Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-09 04:54:03.603 00:05:51.448 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-09 04:59:48.002 00:00:00.000 UDP 28.104.0.1:56639 -> 198.28.0.2:53 1 64 1 2025-11-09 04:59:48.003 00:00:00.000 UDP 28.104.0.1:40477 -> 198.28.0.2:53 1 64 1 2025-11-09 04:55:36.124 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 33 2240 1 2025-11-09 04:59:50.478 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-09 04:59:48.014 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56639 1 109 1 2025-11-09 04:59:48.018 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40477 1 80 1 2025-11-09 04:55:03.496 00:05:51.505 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-09 05:00:48.300 00:00:00.000 UDP 28.104.0.1:33695 -> 198.28.0.2:53 1 64 1 2025-11-09 05:00:48.300 00:00:00.000 UDP 28.104.0.1:47745 -> 198.28.0.2:53 1 64 1 2025-11-09 05:00:48.309 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47745 1 109 1 2025-11-09 05:00:48.309 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33695 1 80 1 2025-11-09 05:01:48.549 00:00:00.000 UDP 28.104.0.1:50232 -> 198.28.0.2:53 1 64 1 2025-11-09 05:01:48.549 00:00:00.000 UDP 28.104.0.1:51255 -> 198.28.0.2:53 1 64 1 2025-11-09 04:57:03.487 00:05:51.525 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-09 05:01:48.560 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51255 1 80 1 2025-11-09 05:01:48.560 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50232 1 109 1 2025-11-09 04:57:03.616 00:05:51.387 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-09 05:02:48.846 00:00:00.000 UDP 28.104.0.1:50341 -> 198.28.0.2:53 1 64 1 2025-11-09 05:02:48.846 00:00:00.000 UDP 28.104.0.1:41481 -> 198.28.0.2:53 1 64 1 2025-11-09 05:02:48.857 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41481 1 109 1 2025-11-09 05:02:48.857 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50341 1 80 1 2025-11-09 05:03:49.144 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33861 1 109 1 2025-11-09 05:03:49.143 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33666 1 80 1 2025-11-09 05:03:49.133 00:00:00.000 UDP 28.104.0.1:33666 -> 198.28.0.2:53 1 64 1 2025-11-09 05:03:49.133 00:00:00.000 UDP 28.104.0.1:33861 -> 198.28.0.2:53 1 64 1 2025-11-09 04:59:03.487 00:06:00.281 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-09 05:04:49.429 00:00:00.000 UDP 28.104.0.1:40642 -> 198.28.0.2:53 1 64 1 2025-11-09 05:04:49.429 00:00:00.000 UDP 28.104.0.1:38198 -> 198.28.0.2:53 1 64 1 2025-11-09 05:04:49.440 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40642 1 80 1 2025-11-09 05:04:50.441 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-09 05:04:49.439 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38198 1 109 1 2025-11-09 05:00:03.606 00:05:51.447 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-09 05:00:03.487 00:06:00.143 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-09 05:00:56.127 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2564 1 2025-11-09 05:05:49.742 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38722 1 109 1 2025-11-09 05:05:49.743 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50812 1 80 1 2025-11-09 05:05:49.733 00:00:00.000 UDP 28.104.0.1:38722 -> 198.28.0.2:53 1 64 1 2025-11-09 05:05:49.733 00:00:00.000 UDP 28.104.0.1:50812 -> 198.28.0.2:53 1 64 1 2025-11-09 05:01:03.498 00:05:51.505 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-09 05:06:50.409 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45762 1 109 1 2025-11-09 05:06:50.410 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55067 1 80 1 2025-11-09 05:06:50.399 00:00:00.000 UDP 28.104.0.1:45762 -> 198.28.0.2:53 1 64 1 2025-11-09 05:06:50.399 00:00:00.000 UDP 28.104.0.1:55067 -> 198.28.0.2:53 1 64 1 2025-11-09 05:07:50.692 00:00:00.000 UDP 28.104.0.1:37687 -> 198.28.0.2:53 1 64 1 2025-11-09 05:07:50.692 00:00:00.000 UDP 28.104.0.1:56716 -> 198.28.0.2:53 1 64 1 2025-11-09 05:03:03.488 00:05:51.526 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-09 05:07:50.703 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56716 1 109 1 2025-11-09 05:07:50.704 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37687 1 80 1 2025-11-09 05:03:03.623 00:05:51.381 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-09 05:08:50.963 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45605 1 109 1 2025-11-09 05:08:50.963 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39588 1 80 1 2025-11-09 05:08:50.953 00:00:00.000 UDP 28.104.0.1:39588 -> 198.28.0.2:53 1 64 1 2025-11-09 05:08:50.952 00:00:00.000 UDP 28.104.0.1:45605 -> 198.28.0.2:53 1 64 1 2025-11-09 05:09:51.219 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45034 1 109 1 2025-11-09 05:09:50.439 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-09 05:09:51.219 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32956 1 80 1 2025-11-09 05:09:51.208 00:00:00.000 UDP 28.104.0.1:32956 -> 198.28.0.2:53 1 64 1 2025-11-09 05:09:51.208 00:00:00.000 UDP 28.104.0.1:45034 -> 198.28.0.2:53 1 64 1 2025-11-09 05:06:16.133 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 44 3264 1 2025-11-09 05:10:51.531 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36497 1 109 1 2025-11-09 05:10:51.531 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50025 1 80 1 2025-11-09 05:10:51.521 00:00:00.000 UDP 28.104.0.1:50025 -> 198.28.0.2:53 1 64 1 2025-11-09 05:10:51.521 00:00:00.000 UDP 28.104.0.1:36497 -> 198.28.0.2:53 1 64 1 2025-11-09 05:06:03.613 00:05:51.440 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-09 05:06:03.488 00:06:00.280 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-09 05:11:51.813 00:00:00.000 UDP 28.104.0.1:36975 -> 198.28.0.2:53 1 64 1 2025-11-09 05:11:51.813 00:00:00.000 UDP 28.104.0.1:42980 -> 198.28.0.2:53 1 64 1 2025-11-09 05:11:51.823 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42980 1 80 1 2025-11-09 05:11:51.823 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36975 1 109 1 2025-11-09 05:07:03.498 00:05:51.505 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-09 05:07:03.489 00:06:00.143 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-09 05:12:52.130 00:00:00.000 UDP 28.104.0.1:58585 -> 198.28.0.2:53 1 64 1 2025-11-09 05:12:52.130 00:00:00.000 UDP 28.104.0.1:53977 -> 198.28.0.2:53 1 64 1 2025-11-09 05:12:52.139 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58585 1 80 1 2025-11-09 05:12:52.139 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53977 1 109 1 2025-11-09 05:13:52.455 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33196 1 109 1 2025-11-09 05:09:03.626 00:05:51.378 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-09 05:13:52.455 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37424 1 80 1 2025-11-09 05:13:52.445 00:00:00.000 UDP 28.104.0.1:33196 -> 198.28.0.2:53 1 64 1 2025-11-09 05:13:52.445 00:00:00.000 UDP 28.104.0.1:37424 -> 198.28.0.2:53 1 64 1 2025-11-09 05:09:03.490 00:05:51.523 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-09 05:14:50.724 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-09 05:14:52.757 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47769 1 109 1 2025-11-09 05:14:52.757 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45512 1 80 1 2025-11-09 05:14:52.747 00:00:00.000 UDP 28.104.0.1:47769 -> 198.28.0.2:53 1 64 1 2025-11-09 05:14:52.746 00:00:00.000 UDP 28.104.0.1:45512 -> 198.28.0.2:53 1 64 1 2025-11-09 05:11:36.139 00:05:10.009 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2724 1 2025-11-09 05:15:53.109 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39265 1 109 1 2025-11-09 05:15:53.109 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34395 1 80 1 2025-11-09 05:15:53.101 00:00:00.000 UDP 28.104.0.1:34395 -> 198.28.0.2:53 1 64 1 2025-11-09 05:15:53.101 00:00:00.000 UDP 28.104.0.1:39265 -> 198.28.0.2:53 1 64 1 2025-11-09 05:12:03.617 00:05:51.440 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-09 05:16:53.389 00:00:00.000 UDP 28.104.0.1:49377 -> 198.28.0.2:53 1 64 1 2025-11-09 05:16:53.389 00:00:00.000 UDP 28.104.0.1:44899 -> 198.28.0.2:53 1 64 1 2025-11-09 05:16:53.399 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44899 1 109 1 2025-11-09 05:16:53.399 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49377 1 80 1 2025-11-09 05:13:03.499 00:05:51.509 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-09 05:17:53.706 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47690 1 80 1 2025-11-09 05:17:53.706 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33364 1 109 1 2025-11-09 05:17:53.695 00:00:00.000 UDP 28.104.0.1:47690 -> 198.28.0.2:53 1 64 1 2025-11-09 05:17:53.695 00:00:00.000 UDP 28.104.0.1:33364 -> 198.28.0.2:53 1 64 1 2025-11-09 05:13:03.489 00:06:00.281 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-09 05:18:54.011 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59821 1 109 1 2025-11-09 05:18:54.011 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57553 1 80 1 2025-11-09 05:18:54.001 00:00:00.000 UDP 28.104.0.1:59821 -> 198.28.0.2:53 1 64 1 2025-11-09 05:18:54.001 00:00:00.000 UDP 28.104.0.1:57553 -> 198.28.0.2:53 1 64 1 2025-11-09 05:14:03.489 00:06:00.145 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-09 05:19:50.770 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-09 05:19:54.275 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50907 1 109 1 2025-11-09 05:15:03.629 00:05:51.379 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-09 05:19:54.275 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33109 1 80 1 2025-11-09 05:15:03.489 00:05:51.529 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-09 05:19:54.264 00:00:00.000 UDP 28.104.0.1:50907 -> 198.28.0.2:53 1 64 1 2025-11-09 05:19:54.264 00:00:00.000 UDP 28.104.0.1:33109 -> 198.28.0.2:53 1 64 1 2025-11-09 05:20:54.573 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37948 1 80 1 2025-11-09 05:20:54.573 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59987 1 109 1 2025-11-09 05:20:54.562 00:00:00.000 UDP 28.104.0.1:59987 -> 198.28.0.2:53 1 64 1 2025-11-09 05:20:54.562 00:00:00.000 UDP 28.104.0.1:37948 -> 198.28.0.2:53 1 64 1 2025-11-09 05:16:56.146 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 44 3064 1 2025-11-09 05:21:54.862 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48040 1 109 1 2025-11-09 05:21:54.862 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35050 1 80 1 2025-11-09 05:21:54.851 00:00:00.000 UDP 28.104.0.1:48040 -> 198.28.0.2:53 1 64 1 2025-11-09 05:21:54.851 00:00:00.000 UDP 28.104.0.1:35050 -> 198.28.0.2:53 1 64 1 2025-11-09 05:22:55.169 00:00:00.000 UDP 28.104.0.1:47917 -> 198.28.0.2:53 1 64 1 2025-11-09 05:18:03.619 00:05:51.466 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-09 05:22:55.169 00:00:00.000 UDP 28.104.0.1:49896 -> 198.28.0.2:53 1 64 1 2025-11-09 05:22:55.179 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47917 1 80 1 2025-11-09 05:22:55.180 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49896 1 109 1 2025-11-09 05:23:56.285 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60484 1 109 1 2025-11-09 05:19:03.500 00:05:51.533 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-09 05:23:56.286 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52251 1 80 1 2025-11-09 05:23:56.275 00:00:00.000 UDP 28.104.0.1:60484 -> 198.28.0.2:53 1 64 1 2025-11-09 05:23:56.275 00:00:00.000 UDP 28.104.0.1:52251 -> 198.28.0.2:53 1 64 1 2025-11-09 05:24:50.921 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-09 05:24:56.523 00:00:00.000 UDP 28.104.0.1:35564 -> 198.28.0.2:53 1 64 1 2025-11-09 05:24:56.524 00:00:00.000 UDP 28.104.0.1:54425 -> 198.28.0.2:53 1 64 1 2025-11-09 05:24:56.533 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35564 1 109 1 2025-11-09 05:24:56.534 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54425 1 80 1 2025-11-09 05:20:03.490 00:06:00.284 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-09 05:25:56.834 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38534 1 109 1 2025-11-09 05:21:03.629 00:05:51.409 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-09 05:25:56.837 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39547 1 80 1 2025-11-09 05:21:03.491 00:05:51.558 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-09 05:25:56.825 00:00:00.000 UDP 28.104.0.1:39547 -> 198.28.0.2:53 1 64 1 2025-11-09 05:25:56.824 00:00:00.000 UDP 28.104.0.1:38534 -> 198.28.0.2:53 1 64 1 2025-11-09 05:21:03.490 00:06:00.146 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-09 05:22:16.154 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 33 2256 1 2025-11-09 05:26:57.126 00:00:00.000 UDP 28.104.0.1:36032 -> 198.28.0.2:53 1 64 1 2025-11-09 05:26:57.126 00:00:00.000 UDP 28.104.0.1:56023 -> 198.28.0.2:53 1 64 1 2025-11-09 05:26:57.136 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56023 1 109 1 2025-11-09 05:26:57.136 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36032 1 80 1 2025-11-09 05:27:57.439 00:00:00.000 UDP 28.104.0.1:38781 -> 198.28.0.2:53 1 64 1 2025-11-09 05:27:57.439 00:00:00.000 UDP 28.104.0.1:49196 -> 198.28.0.2:53 1 64 1 2025-11-09 05:27:57.450 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49196 1 80 1 2025-11-09 05:27:57.450 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38781 1 109 1 2025-11-09 05:24:03.621 00:05:51.466 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-09 05:28:57.835 00:00:00.000 UDP 28.104.0.1:35453 -> 198.28.0.2:53 1 64 1 2025-11-09 05:28:57.835 00:00:00.000 UDP 28.104.0.1:54130 -> 198.28.0.2:53 1 64 1 2025-11-09 05:28:57.846 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35453 1 80 1 2025-11-09 05:28:57.846 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54130 1 109 1 2025-11-09 05:29:50.961 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-09 05:25:03.501 00:05:51.537 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-09 05:29:58.145 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51981 1 109 1 2025-11-09 05:29:58.144 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55417 1 80 1 2025-11-09 05:29:58.133 00:00:00.000 UDP 28.104.0.1:55417 -> 198.28.0.2:53 1 64 1 2025-11-09 05:29:58.134 00:00:00.000 UDP 28.104.0.1:51981 -> 198.28.0.2:53 1 64 1 2025-11-09 05:30:58.437 00:00:00.000 UDP 28.104.0.1:58056 -> 198.28.0.2:53 1 64 1 2025-11-09 05:30:58.436 00:00:00.000 UDP 28.104.0.1:51170 -> 198.28.0.2:53 1 64 1 2025-11-09 05:30:58.448 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58056 1 109 1 2025-11-09 05:30:58.447 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51170 1 80 1 2025-11-09 05:27:36.158 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2424 1 2025-11-09 05:27:03.631 00:05:51.408 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-09 05:27:03.496 00:05:51.555 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-09 05:31:58.744 00:00:00.000 UDP 28.104.0.1:36649 -> 198.28.0.2:53 1 64 1 2025-11-09 05:31:58.743 00:00:00.000 UDP 28.104.0.1:43430 -> 198.28.0.2:53 1 64 1 2025-11-09 05:31:58.754 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43430 1 109 1 2025-11-09 05:31:58.754 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36649 1 80 1 2025-11-09 05:27:03.495 00:06:00.279 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-09 05:32:59.059 00:00:00.000 UDP 28.104.0.1:43396 -> 198.28.0.2:53 1 64 1 2025-11-09 05:32:59.059 00:00:00.000 UDP 28.104.0.1:42677 -> 198.28.0.2:53 1 64 1 2025-11-09 05:32:59.069 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43396 1 80 1 2025-11-09 05:32:59.068 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42677 1 109 1 2025-11-09 05:28:03.495 00:06:00.145 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-09 05:33:59.309 00:00:00.000 UDP 28.104.0.1:60497 -> 198.28.0.2:53 1 64 1 2025-11-09 05:33:59.309 00:00:00.000 UDP 28.104.0.1:52982 -> 198.28.0.2:53 1 64 1 2025-11-09 05:33:59.319 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60497 1 109 1 2025-11-09 05:33:59.319 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52982 1 80 1 2025-11-09 05:34:50.906 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-09 05:30:03.622 00:05:51.469 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-09 05:34:59.620 00:00:00.000 UDP 28.104.0.1:37461 -> 198.28.0.2:53 1 64 1 2025-11-09 05:34:59.620 00:00:00.000 UDP 28.104.0.1:49722 -> 198.28.0.2:53 1 64 1 2025-11-09 05:34:59.630 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37461 1 109 1 2025-11-09 05:34:59.630 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49722 1 80 1 2025-11-09 05:31:03.504 00:05:51.536 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-09 05:35:59.945 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33250 1 109 1 2025-11-09 05:35:59.945 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60651 1 80 1 2025-11-09 05:35:59.934 00:00:00.000 UDP 28.104.0.1:60651 -> 198.28.0.2:53 1 64 1 2025-11-09 05:35:59.934 00:00:00.000 UDP 28.104.0.1:33250 -> 198.28.0.2:53 1 64 1 2025-11-09 05:37:00.257 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54474 1 80 1 2025-11-09 05:37:00.257 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41980 1 109 1 2025-11-09 05:37:00.247 00:00:00.000 UDP 28.104.0.1:54474 -> 198.28.0.2:53 1 64 1 2025-11-09 05:37:00.247 00:00:00.000 UDP 28.104.0.1:41980 -> 198.28.0.2:53 1 64 1 2025-11-09 05:32:56.163 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2852 1 2025-11-09 05:33:03.634 00:05:51.406 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-09 05:33:03.497 00:05:51.554 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-09 05:38:00.536 00:00:00.000 UDP 28.104.0.1:48485 -> 198.28.0.2:53 1 64 1 2025-11-09 05:38:00.536 00:00:00.000 UDP 28.104.0.1:36571 -> 198.28.0.2:53 1 64 1 2025-11-09 05:38:00.547 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48485 1 109 1 2025-11-09 05:38:00.547 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36571 1 80 1 2025-11-09 05:39:00.855 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35565 1 80 1 2025-11-09 05:39:00.855 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36409 1 109 1 2025-11-09 05:39:00.845 00:00:00.000 UDP 28.104.0.1:35565 -> 198.28.0.2:53 1 64 1 2025-11-09 05:39:00.845 00:00:00.000 UDP 28.104.0.1:36409 -> 198.28.0.2:53 1 64 1 2025-11-09 05:34:03.496 00:06:00.281 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-09 05:39:51.924 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-09 05:40:01.167 00:00:00.000 UDP 28.104.0.1:49812 -> 198.28.0.2:53 1 64 1 2025-11-09 05:40:01.167 00:00:00.000 UDP 28.104.0.1:35849 -> 198.28.0.2:53 1 64 1 2025-11-09 05:40:01.178 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49812 1 80 1 2025-11-09 05:40:01.178 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35849 1 109 1 2025-11-09 05:35:03.497 00:06:00.146 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-09 05:36:03.625 00:05:51.466 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-09 05:41:01.454 00:00:00.000 UDP 28.104.0.1:58191 -> 198.28.0.2:53 1 64 1 2025-11-09 05:41:01.454 00:00:00.000 UDP 28.104.0.1:36669 -> 198.28.0.2:53 1 64 1 2025-11-09 05:41:01.466 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36669 1 109 1 2025-11-09 05:41:01.466 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58191 1 80 1 2025-11-09 05:37:03.509 00:05:51.532 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-09 05:42:01.760 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46156 1 80 1 2025-11-09 05:42:01.761 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57622 1 109 1 2025-11-09 05:42:01.749 00:00:00.000 UDP 28.104.0.1:57622 -> 198.28.0.2:53 1 64 1 2025-11-09 05:42:01.749 00:00:00.000 UDP 28.104.0.1:46156 -> 198.28.0.2:53 1 64 1 2025-11-09 05:38:16.170 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 43 3072 1 2025-11-09 05:43:02.070 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57267 1 109 1 2025-11-09 05:43:02.070 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47085 1 80 1 2025-11-09 05:43:02.059 00:00:00.000 UDP 28.104.0.1:57267 -> 198.28.0.2:53 1 64 1 2025-11-09 05:43:02.059 00:00:00.000 UDP 28.104.0.1:47085 -> 198.28.0.2:53 1 64 1 2025-11-09 05:39:03.497 00:05:51.554 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-09 05:39:03.635 00:05:51.406 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-09 05:44:02.313 00:00:00.000 UDP 28.104.0.1:45427 -> 198.28.0.2:53 1 64 1 2025-11-09 05:44:02.313 00:00:00.000 UDP 28.104.0.1:50439 -> 198.28.0.2:53 1 64 1 2025-11-09 05:44:02.324 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45427 1 80 1 2025-11-09 05:44:02.323 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50439 1 109 1 2025-11-09 05:44:51.138 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-09 05:45:02.609 00:00:00.000 UDP 28.104.0.1:47420 -> 198.28.0.2:53 1 64 1 2025-11-09 05:45:02.609 00:00:00.000 UDP 28.104.0.1:53754 -> 198.28.0.2:53 1 64 1 2025-11-09 05:45:02.620 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47420 1 80 1 2025-11-09 05:45:02.621 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53754 1 109 1 2025-11-09 05:46:02.914 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56690 1 109 1 2025-11-09 05:46:02.914 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59151 1 80 1 2025-11-09 05:46:02.904 00:00:00.000 UDP 28.104.0.1:59151 -> 198.28.0.2:53 1 64 1 2025-11-09 05:41:03.498 00:06:00.282 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-09 05:46:02.903 00:00:00.000 UDP 28.104.0.1:56690 -> 198.28.0.2:53 1 64 1 2025-11-09 05:42:03.628 00:05:51.466 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-09 05:47:03.217 00:00:00.000 UDP 28.104.0.1:38325 -> 198.28.0.2:53 1 64 1 2025-11-09 05:42:03.498 00:06:00.152 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-09 05:47:03.218 00:00:00.000 UDP 28.104.0.1:36034 -> 198.28.0.2:53 1 64 1 2025-11-09 05:47:03.227 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38325 1 109 1 2025-11-09 05:47:03.227 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36034 1 80 1 2025-11-09 05:43:36.176 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2840 1 2025-11-09 05:43:03.509 00:05:51.536 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-09 05:48:03.503 00:00:00.000 UDP 28.104.0.1:56565 -> 198.28.0.2:53 1 64 1 2025-11-09 05:48:03.503 00:00:00.000 UDP 28.104.0.1:59683 -> 198.28.0.2:53 1 64 1 2025-11-09 05:48:03.512 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56565 1 80 1 2025-11-09 05:48:03.512 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59683 1 109 1 2025-11-09 05:49:03.756 00:00:00.000 UDP 28.104.0.1:43045 -> 198.28.0.2:53 1 64 1 2025-11-09 05:49:03.756 00:00:00.000 UDP 28.104.0.1:37077 -> 198.28.0.2:53 1 64 1 2025-11-09 05:49:03.767 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43045 1 80 1 2025-11-09 05:49:03.767 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37077 1 109 1 2025-11-09 05:49:51.572 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-09 05:45:03.639 00:05:51.405 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-09 05:45:03.499 00:05:51.556 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-09 05:50:04.038 00:00:00.000 UDP 28.104.0.1:37835 -> 198.28.0.2:53 1 64 1 2025-11-09 05:50:04.038 00:00:00.000 UDP 28.104.0.1:46291 -> 198.28.0.2:53 1 64 1 2025-11-09 05:50:04.048 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37835 1 109 1 2025-11-09 05:50:04.048 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46291 1 80 1 2025-11-09 05:51:04.337 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52053 1 109 1 2025-11-09 05:51:04.338 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48225 1 80 1 2025-11-09 05:51:04.326 00:00:00.000 UDP 28.104.0.1:52053 -> 198.28.0.2:53 1 64 1 2025-11-09 05:51:04.326 00:00:00.000 UDP 28.104.0.1:48225 -> 198.28.0.2:53 1 64 1 2025-11-09 05:52:04.615 00:00:00.000 UDP 28.104.0.1:41070 -> 198.28.0.2:53 1 64 1 2025-11-09 05:52:04.616 00:00:00.000 UDP 28.104.0.1:52855 -> 198.28.0.2:53 1 64 1 2025-11-09 05:52:04.626 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52855 1 80 1 2025-11-09 05:52:04.626 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41070 1 109 1 2025-11-09 05:48:46.851 00:05:09.332 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2564 1 2025-11-09 05:48:03.629 00:05:51.467 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-09 05:53:04.930 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37711 1 80 1 2025-11-09 05:53:04.930 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37678 1 109 1 2025-11-09 05:53:04.921 00:00:00.000 UDP 28.104.0.1:37678 -> 198.28.0.2:53 1 64 1 2025-11-09 05:53:04.921 00:00:00.000 UDP 28.104.0.1:37711 -> 198.28.0.2:53 1 64 1 2025-11-09 05:48:03.500 00:06:00.283 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-09 05:49:03.509 00:05:51.537 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-09 05:54:05.244 00:00:00.000 UDP 28.104.0.1:57274 -> 198.28.0.2:53 1 64 1 2025-11-09 05:49:03.500 00:06:00.151 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-09 05:54:05.244 00:00:00.000 UDP 28.104.0.1:52669 -> 198.28.0.2:53 1 64 1 2025-11-09 05:54:05.254 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52669 1 80 1 2025-11-09 05:54:05.254 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57274 1 109 1 2025-11-09 05:54:51.373 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-09 05:55:05.547 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46313 1 109 1 2025-11-09 05:55:05.547 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59233 1 80 1 2025-11-09 05:55:05.538 00:00:00.000 UDP 28.104.0.1:59233 -> 198.28.0.2:53 1 64 1 2025-11-09 05:55:05.538 00:00:00.000 UDP 28.104.0.1:46313 -> 198.28.0.2:53 1 64 1 2025-11-09 05:51:03.641 00:05:51.408 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-09 05:51:03.500 00:05:51.559 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-09 05:56:05.843 00:00:00.000 UDP 28.104.0.1:35174 -> 198.28.0.2:53 1 64 1 2025-11-09 05:56:05.843 00:00:00.000 UDP 28.104.0.1:43857 -> 198.28.0.2:53 1 64 1 2025-11-09 05:56:05.853 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43857 1 109 1 2025-11-09 05:56:05.853 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35174 1 80 1 2025-11-09 05:57:06.149 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32808 1 80 1 2025-11-09 05:57:06.149 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60073 1 109 1 2025-11-09 05:57:06.139 00:00:00.000 UDP 28.104.0.1:32808 -> 198.28.0.2:53 1 64 1 2025-11-09 05:57:06.139 00:00:00.000 UDP 28.104.0.1:60073 -> 198.28.0.2:53 1 64 1 2025-11-09 05:58:06.441 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56830 1 109 1 2025-11-09 05:58:06.441 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48651 1 80 1 2025-11-09 05:58:06.431 00:00:00.000 UDP 28.104.0.1:56830 -> 198.28.0.2:53 1 64 1 2025-11-09 05:58:06.431 00:00:00.000 UDP 28.104.0.1:48651 -> 198.28.0.2:53 1 64 1 2025-11-09 05:54:06.184 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 33 2240 1 Summary: total flows: 316, total bytes: 97127, total packets: 1429, avg bps: 198, avg pps: 0, avg bpp: 67 Time window: 2025-11-09 04:54:03 - 2025-11-09 05:59:16 Total flows processed: 316, passed: 316, Blocks skipped: 0, Bytes read: 32928 Sys: 0.0027s User: 0.0027s Wall: 0.0027s flows/second: 115122.0 Runtime: 0.0028s