Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-16 17:54:08.015 00:05:50.608 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-16 17:59:22.485 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40583 1 109 1 2025-11-16 17:59:22.485 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53273 1 80 1 2025-11-16 17:59:22.475 00:00:00.000 UDP 28.104.0.1:53273 -> 198.28.0.2:53 1 64 1 2025-11-16 17:59:22.475 00:00:00.000 UDP 28.104.0.1:40583 -> 198.28.0.2:53 1 64 1 2025-11-16 17:55:07.680 00:05:50.954 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-16 18:00:22.767 00:00:00.000 UDP 28.104.0.1:34167 -> 198.28.0.2:53 1 64 1 2025-11-16 18:00:22.767 00:00:00.000 UDP 28.104.0.1:59999 -> 198.28.0.2:53 1 64 1 2025-11-16 18:00:22.778 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59999 1 109 1 2025-11-16 18:00:22.777 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34167 1 80 1 2025-11-16 17:57:07.680 00:05:00.433 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-16 18:01:23.075 00:00:00.000 UDP 28.104.0.1:35150 -> 198.28.0.2:53 1 64 1 2025-11-16 18:01:23.074 00:00:00.000 UDP 28.104.0.1:57592 -> 198.28.0.2:53 1 64 1 2025-11-16 18:01:23.085 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35150 1 80 1 2025-11-16 18:01:23.085 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57592 1 109 1 2025-11-16 17:57:07.682 00:06:00.083 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-16 18:02:23.373 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33349 1 80 1 2025-11-16 18:02:23.372 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35254 1 109 1 2025-11-16 18:02:23.361 00:00:00.000 UDP 28.104.0.1:35254 -> 198.28.0.2:53 1 64 1 2025-11-16 18:02:23.361 00:00:00.000 UDP 28.104.0.1:33349 -> 198.28.0.2:53 1 64 1 2025-11-16 18:03:23.665 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34262 1 109 1 2025-11-16 18:03:23.665 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42614 1 80 1 2025-11-16 18:03:23.655 00:00:00.000 UDP 28.104.0.1:34262 -> 198.28.0.2:53 1 64 1 2025-11-16 18:03:23.655 00:00:00.000 UDP 28.104.0.1:42614 -> 198.28.0.2:53 1 64 1 2025-11-16 18:03:28.225 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-16 17:59:40.976 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 33 2380 1 2025-11-16 17:59:07.691 00:05:50.932 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-16 17:59:58.672 00:05:09.335 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-16 18:04:23.948 00:00:00.000 UDP 28.104.0.1:47001 -> 198.28.0.2:53 1 64 1 2025-11-16 18:04:23.947 00:00:00.000 UDP 28.104.0.1:60753 -> 198.28.0.2:53 1 64 1 2025-11-16 18:04:23.958 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47001 1 80 1 2025-11-16 18:04:23.958 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60753 1 109 1 2025-11-16 18:00:08.016 00:05:50.609 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-16 18:05:24.243 00:00:00.000 UDP 28.104.0.1:57720 -> 198.28.0.2:53 1 64 1 2025-11-16 18:05:24.243 00:00:00.000 UDP 28.104.0.1:40396 -> 198.28.0.2:53 1 64 1 2025-11-16 18:05:24.254 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40396 1 109 1 2025-11-16 18:05:24.253 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57720 1 80 1 2025-11-16 18:01:07.681 00:05:50.953 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-16 18:06:24.513 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38765 1 80 1 2025-11-16 18:06:24.513 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48906 1 109 1 2025-11-16 18:06:24.503 00:00:00.000 UDP 28.104.0.1:38765 -> 198.28.0.2:53 1 64 1 2025-11-16 18:06:24.503 00:00:00.000 UDP 28.104.0.1:48906 -> 198.28.0.2:53 1 64 1 2025-11-16 18:03:07.683 00:05:00.438 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-16 18:07:24.801 00:00:00.000 UDP 28.104.0.1:55393 -> 198.28.0.2:53 1 64 1 2025-11-16 18:07:24.801 00:00:00.000 UDP 28.104.0.1:39331 -> 198.28.0.2:53 1 64 1 2025-11-16 18:07:24.813 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55393 1 80 1 2025-11-16 18:07:24.813 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39331 1 109 1 2025-11-16 18:08:25.110 00:00:00.000 UDP 28.104.0.1:54626 -> 198.28.0.2:53 1 64 1 2025-11-16 18:08:25.110 00:00:00.000 UDP 28.104.0.1:46629 -> 198.28.0.2:53 1 64 1 2025-11-16 18:08:25.120 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46629 1 80 1 2025-11-16 18:08:25.120 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54626 1 109 1 2025-11-16 18:08:28.524 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-16 18:04:07.685 00:06:00.082 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-16 18:05:00.980 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 44 3228 1 2025-11-16 18:09:25.411 00:00:00.000 UDP 28.104.0.1:38584 -> 198.28.0.2:53 1 64 1 2025-11-16 18:09:25.412 00:00:00.000 UDP 28.104.0.1:44070 -> 198.28.0.2:53 1 64 1 2025-11-16 18:09:25.422 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44070 1 80 1 2025-11-16 18:09:25.422 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38584 1 109 1 2025-11-16 18:05:07.697 00:05:50.928 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-16 18:05:58.675 00:05:09.335 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-16 18:10:25.709 00:00:00.000 UDP 28.104.0.1:58137 -> 198.28.0.2:53 1 64 1 2025-11-16 18:10:25.709 00:00:00.000 UDP 28.104.0.1:37085 -> 198.28.0.2:53 1 64 1 2025-11-16 18:10:25.720 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58137 1 80 1 2025-11-16 18:10:25.720 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37085 1 109 1 2025-11-16 18:06:08.016 00:05:50.610 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-16 18:11:26.031 00:00:00.000 UDP 28.104.0.1:58085 -> 198.28.0.2:53 1 64 1 2025-11-16 18:11:26.031 00:00:00.000 UDP 28.104.0.1:57094 -> 198.28.0.2:53 1 64 1 2025-11-16 18:11:26.043 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57094 1 80 1 2025-11-16 18:11:26.042 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58085 1 109 1 2025-11-16 18:07:07.684 00:05:50.952 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-16 18:12:26.289 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42242 1 80 1 2025-11-16 18:12:26.288 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35244 1 109 1 2025-11-16 18:12:26.278 00:00:00.000 UDP 28.104.0.1:35244 -> 198.28.0.2:53 1 64 1 2025-11-16 18:12:26.278 00:00:00.000 UDP 28.104.0.1:42242 -> 198.28.0.2:53 1 64 1 2025-11-16 18:09:07.687 00:05:00.435 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-16 18:13:26.576 00:00:00.000 UDP 28.104.0.1:49750 -> 198.28.0.2:53 1 64 1 2025-11-16 18:13:26.575 00:00:00.000 UDP 28.104.0.1:36237 -> 198.28.0.2:53 1 64 1 2025-11-16 18:13:26.585 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36237 1 109 1 2025-11-16 18:13:26.585 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49750 1 80 1 2025-11-16 18:13:28.154 00:00:00.049 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-16 18:14:26.866 00:00:00.000 UDP 28.104.0.1:54544 -> 198.28.0.2:53 1 64 1 2025-11-16 18:14:26.865 00:00:00.000 UDP 28.104.0.1:49676 -> 198.28.0.2:53 1 64 1 2025-11-16 18:14:26.877 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49676 1 109 1 2025-11-16 18:14:26.877 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54544 1 80 1 2025-11-16 18:10:20.987 00:05:10.220 OSPF 28.0.2.1:0 -> 224.0.0.5:0 45 3216 1 2025-11-16 18:15:27.173 00:00:00.000 UDP 28.104.0.1:44151 -> 198.28.0.2:53 1 64 1 2025-11-16 18:15:27.173 00:00:00.000 UDP 28.104.0.1:44777 -> 198.28.0.2:53 1 64 1 2025-11-16 18:15:27.184 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44151 1 80 1 2025-11-16 18:15:27.184 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44777 1 109 1 2025-11-16 18:11:07.697 00:05:50.930 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-16 18:11:07.686 00:06:00.083 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-16 18:11:58.677 00:05:09.332 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-16 18:16:27.486 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39029 1 80 1 2025-11-16 18:16:27.487 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59715 1 109 1 2025-11-16 18:16:27.477 00:00:00.000 UDP 28.104.0.1:59715 -> 198.28.0.2:53 1 64 1 2025-11-16 18:16:27.476 00:00:00.000 UDP 28.104.0.1:39029 -> 198.28.0.2:53 1 64 1 2025-11-16 18:12:08.019 00:05:50.607 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-16 18:17:27.770 00:00:00.000 UDP 28.104.0.1:39419 -> 198.28.0.2:53 1 64 1 2025-11-16 18:17:27.770 00:00:00.000 UDP 28.104.0.1:51057 -> 198.28.0.2:53 1 64 1 2025-11-16 18:17:27.780 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51057 1 109 1 2025-11-16 18:17:27.780 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39419 1 80 1 2025-11-16 18:13:07.687 00:05:50.949 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-16 18:18:28.514 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-16 18:18:28.086 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47754 1 80 1 2025-11-16 18:18:28.086 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48976 1 109 1 2025-11-16 18:18:28.075 00:00:00.000 UDP 28.104.0.1:48976 -> 198.28.0.2:53 1 64 1 2025-11-16 18:18:28.075 00:00:00.000 UDP 28.104.0.1:47754 -> 198.28.0.2:53 1 64 1 2025-11-16 18:15:07.686 00:05:00.434 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-16 18:19:28.360 00:00:00.000 UDP 28.104.0.1:53084 -> 198.28.0.2:53 1 64 1 2025-11-16 18:19:28.360 00:00:00.000 UDP 28.104.0.1:43820 -> 198.28.0.2:53 1 64 1 2025-11-16 18:19:28.371 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43820 1 109 1 2025-11-16 18:19:28.371 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53084 1 80 1 2025-11-16 18:15:40.992 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2752 1 2025-11-16 18:20:28.657 00:00:00.000 UDP 28.104.0.1:53190 -> 198.28.0.2:53 1 64 1 2025-11-16 18:20:28.658 00:00:00.000 UDP 28.104.0.1:47646 -> 198.28.0.2:53 1 64 1 2025-11-16 18:20:28.667 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47646 1 80 1 2025-11-16 18:20:28.667 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53190 1 109 1 2025-11-16 18:21:28.966 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55358 1 80 1 2025-11-16 18:21:28.966 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45965 1 109 1 2025-11-16 18:21:28.957 00:00:00.000 UDP 28.104.0.1:45965 -> 198.28.0.2:53 1 64 1 2025-11-16 18:21:28.956 00:00:00.000 UDP 28.104.0.1:55358 -> 198.28.0.2:53 1 64 1 2025-11-16 18:17:07.697 00:05:50.929 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-16 18:17:58.676 00:05:09.333 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-16 18:22:29.310 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45369 1 80 1 2025-11-16 18:22:29.310 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57839 1 109 1 2025-11-16 18:22:29.300 00:00:00.000 UDP 28.104.0.1:45369 -> 198.28.0.2:53 1 64 1 2025-11-16 18:22:29.300 00:00:00.000 UDP 28.104.0.1:57839 -> 198.28.0.2:53 1 64 1 2025-11-16 18:18:08.019 00:05:50.608 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-16 18:18:07.689 00:06:00.084 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-16 18:23:29.552 00:00:00.000 UDP 28.104.0.1:51761 -> 198.28.0.2:53 1 64 1 2025-11-16 18:23:29.552 00:00:00.000 UDP 28.104.0.1:35384 -> 198.28.0.2:53 1 64 1 2025-11-16 18:23:28.500 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-16 18:23:29.563 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35384 1 109 1 2025-11-16 18:23:29.563 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51761 1 80 1 2025-11-16 18:19:07.689 00:05:50.948 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-16 18:24:29.842 00:00:00.000 UDP 28.104.0.1:46963 -> 198.28.0.2:53 1 64 1 2025-11-16 18:24:29.842 00:00:00.000 UDP 28.104.0.1:36602 -> 198.28.0.2:53 1 64 1 2025-11-16 18:24:29.853 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36602 1 109 1 2025-11-16 18:24:29.853 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46963 1 80 1 2025-11-16 18:21:00.996 00:05:00.010 OSPF 28.0.2.1:0 -> 224.0.0.5:0 34 2356 1 2025-11-16 18:21:07.691 00:05:00.445 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-16 18:25:30.147 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53089 1 80 1 2025-11-16 18:25:30.147 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52366 1 109 1 2025-11-16 18:25:30.137 00:00:00.000 UDP 28.104.0.1:53089 -> 198.28.0.2:53 1 64 1 2025-11-16 18:25:30.137 00:00:00.000 UDP 28.104.0.1:52366 -> 198.28.0.2:53 1 64 1 2025-11-16 18:26:30.389 00:00:00.000 UDP 28.104.0.1:55122 -> 198.28.0.2:53 1 64 1 2025-11-16 18:26:30.389 00:00:00.000 UDP 28.104.0.1:49306 -> 198.28.0.2:53 1 64 1 2025-11-16 18:26:30.400 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49306 1 80 1 2025-11-16 18:26:30.400 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55122 1 109 1 2025-11-16 18:27:30.649 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54220 1 109 1 2025-11-16 18:27:30.649 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49794 1 80 1 2025-11-16 18:27:30.639 00:00:00.000 UDP 28.104.0.1:54220 -> 198.28.0.2:53 1 64 1 2025-11-16 18:27:30.639 00:00:00.000 UDP 28.104.0.1:49794 -> 198.28.0.2:53 1 64 1 2025-11-16 18:23:07.701 00:05:50.930 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-16 18:23:58.676 00:05:09.338 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-16 18:28:30.922 00:00:00.000 UDP 28.104.0.1:53032 -> 198.28.0.2:53 1 64 1 2025-11-16 18:28:30.922 00:00:00.000 UDP 28.104.0.1:42629 -> 198.28.0.2:53 1 64 1 2025-11-16 18:28:28.524 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-16 18:28:30.933 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42629 1 109 1 2025-11-16 18:28:30.933 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53032 1 80 1 2025-11-16 18:24:08.021 00:05:50.611 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-16 18:29:31.197 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49045 1 109 1 2025-11-16 18:29:31.197 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40837 1 80 1 2025-11-16 18:29:31.186 00:00:00.000 UDP 28.104.0.1:49045 -> 198.28.0.2:53 1 64 1 2025-11-16 18:29:31.186 00:00:00.000 UDP 28.104.0.1:40837 -> 198.28.0.2:53 1 64 1 2025-11-16 18:25:07.690 00:05:50.951 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-16 18:25:07.690 00:06:00.090 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-16 18:26:11.004 00:05:10.033 OSPF 28.0.2.1:0 -> 224.0.0.5:0 33 2380 1 2025-11-16 18:30:31.480 00:00:00.000 UDP 28.104.0.1:46880 -> 198.28.0.2:53 1 64 1 2025-11-16 18:30:31.480 00:00:00.000 UDP 28.104.0.1:59881 -> 198.28.0.2:53 1 64 1 2025-11-16 18:30:31.490 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46880 1 80 1 2025-11-16 18:30:31.490 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59881 1 109 1 2025-11-16 18:27:07.690 00:05:00.447 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-16 18:31:31.733 00:00:00.000 UDP 28.104.0.1:51552 -> 198.28.0.2:53 1 64 1 2025-11-16 18:31:31.734 00:00:00.000 UDP 28.104.0.1:40009 -> 198.28.0.2:53 1 64 1 2025-11-16 18:31:31.745 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51552 1 109 1 2025-11-16 18:31:31.746 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40009 1 80 1 2025-11-16 18:32:32.048 00:00:00.000 UDP 28.104.0.1:42244 -> 198.28.0.2:53 1 64 1 2025-11-16 18:32:32.048 00:00:00.000 UDP 28.104.0.1:59074 -> 198.28.0.2:53 1 64 1 2025-11-16 18:32:32.058 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59074 1 80 1 2025-11-16 18:32:32.058 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42244 1 109 1 2025-11-16 18:33:28.799 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-16 18:33:32.314 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35770 1 109 1 2025-11-16 18:33:32.314 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39709 1 80 1 2025-11-16 18:33:32.305 00:00:00.000 UDP 28.104.0.1:39709 -> 198.28.0.2:53 1 64 1 2025-11-16 18:33:32.305 00:00:00.000 UDP 28.104.0.1:35770 -> 198.28.0.2:53 1 64 1 2025-11-16 18:29:07.701 00:05:50.929 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-16 18:29:58.680 00:05:09.335 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-16 18:34:32.606 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32889 1 109 1 2025-11-16 18:34:32.606 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45847 1 80 1 2025-11-16 18:34:32.597 00:00:00.000 UDP 28.104.0.1:45847 -> 198.28.0.2:53 1 64 1 2025-11-16 18:34:32.597 00:00:00.000 UDP 28.104.0.1:32889 -> 198.28.0.2:53 1 64 1 2025-11-16 18:30:08.031 00:05:50.600 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-16 18:35:33.534 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39620 1 80 1 2025-11-16 18:35:33.534 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43896 1 109 1 2025-11-16 18:35:33.524 00:00:00.000 UDP 28.104.0.1:39620 -> 198.28.0.2:53 1 64 1 2025-11-16 18:35:33.524 00:00:00.000 UDP 28.104.0.1:43896 -> 198.28.0.2:53 1 64 1 2025-11-16 18:31:31.040 00:05:10.014 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2504 1 2025-11-16 18:31:07.693 00:05:50.950 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-16 18:36:33.830 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38785 1 109 1 2025-11-16 18:36:33.829 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51569 1 80 1 2025-11-16 18:36:33.820 00:00:00.000 UDP 28.104.0.1:51569 -> 198.28.0.2:53 1 64 1 2025-11-16 18:36:33.820 00:00:00.000 UDP 28.104.0.1:38785 -> 198.28.0.2:53 1 64 1 2025-11-16 18:33:07.693 00:05:00.447 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-16 18:32:07.693 00:06:00.093 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-16 18:37:34.160 00:00:00.000 UDP 28.104.0.1:59707 -> 198.28.0.2:53 1 64 1 2025-11-16 18:37:34.160 00:00:00.000 UDP 28.104.0.1:45024 -> 198.28.0.2:53 1 64 1 2025-11-16 18:37:34.171 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59707 1 109 1 2025-11-16 18:37:34.172 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45024 1 80 1 2025-11-16 18:38:34.457 00:00:00.000 UDP 28.104.0.1:54019 -> 198.28.0.2:53 1 64 1 2025-11-16 18:38:34.457 00:00:00.000 UDP 28.104.0.1:41498 -> 198.28.0.2:53 1 64 1 2025-11-16 18:38:28.744 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-16 18:38:34.467 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54019 1 109 1 2025-11-16 18:38:34.468 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41498 1 80 1 2025-11-16 18:39:34.782 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56983 1 109 1 2025-11-16 18:39:34.782 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55526 1 80 1 2025-11-16 18:39:34.772 00:00:00.000 UDP 28.104.0.1:56983 -> 198.28.0.2:53 1 64 1 2025-11-16 18:39:34.772 00:00:00.000 UDP 28.104.0.1:55526 -> 198.28.0.2:53 1 64 1 2025-11-16 18:35:07.708 00:05:50.924 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-16 18:35:58.682 00:05:09.336 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-16 18:40:35.092 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55874 1 109 1 2025-11-16 18:40:35.092 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35709 1 80 1 2025-11-16 18:40:35.081 00:00:00.000 UDP 28.104.0.1:35709 -> 198.28.0.2:53 1 64 1 2025-11-16 18:40:35.081 00:00:00.000 UDP 28.104.0.1:55874 -> 198.28.0.2:53 1 64 1 2025-11-16 18:36:08.026 00:05:50.605 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-16 18:36:51.054 00:05:10.011 OSPF 28.0.2.1:0 -> 224.0.0.5:0 46 3480 1 2025-11-16 18:41:35.386 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54128 1 109 1 2025-11-16 18:41:35.386 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48259 1 80 1 2025-11-16 18:41:35.377 00:00:00.000 UDP 28.104.0.1:54128 -> 198.28.0.2:53 1 64 1 2025-11-16 18:41:35.377 00:00:00.000 UDP 28.104.0.1:48259 -> 198.28.0.2:53 1 64 1 2025-11-16 18:37:07.694 00:05:50.948 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-16 18:42:35.719 00:00:00.000 UDP 28.104.0.1:60178 -> 198.28.0.2:53 1 64 1 2025-11-16 18:42:35.718 00:00:00.000 UDP 28.104.0.1:44425 -> 198.28.0.2:53 1 64 1 2025-11-16 18:42:35.728 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44425 1 109 1 2025-11-16 18:42:35.729 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60178 1 80 1 2025-11-16 18:39:07.697 00:05:00.443 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-16 18:43:29.030 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-16 18:43:36.039 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46741 1 109 1 2025-11-16 18:43:36.036 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36009 1 80 1 2025-11-16 18:43:36.025 00:00:00.000 UDP 28.104.0.1:36009 -> 198.28.0.2:53 1 64 1 2025-11-16 18:43:36.028 00:00:00.000 UDP 28.104.0.1:46741 -> 198.28.0.2:53 1 64 1 2025-11-16 18:39:07.697 00:06:00.088 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-16 18:44:36.333 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60775 1 80 1 2025-11-16 18:44:36.334 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42487 1 109 1 2025-11-16 18:44:36.323 00:00:00.000 UDP 28.104.0.1:60775 -> 198.28.0.2:53 1 64 1 2025-11-16 18:44:36.323 00:00:00.000 UDP 28.104.0.1:42487 -> 198.28.0.2:53 1 64 1 2025-11-16 18:45:44.083 00:00:00.000 UDP 28.104.0.1:42050 -> 198.28.0.2:53 1 64 1 2025-11-16 18:45:44.083 00:00:00.000 UDP 28.104.0.1:34890 -> 198.28.0.2:53 1 64 1 2025-11-16 18:45:44.093 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42050 1 109 1 2025-11-16 18:45:44.093 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34890 1 80 1 2025-11-16 18:41:07.708 00:05:50.927 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-16 18:42:01.605 00:05:09.472 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2812 1 2025-11-16 18:41:58.682 00:05:09.335 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-16 18:46:44.380 00:00:00.000 UDP 28.104.0.1:35955 -> 198.28.0.2:53 1 64 1 2025-11-16 18:46:44.379 00:00:00.000 UDP 28.104.0.1:34372 -> 198.28.0.2:53 1 64 1 2025-11-16 18:46:44.391 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34372 1 80 1 2025-11-16 18:46:44.392 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35955 1 109 1 2025-11-16 18:42:08.027 00:05:50.607 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-16 18:47:44.682 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41687 1 80 1 2025-11-16 18:47:44.682 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48294 1 109 1 2025-11-16 18:47:44.671 00:00:00.000 UDP 28.104.0.1:48294 -> 198.28.0.2:53 1 64 1 2025-11-16 18:47:44.671 00:00:00.000 UDP 28.104.0.1:41687 -> 198.28.0.2:53 1 64 1 2025-11-16 18:43:07.698 00:05:50.947 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-16 18:48:29.000 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-16 18:48:44.962 00:00:00.000 UDP 28.104.0.1:55573 -> 198.28.0.2:53 1 64 1 2025-11-16 18:48:44.962 00:00:00.000 UDP 28.104.0.1:52099 -> 198.28.0.2:53 1 64 1 2025-11-16 18:48:44.972 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52099 1 80 1 2025-11-16 18:48:44.972 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55573 1 109 1 2025-11-16 18:45:07.699 00:05:00.443 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-16 18:49:45.261 00:00:00.000 UDP 28.104.0.1:58650 -> 198.28.0.2:53 1 64 1 2025-11-16 18:49:45.261 00:00:00.000 UDP 28.104.0.1:41489 -> 198.28.0.2:53 1 64 1 2025-11-16 18:49:45.271 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41489 1 80 1 2025-11-16 18:49:45.271 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58650 1 109 1 2025-11-16 18:50:45.560 00:00:00.000 UDP 28.104.0.1:46978 -> 198.28.0.2:53 1 64 1 2025-11-16 18:50:45.560 00:00:00.000 UDP 28.104.0.1:32790 -> 198.28.0.2:53 1 64 1 2025-11-16 18:50:45.570 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32790 1 109 1 2025-11-16 18:50:45.570 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46978 1 80 1 2025-11-16 18:46:07.699 00:06:00.090 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-16 18:47:21.068 00:05:10.014 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2712 1 2025-11-16 18:51:45.865 00:00:00.000 UDP 28.104.0.1:51797 -> 198.28.0.2:53 1 64 1 2025-11-16 18:51:45.865 00:00:00.000 UDP 28.104.0.1:49996 -> 198.28.0.2:53 1 64 1 2025-11-16 18:51:45.876 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49996 1 109 1 2025-11-16 18:51:45.876 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51797 1 80 1 2025-11-16 18:47:07.709 00:05:50.928 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-16 18:47:58.684 00:05:09.337 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-16 18:52:46.192 00:00:00.000 UDP 28.104.0.1:38366 -> 198.28.0.2:53 1 64 1 2025-11-16 18:52:46.192 00:00:00.000 UDP 28.104.0.1:60190 -> 198.28.0.2:53 1 64 1 2025-11-16 18:52:46.202 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38366 1 109 1 2025-11-16 18:52:46.202 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60190 1 80 1 2025-11-16 18:48:08.029 00:05:50.609 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-16 18:53:29.688 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-16 18:53:46.442 00:00:00.000 UDP 28.104.0.1:33970 -> 198.28.0.2:53 1 64 1 2025-11-16 18:53:46.442 00:00:00.000 UDP 28.104.0.1:38537 -> 198.28.0.2:53 1 64 1 2025-11-16 18:53:46.452 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38537 1 109 1 2025-11-16 18:53:46.452 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33970 1 80 1 2025-11-16 18:49:07.698 00:05:50.949 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-16 18:54:46.744 00:00:00.000 UDP 28.104.0.1:53410 -> 198.28.0.2:53 1 64 1 2025-11-16 18:54:46.743 00:00:00.000 UDP 28.104.0.1:59787 -> 198.28.0.2:53 1 64 1 2025-11-16 18:54:46.755 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59787 1 109 1 2025-11-16 18:54:46.754 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53410 1 80 1 2025-11-16 18:51:07.699 00:05:00.444 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-16 18:55:47.054 00:00:00.000 UDP 28.104.0.1:54905 -> 198.28.0.2:53 1 64 1 2025-11-16 18:55:47.054 00:00:00.000 UDP 28.104.0.1:53313 -> 198.28.0.2:53 1 64 1 2025-11-16 18:55:47.066 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54905 1 109 1 2025-11-16 18:55:47.066 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53313 1 80 1 2025-11-16 18:56:47.370 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46177 1 109 1 2025-11-16 18:52:41.082 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 32 2176 1 2025-11-16 18:56:47.370 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37888 1 80 1 2025-11-16 18:56:47.359 00:00:00.000 UDP 28.104.0.1:37888 -> 198.28.0.2:53 1 64 1 2025-11-16 18:56:47.359 00:00:00.000 UDP 28.104.0.1:46177 -> 198.28.0.2:53 1 64 1 2025-11-16 18:57:47.656 00:00:00.000 UDP 28.104.0.1:56611 -> 198.28.0.2:53 1 64 1 2025-11-16 18:57:47.656 00:00:00.000 UDP 28.104.0.1:34673 -> 198.28.0.2:53 1 64 1 2025-11-16 18:57:47.667 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56611 1 109 1 2025-11-16 18:57:47.667 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34673 1 80 1 2025-11-16 18:53:07.710 00:05:50.929 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-16 18:53:58.686 00:05:09.336 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-16 18:53:07.698 00:06:00.092 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-16 18:58:29.138 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-16 18:58:47.908 00:00:00.000 UDP 28.104.0.1:33837 -> 198.28.0.2:53 1 64 1 2025-11-16 18:58:47.908 00:00:00.000 UDP 28.104.0.1:60860 -> 198.28.0.2:53 1 64 1 2025-11-16 18:58:47.919 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33837 1 80 1 2025-11-16 18:58:47.919 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60860 1 109 1 Summary: total flows: 322, total bytes: 96689, total packets: 1425, avg bps: 198, avg pps: 0, avg bpp: 67 Time window: 2025-11-16 17:54:08 - 2025-11-16 18:59:08 Total flows processed: 322, passed: 322, Blocks skipped: 0, Bytes read: 33552 Sys: 0.0025s User: 0.0033s Wall: 0.0035s flows/second: 91837.7 Runtime: 0.0035s