Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-13 03:54:05.703 00:05:51.248 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-13 03:54:56.899 00:05:08.734 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-13 03:54:05.622 00:06:00.173 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-13 03:54:05.622 00:06:00.161 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-13 03:59:14.851 00:00:00.000 UDP 28.104.0.1:58446 -> 198.28.0.2:53 1 64 1 2025-11-13 03:59:14.851 00:00:00.000 UDP 28.104.0.1:50639 -> 198.28.0.2:53 1 64 1 2025-11-13 03:59:14.861 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50639 1 109 1 2025-11-13 03:59:14.860 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58446 1 80 1 2025-11-13 03:55:56.899 00:05:08.815 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-13 03:55:56.909 00:05:08.714 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-13 04:00:15.173 00:00:00.000 UDP 28.104.0.1:59029 -> 198.28.0.2:53 1 64 1 2025-11-13 04:00:15.173 00:00:00.000 UDP 28.104.0.1:42375 -> 198.28.0.2:53 1 64 1 2025-11-13 04:00:15.184 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42375 1 109 1 2025-11-13 04:00:15.183 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59029 1 80 1 2025-11-13 04:01:15.472 00:00:00.000 UDP 28.104.0.1:55729 -> 198.28.0.2:53 1 64 1 2025-11-13 04:01:15.472 00:00:00.000 UDP 28.104.0.1:38392 -> 198.28.0.2:53 1 64 1 2025-11-13 04:01:15.485 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55729 1 109 1 2025-11-13 04:01:15.484 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38392 1 80 1 2025-11-13 04:01:44.453 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-13 04:02:15.740 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60952 1 80 1 2025-11-13 04:02:15.740 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54814 1 109 1 2025-11-13 04:02:15.730 00:00:00.000 UDP 28.104.0.1:60952 -> 198.28.0.2:53 1 64 1 2025-11-13 04:02:15.730 00:00:00.000 UDP 28.104.0.1:54814 -> 198.28.0.2:53 1 64 1 2025-11-13 04:03:16.055 00:00:00.000 UDP 28.104.0.1:45906 -> 198.28.0.2:53 1 64 1 2025-11-13 04:03:16.055 00:00:00.000 UDP 28.104.0.1:37784 -> 198.28.0.2:53 1 64 1 2025-11-13 04:03:16.066 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45906 1 109 1 2025-11-13 04:03:16.066 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37784 1 80 1 2025-11-13 03:59:13.954 00:05:10.002 OSPF 28.0.2.1:0 -> 224.0.0.5:0 43 3032 1 2025-11-13 04:04:16.356 00:00:00.000 UDP 28.104.0.1:33205 -> 198.28.0.2:53 1 64 1 2025-11-13 04:04:16.356 00:00:00.000 UDP 28.104.0.1:38736 -> 198.28.0.2:53 1 64 1 2025-11-13 04:04:16.366 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33205 1 80 1 2025-11-13 04:04:16.366 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38736 1 109 1 2025-11-13 04:00:05.703 00:05:51.249 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-13 04:00:56.900 00:05:08.733 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-13 04:05:16.667 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46779 1 80 1 2025-11-13 04:05:16.670 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36018 1 109 1 2025-11-13 04:05:16.657 00:00:00.000 UDP 28.104.0.1:36018 -> 198.28.0.2:53 1 64 1 2025-11-13 04:05:16.657 00:00:00.000 UDP 28.104.0.1:46779 -> 198.28.0.2:53 1 64 1 2025-11-13 04:01:05.623 00:06:00.177 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-13 04:01:56.911 00:05:08.713 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-13 04:01:05.623 00:06:00.160 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-13 04:01:56.901 00:05:08.828 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-13 04:06:16.966 00:00:00.000 UDP 28.104.0.1:57906 -> 198.28.0.2:53 1 64 1 2025-11-13 04:06:16.966 00:00:00.000 UDP 28.104.0.1:37552 -> 198.28.0.2:53 1 64 1 2025-11-13 04:06:16.977 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57906 1 109 1 2025-11-13 04:06:16.977 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37552 1 80 1 2025-11-13 04:06:45.138 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-13 04:07:17.265 00:00:00.000 UDP 28.104.0.1:51114 -> 198.28.0.2:53 1 64 1 2025-11-13 04:07:17.265 00:00:00.000 UDP 28.104.0.1:41098 -> 198.28.0.2:53 1 64 1 2025-11-13 04:07:17.276 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41098 1 109 1 2025-11-13 04:07:17.276 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51114 1 80 1 2025-11-13 04:08:17.569 00:00:00.000 UDP 28.104.0.1:55066 -> 198.28.0.2:53 1 64 1 2025-11-13 04:08:17.569 00:00:00.000 UDP 28.104.0.1:42796 -> 198.28.0.2:53 1 64 1 2025-11-13 04:08:17.581 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55066 1 109 1 2025-11-13 04:08:17.580 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42796 1 80 1 2025-11-13 04:04:33.957 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2648 1 2025-11-13 04:09:17.890 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46255 1 80 1 2025-11-13 04:09:17.890 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40687 1 109 1 2025-11-13 04:09:17.880 00:00:00.000 UDP 28.104.0.1:46255 -> 198.28.0.2:53 1 64 1 2025-11-13 04:09:17.880 00:00:00.000 UDP 28.104.0.1:40687 -> 198.28.0.2:53 1 64 1 2025-11-13 04:10:18.208 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39243 1 80 1 2025-11-13 04:10:18.209 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39392 1 109 1 2025-11-13 04:10:18.198 00:00:00.000 UDP 28.104.0.1:39392 -> 198.28.0.2:53 1 64 1 2025-11-13 04:10:18.198 00:00:00.000 UDP 28.104.0.1:39243 -> 198.28.0.2:53 1 64 1 2025-11-13 04:06:05.718 00:05:51.235 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-13 04:06:56.902 00:05:08.736 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-13 04:11:18.506 00:00:00.000 UDP 28.104.0.1:47286 -> 198.28.0.2:53 1 64 1 2025-11-13 04:11:18.506 00:00:00.000 UDP 28.104.0.1:37826 -> 198.28.0.2:53 1 64 1 2025-11-13 04:11:18.517 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37826 1 80 1 2025-11-13 04:11:18.517 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47286 1 109 1 2025-11-13 04:11:44.757 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-13 04:07:56.902 00:05:08.826 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-13 04:07:56.912 00:05:08.714 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-13 04:12:18.812 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58923 1 80 1 2025-11-13 04:12:18.812 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37935 1 109 1 2025-11-13 04:12:18.801 00:00:00.000 UDP 28.104.0.1:58923 -> 198.28.0.2:53 1 64 1 2025-11-13 04:12:18.801 00:00:00.000 UDP 28.104.0.1:37935 -> 198.28.0.2:53 1 64 1 2025-11-13 04:08:05.625 00:06:00.175 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-13 04:08:05.625 00:06:00.160 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-13 04:13:19.097 00:00:00.000 UDP 28.104.0.1:53189 -> 198.28.0.2:53 1 64 1 2025-11-13 04:13:19.097 00:00:00.000 UDP 28.104.0.1:40651 -> 198.28.0.2:53 1 64 1 2025-11-13 04:13:19.108 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40651 1 109 1 2025-11-13 04:13:19.108 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53189 1 80 1 2025-11-13 04:09:53.963 00:05:10.001 OSPF 28.0.2.1:0 -> 224.0.0.5:0 34 2304 1 2025-11-13 04:14:19.405 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60080 1 80 1 2025-11-13 04:14:19.405 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45568 1 109 1 2025-11-13 04:14:19.395 00:00:00.000 UDP 28.104.0.1:45568 -> 198.28.0.2:53 1 64 1 2025-11-13 04:14:19.395 00:00:00.000 UDP 28.104.0.1:60080 -> 198.28.0.2:53 1 64 1 2025-11-13 04:15:19.709 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46065 1 80 1 2025-11-13 04:15:19.709 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48324 1 109 1 2025-11-13 04:15:19.700 00:00:00.000 UDP 28.104.0.1:46065 -> 198.28.0.2:53 1 64 1 2025-11-13 04:15:19.700 00:00:00.000 UDP 28.104.0.1:48324 -> 198.28.0.2:53 1 64 1 2025-11-13 04:16:19.998 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41039 1 80 1 2025-11-13 04:16:19.997 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48838 1 109 1 2025-11-13 04:16:19.988 00:00:00.000 UDP 28.104.0.1:48838 -> 198.28.0.2:53 1 64 1 2025-11-13 04:16:19.988 00:00:00.000 UDP 28.104.0.1:41039 -> 198.28.0.2:53 1 64 1 2025-11-13 04:16:44.968 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-13 04:12:05.718 00:05:51.236 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-13 04:12:56.903 00:05:08.737 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-13 04:17:20.287 00:00:00.000 UDP 28.104.0.1:49113 -> 198.28.0.2:53 1 64 1 2025-11-13 04:17:20.287 00:00:00.000 UDP 28.104.0.1:59501 -> 198.28.0.2:53 1 64 1 2025-11-13 04:17:20.299 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49113 1 109 1 2025-11-13 04:17:20.298 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59501 1 80 1 2025-11-13 04:13:56.903 00:05:08.827 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-13 04:13:56.913 00:05:08.717 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-13 04:18:20.588 00:00:00.000 UDP 28.104.0.1:59431 -> 198.28.0.2:53 1 64 1 2025-11-13 04:18:20.589 00:00:00.000 UDP 28.104.0.1:55398 -> 198.28.0.2:53 1 64 1 2025-11-13 04:18:20.598 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59431 1 109 1 2025-11-13 04:18:20.598 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55398 1 80 1 2025-11-13 04:19:20.900 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39553 1 80 1 2025-11-13 04:19:20.899 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52402 1 109 1 2025-11-13 04:19:20.890 00:00:00.000 UDP 28.104.0.1:52402 -> 198.28.0.2:53 1 64 1 2025-11-13 04:19:20.890 00:00:00.000 UDP 28.104.0.1:39553 -> 198.28.0.2:53 1 64 1 2025-11-13 04:15:13.964 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2628 1 2025-11-13 04:15:05.629 00:06:00.184 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-13 04:15:05.629 00:06:00.161 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-13 04:20:21.219 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56393 1 80 1 2025-11-13 04:20:21.220 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34182 1 109 1 2025-11-13 04:20:21.209 00:00:00.000 UDP 28.104.0.1:56393 -> 198.28.0.2:53 1 64 1 2025-11-13 04:20:21.209 00:00:00.000 UDP 28.104.0.1:34182 -> 198.28.0.2:53 1 64 1 2025-11-13 04:21:21.503 00:00:00.000 UDP 28.104.0.1:38418 -> 198.28.0.2:53 1 64 1 2025-11-13 04:21:21.503 00:00:00.000 UDP 28.104.0.1:44388 -> 198.28.0.2:53 1 64 1 2025-11-13 04:21:21.513 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44388 1 109 1 2025-11-13 04:21:21.513 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38418 1 80 1 2025-11-13 04:21:45.126 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-13 04:22:21.819 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32888 1 80 1 2025-11-13 04:22:21.819 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59036 1 109 1 2025-11-13 04:22:21.808 00:00:00.000 UDP 28.104.0.1:32888 -> 198.28.0.2:53 1 64 1 2025-11-13 04:22:21.808 00:00:00.000 UDP 28.104.0.1:59036 -> 198.28.0.2:53 1 64 1 2025-11-13 04:18:05.720 00:05:51.235 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-13 04:18:56.904 00:05:08.737 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-13 04:23:22.118 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44034 1 80 1 2025-11-13 04:23:22.118 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40244 1 109 1 2025-11-13 04:23:22.108 00:00:00.000 UDP 28.104.0.1:44034 -> 198.28.0.2:53 1 64 1 2025-11-13 04:23:22.108 00:00:00.000 UDP 28.104.0.1:40244 -> 198.28.0.2:53 1 64 1 2025-11-13 04:19:56.914 00:05:08.716 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-13 04:19:56.904 00:05:08.837 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-13 04:24:22.415 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60901 1 80 1 2025-11-13 04:24:22.414 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53584 1 109 1 2025-11-13 04:24:22.404 00:00:00.000 UDP 28.104.0.1:53584 -> 198.28.0.2:53 1 64 1 2025-11-13 04:24:22.404 00:00:00.000 UDP 28.104.0.1:60901 -> 198.28.0.2:53 1 64 1 2025-11-13 04:20:33.971 00:05:10.010 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2824 1 2025-11-13 04:25:22.765 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60829 1 80 1 2025-11-13 04:25:22.765 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53879 1 109 1 2025-11-13 04:25:22.755 00:00:00.000 UDP 28.104.0.1:60829 -> 198.28.0.2:53 1 64 1 2025-11-13 04:25:22.755 00:00:00.000 UDP 28.104.0.1:53879 -> 198.28.0.2:53 1 64 1 2025-11-13 04:26:23.062 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53775 1 109 1 2025-11-13 04:26:23.062 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38466 1 80 1 2025-11-13 04:26:23.051 00:00:00.000 UDP 28.104.0.1:53775 -> 198.28.0.2:53 1 64 1 2025-11-13 04:26:23.051 00:00:00.000 UDP 28.104.0.1:38466 -> 198.28.0.2:53 1 64 1 2025-11-13 04:26:45.191 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-13 04:22:05.630 00:06:00.184 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-13 04:22:05.630 00:06:00.161 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-13 04:27:23.355 00:00:00.000 UDP 28.104.0.1:55087 -> 198.28.0.2:53 1 64 1 2025-11-13 04:27:23.355 00:00:00.000 UDP 28.104.0.1:34364 -> 198.28.0.2:53 1 64 1 2025-11-13 04:27:23.364 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34364 1 109 1 2025-11-13 04:27:23.364 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55087 1 80 1 2025-11-13 04:28:23.684 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56115 1 80 1 2025-11-13 04:28:23.684 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52428 1 109 1 2025-11-13 04:28:23.673 00:00:00.000 UDP 28.104.0.1:56115 -> 198.28.0.2:53 1 64 1 2025-11-13 04:28:23.673 00:00:00.000 UDP 28.104.0.1:52428 -> 198.28.0.2:53 1 64 1 2025-11-13 04:24:05.731 00:05:51.225 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-13 04:24:56.905 00:05:08.736 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-13 04:29:23.977 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35147 1 109 1 2025-11-13 04:29:23.977 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51339 1 80 1 2025-11-13 04:29:23.966 00:00:00.000 UDP 28.104.0.1:35147 -> 198.28.0.2:53 1 64 1 2025-11-13 04:29:23.967 00:00:00.000 UDP 28.104.0.1:51339 -> 198.28.0.2:53 1 64 1 2025-11-13 04:25:56.915 00:05:08.716 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-13 04:25:56.905 00:05:08.839 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-13 04:25:53.981 00:05:10.046 OSPF 28.0.2.1:0 -> 224.0.0.5:0 43 3016 1 2025-11-13 04:30:24.264 00:00:00.000 UDP 28.104.0.1:53782 -> 198.28.0.2:53 1 64 1 2025-11-13 04:30:24.264 00:00:00.000 UDP 28.104.0.1:33807 -> 198.28.0.2:53 1 64 1 2025-11-13 04:30:24.274 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33807 1 109 1 2025-11-13 04:30:24.275 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53782 1 80 1 2025-11-13 04:31:24.568 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60226 1 109 1 2025-11-13 04:31:24.568 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34046 1 80 1 2025-11-13 04:31:24.558 00:00:00.000 UDP 28.104.0.1:34046 -> 198.28.0.2:53 1 64 1 2025-11-13 04:31:24.558 00:00:00.000 UDP 28.104.0.1:60226 -> 198.28.0.2:53 1 64 1 2025-11-13 04:31:45.431 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-13 04:32:25.096 00:00:00.000 UDP 28.104.0.1:56735 -> 198.28.0.2:53 1 64 1 2025-11-13 04:32:25.096 00:00:00.000 UDP 28.104.0.1:52842 -> 198.28.0.2:53 1 64 1 2025-11-13 04:32:25.107 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52842 1 109 1 2025-11-13 04:32:25.107 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56735 1 80 1 2025-11-13 04:33:25.403 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36695 1 109 1 2025-11-13 04:33:25.402 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56623 1 80 1 2025-11-13 04:33:25.392 00:00:00.000 UDP 28.104.0.1:36695 -> 198.28.0.2:53 1 64 1 2025-11-13 04:33:25.392 00:00:00.000 UDP 28.104.0.1:56623 -> 198.28.0.2:53 1 64 1 2025-11-13 04:29:05.632 00:06:00.184 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-13 04:29:05.632 00:06:00.160 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-13 04:34:25.760 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49728 1 109 1 2025-11-13 04:34:25.759 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45367 1 80 1 2025-11-13 04:34:25.749 00:00:00.000 UDP 28.104.0.1:49728 -> 198.28.0.2:53 1 64 1 2025-11-13 04:34:25.749 00:00:00.000 UDP 28.104.0.1:45367 -> 198.28.0.2:53 1 64 1 2025-11-13 04:30:05.733 00:05:51.227 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-13 04:30:56.910 00:05:08.735 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-13 04:35:26.068 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41834 1 109 1 2025-11-13 04:31:13.984 00:05:10.486 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2692 1 2025-11-13 04:35:26.068 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50881 1 80 1 2025-11-13 04:35:26.058 00:00:00.000 UDP 28.104.0.1:41834 -> 198.28.0.2:53 1 64 1 2025-11-13 04:35:26.058 00:00:00.000 UDP 28.104.0.1:50881 -> 198.28.0.2:53 1 64 1 2025-11-13 04:31:56.923 00:05:08.712 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-13 04:31:56.911 00:05:08.834 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-13 04:36:26.363 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37163 1 80 1 2025-11-13 04:36:26.363 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54369 1 109 1 2025-11-13 04:36:26.353 00:00:00.000 UDP 28.104.0.1:37163 -> 198.28.0.2:53 1 64 1 2025-11-13 04:36:26.353 00:00:00.000 UDP 28.104.0.1:54369 -> 198.28.0.2:53 1 64 1 2025-11-13 04:36:45.481 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-13 04:37:26.662 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54044 1 109 1 2025-11-13 04:37:26.662 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38357 1 80 1 2025-11-13 04:37:26.651 00:00:00.000 UDP 28.104.0.1:38357 -> 198.28.0.2:53 1 64 1 2025-11-13 04:37:26.651 00:00:00.000 UDP 28.104.0.1:54044 -> 198.28.0.2:53 1 64 1 2025-11-13 04:38:26.949 00:00:00.000 UDP 28.104.0.1:50447 -> 198.28.0.2:53 1 64 1 2025-11-13 04:38:26.949 00:00:00.000 UDP 28.104.0.1:33295 -> 198.28.0.2:53 1 64 1 2025-11-13 04:38:26.959 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50447 1 80 1 2025-11-13 04:38:26.960 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33295 1 109 1 2025-11-13 04:39:27.261 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42540 1 109 1 2025-11-13 04:39:27.261 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37532 1 80 1 2025-11-13 04:39:27.251 00:00:00.000 UDP 28.104.0.1:42540 -> 198.28.0.2:53 1 64 1 2025-11-13 04:39:27.251 00:00:00.000 UDP 28.104.0.1:37532 -> 198.28.0.2:53 1 64 1 2025-11-13 04:40:27.557 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40575 1 80 1 2025-11-13 04:40:27.557 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45349 1 109 1 2025-11-13 04:40:27.547 00:00:00.000 UDP 28.104.0.1:45349 -> 198.28.0.2:53 1 64 1 2025-11-13 04:40:27.547 00:00:00.000 UDP 28.104.0.1:40575 -> 198.28.0.2:53 1 64 1 2025-11-13 04:36:33.990 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2424 1 2025-11-13 04:36:05.734 00:05:51.227 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-13 04:36:56.912 00:05:08.732 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-13 04:36:05.633 00:06:00.185 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-13 04:36:05.633 00:06:00.161 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-13 04:41:27.850 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53584 1 109 1 2025-11-13 04:41:27.850 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53624 1 80 1 2025-11-13 04:41:27.839 00:00:00.000 UDP 28.104.0.1:53624 -> 198.28.0.2:53 1 64 1 2025-11-13 04:41:27.839 00:00:00.000 UDP 28.104.0.1:53584 -> 198.28.0.2:53 1 64 1 2025-11-13 04:41:45.377 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-13 04:37:56.911 00:05:08.835 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-13 04:37:56.921 00:05:08.713 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-13 04:42:28.109 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40584 1 80 1 2025-11-13 04:42:28.109 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35912 1 109 1 2025-11-13 04:42:28.098 00:00:00.000 UDP 28.104.0.1:40584 -> 198.28.0.2:53 1 64 1 2025-11-13 04:42:28.098 00:00:00.000 UDP 28.104.0.1:35912 -> 198.28.0.2:53 1 64 1 2025-11-13 04:43:28.362 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49385 1 80 1 2025-11-13 04:43:28.364 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42718 1 109 1 2025-11-13 04:43:28.351 00:00:00.000 UDP 28.104.0.1:49385 -> 198.28.0.2:53 1 64 1 2025-11-13 04:43:28.351 00:00:00.000 UDP 28.104.0.1:42718 -> 198.28.0.2:53 1 64 1 2025-11-13 04:44:28.642 00:00:00.000 UDP 28.104.0.1:45677 -> 198.28.0.2:53 1 64 1 2025-11-13 04:44:28.642 00:00:00.000 UDP 28.104.0.1:40413 -> 198.28.0.2:53 1 64 1 2025-11-13 04:44:28.653 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45677 1 80 1 2025-11-13 04:44:28.653 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40413 1 109 1 2025-11-13 04:45:29.449 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45764 1 80 1 2025-11-13 04:45:29.448 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47425 1 109 1 2025-11-13 04:45:29.437 00:00:00.000 UDP 28.104.0.1:45764 -> 198.28.0.2:53 1 64 1 2025-11-13 04:45:29.437 00:00:00.000 UDP 28.104.0.1:47425 -> 198.28.0.2:53 1 64 1 2025-11-13 04:41:53.998 00:05:00.010 OSPF 28.0.2.1:0 -> 224.0.0.5:0 34 2356 1 2025-11-13 04:46:29.734 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45069 1 80 1 2025-11-13 04:46:29.734 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56274 1 109 1 2025-11-13 04:46:29.724 00:00:00.000 UDP 28.104.0.1:56274 -> 198.28.0.2:53 1 64 1 2025-11-13 04:46:29.724 00:00:00.000 UDP 28.104.0.1:45069 -> 198.28.0.2:53 1 64 1 2025-11-13 04:46:45.559 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-13 04:42:05.735 00:05:51.227 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-13 04:42:56.912 00:05:08.735 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-13 04:47:30.049 00:00:00.000 UDP 28.104.0.1:38060 -> 198.28.0.2:53 1 64 1 2025-11-13 04:47:30.049 00:00:00.000 UDP 28.104.0.1:52838 -> 198.28.0.2:53 1 64 1 2025-11-13 04:47:30.058 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38060 1 109 1 2025-11-13 04:47:30.058 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52838 1 80 1 2025-11-13 04:43:56.912 00:05:08.835 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-13 04:43:05.635 00:06:00.187 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-13 04:43:56.923 00:05:08.715 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-13 04:43:05.635 00:06:00.162 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-13 04:48:30.353 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46687 1 109 1 2025-11-13 04:48:30.343 00:00:00.000 UDP 28.104.0.1:46687 -> 198.28.0.2:53 1 64 1 2025-11-13 04:49:30.661 00:00:00.000 UDP 28.104.0.1:46978 -> 198.28.0.2:53 1 64 1 2025-11-13 04:48:30.342 00:01:00.319 UDP 28.104.0.1:37285 -> 198.28.0.2:53 2 128 1 2025-11-13 04:48:30.354 00:01:00.319 UDP 198.28.0.2:53 -> 28.104.0.1:37285 2 160 1 2025-11-13 04:49:30.673 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46978 1 109 1 2025-11-13 04:50:30.963 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48616 1 109 1 2025-11-13 04:50:30.965 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55736 1 80 1 2025-11-13 04:50:30.952 00:00:00.000 UDP 28.104.0.1:55736 -> 198.28.0.2:53 1 64 1 2025-11-13 04:50:30.953 00:00:00.000 UDP 28.104.0.1:48616 -> 198.28.0.2:53 1 64 1 2025-11-13 04:47:04.008 00:05:10.032 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2832 1 2025-11-13 04:51:31.279 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40705 1 109 1 2025-11-13 04:51:31.278 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33986 1 80 1 2025-11-13 04:51:31.267 00:00:00.000 UDP 28.104.0.1:33986 -> 198.28.0.2:53 1 64 1 2025-11-13 04:51:31.267 00:00:00.000 UDP 28.104.0.1:40705 -> 198.28.0.2:53 1 64 1 2025-11-13 04:51:45.581 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-13 04:52:31.551 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45799 1 109 1 2025-11-13 04:52:31.551 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46879 1 80 1 2025-11-13 04:52:31.542 00:00:00.000 UDP 28.104.0.1:45799 -> 198.28.0.2:53 1 64 1 2025-11-13 04:52:31.542 00:00:00.000 UDP 28.104.0.1:46879 -> 198.28.0.2:53 1 64 1 2025-11-13 04:48:05.737 00:05:51.226 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-13 04:48:56.916 00:05:08.732 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-13 04:53:31.797 00:00:00.000 UDP 28.104.0.1:34625 -> 198.28.0.2:53 1 64 1 2025-11-13 04:53:31.797 00:00:00.000 UDP 28.104.0.1:34337 -> 198.28.0.2:53 1 64 1 2025-11-13 04:53:31.808 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34337 1 80 1 2025-11-13 04:53:31.808 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34625 1 109 1 2025-11-13 04:49:56.922 00:05:08.717 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-13 04:49:56.913 00:05:08.835 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-13 04:54:32.064 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42629 1 109 1 2025-11-13 04:54:32.064 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58115 1 80 1 2025-11-13 04:54:32.053 00:00:00.000 UDP 28.104.0.1:42629 -> 198.28.0.2:53 1 64 1 2025-11-13 04:54:32.053 00:00:00.000 UDP 28.104.0.1:58115 -> 198.28.0.2:53 1 64 1 2025-11-13 04:50:05.638 00:06:00.184 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-13 04:50:05.638 00:06:00.162 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-13 04:55:32.348 00:00:00.000 UDP 28.104.0.1:58056 -> 198.28.0.2:53 1 64 1 2025-11-13 04:55:32.347 00:00:00.000 UDP 28.104.0.1:41319 -> 198.28.0.2:53 1 64 1 2025-11-13 04:55:32.358 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58056 1 80 1 2025-11-13 04:55:32.358 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41319 1 109 1 2025-11-13 04:56:32.642 00:00:00.000 UDP 28.104.0.1:57885 -> 198.28.0.2:53 1 64 1 2025-11-13 04:56:32.642 00:00:00.000 UDP 28.104.0.1:48291 -> 198.28.0.2:53 1 64 1 2025-11-13 04:52:24.042 00:05:10.752 OSPF 28.0.2.1:0 -> 224.0.0.5:0 46 3276 1 2025-11-13 04:56:32.653 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48291 1 109 1 2025-11-13 04:56:32.653 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57885 1 80 1 2025-11-13 04:56:45.777 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-13 04:57:32.947 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48877 1 109 1 2025-11-13 04:57:32.946 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40408 1 80 1 2025-11-13 04:57:32.936 00:00:00.000 UDP 28.104.0.1:48877 -> 198.28.0.2:53 1 64 1 2025-11-13 04:57:32.936 00:00:00.000 UDP 28.104.0.1:40408 -> 198.28.0.2:53 1 64 1 2025-11-13 04:58:33.251 00:00:00.000 UDP 28.104.0.1:47133 -> 198.28.0.2:53 1 64 1 2025-11-13 04:58:33.251 00:00:00.000 UDP 28.104.0.1:45669 -> 198.28.0.2:53 1 64 1 2025-11-13 04:58:33.261 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47133 1 109 1 2025-11-13 04:58:33.261 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45669 1 80 1 Summary: total flows: 319, total bytes: 97094, total packets: 1431, avg bps: 200, avg pps: 0, avg bpp: 67 Time window: 2025-11-13 03:54:05 - 2025-11-13 04:58:33 Total flows processed: 319, passed: 319, Blocks skipped: 0, Bytes read: 33240 Sys: 0.0055s User: 0.0011s Wall: 0.0030s flows/second: 104767.3 Runtime: 0.0031s