Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-05 22:54:53.568 00:05:08.379 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-05 22:59:48.857 00:00:00.000 UDP 28.104.0.1:34133 -> 198.28.0.2:53 1 64 1 2025-11-05 22:59:48.857 00:00:00.000 UDP 28.104.0.1:47198 -> 198.28.0.2:53 1 64 1 2025-11-05 22:59:48.868 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34133 1 80 1 2025-11-05 22:59:48.870 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47198 1 109 1 2025-11-05 23:00:49.210 00:00:00.000 UDP 28.104.0.1:44848 -> 198.28.0.2:53 1 64 1 2025-11-05 23:00:49.210 00:00:00.000 UDP 28.104.0.1:53263 -> 198.28.0.2:53 1 64 1 2025-11-05 23:00:49.221 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44848 1 80 1 2025-11-05 23:00:49.221 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53263 1 109 1 2025-11-05 22:56:01.907 00:05:51.614 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-05 23:01:49.513 00:00:00.000 UDP 28.104.0.1:51145 -> 198.28.0.2:53 1 64 1 2025-11-05 23:01:49.513 00:00:00.000 UDP 28.104.0.1:56996 -> 198.28.0.2:53 1 64 1 2025-11-05 23:01:49.522 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51145 1 109 1 2025-11-05 23:01:49.523 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56996 1 80 1 2025-11-05 22:58:01.896 00:05:00.233 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-05 23:02:49.833 00:00:00.000 UDP 28.104.0.1:47642 -> 198.28.0.2:53 1 64 1 2025-11-05 23:02:49.833 00:00:00.000 UDP 28.104.0.1:47778 -> 198.28.0.2:53 1 64 1 2025-11-05 23:02:49.847 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47778 1 80 1 2025-11-05 23:02:49.845 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47642 1 109 1 2025-11-05 22:58:53.520 00:05:08.439 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-05 22:59:01.896 00:05:00.133 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-05 23:03:16.407 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-05 23:03:50.156 00:00:00.000 UDP 28.104.0.1:52593 -> 198.28.0.2:53 1 64 1 2025-11-05 23:03:50.156 00:00:00.000 UDP 28.104.0.1:41813 -> 198.28.0.2:53 1 64 1 2025-11-05 23:03:50.165 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41813 1 109 1 2025-11-05 22:59:39.678 00:05:10.047 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2972 1 2025-11-05 23:03:50.165 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52593 1 80 1 2025-11-05 22:59:01.896 00:05:51.637 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-05 23:04:50.446 00:00:00.000 UDP 28.104.0.1:54033 -> 198.28.0.2:53 1 64 1 2025-11-05 23:04:50.447 00:00:00.000 UDP 28.104.0.1:43494 -> 198.28.0.2:53 1 64 1 2025-11-05 23:04:50.457 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54033 1 80 1 2025-11-05 23:04:50.457 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43494 1 109 1 2025-11-05 23:00:53.570 00:05:08.379 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-05 23:05:50.709 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37701 1 109 1 2025-11-05 23:05:50.711 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34038 1 80 1 2025-11-05 23:05:50.700 00:00:00.000 UDP 28.104.0.1:34038 -> 198.28.0.2:53 1 64 1 2025-11-05 23:05:50.699 00:00:00.000 UDP 28.104.0.1:37701 -> 198.28.0.2:53 1 64 1 2025-11-05 23:06:50.954 00:00:00.000 UDP 28.104.0.1:59787 -> 198.28.0.2:53 1 64 1 2025-11-05 23:06:50.954 00:00:00.000 UDP 28.104.0.1:33810 -> 198.28.0.2:53 1 64 1 2025-11-05 23:06:50.964 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59787 1 80 1 2025-11-05 23:06:50.964 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33810 1 109 1 2025-11-05 23:02:01.908 00:05:51.617 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-05 23:07:51.249 00:00:00.000 UDP 28.104.0.1:49039 -> 198.28.0.2:53 1 64 1 2025-11-05 23:07:51.249 00:00:00.000 UDP 28.104.0.1:32948 -> 198.28.0.2:53 1 64 1 2025-11-05 23:07:51.261 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32948 1 80 1 2025-11-05 23:07:51.261 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49039 1 109 1 2025-11-05 23:04:01.897 00:05:00.236 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-05 23:08:16.650 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-05 23:08:51.556 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56797 1 80 1 2025-11-05 23:08:51.556 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58097 1 109 1 2025-11-05 23:08:51.547 00:00:00.000 UDP 28.104.0.1:56797 -> 198.28.0.2:53 1 64 1 2025-11-05 23:08:51.547 00:00:00.000 UDP 28.104.0.1:58097 -> 198.28.0.2:53 1 64 1 2025-11-05 23:05:01.896 00:05:00.133 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-05 23:04:53.522 00:05:08.438 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-05 23:04:59.687 00:05:10.429 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2724 1 2025-11-05 23:09:51.843 00:00:00.000 UDP 28.104.0.1:51884 -> 198.28.0.2:53 1 64 1 2025-11-05 23:09:51.843 00:00:00.000 UDP 28.104.0.1:47076 -> 198.28.0.2:53 1 64 1 2025-11-05 23:09:51.855 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51884 1 109 1 2025-11-05 23:09:51.855 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47076 1 80 1 2025-11-05 23:05:01.897 00:05:51.638 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-05 23:10:52.163 00:00:00.000 UDP 28.104.0.1:58617 -> 198.28.0.2:53 1 64 1 2025-11-05 23:10:52.163 00:00:00.000 UDP 28.104.0.1:51334 -> 198.28.0.2:53 1 64 1 2025-11-05 23:10:52.173 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58617 1 109 1 2025-11-05 23:10:52.173 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51334 1 80 1 2025-11-05 23:06:53.573 00:05:08.379 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-05 23:11:52.474 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39395 1 109 1 2025-11-05 23:11:52.473 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38671 1 80 1 2025-11-05 23:11:52.463 00:00:00.000 UDP 28.104.0.1:38671 -> 198.28.0.2:53 1 64 1 2025-11-05 23:11:52.463 00:00:00.000 UDP 28.104.0.1:39395 -> 198.28.0.2:53 1 64 1 2025-11-05 23:08:01.909 00:05:51.616 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-05 23:12:52.768 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42133 1 80 1 2025-11-05 23:12:52.768 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39353 1 109 1 2025-11-05 23:12:52.757 00:00:00.000 UDP 28.104.0.1:42133 -> 198.28.0.2:53 1 64 1 2025-11-05 23:12:52.757 00:00:00.000 UDP 28.104.0.1:39353 -> 198.28.0.2:53 1 64 1 2025-11-05 23:13:16.874 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-05 23:13:53.071 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36191 1 109 1 2025-11-05 23:13:53.072 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32823 1 80 1 2025-11-05 23:13:53.061 00:00:00.000 UDP 28.104.0.1:36191 -> 198.28.0.2:53 1 64 1 2025-11-05 23:13:53.061 00:00:00.000 UDP 28.104.0.1:32823 -> 198.28.0.2:53 1 64 1 2025-11-05 23:10:01.898 00:05:00.237 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-05 23:10:19.692 00:05:00.497 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2540 1 2025-11-05 23:14:53.350 00:00:00.000 UDP 28.104.0.1:47588 -> 198.28.0.2:53 1 64 1 2025-11-05 23:14:53.351 00:00:00.000 UDP 28.104.0.1:56738 -> 198.28.0.2:53 1 64 1 2025-11-05 23:14:53.361 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56738 1 80 1 2025-11-05 23:14:53.361 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47588 1 109 1 2025-11-05 23:11:01.900 00:05:00.135 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-05 23:10:53.526 00:05:08.438 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-05 23:15:53.605 00:00:00.000 UDP 28.104.0.1:51254 -> 198.28.0.2:53 1 64 1 2025-11-05 23:15:53.605 00:00:00.000 UDP 28.104.0.1:60967 -> 198.28.0.2:53 1 64 1 2025-11-05 23:11:01.899 00:05:51.636 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-05 23:15:53.615 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51254 1 109 1 2025-11-05 23:15:53.616 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60967 1 80 1 2025-11-05 23:16:53.897 00:00:00.000 UDP 28.104.0.1:36820 -> 198.28.0.2:53 1 64 1 2025-11-05 23:16:53.897 00:00:00.000 UDP 28.104.0.1:59107 -> 198.28.0.2:53 1 64 1 2025-11-05 23:16:53.909 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59107 1 109 1 2025-11-05 23:16:53.909 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36820 1 80 1 2025-11-05 23:12:53.575 00:05:08.378 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-05 23:17:54.205 00:00:00.000 UDP 28.104.0.1:49076 -> 198.28.0.2:53 1 64 1 2025-11-05 23:17:54.205 00:00:00.000 UDP 28.104.0.1:42091 -> 198.28.0.2:53 1 64 1 2025-11-05 23:17:54.215 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49076 1 80 1 2025-11-05 23:17:54.215 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42091 1 109 1 2025-11-05 23:18:17.467 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-05 23:18:54.495 00:00:00.000 UDP 28.104.0.1:46287 -> 198.28.0.2:53 1 64 1 2025-11-05 23:18:54.495 00:00:00.000 UDP 28.104.0.1:40451 -> 198.28.0.2:53 1 64 1 2025-11-05 23:18:54.505 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46287 1 80 1 2025-11-05 23:18:54.506 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40451 1 109 1 2025-11-05 23:14:01.909 00:05:51.616 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-05 23:15:29.698 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2424 1 2025-11-05 23:19:54.784 00:00:00.000 UDP 28.104.0.1:34066 -> 198.28.0.2:53 1 64 1 2025-11-05 23:19:54.784 00:00:00.000 UDP 28.104.0.1:47564 -> 198.28.0.2:53 1 64 1 2025-11-05 23:19:54.793 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47564 1 109 1 2025-11-05 23:19:54.793 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34066 1 80 1 2025-11-05 23:16:01.901 00:05:00.237 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-05 23:20:55.087 00:00:00.000 UDP 28.104.0.1:57207 -> 198.28.0.2:53 1 64 1 2025-11-05 23:20:55.087 00:00:00.000 UDP 28.104.0.1:51505 -> 198.28.0.2:53 1 64 1 2025-11-05 23:20:55.096 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57207 1 80 1 2025-11-05 23:20:55.096 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51505 1 109 1 2025-11-05 23:17:01.900 00:05:00.137 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-05 23:16:53.526 00:05:08.439 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-05 23:17:01.900 00:05:51.638 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-05 23:21:55.381 00:00:00.000 UDP 28.104.0.1:47998 -> 198.28.0.2:53 1 64 1 2025-11-05 23:21:55.380 00:00:00.000 UDP 28.104.0.1:36525 -> 198.28.0.2:53 1 64 1 2025-11-05 23:21:55.390 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47998 1 109 1 2025-11-05 23:21:55.390 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36525 1 80 1 2025-11-05 23:22:55.680 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42690 1 80 1 2025-11-05 23:22:55.680 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56061 1 109 1 2025-11-05 23:22:55.669 00:00:00.000 UDP 28.104.0.1:56061 -> 198.28.0.2:53 1 64 1 2025-11-05 23:22:55.669 00:00:00.000 UDP 28.104.0.1:42690 -> 198.28.0.2:53 1 64 1 2025-11-05 23:18:53.575 00:05:08.379 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-05 23:23:16.945 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-05 23:23:55.961 00:00:00.000 UDP 28.104.0.1:57499 -> 198.28.0.2:53 1 64 1 2025-11-05 23:23:55.961 00:00:00.000 UDP 28.104.0.1:60836 -> 198.28.0.2:53 1 64 1 2025-11-05 23:23:55.972 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60836 1 80 1 2025-11-05 23:23:55.972 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57499 1 109 1 2025-11-05 23:20:01.909 00:05:51.646 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-05 23:24:56.279 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53225 1 80 1 2025-11-05 23:24:56.279 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59836 1 109 1 2025-11-05 23:24:56.270 00:00:00.000 UDP 28.104.0.1:59836 -> 198.28.0.2:53 1 64 1 2025-11-05 23:24:56.270 00:00:00.000 UDP 28.104.0.1:53225 -> 198.28.0.2:53 1 64 1 2025-11-05 23:20:49.705 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2980 1 2025-11-05 23:25:56.562 00:00:00.000 UDP 28.104.0.1:35551 -> 198.28.0.2:53 1 64 1 2025-11-05 23:25:56.562 00:00:00.000 UDP 28.104.0.1:39642 -> 198.28.0.2:53 1 64 1 2025-11-05 23:25:56.571 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39642 1 109 1 2025-11-05 23:25:56.571 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35551 1 80 1 2025-11-05 23:22:01.901 00:05:00.236 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-05 23:26:56.873 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58049 1 109 1 2025-11-05 23:26:56.872 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51049 1 80 1 2025-11-05 23:26:56.861 00:00:00.000 UDP 28.104.0.1:51049 -> 198.28.0.2:53 1 64 1 2025-11-05 23:26:56.861 00:00:00.000 UDP 28.104.0.1:58049 -> 198.28.0.2:53 1 64 1 2025-11-05 23:22:53.528 00:05:08.437 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-05 23:23:01.905 00:05:00.134 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-05 23:23:01.905 00:05:51.662 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-05 23:27:57.192 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46706 1 109 1 2025-11-05 23:27:57.192 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50134 1 80 1 2025-11-05 23:27:57.182 00:00:00.000 UDP 28.104.0.1:50134 -> 198.28.0.2:53 1 64 1 2025-11-05 23:27:57.182 00:00:00.000 UDP 28.104.0.1:46706 -> 198.28.0.2:53 1 64 1 2025-11-05 23:28:16.825 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-05 23:28:58.182 00:00:00.000 UDP 28.104.0.1:36273 -> 198.28.0.2:53 1 64 1 2025-11-05 23:28:58.182 00:00:00.000 UDP 28.104.0.1:59445 -> 198.28.0.2:53 1 64 1 2025-11-05 23:28:58.192 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36273 1 109 1 2025-11-05 23:28:58.192 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59445 1 80 1 2025-11-05 23:24:53.605 00:05:08.350 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-05 23:29:58.448 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57134 1 80 1 2025-11-05 23:29:58.448 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50620 1 109 1 2025-11-05 23:29:58.438 00:00:00.000 UDP 28.104.0.1:50620 -> 198.28.0.2:53 1 64 1 2025-11-05 23:29:58.438 00:00:00.000 UDP 28.104.0.1:57134 -> 198.28.0.2:53 1 64 1 2025-11-05 23:26:09.711 00:05:10.728 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2792 1 2025-11-05 23:26:01.911 00:05:51.645 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-05 23:30:58.743 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44481 1 80 1 2025-11-05 23:30:58.743 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38364 1 109 1 2025-11-05 23:30:58.733 00:00:00.000 UDP 28.104.0.1:44481 -> 198.28.0.2:53 1 64 1 2025-11-05 23:30:58.734 00:00:00.000 UDP 28.104.0.1:38364 -> 198.28.0.2:53 1 64 1 2025-11-05 23:31:59.055 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34347 1 109 1 2025-11-05 23:31:59.055 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56290 1 80 1 2025-11-05 23:31:59.045 00:00:00.000 UDP 28.104.0.1:34347 -> 198.28.0.2:53 1 64 1 2025-11-05 23:31:59.045 00:00:00.000 UDP 28.104.0.1:56290 -> 198.28.0.2:53 1 64 1 2025-11-05 23:28:01.902 00:05:00.235 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-05 23:32:59.393 00:00:00.000 UDP 28.104.0.1:40007 -> 198.28.0.2:53 1 64 1 2025-11-05 23:32:59.393 00:00:00.000 UDP 28.104.0.1:60426 -> 198.28.0.2:53 1 64 1 2025-11-05 23:32:59.408 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40007 1 80 1 2025-11-05 23:32:59.408 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60426 1 109 1 2025-11-05 23:28:53.555 00:05:08.411 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-05 23:29:01.904 00:05:00.162 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-05 23:33:17.112 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-05 23:29:01.902 00:05:51.664 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-05 23:33:59.698 00:00:00.000 UDP 28.104.0.1:35070 -> 198.28.0.2:53 1 64 1 2025-11-05 23:33:59.698 00:00:00.000 UDP 28.104.0.1:37796 -> 198.28.0.2:53 1 64 1 2025-11-05 23:33:59.709 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37796 1 80 1 2025-11-05 23:33:59.709 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35070 1 109 1 2025-11-05 23:35:00.062 00:00:00.000 UDP 28.104.0.1:57078 -> 198.28.0.2:53 1 64 1 2025-11-05 23:35:00.061 00:00:00.000 UDP 28.104.0.1:44257 -> 198.28.0.2:53 1 64 1 2025-11-05 23:35:00.073 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44257 1 80 1 2025-11-05 23:35:00.074 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57078 1 109 1 2025-11-05 23:30:53.606 00:05:08.350 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-05 23:31:29.718 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2916 1 2025-11-05 23:36:00.359 00:00:00.000 UDP 28.104.0.1:60436 -> 198.28.0.2:53 1 64 1 2025-11-05 23:36:00.359 00:00:00.000 UDP 28.104.0.1:41482 -> 198.28.0.2:53 1 64 1 2025-11-05 23:36:00.370 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41482 1 109 1 2025-11-05 23:36:00.370 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60436 1 80 1 2025-11-05 23:32:01.913 00:05:51.645 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-05 23:37:00.662 00:00:00.000 UDP 28.104.0.1:41464 -> 198.28.0.2:53 1 64 1 2025-11-05 23:37:00.663 00:00:00.000 UDP 28.104.0.1:52302 -> 198.28.0.2:53 1 64 1 2025-11-05 23:37:00.674 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41464 1 109 1 2025-11-05 23:37:00.674 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52302 1 80 1 2025-11-05 23:38:00.965 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52702 1 80 1 2025-11-05 23:38:00.965 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35366 1 109 1 2025-11-05 23:38:00.955 00:00:00.000 UDP 28.104.0.1:35366 -> 198.28.0.2:53 1 64 1 2025-11-05 23:38:00.955 00:00:00.000 UDP 28.104.0.1:52702 -> 198.28.0.2:53 1 64 1 2025-11-05 23:34:01.904 00:05:00.236 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-05 23:38:17.340 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-05 23:39:01.249 00:00:00.000 UDP 28.104.0.1:52946 -> 198.28.0.2:53 1 64 1 2025-11-05 23:39:01.249 00:00:00.000 UDP 28.104.0.1:59209 -> 198.28.0.2:53 1 64 1 2025-11-05 23:39:01.259 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52946 1 80 1 2025-11-05 23:39:01.259 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59209 1 109 1 2025-11-05 23:34:53.556 00:05:08.410 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-05 23:35:01.905 00:05:00.165 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-05 23:35:01.905 00:05:51.665 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-05 23:40:01.510 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49671 1 80 1 2025-11-05 23:40:01.510 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48636 1 109 1 2025-11-05 23:40:01.500 00:00:00.000 UDP 28.104.0.1:49671 -> 198.28.0.2:53 1 64 1 2025-11-05 23:40:01.500 00:00:00.000 UDP 28.104.0.1:48636 -> 198.28.0.2:53 1 64 1 2025-11-05 23:41:01.804 00:00:00.000 UDP 28.104.0.1:51905 -> 198.28.0.2:53 1 64 1 2025-11-05 23:41:01.804 00:00:00.000 UDP 28.104.0.1:41046 -> 198.28.0.2:53 1 64 1 2025-11-05 23:41:01.814 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41046 1 80 1 2025-11-05 23:36:49.724 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2528 1 2025-11-05 23:41:01.814 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51905 1 109 1 2025-11-05 23:36:53.608 00:05:08.349 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-05 23:42:02.107 00:00:00.000 UDP 28.104.0.1:37823 -> 198.28.0.2:53 1 64 1 2025-11-05 23:42:02.107 00:00:00.000 UDP 28.104.0.1:40146 -> 198.28.0.2:53 1 64 1 2025-11-05 23:42:02.117 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40146 1 109 1 2025-11-05 23:42:02.117 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37823 1 80 1 2025-11-05 23:38:01.915 00:05:51.644 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-05 23:43:02.403 00:00:00.000 UDP 28.104.0.1:55063 -> 198.28.0.2:53 1 64 1 2025-11-05 23:43:02.403 00:00:00.000 UDP 28.104.0.1:48799 -> 198.28.0.2:53 1 64 1 2025-11-05 23:43:02.414 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48799 1 109 1 2025-11-05 23:43:02.414 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55063 1 80 1 2025-11-05 23:43:17.459 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-05 23:40:01.908 00:05:00.237 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-05 23:44:02.704 00:00:00.000 UDP 28.104.0.1:54971 -> 198.28.0.2:53 1 64 1 2025-11-05 23:44:02.703 00:00:00.000 UDP 28.104.0.1:55180 -> 198.28.0.2:53 1 64 1 2025-11-05 23:44:02.713 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55180 1 109 1 2025-11-05 23:44:02.713 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54971 1 80 1 2025-11-05 23:41:01.907 00:05:00.163 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-05 23:45:02.954 00:00:00.000 UDP 28.104.0.1:46489 -> 198.28.0.2:53 1 64 1 2025-11-05 23:45:02.954 00:00:00.000 UDP 28.104.0.1:43484 -> 198.28.0.2:53 1 64 1 2025-11-05 23:40:53.558 00:05:08.410 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-05 23:45:02.964 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46489 1 80 1 2025-11-05 23:45:02.964 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43484 1 109 1 2025-11-05 23:41:01.906 00:05:51.663 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-05 23:46:18.212 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42483 1 109 1 2025-11-05 23:42:09.729 00:05:10.010 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2568 1 2025-11-05 23:46:18.212 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53831 1 80 1 2025-11-05 23:46:18.202 00:00:00.000 UDP 28.104.0.1:42483 -> 198.28.0.2:53 1 64 1 2025-11-05 23:46:18.202 00:00:00.000 UDP 28.104.0.1:53831 -> 198.28.0.2:53 1 64 1 2025-11-05 23:42:53.609 00:05:08.349 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-05 23:47:18.516 00:00:00.000 UDP 28.104.0.1:56098 -> 198.28.0.2:53 1 64 1 2025-11-05 23:47:18.517 00:00:00.000 UDP 28.104.0.1:45210 -> 198.28.0.2:53 1 64 1 2025-11-05 23:47:18.527 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45210 1 109 1 2025-11-05 23:47:18.527 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56098 1 80 1 2025-11-05 23:48:18.842 00:00:00.000 UDP 28.104.0.1:50104 -> 198.28.0.2:53 1 64 1 2025-11-05 23:48:18.842 00:00:00.000 UDP 28.104.0.1:38867 -> 198.28.0.2:53 1 64 1 2025-11-05 23:48:17.523 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-05 23:48:18.852 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50104 1 109 1 2025-11-05 23:48:18.852 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38867 1 80 1 2025-11-05 23:44:01.918 00:05:51.643 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-05 23:49:19.131 00:00:00.000 UDP 28.104.0.1:37737 -> 198.28.0.2:53 1 64 1 2025-11-05 23:49:19.131 00:00:00.000 UDP 28.104.0.1:35352 -> 198.28.0.2:53 1 64 1 2025-11-05 23:49:19.141 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37737 1 109 1 2025-11-05 23:49:19.141 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35352 1 80 1 2025-11-05 23:46:01.907 00:05:00.239 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-05 23:50:19.442 00:00:00.000 UDP 28.104.0.1:48734 -> 198.28.0.2:53 1 64 1 2025-11-05 23:50:19.442 00:00:00.000 UDP 28.104.0.1:38530 -> 198.28.0.2:53 1 64 1 2025-11-05 23:50:19.453 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48734 1 80 1 2025-11-05 23:50:19.453 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38530 1 109 1 2025-11-05 23:47:01.909 00:05:00.164 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-05 23:46:53.559 00:05:08.411 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-05 23:51:19.700 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44339 1 80 1 2025-11-05 23:51:19.700 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37359 1 109 1 2025-11-05 23:51:19.688 00:00:00.000 UDP 28.104.0.1:37359 -> 198.28.0.2:53 1 64 1 2025-11-05 23:51:19.689 00:00:00.000 UDP 28.104.0.1:44339 -> 198.28.0.2:53 1 64 1 2025-11-05 23:47:29.740 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 34 2320 1 2025-11-05 23:47:01.909 00:05:51.663 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-05 23:52:19.991 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33875 1 80 1 2025-11-05 23:52:19.992 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49800 1 109 1 2025-11-05 23:52:19.982 00:00:00.000 UDP 28.104.0.1:49800 -> 198.28.0.2:53 1 64 1 2025-11-05 23:52:19.981 00:00:00.000 UDP 28.104.0.1:33875 -> 198.28.0.2:53 1 64 1 2025-11-05 23:48:53.611 00:05:08.350 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-05 23:53:17.048 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-05 23:53:20.290 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35484 1 80 1 2025-11-05 23:53:20.290 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39972 1 109 1 2025-11-05 23:53:20.280 00:00:00.000 UDP 28.104.0.1:39972 -> 198.28.0.2:53 1 64 1 2025-11-05 23:53:20.280 00:00:00.000 UDP 28.104.0.1:35484 -> 198.28.0.2:53 1 64 1 2025-11-05 23:54:20.583 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56682 1 109 1 2025-11-05 23:54:20.584 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39297 1 80 1 2025-11-05 23:54:20.574 00:00:00.000 UDP 28.104.0.1:39297 -> 198.28.0.2:53 1 64 1 2025-11-05 23:54:20.574 00:00:00.000 UDP 28.104.0.1:56682 -> 198.28.0.2:53 1 64 1 2025-11-05 23:50:01.919 00:05:51.643 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-05 23:55:20.825 00:00:00.000 UDP 28.104.0.1:58282 -> 198.28.0.2:53 1 64 1 2025-11-05 23:55:20.826 00:00:00.000 UDP 28.104.0.1:41736 -> 198.28.0.2:53 1 64 1 2025-11-05 23:55:20.835 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58282 1 80 1 2025-11-05 23:55:20.836 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41736 1 109 1 2025-11-05 23:52:01.910 00:05:00.238 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-05 23:56:21.143 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56375 1 109 1 2025-11-05 23:56:21.143 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58025 1 80 1 2025-11-05 23:56:21.132 00:00:00.000 UDP 28.104.0.1:58025 -> 198.28.0.2:53 1 64 1 2025-11-05 23:56:21.132 00:00:00.000 UDP 28.104.0.1:56375 -> 198.28.0.2:53 1 64 1 2025-11-05 23:52:49.748 00:05:10.013 OSPF 28.0.2.1:0 -> 224.0.0.5:0 43 3188 1 2025-11-05 23:52:53.562 00:05:08.409 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-05 23:53:01.912 00:05:00.165 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-05 23:57:21.440 00:00:00.000 UDP 28.104.0.1:60313 -> 198.28.0.2:53 1 64 1 2025-11-05 23:57:21.440 00:00:00.000 UDP 28.104.0.1:47521 -> 198.28.0.2:53 1 64 1 2025-11-05 23:57:21.451 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60313 1 109 1 2025-11-05 23:57:21.451 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47521 1 80 1 2025-11-05 23:53:01.910 00:05:51.662 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-05 23:58:21.787 00:00:00.000 UDP 28.104.0.1:58896 -> 198.28.0.2:53 1 64 1 2025-11-05 23:58:21.787 00:00:00.000 UDP 28.104.0.1:58650 -> 198.28.0.2:53 1 64 1 2025-11-05 23:58:17.739 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-05 23:58:21.798 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58896 1 80 1 2025-11-05 23:58:21.798 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58650 1 109 1 Summary: total flows: 319, total bytes: 95959, total packets: 1416, avg bps: 199, avg pps: 0, avg bpp: 67 Time window: 2025-11-05 22:54:53 - 2025-11-05 23:58:53 Total flows processed: 319, passed: 319, Blocks skipped: 0, Bytes read: 33240 Sys: 0.0064s User: 0.0011s Wall: 0.0034s flows/second: 94430.3 Runtime: 0.0034s