Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-06 01:54:53.658 00:05:08.345 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-06 01:59:11.059 00:00:00.000 UDP 28.104.0.1:55062 -> 198.28.0.2:53 1 64 1 2025-11-06 01:59:11.059 00:00:00.000 UDP 28.104.0.1:58195 -> 198.28.0.2:53 1 64 1 2025-11-06 01:59:11.070 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58195 1 80 1 2025-11-06 01:55:09.919 00:05:00.534 OSPF 28.0.2.1:0 -> 224.0.0.5:0 42 2932 1 2025-11-06 01:59:11.070 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55062 1 109 1 2025-11-06 02:00:11.309 00:00:00.000 UDP 28.104.0.1:60421 -> 198.28.0.2:53 1 64 1 2025-11-06 02:00:11.309 00:00:00.000 UDP 28.104.0.1:55751 -> 198.28.0.2:53 1 64 1 2025-11-06 02:00:11.318 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55751 1 109 1 2025-11-06 02:00:11.318 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60421 1 80 1 2025-11-06 01:56:01.964 00:05:51.646 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-06 02:01:11.600 00:00:00.000 UDP 28.104.0.1:41539 -> 198.28.0.2:53 1 64 1 2025-11-06 02:01:11.600 00:00:00.000 UDP 28.104.0.1:57971 -> 198.28.0.2:53 1 64 1 2025-11-06 02:01:11.611 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41539 1 109 1 2025-11-06 02:01:11.611 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57971 1 80 1 2025-11-06 01:58:01.955 00:05:00.241 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-06 02:02:11.852 00:00:00.000 UDP 28.104.0.1:39070 -> 198.28.0.2:53 1 64 1 2025-11-06 02:02:11.852 00:00:00.000 UDP 28.104.0.1:33879 -> 198.28.0.2:53 1 64 1 2025-11-06 02:02:11.863 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33879 1 109 1 2025-11-06 02:02:11.862 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39070 1 80 1 2025-11-06 01:58:53.609 00:05:08.405 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-06 01:59:01.955 00:05:00.147 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-06 02:03:12.133 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60010 1 80 1 2025-11-06 02:03:12.133 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48115 1 109 1 2025-11-06 02:03:12.122 00:00:00.000 UDP 28.104.0.1:48115 -> 198.28.0.2:53 1 64 1 2025-11-06 02:03:12.122 00:00:00.000 UDP 28.104.0.1:60010 -> 198.28.0.2:53 1 64 1 2025-11-06 02:03:19.864 00:00:00.026 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-06 01:59:01.954 00:05:51.670 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-06 02:04:12.426 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44307 1 109 1 2025-11-06 02:04:12.427 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46297 1 80 1 2025-11-06 02:04:12.416 00:00:00.000 UDP 28.104.0.1:46297 -> 198.28.0.2:53 1 64 1 2025-11-06 02:04:12.416 00:00:00.000 UDP 28.104.0.1:44307 -> 198.28.0.2:53 1 64 1 2025-11-06 02:00:19.923 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2528 1 2025-11-06 02:00:53.658 00:05:08.345 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-06 02:05:12.666 00:00:00.000 UDP 28.104.0.1:38544 -> 198.28.0.2:53 1 64 1 2025-11-06 02:05:12.666 00:00:00.000 UDP 28.104.0.1:40298 -> 198.28.0.2:53 1 64 1 2025-11-06 02:05:12.678 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38544 1 80 1 2025-11-06 02:05:12.678 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40298 1 109 1 2025-11-06 02:06:12.965 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43594 1 80 1 2025-11-06 02:06:12.965 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34173 1 109 1 2025-11-06 02:06:12.954 00:00:00.000 UDP 28.104.0.1:34173 -> 198.28.0.2:53 1 64 1 2025-11-06 02:06:12.954 00:00:00.000 UDP 28.104.0.1:43594 -> 198.28.0.2:53 1 64 1 2025-11-06 02:02:01.966 00:05:51.648 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-06 02:07:13.216 00:00:00.000 UDP 28.104.0.1:50148 -> 198.28.0.2:53 1 64 1 2025-11-06 02:07:13.216 00:00:00.000 UDP 28.104.0.1:34685 -> 198.28.0.2:53 1 64 1 2025-11-06 02:07:13.227 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50148 1 109 1 2025-11-06 02:07:13.227 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34685 1 80 1 2025-11-06 02:04:01.956 00:05:00.241 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-06 02:08:13.508 00:00:00.000 UDP 28.104.0.1:48073 -> 198.28.0.2:53 1 64 1 2025-11-06 02:08:13.508 00:00:00.000 UDP 28.104.0.1:37157 -> 198.28.0.2:53 1 64 1 2025-11-06 02:08:13.519 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48073 1 109 1 2025-11-06 02:08:13.519 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37157 1 80 1 2025-11-06 02:08:20.016 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-06 02:05:01.957 00:05:00.146 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-06 02:04:53.614 00:05:08.401 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-06 02:09:14.509 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38758 1 80 1 2025-11-06 02:09:14.509 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34373 1 109 1 2025-11-06 02:09:14.499 00:00:00.000 UDP 28.104.0.1:34373 -> 198.28.0.2:53 1 64 1 2025-11-06 02:09:14.499 00:00:00.000 UDP 28.104.0.1:38758 -> 198.28.0.2:53 1 64 1 2025-11-06 02:05:39.929 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2504 1 2025-11-06 02:05:01.956 00:05:51.667 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-06 02:10:14.805 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45693 1 109 1 2025-11-06 02:10:14.804 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38189 1 80 1 2025-11-06 02:10:14.795 00:00:00.000 UDP 28.104.0.1:45693 -> 198.28.0.2:53 1 64 1 2025-11-06 02:10:14.793 00:00:00.000 UDP 28.104.0.1:38189 -> 198.28.0.2:53 1 64 1 2025-11-06 02:06:53.663 00:05:08.342 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-06 02:11:15.075 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41542 1 80 1 2025-11-06 02:11:15.076 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37920 1 109 1 2025-11-06 02:11:15.064 00:00:00.000 UDP 28.104.0.1:37920 -> 198.28.0.2:53 1 64 1 2025-11-06 02:11:15.064 00:00:00.000 UDP 28.104.0.1:41542 -> 198.28.0.2:53 1 64 1 2025-11-06 02:12:15.360 00:00:00.000 UDP 28.104.0.1:37420 -> 198.28.0.2:53 1 64 1 2025-11-06 02:12:15.360 00:00:00.000 UDP 28.104.0.1:34153 -> 198.28.0.2:53 1 64 1 2025-11-06 02:12:15.377 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34153 1 109 1 2025-11-06 02:12:15.377 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37420 1 80 1 2025-11-06 02:08:01.966 00:05:51.647 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-06 02:13:15.673 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58158 1 80 1 2025-11-06 02:13:15.672 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37513 1 109 1 2025-11-06 02:13:15.662 00:00:00.000 UDP 28.104.0.1:37513 -> 198.28.0.2:53 1 64 1 2025-11-06 02:13:15.662 00:00:00.000 UDP 28.104.0.1:58158 -> 198.28.0.2:53 1 64 1 2025-11-06 02:13:20.353 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-06 02:10:01.958 00:05:00.243 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-06 02:14:15.955 00:00:00.000 UDP 28.104.0.1:43738 -> 198.28.0.2:53 1 64 1 2025-11-06 02:14:15.955 00:00:00.000 UDP 28.104.0.1:59090 -> 198.28.0.2:53 1 64 1 2025-11-06 02:14:15.967 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59090 1 109 1 2025-11-06 02:14:15.966 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43738 1 80 1 2025-11-06 02:11:01.958 00:05:00.146 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-06 02:10:53.614 00:05:08.402 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-06 02:10:59.937 00:05:10.753 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2980 1 2025-11-06 02:15:16.249 00:00:00.000 UDP 28.104.0.1:44052 -> 198.28.0.2:53 1 64 1 2025-11-06 02:15:16.249 00:00:00.000 UDP 28.104.0.1:42035 -> 198.28.0.2:53 1 64 1 2025-11-06 02:15:16.261 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42035 1 109 1 2025-11-06 02:15:16.261 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44052 1 80 1 2025-11-06 02:11:01.957 00:05:51.667 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-06 02:16:16.538 00:00:00.000 UDP 28.104.0.1:56210 -> 198.28.0.2:53 1 64 1 2025-11-06 02:16:16.538 00:00:00.000 UDP 28.104.0.1:46513 -> 198.28.0.2:53 1 64 1 2025-11-06 02:16:16.548 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56210 1 80 1 2025-11-06 02:16:16.548 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46513 1 109 1 2025-11-06 02:12:53.664 00:05:08.346 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-06 02:17:16.830 00:00:00.000 UDP 28.104.0.1:54249 -> 198.28.0.2:53 1 64 1 2025-11-06 02:17:16.830 00:00:00.000 UDP 28.104.0.1:49348 -> 198.28.0.2:53 1 64 1 2025-11-06 02:17:16.840 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54249 1 80 1 2025-11-06 02:17:16.840 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49348 1 109 1 2025-11-06 02:18:20.435 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-06 02:18:17.104 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50726 1 80 1 2025-11-06 02:18:17.104 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58164 1 109 1 2025-11-06 02:18:17.095 00:00:00.000 UDP 28.104.0.1:58164 -> 198.28.0.2:53 1 64 1 2025-11-06 02:18:17.095 00:00:00.000 UDP 28.104.0.1:50726 -> 198.28.0.2:53 1 64 1 2025-11-06 02:14:01.969 00:05:51.645 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-06 02:19:17.391 00:00:00.000 UDP 28.104.0.1:38318 -> 198.28.0.2:53 1 64 1 2025-11-06 02:19:17.391 00:00:00.000 UDP 28.104.0.1:53668 -> 198.28.0.2:53 1 64 1 2025-11-06 02:19:17.402 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53668 1 109 1 2025-11-06 02:19:17.402 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38318 1 80 1 2025-11-06 02:16:01.960 00:05:00.240 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-06 02:20:17.698 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37225 1 109 1 2025-11-06 02:16:19.941 00:05:00.822 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2540 1 2025-11-06 02:20:17.698 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54235 1 80 1 2025-11-06 02:20:17.689 00:00:00.000 UDP 28.104.0.1:54235 -> 198.28.0.2:53 1 64 1 2025-11-06 02:20:17.689 00:00:00.000 UDP 28.104.0.1:37225 -> 198.28.0.2:53 1 64 1 2025-11-06 02:16:53.615 00:05:08.404 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-06 02:17:01.960 00:05:00.144 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-06 02:21:17.982 00:00:00.000 UDP 28.104.0.1:38004 -> 198.28.0.2:53 1 64 1 2025-11-06 02:21:17.982 00:00:00.000 UDP 28.104.0.1:35042 -> 198.28.0.2:53 1 64 1 2025-11-06 02:21:17.993 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38004 1 109 1 2025-11-06 02:21:17.993 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35042 1 80 1 2025-11-06 02:17:01.960 00:05:51.667 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-06 02:22:18.287 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55493 1 80 1 2025-11-06 02:22:18.287 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43737 1 109 1 2025-11-06 02:22:18.279 00:00:00.000 UDP 28.104.0.1:55493 -> 198.28.0.2:53 1 64 1 2025-11-06 02:22:18.279 00:00:00.000 UDP 28.104.0.1:43737 -> 198.28.0.2:53 1 64 1 2025-11-06 02:18:53.665 00:05:08.343 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-06 02:23:20.613 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-06 02:23:18.679 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43764 1 109 1 2025-11-06 02:23:18.678 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48401 1 80 1 2025-11-06 02:23:18.668 00:00:00.000 UDP 28.104.0.1:43764 -> 198.28.0.2:53 1 64 1 2025-11-06 02:23:18.668 00:00:00.000 UDP 28.104.0.1:48401 -> 198.28.0.2:53 1 64 1 2025-11-06 02:24:18.933 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42903 1 109 1 2025-11-06 02:24:18.933 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38419 1 80 1 2025-11-06 02:24:18.923 00:00:00.000 UDP 28.104.0.1:42903 -> 198.28.0.2:53 1 64 1 2025-11-06 02:24:18.923 00:00:00.000 UDP 28.104.0.1:38419 -> 198.28.0.2:53 1 64 1 2025-11-06 02:20:01.971 00:05:51.647 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-06 02:25:19.264 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56969 1 109 1 2025-11-06 02:25:19.262 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39371 1 80 1 2025-11-06 02:25:19.252 00:00:00.000 UDP 28.104.0.1:56969 -> 198.28.0.2:53 1 64 1 2025-11-06 02:25:19.252 00:00:00.000 UDP 28.104.0.1:39371 -> 198.28.0.2:53 1 64 1 2025-11-06 02:21:29.949 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 3008 1 2025-11-06 02:22:01.963 00:05:00.240 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-06 02:26:19.534 00:00:00.000 UDP 28.104.0.1:42172 -> 198.28.0.2:53 1 64 1 2025-11-06 02:26:19.534 00:00:00.000 UDP 28.104.0.1:34938 -> 198.28.0.2:53 1 64 1 2025-11-06 02:26:19.543 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34938 1 109 1 2025-11-06 02:26:19.543 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42172 1 80 1 2025-11-06 02:22:53.617 00:05:08.403 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-06 02:23:01.962 00:05:00.145 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-06 02:27:19.787 00:00:00.000 UDP 28.104.0.1:44299 -> 198.28.0.2:53 1 64 1 2025-11-06 02:27:19.786 00:00:00.000 UDP 28.104.0.1:39251 -> 198.28.0.2:53 1 64 1 2025-11-06 02:27:19.801 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44299 1 109 1 2025-11-06 02:27:19.797 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39251 1 80 1 2025-11-06 02:23:01.961 00:05:51.667 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-06 02:28:20.105 00:00:00.000 UDP 28.104.0.1:58493 -> 198.28.0.2:53 1 64 1 2025-11-06 02:28:20.105 00:00:00.000 UDP 28.104.0.1:52722 -> 198.28.0.2:53 1 64 1 2025-11-06 02:28:20.816 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-06 02:28:20.115 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58493 1 109 1 2025-11-06 02:28:20.115 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52722 1 80 1 2025-11-06 02:24:53.668 00:05:08.342 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-06 02:29:20.628 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36490 1 109 1 2025-11-06 02:29:20.628 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57050 1 80 1 2025-11-06 02:29:20.618 00:00:00.000 UDP 28.104.0.1:36490 -> 198.28.0.2:53 1 64 1 2025-11-06 02:29:20.618 00:00:00.000 UDP 28.104.0.1:57050 -> 198.28.0.2:53 1 64 1 2025-11-06 02:30:20.873 00:00:00.000 UDP 28.104.0.1:38096 -> 198.28.0.2:53 1 64 1 2025-11-06 02:30:20.873 00:00:00.000 UDP 28.104.0.1:53836 -> 198.28.0.2:53 1 64 1 2025-11-06 02:30:20.884 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53836 1 109 1 2025-11-06 02:30:20.884 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38096 1 80 1 2025-11-06 02:26:49.955 00:05:00.945 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2748 1 2025-11-06 02:26:01.972 00:05:51.647 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-06 02:31:21.188 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51196 1 109 1 2025-11-06 02:31:21.187 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48240 1 80 1 2025-11-06 02:31:21.178 00:00:00.000 UDP 28.104.0.1:51196 -> 198.28.0.2:53 1 64 1 2025-11-06 02:31:21.178 00:00:00.000 UDP 28.104.0.1:48240 -> 198.28.0.2:53 1 64 1 2025-11-06 02:28:01.963 00:05:00.241 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-06 02:32:21.791 00:00:00.000 UDP 28.104.0.1:53176 -> 198.28.0.2:53 1 64 1 2025-11-06 02:32:21.791 00:00:00.000 UDP 28.104.0.1:39590 -> 198.28.0.2:53 1 64 1 2025-11-06 02:32:21.800 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39590 1 109 1 2025-11-06 02:32:21.800 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53176 1 80 1 2025-11-06 02:29:01.963 00:05:00.150 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-06 02:28:53.618 00:05:08.405 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-06 02:33:20.800 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-06 02:33:22.102 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42361 1 109 1 2025-11-06 02:33:22.102 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52656 1 80 1 2025-11-06 02:33:22.092 00:00:00.000 UDP 28.104.0.1:52656 -> 198.28.0.2:53 1 64 1 2025-11-06 02:33:22.091 00:00:00.000 UDP 28.104.0.1:42361 -> 198.28.0.2:53 1 64 1 2025-11-06 02:29:01.963 00:05:51.667 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-06 02:34:22.437 00:00:00.000 UDP 28.104.0.1:60915 -> 198.28.0.2:53 1 64 1 2025-11-06 02:34:22.437 00:00:00.000 UDP 28.104.0.1:51558 -> 198.28.0.2:53 1 64 1 2025-11-06 02:34:22.448 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60915 1 80 1 2025-11-06 02:34:22.448 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51558 1 109 1 2025-11-06 02:30:53.668 00:05:08.346 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-06 02:35:22.686 00:00:00.000 UDP 28.104.0.1:48651 -> 198.28.0.2:53 1 64 1 2025-11-06 02:35:22.686 00:00:00.000 UDP 28.104.0.1:36940 -> 198.28.0.2:53 1 64 1 2025-11-06 02:35:22.697 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36940 1 80 1 2025-11-06 02:35:22.697 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48651 1 109 1 2025-11-06 02:31:59.960 00:05:11.021 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2384 1 2025-11-06 02:36:22.991 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59028 1 80 1 2025-11-06 02:36:22.992 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36595 1 109 1 2025-11-06 02:36:22.982 00:00:00.000 UDP 28.104.0.1:59028 -> 198.28.0.2:53 1 64 1 2025-11-06 02:36:22.983 00:00:00.000 UDP 28.104.0.1:36595 -> 198.28.0.2:53 1 64 1 2025-11-06 02:32:01.974 00:05:51.647 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-06 02:37:23.237 00:00:00.000 UDP 28.104.0.1:57199 -> 198.28.0.2:53 1 64 1 2025-11-06 02:37:23.237 00:00:00.000 UDP 28.104.0.1:47550 -> 198.28.0.2:53 1 64 1 2025-11-06 02:37:23.248 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57199 1 80 1 2025-11-06 02:37:23.249 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47550 1 109 1 2025-11-06 02:34:01.967 00:05:00.238 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-06 02:38:20.868 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-06 02:38:23.495 00:00:00.000 UDP 28.104.0.1:50833 -> 198.28.0.2:53 1 64 1 2025-11-06 02:38:23.495 00:00:00.000 UDP 28.104.0.1:42514 -> 198.28.0.2:53 1 64 1 2025-11-06 02:38:23.505 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50833 1 109 1 2025-11-06 02:38:23.505 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42514 1 80 1 2025-11-06 02:35:01.967 00:05:00.150 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-06 02:34:53.619 00:05:08.405 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-06 02:39:23.790 00:00:00.000 UDP 28.104.0.1:34515 -> 198.28.0.2:53 1 64 1 2025-11-06 02:39:23.790 00:00:00.000 UDP 28.104.0.1:59880 -> 198.28.0.2:53 1 64 1 2025-11-06 02:39:23.800 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59880 1 109 1 2025-11-06 02:39:23.800 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34515 1 80 1 2025-11-06 02:35:01.966 00:05:51.665 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-06 02:40:24.097 00:00:00.000 UDP 28.104.0.1:49873 -> 198.28.0.2:53 1 64 1 2025-11-06 02:40:24.097 00:00:00.000 UDP 28.104.0.1:54764 -> 198.28.0.2:53 1 64 1 2025-11-06 02:40:24.108 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54764 1 109 1 2025-11-06 02:40:24.108 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49873 1 80 1 2025-11-06 02:36:53.670 00:05:08.345 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-06 02:41:24.553 00:00:00.000 UDP 28.104.0.1:41405 -> 198.28.0.2:53 1 64 1 2025-11-06 02:41:24.553 00:00:00.000 UDP 28.104.0.1:40541 -> 198.28.0.2:53 1 64 1 2025-11-06 02:41:24.564 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41405 1 109 1 2025-11-06 02:41:24.564 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40541 1 80 1 2025-11-06 02:37:19.969 00:05:10.011 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2440 1 2025-11-06 02:42:24.846 00:00:00.000 UDP 28.104.0.1:41635 -> 198.28.0.2:53 1 64 1 2025-11-06 02:42:24.846 00:00:00.000 UDP 28.104.0.1:51617 -> 198.28.0.2:53 1 64 1 2025-11-06 02:42:24.857 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41635 1 80 1 2025-11-06 02:42:24.856 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51617 1 109 1 2025-11-06 02:38:01.977 00:05:51.644 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-06 02:43:20.758 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-06 02:43:25.158 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49369 1 109 1 2025-11-06 02:43:25.158 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53492 1 80 1 2025-11-06 02:43:25.148 00:00:00.000 UDP 28.104.0.1:49369 -> 198.28.0.2:53 1 64 1 2025-11-06 02:43:25.148 00:00:00.000 UDP 28.104.0.1:53492 -> 198.28.0.2:53 1 64 1 2025-11-06 02:40:01.968 00:05:00.238 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-06 02:44:26.294 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34911 1 80 1 2025-11-06 02:44:26.294 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56083 1 109 1 2025-11-06 02:44:26.284 00:00:00.000 UDP 28.104.0.1:34911 -> 198.28.0.2:53 1 64 1 2025-11-06 02:44:26.284 00:00:00.000 UDP 28.104.0.1:56083 -> 198.28.0.2:53 1 64 1 2025-11-06 02:41:01.968 00:05:00.151 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-06 02:40:53.621 00:05:08.404 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-06 02:45:26.587 00:00:00.000 UDP 28.104.0.1:50486 -> 198.28.0.2:53 1 64 1 2025-11-06 02:45:26.588 00:00:00.000 UDP 28.104.0.1:59493 -> 198.28.0.2:53 1 64 1 2025-11-06 02:45:26.597 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50486 1 80 1 2025-11-06 02:45:26.598 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59493 1 109 1 2025-11-06 02:41:01.968 00:05:51.665 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-06 02:46:26.897 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49751 1 80 1 2025-11-06 02:46:26.898 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51105 1 109 1 2025-11-06 02:46:26.888 00:00:00.000 UDP 28.104.0.1:49751 -> 198.28.0.2:53 1 64 1 2025-11-06 02:46:26.888 00:00:00.000 UDP 28.104.0.1:51105 -> 198.28.0.2:53 1 64 1 2025-11-06 02:42:39.980 00:05:10.011 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 3044 1 2025-11-06 02:42:53.672 00:05:08.344 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-06 02:47:27.161 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46415 1 109 1 2025-11-06 02:47:27.161 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37780 1 80 1 2025-11-06 02:47:27.150 00:00:00.000 UDP 28.104.0.1:37780 -> 198.28.0.2:53 1 64 1 2025-11-06 02:47:27.150 00:00:00.000 UDP 28.104.0.1:46415 -> 198.28.0.2:53 1 64 1 2025-11-06 02:48:21.544 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-06 02:48:27.446 00:00:00.000 UDP 28.104.0.1:34581 -> 198.28.0.2:53 1 64 1 2025-11-06 02:48:27.446 00:00:00.000 UDP 28.104.0.1:55991 -> 198.28.0.2:53 1 64 1 2025-11-06 02:48:27.455 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34581 1 109 1 2025-11-06 02:48:27.455 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55991 1 80 1 2025-11-06 02:44:01.979 00:05:51.644 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-06 02:49:27.753 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58058 1 109 1 2025-11-06 02:49:27.753 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40790 1 80 1 2025-11-06 02:49:27.744 00:00:00.000 UDP 28.104.0.1:40790 -> 198.28.0.2:53 1 64 1 2025-11-06 02:49:27.744 00:00:00.000 UDP 28.104.0.1:58058 -> 198.28.0.2:53 1 64 1 2025-11-06 02:46:01.968 00:05:00.239 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-06 02:50:28.065 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52340 1 109 1 2025-11-06 02:50:28.065 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40744 1 80 1 2025-11-06 02:50:28.055 00:00:00.000 UDP 28.104.0.1:40744 -> 198.28.0.2:53 1 64 1 2025-11-06 02:50:28.055 00:00:00.000 UDP 28.104.0.1:52340 -> 198.28.0.2:53 1 64 1 2025-11-06 02:47:01.970 00:05:00.149 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-06 02:46:53.623 00:05:08.405 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-06 02:51:28.361 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45025 1 109 1 2025-11-06 02:51:28.361 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40180 1 80 1 2025-11-06 02:51:28.351 00:00:00.000 UDP 28.104.0.1:40180 -> 198.28.0.2:53 1 64 1 2025-11-06 02:51:28.351 00:00:00.000 UDP 28.104.0.1:45025 -> 198.28.0.2:53 1 64 1 2025-11-06 02:47:01.970 00:05:51.664 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-06 02:47:59.993 00:05:10.057 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2972 1 2025-11-06 02:52:28.652 00:00:00.000 UDP 28.104.0.1:41176 -> 198.28.0.2:53 1 64 1 2025-11-06 02:52:28.652 00:00:00.000 UDP 28.104.0.1:33975 -> 198.28.0.2:53 1 64 1 2025-11-06 02:52:28.662 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41176 1 80 1 2025-11-06 02:52:28.662 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33975 1 109 1 2025-11-06 02:48:53.674 00:05:08.344 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-06 02:53:21.223 00:00:00.028 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-06 02:53:28.949 00:00:00.000 UDP 28.104.0.1:33008 -> 198.28.0.2:53 1 64 1 2025-11-06 02:53:28.949 00:00:00.000 UDP 28.104.0.1:59393 -> 198.28.0.2:53 1 64 1 2025-11-06 02:53:28.959 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59393 1 80 1 2025-11-06 02:53:28.959 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33008 1 109 1 2025-11-06 02:54:29.272 00:00:00.000 UDP 28.104.0.1:33571 -> 198.28.0.2:53 1 64 1 2025-11-06 02:54:29.272 00:00:00.000 UDP 28.104.0.1:35248 -> 198.28.0.2:53 1 64 1 2025-11-06 02:54:29.282 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35248 1 80 1 2025-11-06 02:54:29.281 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33571 1 109 1 2025-11-06 02:50:01.981 00:05:51.644 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-06 02:55:29.571 00:00:00.000 UDP 28.104.0.1:50975 -> 198.28.0.2:53 1 64 1 2025-11-06 02:55:29.571 00:00:00.000 UDP 28.104.0.1:54747 -> 198.28.0.2:53 1 64 1 2025-11-06 02:55:29.581 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54747 1 109 1 2025-11-06 02:55:29.581 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50975 1 80 1 2025-11-06 02:52:01.970 00:05:00.238 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-06 02:56:29.888 00:00:00.000 UDP 28.104.0.1:48382 -> 198.28.0.2:53 1 64 1 2025-11-06 02:56:29.887 00:00:00.000 UDP 28.104.0.1:40492 -> 198.28.0.2:53 1 64 1 2025-11-06 02:56:29.900 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40492 1 80 1 2025-11-06 02:56:29.903 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48382 1 109 1 2025-11-06 02:53:01.971 00:05:00.148 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-06 02:52:53.623 00:05:08.408 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-06 02:53:19.996 00:05:00.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2656 1 2025-11-06 02:57:30.204 00:00:00.000 UDP 28.104.0.1:40953 -> 198.28.0.2:53 1 64 1 2025-11-06 02:57:30.204 00:00:00.000 UDP 28.104.0.1:36633 -> 198.28.0.2:53 1 64 1 2025-11-06 02:57:30.213 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40953 1 80 1 2025-11-06 02:57:30.213 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36633 1 109 1 2025-11-06 02:53:01.970 00:05:51.663 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-06 02:58:21.370 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-06 02:58:30.511 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57352 1 109 1 2025-11-06 02:58:30.511 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36547 1 80 1 2025-11-06 02:58:30.501 00:00:00.000 UDP 28.104.0.1:36547 -> 198.28.0.2:53 1 64 1 2025-11-06 02:58:30.501 00:00:00.000 UDP 28.104.0.1:57352 -> 198.28.0.2:53 1 64 1 Summary: total flows: 324, total bytes: 99060, total packets: 1459, avg bps: 206, avg pps: 0, avg bpp: 67 Time window: 2025-11-06 01:54:53 - 2025-11-06 02:58:53 Total flows processed: 324, passed: 324, Blocks skipped: 0, Bytes read: 33760 Sys: 0.0027s User: 0.0036s Wall: 0.0036s flows/second: 90985.2 Runtime: 0.0036s