28.0.2:53 1 64 1 2025-11-04 01:58:25.392 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51670 1 109 1 2025-11-04 01:58:25.392 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55331 1 80 1 Summary: total flows: 323, total bytes: 97420, total packets: 1438, avg bps: 202, avg pps: 0, avg bpp: 67 Time window: 2025-11-04 00:54:52 - 2025-11-04 01:59:01 Total flows processed: 323, passed: 323, Blocks skipped: 0, Bytes read: 33656 Sys: 0.0042s User: 0.0033s Wall: 0.0037s flows/second: 87274.4 Runtime: 0.0037s