Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-04 18:58:58.611 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34661 1 109 1 2025-11-04 18:58:58.611 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39698 1 80 1 2025-11-04 18:57:01.372 00:02:00.096 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-11-04 18:57:01.372 00:02:00.130 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-11-04 18:58:58.601 00:00:00.000 UDP 28.104.0.1:39698 -> 198.28.0.2:53 1 64 1 2025-11-04 18:58:58.601 00:00:00.000 UDP 28.104.0.1:34661 -> 198.28.0.2:53 1 64 1 2025-11-04 18:54:52.949 00:05:08.542 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-04 18:59:59.446 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52532 1 109 1 2025-11-04 18:59:59.446 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48081 1 80 1 2025-11-04 18:59:59.435 00:00:00.000 UDP 28.104.0.1:52532 -> 198.28.0.2:53 1 64 1 2025-11-04 18:59:59.435 00:00:00.000 UDP 28.104.0.1:48081 -> 198.28.0.2:53 1 64 1 2025-11-04 19:00:59.735 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53017 1 80 1 2025-11-04 19:00:59.734 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48368 1 109 1 2025-11-04 19:00:01.374 00:01:00.093 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-04 19:00:01.374 00:01:00.128 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-04 19:00:59.725 00:00:00.000 UDP 28.104.0.1:48368 -> 198.28.0.2:53 1 64 1 2025-11-04 19:00:59.725 00:00:00.000 UDP 28.104.0.1:53017 -> 198.28.0.2:53 1 64 1 2025-11-04 18:56:52.899 00:05:08.486 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-04 18:56:57.273 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 43 3016 1 2025-11-04 19:01:59.986 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48564 1 80 1 2025-11-04 19:01:59.986 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50343 1 109 1 2025-11-04 19:01:59.976 00:00:00.000 UDP 28.104.0.1:48564 -> 198.28.0.2:53 1 64 1 2025-11-04 19:01:59.976 00:00:00.000 UDP 28.104.0.1:50343 -> 198.28.0.2:53 1 64 1 2025-11-04 19:02:42.984 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-04 19:03:00.723 00:00:00.000 UDP 28.104.0.1:35911 -> 198.28.0.2:53 1 64 1 2025-11-04 19:03:00.723 00:00:00.000 UDP 28.104.0.1:35647 -> 198.28.0.2:53 1 64 1 2025-11-04 18:58:52.899 00:05:08.603 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-04 19:03:00.732 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35647 1 109 1 2025-11-04 19:03:00.732 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35911 1 80 1 2025-11-04 19:04:01.053 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58270 1 109 1 2025-11-04 19:04:01.053 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45809 1 80 1 2025-11-04 19:02:01.375 00:02:00.093 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-11-04 19:02:01.375 00:02:00.127 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-11-04 19:04:01.042 00:00:00.000 UDP 28.104.0.1:45809 -> 198.28.0.2:53 1 64 1 2025-11-04 19:04:01.042 00:00:00.000 UDP 28.104.0.1:58270 -> 198.28.0.2:53 1 64 1 2025-11-04 18:59:52.909 00:05:08.465 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-04 19:05:01.356 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58647 1 80 1 2025-11-04 19:05:01.356 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51263 1 109 1 2025-11-04 19:00:52.949 00:05:08.542 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-04 19:05:01.346 00:00:00.000 UDP 28.104.0.1:58647 -> 198.28.0.2:53 1 64 1 2025-11-04 19:05:01.346 00:00:00.000 UDP 28.104.0.1:51263 -> 198.28.0.2:53 1 64 1 2025-11-04 19:05:01.375 00:01:00.094 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-04 19:05:01.375 00:01:00.128 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-04 19:06:09.982 00:00:00.000 UDP 28.104.0.1:39628 -> 198.28.0.2:53 1 64 1 2025-11-04 19:06:09.982 00:00:00.000 UDP 28.104.0.1:55728 -> 198.28.0.2:53 1 64 1 2025-11-04 19:06:09.992 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39628 1 109 1 2025-11-04 19:06:09.992 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55728 1 80 1 2025-11-04 19:02:17.275 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2512 1 2025-11-04 19:02:52.901 00:05:08.485 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-04 19:07:10.284 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44531 1 109 1 2025-11-04 19:07:10.284 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53544 1 80 1 2025-11-04 19:07:10.274 00:00:00.000 UDP 28.104.0.1:44531 -> 198.28.0.2:53 1 64 1 2025-11-04 19:07:10.274 00:00:00.000 UDP 28.104.0.1:53544 -> 198.28.0.2:53 1 64 1 2025-11-04 19:07:43.154 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-04 19:08:10.570 00:00:00.000 UDP 28.104.0.1:54021 -> 198.28.0.2:53 1 64 1 2025-11-04 19:08:10.570 00:00:00.000 UDP 28.104.0.1:33770 -> 198.28.0.2:53 1 64 1 2025-11-04 19:08:10.581 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33770 1 80 1 2025-11-04 19:08:10.581 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54021 1 109 1 2025-11-04 19:07:01.376 00:02:00.094 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-11-04 19:07:01.376 00:02:00.128 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-11-04 19:04:52.901 00:05:08.601 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-04 19:09:17.285 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48764 1 109 1 2025-11-04 19:09:17.285 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60808 1 80 1 2025-11-04 19:09:17.275 00:00:00.000 UDP 28.104.0.1:48764 -> 198.28.0.2:53 1 64 1 2025-11-04 19:09:17.274 00:00:00.000 UDP 28.104.0.1:60808 -> 198.28.0.2:53 1 64 1 2025-11-04 19:05:52.911 00:05:08.464 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-04 19:10:17.529 00:00:00.000 UDP 28.104.0.1:53808 -> 198.28.0.2:53 1 64 1 2025-11-04 19:10:17.529 00:00:00.000 UDP 28.104.0.1:40518 -> 198.28.0.2:53 1 64 1 2025-11-04 19:10:17.539 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40518 1 109 1 2025-11-04 19:10:17.539 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53808 1 80 1 2025-11-04 19:10:01.376 00:01:00.094 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-04 19:10:01.376 00:01:00.129 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-04 19:06:52.952 00:05:08.540 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-04 19:11:17.789 00:00:00.000 UDP 28.104.0.1:47695 -> 198.28.0.2:53 1 64 1 2025-11-04 19:11:17.789 00:00:00.000 UDP 28.104.0.1:35765 -> 198.28.0.2:53 1 64 1 2025-11-04 19:11:17.799 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35765 1 80 1 2025-11-04 19:11:17.799 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47695 1 109 1 2025-11-04 19:07:37.281 00:05:10.009 OSPF 28.0.2.1:0 -> 224.0.0.5:0 34 2320 1 2025-11-04 19:12:18.153 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58429 1 109 1 2025-11-04 19:12:18.153 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55773 1 80 1 2025-11-04 19:12:18.143 00:00:00.000 UDP 28.104.0.1:58429 -> 198.28.0.2:53 1 64 1 2025-11-04 19:12:18.144 00:00:00.000 UDP 28.104.0.1:55773 -> 198.28.0.2:53 1 64 1 2025-11-04 19:12:43.192 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-04 19:08:52.902 00:05:08.484 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-04 19:13:18.459 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41618 1 109 1 2025-11-04 19:13:18.459 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33807 1 80 1 2025-11-04 19:13:18.448 00:00:00.000 UDP 28.104.0.1:33807 -> 198.28.0.2:53 1 64 1 2025-11-04 19:13:18.448 00:00:00.000 UDP 28.104.0.1:41618 -> 198.28.0.2:53 1 64 1 2025-11-04 19:14:18.759 00:00:00.000 UDP 28.104.0.1:33945 -> 198.28.0.2:53 1 64 1 2025-11-04 19:14:18.759 00:00:00.000 UDP 28.104.0.1:51764 -> 198.28.0.2:53 1 64 1 2025-11-04 19:14:18.769 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51764 1 109 1 2025-11-04 19:14:18.769 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33945 1 80 1 2025-11-04 19:10:52.902 00:05:08.600 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-04 19:15:19.071 00:00:00.000 UDP 28.104.0.1:54977 -> 198.28.0.2:53 1 64 1 2025-11-04 19:15:19.071 00:00:00.000 UDP 28.104.0.1:60167 -> 198.28.0.2:53 1 64 1 2025-11-04 19:15:19.080 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54977 1 109 1 2025-11-04 19:15:19.080 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60167 1 80 1 2025-11-04 19:12:01.376 00:04:00.095 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-11-04 19:12:01.376 00:04:00.132 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-11-04 19:11:52.913 00:05:08.464 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-04 19:16:19.368 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50178 1 80 1 2025-11-04 19:16:19.368 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60315 1 109 1 2025-11-04 19:16:19.359 00:00:00.000 UDP 28.104.0.1:50178 -> 198.28.0.2:53 1 64 1 2025-11-04 19:16:19.359 00:00:00.000 UDP 28.104.0.1:60315 -> 198.28.0.2:53 1 64 1 2025-11-04 19:12:52.953 00:05:08.539 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-04 19:12:57.290 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 3056 1 2025-11-04 19:17:19.650 00:00:00.000 UDP 28.104.0.1:54668 -> 198.28.0.2:53 1 64 1 2025-11-04 19:17:19.650 00:00:00.000 UDP 28.104.0.1:42887 -> 198.28.0.2:53 1 64 1 2025-11-04 19:17:19.660 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54668 1 80 1 2025-11-04 19:17:19.660 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42887 1 109 1 2025-11-04 19:17:43.198 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-04 19:17:01.376 00:01:00.095 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-04 19:17:01.376 00:01:00.131 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-04 19:18:19.959 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43619 1 80 1 2025-11-04 19:18:19.959 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59053 1 109 1 2025-11-04 19:18:19.950 00:00:00.000 UDP 28.104.0.1:43619 -> 198.28.0.2:53 1 64 1 2025-11-04 19:18:19.950 00:00:00.000 UDP 28.104.0.1:59053 -> 198.28.0.2:53 1 64 1 2025-11-04 19:14:52.905 00:05:08.487 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-04 19:19:20.255 00:00:00.000 UDP 28.104.0.1:47190 -> 198.28.0.2:53 1 64 1 2025-11-04 19:19:20.254 00:00:00.000 UDP 28.104.0.1:35389 -> 198.28.0.2:53 1 64 1 2025-11-04 19:19:20.266 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35389 1 109 1 2025-11-04 19:19:20.266 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47190 1 80 1 2025-11-04 19:20:20.554 00:00:00.000 UDP 28.104.0.1:54407 -> 198.28.0.2:53 1 64 1 2025-11-04 19:20:20.554 00:00:00.000 UDP 28.104.0.1:34585 -> 198.28.0.2:53 1 64 1 2025-11-04 19:20:20.563 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54407 1 109 1 2025-11-04 19:20:20.564 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34585 1 80 1 2025-11-04 19:19:01.380 00:02:00.092 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-11-04 19:19:01.380 00:02:00.127 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-11-04 19:16:52.905 00:05:08.599 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-04 19:21:20.858 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59866 1 109 1 2025-11-04 19:21:20.858 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35547 1 80 1 2025-11-04 19:21:20.847 00:00:00.000 UDP 28.104.0.1:35547 -> 198.28.0.2:53 1 64 1 2025-11-04 19:21:20.847 00:00:00.000 UDP 28.104.0.1:59866 -> 198.28.0.2:53 1 64 1 2025-11-04 19:17:52.914 00:05:08.470 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-04 19:22:21.132 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57797 1 80 1 2025-11-04 19:22:21.132 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40599 1 109 1 2025-11-04 19:22:21.121 00:00:00.000 UDP 28.104.0.1:40599 -> 198.28.0.2:53 1 64 1 2025-11-04 19:22:21.122 00:00:00.000 UDP 28.104.0.1:57797 -> 198.28.0.2:53 1 64 1 2025-11-04 19:18:17.297 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2656 1 2025-11-04 19:22:43.213 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-04 19:22:01.382 00:01:00.091 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-04 19:22:01.382 00:01:00.127 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-04 19:18:52.954 00:05:08.539 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-04 19:23:21.439 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42915 1 80 1 2025-11-04 19:23:21.440 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33967 1 109 1 2025-11-04 19:23:21.428 00:00:00.000 UDP 28.104.0.1:42915 -> 198.28.0.2:53 1 64 1 2025-11-04 19:23:21.427 00:00:00.000 UDP 28.104.0.1:33967 -> 198.28.0.2:53 1 64 1 2025-11-04 19:24:21.690 00:00:00.000 UDP 28.104.0.1:46777 -> 198.28.0.2:53 1 64 1 2025-11-04 19:24:21.690 00:00:00.000 UDP 28.104.0.1:57724 -> 198.28.0.2:53 1 64 1 2025-11-04 19:24:21.699 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57724 1 80 1 2025-11-04 19:24:21.699 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46777 1 109 1 2025-11-04 19:20:52.905 00:05:08.486 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-04 19:25:21.952 00:00:00.000 UDP 28.104.0.1:53121 -> 198.28.0.2:53 1 64 1 2025-11-04 19:25:21.952 00:00:00.000 UDP 28.104.0.1:48553 -> 198.28.0.2:53 1 64 1 2025-11-04 19:25:21.962 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48553 1 109 1 2025-11-04 19:25:21.962 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53121 1 80 1 2025-11-04 19:24:01.381 00:02:00.091 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-11-04 19:24:01.381 00:02:00.127 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-11-04 19:26:22.248 00:00:00.000 UDP 28.104.0.1:33071 -> 198.28.0.2:53 1 64 1 2025-11-04 19:26:22.249 00:00:00.000 UDP 28.104.0.1:41755 -> 198.28.0.2:53 1 64 1 2025-11-04 19:26:22.258 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33071 1 80 1 2025-11-04 19:26:22.259 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41755 1 109 1 2025-11-04 19:22:52.906 00:05:08.598 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-04 19:27:22.547 00:00:00.000 UDP 28.104.0.1:53063 -> 198.28.0.2:53 1 64 1 2025-11-04 19:27:22.547 00:00:00.000 UDP 28.104.0.1:57257 -> 198.28.0.2:53 1 64 1 2025-11-04 19:27:22.557 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53063 1 80 1 2025-11-04 19:27:22.557 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57257 1 109 1 2025-11-04 19:27:43.388 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-04 19:23:37.303 00:05:10.014 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2944 1 2025-11-04 19:27:01.383 00:01:00.090 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-04 19:27:01.383 00:01:00.126 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-04 19:23:52.916 00:05:08.466 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-04 19:28:22.849 00:00:00.000 UDP 28.104.0.1:52774 -> 198.28.0.2:53 1 64 1 2025-11-04 19:28:22.849 00:00:00.000 UDP 28.104.0.1:35683 -> 198.28.0.2:53 1 64 1 2025-11-04 19:28:22.860 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52774 1 80 1 2025-11-04 19:28:22.860 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35683 1 109 1 2025-11-04 19:24:52.958 00:05:08.537 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-04 19:29:23.137 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37974 1 109 1 2025-11-04 19:29:23.137 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48394 1 80 1 2025-11-04 19:29:23.126 00:00:00.000 UDP 28.104.0.1:48394 -> 198.28.0.2:53 1 64 1 2025-11-04 19:29:23.126 00:00:00.000 UDP 28.104.0.1:37974 -> 198.28.0.2:53 1 64 1 2025-11-04 19:30:23.423 00:00:00.000 UDP 28.104.0.1:57740 -> 198.28.0.2:53 1 64 1 2025-11-04 19:30:23.423 00:00:00.000 UDP 28.104.0.1:56210 -> 198.28.0.2:53 1 64 1 2025-11-04 19:30:23.433 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56210 1 109 1 2025-11-04 19:30:23.433 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57740 1 80 1 2025-11-04 19:29:01.382 00:02:00.092 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-11-04 19:29:01.382 00:02:00.130 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-11-04 19:26:52.907 00:05:08.486 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-04 19:31:23.723 00:00:00.000 UDP 28.104.0.1:33726 -> 198.28.0.2:53 1 64 1 2025-11-04 19:31:23.723 00:00:00.000 UDP 28.104.0.1:55974 -> 198.28.0.2:53 1 64 1 2025-11-04 19:31:23.734 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33726 1 80 1 2025-11-04 19:31:23.734 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55974 1 109 1 2025-11-04 19:32:24.057 00:00:00.000 UDP 28.104.0.1:33830 -> 198.28.0.2:53 1 64 1 2025-11-04 19:32:24.057 00:00:00.000 UDP 28.104.0.1:47134 -> 198.28.0.2:53 1 64 1 2025-11-04 19:32:24.068 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47134 1 109 1 2025-11-04 19:32:24.068 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33830 1 80 1 2025-11-04 19:32:43.890 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-04 19:32:01.384 00:01:00.090 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-04 19:32:01.384 00:01:00.129 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-04 19:28:52.909 00:05:08.597 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-04 19:28:57.318 00:05:10.010 OSPF 28.0.2.1:0 -> 224.0.0.5:0 43 2960 1 2025-11-04 19:33:24.350 00:00:00.000 UDP 28.104.0.1:34895 -> 198.28.0.2:53 1 64 1 2025-11-04 19:33:24.349 00:00:00.000 UDP 28.104.0.1:57050 -> 198.28.0.2:53 1 64 1 2025-11-04 19:33:24.359 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34895 1 80 1 2025-11-04 19:33:24.359 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57050 1 109 1 2025-11-04 19:29:52.918 00:05:08.466 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-04 19:34:24.645 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36613 1 80 1 2025-11-04 19:34:24.645 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39356 1 109 1 2025-11-04 19:34:24.634 00:00:00.000 UDP 28.104.0.1:36613 -> 198.28.0.2:53 1 64 1 2025-11-04 19:34:24.635 00:00:00.000 UDP 28.104.0.1:39356 -> 198.28.0.2:53 1 64 1 2025-11-04 19:30:52.958 00:05:08.537 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-04 19:35:24.946 00:00:00.000 UDP 28.104.0.1:60360 -> 198.28.0.2:53 1 64 1 2025-11-04 19:35:24.945 00:00:00.000 UDP 28.104.0.1:52924 -> 198.28.0.2:53 1 64 1 2025-11-04 19:35:24.957 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60360 1 109 1 2025-11-04 19:35:24.956 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52924 1 80 1 2025-11-04 19:34:01.383 00:02:00.093 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-11-04 19:34:01.383 00:02:00.130 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-11-04 19:36:25.239 00:00:00.000 UDP 28.104.0.1:56822 -> 198.28.0.2:53 1 64 1 2025-11-04 19:36:25.239 00:00:00.000 UDP 28.104.0.1:41233 -> 198.28.0.2:53 1 64 1 2025-11-04 19:36:25.251 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56822 1 109 1 2025-11-04 19:36:25.251 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41233 1 80 1 2025-11-04 19:32:52.909 00:05:08.486 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-04 19:37:25.553 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44402 1 80 1 2025-11-04 19:37:25.553 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54160 1 109 1 2025-11-04 19:37:25.543 00:00:00.000 UDP 28.104.0.1:54160 -> 198.28.0.2:53 1 64 1 2025-11-04 19:37:25.543 00:00:00.000 UDP 28.104.0.1:44402 -> 198.28.0.2:53 1 64 1 2025-11-04 19:37:43.544 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-04 19:37:01.385 00:01:00.093 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-04 19:37:01.385 00:01:00.128 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-04 19:38:25.862 00:00:00.000 UDP 28.104.0.1:49887 -> 198.28.0.2:53 1 64 1 2025-11-04 19:38:25.861 00:00:00.000 UDP 28.104.0.1:33742 -> 198.28.0.2:53 1 64 1 2025-11-04 19:38:25.872 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49887 1 109 1 2025-11-04 19:38:25.871 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33742 1 80 1 2025-11-04 19:34:17.327 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2384 1 2025-11-04 19:34:52.911 00:05:08.600 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-04 19:39:26.188 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60940 1 109 1 2025-11-04 19:39:26.188 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57861 1 80 1 2025-11-04 19:39:26.178 00:00:00.000 UDP 28.104.0.1:60940 -> 198.28.0.2:53 1 64 1 2025-11-04 19:39:26.178 00:00:00.000 UDP 28.104.0.1:57861 -> 198.28.0.2:53 1 64 1 2025-11-04 19:35:52.920 00:05:08.467 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-04 19:40:26.492 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48353 1 109 1 2025-11-04 19:40:26.492 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45174 1 80 1 2025-11-04 19:40:26.482 00:00:00.000 UDP 28.104.0.1:48353 -> 198.28.0.2:53 1 64 1 2025-11-04 19:40:26.482 00:00:00.000 UDP 28.104.0.1:45174 -> 198.28.0.2:53 1 64 1 2025-11-04 19:39:01.389 00:02:00.090 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-11-04 19:39:01.389 00:02:00.126 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-11-04 19:36:52.959 00:05:08.540 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-04 19:41:26.785 00:00:00.000 UDP 28.104.0.1:41468 -> 198.28.0.2:53 1 64 1 2025-11-04 19:41:26.785 00:00:00.000 UDP 28.104.0.1:50811 -> 198.28.0.2:53 1 64 1 2025-11-04 19:41:26.796 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41468 1 80 1 2025-11-04 19:41:26.795 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50811 1 109 1 2025-11-04 19:42:27.085 00:00:00.000 UDP 28.104.0.1:50493 -> 198.28.0.2:53 1 64 1 2025-11-04 19:42:27.085 00:00:00.000 UDP 28.104.0.1:58200 -> 198.28.0.2:53 1 64 1 2025-11-04 19:42:27.095 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50493 1 109 1 2025-11-04 19:42:27.095 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58200 1 80 1 2025-11-04 19:42:43.737 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-04 19:42:01.387 00:01:00.092 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-04 19:42:01.387 00:01:00.128 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-04 19:38:52.911 00:05:08.486 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-04 19:43:27.368 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54514 1 109 1 2025-11-04 19:43:27.368 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37843 1 80 1 2025-11-04 19:43:27.357 00:00:00.000 UDP 28.104.0.1:54514 -> 198.28.0.2:53 1 64 1 2025-11-04 19:43:27.358 00:00:00.000 UDP 28.104.0.1:37843 -> 198.28.0.2:53 1 64 1 2025-11-04 19:39:37.334 00:05:10.013 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2568 1 2025-11-04 19:44:27.626 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52940 1 109 1 2025-11-04 19:44:27.626 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34146 1 80 1 2025-11-04 19:44:27.615 00:00:00.000 UDP 28.104.0.1:34146 -> 198.28.0.2:53 1 64 1 2025-11-04 19:44:27.615 00:00:00.000 UDP 28.104.0.1:52940 -> 198.28.0.2:53 1 64 1 2025-11-04 19:40:52.911 00:05:08.599 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-04 19:45:27.866 00:00:00.000 UDP 28.104.0.1:43802 -> 198.28.0.2:53 1 64 1 2025-11-04 19:45:27.867 00:00:00.000 UDP 28.104.0.1:49011 -> 198.28.0.2:53 1 64 1 2025-11-04 19:45:27.877 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49011 1 109 1 2025-11-04 19:45:27.877 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43802 1 80 1 2025-11-04 19:44:01.387 00:02:00.092 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-11-04 19:44:01.387 00:02:00.128 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-11-04 19:41:52.921 00:05:08.466 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-04 19:46:28.192 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43941 1 80 1 2025-11-04 19:46:28.192 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36819 1 109 1 2025-11-04 19:46:28.181 00:00:00.000 UDP 28.104.0.1:36819 -> 198.28.0.2:53 1 64 1 2025-11-04 19:46:28.181 00:00:00.000 UDP 28.104.0.1:43941 -> 198.28.0.2:53 1 64 1 2025-11-04 19:42:52.962 00:05:08.540 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-04 19:47:28.489 00:00:00.000 UDP 28.104.0.1:50171 -> 198.28.0.2:53 1 64 1 2025-11-04 19:47:28.489 00:00:00.000 UDP 28.104.0.1:34251 -> 198.28.0.2:53 1 64 1 2025-11-04 19:47:28.500 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50171 1 109 1 2025-11-04 19:47:28.500 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34251 1 80 1 2025-11-04 19:47:43.778 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-04 19:47:01.387 00:01:00.091 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-04 19:47:01.387 00:01:00.128 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-04 19:48:28.779 00:00:00.000 UDP 28.104.0.1:42028 -> 198.28.0.2:53 1 64 1 2025-11-04 19:48:28.779 00:00:00.000 UDP 28.104.0.1:40582 -> 198.28.0.2:53 1 64 1 2025-11-04 19:48:28.790 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42028 1 80 1 2025-11-04 19:48:28.790 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40582 1 109 1 2025-11-04 19:44:52.911 00:05:08.487 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-04 19:44:57.347 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 42 3124 1 2025-11-04 19:49:29.096 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40222 1 109 1 2025-11-04 19:49:29.096 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43806 1 80 1 2025-11-04 19:49:29.088 00:00:00.000 UDP 28.104.0.1:40222 -> 198.28.0.2:53 1 64 1 2025-11-04 19:49:29.088 00:00:00.000 UDP 28.104.0.1:43806 -> 198.28.0.2:53 1 64 1 2025-11-04 19:49:01.388 00:01:00.093 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-04 19:49:01.388 00:01:00.129 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-04 19:50:29.392 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52071 1 80 1 2025-11-04 19:50:29.392 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58899 1 109 1 2025-11-04 19:50:29.383 00:00:00.000 UDP 28.104.0.1:52071 -> 198.28.0.2:53 1 64 1 2025-11-04 19:50:29.383 00:00:00.000 UDP 28.104.0.1:58899 -> 198.28.0.2:53 1 64 1 2025-11-04 19:46:52.910 00:05:08.603 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-04 19:51:29.675 00:00:00.000 UDP 28.104.0.1:46835 -> 198.28.0.2:53 1 64 1 2025-11-04 19:51:29.676 00:00:00.000 UDP 28.104.0.1:44499 -> 198.28.0.2:53 1 64 1 2025-11-04 19:51:29.686 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46835 1 80 1 2025-11-04 19:51:29.686 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44499 1 109 1 2025-11-04 19:47:52.922 00:05:08.467 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-04 19:52:29.943 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58909 1 109 1 2025-11-04 19:52:29.943 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54268 1 80 1 2025-11-04 19:52:29.932 00:00:00.000 UDP 28.104.0.1:54268 -> 198.28.0.2:53 1 64 1 2025-11-04 19:52:29.932 00:00:00.000 UDP 28.104.0.1:58909 -> 198.28.0.2:53 1 64 1 2025-11-04 19:52:43.777 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-04 19:51:01.388 00:02:00.094 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-11-04 19:51:01.388 00:02:00.130 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-11-04 19:48:52.964 00:05:08.540 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-04 19:53:30.243 00:00:00.000 UDP 28.104.0.1:58318 -> 198.28.0.2:53 1 64 1 2025-11-04 19:53:30.244 00:00:00.000 UDP 28.104.0.1:40049 -> 198.28.0.2:53 1 64 1 2025-11-04 19:53:30.253 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40049 1 109 1 2025-11-04 19:53:30.253 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58318 1 80 1 2025-11-04 19:54:30.536 00:00:00.000 UDP 28.104.0.1:55309 -> 198.28.0.2:53 1 64 1 2025-11-04 19:54:30.536 00:00:00.000 UDP 28.104.0.1:49368 -> 198.28.0.2:53 1 64 1 2025-11-04 19:50:17.354 00:05:10.010 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2820 1 2025-11-04 19:54:30.547 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49368 1 109 1 2025-11-04 19:54:30.547 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55309 1 80 1 2025-11-04 19:54:01.388 00:01:00.098 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-04 19:54:01.388 00:01:00.133 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-04 19:50:52.914 00:05:08.487 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-04 19:55:30.790 00:00:00.000 UDP 28.104.0.1:45571 -> 198.28.0.2:53 1 64 1 2025-11-04 19:55:30.790 00:00:00.000 UDP 28.104.0.1:58748 -> 198.28.0.2:53 1 64 1 2025-11-04 19:55:30.801 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45571 1 80 1 2025-11-04 19:55:30.801 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58748 1 109 1 2025-11-04 19:56:31.617 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40811 1 80 1 2025-11-04 19:56:31.617 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46184 1 109 1 2025-11-04 19:56:31.609 00:00:00.000 UDP 28.104.0.1:46184 -> 198.28.0.2:53 1 64 1 2025-11-04 19:56:31.609 00:00:00.000 UDP 28.104.0.1:40811 -> 198.28.0.2:53 1 64 1 2025-11-04 19:52:52.915 00:05:08.604 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-04 19:57:31.900 00:00:00.000 UDP 28.104.0.1:48041 -> 198.28.0.2:53 1 64 1 2025-11-04 19:57:31.900 00:00:00.000 UDP 28.104.0.1:37002 -> 198.28.0.2:53 1 64 1 2025-11-04 19:57:31.910 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37002 1 109 1 2025-11-04 19:57:31.910 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48041 1 80 1 2025-11-04 19:57:43.973 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-04 19:56:01.391 00:02:00.096 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-11-04 19:56:01.391 00:02:00.133 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-11-04 19:53:52.924 00:05:08.467 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-04 19:58:32.211 00:00:00.000 UDP 28.104.0.1:43937 -> 198.28.0.2:53 1 64 1 2025-11-04 19:58:32.211 00:00:00.000 UDP 28.104.0.1:35589 -> 198.28.0.2:53 1 64 1 2025-11-04 19:58:32.221 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43937 1 109 1 2025-11-04 19:58:32.221 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35589 1 80 1 Summary: total flows: 351, total bytes: 97176, total packets: 1432, avg bps: 202, avg pps: 0, avg bpp: 67 Time window: 2025-11-04 18:54:52 - 2025-11-04 19:59:01 Total flows processed: 351, passed: 351, Blocks skipped: 0, Bytes read: 36568 Sys: 0.0040s User: 0.0030s Wall: 0.0035s flows/second: 99178.2 Runtime: 0.0036s