Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-10 01:54:03.959 00:05:51.576 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-10 01:59:05.948 00:00:00.000 UDP 28.104.0.1:37831 -> 198.28.0.2:53 1 64 1 2025-11-10 01:59:05.948 00:00:00.000 UDP 28.104.0.1:33265 -> 198.28.0.2:53 1 64 1 2025-11-10 01:59:05.958 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37831 1 109 1 2025-11-10 01:59:05.958 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33265 1 80 1 2025-11-10 01:55:03.889 00:05:51.597 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-10 02:00:06.271 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43531 1 109 1 2025-11-10 02:00:06.271 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34757 1 80 1 2025-11-10 02:00:06.262 00:00:00.000 UDP 28.104.0.1:34757 -> 198.28.0.2:53 1 64 1 2025-11-10 02:00:06.262 00:00:00.000 UDP 28.104.0.1:43531 -> 198.28.0.2:53 1 64 1 2025-11-10 02:00:15.447 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-10 02:01:06.558 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35917 1 109 1 2025-11-10 02:01:06.558 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50662 1 80 1 2025-11-10 02:01:06.548 00:00:00.000 UDP 28.104.0.1:35917 -> 198.28.0.2:53 1 64 1 2025-11-10 02:01:06.549 00:00:00.000 UDP 28.104.0.1:50662 -> 198.28.0.2:53 1 64 1 2025-11-10 01:56:57.912 00:05:10.001 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2488 1 2025-11-10 01:57:03.880 00:05:51.617 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-10 01:57:03.971 00:05:51.516 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-10 02:02:06.840 00:00:00.000 UDP 28.104.0.1:37585 -> 198.28.0.2:53 1 64 1 2025-11-10 01:58:03.879 00:05:00.307 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-10 02:02:06.840 00:00:00.000 UDP 28.104.0.1:34689 -> 198.28.0.2:53 1 64 1 2025-11-10 02:02:06.851 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34689 1 109 1 2025-11-10 02:02:06.851 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37585 1 80 1 2025-11-10 02:03:07.152 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46689 1 80 1 2025-11-10 02:03:07.153 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60934 1 109 1 2025-11-10 02:03:07.142 00:00:00.000 UDP 28.104.0.1:60934 -> 198.28.0.2:53 1 64 1 2025-11-10 02:03:07.141 00:00:00.000 UDP 28.104.0.1:46689 -> 198.28.0.2:53 1 64 1 2025-11-10 02:00:03.880 00:05:00.134 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-10 02:04:07.452 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52746 1 109 1 2025-11-10 02:04:07.456 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47662 1 80 1 2025-11-10 02:04:07.442 00:00:00.000 UDP 28.104.0.1:52746 -> 198.28.0.2:53 1 64 1 2025-11-10 02:04:07.441 00:00:00.000 UDP 28.104.0.1:47662 -> 198.28.0.2:53 1 64 1 2025-11-10 02:00:03.962 00:05:51.577 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-10 02:05:07.750 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41571 1 80 1 2025-11-10 02:05:07.750 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59290 1 109 1 2025-11-10 02:05:07.740 00:00:00.000 UDP 28.104.0.1:41571 -> 198.28.0.2:53 1 64 1 2025-11-10 02:05:07.740 00:00:00.000 UDP 28.104.0.1:59290 -> 198.28.0.2:53 1 64 1 2025-11-10 02:05:15.761 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-10 02:01:03.889 00:05:51.598 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-10 02:06:08.061 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55429 1 109 1 2025-11-10 02:06:08.061 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60180 1 80 1 2025-11-10 02:06:08.051 00:00:00.000 UDP 28.104.0.1:60180 -> 198.28.0.2:53 1 64 1 2025-11-10 02:06:08.051 00:00:00.000 UDP 28.104.0.1:55429 -> 198.28.0.2:53 1 64 1 2025-11-10 02:02:17.912 00:05:10.057 OSPF 28.0.2.1:0 -> 224.0.0.5:0 44 3384 1 2025-11-10 02:07:09.125 00:00:00.000 UDP 28.104.0.1:58113 -> 198.28.0.2:53 1 64 1 2025-11-10 02:07:09.125 00:00:00.000 UDP 28.104.0.1:35064 -> 198.28.0.2:53 1 64 1 2025-11-10 02:07:09.135 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58113 1 80 1 2025-11-10 02:07:09.135 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35064 1 109 1 2025-11-10 02:03:03.881 00:05:51.618 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-10 02:03:03.970 00:05:51.518 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-10 02:04:03.881 00:05:00.306 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-10 02:08:09.410 00:00:00.000 UDP 28.104.0.1:46346 -> 198.28.0.2:53 1 64 1 2025-11-10 02:08:09.410 00:00:00.000 UDP 28.104.0.1:56043 -> 198.28.0.2:53 1 64 1 2025-11-10 02:08:09.422 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56043 1 80 1 2025-11-10 02:08:09.422 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46346 1 109 1 2025-11-10 02:09:09.722 00:00:00.000 UDP 28.104.0.1:46969 -> 198.28.0.2:53 1 64 1 2025-11-10 02:09:09.722 00:00:00.000 UDP 28.104.0.1:57965 -> 198.28.0.2:53 1 64 1 2025-11-10 02:09:09.733 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46969 1 80 1 2025-11-10 02:09:09.733 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57965 1 109 1 2025-11-10 02:06:03.881 00:05:00.133 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-10 02:10:10.047 00:00:00.000 UDP 28.104.0.1:35753 -> 198.28.0.2:53 1 64 1 2025-11-10 02:10:10.047 00:00:00.000 UDP 28.104.0.1:37843 -> 198.28.0.2:53 1 64 1 2025-11-10 02:10:10.058 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35753 1 109 1 2025-11-10 02:10:10.058 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37843 1 80 1 2025-11-10 02:10:15.895 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-10 02:06:03.964 00:05:51.576 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-10 02:11:10.359 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54071 1 80 1 2025-11-10 02:11:10.358 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56118 1 109 1 2025-11-10 02:11:10.348 00:00:00.000 UDP 28.104.0.1:56118 -> 198.28.0.2:53 1 64 1 2025-11-10 02:11:10.348 00:00:00.000 UDP 28.104.0.1:54071 -> 198.28.0.2:53 1 64 1 2025-11-10 02:07:37.920 00:05:10.009 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2816 1 2025-11-10 02:07:03.892 00:05:51.598 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-10 02:12:10.654 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33002 1 109 1 2025-11-10 02:12:10.654 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35882 1 80 1 2025-11-10 02:12:10.644 00:00:00.000 UDP 28.104.0.1:33002 -> 198.28.0.2:53 1 64 1 2025-11-10 02:12:10.644 00:00:00.000 UDP 28.104.0.1:35882 -> 198.28.0.2:53 1 64 1 2025-11-10 02:13:10.954 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50626 1 109 1 2025-11-10 02:13:10.954 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60775 1 80 1 2025-11-10 02:13:10.943 00:00:00.000 UDP 28.104.0.1:50626 -> 198.28.0.2:53 1 64 1 2025-11-10 02:13:10.943 00:00:00.000 UDP 28.104.0.1:60775 -> 198.28.0.2:53 1 64 1 2025-11-10 02:09:03.975 00:05:51.516 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-10 02:09:03.883 00:05:51.618 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-10 02:10:03.882 00:05:00.308 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-10 02:14:11.215 00:00:00.000 UDP 28.104.0.1:44661 -> 198.28.0.2:53 1 64 1 2025-11-10 02:14:11.215 00:00:00.000 UDP 28.104.0.1:34277 -> 198.28.0.2:53 1 64 1 2025-11-10 02:14:11.225 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44661 1 109 1 2025-11-10 02:14:11.225 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34277 1 80 1 2025-11-10 02:15:11.508 00:00:00.000 UDP 28.104.0.1:54725 -> 198.28.0.2:53 1 64 1 2025-11-10 02:15:11.508 00:00:00.000 UDP 28.104.0.1:44472 -> 198.28.0.2:53 1 64 1 2025-11-10 02:15:11.518 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44472 1 80 1 2025-11-10 02:15:11.518 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54725 1 109 1 2025-11-10 02:15:15.929 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-10 02:12:03.882 00:05:00.133 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-10 02:16:11.799 00:00:00.000 UDP 28.104.0.1:56614 -> 198.28.0.2:53 1 64 1 2025-11-10 02:16:11.799 00:00:00.000 UDP 28.104.0.1:51041 -> 198.28.0.2:53 1 64 1 2025-11-10 02:16:11.808 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51041 1 109 1 2025-11-10 02:16:11.808 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56614 1 80 1 2025-11-10 02:12:03.965 00:05:51.576 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-10 02:12:57.928 00:05:10.012 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2748 1 2025-11-10 02:17:12.096 00:00:00.000 UDP 28.104.0.1:36463 -> 198.28.0.2:53 1 64 1 2025-11-10 02:17:12.095 00:00:00.000 UDP 28.104.0.1:46344 -> 198.28.0.2:53 1 64 1 2025-11-10 02:17:12.106 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36463 1 80 1 2025-11-10 02:17:12.106 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46344 1 109 1 2025-11-10 02:13:03.893 00:05:51.598 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-10 02:18:12.350 00:00:00.000 UDP 28.104.0.1:41927 -> 198.28.0.2:53 1 64 1 2025-11-10 02:18:12.350 00:00:00.000 UDP 28.104.0.1:36669 -> 198.28.0.2:53 1 64 1 2025-11-10 02:18:12.360 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41927 1 109 1 2025-11-10 02:18:12.360 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36669 1 80 1 2025-11-10 02:19:12.694 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38241 1 109 1 2025-11-10 02:19:12.694 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33436 1 80 1 2025-11-10 02:19:12.684 00:00:00.000 UDP 28.104.0.1:38241 -> 198.28.0.2:53 1 64 1 2025-11-10 02:19:12.684 00:00:00.000 UDP 28.104.0.1:33436 -> 198.28.0.2:53 1 64 1 2025-11-10 02:15:03.977 00:05:51.514 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-10 02:15:03.884 00:05:51.619 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-10 02:16:03.885 00:05:00.308 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-10 02:20:16.075 00:00:00.043 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-10 02:20:12.996 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45246 1 109 1 2025-11-10 02:20:12.996 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52745 1 80 1 2025-11-10 02:20:12.984 00:00:00.000 UDP 28.104.0.1:45246 -> 198.28.0.2:53 1 64 1 2025-11-10 02:20:12.984 00:00:00.000 UDP 28.104.0.1:52745 -> 198.28.0.2:53 1 64 1 2025-11-10 02:21:13.297 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52109 1 80 1 2025-11-10 02:21:13.297 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57763 1 109 1 2025-11-10 02:21:13.286 00:00:00.000 UDP 28.104.0.1:52109 -> 198.28.0.2:53 1 64 1 2025-11-10 02:21:13.286 00:00:00.000 UDP 28.104.0.1:57763 -> 198.28.0.2:53 1 64 1 2025-11-10 02:18:03.886 00:05:00.134 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-10 02:22:13.589 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42107 1 109 1 2025-11-10 02:22:13.589 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59611 1 80 1 2025-11-10 02:22:13.578 00:00:00.000 UDP 28.104.0.1:59611 -> 198.28.0.2:53 1 64 1 2025-11-10 02:22:13.578 00:00:00.000 UDP 28.104.0.1:42107 -> 198.28.0.2:53 1 64 1 2025-11-10 02:18:17.940 00:05:10.018 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2448 1 2025-11-10 02:18:03.969 00:05:51.574 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-10 02:23:13.847 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35021 1 109 1 2025-11-10 02:23:13.846 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58078 1 80 1 2025-11-10 02:23:13.836 00:00:00.000 UDP 28.104.0.1:58078 -> 198.28.0.2:53 1 64 1 2025-11-10 02:23:13.837 00:00:00.000 UDP 28.104.0.1:35021 -> 198.28.0.2:53 1 64 1 2025-11-10 02:19:03.895 00:05:51.598 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-10 02:24:14.099 00:00:00.000 UDP 28.104.0.1:49763 -> 198.28.0.2:53 1 64 1 2025-11-10 02:24:14.100 00:00:00.000 UDP 28.104.0.1:51594 -> 198.28.0.2:53 1 64 1 2025-11-10 02:24:14.109 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49763 1 80 1 2025-11-10 02:24:14.109 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51594 1 109 1 2025-11-10 02:25:14.403 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42498 1 109 1 2025-11-10 02:25:14.402 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47263 1 80 1 2025-11-10 02:25:16.402 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-10 02:25:14.392 00:00:00.000 UDP 28.104.0.1:42498 -> 198.28.0.2:53 1 64 1 2025-11-10 02:25:14.392 00:00:00.000 UDP 28.104.0.1:47263 -> 198.28.0.2:53 1 64 1 2025-11-10 02:21:03.979 00:05:51.514 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-10 02:21:03.886 00:05:51.617 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-10 02:22:03.885 00:05:00.306 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-10 02:26:14.688 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39080 1 80 1 2025-11-10 02:26:14.688 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38777 1 109 1 2025-11-10 02:26:14.679 00:00:00.000 UDP 28.104.0.1:39080 -> 198.28.0.2:53 1 64 1 2025-11-10 02:26:14.679 00:00:00.000 UDP 28.104.0.1:38777 -> 198.28.0.2:53 1 64 1 2025-11-10 02:27:14.993 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33896 1 109 1 2025-11-10 02:27:14.993 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39865 1 80 1 2025-11-10 02:27:14.984 00:00:00.000 UDP 28.104.0.1:39865 -> 198.28.0.2:53 1 64 1 2025-11-10 02:27:14.983 00:00:00.000 UDP 28.104.0.1:33896 -> 198.28.0.2:53 1 64 1 2025-11-10 02:23:37.959 00:05:10.011 OSPF 28.0.2.1:0 -> 224.0.0.5:0 33 2240 1 2025-11-10 02:24:03.886 00:05:00.139 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-10 02:28:15.293 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38151 1 80 1 2025-11-10 02:28:15.293 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32998 1 109 1 2025-11-10 02:28:15.282 00:00:00.000 UDP 28.104.0.1:32998 -> 198.28.0.2:53 1 64 1 2025-11-10 02:28:15.282 00:00:00.000 UDP 28.104.0.1:38151 -> 198.28.0.2:53 1 64 1 2025-11-10 02:24:03.969 00:05:51.575 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-10 02:29:15.589 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42124 1 80 1 2025-11-10 02:29:15.589 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48217 1 109 1 2025-11-10 02:29:15.579 00:00:00.000 UDP 28.104.0.1:42124 -> 198.28.0.2:53 1 64 1 2025-11-10 02:29:15.579 00:00:00.000 UDP 28.104.0.1:48217 -> 198.28.0.2:53 1 64 1 2025-11-10 02:25:03.896 00:05:51.598 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-10 02:30:15.876 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37739 1 109 1 2025-11-10 02:30:15.876 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38125 1 80 1 2025-11-10 02:30:16.396 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-10 02:30:15.866 00:00:00.000 UDP 28.104.0.1:37739 -> 198.28.0.2:53 1 64 1 2025-11-10 02:30:15.867 00:00:00.000 UDP 28.104.0.1:38125 -> 198.28.0.2:53 1 64 1 2025-11-10 02:31:16.201 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47315 1 80 1 2025-11-10 02:31:16.200 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55734 1 109 1 2025-11-10 02:31:16.189 00:00:00.000 UDP 28.104.0.1:47315 -> 198.28.0.2:53 1 64 1 2025-11-10 02:31:16.189 00:00:00.000 UDP 28.104.0.1:55734 -> 198.28.0.2:53 1 64 1 2025-11-10 02:27:03.979 00:05:51.515 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-10 02:27:03.886 00:05:51.618 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-10 02:28:03.888 00:05:00.305 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-10 02:32:16.495 00:00:00.000 UDP 28.104.0.1:60056 -> 198.28.0.2:53 1 64 1 2025-11-10 02:32:16.494 00:00:00.000 UDP 28.104.0.1:51819 -> 198.28.0.2:53 1 64 1 2025-11-10 02:32:16.506 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60056 1 109 1 2025-11-10 02:32:16.506 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51819 1 80 1 2025-11-10 02:28:57.969 00:05:10.002 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 3036 1 2025-11-10 02:33:16.740 00:00:00.000 UDP 28.104.0.1:42552 -> 198.28.0.2:53 1 64 1 2025-11-10 02:33:16.740 00:00:00.000 UDP 28.104.0.1:37122 -> 198.28.0.2:53 1 64 1 2025-11-10 02:33:16.750 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42552 1 109 1 2025-11-10 02:33:16.750 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37122 1 80 1 2025-11-10 02:30:03.886 00:05:00.134 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-10 02:34:17.096 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45433 1 80 1 2025-11-10 02:34:17.096 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42013 1 109 1 2025-11-10 02:34:17.087 00:00:00.000 UDP 28.104.0.1:45433 -> 198.28.0.2:53 1 64 1 2025-11-10 02:34:17.086 00:00:00.000 UDP 28.104.0.1:42013 -> 198.28.0.2:53 1 64 1 2025-11-10 02:30:03.970 00:05:51.577 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-10 02:35:16.349 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-10 02:35:17.388 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38622 1 80 1 2025-11-10 02:35:17.388 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55014 1 109 1 2025-11-10 02:35:17.378 00:00:00.000 UDP 28.104.0.1:55014 -> 198.28.0.2:53 1 64 1 2025-11-10 02:35:17.377 00:00:00.000 UDP 28.104.0.1:38622 -> 198.28.0.2:53 1 64 1 2025-11-10 02:31:03.897 00:05:51.599 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-10 02:36:17.670 00:00:00.000 UDP 28.104.0.1:35017 -> 198.28.0.2:53 1 64 1 2025-11-10 02:36:17.670 00:00:00.000 UDP 28.104.0.1:56725 -> 198.28.0.2:53 1 64 1 2025-11-10 02:36:17.681 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35017 1 109 1 2025-11-10 02:36:17.681 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56725 1 80 1 2025-11-10 02:37:17.961 00:00:00.000 UDP 28.104.0.1:33840 -> 198.28.0.2:53 1 64 1 2025-11-10 02:37:17.961 00:00:00.000 UDP 28.104.0.1:33405 -> 198.28.0.2:53 1 64 1 2025-11-10 02:37:17.970 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33405 1 109 1 2025-11-10 02:37:17.970 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33840 1 80 1 2025-11-10 02:33:03.981 00:05:51.516 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-10 02:33:03.888 00:05:51.619 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-10 02:34:03.889 00:05:00.309 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-10 02:38:18.258 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44271 1 80 1 2025-11-10 02:34:17.971 00:05:00.492 OSPF 28.0.2.1:0 -> 224.0.0.5:0 43 3012 1 2025-11-10 02:38:18.258 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34546 1 109 1 2025-11-10 02:38:18.248 00:00:00.000 UDP 28.104.0.1:44271 -> 198.28.0.2:53 1 64 1 2025-11-10 02:38:18.248 00:00:00.000 UDP 28.104.0.1:34546 -> 198.28.0.2:53 1 64 1 2025-11-10 02:39:18.550 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38133 1 109 1 2025-11-10 02:39:18.551 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52861 1 80 1 2025-11-10 02:39:18.539 00:00:00.000 UDP 28.104.0.1:38133 -> 198.28.0.2:53 1 64 1 2025-11-10 02:39:18.539 00:00:00.000 UDP 28.104.0.1:52861 -> 198.28.0.2:53 1 64 1 2025-11-10 02:36:03.889 00:05:00.137 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-10 02:40:16.358 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-10 02:40:18.842 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39551 1 109 1 2025-11-10 02:40:18.842 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48198 1 80 1 2025-11-10 02:40:18.832 00:00:00.000 UDP 28.104.0.1:48198 -> 198.28.0.2:53 1 64 1 2025-11-10 02:40:18.832 00:00:00.000 UDP 28.104.0.1:39551 -> 198.28.0.2:53 1 64 1 2025-11-10 02:36:03.974 00:05:51.573 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-10 02:41:19.122 00:00:00.000 UDP 28.104.0.1:34243 -> 198.28.0.2:53 1 64 1 2025-11-10 02:41:19.122 00:00:00.000 UDP 28.104.0.1:49902 -> 198.28.0.2:53 1 64 1 2025-11-10 02:41:19.131 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34243 1 80 1 2025-11-10 02:41:19.131 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49902 1 109 1 2025-11-10 02:37:03.899 00:05:51.600 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-10 02:42:19.419 00:00:00.000 UDP 28.104.0.1:41820 -> 198.28.0.2:53 1 64 1 2025-11-10 02:42:19.418 00:00:00.000 UDP 28.104.0.1:53687 -> 198.28.0.2:53 1 64 1 2025-11-10 02:42:19.429 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53687 1 80 1 2025-11-10 02:42:19.430 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41820 1 109 1 2025-11-10 02:43:19.719 00:00:00.000 UDP 28.104.0.1:46761 -> 198.28.0.2:53 1 64 1 2025-11-10 02:43:19.719 00:00:00.000 UDP 28.104.0.1:49516 -> 198.28.0.2:53 1 64 1 2025-11-10 02:43:19.729 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46761 1 80 1 2025-11-10 02:43:19.729 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49516 1 109 1 2025-11-10 02:39:27.977 00:05:10.570 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2772 1 2025-11-10 02:39:03.985 00:05:51.513 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-10 02:39:03.890 00:05:51.618 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-10 02:40:03.891 00:05:00.309 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-10 02:44:20.038 00:00:00.000 UDP 28.104.0.1:60961 -> 198.28.0.2:53 1 64 1 2025-11-10 02:44:20.038 00:00:00.000 UDP 28.104.0.1:52466 -> 198.28.0.2:53 1 64 1 2025-11-10 02:44:20.049 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60961 1 80 1 2025-11-10 02:44:20.049 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52466 1 109 1 2025-11-10 02:45:16.555 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-10 02:45:20.342 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55307 1 109 1 2025-11-10 02:45:20.342 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34028 1 80 1 2025-11-10 02:45:20.334 00:00:00.000 UDP 28.104.0.1:34028 -> 198.28.0.2:53 1 64 1 2025-11-10 02:45:20.334 00:00:00.000 UDP 28.104.0.1:55307 -> 198.28.0.2:53 1 64 1 2025-11-10 02:42:03.892 00:05:00.136 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-10 02:46:20.635 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35073 1 80 1 2025-11-10 02:46:20.635 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44261 1 109 1 2025-11-10 02:46:20.625 00:00:00.000 UDP 28.104.0.1:35073 -> 198.28.0.2:53 1 64 1 2025-11-10 02:46:20.625 00:00:00.000 UDP 28.104.0.1:44261 -> 198.28.0.2:53 1 64 1 2025-11-10 02:42:03.976 00:05:51.572 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-10 02:47:20.921 00:00:00.000 UDP 28.104.0.1:52779 -> 198.28.0.2:53 1 64 1 2025-11-10 02:47:20.921 00:00:00.000 UDP 28.104.0.1:55298 -> 198.28.0.2:53 1 64 1 2025-11-10 02:47:20.931 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52779 1 80 1 2025-11-10 02:47:20.931 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55298 1 109 1 2025-11-10 02:43:03.902 00:05:51.596 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-10 02:48:21.248 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33233 1 109 1 2025-11-10 02:48:21.247 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57537 1 80 1 2025-11-10 02:48:21.239 00:00:00.000 UDP 28.104.0.1:57537 -> 198.28.0.2:53 1 64 1 2025-11-10 02:48:21.239 00:00:00.000 UDP 28.104.0.1:33233 -> 198.28.0.2:53 1 64 1 2025-11-10 02:44:47.987 00:05:00.020 OSPF 28.0.2.1:0 -> 224.0.0.5:0 34 2356 1 2025-11-10 02:49:21.542 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41012 1 80 1 2025-11-10 02:49:21.542 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53815 1 109 1 2025-11-10 02:49:21.533 00:00:00.000 UDP 28.104.0.1:53815 -> 198.28.0.2:53 1 64 1 2025-11-10 02:49:21.533 00:00:00.000 UDP 28.104.0.1:41012 -> 198.28.0.2:53 1 64 1 2025-11-10 02:45:03.988 00:05:51.510 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-10 02:45:03.893 00:05:51.616 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-10 02:46:03.893 00:05:00.308 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-10 02:50:16.600 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-10 02:50:21.857 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44834 1 109 1 2025-11-10 02:50:21.857 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47863 1 80 1 2025-11-10 02:50:21.847 00:00:00.000 UDP 28.104.0.1:47863 -> 198.28.0.2:53 1 64 1 2025-11-10 02:50:21.847 00:00:00.000 UDP 28.104.0.1:44834 -> 198.28.0.2:53 1 64 1 2025-11-10 02:51:22.138 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46705 1 80 1 2025-11-10 02:51:22.138 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50284 1 109 1 2025-11-10 02:51:22.129 00:00:00.000 UDP 28.104.0.1:46705 -> 198.28.0.2:53 1 64 1 2025-11-10 02:51:22.129 00:00:00.000 UDP 28.104.0.1:50284 -> 198.28.0.2:53 1 64 1 2025-11-10 02:48:03.894 00:05:00.135 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-10 02:52:22.433 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49510 1 80 1 2025-11-10 02:52:22.433 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51454 1 109 1 2025-11-10 02:52:22.423 00:00:00.000 UDP 28.104.0.1:49510 -> 198.28.0.2:53 1 64 1 2025-11-10 02:52:22.423 00:00:00.000 UDP 28.104.0.1:51454 -> 198.28.0.2:53 1 64 1 2025-11-10 02:48:03.979 00:05:51.570 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-10 02:53:22.751 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35608 1 109 1 2025-11-10 02:53:22.751 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48290 1 80 1 2025-11-10 02:53:22.741 00:00:00.000 UDP 28.104.0.1:35608 -> 198.28.0.2:53 1 64 1 2025-11-10 02:53:22.741 00:00:00.000 UDP 28.104.0.1:48290 -> 198.28.0.2:53 1 64 1 2025-11-10 02:49:03.904 00:05:51.596 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-10 02:49:58.007 00:05:10.038 OSPF 28.0.2.1:0 -> 224.0.0.5:0 33 2256 1 2025-11-10 02:54:23.065 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59048 1 80 1 2025-11-10 02:54:23.065 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53640 1 109 1 2025-11-10 02:54:23.055 00:00:00.000 UDP 28.104.0.1:59048 -> 198.28.0.2:53 1 64 1 2025-11-10 02:54:23.055 00:00:00.000 UDP 28.104.0.1:53640 -> 198.28.0.2:53 1 64 1 2025-11-10 02:55:16.486 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-10 02:55:23.352 00:00:00.000 UDP 28.104.0.1:35596 -> 198.28.0.2:53 1 64 1 2025-11-10 02:55:23.352 00:00:00.000 UDP 28.104.0.1:56476 -> 198.28.0.2:53 1 64 1 2025-11-10 02:55:23.363 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35596 1 109 1 2025-11-10 02:55:23.363 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56476 1 80 1 2025-11-10 02:51:03.989 00:05:51.511 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-10 02:51:03.894 00:05:51.616 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-10 02:52:03.896 00:05:00.306 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-10 02:56:23.639 00:00:00.000 UDP 28.104.0.1:42776 -> 198.28.0.2:53 1 64 1 2025-11-10 02:56:23.639 00:00:00.000 UDP 28.104.0.1:34731 -> 198.28.0.2:53 1 64 1 2025-11-10 02:56:23.650 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42776 1 80 1 2025-11-10 02:56:23.650 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34731 1 109 1 2025-11-10 02:57:23.941 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38079 1 109 1 2025-11-10 02:57:23.941 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43194 1 80 1 2025-11-10 02:57:23.930 00:00:00.000 UDP 28.104.0.1:38079 -> 198.28.0.2:53 1 64 1 2025-11-10 02:57:23.930 00:00:00.000 UDP 28.104.0.1:43194 -> 198.28.0.2:53 1 64 1 2025-11-10 02:54:03.895 00:05:00.136 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-10 02:58:24.246 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55967 1 80 1 2025-11-10 02:58:24.246 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46355 1 109 1 2025-11-10 02:58:24.236 00:00:00.000 UDP 28.104.0.1:55967 -> 198.28.0.2:53 1 64 1 2025-11-10 02:58:24.236 00:00:00.000 UDP 28.104.0.1:46355 -> 198.28.0.2:53 1 64 1 Summary: total flows: 323, total bytes: 95880, total packets: 1414, avg bps: 196, avg pps: 0, avg bpp: 67 Time window: 2025-11-10 01:54:03 - 2025-11-10 02:59:04 Total flows processed: 323, passed: 323, Blocks skipped: 0, Bytes read: 33656 Sys: 0.0069s User: 0.0010s Wall: 0.0041s flows/second: 78246.5 Runtime: 0.0041s