Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-13 07:54:05.793 00:05:51.240 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-13 07:59:05.982 00:00:00.000 UDP 28.104.0.1:42132 -> 198.28.0.2:53 1 64 1 2025-11-13 07:59:05.982 00:00:00.000 UDP 28.104.0.1:42533 -> 198.28.0.2:53 1 64 1 2025-11-13 07:59:05.991 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42533 1 109 1 2025-11-13 07:54:56.981 00:05:08.767 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-13 07:59:05.991 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42132 1 80 1 2025-11-13 08:00:06.283 00:00:00.000 UDP 28.104.0.1:38788 -> 198.28.0.2:53 1 64 1 2025-11-13 07:55:56.992 00:05:08.747 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-13 08:00:06.283 00:00:00.000 UDP 28.104.0.1:40950 -> 198.28.0.2:53 1 64 1 2025-11-13 07:55:56.983 00:05:08.824 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-13 08:00:06.294 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38788 1 80 1 2025-11-13 08:00:06.295 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40950 1 109 1 2025-11-13 08:01:06.600 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51367 1 80 1 2025-11-13 08:01:06.600 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42385 1 109 1 2025-11-13 08:01:06.588 00:00:00.000 UDP 28.104.0.1:42385 -> 198.28.0.2:53 1 64 1 2025-11-13 08:01:06.588 00:00:00.000 UDP 28.104.0.1:51367 -> 198.28.0.2:53 1 64 1 2025-11-13 08:01:49.433 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-13 08:02:06.898 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43315 1 109 1 2025-11-13 08:02:06.898 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60654 1 80 1 2025-11-13 08:02:06.888 00:00:00.000 UDP 28.104.0.1:60654 -> 198.28.0.2:53 1 64 1 2025-11-13 08:02:06.888 00:00:00.000 UDP 28.104.0.1:43315 -> 198.28.0.2:53 1 64 1 2025-11-13 07:58:44.241 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 33 2240 1 2025-11-13 08:03:07.216 00:00:00.000 UDP 28.104.0.1:56584 -> 198.28.0.2:53 1 64 1 2025-11-13 08:03:07.216 00:00:00.000 UDP 28.104.0.1:51235 -> 198.28.0.2:53 1 64 1 2025-11-13 08:03:07.225 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56584 1 109 1 2025-11-13 08:03:07.226 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51235 1 80 1 2025-11-13 08:04:07.526 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44035 1 109 1 2025-11-13 08:04:07.526 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59323 1 80 1 2025-11-13 07:59:05.739 00:06:00.164 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-13 07:59:05.739 00:06:00.133 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-13 08:04:07.516 00:00:00.000 UDP 28.104.0.1:44035 -> 198.28.0.2:53 1 64 1 2025-11-13 08:04:07.516 00:00:00.000 UDP 28.104.0.1:59323 -> 198.28.0.2:53 1 64 1 2025-11-13 08:00:05.795 00:05:51.239 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-13 08:00:56.983 00:05:08.767 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-13 08:05:07.821 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55712 1 80 1 2025-11-13 08:05:07.821 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49586 1 109 1 2025-11-13 08:05:07.811 00:00:00.000 UDP 28.104.0.1:49586 -> 198.28.0.2:53 1 64 1 2025-11-13 08:05:07.811 00:00:00.000 UDP 28.104.0.1:55712 -> 198.28.0.2:53 1 64 1 2025-11-13 08:01:56.983 00:05:08.824 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-13 08:01:56.993 00:05:08.747 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-13 08:06:08.123 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40753 1 80 1 2025-11-13 08:06:08.123 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58709 1 109 1 2025-11-13 08:06:08.113 00:00:00.000 UDP 28.104.0.1:40753 -> 198.28.0.2:53 1 64 1 2025-11-13 08:06:08.113 00:00:00.000 UDP 28.104.0.1:58709 -> 198.28.0.2:53 1 64 1 2025-11-13 08:06:49.585 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-13 08:07:08.414 00:00:00.000 UDP 28.104.0.1:36587 -> 198.28.0.2:53 1 64 1 2025-11-13 08:07:08.414 00:00:00.000 UDP 28.104.0.1:44769 -> 198.28.0.2:53 1 64 1 2025-11-13 08:07:08.424 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44769 1 109 1 2025-11-13 08:07:08.424 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36587 1 80 1 2025-11-13 08:08:08.722 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45740 1 80 1 2025-11-13 08:08:08.722 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58478 1 109 1 2025-11-13 08:08:08.712 00:00:00.000 UDP 28.104.0.1:45740 -> 198.28.0.2:53 1 64 1 2025-11-13 08:08:08.712 00:00:00.000 UDP 28.104.0.1:58478 -> 198.28.0.2:53 1 64 1 2025-11-13 08:04:04.244 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2628 1 2025-11-13 08:09:08.981 00:00:00.000 UDP 28.104.0.1:39557 -> 198.28.0.2:53 1 64 1 2025-11-13 08:09:08.981 00:00:00.000 UDP 28.104.0.1:56904 -> 198.28.0.2:53 1 64 1 2025-11-13 08:09:08.991 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56904 1 109 1 2025-11-13 08:09:08.990 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39557 1 80 1 2025-11-13 08:10:10.736 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44386 1 80 1 2025-11-13 08:10:10.736 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54998 1 109 1 2025-11-13 08:10:10.725 00:00:00.000 UDP 28.104.0.1:44386 -> 198.28.0.2:53 1 64 1 2025-11-13 08:10:10.726 00:00:00.000 UDP 28.104.0.1:54998 -> 198.28.0.2:53 1 64 1 2025-11-13 08:06:05.797 00:05:51.244 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-13 08:06:05.740 00:06:00.167 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-13 08:06:05.740 00:06:00.133 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-13 08:06:56.983 00:05:08.769 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-13 08:11:10.986 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54108 1 80 1 2025-11-13 08:11:10.986 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53588 1 109 1 2025-11-13 08:11:10.978 00:00:00.000 UDP 28.104.0.1:54108 -> 198.28.0.2:53 1 64 1 2025-11-13 08:11:10.978 00:00:00.000 UDP 28.104.0.1:53588 -> 198.28.0.2:53 1 64 1 2025-11-13 08:11:50.076 00:00:00.038 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-13 08:07:56.989 00:05:08.818 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-13 08:07:57.000 00:05:08.741 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-13 08:12:11.282 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33979 1 80 1 2025-11-13 08:12:11.281 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42540 1 109 1 2025-11-13 08:12:11.271 00:00:00.000 UDP 28.104.0.1:33979 -> 198.28.0.2:53 1 64 1 2025-11-13 08:12:11.271 00:00:00.000 UDP 28.104.0.1:42540 -> 198.28.0.2:53 1 64 1 2025-11-13 08:13:11.566 00:00:00.000 UDP 28.104.0.1:50058 -> 198.28.0.2:53 1 64 1 2025-11-13 08:13:11.566 00:00:00.000 UDP 28.104.0.1:59906 -> 198.28.0.2:53 1 64 1 2025-11-13 08:13:11.575 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59906 1 109 1 2025-11-13 08:13:11.575 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50058 1 80 1 2025-11-13 08:09:24.248 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 42 3060 1 2025-11-13 08:14:11.829 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54498 1 80 1 2025-11-13 08:14:11.829 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40948 1 109 1 2025-11-13 08:14:11.819 00:00:00.000 UDP 28.104.0.1:40948 -> 198.28.0.2:53 1 64 1 2025-11-13 08:14:11.819 00:00:00.000 UDP 28.104.0.1:54498 -> 198.28.0.2:53 1 64 1 2025-11-13 08:15:12.129 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42604 1 109 1 2025-11-13 08:15:12.129 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40902 1 80 1 2025-11-13 08:15:12.119 00:00:00.000 UDP 28.104.0.1:40902 -> 198.28.0.2:53 1 64 1 2025-11-13 08:15:12.119 00:00:00.000 UDP 28.104.0.1:42604 -> 198.28.0.2:53 1 64 1 2025-11-13 08:16:12.425 00:00:00.000 UDP 28.104.0.1:58329 -> 198.28.0.2:53 1 64 1 2025-11-13 08:16:12.425 00:00:00.000 UDP 28.104.0.1:59645 -> 198.28.0.2:53 1 64 1 2025-11-13 08:16:12.436 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59645 1 109 1 2025-11-13 08:16:12.436 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58329 1 80 1 2025-11-13 08:16:49.857 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-13 08:12:05.796 00:05:51.247 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-13 08:12:56.990 00:05:08.763 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-13 08:17:12.729 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49652 1 80 1 2025-11-13 08:17:12.729 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39994 1 109 1 2025-11-13 08:17:12.721 00:00:00.000 UDP 28.104.0.1:49652 -> 198.28.0.2:53 1 64 1 2025-11-13 08:17:12.721 00:00:00.000 UDP 28.104.0.1:39994 -> 198.28.0.2:53 1 64 1 2025-11-13 08:13:56.990 00:05:08.821 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-13 08:13:05.742 00:06:00.166 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-13 08:13:57.001 00:05:08.754 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-13 08:13:05.742 00:06:00.131 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-13 08:18:13.028 00:00:00.000 UDP 28.104.0.1:60614 -> 198.28.0.2:53 1 64 1 2025-11-13 08:18:13.029 00:00:00.000 UDP 28.104.0.1:33291 -> 198.28.0.2:53 1 64 1 2025-11-13 08:18:13.040 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60614 1 80 1 2025-11-13 08:18:13.040 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33291 1 109 1 2025-11-13 08:14:44.255 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2856 1 2025-11-13 08:19:13.290 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41523 1 80 1 2025-11-13 08:19:13.291 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52022 1 109 1 2025-11-13 08:19:13.280 00:00:00.000 UDP 28.104.0.1:41523 -> 198.28.0.2:53 1 64 1 2025-11-13 08:19:13.280 00:00:00.000 UDP 28.104.0.1:52022 -> 198.28.0.2:53 1 64 1 2025-11-13 08:20:13.579 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58514 1 80 1 2025-11-13 08:20:13.579 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50815 1 109 1 2025-11-13 08:20:13.570 00:00:00.000 UDP 28.104.0.1:58514 -> 198.28.0.2:53 1 64 1 2025-11-13 08:20:13.570 00:00:00.000 UDP 28.104.0.1:50815 -> 198.28.0.2:53 1 64 1 2025-11-13 08:21:13.863 00:00:00.000 UDP 28.104.0.1:56760 -> 198.28.0.2:53 1 64 1 2025-11-13 08:21:13.863 00:00:00.000 UDP 28.104.0.1:48975 -> 198.28.0.2:53 1 64 1 2025-11-13 08:21:13.875 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56760 1 80 1 2025-11-13 08:21:13.875 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48975 1 109 1 2025-11-13 08:21:49.878 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-13 08:22:14.312 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33228 1 109 1 2025-11-13 08:22:14.312 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43946 1 80 1 2025-11-13 08:22:14.302 00:00:00.000 UDP 28.104.0.1:43946 -> 198.28.0.2:53 1 64 1 2025-11-13 08:22:14.302 00:00:00.000 UDP 28.104.0.1:33228 -> 198.28.0.2:53 1 64 1 2025-11-13 08:18:05.797 00:05:51.245 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-13 08:18:56.991 00:05:08.765 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-13 08:23:14.604 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41406 1 80 1 2025-11-13 08:23:14.604 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58149 1 109 1 2025-11-13 08:23:14.593 00:00:00.000 UDP 28.104.0.1:58149 -> 198.28.0.2:53 1 64 1 2025-11-13 08:23:14.593 00:00:00.000 UDP 28.104.0.1:41406 -> 198.28.0.2:53 1 64 1 2025-11-13 08:19:57.003 00:05:08.744 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-13 08:19:56.991 00:05:08.819 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-13 08:24:14.852 00:00:00.000 UDP 28.104.0.1:59916 -> 198.28.0.2:53 1 64 1 2025-11-13 08:24:14.852 00:00:00.000 UDP 28.104.0.1:44711 -> 198.28.0.2:53 1 64 1 2025-11-13 08:20:04.259 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2892 1 2025-11-13 08:24:14.862 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44711 1 109 1 2025-11-13 08:24:14.862 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59916 1 80 1 2025-11-13 08:20:05.745 00:06:00.167 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-13 08:20:05.745 00:06:00.131 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-13 08:25:15.175 00:00:00.000 UDP 28.104.0.1:60522 -> 198.28.0.2:53 1 64 1 2025-11-13 08:25:15.175 00:00:00.000 UDP 28.104.0.1:36066 -> 198.28.0.2:53 1 64 1 2025-11-13 08:25:15.187 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60522 1 80 1 2025-11-13 08:25:15.187 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36066 1 109 1 2025-11-13 08:26:15.485 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47726 1 109 1 2025-11-13 08:26:15.485 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44236 1 80 1 2025-11-13 08:26:15.476 00:00:00.000 UDP 28.104.0.1:47726 -> 198.28.0.2:53 1 64 1 2025-11-13 08:26:15.476 00:00:00.000 UDP 28.104.0.1:44236 -> 198.28.0.2:53 1 64 1 2025-11-13 08:26:49.987 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-13 08:27:15.788 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48017 1 109 1 2025-11-13 08:27:15.788 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48539 1 80 1 2025-11-13 08:27:15.778 00:00:00.000 UDP 28.104.0.1:48017 -> 198.28.0.2:53 1 64 1 2025-11-13 08:27:15.778 00:00:00.000 UDP 28.104.0.1:48539 -> 198.28.0.2:53 1 64 1 2025-11-13 08:28:16.509 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54417 1 80 1 2025-11-13 08:28:16.509 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47906 1 109 1 2025-11-13 08:28:16.498 00:00:00.000 UDP 28.104.0.1:54417 -> 198.28.0.2:53 1 64 1 2025-11-13 08:28:16.498 00:00:00.000 UDP 28.104.0.1:47906 -> 198.28.0.2:53 1 64 1 2025-11-13 08:24:05.799 00:05:51.244 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-13 08:24:56.992 00:05:08.767 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-13 08:29:16.808 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48635 1 80 1 2025-11-13 08:29:16.808 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33619 1 109 1 2025-11-13 08:29:16.797 00:00:00.000 UDP 28.104.0.1:48635 -> 198.28.0.2:53 1 64 1 2025-11-13 08:29:16.797 00:00:00.000 UDP 28.104.0.1:33619 -> 198.28.0.2:53 1 64 1 2025-11-13 08:25:24.257 00:05:10.016 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2448 1 2025-11-13 08:25:56.992 00:05:08.821 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-13 08:25:57.004 00:05:08.745 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-13 08:30:17.103 00:00:00.000 UDP 28.104.0.1:60104 -> 198.28.0.2:53 1 64 1 2025-11-13 08:30:17.103 00:00:00.000 UDP 28.104.0.1:44065 -> 198.28.0.2:53 1 64 1 2025-11-13 08:30:17.114 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44065 1 80 1 2025-11-13 08:30:17.115 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60104 1 109 1 2025-11-13 08:31:17.399 00:00:00.000 UDP 28.104.0.1:55304 -> 198.28.0.2:53 1 64 1 2025-11-13 08:31:17.399 00:00:00.000 UDP 28.104.0.1:59949 -> 198.28.0.2:53 1 64 1 2025-11-13 08:31:17.410 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55304 1 109 1 2025-11-13 08:31:17.410 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59949 1 80 1 2025-11-13 08:31:50.032 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-13 08:27:05.747 00:06:00.164 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-13 08:27:05.747 00:06:00.129 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-13 08:32:17.690 00:00:00.000 UDP 28.104.0.1:38661 -> 198.28.0.2:53 1 64 1 2025-11-13 08:32:17.690 00:00:00.000 UDP 28.104.0.1:60737 -> 198.28.0.2:53 1 64 1 2025-11-13 08:32:17.700 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38661 1 80 1 2025-11-13 08:32:17.700 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60737 1 109 1 2025-11-13 08:33:17.992 00:00:00.000 UDP 28.104.0.1:34665 -> 198.28.0.2:53 1 64 1 2025-11-13 08:33:17.992 00:00:00.000 UDP 28.104.0.1:42469 -> 198.28.0.2:53 1 64 1 2025-11-13 08:33:18.004 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34665 1 109 1 2025-11-13 08:33:18.004 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42469 1 80 1 2025-11-13 08:34:18.278 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48462 1 80 1 2025-11-13 08:34:18.278 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58354 1 109 1 2025-11-13 08:34:18.267 00:00:00.000 UDP 28.104.0.1:58354 -> 198.28.0.2:53 1 64 1 2025-11-13 08:34:18.267 00:00:00.000 UDP 28.104.0.1:48462 -> 198.28.0.2:53 1 64 1 2025-11-13 08:30:44.274 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2424 1 2025-11-13 08:30:05.803 00:05:51.242 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-13 08:30:56.993 00:05:08.779 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-13 08:35:18.625 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60524 1 109 1 2025-11-13 08:35:18.625 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42885 1 80 1 2025-11-13 08:35:18.614 00:00:00.000 UDP 28.104.0.1:60524 -> 198.28.0.2:53 1 64 1 2025-11-13 08:35:18.614 00:00:00.000 UDP 28.104.0.1:42885 -> 198.28.0.2:53 1 64 1 2025-11-13 08:31:56.993 00:05:08.821 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-13 08:31:57.004 00:05:08.758 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-13 08:36:18.918 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43719 1 80 1 2025-11-13 08:36:18.917 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43995 1 109 1 2025-11-13 08:36:18.906 00:00:00.000 UDP 28.104.0.1:43995 -> 198.28.0.2:53 1 64 1 2025-11-13 08:36:18.907 00:00:00.000 UDP 28.104.0.1:43719 -> 198.28.0.2:53 1 64 1 2025-11-13 08:36:50.308 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-13 08:37:19.209 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33055 1 80 1 2025-11-13 08:37:19.209 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47739 1 109 1 2025-11-13 08:37:19.199 00:00:00.000 UDP 28.104.0.1:33055 -> 198.28.0.2:53 1 64 1 2025-11-13 08:37:19.199 00:00:00.000 UDP 28.104.0.1:47739 -> 198.28.0.2:53 1 64 1 2025-11-13 08:38:19.540 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38353 1 109 1 2025-11-13 08:38:19.540 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47676 1 80 1 2025-11-13 08:38:19.531 00:00:00.000 UDP 28.104.0.1:47676 -> 198.28.0.2:53 1 64 1 2025-11-13 08:38:19.530 00:00:00.000 UDP 28.104.0.1:38353 -> 198.28.0.2:53 1 64 1 2025-11-13 08:34:05.751 00:06:00.164 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-13 08:34:05.751 00:06:00.132 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-13 08:39:19.828 00:00:00.000 UDP 28.104.0.1:57338 -> 198.28.0.2:53 1 64 1 2025-11-13 08:39:19.828 00:00:00.000 UDP 28.104.0.1:59529 -> 198.28.0.2:53 1 64 1 2025-11-13 08:39:19.838 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57338 1 109 1 2025-11-13 08:39:19.838 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59529 1 80 1 2025-11-13 08:36:04.276 00:05:10.889 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2976 1 2025-11-13 08:40:20.128 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53293 1 109 1 2025-11-13 08:40:20.128 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44526 1 80 1 2025-11-13 08:40:20.119 00:00:00.000 UDP 28.104.0.1:53293 -> 198.28.0.2:53 1 64 1 2025-11-13 08:40:20.119 00:00:00.000 UDP 28.104.0.1:44526 -> 198.28.0.2:53 1 64 1 2025-11-13 08:36:05.803 00:05:51.243 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-13 08:36:56.994 00:05:08.779 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-13 08:41:20.391 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52406 1 80 1 2025-11-13 08:41:20.391 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42413 1 109 1 2025-11-13 08:41:20.382 00:00:00.000 UDP 28.104.0.1:42413 -> 198.28.0.2:53 1 64 1 2025-11-13 08:41:20.382 00:00:00.000 UDP 28.104.0.1:52406 -> 198.28.0.2:53 1 64 1 2025-11-13 08:41:50.135 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-13 08:37:57.005 00:05:08.758 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-13 08:37:56.994 00:05:08.820 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-13 08:42:20.678 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44208 1 109 1 2025-11-13 08:42:20.678 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33579 1 80 1 2025-11-13 08:42:20.668 00:00:00.000 UDP 28.104.0.1:33579 -> 198.28.0.2:53 1 64 1 2025-11-13 08:42:20.668 00:00:00.000 UDP 28.104.0.1:44208 -> 198.28.0.2:53 1 64 1 2025-11-13 08:43:20.967 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53945 1 109 1 2025-11-13 08:43:20.967 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60132 1 80 1 2025-11-13 08:43:20.956 00:00:00.000 UDP 28.104.0.1:53945 -> 198.28.0.2:53 1 64 1 2025-11-13 08:43:20.956 00:00:00.000 UDP 28.104.0.1:60132 -> 198.28.0.2:53 1 64 1 2025-11-13 08:44:21.254 00:00:00.000 UDP 28.104.0.1:50228 -> 198.28.0.2:53 1 64 1 2025-11-13 08:44:21.254 00:00:00.000 UDP 28.104.0.1:43587 -> 198.28.0.2:53 1 64 1 2025-11-13 08:44:21.264 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43587 1 80 1 2025-11-13 08:44:21.264 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50228 1 109 1 2025-11-13 08:45:21.524 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40805 1 80 1 2025-11-13 08:45:21.524 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42433 1 109 1 2025-11-13 08:45:21.514 00:00:00.000 UDP 28.104.0.1:40805 -> 198.28.0.2:53 1 64 1 2025-11-13 08:45:21.514 00:00:00.000 UDP 28.104.0.1:42433 -> 198.28.0.2:53 1 64 1 2025-11-13 08:41:24.281 00:05:00.934 OSPF 28.0.2.1:0 -> 224.0.0.5:0 42 2932 1 2025-11-13 08:41:05.763 00:06:00.154 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-13 08:41:05.763 00:06:00.121 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-13 08:46:21.812 00:00:00.000 UDP 28.104.0.1:39133 -> 198.28.0.2:53 1 64 1 2025-11-13 08:46:21.813 00:00:00.000 UDP 28.104.0.1:52396 -> 198.28.0.2:53 1 64 1 2025-11-13 08:46:21.824 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52396 1 109 1 2025-11-13 08:46:21.822 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39133 1 80 1 2025-11-13 08:46:50.664 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-13 08:42:05.803 00:05:51.244 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-13 08:42:56.995 00:05:08.779 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-13 08:47:22.120 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60187 1 80 1 2025-11-13 08:47:22.120 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38483 1 109 1 2025-11-13 08:47:22.112 00:00:00.000 UDP 28.104.0.1:38483 -> 198.28.0.2:53 1 64 1 2025-11-13 08:47:22.112 00:00:00.000 UDP 28.104.0.1:60187 -> 198.28.0.2:53 1 64 1 2025-11-13 08:43:57.008 00:05:08.757 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-13 08:43:56.998 00:05:08.819 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-13 08:48:22.416 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51514 1 109 1 2025-11-13 08:48:22.416 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55016 1 80 1 2025-11-13 08:48:22.406 00:00:00.000 UDP 28.104.0.1:55016 -> 198.28.0.2:53 1 64 1 2025-11-13 08:48:22.406 00:00:00.000 UDP 28.104.0.1:51514 -> 198.28.0.2:53 1 64 1 2025-11-13 08:49:22.728 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48473 1 109 1 2025-11-13 08:49:22.728 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47221 1 80 1 2025-11-13 08:49:22.717 00:00:00.000 UDP 28.104.0.1:47221 -> 198.28.0.2:53 1 64 1 2025-11-13 08:49:22.717 00:00:00.000 UDP 28.104.0.1:48473 -> 198.28.0.2:53 1 64 1 2025-11-13 08:50:23.020 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40052 1 80 1 2025-11-13 08:50:23.022 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52735 1 109 1 2025-11-13 08:50:23.010 00:00:00.000 UDP 28.104.0.1:40052 -> 198.28.0.2:53 1 64 1 2025-11-13 08:50:23.010 00:00:00.000 UDP 28.104.0.1:52735 -> 198.28.0.2:53 1 64 1 2025-11-13 08:46:34.286 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 42 2896 1 2025-11-13 08:51:23.353 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60505 1 109 1 2025-11-13 08:51:23.353 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52176 1 80 1 2025-11-13 08:51:23.343 00:00:00.000 UDP 28.104.0.1:60505 -> 198.28.0.2:53 1 64 1 2025-11-13 08:51:23.343 00:00:00.000 UDP 28.104.0.1:52176 -> 198.28.0.2:53 1 64 1 2025-11-13 08:51:50.447 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-13 08:52:23.634 00:00:00.000 UDP 28.104.0.1:58269 -> 198.28.0.2:53 1 64 1 2025-11-13 08:52:23.634 00:00:00.000 UDP 28.104.0.1:47721 -> 198.28.0.2:53 1 64 1 2025-11-13 08:52:23.646 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47721 1 80 1 2025-11-13 08:52:23.646 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58269 1 109 1 2025-11-13 08:48:56.998 00:05:00.002 TCP 28.151.0.1:179 -> 28.154.0.1:41239 11 686 1 2025-11-13 08:48:05.807 00:05:51.244 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-13 08:48:05.764 00:06:00.156 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-13 08:48:05.764 00:06:00.121 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-13 08:53:23.936 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58434 1 109 1 2025-11-13 08:53:23.936 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48840 1 80 1 2025-11-13 08:53:23.925 00:00:00.000 UDP 28.104.0.1:58434 -> 198.28.0.2:53 1 64 1 2025-11-13 08:53:23.925 00:00:00.000 UDP 28.104.0.1:48840 -> 198.28.0.2:53 1 64 1 2025-11-13 08:49:56.998 00:05:00.002 TCP 28.151.0.1:39145 -> 28.156.0.1:179 11 686 1 2025-11-13 08:49:57.010 00:05:08.755 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-13 08:54:24.244 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38880 1 109 1 2025-11-13 08:54:24.244 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59302 1 80 1 2025-11-13 08:54:24.233 00:00:00.000 UDP 28.104.0.1:59302 -> 198.28.0.2:53 1 64 1 2025-11-13 08:54:24.233 00:00:00.000 UDP 28.104.0.1:38880 -> 198.28.0.2:53 1 64 1 2025-11-13 08:55:24.527 00:00:00.000 UDP 28.104.0.1:60398 -> 198.28.0.2:53 1 64 1 2025-11-13 08:55:24.527 00:00:00.000 UDP 28.104.0.1:58253 -> 198.28.0.2:53 1 64 1 2025-11-13 08:55:24.538 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58253 1 109 1 2025-11-13 08:55:24.538 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60398 1 80 1 2025-11-13 08:51:54.294 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2568 1 2025-11-13 08:56:24.825 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52270 1 80 1 2025-11-13 08:56:24.825 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50696 1 109 1 2025-11-13 08:56:24.815 00:00:00.000 UDP 28.104.0.1:52270 -> 198.28.0.2:53 1 64 1 2025-11-13 08:56:24.815 00:00:00.000 UDP 28.104.0.1:50696 -> 198.28.0.2:53 1 64 1 2025-11-13 08:56:50.453 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-13 08:57:25.071 00:00:00.000 UDP 28.104.0.1:41032 -> 198.28.0.2:53 1 64 1 2025-11-13 08:57:25.071 00:00:00.000 UDP 28.104.0.1:59948 -> 198.28.0.2:53 1 64 1 2025-11-13 08:57:25.083 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41032 1 109 1 2025-11-13 08:57:25.083 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59948 1 80 1 2025-11-13 08:58:25.406 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44514 1 80 1 2025-11-13 08:58:25.406 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53252 1 109 1 2025-11-13 08:58:25.396 00:00:00.000 UDP 28.104.0.1:53252 -> 198.28.0.2:53 1 64 1 2025-11-13 08:58:25.395 00:00:00.000 UDP 28.104.0.1:44514 -> 198.28.0.2:53 1 64 1 Summary: total flows: 319, total bytes: 95156, total packets: 1402, avg bps: 197, avg pps: 0, avg bpp: 67 Time window: 2025-11-13 07:54:05 - 2025-11-13 08:58:25 Total flows processed: 319, passed: 319, Blocks skipped: 0, Bytes read: 33240 Sys: 0.0055s User: 0.0028s Wall: 0.0032s flows/second: 98215.0 Runtime: 0.0033s