Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-04 02:54:52.641 00:05:08.500 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-04 02:59:43.719 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39196 1 80 1 2025-11-04 02:59:43.721 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45021 1 109 1 2025-11-04 02:59:43.709 00:00:00.000 UDP 28.104.0.1:39196 -> 198.28.0.2:53 1 64 1 2025-11-04 02:59:43.709 00:00:00.000 UDP 28.104.0.1:45021 -> 198.28.0.2:53 1 64 1 2025-11-04 02:55:01.088 00:06:00.129 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-04 02:55:01.088 00:06:00.096 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-04 03:00:44.000 00:00:00.000 UDP 28.104.0.1:47289 -> 198.28.0.2:53 1 64 1 2025-11-04 03:00:44.000 00:00:00.000 UDP 28.104.0.1:49348 -> 198.28.0.2:53 1 64 1 2025-11-04 03:00:44.017 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47289 1 109 1 2025-11-04 03:00:44.011 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49348 1 80 1 2025-11-04 02:56:52.592 00:05:08.507 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-04 03:01:44.311 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52512 1 80 1 2025-11-04 03:01:44.311 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50111 1 109 1 2025-11-04 03:01:44.302 00:00:00.000 UDP 28.104.0.1:52512 -> 198.28.0.2:53 1 64 1 2025-11-04 03:01:44.301 00:00:00.000 UDP 28.104.0.1:50111 -> 198.28.0.2:53 1 64 1 2025-11-04 03:02:23.659 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-04 03:02:44.597 00:00:00.000 UDP 28.104.0.1:57169 -> 198.28.0.2:53 1 64 1 2025-11-04 03:02:44.597 00:00:00.000 UDP 28.104.0.1:34292 -> 198.28.0.2:53 1 64 1 2025-11-04 03:02:44.607 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34292 1 80 1 2025-11-04 03:02:44.607 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57169 1 109 1 2025-11-04 02:58:52.592 00:05:08.559 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-04 03:03:44.930 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48731 1 109 1 2025-11-04 03:03:44.930 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50530 1 80 1 2025-11-04 03:03:44.920 00:00:00.000 UDP 28.104.0.1:50530 -> 198.28.0.2:53 1 64 1 2025-11-04 03:03:44.920 00:00:00.000 UDP 28.104.0.1:48731 -> 198.28.0.2:53 1 64 1 2025-11-04 02:59:52.604 00:05:08.485 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-04 02:59:55.902 00:05:00.691 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2824 1 2025-11-04 03:04:45.242 00:00:00.000 UDP 28.104.0.1:35191 -> 198.28.0.2:53 1 64 1 2025-11-04 03:04:45.242 00:00:00.000 UDP 28.104.0.1:54105 -> 198.28.0.2:53 1 64 1 2025-11-04 03:04:45.252 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54105 1 109 1 2025-11-04 03:04:45.253 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35191 1 80 1 2025-11-04 03:00:52.644 00:05:08.498 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-04 03:05:45.547 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42989 1 80 1 2025-11-04 03:05:45.547 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39647 1 109 1 2025-11-04 03:05:45.538 00:00:00.000 UDP 28.104.0.1:39647 -> 198.28.0.2:53 1 64 1 2025-11-04 03:05:45.538 00:00:00.000 UDP 28.104.0.1:42989 -> 198.28.0.2:53 1 64 1 2025-11-04 03:06:45.891 00:00:00.000 UDP 28.104.0.1:60845 -> 198.28.0.2:53 1 64 1 2025-11-04 03:06:45.891 00:00:00.000 UDP 28.104.0.1:33168 -> 198.28.0.2:53 1 64 1 2025-11-04 03:06:45.902 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33168 1 80 1 2025-11-04 03:06:45.902 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60845 1 109 1 2025-11-04 03:02:01.089 00:06:00.131 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-04 03:02:01.089 00:06:00.097 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-04 03:02:52.596 00:05:08.505 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-04 03:07:23.827 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-04 03:07:46.208 00:00:00.000 UDP 28.104.0.1:45582 -> 198.28.0.2:53 1 64 1 2025-11-04 03:07:46.207 00:00:00.000 UDP 28.104.0.1:40113 -> 198.28.0.2:53 1 64 1 2025-11-04 03:07:46.217 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40113 1 109 1 2025-11-04 03:07:46.217 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45582 1 80 1 2025-11-04 03:08:46.505 00:00:00.000 UDP 28.104.0.1:39822 -> 198.28.0.2:53 1 64 1 2025-11-04 03:08:46.505 00:00:00.000 UDP 28.104.0.1:43205 -> 198.28.0.2:53 1 64 1 2025-11-04 03:08:46.516 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43205 1 80 1 2025-11-04 03:08:46.516 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39822 1 109 1 2025-11-04 03:04:52.596 00:05:08.557 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-04 03:05:05.908 00:05:10.002 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2800 1 2025-11-04 03:09:46.766 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52795 1 109 1 2025-11-04 03:09:46.766 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52751 1 80 1 2025-11-04 03:09:46.754 00:00:00.000 UDP 28.104.0.1:52795 -> 198.28.0.2:53 1 64 1 2025-11-04 03:09:46.754 00:00:00.000 UDP 28.104.0.1:52751 -> 198.28.0.2:53 1 64 1 2025-11-04 03:05:52.606 00:05:08.484 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-04 03:10:47.059 00:00:00.000 UDP 28.104.0.1:36224 -> 198.28.0.2:53 1 64 1 2025-11-04 03:10:47.060 00:00:00.000 UDP 28.104.0.1:47941 -> 198.28.0.2:53 1 64 1 2025-11-04 03:10:47.070 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47941 1 80 1 2025-11-04 03:10:47.070 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36224 1 109 1 2025-11-04 03:06:52.645 00:05:08.497 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-04 03:11:47.354 00:00:00.000 UDP 28.104.0.1:33247 -> 198.28.0.2:53 1 64 1 2025-11-04 03:11:47.354 00:00:00.000 UDP 28.104.0.1:49395 -> 198.28.0.2:53 1 64 1 2025-11-04 03:11:47.363 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49395 1 109 1 2025-11-04 03:11:47.363 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33247 1 80 1 2025-11-04 03:12:24.146 00:00:00.025 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-04 03:12:47.646 00:00:00.000 UDP 28.104.0.1:35431 -> 198.28.0.2:53 1 64 1 2025-11-04 03:12:47.646 00:00:00.000 UDP 28.104.0.1:46229 -> 198.28.0.2:53 1 64 1 2025-11-04 03:12:47.657 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46229 1 80 1 2025-11-04 03:12:47.657 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35431 1 109 1 2025-11-04 03:08:52.596 00:05:08.506 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-04 03:13:48.453 00:00:00.000 UDP 28.104.0.1:33569 -> 198.28.0.2:53 1 64 1 2025-11-04 03:13:48.453 00:00:00.000 UDP 28.104.0.1:48046 -> 198.28.0.2:53 1 64 1 2025-11-04 03:13:48.463 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48046 1 80 1 2025-11-04 03:13:48.463 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33569 1 109 1 2025-11-04 03:09:01.090 00:06:00.002 TCP 28.154.0.1:179 -> 28.157.0.1:37077 13 809 1 2025-11-04 03:09:01.090 00:06:00.099 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-04 03:10:25.911 00:05:10.022 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2844 1 2025-11-04 03:14:48.748 00:00:00.000 UDP 28.104.0.1:49833 -> 198.28.0.2:53 1 64 1 2025-11-04 03:14:48.748 00:00:00.000 UDP 28.104.0.1:50381 -> 198.28.0.2:53 1 64 1 2025-11-04 03:14:48.758 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49833 1 109 1 2025-11-04 03:14:48.758 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50381 1 80 1 2025-11-04 03:10:52.599 00:05:08.555 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-04 03:15:49.056 00:00:00.000 UDP 28.104.0.1:50710 -> 198.28.0.2:53 1 64 1 2025-11-04 03:15:49.056 00:00:00.000 UDP 28.104.0.1:55845 -> 198.28.0.2:53 1 64 1 2025-11-04 03:15:49.066 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55845 1 109 1 2025-11-04 03:15:49.066 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50710 1 80 1 2025-11-04 03:15:01.223 00:01:00.000 TCP 28.154.0.1:179 -> 28.157.0.1:37077 3 175 1 2025-11-04 03:16:01.093 00:00:00.096 TCP 28.154.0.1:179 -> 28.155.0.1:36643 2 123 1 2025-11-04 03:11:52.608 00:05:08.483 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-04 03:16:49.364 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43561 1 80 1 2025-11-04 03:16:49.365 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40606 1 109 1 2025-11-04 03:16:49.353 00:00:00.000 UDP 28.104.0.1:43561 -> 198.28.0.2:53 1 64 1 2025-11-04 03:16:49.353 00:00:00.000 UDP 28.104.0.1:40606 -> 198.28.0.2:53 1 64 1 2025-11-04 03:12:52.649 00:05:08.495 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-04 03:17:23.875 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-04 03:17:49.611 00:00:00.000 UDP 28.104.0.1:52475 -> 198.28.0.2:53 1 64 1 2025-11-04 03:17:49.611 00:00:00.000 UDP 28.104.0.1:51495 -> 198.28.0.2:53 1 64 1 2025-11-04 03:17:49.622 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52475 1 109 1 2025-11-04 03:17:49.622 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51495 1 80 1 2025-11-04 03:18:49.907 00:00:00.000 UDP 28.104.0.1:34833 -> 198.28.0.2:53 1 64 1 2025-11-04 03:18:49.907 00:00:00.000 UDP 28.104.0.1:39306 -> 198.28.0.2:53 1 64 1 2025-11-04 03:18:49.916 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39306 1 80 1 2025-11-04 03:18:49.917 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34833 1 109 1 2025-11-04 03:14:52.600 00:05:08.503 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-04 03:15:36.734 00:05:09.193 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2864 1 2025-11-04 03:19:54.754 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60443 1 80 1 2025-11-04 03:19:54.755 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48537 1 109 1 2025-11-04 03:19:54.744 00:00:00.000 UDP 28.104.0.1:60443 -> 198.28.0.2:53 1 64 1 2025-11-04 03:19:54.744 00:00:00.000 UDP 28.104.0.1:48537 -> 198.28.0.2:53 1 64 1 2025-11-04 03:20:55.058 00:00:00.000 UDP 28.104.0.1:40591 -> 198.28.0.2:53 1 64 1 2025-11-04 03:20:55.058 00:00:00.000 UDP 28.104.0.1:37089 -> 198.28.0.2:53 1 64 1 2025-11-04 03:20:55.068 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40591 1 80 1 2025-11-04 03:20:55.068 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37089 1 109 1 2025-11-04 03:16:52.600 00:05:08.561 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-04 03:17:01.093 00:04:00.131 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-11-04 03:17:01.093 00:04:00.097 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-11-04 03:21:55.329 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51765 1 80 1 2025-11-04 03:21:55.329 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34900 1 109 1 2025-11-04 03:21:55.318 00:00:00.000 UDP 28.104.0.1:34900 -> 198.28.0.2:53 1 64 1 2025-11-04 03:21:55.318 00:00:00.000 UDP 28.104.0.1:51765 -> 198.28.0.2:53 1 64 1 2025-11-04 03:17:52.610 00:05:08.483 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-04 03:22:23.938 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-04 03:22:55.629 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42512 1 80 1 2025-11-04 03:22:55.629 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33409 1 109 1 2025-11-04 03:22:55.618 00:00:00.000 UDP 28.104.0.1:33409 -> 198.28.0.2:53 1 64 1 2025-11-04 03:22:55.618 00:00:00.000 UDP 28.104.0.1:42512 -> 198.28.0.2:53 1 64 1 2025-11-04 03:18:52.649 00:05:08.499 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-04 03:23:55.935 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53618 1 109 1 2025-11-04 03:23:55.935 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54341 1 80 1 2025-11-04 03:23:55.925 00:00:00.000 UDP 28.104.0.1:53618 -> 198.28.0.2:53 1 64 1 2025-11-04 03:23:55.925 00:00:00.000 UDP 28.104.0.1:54341 -> 198.28.0.2:53 1 64 1 2025-11-04 03:24:56.307 00:00:00.000 UDP 28.104.0.1:54637 -> 198.28.0.2:53 1 64 1 2025-11-04 03:24:56.307 00:00:00.000 UDP 28.104.0.1:38679 -> 198.28.0.2:53 1 64 1 2025-11-04 03:24:56.318 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54637 1 109 1 2025-11-04 03:24:56.318 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38679 1 80 1 2025-11-04 03:20:52.600 00:05:08.503 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-04 03:20:55.926 00:05:10.015 OSPF 28.0.2.1:0 -> 224.0.0.5:0 34 2320 1 2025-11-04 03:25:56.616 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57350 1 109 1 2025-11-04 03:25:56.616 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48323 1 80 1 2025-11-04 03:25:56.606 00:00:00.000 UDP 28.104.0.1:57350 -> 198.28.0.2:53 1 64 1 2025-11-04 03:25:56.606 00:00:00.000 UDP 28.104.0.1:48323 -> 198.28.0.2:53 1 64 1 2025-11-04 03:22:01.093 00:04:00.130 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-11-04 03:22:01.092 00:04:00.096 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-11-04 03:26:56.914 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60207 1 80 1 2025-11-04 03:26:56.913 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47636 1 109 1 2025-11-04 03:26:56.901 00:00:00.000 UDP 28.104.0.1:60207 -> 198.28.0.2:53 1 64 1 2025-11-04 03:26:56.901 00:00:00.000 UDP 28.104.0.1:47636 -> 198.28.0.2:53 1 64 1 2025-11-04 03:22:52.603 00:05:08.558 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-04 03:27:24.196 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-04 03:27:57.214 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42671 1 80 1 2025-11-04 03:27:57.214 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43131 1 109 1 2025-11-04 03:27:57.204 00:00:00.000 UDP 28.104.0.1:42671 -> 198.28.0.2:53 1 64 1 2025-11-04 03:27:57.204 00:00:00.000 UDP 28.104.0.1:43131 -> 198.28.0.2:53 1 64 1 2025-11-04 03:23:52.611 00:05:08.483 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-04 03:28:57.515 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54504 1 80 1 2025-11-04 03:28:57.515 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40899 1 109 1 2025-11-04 03:24:52.651 00:05:08.499 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-04 03:28:57.504 00:00:00.000 UDP 28.104.0.1:40899 -> 198.28.0.2:53 1 64 1 2025-11-04 03:28:57.504 00:00:00.000 UDP 28.104.0.1:54504 -> 198.28.0.2:53 1 64 1 2025-11-04 03:29:57.792 00:00:00.000 UDP 28.104.0.1:55611 -> 198.28.0.2:53 1 64 1 2025-11-04 03:29:57.792 00:00:00.000 UDP 28.104.0.1:38029 -> 198.28.0.2:53 1 64 1 2025-11-04 03:29:57.803 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38029 1 109 1 2025-11-04 03:29:57.803 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55611 1 80 1 2025-11-04 03:26:15.941 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2384 1 2025-11-04 03:26:52.601 00:05:08.503 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-04 03:30:58.114 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59131 1 109 1 2025-11-04 03:30:58.114 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40155 1 80 1 2025-11-04 03:30:58.104 00:00:00.000 UDP 28.104.0.1:59131 -> 198.28.0.2:53 1 64 1 2025-11-04 03:30:58.104 00:00:00.000 UDP 28.104.0.1:40155 -> 198.28.0.2:53 1 64 1 2025-11-04 03:31:58.406 00:00:00.000 UDP 28.104.0.1:54406 -> 198.28.0.2:53 1 64 1 2025-11-04 03:27:01.093 00:06:00.132 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-04 03:31:58.406 00:00:00.000 UDP 28.104.0.1:55069 -> 198.28.0.2:53 1 64 1 2025-11-04 03:27:01.093 00:06:00.097 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-04 03:31:58.416 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55069 1 109 1 2025-11-04 03:31:58.416 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54406 1 80 1 2025-11-04 03:32:24.205 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-04 03:32:58.719 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45532 1 109 1 2025-11-04 03:32:58.719 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52035 1 80 1 2025-11-04 03:32:58.709 00:00:00.000 UDP 28.104.0.1:52035 -> 198.28.0.2:53 1 64 1 2025-11-04 03:32:58.709 00:00:00.000 UDP 28.104.0.1:45532 -> 198.28.0.2:53 1 64 1 2025-11-04 03:28:52.603 00:05:08.559 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-04 03:33:59.038 00:00:00.000 UDP 28.104.0.1:42313 -> 198.28.0.2:53 1 64 1 2025-11-04 03:29:52.613 00:05:08.482 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-04 03:33:59.038 00:00:00.000 UDP 28.104.0.1:39970 -> 198.28.0.2:53 1 64 1 2025-11-04 03:33:59.052 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39970 1 109 1 2025-11-04 03:33:59.050 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42313 1 80 1 2025-11-04 03:34:59.359 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34708 1 80 1 2025-11-04 03:34:59.358 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41546 1 109 1 2025-11-04 03:34:59.350 00:00:00.000 UDP 28.104.0.1:41546 -> 198.28.0.2:53 1 64 1 2025-11-04 03:34:59.350 00:00:00.000 UDP 28.104.0.1:34708 -> 198.28.0.2:53 1 64 1 2025-11-04 03:30:52.656 00:05:08.497 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-04 03:31:35.949 00:05:00.184 OSPF 28.0.2.1:0 -> 224.0.0.5:0 45 3384 1 2025-11-04 03:35:59.660 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55020 1 80 1 2025-11-04 03:35:59.661 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60201 1 109 1 2025-11-04 03:35:59.651 00:00:00.000 UDP 28.104.0.1:55020 -> 198.28.0.2:53 1 64 1 2025-11-04 03:35:59.650 00:00:00.000 UDP 28.104.0.1:60201 -> 198.28.0.2:53 1 64 1 2025-11-04 03:36:59.973 00:00:00.000 UDP 28.104.0.1:43546 -> 198.28.0.2:53 1 64 1 2025-11-04 03:36:59.973 00:00:00.000 UDP 28.104.0.1:55866 -> 198.28.0.2:53 1 64 1 2025-11-04 03:36:59.984 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55866 1 80 1 2025-11-04 03:32:52.605 00:05:08.501 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-04 03:36:59.984 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43546 1 109 1 2025-11-04 03:37:24.364 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-04 03:38:00.284 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56608 1 109 1 2025-11-04 03:38:00.284 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35396 1 80 1 2025-11-04 03:38:00.273 00:00:00.000 UDP 28.104.0.1:56608 -> 198.28.0.2:53 1 64 1 2025-11-04 03:38:00.273 00:00:00.000 UDP 28.104.0.1:35396 -> 198.28.0.2:53 1 64 1 2025-11-04 03:39:00.569 00:00:00.000 UDP 28.104.0.1:34132 -> 198.28.0.2:53 1 64 1 2025-11-04 03:39:00.569 00:00:00.000 UDP 28.104.0.1:55245 -> 198.28.0.2:53 1 64 1 2025-11-04 03:34:01.095 00:06:00.131 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-04 03:34:01.095 00:06:00.098 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-04 03:39:00.579 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55245 1 109 1 2025-11-04 03:34:52.606 00:05:08.557 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-04 03:39:00.579 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34132 1 80 1 2025-11-04 03:40:00.873 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48458 1 109 1 2025-11-04 03:40:00.872 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37331 1 80 1 2025-11-04 03:40:00.862 00:00:00.000 UDP 28.104.0.1:48458 -> 198.28.0.2:53 1 64 1 2025-11-04 03:40:00.861 00:00:00.000 UDP 28.104.0.1:37331 -> 198.28.0.2:53 1 64 1 2025-11-04 03:35:52.616 00:05:08.479 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-04 03:36:45.955 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2448 1 2025-11-04 03:41:01.192 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48725 1 80 1 2025-11-04 03:41:01.192 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41354 1 109 1 2025-11-04 03:36:52.657 00:05:08.497 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-04 03:41:01.183 00:00:00.000 UDP 28.104.0.1:41354 -> 198.28.0.2:53 1 64 1 2025-11-04 03:41:01.183 00:00:00.000 UDP 28.104.0.1:48725 -> 198.28.0.2:53 1 64 1 2025-11-04 03:42:01.483 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55473 1 109 1 2025-11-04 03:42:01.483 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41466 1 80 1 2025-11-04 03:42:01.472 00:00:00.000 UDP 28.104.0.1:55473 -> 198.28.0.2:53 1 64 1 2025-11-04 03:42:01.472 00:00:00.000 UDP 28.104.0.1:41466 -> 198.28.0.2:53 1 64 1 2025-11-04 03:42:24.331 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-04 03:43:01.724 00:00:00.000 UDP 28.104.0.1:38228 -> 198.28.0.2:53 1 64 1 2025-11-04 03:43:01.724 00:00:00.000 UDP 28.104.0.1:44623 -> 198.28.0.2:53 1 64 1 2025-11-04 03:43:01.735 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44623 1 80 1 2025-11-04 03:43:01.735 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38228 1 109 1 2025-11-04 03:38:52.607 00:05:08.500 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-04 03:44:01.988 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54780 1 80 1 2025-11-04 03:44:01.988 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54444 1 109 1 2025-11-04 03:44:01.977 00:00:00.000 UDP 28.104.0.1:54444 -> 198.28.0.2:53 1 64 1 2025-11-04 03:44:01.977 00:00:00.000 UDP 28.104.0.1:54780 -> 198.28.0.2:53 1 64 1 2025-11-04 03:40:52.608 00:05:08.556 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-04 03:45:02.252 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49103 1 80 1 2025-11-04 03:45:02.252 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34662 1 109 1 2025-11-04 03:45:02.242 00:00:00.000 UDP 28.104.0.1:49103 -> 198.28.0.2:53 1 64 1 2025-11-04 03:45:02.242 00:00:00.000 UDP 28.104.0.1:34662 -> 198.28.0.2:53 1 64 1 2025-11-04 03:41:01.096 00:06:00.001 TCP 28.154.0.1:179 -> 28.155.0.1:36643 13 809 1 2025-11-04 03:41:01.096 00:06:00.001 TCP 28.154.0.1:179 -> 28.157.0.1:37077 13 809 1 2025-11-04 03:41:52.619 00:05:08.478 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-04 03:46:02.542 00:00:00.000 UDP 28.104.0.1:54304 -> 198.28.0.2:53 1 64 1 2025-11-04 03:46:02.542 00:00:00.000 UDP 28.104.0.1:48915 -> 198.28.0.2:53 1 64 1 2025-11-04 03:46:02.554 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48915 1 80 1 2025-11-04 03:46:02.554 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54304 1 109 1 2025-11-04 03:42:05.960 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 43 3100 1 2025-11-04 03:42:52.659 00:05:08.496 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-04 03:47:02.841 00:00:00.000 UDP 28.104.0.1:42168 -> 198.28.0.2:53 1 64 1 2025-11-04 03:47:02.840 00:00:00.000 UDP 28.104.0.1:46341 -> 198.28.0.2:53 1 64 1 2025-11-04 03:47:02.852 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42168 1 80 1 2025-11-04 03:47:02.852 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46341 1 109 1 2025-11-04 03:47:24.544 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-04 03:47:01.229 00:01:00.000 TCP 28.154.0.1:179 -> 28.157.0.1:37077 3 175 1 2025-11-04 03:47:01.194 00:01:00.001 TCP 28.154.0.1:179 -> 28.155.0.1:36643 3 175 1 2025-11-04 03:48:03.143 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59432 1 109 1 2025-11-04 03:48:03.143 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38874 1 80 1 2025-11-04 03:48:03.132 00:00:00.000 UDP 28.104.0.1:59432 -> 198.28.0.2:53 1 64 1 2025-11-04 03:48:03.132 00:00:00.000 UDP 28.104.0.1:38874 -> 198.28.0.2:53 1 64 1 2025-11-04 03:44:52.610 00:05:08.498 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-04 03:49:03.425 00:00:00.000 UDP 28.104.0.1:60066 -> 198.28.0.2:53 1 64 1 2025-11-04 03:49:03.425 00:00:00.000 UDP 28.104.0.1:53156 -> 198.28.0.2:53 1 64 1 2025-11-04 03:49:03.434 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53156 1 109 1 2025-11-04 03:49:03.434 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60066 1 80 1 2025-11-04 03:50:03.734 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37079 1 80 1 2025-11-04 03:50:03.734 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40664 1 109 1 2025-11-04 03:50:03.723 00:00:00.000 UDP 28.104.0.1:37079 -> 198.28.0.2:53 1 64 1 2025-11-04 03:50:03.723 00:00:00.000 UDP 28.104.0.1:40664 -> 198.28.0.2:53 1 64 1 2025-11-04 03:46:52.610 00:05:08.555 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-04 03:51:03.984 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56656 1 109 1 2025-11-04 03:51:03.984 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44387 1 80 1 2025-11-04 03:51:03.975 00:00:00.000 UDP 28.104.0.1:44387 -> 198.28.0.2:53 1 64 1 2025-11-04 03:51:03.975 00:00:00.000 UDP 28.104.0.1:56656 -> 198.28.0.2:53 1 64 1 2025-11-04 03:47:25.967 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2592 1 2025-11-04 03:47:52.620 00:05:08.477 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-04 03:52:04.387 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38815 1 80 1 2025-11-04 03:52:04.387 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58459 1 109 1 2025-11-04 03:52:04.377 00:00:00.000 UDP 28.104.0.1:38815 -> 198.28.0.2:53 1 64 1 2025-11-04 03:52:04.377 00:00:00.000 UDP 28.104.0.1:58459 -> 198.28.0.2:53 1 64 1 2025-11-04 03:52:24.987 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-04 03:49:01.097 00:04:00.132 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-11-04 03:49:01.097 00:04:00.098 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-11-04 03:53:04.666 00:00:00.000 UDP 28.104.0.1:51498 -> 198.28.0.2:53 1 64 1 2025-11-04 03:48:52.661 00:05:08.495 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-04 03:53:04.666 00:00:00.000 UDP 28.104.0.1:43683 -> 198.28.0.2:53 1 64 1 2025-11-04 03:53:04.676 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43683 1 80 1 2025-11-04 03:53:04.676 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51498 1 109 1 2025-11-04 03:54:04.970 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41407 1 80 1 2025-11-04 03:54:04.970 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58948 1 109 1 2025-11-04 03:54:04.960 00:00:00.000 UDP 28.104.0.1:58948 -> 198.28.0.2:53 1 64 1 2025-11-04 03:54:04.960 00:00:00.000 UDP 28.104.0.1:41407 -> 198.28.0.2:53 1 64 1 2025-11-04 03:55:05.223 00:00:00.000 UDP 28.104.0.1:57662 -> 198.28.0.2:53 1 64 1 2025-11-04 03:55:05.224 00:00:00.000 UDP 28.104.0.1:37324 -> 198.28.0.2:53 1 64 1 2025-11-04 03:50:52.611 00:05:08.496 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-04 03:55:05.233 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37324 1 109 1 2025-11-04 03:55:05.233 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57662 1 80 1 2025-11-04 03:56:05.518 00:00:00.000 UDP 28.104.0.1:60752 -> 198.28.0.2:53 1 64 1 2025-11-04 03:56:05.518 00:00:00.000 UDP 28.104.0.1:54805 -> 198.28.0.2:53 1 64 1 2025-11-04 03:56:05.530 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54805 1 80 1 2025-11-04 03:56:05.530 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60752 1 109 1 2025-11-04 03:52:45.971 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2384 1 2025-11-04 03:52:52.611 00:05:08.554 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-04 03:57:05.821 00:00:00.000 UDP 28.104.0.1:57119 -> 198.28.0.2:53 1 64 1 2025-11-04 03:57:05.821 00:00:00.000 UDP 28.104.0.1:40496 -> 198.28.0.2:53 1 64 1 2025-11-04 03:57:05.832 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57119 1 109 1 2025-11-04 03:57:05.832 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40496 1 80 1 2025-11-04 03:57:24.607 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-04 03:54:01.098 00:04:00.135 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-11-04 03:54:01.098 00:04:00.101 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-11-04 03:58:06.121 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45206 1 80 1 2025-11-04 03:58:06.121 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59792 1 109 1 2025-11-04 03:53:52.625 00:05:08.477 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-04 03:58:06.110 00:00:00.000 UDP 28.104.0.1:59792 -> 198.28.0.2:53 1 64 1 2025-11-04 03:58:06.110 00:00:00.000 UDP 28.104.0.1:45206 -> 198.28.0.2:53 1 64 1 Summary: total flows: 323, total bytes: 96935, total packets: 1432, avg bps: 201, avg pps: 0, avg bpp: 67 Time window: 2025-11-04 02:54:52 - 2025-11-04 03:59:01 Total flows processed: 323, passed: 323, Blocks skipped: 0, Bytes read: 33656 Sys: 0.0021s User: 0.0042s Wall: 0.0042s flows/second: 76996.9 Runtime: 0.0042s