Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-10 08:54:04.102 00:05:51.567 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-10 08:54:55.618 00:05:08.432 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-10 08:59:19.855 00:00:00.000 UDP 28.104.0.1:57695 -> 198.28.0.2:53 1 64 1 2025-11-10 08:59:19.855 00:00:00.000 UDP 28.104.0.1:41607 -> 198.28.0.2:53 1 64 1 2025-11-10 08:59:19.866 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57695 1 80 1 2025-11-10 08:59:19.865 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41607 1 109 1 2025-11-10 08:55:04.037 00:06:00.121 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-10 09:00:20.132 00:00:00.000 UDP 28.104.0.1:54839 -> 198.28.0.2:53 1 64 1 2025-11-10 09:00:20.132 00:00:00.000 UDP 28.104.0.1:47323 -> 198.28.0.2:53 1 64 1 2025-11-10 09:00:20.141 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47323 1 109 1 2025-11-10 09:00:20.141 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54839 1 80 1 2025-11-10 09:00:24.140 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-10 08:56:55.630 00:05:08.413 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-10 08:56:55.618 00:05:08.496 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-10 09:01:20.387 00:00:00.000 UDP 28.104.0.1:47604 -> 198.28.0.2:53 1 64 1 2025-11-10 09:01:20.387 00:00:00.000 UDP 28.104.0.1:47866 -> 198.28.0.2:53 1 64 1 2025-11-10 09:01:20.396 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47866 1 109 1 2025-11-10 09:01:20.398 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47604 1 80 1 2025-11-10 08:57:38.556 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2448 1 2025-11-10 09:02:20.697 00:00:00.000 UDP 28.104.0.1:47405 -> 198.28.0.2:53 1 64 1 2025-11-10 09:02:20.696 00:00:00.000 UDP 28.104.0.1:57744 -> 198.28.0.2:53 1 64 1 2025-11-10 09:02:20.708 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57744 1 109 1 2025-11-10 09:02:20.708 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47405 1 80 1 2025-11-10 09:03:20.959 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43693 1 109 1 2025-11-10 09:03:20.959 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37031 1 80 1 2025-11-10 09:03:20.951 00:00:00.000 UDP 28.104.0.1:37031 -> 198.28.0.2:53 1 64 1 2025-11-10 09:03:20.950 00:00:00.000 UDP 28.104.0.1:43693 -> 198.28.0.2:53 1 64 1 2025-11-10 09:04:21.255 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38005 1 109 1 2025-11-10 09:04:21.255 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45201 1 80 1 2025-11-10 09:04:21.244 00:00:00.000 UDP 28.104.0.1:45201 -> 198.28.0.2:53 1 64 1 2025-11-10 09:04:21.244 00:00:00.000 UDP 28.104.0.1:38005 -> 198.28.0.2:53 1 64 1 2025-11-10 09:00:04.104 00:05:51.569 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-10 09:00:04.040 00:06:00.275 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-10 09:00:55.619 00:05:08.433 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-10 09:05:21.541 00:00:00.000 UDP 28.104.0.1:48805 -> 198.28.0.2:53 1 64 1 2025-11-10 09:05:21.541 00:00:00.000 UDP 28.104.0.1:49132 -> 198.28.0.2:53 1 64 1 2025-11-10 09:05:21.552 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49132 1 109 1 2025-11-10 09:05:21.552 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48805 1 80 1 2025-11-10 09:05:24.031 00:00:00.020 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-10 09:06:21.861 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42473 1 109 1 2025-11-10 09:06:21.861 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43775 1 80 1 2025-11-10 09:06:21.850 00:00:00.000 UDP 28.104.0.1:43775 -> 198.28.0.2:53 1 64 1 2025-11-10 09:06:21.850 00:00:00.000 UDP 28.104.0.1:42473 -> 198.28.0.2:53 1 64 1 2025-11-10 09:02:55.622 00:05:08.493 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-10 09:02:04.041 00:06:00.117 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-10 09:02:55.631 00:05:08.412 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-10 09:02:58.561 00:05:10.010 OSPF 28.0.2.1:0 -> 224.0.0.5:0 33 2240 1 2025-11-10 09:07:22.193 00:00:00.000 UDP 28.104.0.1:59047 -> 198.28.0.2:53 1 64 1 2025-11-10 09:07:22.193 00:00:00.000 UDP 28.104.0.1:38503 -> 198.28.0.2:53 1 64 1 2025-11-10 09:07:22.204 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38503 1 109 1 2025-11-10 09:07:22.204 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59047 1 80 1 2025-11-10 09:08:23.213 00:00:00.000 UDP 28.104.0.1:53723 -> 198.28.0.2:53 1 64 1 2025-11-10 09:08:23.214 00:00:00.000 UDP 28.104.0.1:32813 -> 198.28.0.2:53 1 64 1 2025-11-10 09:08:23.223 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53723 1 80 1 2025-11-10 09:08:23.223 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32813 1 109 1 2025-11-10 09:09:23.517 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41646 1 80 1 2025-11-10 09:09:23.517 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52891 1 109 1 2025-11-10 09:09:23.507 00:00:00.000 UDP 28.104.0.1:52891 -> 198.28.0.2:53 1 64 1 2025-11-10 09:09:23.506 00:00:00.000 UDP 28.104.0.1:41646 -> 198.28.0.2:53 1 64 1 2025-11-10 09:10:23.822 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56921 1 109 1 2025-11-10 09:10:24.133 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-10 09:10:23.822 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51519 1 80 1 2025-11-10 09:10:23.810 00:00:00.000 UDP 28.104.0.1:51519 -> 198.28.0.2:53 1 64 1 2025-11-10 09:10:23.810 00:00:00.000 UDP 28.104.0.1:56921 -> 198.28.0.2:53 1 64 1 2025-11-10 09:06:04.104 00:05:51.569 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-10 09:06:55.623 00:05:08.437 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-10 09:11:24.107 00:00:00.000 UDP 28.104.0.1:38935 -> 198.28.0.2:53 1 64 1 2025-11-10 09:11:24.107 00:00:00.000 UDP 28.104.0.1:53100 -> 198.28.0.2:53 1 64 1 2025-11-10 09:11:24.117 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53100 1 80 1 2025-11-10 09:11:24.117 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38935 1 109 1 2025-11-10 09:07:04.043 00:06:00.277 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-10 09:12:24.867 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45009 1 109 1 2025-11-10 09:12:24.867 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47797 1 80 1 2025-11-10 09:12:24.858 00:00:00.000 UDP 28.104.0.1:47797 -> 198.28.0.2:53 1 64 1 2025-11-10 09:12:24.858 00:00:00.000 UDP 28.104.0.1:45009 -> 198.28.0.2:53 1 64 1 2025-11-10 09:08:18.571 00:05:10.015 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 3080 1 2025-11-10 09:08:55.634 00:05:08.416 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-10 09:08:55.623 00:05:08.493 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-10 09:13:25.197 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37944 1 80 1 2025-11-10 09:13:25.196 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35085 1 109 1 2025-11-10 09:13:25.186 00:00:00.000 UDP 28.104.0.1:37944 -> 198.28.0.2:53 1 64 1 2025-11-10 09:13:25.186 00:00:00.000 UDP 28.104.0.1:35085 -> 198.28.0.2:53 1 64 1 2025-11-10 09:09:04.045 00:06:00.114 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-10 09:14:25.546 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38470 1 80 1 2025-11-10 09:14:25.546 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35046 1 109 1 2025-11-10 09:14:25.536 00:00:00.000 UDP 28.104.0.1:38470 -> 198.28.0.2:53 1 64 1 2025-11-10 09:14:25.536 00:00:00.000 UDP 28.104.0.1:35046 -> 198.28.0.2:53 1 64 1 2025-11-10 09:15:24.081 00:00:00.045 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-10 09:15:25.843 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37504 1 109 1 2025-11-10 09:15:25.843 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45855 1 80 1 2025-11-10 09:15:25.833 00:00:00.000 UDP 28.104.0.1:37504 -> 198.28.0.2:53 1 64 1 2025-11-10 09:15:25.833 00:00:00.000 UDP 28.104.0.1:45855 -> 198.28.0.2:53 1 64 1 2025-11-10 09:16:26.262 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59334 1 109 1 2025-11-10 09:16:26.262 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46474 1 80 1 2025-11-10 09:16:26.254 00:00:00.000 UDP 28.104.0.1:59334 -> 198.28.0.2:53 1 64 1 2025-11-10 09:16:26.254 00:00:00.000 UDP 28.104.0.1:46474 -> 198.28.0.2:53 1 64 1 2025-11-10 09:12:04.106 00:05:51.568 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-10 09:12:55.623 00:05:08.438 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-10 09:17:26.565 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55625 1 109 1 2025-11-10 09:17:26.565 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43845 1 80 1 2025-11-10 09:17:26.556 00:00:00.000 UDP 28.104.0.1:55625 -> 198.28.0.2:53 1 64 1 2025-11-10 09:17:26.555 00:00:00.000 UDP 28.104.0.1:43845 -> 198.28.0.2:53 1 64 1 2025-11-10 09:13:38.587 00:05:10.011 OSPF 28.0.2.1:0 -> 224.0.0.5:0 42 2972 1 2025-11-10 09:18:26.862 00:00:00.000 UDP 28.104.0.1:44888 -> 198.28.0.2:53 1 64 1 2025-11-10 09:18:26.862 00:00:00.000 UDP 28.104.0.1:50958 -> 198.28.0.2:53 1 64 1 2025-11-10 09:18:26.872 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44888 1 109 1 2025-11-10 09:18:26.872 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50958 1 80 1 2025-11-10 09:14:55.633 00:05:08.417 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-10 09:14:04.049 00:06:00.271 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-10 09:14:55.623 00:05:08.494 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-10 09:19:27.160 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39119 1 80 1 2025-11-10 09:19:27.160 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43343 1 109 1 2025-11-10 09:19:27.150 00:00:00.000 UDP 28.104.0.1:43343 -> 198.28.0.2:53 1 64 1 2025-11-10 09:19:27.150 00:00:00.000 UDP 28.104.0.1:39119 -> 198.28.0.2:53 1 64 1 2025-11-10 09:20:24.577 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-10 09:20:27.411 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51804 1 80 1 2025-11-10 09:20:27.411 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37818 1 109 1 2025-11-10 09:20:27.400 00:00:00.000 UDP 28.104.0.1:51804 -> 198.28.0.2:53 1 64 1 2025-11-10 09:20:27.400 00:00:00.000 UDP 28.104.0.1:37818 -> 198.28.0.2:53 1 64 1 2025-11-10 09:16:04.051 00:06:00.110 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-10 09:21:27.652 00:00:00.000 UDP 28.104.0.1:60984 -> 198.28.0.2:53 1 64 1 2025-11-10 09:21:27.651 00:00:00.000 UDP 28.104.0.1:37141 -> 198.28.0.2:53 1 64 1 2025-11-10 09:21:27.661 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60984 1 109 1 2025-11-10 09:21:27.661 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37141 1 80 1 2025-11-10 09:22:27.946 00:00:00.000 UDP 28.104.0.1:57661 -> 198.28.0.2:53 1 64 1 2025-11-10 09:22:27.946 00:00:00.000 UDP 28.104.0.1:33406 -> 198.28.0.2:53 1 64 1 2025-11-10 09:22:27.957 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33406 1 80 1 2025-11-10 09:22:27.958 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57661 1 109 1 2025-11-10 09:18:04.107 00:05:51.567 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-10 09:18:58.597 00:05:00.636 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2732 1 2025-11-10 09:18:55.623 00:05:08.438 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-10 09:23:28.245 00:00:00.000 UDP 28.104.0.1:42827 -> 198.28.0.2:53 1 64 1 2025-11-10 09:23:28.245 00:00:00.000 UDP 28.104.0.1:47502 -> 198.28.0.2:53 1 64 1 2025-11-10 09:23:28.255 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42827 1 109 1 2025-11-10 09:23:28.255 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47502 1 80 1 2025-11-10 09:24:28.548 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55430 1 109 1 2025-11-10 09:24:28.547 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36438 1 80 1 2025-11-10 09:24:28.537 00:00:00.000 UDP 28.104.0.1:55430 -> 198.28.0.2:53 1 64 1 2025-11-10 09:24:28.537 00:00:00.000 UDP 28.104.0.1:36438 -> 198.28.0.2:53 1 64 1 2025-11-10 09:20:55.633 00:05:08.421 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-10 09:20:55.624 00:05:08.494 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-10 09:25:24.623 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-10 09:25:28.809 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33758 1 109 1 2025-11-10 09:25:28.810 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34626 1 80 1 2025-11-10 09:25:28.798 00:00:00.000 UDP 28.104.0.1:34626 -> 198.28.0.2:53 1 64 1 2025-11-10 09:25:28.798 00:00:00.000 UDP 28.104.0.1:33758 -> 198.28.0.2:53 1 64 1 2025-11-10 09:21:04.051 00:06:00.271 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-10 09:26:29.079 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56188 1 109 1 2025-11-10 09:26:29.079 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52054 1 80 1 2025-11-10 09:26:29.068 00:00:00.000 UDP 28.104.0.1:52054 -> 198.28.0.2:53 1 64 1 2025-11-10 09:26:29.068 00:00:00.000 UDP 28.104.0.1:56188 -> 198.28.0.2:53 1 64 1 2025-11-10 09:27:29.371 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46452 1 80 1 2025-11-10 09:27:29.371 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58118 1 109 1 2025-11-10 09:27:29.363 00:00:00.000 UDP 28.104.0.1:58118 -> 198.28.0.2:53 1 64 1 2025-11-10 09:27:29.363 00:00:00.000 UDP 28.104.0.1:46452 -> 198.28.0.2:53 1 64 1 2025-11-10 09:23:04.052 00:06:00.111 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-10 09:24:08.606 00:05:10.014 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2712 1 2025-11-10 09:28:29.670 00:00:00.000 UDP 28.104.0.1:41057 -> 198.28.0.2:53 1 64 1 2025-11-10 09:28:29.670 00:00:00.000 UDP 28.104.0.1:48405 -> 198.28.0.2:53 1 64 1 2025-11-10 09:28:29.681 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48405 1 80 1 2025-11-10 09:28:29.681 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41057 1 109 1 2025-11-10 09:24:04.108 00:05:51.569 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-10 09:24:55.625 00:05:08.444 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-10 09:29:29.971 00:00:00.000 UDP 28.104.0.1:51096 -> 198.28.0.2:53 1 64 1 2025-11-10 09:29:29.971 00:00:00.000 UDP 28.104.0.1:48556 -> 198.28.0.2:53 1 64 1 2025-11-10 09:29:29.981 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51096 1 80 1 2025-11-10 09:29:29.981 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48556 1 109 1 2025-11-10 09:30:24.717 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-10 09:30:30.265 00:00:00.000 UDP 28.104.0.1:56481 -> 198.28.0.2:53 1 64 1 2025-11-10 09:30:30.264 00:00:00.000 UDP 28.104.0.1:33512 -> 198.28.0.2:53 1 64 1 2025-11-10 09:30:30.274 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33512 1 80 1 2025-11-10 09:30:30.274 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56481 1 109 1 2025-11-10 09:26:55.636 00:05:08.422 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-10 09:26:55.625 00:05:08.494 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-10 09:31:30.568 00:00:00.000 UDP 28.104.0.1:49022 -> 198.28.0.2:53 1 64 1 2025-11-10 09:31:30.568 00:00:00.000 UDP 28.104.0.1:37742 -> 198.28.0.2:53 1 64 1 2025-11-10 09:31:30.578 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49022 1 80 1 2025-11-10 09:31:30.578 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37742 1 109 1 2025-11-10 09:32:30.858 00:00:00.000 UDP 28.104.0.1:41108 -> 198.28.0.2:53 1 64 1 2025-11-10 09:32:30.858 00:00:00.000 UDP 28.104.0.1:44758 -> 198.28.0.2:53 1 64 1 2025-11-10 09:32:30.869 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44758 1 80 1 2025-11-10 09:32:30.868 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41108 1 109 1 2025-11-10 09:28:04.058 00:06:00.265 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-10 09:33:31.181 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45533 1 109 1 2025-11-10 09:33:31.181 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36632 1 80 1 2025-11-10 09:33:31.171 00:00:00.000 UDP 28.104.0.1:36632 -> 198.28.0.2:53 1 64 1 2025-11-10 09:33:31.170 00:00:00.000 UDP 28.104.0.1:45533 -> 198.28.0.2:53 1 64 1 2025-11-10 09:29:28.620 00:05:10.010 OSPF 28.0.2.1:0 -> 224.0.0.5:0 33 2240 1 2025-11-10 09:34:31.462 00:00:00.000 UDP 28.104.0.1:51847 -> 198.28.0.2:53 1 64 1 2025-11-10 09:34:31.462 00:00:00.000 UDP 28.104.0.1:47812 -> 198.28.0.2:53 1 64 1 2025-11-10 09:34:31.473 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51847 1 109 1 2025-11-10 09:34:31.473 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47812 1 80 1 2025-11-10 09:30:04.109 00:05:51.569 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-10 09:30:55.626 00:05:08.443 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-10 09:30:04.059 00:06:00.105 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-10 09:35:24.756 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-10 09:35:31.756 00:00:00.000 UDP 28.104.0.1:46118 -> 198.28.0.2:53 1 64 1 2025-11-10 09:35:31.756 00:00:00.000 UDP 28.104.0.1:41209 -> 198.28.0.2:53 1 64 1 2025-11-10 09:35:31.767 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41209 1 80 1 2025-11-10 09:35:31.767 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46118 1 109 1 2025-11-10 09:36:32.038 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44233 1 80 1 2025-11-10 09:36:32.048 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39184 1 109 1 2025-11-10 09:36:32.028 00:00:00.000 UDP 28.104.0.1:44233 -> 198.28.0.2:53 1 64 1 2025-11-10 09:36:32.037 00:00:00.000 UDP 28.104.0.1:39184 -> 198.28.0.2:53 1 64 1 2025-11-10 09:32:55.627 00:05:08.492 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-10 09:32:55.636 00:05:08.424 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-10 09:37:32.351 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40246 1 80 1 2025-11-10 09:37:32.351 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59426 1 109 1 2025-11-10 09:37:32.341 00:00:00.000 UDP 28.104.0.1:40246 -> 198.28.0.2:53 1 64 1 2025-11-10 09:37:32.341 00:00:00.000 UDP 28.104.0.1:59426 -> 198.28.0.2:53 1 64 1 2025-11-10 09:38:32.611 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55865 1 109 1 2025-11-10 09:38:32.611 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35182 1 80 1 2025-11-10 09:38:32.601 00:00:00.000 UDP 28.104.0.1:55865 -> 198.28.0.2:53 1 64 1 2025-11-10 09:38:32.601 00:00:00.000 UDP 28.104.0.1:35182 -> 198.28.0.2:53 1 64 1 2025-11-10 09:34:48.630 00:05:10.784 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2856 1 2025-11-10 09:39:32.869 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34738 1 109 1 2025-11-10 09:39:32.869 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48993 1 80 1 2025-11-10 09:39:32.860 00:00:00.000 UDP 28.104.0.1:48993 -> 198.28.0.2:53 1 64 1 2025-11-10 09:39:32.860 00:00:00.000 UDP 28.104.0.1:34738 -> 198.28.0.2:53 1 64 1 2025-11-10 09:35:04.060 00:06:00.264 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-10 09:40:24.798 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-10 09:40:33.177 00:00:00.000 UDP 28.104.0.1:49165 -> 198.28.0.2:53 1 64 1 2025-11-10 09:40:33.177 00:00:00.000 UDP 28.104.0.1:51157 -> 198.28.0.2:53 1 64 1 2025-11-10 09:40:33.187 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51157 1 109 1 2025-11-10 09:40:33.187 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49165 1 80 1 2025-11-10 09:36:04.109 00:05:51.574 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-10 09:36:55.629 00:05:08.443 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-10 09:41:33.481 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58539 1 80 1 2025-11-10 09:41:33.481 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34949 1 109 1 2025-11-10 09:41:33.472 00:00:00.000 UDP 28.104.0.1:34949 -> 198.28.0.2:53 1 64 1 2025-11-10 09:41:33.472 00:00:00.000 UDP 28.104.0.1:58539 -> 198.28.0.2:53 1 64 1 2025-11-10 09:37:04.060 00:06:00.105 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-10 09:42:33.735 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51898 1 80 1 2025-11-10 09:42:33.735 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51269 1 109 1 2025-11-10 09:42:33.726 00:00:00.000 UDP 28.104.0.1:51269 -> 198.28.0.2:53 1 64 1 2025-11-10 09:42:33.725 00:00:00.000 UDP 28.104.0.1:51898 -> 198.28.0.2:53 1 64 1 2025-11-10 09:38:55.629 00:05:08.492 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-10 09:38:55.638 00:05:08.424 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-10 09:43:34.058 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50964 1 80 1 2025-11-10 09:43:34.060 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56914 1 109 1 2025-11-10 09:43:34.049 00:00:00.000 UDP 28.104.0.1:56914 -> 198.28.0.2:53 1 64 1 2025-11-10 09:43:34.050 00:00:00.000 UDP 28.104.0.1:50964 -> 198.28.0.2:53 1 64 1 2025-11-10 09:40:08.641 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2928 1 2025-11-10 09:44:34.352 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46482 1 80 1 2025-11-10 09:44:34.352 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44437 1 109 1 2025-11-10 09:44:34.342 00:00:00.000 UDP 28.104.0.1:46482 -> 198.28.0.2:53 1 64 1 2025-11-10 09:44:34.342 00:00:00.000 UDP 28.104.0.1:44437 -> 198.28.0.2:53 1 64 1 2025-11-10 09:45:25.048 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-10 09:45:34.637 00:00:00.000 UDP 28.104.0.1:38213 -> 198.28.0.2:53 1 64 1 2025-11-10 09:45:34.637 00:00:00.000 UDP 28.104.0.1:48988 -> 198.28.0.2:53 1 64 1 2025-11-10 09:45:34.648 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38213 1 80 1 2025-11-10 09:45:34.648 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48988 1 109 1 2025-11-10 09:46:34.926 00:00:00.000 UDP 28.104.0.1:42751 -> 198.28.0.2:53 1 64 1 2025-11-10 09:46:34.926 00:00:00.000 UDP 28.104.0.1:42989 -> 198.28.0.2:53 1 64 1 2025-11-10 09:46:34.938 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42751 1 109 1 2025-11-10 09:46:34.937 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42989 1 80 1 2025-11-10 09:42:04.109 00:05:51.581 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-10 09:42:55.633 00:05:08.439 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-10 09:42:04.062 00:06:00.264 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-10 09:47:35.236 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55993 1 80 1 2025-11-10 09:47:35.236 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48176 1 109 1 2025-11-10 09:47:35.225 00:00:00.000 UDP 28.104.0.1:48176 -> 198.28.0.2:53 1 64 1 2025-11-10 09:47:35.225 00:00:00.000 UDP 28.104.0.1:55993 -> 198.28.0.2:53 1 64 1 2025-11-10 09:48:35.529 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59277 1 80 1 2025-11-10 09:48:35.529 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55841 1 109 1 2025-11-10 09:48:35.521 00:00:00.000 UDP 28.104.0.1:55841 -> 198.28.0.2:53 1 64 1 2025-11-10 09:48:35.521 00:00:00.000 UDP 28.104.0.1:59277 -> 198.28.0.2:53 1 64 1 2025-11-10 09:44:55.636 00:05:08.485 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-10 09:44:04.061 00:06:00.108 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-10 09:44:55.646 00:05:08.416 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-10 09:49:35.870 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49762 1 109 1 2025-11-10 09:49:35.871 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46510 1 80 1 2025-11-10 09:49:35.860 00:00:00.000 UDP 28.104.0.1:46510 -> 198.28.0.2:53 1 64 1 2025-11-10 09:49:35.860 00:00:00.000 UDP 28.104.0.1:49762 -> 198.28.0.2:53 1 64 1 2025-11-10 09:45:28.649 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2736 1 2025-11-10 09:50:25.176 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-10 09:50:36.177 00:00:00.000 UDP 28.104.0.1:53119 -> 198.28.0.2:53 1 64 1 2025-11-10 09:50:36.177 00:00:00.000 UDP 28.104.0.1:54359 -> 198.28.0.2:53 1 64 1 2025-11-10 09:50:36.186 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54359 1 80 1 2025-11-10 09:50:36.187 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53119 1 109 1 2025-11-10 09:51:36.479 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58825 1 109 1 2025-11-10 09:51:36.479 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58789 1 80 1 2025-11-10 09:51:36.468 00:00:00.000 UDP 28.104.0.1:58789 -> 198.28.0.2:53 1 64 1 2025-11-10 09:51:36.468 00:00:00.000 UDP 28.104.0.1:58825 -> 198.28.0.2:53 1 64 1 2025-11-10 09:52:36.798 00:00:00.000 UDP 28.104.0.1:44062 -> 198.28.0.2:53 1 64 1 2025-11-10 09:52:36.798 00:00:00.000 UDP 28.104.0.1:35469 -> 198.28.0.2:53 1 64 1 2025-11-10 09:52:36.808 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35469 1 109 1 2025-11-10 09:52:36.808 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44062 1 80 1 2025-11-10 09:48:04.112 00:05:51.579 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-10 09:48:55.637 00:05:08.438 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-10 09:53:37.114 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44446 1 80 1 2025-11-10 09:53:37.113 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55722 1 109 1 2025-11-10 09:53:37.103 00:00:00.000 UDP 28.104.0.1:55722 -> 198.28.0.2:53 1 64 1 2025-11-10 09:53:37.103 00:00:00.000 UDP 28.104.0.1:44446 -> 198.28.0.2:53 1 64 1 2025-11-10 09:49:04.063 00:06:00.265 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-10 09:54:37.415 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50781 1 109 1 2025-11-10 09:54:37.415 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50410 1 80 1 2025-11-10 09:54:37.404 00:00:00.000 UDP 28.104.0.1:50781 -> 198.28.0.2:53 1 64 1 2025-11-10 09:54:37.404 00:00:00.000 UDP 28.104.0.1:50410 -> 198.28.0.2:53 1 64 1 2025-11-10 09:50:48.656 00:05:10.010 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2728 1 2025-11-10 09:50:55.637 00:05:08.485 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-10 09:50:55.648 00:05:08.417 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-10 09:55:25.110 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-10 09:55:37.701 00:00:00.000 UDP 28.104.0.1:34034 -> 198.28.0.2:53 1 64 1 2025-11-10 09:55:37.701 00:00:00.000 UDP 28.104.0.1:58692 -> 198.28.0.2:53 1 64 1 2025-11-10 09:55:37.714 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58692 1 80 1 2025-11-10 09:55:37.713 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34034 1 109 1 2025-11-10 09:51:04.065 00:06:00.107 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-10 09:56:38.021 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53664 1 109 1 2025-11-10 09:56:38.020 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40281 1 80 1 2025-11-10 09:56:38.007 00:00:00.000 UDP 28.104.0.1:53664 -> 198.28.0.2:53 1 64 1 2025-11-10 09:56:38.008 00:00:00.000 UDP 28.104.0.1:40281 -> 198.28.0.2:53 1 64 1 2025-11-10 09:57:38.305 00:00:00.000 UDP 28.104.0.1:33674 -> 198.28.0.2:53 1 64 1 2025-11-10 09:57:38.305 00:00:00.000 UDP 28.104.0.1:50151 -> 198.28.0.2:53 1 64 1 2025-11-10 09:57:38.315 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50151 1 109 1 2025-11-10 09:57:38.314 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33674 1 80 1 2025-11-10 09:58:38.605 00:00:00.000 UDP 28.104.0.1:54945 -> 198.28.0.2:53 1 64 1 2025-11-10 09:58:38.605 00:00:00.000 UDP 28.104.0.1:55966 -> 198.28.0.2:53 1 64 1 2025-11-10 09:58:38.615 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54945 1 80 1 2025-11-10 09:58:38.615 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55966 1 109 1 Summary: total flows: 320, total bytes: 95873, total packets: 1414, avg bps: 197, avg pps: 0, avg bpp: 67 Time window: 2025-11-10 08:54:04 - 2025-11-10 09:58:38 Total flows processed: 320, passed: 320, Blocks skipped: 0, Bytes read: 33344 Sys: 0.0052s User: 0.0021s Wall: 0.0035s flows/second: 90828.8 Runtime: 0.0035s