Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-15 19:54:07.426 00:05:50.741 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-15 19:54:07.295 00:06:00.196 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-15 19:54:07.295 00:06:00.001 TCP 28.154.0.1:179 -> 28.155.0.1:36643 7 497 1 2025-11-15 19:59:38.071 00:00:00.000 UDP 28.104.0.1:49061 -> 198.28.0.2:53 1 64 1 2025-11-15 19:59:38.071 00:00:00.000 UDP 28.104.0.1:59433 -> 198.28.0.2:53 1 64 1 2025-11-15 19:59:38.081 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49061 1 109 1 2025-11-15 19:59:38.081 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59433 1 80 1 2025-11-15 19:55:07.296 00:05:50.881 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-15 20:00:38.558 00:00:00.000 UDP 28.104.0.1:45445 -> 198.28.0.2:53 1 64 1 2025-11-15 20:00:38.558 00:00:00.000 UDP 28.104.0.1:50332 -> 198.28.0.2:53 1 64 1 2025-11-15 20:00:38.568 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50332 1 80 1 2025-11-15 20:00:38.568 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45445 1 109 1 2025-11-15 20:01:38.864 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60009 1 80 1 2025-11-15 20:01:38.864 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41526 1 109 1 2025-11-15 20:01:38.855 00:00:00.000 UDP 28.104.0.1:41526 -> 198.28.0.2:53 1 64 1 2025-11-15 20:01:38.855 00:00:00.000 UDP 28.104.0.1:60009 -> 198.28.0.2:53 1 64 1 2025-11-15 20:02:39.168 00:00:00.000 UDP 28.104.0.1:35441 -> 198.28.0.2:53 1 64 1 2025-11-15 20:02:39.168 00:00:00.000 UDP 28.104.0.1:57187 -> 198.28.0.2:53 1 64 1 2025-11-15 20:02:39.177 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35441 1 109 1 2025-11-15 20:02:39.177 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57187 1 80 1 2025-11-15 20:03:01.610 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-15 20:03:39.474 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38517 1 109 1 2025-11-15 20:03:39.474 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52541 1 80 1 2025-11-15 20:03:39.463 00:00:00.000 UDP 28.104.0.1:52541 -> 198.28.0.2:53 1 64 1 2025-11-15 20:03:39.464 00:00:00.000 UDP 28.104.0.1:38517 -> 198.28.0.2:53 1 64 1 2025-11-15 19:59:07.307 00:05:50.861 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-15 19:59:58.217 00:05:09.203 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-15 19:59:59.244 00:05:10.000 OSPF 28.0.2.1:0 -> 224.0.0.5:0 33 2240 1 2025-11-15 20:04:39.970 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47516 1 80 1 2025-11-15 20:04:39.970 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57891 1 109 1 2025-11-15 20:04:39.959 00:00:00.000 UDP 28.104.0.1:47516 -> 198.28.0.2:53 1 64 1 2025-11-15 20:04:39.959 00:00:00.000 UDP 28.104.0.1:57891 -> 198.28.0.2:53 1 64 1 2025-11-15 20:00:07.429 00:05:50.739 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-15 20:05:40.258 00:00:00.000 UDP 28.104.0.1:52726 -> 198.28.0.2:53 1 64 1 2025-11-15 20:05:40.258 00:00:00.000 UDP 28.104.0.1:57206 -> 198.28.0.2:53 1 64 1 2025-11-15 20:05:40.267 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57206 1 109 1 2025-11-15 20:05:40.267 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52726 1 80 1 2025-11-15 20:01:07.298 00:05:50.880 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-15 20:01:07.298 00:06:00.196 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-15 20:01:07.298 00:06:00.000 TCP 28.154.0.1:179 -> 28.155.0.1:36643 7 497 1 2025-11-15 20:06:40.551 00:00:00.000 UDP 28.104.0.1:35343 -> 198.28.0.2:53 1 64 1 2025-11-15 20:06:40.551 00:00:00.000 UDP 28.104.0.1:37753 -> 198.28.0.2:53 1 64 1 2025-11-15 20:06:40.561 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35343 1 80 1 2025-11-15 20:06:40.561 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37753 1 109 1 2025-11-15 20:07:40.871 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34804 1 80 1 2025-11-15 20:07:40.871 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45753 1 109 1 2025-11-15 20:07:40.860 00:00:00.000 UDP 28.104.0.1:45753 -> 198.28.0.2:53 1 64 1 2025-11-15 20:07:40.860 00:00:00.000 UDP 28.104.0.1:34804 -> 198.28.0.2:53 1 64 1 2025-11-15 20:08:02.296 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-15 20:08:41.144 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45244 1 80 1 2025-11-15 20:08:41.144 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38512 1 109 1 2025-11-15 20:08:41.132 00:00:00.000 UDP 28.104.0.1:45244 -> 198.28.0.2:53 1 64 1 2025-11-15 20:08:41.132 00:00:00.000 UDP 28.104.0.1:38512 -> 198.28.0.2:53 1 64 1 2025-11-15 20:05:19.243 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2564 1 2025-11-15 20:09:41.384 00:00:00.000 UDP 28.104.0.1:34022 -> 198.28.0.2:53 1 64 1 2025-11-15 20:09:41.384 00:00:00.000 UDP 28.104.0.1:41607 -> 198.28.0.2:53 1 64 1 2025-11-15 20:09:41.394 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34022 1 80 1 2025-11-15 20:09:41.395 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41607 1 109 1 2025-11-15 20:05:07.308 00:05:50.861 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-15 20:05:58.217 00:05:09.203 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-15 20:10:41.674 00:00:00.000 UDP 28.104.0.1:48155 -> 198.28.0.2:53 1 64 1 2025-11-15 20:10:41.674 00:00:00.000 UDP 28.104.0.1:58004 -> 198.28.0.2:53 1 64 1 2025-11-15 20:10:41.685 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48155 1 109 1 2025-11-15 20:10:41.685 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58004 1 80 1 2025-11-15 20:06:07.431 00:05:50.740 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-15 20:11:42.003 00:00:00.000 UDP 28.104.0.1:34403 -> 198.28.0.2:53 1 64 1 2025-11-15 20:11:42.003 00:00:00.000 UDP 28.104.0.1:57849 -> 198.28.0.2:53 1 64 1 2025-11-15 20:11:42.013 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57849 1 109 1 2025-11-15 20:11:42.013 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34403 1 80 1 2025-11-15 20:07:07.298 00:05:50.883 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-15 20:12:46.681 00:00:00.000 UDP 28.104.0.1:35332 -> 198.28.0.2:53 1 64 1 2025-11-15 20:12:46.681 00:00:00.000 UDP 28.104.0.1:60180 -> 198.28.0.2:53 1 64 1 2025-11-15 20:12:46.691 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35332 1 80 1 2025-11-15 20:12:46.691 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60180 1 109 1 2025-11-15 20:13:02.254 00:00:00.035 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-15 20:08:07.298 00:06:00.197 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-15 20:08:07.298 00:06:00.002 TCP 28.154.0.1:179 -> 28.155.0.1:36643 7 497 1 2025-11-15 20:13:46.984 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50623 1 109 1 2025-11-15 20:13:46.985 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58650 1 80 1 2025-11-15 20:13:46.974 00:00:00.000 UDP 28.104.0.1:58650 -> 198.28.0.2:53 1 64 1 2025-11-15 20:13:46.974 00:00:00.000 UDP 28.104.0.1:50623 -> 198.28.0.2:53 1 64 1 2025-11-15 20:10:39.250 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 44 3188 1 2025-11-15 20:14:47.295 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37975 1 109 1 2025-11-15 20:14:47.295 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50476 1 80 1 2025-11-15 20:14:47.286 00:00:00.000 UDP 28.104.0.1:50476 -> 198.28.0.2:53 1 64 1 2025-11-15 20:14:47.286 00:00:00.000 UDP 28.104.0.1:37975 -> 198.28.0.2:53 1 64 1 2025-11-15 20:15:47.590 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33180 1 109 1 2025-11-15 20:15:47.590 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48366 1 80 1 2025-11-15 20:15:47.579 00:00:00.000 UDP 28.104.0.1:33180 -> 198.28.0.2:53 1 64 1 2025-11-15 20:15:47.579 00:00:00.000 UDP 28.104.0.1:48366 -> 198.28.0.2:53 1 64 1 2025-11-15 20:11:07.309 00:05:50.865 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-15 20:11:58.220 00:05:09.202 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-15 20:16:47.876 00:00:00.000 UDP 28.104.0.1:58191 -> 198.28.0.2:53 1 64 1 2025-11-15 20:16:47.876 00:00:00.000 UDP 28.104.0.1:59297 -> 198.28.0.2:53 1 64 1 2025-11-15 20:16:47.885 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58191 1 109 1 2025-11-15 20:16:47.885 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59297 1 80 1 2025-11-15 20:12:07.431 00:05:50.742 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-15 20:17:48.152 00:00:00.000 UDP 28.104.0.1:54865 -> 198.28.0.2:53 1 64 1 2025-11-15 20:17:48.152 00:00:00.000 UDP 28.104.0.1:60196 -> 198.28.0.2:53 1 64 1 2025-11-15 20:17:48.164 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54865 1 80 1 2025-11-15 20:17:48.164 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60196 1 109 1 2025-11-15 20:13:07.299 00:05:50.884 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-15 20:18:02.171 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-15 20:18:48.454 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44308 1 80 1 2025-11-15 20:18:48.454 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43865 1 109 1 2025-11-15 20:18:48.445 00:00:00.000 UDP 28.104.0.1:43865 -> 198.28.0.2:53 1 64 1 2025-11-15 20:18:48.444 00:00:00.000 UDP 28.104.0.1:44308 -> 198.28.0.2:53 1 64 1 2025-11-15 20:19:48.731 00:00:00.000 UDP 28.104.0.1:48923 -> 198.28.0.2:53 1 64 1 2025-11-15 20:19:48.731 00:00:00.000 UDP 28.104.0.1:55093 -> 198.28.0.2:53 1 64 1 2025-11-15 20:19:48.741 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55093 1 109 1 2025-11-15 20:19:48.741 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48923 1 80 1 2025-11-15 20:15:07.300 00:06:00.196 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-15 20:15:07.300 00:06:00.007 TCP 28.154.0.1:179 -> 28.155.0.1:36643 7 497 1 2025-11-15 20:15:59.256 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 44 3080 1 2025-11-15 20:20:49.057 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38716 1 80 1 2025-11-15 20:20:49.057 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33320 1 109 1 2025-11-15 20:20:49.048 00:00:00.000 UDP 28.104.0.1:38716 -> 198.28.0.2:53 1 64 1 2025-11-15 20:20:49.048 00:00:00.000 UDP 28.104.0.1:33320 -> 198.28.0.2:53 1 64 1 2025-11-15 20:21:49.345 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49747 1 109 1 2025-11-15 20:21:49.345 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50593 1 80 1 2025-11-15 20:21:49.335 00:00:00.000 UDP 28.104.0.1:50593 -> 198.28.0.2:53 1 64 1 2025-11-15 20:21:49.335 00:00:00.000 UDP 28.104.0.1:49747 -> 198.28.0.2:53 1 64 1 2025-11-15 20:17:07.313 00:05:50.863 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-15 20:17:58.223 00:05:09.214 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-15 20:22:49.634 00:00:00.000 UDP 28.104.0.1:44590 -> 198.28.0.2:53 1 64 1 2025-11-15 20:22:49.634 00:00:00.000 UDP 28.104.0.1:40409 -> 198.28.0.2:53 1 64 1 2025-11-15 20:22:49.644 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44590 1 109 1 2025-11-15 20:22:49.644 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40409 1 80 1 2025-11-15 20:18:07.448 00:05:50.729 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-15 20:23:02.149 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-15 20:23:50.764 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44676 1 80 1 2025-11-15 20:23:50.764 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57936 1 109 1 2025-11-15 20:23:50.752 00:00:00.000 UDP 28.104.0.1:57936 -> 198.28.0.2:53 1 64 1 2025-11-15 20:23:50.752 00:00:00.000 UDP 28.104.0.1:44676 -> 198.28.0.2:53 1 64 1 2025-11-15 20:19:07.304 00:05:50.882 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-15 20:24:51.010 00:00:00.000 UDP 28.104.0.1:34265 -> 198.28.0.2:53 1 64 1 2025-11-15 20:24:51.010 00:00:00.000 UDP 28.104.0.1:36526 -> 198.28.0.2:53 1 64 1 2025-11-15 20:24:51.020 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34265 1 80 1 2025-11-15 20:24:51.025 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36526 1 109 1 2025-11-15 20:21:19.259 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2528 1 2025-11-15 20:25:51.317 00:00:00.000 UDP 28.104.0.1:48610 -> 198.28.0.2:53 1 64 1 2025-11-15 20:25:51.317 00:00:00.000 UDP 28.104.0.1:35618 -> 198.28.0.2:53 1 64 1 2025-11-15 20:25:51.327 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35618 1 109 1 2025-11-15 20:25:51.327 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48610 1 80 1 2025-11-15 20:26:51.627 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37400 1 80 1 2025-11-15 20:26:51.623 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47661 1 109 1 2025-11-15 20:26:51.613 00:00:00.000 UDP 28.104.0.1:37400 -> 198.28.0.2:53 1 64 1 2025-11-15 20:26:51.613 00:00:00.000 UDP 28.104.0.1:47661 -> 198.28.0.2:53 1 64 1 2025-11-15 20:22:07.306 00:06:00.191 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-15 20:22:07.306 00:06:00.003 TCP 28.154.0.1:179 -> 28.155.0.1:36643 7 497 1 2025-11-15 20:27:51.980 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33208 1 109 1 2025-11-15 20:27:51.980 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47813 1 80 1 2025-11-15 20:27:51.972 00:00:00.000 UDP 28.104.0.1:33208 -> 198.28.0.2:53 1 64 1 2025-11-15 20:27:51.972 00:00:00.000 UDP 28.104.0.1:47813 -> 198.28.0.2:53 1 64 1 2025-11-15 20:23:07.316 00:05:50.863 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-15 20:28:02.297 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-15 20:23:58.227 00:05:09.212 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-15 20:28:52.269 00:00:00.000 UDP 28.104.0.1:53613 -> 198.28.0.2:53 1 64 1 2025-11-15 20:28:52.269 00:00:00.000 UDP 28.104.0.1:37712 -> 198.28.0.2:53 1 64 1 2025-11-15 20:28:52.279 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37712 1 80 1 2025-11-15 20:28:52.279 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53613 1 109 1 2025-11-15 20:24:07.448 00:05:50.732 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-15 20:29:52.573 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53081 1 80 1 2025-11-15 20:29:52.573 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42898 1 109 1 2025-11-15 20:29:52.564 00:00:00.000 UDP 28.104.0.1:53081 -> 198.28.0.2:53 1 64 1 2025-11-15 20:29:52.564 00:00:00.000 UDP 28.104.0.1:42898 -> 198.28.0.2:53 1 64 1 2025-11-15 20:25:07.307 00:05:50.882 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-15 20:26:39.265 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2424 1 2025-11-15 20:30:52.877 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43383 1 80 1 2025-11-15 20:30:52.877 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53480 1 109 1 2025-11-15 20:30:52.867 00:00:00.000 UDP 28.104.0.1:43383 -> 198.28.0.2:53 1 64 1 2025-11-15 20:30:52.867 00:00:00.000 UDP 28.104.0.1:53480 -> 198.28.0.2:53 1 64 1 2025-11-15 20:31:53.199 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59512 1 80 1 2025-11-15 20:31:53.199 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53463 1 109 1 2025-11-15 20:31:53.189 00:00:00.000 UDP 28.104.0.1:53463 -> 198.28.0.2:53 1 64 1 2025-11-15 20:31:53.189 00:00:00.000 UDP 28.104.0.1:59512 -> 198.28.0.2:53 1 64 1 2025-11-15 20:32:53.506 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54732 1 80 1 2025-11-15 20:32:53.506 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58443 1 109 1 2025-11-15 20:32:53.495 00:00:00.000 UDP 28.104.0.1:54732 -> 198.28.0.2:53 1 64 1 2025-11-15 20:32:53.495 00:00:00.000 UDP 28.104.0.1:58443 -> 198.28.0.2:53 1 64 1 2025-11-15 20:33:02.227 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-15 20:33:53.810 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41736 1 80 1 2025-11-15 20:33:53.810 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40428 1 109 1 2025-11-15 20:33:53.800 00:00:00.000 UDP 28.104.0.1:40428 -> 198.28.0.2:53 1 64 1 2025-11-15 20:33:53.800 00:00:00.000 UDP 28.104.0.1:41736 -> 198.28.0.2:53 1 64 1 2025-11-15 20:29:07.320 00:05:50.860 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-15 20:29:58.229 00:05:09.211 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-15 20:29:07.309 00:06:00.189 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-15 20:29:07.309 00:06:00.003 TCP 28.154.0.1:179 -> 28.155.0.1:36643 7 497 1 2025-11-15 20:34:54.086 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48380 1 80 1 2025-11-15 20:34:54.086 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48510 1 109 1 2025-11-15 20:34:54.077 00:00:00.000 UDP 28.104.0.1:48510 -> 198.28.0.2:53 1 64 1 2025-11-15 20:34:54.077 00:00:00.000 UDP 28.104.0.1:48380 -> 198.28.0.2:53 1 64 1 2025-11-15 20:30:07.450 00:05:50.731 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-15 20:35:54.377 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54245 1 80 1 2025-11-15 20:35:54.377 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55617 1 109 1 2025-11-15 20:35:54.366 00:00:00.000 UDP 28.104.0.1:54245 -> 198.28.0.2:53 1 64 1 2025-11-15 20:35:54.367 00:00:00.000 UDP 28.104.0.1:55617 -> 198.28.0.2:53 1 64 1 2025-11-15 20:31:07.312 00:05:50.879 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-15 20:31:59.269 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 32 2176 1 2025-11-15 20:36:58.793 00:00:00.000 UDP 28.104.0.1:34093 -> 198.28.0.2:53 1 64 1 2025-11-15 20:36:58.793 00:00:00.000 UDP 28.104.0.1:46766 -> 198.28.0.2:53 1 64 1 2025-11-15 20:36:58.804 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46766 1 80 1 2025-11-15 20:36:58.804 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34093 1 109 1 2025-11-15 20:37:59.101 00:00:00.000 UDP 28.104.0.1:60905 -> 198.28.0.2:53 1 64 1 2025-11-15 20:37:59.101 00:00:00.000 UDP 28.104.0.1:47790 -> 198.28.0.2:53 1 64 1 2025-11-15 20:37:59.110 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47790 1 80 1 2025-11-15 20:37:59.110 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60905 1 109 1 2025-11-15 20:38:02.525 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-15 20:38:59.394 00:00:00.000 UDP 28.104.0.1:44205 -> 198.28.0.2:53 1 64 1 2025-11-15 20:38:59.393 00:00:00.000 UDP 28.104.0.1:40469 -> 198.28.0.2:53 1 64 1 2025-11-15 20:38:59.405 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40469 1 109 1 2025-11-15 20:38:59.405 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44205 1 80 1 2025-11-15 20:39:59.696 00:00:00.000 UDP 28.104.0.1:51899 -> 198.28.0.2:53 1 64 1 2025-11-15 20:39:59.696 00:00:00.000 UDP 28.104.0.1:46460 -> 198.28.0.2:53 1 64 1 2025-11-15 20:39:59.706 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51899 1 80 1 2025-11-15 20:39:59.708 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46460 1 109 1 2025-11-15 20:35:07.322 00:05:50.860 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-15 20:35:58.229 00:05:09.213 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-15 20:36:07.451 00:05:50.731 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-15 20:40:59.968 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37049 1 80 1 2025-11-15 20:40:59.968 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49925 1 109 1 2025-11-15 20:40:59.957 00:00:00.000 UDP 28.104.0.1:49925 -> 198.28.0.2:53 1 64 1 2025-11-15 20:40:59.957 00:00:00.000 UDP 28.104.0.1:37049 -> 198.28.0.2:53 1 64 1 2025-11-15 20:36:07.312 00:06:00.188 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-15 20:36:07.312 00:06:00.004 TCP 28.154.0.1:179 -> 28.155.0.1:36643 7 497 1 2025-11-15 20:37:19.274 00:05:10.002 OSPF 28.0.2.1:0 -> 224.0.0.5:0 43 3288 1 2025-11-15 20:42:00.265 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60615 1 80 1 2025-11-15 20:42:00.265 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52595 1 109 1 2025-11-15 20:42:00.257 00:00:00.000 UDP 28.104.0.1:52595 -> 198.28.0.2:53 1 64 1 2025-11-15 20:42:00.257 00:00:00.000 UDP 28.104.0.1:60615 -> 198.28.0.2:53 1 64 1 2025-11-15 20:37:07.314 00:05:50.880 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-15 20:43:00.546 00:00:00.000 UDP 28.104.0.1:58353 -> 198.28.0.2:53 1 64 1 2025-11-15 20:43:00.546 00:00:00.000 UDP 28.104.0.1:51276 -> 198.28.0.2:53 1 64 1 2025-11-15 20:43:00.557 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51276 1 109 1 2025-11-15 20:43:00.557 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58353 1 80 1 2025-11-15 20:43:02.903 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-15 20:44:00.800 00:00:00.000 UDP 28.104.0.1:53882 -> 198.28.0.2:53 1 64 1 2025-11-15 20:44:00.800 00:00:00.000 UDP 28.104.0.1:57243 -> 198.28.0.2:53 1 64 1 2025-11-15 20:44:00.812 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57243 1 109 1 2025-11-15 20:44:00.812 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53882 1 80 1 2025-11-15 20:45:01.122 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54832 1 109 1 2025-11-15 20:45:01.123 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49510 1 80 1 2025-11-15 20:45:01.111 00:00:00.000 UDP 28.104.0.1:49510 -> 198.28.0.2:53 1 64 1 2025-11-15 20:45:01.111 00:00:00.000 UDP 28.104.0.1:54832 -> 198.28.0.2:53 1 64 1 2025-11-15 20:41:07.325 00:05:50.858 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-15 20:46:01.427 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59441 1 109 1 2025-11-15 20:46:01.427 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47524 1 80 1 2025-11-15 20:46:01.417 00:00:00.000 UDP 28.104.0.1:47524 -> 198.28.0.2:53 1 64 1 2025-11-15 20:46:01.417 00:00:00.000 UDP 28.104.0.1:59441 -> 198.28.0.2:53 1 64 1 2025-11-15 20:41:58.231 00:05:09.211 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-15 20:42:39.277 00:05:10.822 OSPF 28.0.2.1:0 -> 224.0.0.5:0 43 3016 1 2025-11-15 20:47:01.728 00:00:00.000 UDP 28.104.0.1:44851 -> 198.28.0.2:53 1 64 1 2025-11-15 20:47:01.728 00:00:00.000 UDP 28.104.0.1:47000 -> 198.28.0.2:53 1 64 1 2025-11-15 20:47:01.739 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44851 1 80 1 2025-11-15 20:42:07.453 00:05:50.730 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-15 20:47:01.739 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47000 1 109 1 2025-11-15 20:43:07.316 00:05:50.878 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-15 20:48:02.967 00:00:00.000 UDP 28.104.0.1:49474 -> 198.28.0.2:53 1 64 1 2025-11-15 20:48:02.967 00:00:00.000 UDP 28.104.0.1:33267 -> 198.28.0.2:53 1 64 1 2025-11-15 20:48:02.748 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-15 20:48:02.977 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33267 1 80 1 2025-11-15 20:48:02.977 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49474 1 109 1 2025-11-15 20:43:07.316 00:06:00.186 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-15 20:43:07.316 00:06:00.001 TCP 28.154.0.1:179 -> 28.155.0.1:36643 7 497 1 2025-11-15 20:49:03.262 00:00:00.000 UDP 28.104.0.1:57558 -> 198.28.0.2:53 1 64 1 2025-11-15 20:49:03.262 00:00:00.000 UDP 28.104.0.1:55628 -> 198.28.0.2:53 1 64 1 2025-11-15 20:49:03.273 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57558 1 80 1 2025-11-15 20:49:03.273 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55628 1 109 1 2025-11-15 20:50:03.585 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39829 1 109 1 2025-11-15 20:50:03.585 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57187 1 80 1 2025-11-15 20:50:03.574 00:00:00.000 UDP 28.104.0.1:57187 -> 198.28.0.2:53 1 64 1 2025-11-15 20:50:03.574 00:00:00.000 UDP 28.104.0.1:39829 -> 198.28.0.2:53 1 64 1 2025-11-15 20:51:03.841 00:00:00.000 UDP 28.104.0.1:60795 -> 198.28.0.2:53 1 64 1 2025-11-15 20:51:03.841 00:00:00.000 UDP 28.104.0.1:58860 -> 198.28.0.2:53 1 64 1 2025-11-15 20:51:03.852 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60795 1 80 1 2025-11-15 20:51:03.854 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58860 1 109 1 2025-11-15 20:52:04.146 00:00:00.000 UDP 28.104.0.1:45879 -> 198.28.0.2:53 1 64 1 2025-11-15 20:52:04.146 00:00:00.000 UDP 28.104.0.1:45724 -> 198.28.0.2:53 1 64 1 2025-11-15 20:47:07.328 00:05:50.860 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-15 20:52:04.157 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45879 1 109 1 2025-11-15 20:52:04.157 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45724 1 80 1 2025-11-15 20:47:58.233 00:05:09.212 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-15 20:47:59.282 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2724 1 2025-11-15 20:48:07.455 00:05:50.733 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-15 20:53:04.547 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40581 1 80 1 2025-11-15 20:53:02.556 00:00:00.032 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-15 20:53:04.547 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54319 1 109 1 2025-11-15 20:53:04.536 00:00:00.000 UDP 28.104.0.1:40581 -> 198.28.0.2:53 1 64 1 2025-11-15 20:53:04.536 00:00:00.000 UDP 28.104.0.1:54319 -> 198.28.0.2:53 1 64 1 2025-11-15 20:49:07.317 00:05:50.879 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-15 20:54:04.841 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47292 1 80 1 2025-11-15 20:54:04.841 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51279 1 109 1 2025-11-15 20:54:04.829 00:00:00.000 UDP 28.104.0.1:47292 -> 198.28.0.2:53 1 64 1 2025-11-15 20:54:04.830 00:00:00.000 UDP 28.104.0.1:51279 -> 198.28.0.2:53 1 64 1 2025-11-15 20:55:05.141 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52949 1 80 1 2025-11-15 20:55:05.141 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51307 1 109 1 2025-11-15 20:55:05.133 00:00:00.000 UDP 28.104.0.1:51307 -> 198.28.0.2:53 1 64 1 2025-11-15 20:55:05.133 00:00:00.000 UDP 28.104.0.1:52949 -> 198.28.0.2:53 1 64 1 2025-11-15 20:50:07.320 00:06:00.185 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-15 20:50:07.320 00:06:00.013 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-15 20:56:05.425 00:00:00.000 UDP 28.104.0.1:52045 -> 198.28.0.2:53 1 64 1 2025-11-15 20:56:05.425 00:00:00.000 UDP 28.104.0.1:59792 -> 198.28.0.2:53 1 64 1 2025-11-15 20:56:05.437 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52045 1 109 1 2025-11-15 20:56:05.437 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59792 1 80 1 2025-11-15 20:57:05.719 00:00:00.000 UDP 28.104.0.1:50446 -> 198.28.0.2:53 1 64 1 2025-11-15 20:57:05.720 00:00:00.000 UDP 28.104.0.1:56034 -> 198.28.0.2:53 1 64 1 2025-11-15 20:57:05.730 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56034 1 80 1 2025-11-15 20:57:05.730 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50446 1 109 1 2025-11-15 20:53:19.289 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2584 1 2025-11-15 20:53:07.330 00:05:50.857 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-15 20:58:02.778 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-15 20:58:06.084 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35252 1 109 1 2025-11-15 20:58:06.084 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44628 1 80 1 2025-11-15 20:58:06.075 00:00:00.000 UDP 28.104.0.1:35252 -> 198.28.0.2:53 1 64 1 2025-11-15 20:58:06.075 00:00:00.000 UDP 28.104.0.1:44628 -> 198.28.0.2:53 1 64 1 2025-11-15 20:53:58.237 00:05:09.214 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 Summary: total flows: 317, total bytes: 93645, total packets: 1370, avg bps: 192, avg pps: 0, avg bpp: 68 Time window: 2025-11-15 19:54:07 - 2025-11-15 20:59:07 Total flows processed: 317, passed: 317, Blocks skipped: 0, Bytes read: 33032 Sys: 0.0040s User: 0.0030s Wall: 0.0055s flows/second: 57553.2 Runtime: 0.0055s