Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-04 19:54:52.964 00:05:08.544 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-04 19:59:32.515 00:00:00.000 UDP 28.104.0.1:46468 -> 198.28.0.2:53 1 64 1 2025-11-04 19:59:32.515 00:00:00.000 UDP 28.104.0.1:36201 -> 198.28.0.2:53 1 64 1 2025-11-04 19:59:32.525 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46468 1 80 1 2025-11-04 19:59:32.525 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36201 1 109 1 2025-11-04 19:55:37.363 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 42 2896 1 2025-11-04 19:59:01.391 00:01:00.096 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-04 19:59:01.391 00:01:00.134 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-04 20:00:32.816 00:00:00.000 UDP 28.104.0.1:58412 -> 198.28.0.2:53 1 64 1 2025-11-04 20:00:32.816 00:00:00.000 UDP 28.104.0.1:36192 -> 198.28.0.2:53 1 64 1 2025-11-04 20:00:32.825 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36192 1 80 1 2025-11-04 20:00:32.826 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58412 1 109 1 2025-11-04 19:56:52.913 00:05:08.488 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-04 20:01:33.109 00:00:00.000 UDP 28.104.0.1:60231 -> 198.28.0.2:53 1 64 1 2025-11-04 20:01:33.109 00:00:00.000 UDP 28.104.0.1:45135 -> 198.28.0.2:53 1 64 1 2025-11-04 20:01:33.120 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45135 1 80 1 2025-11-04 20:01:33.120 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60231 1 109 1 2025-11-04 20:02:33.412 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50320 1 109 1 2025-11-04 20:02:33.412 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60221 1 80 1 2025-11-04 20:02:33.402 00:00:00.000 UDP 28.104.0.1:60221 -> 198.28.0.2:53 1 64 1 2025-11-04 20:02:33.402 00:00:00.000 UDP 28.104.0.1:50320 -> 198.28.0.2:53 1 64 1 2025-11-04 20:02:44.125 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-04 20:01:01.392 00:02:00.096 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-11-04 20:01:01.392 00:02:00.133 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-11-04 19:58:52.913 00:05:08.606 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-04 20:03:33.706 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57169 1 80 1 2025-11-04 20:03:33.706 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34276 1 109 1 2025-11-04 20:03:33.696 00:00:00.000 UDP 28.104.0.1:34276 -> 198.28.0.2:53 1 64 1 2025-11-04 20:03:33.696 00:00:00.000 UDP 28.104.0.1:57169 -> 198.28.0.2:53 1 64 1 2025-11-04 19:59:52.924 00:05:08.467 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-04 20:04:33.986 00:00:00.000 UDP 28.104.0.1:37468 -> 198.28.0.2:53 1 64 1 2025-11-04 20:04:33.986 00:00:00.000 UDP 28.104.0.1:34698 -> 198.28.0.2:53 1 64 1 2025-11-04 20:04:33.996 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37468 1 109 1 2025-11-04 20:04:33.996 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34698 1 80 1 2025-11-04 20:04:01.391 00:01:00.096 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-04 20:04:01.391 00:01:00.133 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-04 20:00:52.965 00:05:08.545 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-04 20:00:57.370 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2592 1 2025-11-04 20:05:34.288 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55997 1 109 1 2025-11-04 20:05:34.288 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43084 1 80 1 2025-11-04 20:05:34.279 00:00:00.000 UDP 28.104.0.1:43084 -> 198.28.0.2:53 1 64 1 2025-11-04 20:05:34.279 00:00:00.000 UDP 28.104.0.1:55997 -> 198.28.0.2:53 1 64 1 2025-11-04 20:06:34.538 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42405 1 80 1 2025-11-04 20:06:34.538 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38150 1 109 1 2025-11-04 20:06:34.530 00:00:00.000 UDP 28.104.0.1:38150 -> 198.28.0.2:53 1 64 1 2025-11-04 20:06:34.530 00:00:00.000 UDP 28.104.0.1:42405 -> 198.28.0.2:53 1 64 1 2025-11-04 20:02:52.914 00:05:08.488 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-04 20:07:34.824 00:00:00.000 UDP 28.104.0.1:33419 -> 198.28.0.2:53 1 64 1 2025-11-04 20:07:34.823 00:00:00.000 UDP 28.104.0.1:52787 -> 198.28.0.2:53 1 64 1 2025-11-04 20:07:34.835 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33419 1 109 1 2025-11-04 20:07:34.835 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52787 1 80 1 2025-11-04 20:07:44.060 00:00:00.049 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-04 20:06:01.393 00:02:00.133 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-11-04 20:06:01.393 00:02:00.098 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-11-04 20:08:35.118 00:00:00.000 UDP 28.104.0.1:33370 -> 198.28.0.2:53 1 64 1 2025-11-04 20:08:35.118 00:00:00.000 UDP 28.104.0.1:39815 -> 198.28.0.2:53 1 64 1 2025-11-04 20:08:35.128 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39815 1 109 1 2025-11-04 20:08:35.128 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33370 1 80 1 2025-11-04 20:04:52.914 00:05:08.606 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-04 20:09:35.412 00:00:00.000 UDP 28.104.0.1:55125 -> 198.28.0.2:53 1 64 1 2025-11-04 20:09:35.412 00:00:00.000 UDP 28.104.0.1:46708 -> 198.28.0.2:53 1 64 1 2025-11-04 20:09:35.423 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46708 1 80 1 2025-11-04 20:09:35.423 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55125 1 109 1 2025-11-04 20:09:01.392 00:01:00.098 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-04 20:09:01.392 00:01:00.133 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-04 20:05:52.925 00:05:08.472 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-04 20:10:35.707 00:00:00.000 UDP 28.104.0.1:45600 -> 198.28.0.2:53 1 64 1 2025-11-04 20:10:35.707 00:00:00.000 UDP 28.104.0.1:40267 -> 198.28.0.2:53 1 64 1 2025-11-04 20:06:17.375 00:05:10.020 OSPF 28.0.2.1:0 -> 224.0.0.5:0 34 2360 1 2025-11-04 20:10:35.717 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40267 1 109 1 2025-11-04 20:10:35.717 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45600 1 80 1 2025-11-04 20:06:52.965 00:05:08.545 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-04 20:11:36.042 00:00:00.000 UDP 28.104.0.1:45477 -> 198.28.0.2:53 1 64 1 2025-11-04 20:11:36.042 00:00:00.000 UDP 28.104.0.1:59598 -> 198.28.0.2:53 1 64 1 2025-11-04 20:11:36.052 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59598 1 80 1 2025-11-04 20:11:36.052 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45477 1 109 1 2025-11-04 20:12:36.868 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43301 1 109 1 2025-11-04 20:12:36.868 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50845 1 80 1 2025-11-04 20:12:36.857 00:00:00.000 UDP 28.104.0.1:43301 -> 198.28.0.2:53 1 64 1 2025-11-04 20:12:36.857 00:00:00.000 UDP 28.104.0.1:50845 -> 198.28.0.2:53 1 64 1 2025-11-04 20:12:44.292 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-04 20:11:01.398 00:02:00.093 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-11-04 20:11:01.398 00:02:00.129 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-11-04 20:08:52.915 00:05:08.490 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-04 20:13:37.181 00:00:00.000 UDP 28.104.0.1:51220 -> 198.28.0.2:53 1 64 1 2025-11-04 20:13:37.181 00:00:00.000 UDP 28.104.0.1:56089 -> 198.28.0.2:53 1 64 1 2025-11-04 20:13:37.193 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56089 1 80 1 2025-11-04 20:13:37.191 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51220 1 109 1 2025-11-04 20:14:37.481 00:00:00.000 UDP 28.104.0.1:52275 -> 198.28.0.2:53 1 64 1 2025-11-04 20:14:37.481 00:00:00.000 UDP 28.104.0.1:50140 -> 198.28.0.2:53 1 64 1 2025-11-04 20:14:37.493 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50140 1 109 1 2025-11-04 20:14:37.493 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52275 1 80 1 2025-11-04 20:14:01.395 00:01:00.096 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-04 20:14:01.395 00:01:00.131 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-04 20:10:52.916 00:05:08.607 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-04 20:15:37.806 00:00:00.000 UDP 28.104.0.1:45368 -> 198.28.0.2:53 1 64 1 2025-11-04 20:15:37.806 00:00:00.000 UDP 28.104.0.1:60267 -> 198.28.0.2:53 1 64 1 2025-11-04 20:15:37.815 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45368 1 80 1 2025-11-04 20:15:37.816 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60267 1 109 1 2025-11-04 20:11:37.395 00:05:10.009 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2916 1 2025-11-04 20:11:52.925 00:05:08.471 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-04 20:16:38.105 00:00:00.000 UDP 28.104.0.1:60451 -> 198.28.0.2:53 1 64 1 2025-11-04 20:16:38.105 00:00:00.000 UDP 28.104.0.1:47099 -> 198.28.0.2:53 1 64 1 2025-11-04 20:16:38.115 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47099 1 80 1 2025-11-04 20:16:38.115 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60451 1 109 1 2025-11-04 20:12:52.965 00:05:08.547 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-04 20:17:38.456 00:00:00.000 UDP 28.104.0.1:50135 -> 198.28.0.2:53 1 64 1 2025-11-04 20:17:38.456 00:00:00.000 UDP 28.104.0.1:52836 -> 198.28.0.2:53 1 64 1 2025-11-04 20:17:38.467 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52836 1 109 1 2025-11-04 20:17:38.467 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50135 1 80 1 2025-11-04 20:17:44.388 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-04 20:16:01.394 00:02:00.096 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-11-04 20:16:01.394 00:02:00.133 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-11-04 20:18:38.764 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57930 1 109 1 2025-11-04 20:18:38.763 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47635 1 80 1 2025-11-04 20:18:38.754 00:00:00.000 UDP 28.104.0.1:57930 -> 198.28.0.2:53 1 64 1 2025-11-04 20:18:38.753 00:00:00.000 UDP 28.104.0.1:47635 -> 198.28.0.2:53 1 64 1 2025-11-04 20:14:52.915 00:05:08.490 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-04 20:19:39.068 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49574 1 80 1 2025-11-04 20:19:39.068 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52380 1 109 1 2025-11-04 20:19:39.057 00:00:00.000 UDP 28.104.0.1:49574 -> 198.28.0.2:53 1 64 1 2025-11-04 20:19:39.058 00:00:00.000 UDP 28.104.0.1:52380 -> 198.28.0.2:53 1 64 1 2025-11-04 20:19:01.396 00:01:00.096 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-04 20:19:01.396 00:01:00.132 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-04 20:20:39.353 00:00:00.000 UDP 28.104.0.1:40687 -> 198.28.0.2:53 1 64 1 2025-11-04 20:20:39.353 00:00:00.000 UDP 28.104.0.1:46997 -> 198.28.0.2:53 1 64 1 2025-11-04 20:20:39.364 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40687 1 80 1 2025-11-04 20:20:39.363 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46997 1 109 1 2025-11-04 20:16:52.920 00:05:08.604 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-04 20:16:57.403 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2592 1 2025-11-04 20:21:39.705 00:00:00.000 UDP 28.104.0.1:36404 -> 198.28.0.2:53 1 64 1 2025-11-04 20:21:39.705 00:00:00.000 UDP 28.104.0.1:38086 -> 198.28.0.2:53 1 64 1 2025-11-04 20:21:39.715 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38086 1 109 1 2025-11-04 20:21:39.715 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36404 1 80 1 2025-11-04 20:21:01.401 00:01:00.092 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-04 20:21:01.401 00:01:00.129 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-04 20:17:52.928 00:05:08.469 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-04 20:22:40.002 00:00:00.000 UDP 28.104.0.1:58995 -> 198.28.0.2:53 1 64 1 2025-11-04 20:22:40.001 00:00:00.000 UDP 28.104.0.1:34161 -> 198.28.0.2:53 1 64 1 2025-11-04 20:22:40.015 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34161 1 80 1 2025-11-04 20:22:40.015 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58995 1 109 1 2025-11-04 20:22:44.723 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-04 20:18:52.973 00:05:08.541 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-04 20:23:40.266 00:00:00.000 UDP 28.104.0.1:59401 -> 198.28.0.2:53 1 64 1 2025-11-04 20:23:40.266 00:00:00.000 UDP 28.104.0.1:41919 -> 198.28.0.2:53 1 64 1 2025-11-04 20:23:40.276 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59401 1 80 1 2025-11-04 20:23:40.276 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41919 1 109 1 2025-11-04 20:24:40.516 00:00:00.000 UDP 28.104.0.1:48001 -> 198.28.0.2:53 1 64 1 2025-11-04 20:24:40.516 00:00:00.000 UDP 28.104.0.1:36175 -> 198.28.0.2:53 1 64 1 2025-11-04 20:24:40.527 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48001 1 80 1 2025-11-04 20:24:40.527 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36175 1 109 1 2025-11-04 20:23:01.397 00:02:00.095 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-11-04 20:23:01.397 00:02:00.133 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-11-04 20:20:52.918 00:05:08.489 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-04 20:25:40.819 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44192 1 80 1 2025-11-04 20:25:40.819 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57059 1 109 1 2025-11-04 20:25:40.810 00:00:00.000 UDP 28.104.0.1:57059 -> 198.28.0.2:53 1 64 1 2025-11-04 20:25:40.810 00:00:00.000 UDP 28.104.0.1:44192 -> 198.28.0.2:53 1 64 1 2025-11-04 20:22:17.408 00:05:10.012 OSPF 28.0.2.1:0 -> 224.0.0.5:0 47 3456 1 2025-11-04 20:26:41.116 00:00:00.000 UDP 28.104.0.1:60341 -> 198.28.0.2:53 1 64 1 2025-11-04 20:26:41.116 00:00:00.000 UDP 28.104.0.1:37190 -> 198.28.0.2:53 1 64 1 2025-11-04 20:26:41.128 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60341 1 109 1 2025-11-04 20:26:41.128 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37190 1 80 1 2025-11-04 20:26:01.398 00:01:00.094 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-04 20:26:01.398 00:01:00.132 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-04 20:22:52.919 00:05:08.605 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-04 20:27:41.411 00:00:00.000 UDP 28.104.0.1:53850 -> 198.28.0.2:53 1 64 1 2025-11-04 20:27:41.411 00:00:00.000 UDP 28.104.0.1:34251 -> 198.28.0.2:53 1 64 1 2025-11-04 20:27:41.421 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34251 1 109 1 2025-11-04 20:27:41.421 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53850 1 80 1 2025-11-04 20:27:44.483 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-04 20:23:52.932 00:05:08.467 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-04 20:28:41.715 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35427 1 109 1 2025-11-04 20:28:41.714 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40174 1 80 1 2025-11-04 20:28:41.704 00:00:00.000 UDP 28.104.0.1:35427 -> 198.28.0.2:53 1 64 1 2025-11-04 20:28:41.704 00:00:00.000 UDP 28.104.0.1:40174 -> 198.28.0.2:53 1 64 1 2025-11-04 20:24:52.969 00:05:08.545 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-04 20:29:41.997 00:00:00.000 UDP 28.104.0.1:34696 -> 198.28.0.2:53 1 64 1 2025-11-04 20:29:41.997 00:00:00.000 UDP 28.104.0.1:58752 -> 198.28.0.2:53 1 64 1 2025-11-04 20:29:42.009 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58752 1 109 1 2025-11-04 20:29:42.008 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34696 1 80 1 2025-11-04 20:28:01.398 00:02:00.094 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-11-04 20:28:01.398 00:02:00.133 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-11-04 20:30:42.310 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34593 1 109 1 2025-11-04 20:30:42.309 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53461 1 80 1 2025-11-04 20:30:42.300 00:00:00.000 UDP 28.104.0.1:34593 -> 198.28.0.2:53 1 64 1 2025-11-04 20:30:42.300 00:00:00.000 UDP 28.104.0.1:53461 -> 198.28.0.2:53 1 64 1 2025-11-04 20:26:52.920 00:05:08.491 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-04 20:31:42.590 00:00:00.000 UDP 28.104.0.1:58448 -> 198.28.0.2:53 1 64 1 2025-11-04 20:31:42.590 00:00:00.000 UDP 28.104.0.1:46727 -> 198.28.0.2:53 1 64 1 2025-11-04 20:31:42.600 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58448 1 80 1 2025-11-04 20:31:42.600 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46727 1 109 1 2025-11-04 20:27:37.420 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2528 1 2025-11-04 20:31:01.399 00:01:00.094 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-04 20:31:01.399 00:01:00.134 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-04 20:32:42.885 00:00:00.000 UDP 28.104.0.1:52299 -> 198.28.0.2:53 1 64 1 2025-11-04 20:32:42.885 00:00:00.000 UDP 28.104.0.1:34182 -> 198.28.0.2:53 1 64 1 2025-11-04 20:32:44.692 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-04 20:32:42.898 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52299 1 80 1 2025-11-04 20:32:42.897 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34182 1 109 1 2025-11-04 20:28:52.920 00:05:08.605 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-04 20:33:43.194 00:00:00.000 UDP 28.104.0.1:46292 -> 198.28.0.2:53 1 64 1 2025-11-04 20:33:43.194 00:00:00.000 UDP 28.104.0.1:40402 -> 198.28.0.2:53 1 64 1 2025-11-04 20:33:43.206 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46292 1 80 1 2025-11-04 20:33:43.205 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40402 1 109 1 2025-11-04 20:29:52.932 00:05:08.469 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-04 20:34:43.510 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37614 1 109 1 2025-11-04 20:34:43.510 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42460 1 80 1 2025-11-04 20:34:43.500 00:00:00.000 UDP 28.104.0.1:42460 -> 198.28.0.2:53 1 64 1 2025-11-04 20:34:43.500 00:00:00.000 UDP 28.104.0.1:37614 -> 198.28.0.2:53 1 64 1 2025-11-04 20:33:01.401 00:02:00.094 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-11-04 20:33:01.401 00:02:00.133 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-11-04 20:30:52.973 00:05:08.543 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-04 20:35:43.806 00:00:00.000 UDP 28.104.0.1:44673 -> 198.28.0.2:53 1 64 1 2025-11-04 20:35:43.806 00:00:00.000 UDP 28.104.0.1:39631 -> 198.28.0.2:53 1 64 1 2025-11-04 20:35:43.816 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39631 1 80 1 2025-11-04 20:35:43.816 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44673 1 109 1 2025-11-04 20:36:44.118 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54229 1 80 1 2025-11-04 20:36:44.118 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60023 1 109 1 2025-11-04 20:36:44.108 00:00:00.000 UDP 28.104.0.1:54229 -> 198.28.0.2:53 1 64 1 2025-11-04 20:36:44.108 00:00:00.000 UDP 28.104.0.1:60023 -> 198.28.0.2:53 1 64 1 2025-11-04 20:36:01.401 00:01:00.096 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-04 20:36:01.401 00:01:00.133 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-04 20:32:52.922 00:05:08.488 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-04 20:32:57.424 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2384 1 2025-11-04 20:37:44.759 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-04 20:37:44.430 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42773 1 80 1 2025-11-04 20:37:44.430 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39229 1 109 1 2025-11-04 20:37:44.419 00:00:00.000 UDP 28.104.0.1:42773 -> 198.28.0.2:53 1 64 1 2025-11-04 20:37:44.419 00:00:00.000 UDP 28.104.0.1:39229 -> 198.28.0.2:53 1 64 1 2025-11-04 20:38:44.718 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37670 1 80 1 2025-11-04 20:38:44.718 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44533 1 109 1 2025-11-04 20:38:44.709 00:00:00.000 UDP 28.104.0.1:37670 -> 198.28.0.2:53 1 64 1 2025-11-04 20:38:44.709 00:00:00.000 UDP 28.104.0.1:44533 -> 198.28.0.2:53 1 64 1 2025-11-04 20:34:52.923 00:05:08.603 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-04 20:39:45.003 00:00:00.000 UDP 28.104.0.1:51124 -> 198.28.0.2:53 1 64 1 2025-11-04 20:39:45.003 00:00:00.000 UDP 28.104.0.1:53298 -> 198.28.0.2:53 1 64 1 2025-11-04 20:39:45.014 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53298 1 109 1 2025-11-04 20:39:45.013 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51124 1 80 1 2025-11-04 20:38:01.401 00:02:00.096 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-11-04 20:38:01.401 00:02:00.134 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-11-04 20:35:52.934 00:05:08.467 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-04 20:40:45.330 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45271 1 80 1 2025-11-04 20:40:45.330 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42193 1 109 1 2025-11-04 20:40:45.319 00:00:00.000 UDP 28.104.0.1:45271 -> 198.28.0.2:53 1 64 1 2025-11-04 20:40:45.319 00:00:00.000 UDP 28.104.0.1:42193 -> 198.28.0.2:53 1 64 1 2025-11-04 20:36:52.974 00:05:08.542 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-04 20:41:47.571 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36044 1 80 1 2025-11-04 20:41:47.571 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49952 1 109 1 2025-11-04 20:41:47.560 00:00:00.000 UDP 28.104.0.1:36044 -> 198.28.0.2:53 1 64 1 2025-11-04 20:41:47.560 00:00:00.000 UDP 28.104.0.1:49952 -> 198.28.0.2:53 1 64 1 2025-11-04 20:41:01.402 00:01:00.098 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-04 20:41:01.402 00:01:00.134 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-04 20:38:17.428 00:05:10.223 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2904 1 2025-11-04 20:42:44.722 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-04 20:42:47.859 00:00:00.000 UDP 28.104.0.1:33693 -> 198.28.0.2:53 1 64 1 2025-11-04 20:42:47.858 00:00:00.000 UDP 28.104.0.1:57905 -> 198.28.0.2:53 1 64 1 2025-11-04 20:42:47.869 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57905 1 109 1 2025-11-04 20:42:47.868 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33693 1 80 1 2025-11-04 20:38:52.924 00:05:08.487 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-04 20:43:48.133 00:00:00.000 UDP 28.104.0.1:57377 -> 198.28.0.2:53 1 64 1 2025-11-04 20:43:48.133 00:00:00.000 UDP 28.104.0.1:40167 -> 198.28.0.2:53 1 64 1 2025-11-04 20:43:48.143 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40167 1 109 1 2025-11-04 20:43:48.144 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57377 1 80 1 2025-11-04 20:43:01.402 00:01:00.097 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-04 20:43:01.402 00:01:00.135 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-04 20:44:48.442 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54649 1 109 1 2025-11-04 20:44:48.442 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46659 1 80 1 2025-11-04 20:44:48.432 00:00:00.000 UDP 28.104.0.1:46659 -> 198.28.0.2:53 1 64 1 2025-11-04 20:44:48.432 00:00:00.000 UDP 28.104.0.1:54649 -> 198.28.0.2:53 1 64 1 2025-11-04 20:40:52.925 00:05:08.603 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-04 20:45:48.729 00:00:00.000 UDP 28.104.0.1:45278 -> 198.28.0.2:53 1 64 1 2025-11-04 20:45:48.728 00:00:00.000 UDP 28.104.0.1:48471 -> 198.28.0.2:53 1 64 1 2025-11-04 20:45:48.738 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48471 1 80 1 2025-11-04 20:45:48.738 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45278 1 109 1 2025-11-04 20:41:52.935 00:05:08.467 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-04 20:46:48.985 00:00:00.000 UDP 28.104.0.1:45011 -> 198.28.0.2:53 1 64 1 2025-11-04 20:46:48.985 00:00:00.000 UDP 28.104.0.1:57221 -> 198.28.0.2:53 1 64 1 2025-11-04 20:46:48.995 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57221 1 109 1 2025-11-04 20:46:48.994 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45011 1 80 1 2025-11-04 20:45:01.403 00:02:00.097 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-11-04 20:45:01.403 00:02:00.135 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-11-04 20:42:52.976 00:05:08.543 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-04 20:47:49.279 00:00:00.000 UDP 28.104.0.1:46737 -> 198.28.0.2:53 1 64 1 2025-11-04 20:47:49.278 00:00:00.000 UDP 28.104.0.1:47809 -> 198.28.0.2:53 1 64 1 2025-11-04 20:47:44.784 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-04 20:43:37.436 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2776 1 2025-11-04 20:47:49.289 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47809 1 109 1 2025-11-04 20:47:49.289 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46737 1 80 1 2025-11-04 20:48:49.536 00:00:00.000 UDP 28.104.0.1:37897 -> 198.28.0.2:53 1 64 1 2025-11-04 20:48:49.536 00:00:00.000 UDP 28.104.0.1:40377 -> 198.28.0.2:53 1 64 1 2025-11-04 20:48:49.550 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40377 1 80 1 2025-11-04 20:48:49.550 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37897 1 109 1 2025-11-04 20:48:01.404 00:01:00.100 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-04 20:48:01.404 00:01:00.142 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-04 20:44:52.927 00:05:08.488 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-04 20:49:49.830 00:00:00.000 UDP 28.104.0.1:57529 -> 198.28.0.2:53 1 64 1 2025-11-04 20:49:49.830 00:00:00.000 UDP 28.104.0.1:54215 -> 198.28.0.2:53 1 64 1 2025-11-04 20:49:49.840 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54215 1 80 1 2025-11-04 20:49:49.840 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57529 1 109 1 2025-11-04 20:50:50.798 00:00:00.000 UDP 28.104.0.1:55998 -> 198.28.0.2:53 1 64 1 2025-11-04 20:50:50.798 00:00:00.000 UDP 28.104.0.1:47579 -> 198.28.0.2:53 1 64 1 2025-11-04 20:50:50.809 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55998 1 80 1 2025-11-04 20:50:50.810 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47579 1 109 1 2025-11-04 20:46:52.926 00:05:08.602 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-04 20:51:51.110 00:00:00.000 UDP 28.104.0.1:41216 -> 198.28.0.2:53 1 64 1 2025-11-04 20:51:51.110 00:00:00.000 UDP 28.104.0.1:44217 -> 198.28.0.2:53 1 64 1 2025-11-04 20:51:51.121 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41216 1 109 1 2025-11-04 20:51:51.120 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44217 1 80 1 2025-11-04 20:50:01.405 00:02:00.099 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-11-04 20:50:01.405 00:02:00.136 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-11-04 20:47:52.937 00:05:08.469 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-04 20:52:51.422 00:00:00.000 UDP 28.104.0.1:42504 -> 198.28.0.2:53 1 64 1 2025-11-04 20:52:51.422 00:00:00.000 UDP 28.104.0.1:58430 -> 198.28.0.2:53 1 64 1 2025-11-04 20:52:45.040 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-04 20:52:51.433 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42504 1 109 1 2025-11-04 20:52:51.433 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58430 1 80 1 2025-11-04 20:48:52.977 00:05:08.542 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-04 20:48:57.443 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2832 1 2025-11-04 20:53:51.684 00:00:00.000 UDP 28.104.0.1:39298 -> 198.28.0.2:53 1 64 1 2025-11-04 20:53:51.684 00:00:00.000 UDP 28.104.0.1:38444 -> 198.28.0.2:53 1 64 1 2025-11-04 20:53:51.695 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39298 1 80 1 2025-11-04 20:53:51.695 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38444 1 109 1 2025-11-04 20:53:01.405 00:01:00.100 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-04 20:53:01.405 00:01:00.136 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-04 20:54:51.985 00:00:00.000 UDP 28.104.0.1:52405 -> 198.28.0.2:53 1 64 1 2025-11-04 20:54:51.985 00:00:00.000 UDP 28.104.0.1:59026 -> 198.28.0.2:53 1 64 1 2025-11-04 20:54:51.996 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52405 1 80 1 2025-11-04 20:54:51.996 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59026 1 109 1 2025-11-04 20:50:52.927 00:05:08.488 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-04 20:55:52.288 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46765 1 109 1 2025-11-04 20:55:52.288 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41344 1 80 1 2025-11-04 20:55:52.280 00:00:00.000 UDP 28.104.0.1:46765 -> 198.28.0.2:53 1 64 1 2025-11-04 20:55:52.280 00:00:00.000 UDP 28.104.0.1:41344 -> 198.28.0.2:53 1 64 1 2025-11-04 20:56:52.586 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34949 1 80 1 2025-11-04 20:56:52.584 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36040 1 109 1 2025-11-04 20:56:52.574 00:00:00.000 UDP 28.104.0.1:34949 -> 198.28.0.2:53 1 64 1 2025-11-04 20:56:52.574 00:00:00.000 UDP 28.104.0.1:36040 -> 198.28.0.2:53 1 64 1 2025-11-04 20:55:01.406 00:02:00.100 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-11-04 20:55:01.406 00:02:00.136 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-11-04 20:52:52.929 00:05:08.602 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-04 20:57:46.702 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-04 20:57:52.876 00:00:00.000 UDP 28.104.0.1:34092 -> 198.28.0.2:53 1 64 1 2025-11-04 20:57:52.876 00:00:00.000 UDP 28.104.0.1:50175 -> 198.28.0.2:53 1 64 1 2025-11-04 20:57:52.886 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50175 1 109 1 2025-11-04 20:57:52.886 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34092 1 80 1 2025-11-04 20:53:52.939 00:05:08.467 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-04 20:54:17.450 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 42 2948 1 Summary: total flows: 348, total bytes: 98945, total packets: 1456, avg bps: 204, avg pps: 0, avg bpp: 67 Time window: 2025-11-04 19:54:52 - 2025-11-04 20:59:27 Total flows processed: 348, passed: 348, Blocks skipped: 0, Bytes read: 36256 Sys: 0.0058s User: 0.0029s Wall: 0.0155s flows/second: 22379.6 Runtime: 0.0156s