Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-16 21:54:08.147 00:05:50.557 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-16 21:59:04.423 00:00:00.000 UDP 28.104.0.1:57133 -> 198.28.0.2:53 1 64 1 2025-11-16 21:59:04.423 00:00:00.000 UDP 28.104.0.1:51495 -> 198.28.0.2:53 1 64 1 2025-11-16 21:59:04.433 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51495 1 109 1 2025-11-16 21:59:04.433 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57133 1 80 1 2025-11-16 21:55:07.776 00:05:50.938 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-16 22:00:04.714 00:00:00.000 UDP 28.104.0.1:49734 -> 198.28.0.2:53 1 64 1 2025-11-16 22:00:04.714 00:00:00.000 UDP 28.104.0.1:52382 -> 198.28.0.2:53 1 64 1 2025-11-16 22:00:04.725 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49734 1 80 1 2025-11-16 22:00:04.725 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52382 1 109 1 2025-11-16 21:55:07.777 00:06:00.079 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-16 22:01:04.969 00:00:00.000 UDP 28.104.0.1:59997 -> 198.28.0.2:53 1 64 1 2025-11-16 22:01:04.968 00:00:00.000 UDP 28.104.0.1:41746 -> 198.28.0.2:53 1 64 1 2025-11-16 22:01:04.978 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59997 1 109 1 2025-11-16 22:01:04.978 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41746 1 80 1 2025-11-16 21:57:07.778 00:05:00.419 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-16 22:02:05.276 00:00:00.000 UDP 28.104.0.1:58330 -> 198.28.0.2:53 1 64 1 2025-11-16 22:02:05.275 00:00:00.000 UDP 28.104.0.1:39084 -> 198.28.0.2:53 1 64 1 2025-11-16 22:02:05.287 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58330 1 109 1 2025-11-16 22:02:05.287 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39084 1 80 1 2025-11-16 22:03:05.570 00:00:00.000 UDP 28.104.0.1:37795 -> 198.28.0.2:53 1 64 1 2025-11-16 22:03:05.570 00:00:00.000 UDP 28.104.0.1:46632 -> 198.28.0.2:53 1 64 1 2025-11-16 22:03:05.581 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46632 1 80 1 2025-11-16 22:03:05.581 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37795 1 109 1 2025-11-16 21:59:01.292 00:05:10.002 OSPF 28.0.2.1:0 -> 224.0.0.5:0 43 2984 1 2025-11-16 22:03:32.904 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-16 21:59:07.788 00:05:50.919 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-16 22:04:05.870 00:00:00.000 UDP 28.104.0.1:45911 -> 198.28.0.2:53 1 64 1 2025-11-16 22:04:05.870 00:00:00.000 UDP 28.104.0.1:54902 -> 198.28.0.2:53 1 64 1 2025-11-16 22:04:05.880 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54902 1 109 1 2025-11-16 22:04:05.880 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45911 1 80 1 2025-11-16 21:59:58.755 00:05:09.384 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-16 22:00:08.147 00:05:50.560 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-16 22:05:06.211 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53571 1 80 1 2025-11-16 22:05:06.211 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33895 1 109 1 2025-11-16 22:05:06.202 00:00:00.000 UDP 28.104.0.1:33895 -> 198.28.0.2:53 1 64 1 2025-11-16 22:05:06.201 00:00:00.000 UDP 28.104.0.1:53571 -> 198.28.0.2:53 1 64 1 2025-11-16 22:01:07.778 00:05:50.940 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-16 22:06:06.503 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50515 1 80 1 2025-11-16 22:06:06.503 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34258 1 109 1 2025-11-16 22:06:06.493 00:00:00.000 UDP 28.104.0.1:34258 -> 198.28.0.2:53 1 64 1 2025-11-16 22:06:06.493 00:00:00.000 UDP 28.104.0.1:50515 -> 198.28.0.2:53 1 64 1 2025-11-16 22:03:07.780 00:05:00.417 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-16 22:02:07.779 00:06:00.079 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-16 22:07:07.536 00:00:00.000 UDP 28.104.0.1:49557 -> 198.28.0.2:53 1 64 1 2025-11-16 22:07:07.536 00:00:00.000 UDP 28.104.0.1:35626 -> 198.28.0.2:53 1 64 1 2025-11-16 22:07:07.546 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35626 1 109 1 2025-11-16 22:07:07.546 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49557 1 80 1 2025-11-16 22:08:07.843 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44799 1 80 1 2025-11-16 22:08:07.843 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33738 1 109 1 2025-11-16 22:08:07.832 00:00:00.000 UDP 28.104.0.1:33738 -> 198.28.0.2:53 1 64 1 2025-11-16 22:08:07.832 00:00:00.000 UDP 28.104.0.1:44799 -> 198.28.0.2:53 1 64 1 2025-11-16 22:04:21.294 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2708 1 2025-11-16 22:08:33.274 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-16 22:09:08.147 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39020 1 80 1 2025-11-16 22:09:08.147 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41014 1 109 1 2025-11-16 22:09:08.137 00:00:00.000 UDP 28.104.0.1:39020 -> 198.28.0.2:53 1 64 1 2025-11-16 22:09:08.137 00:00:00.000 UDP 28.104.0.1:41014 -> 198.28.0.2:53 1 64 1 2025-11-16 22:05:07.790 00:05:50.918 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-16 22:05:58.758 00:05:09.381 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-16 22:10:08.428 00:00:00.000 UDP 28.104.0.1:42729 -> 198.28.0.2:53 1 64 1 2025-11-16 22:10:08.428 00:00:00.000 UDP 28.104.0.1:49363 -> 198.28.0.2:53 1 64 1 2025-11-16 22:10:08.438 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42729 1 109 1 2025-11-16 22:10:08.438 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49363 1 80 1 2025-11-16 22:06:08.149 00:05:50.563 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-16 22:11:08.727 00:00:00.000 UDP 28.104.0.1:39087 -> 198.28.0.2:53 1 64 1 2025-11-16 22:11:08.727 00:00:00.000 UDP 28.104.0.1:41945 -> 198.28.0.2:53 1 64 1 2025-11-16 22:11:08.737 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41945 1 80 1 2025-11-16 22:11:08.737 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39087 1 109 1 2025-11-16 22:07:07.781 00:05:50.939 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-16 22:12:09.047 00:00:00.000 UDP 28.104.0.1:51588 -> 198.28.0.2:53 1 64 1 2025-11-16 22:12:09.047 00:00:00.000 UDP 28.104.0.1:34034 -> 198.28.0.2:53 1 64 1 2025-11-16 22:12:09.058 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51588 1 109 1 2025-11-16 22:12:09.058 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34034 1 80 1 2025-11-16 22:13:09.341 00:00:00.000 UDP 28.104.0.1:42084 -> 198.28.0.2:53 1 64 1 2025-11-16 22:13:09.341 00:00:00.000 UDP 28.104.0.1:52881 -> 198.28.0.2:53 1 64 1 2025-11-16 22:09:07.782 00:05:00.418 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-16 22:13:09.351 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42084 1 109 1 2025-11-16 22:13:09.351 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52881 1 80 1 2025-11-16 22:13:33.216 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-16 22:09:41.298 00:05:10.009 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2424 1 2025-11-16 22:14:09.635 00:00:00.000 UDP 28.104.0.1:48113 -> 198.28.0.2:53 1 64 1 2025-11-16 22:14:09.635 00:00:00.000 UDP 28.104.0.1:40008 -> 198.28.0.2:53 1 64 1 2025-11-16 22:09:07.781 00:06:00.077 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-16 22:14:09.647 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40008 1 109 1 2025-11-16 22:14:09.647 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48113 1 80 1 2025-11-16 22:15:09.939 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48309 1 109 1 2025-11-16 22:15:09.938 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58459 1 80 1 2025-11-16 22:15:09.928 00:00:00.000 UDP 28.104.0.1:58459 -> 198.28.0.2:53 1 64 1 2025-11-16 22:15:09.928 00:00:00.000 UDP 28.104.0.1:48309 -> 198.28.0.2:53 1 64 1 2025-11-16 22:11:07.791 00:05:50.921 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-16 22:11:58.762 00:05:09.414 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-16 22:16:10.199 00:00:00.000 UDP 28.104.0.1:40776 -> 198.28.0.2:53 1 64 1 2025-11-16 22:16:10.199 00:00:00.000 UDP 28.104.0.1:48212 -> 198.28.0.2:53 1 64 1 2025-11-16 22:16:10.209 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40776 1 109 1 2025-11-16 22:16:10.209 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48212 1 80 1 2025-11-16 22:12:08.150 00:05:50.565 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-16 22:17:10.490 00:00:00.000 UDP 28.104.0.1:54490 -> 198.28.0.2:53 1 64 1 2025-11-16 22:17:10.490 00:00:00.000 UDP 28.104.0.1:43491 -> 198.28.0.2:53 1 64 1 2025-11-16 22:17:10.500 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43491 1 80 1 2025-11-16 22:17:10.500 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54490 1 109 1 2025-11-16 22:13:07.782 00:05:50.944 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-16 22:18:10.766 00:00:00.000 UDP 28.104.0.1:50817 -> 198.28.0.2:53 1 64 1 2025-11-16 22:18:10.765 00:00:00.000 UDP 28.104.0.1:54688 -> 198.28.0.2:53 1 64 1 2025-11-16 22:18:10.778 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50817 1 80 1 2025-11-16 22:18:10.778 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54688 1 109 1 2025-11-16 22:18:33.178 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-16 22:19:11.071 00:00:00.000 UDP 28.104.0.1:47500 -> 198.28.0.2:53 1 64 1 2025-11-16 22:15:07.782 00:05:00.424 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-16 22:19:11.071 00:00:00.000 UDP 28.104.0.1:55436 -> 198.28.0.2:53 1 64 1 2025-11-16 22:15:01.306 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 33 2380 1 2025-11-16 22:19:11.081 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55436 1 109 1 2025-11-16 22:19:11.081 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47500 1 80 1 2025-11-16 22:20:11.377 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53591 1 80 1 2025-11-16 22:20:11.377 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46199 1 109 1 2025-11-16 22:20:11.367 00:00:00.000 UDP 28.104.0.1:46199 -> 198.28.0.2:53 1 64 1 2025-11-16 22:20:11.367 00:00:00.000 UDP 28.104.0.1:53591 -> 198.28.0.2:53 1 64 1 2025-11-16 22:21:11.824 00:00:00.000 UDP 28.104.0.1:44234 -> 198.28.0.2:53 1 64 1 2025-11-16 22:21:11.824 00:00:00.000 UDP 28.104.0.1:36697 -> 198.28.0.2:53 1 64 1 2025-11-16 22:16:07.782 00:06:00.078 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-16 22:21:11.836 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36697 1 80 1 2025-11-16 22:21:11.836 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44234 1 109 1 2025-11-16 22:17:07.793 00:05:50.924 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-16 22:17:58.765 00:05:09.419 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-16 22:22:12.122 00:00:00.000 UDP 28.104.0.1:50205 -> 198.28.0.2:53 1 64 1 2025-11-16 22:22:12.122 00:00:00.000 UDP 28.104.0.1:36118 -> 198.28.0.2:53 1 64 1 2025-11-16 22:22:12.132 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50205 1 109 1 2025-11-16 22:22:12.132 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36118 1 80 1 2025-11-16 22:18:08.194 00:05:50.524 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-16 22:23:12.416 00:00:00.000 UDP 28.104.0.1:32782 -> 198.28.0.2:53 1 64 1 2025-11-16 22:23:12.417 00:00:00.000 UDP 28.104.0.1:37242 -> 198.28.0.2:53 1 64 1 2025-11-16 22:23:12.428 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37242 1 109 1 2025-11-16 22:23:12.427 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32782 1 80 1 2025-11-16 22:23:33.261 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-16 22:19:07.783 00:05:50.945 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-16 22:24:13.190 00:00:00.000 UDP 28.104.0.1:54643 -> 198.28.0.2:53 1 64 1 2025-11-16 22:24:13.190 00:00:00.000 UDP 28.104.0.1:46814 -> 198.28.0.2:53 1 64 1 2025-11-16 22:24:13.201 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46814 1 109 1 2025-11-16 22:24:13.200 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54643 1 80 1 2025-11-16 22:20:21.312 00:05:10.002 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2776 1 2025-11-16 22:21:07.783 00:05:00.426 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-16 22:25:13.481 00:00:00.000 UDP 28.104.0.1:40129 -> 198.28.0.2:53 1 64 1 2025-11-16 22:25:13.481 00:00:00.000 UDP 28.104.0.1:60914 -> 198.28.0.2:53 1 64 1 2025-11-16 22:25:13.490 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40129 1 109 1 2025-11-16 22:25:13.490 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60914 1 80 1 2025-11-16 22:26:13.787 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34177 1 80 1 2025-11-16 22:26:13.787 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56812 1 109 1 2025-11-16 22:26:13.777 00:00:00.000 UDP 28.104.0.1:34177 -> 198.28.0.2:53 1 64 1 2025-11-16 22:26:13.777 00:00:00.000 UDP 28.104.0.1:56812 -> 198.28.0.2:53 1 64 1 2025-11-16 22:27:14.078 00:00:00.000 UDP 28.104.0.1:44494 -> 198.28.0.2:53 1 64 1 2025-11-16 22:27:14.078 00:00:00.000 UDP 28.104.0.1:58315 -> 198.28.0.2:53 1 64 1 2025-11-16 22:27:14.090 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58315 1 80 1 2025-11-16 22:27:14.089 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44494 1 109 1 2025-11-16 22:23:07.794 00:05:50.926 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-16 22:23:58.767 00:05:09.413 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-16 22:23:07.783 00:06:00.078 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-16 22:28:14.384 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40548 1 80 1 2025-11-16 22:28:14.384 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56598 1 109 1 2025-11-16 22:28:14.372 00:00:00.000 UDP 28.104.0.1:40548 -> 198.28.0.2:53 1 64 1 2025-11-16 22:28:14.372 00:00:00.000 UDP 28.104.0.1:56598 -> 198.28.0.2:53 1 64 1 2025-11-16 22:28:33.489 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-16 22:24:08.191 00:05:50.529 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-16 22:29:14.687 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45065 1 80 1 2025-11-16 22:29:14.687 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39759 1 109 1 2025-11-16 22:29:14.677 00:00:00.000 UDP 28.104.0.1:45065 -> 198.28.0.2:53 1 64 1 2025-11-16 22:29:14.677 00:00:00.000 UDP 28.104.0.1:39759 -> 198.28.0.2:53 1 64 1 2025-11-16 22:25:41.317 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 44 3200 1 2025-11-16 22:25:07.785 00:05:50.947 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-16 22:30:14.970 00:00:00.000 UDP 28.104.0.1:33716 -> 198.28.0.2:53 1 64 1 2025-11-16 22:30:14.970 00:00:00.000 UDP 28.104.0.1:54783 -> 198.28.0.2:53 1 64 1 2025-11-16 22:30:14.979 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33716 1 80 1 2025-11-16 22:30:14.979 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54783 1 109 1 2025-11-16 22:27:07.786 00:05:00.425 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-16 22:31:15.266 00:00:00.000 UDP 28.104.0.1:36710 -> 198.28.0.2:53 1 64 1 2025-11-16 22:31:15.266 00:00:00.000 UDP 28.104.0.1:60884 -> 198.28.0.2:53 1 64 1 2025-11-16 22:31:15.276 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36710 1 109 1 2025-11-16 22:31:15.276 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60884 1 80 1 2025-11-16 22:32:15.564 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39988 1 109 1 2025-11-16 22:32:15.563 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34382 1 80 1 2025-11-16 22:32:15.553 00:00:00.000 UDP 28.104.0.1:34382 -> 198.28.0.2:53 1 64 1 2025-11-16 22:32:15.553 00:00:00.000 UDP 28.104.0.1:39988 -> 198.28.0.2:53 1 64 1 2025-11-16 22:33:15.855 00:00:00.000 UDP 28.104.0.1:36930 -> 198.28.0.2:53 1 64 1 2025-11-16 22:33:15.855 00:00:00.000 UDP 28.104.0.1:44437 -> 198.28.0.2:53 1 64 1 2025-11-16 22:33:15.865 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36930 1 80 1 2025-11-16 22:33:15.865 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44437 1 109 1 2025-11-16 22:33:33.702 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-16 22:29:07.795 00:05:50.927 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-16 22:29:58.770 00:05:09.413 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-16 22:34:16.736 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49492 1 109 1 2025-11-16 22:34:16.736 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48475 1 80 1 2025-11-16 22:34:16.726 00:00:00.000 UDP 28.104.0.1:49492 -> 198.28.0.2:53 1 64 1 2025-11-16 22:34:16.726 00:00:00.000 UDP 28.104.0.1:48475 -> 198.28.0.2:53 1 64 1 2025-11-16 22:30:08.192 00:05:50.531 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-16 22:30:07.786 00:06:00.081 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-16 22:31:01.321 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2816 1 2025-11-16 22:35:17.050 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54798 1 80 1 2025-11-16 22:35:17.050 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40221 1 109 1 2025-11-16 22:35:17.038 00:00:00.000 UDP 28.104.0.1:54798 -> 198.28.0.2:53 1 64 1 2025-11-16 22:35:17.038 00:00:00.000 UDP 28.104.0.1:40221 -> 198.28.0.2:53 1 64 1 2025-11-16 22:31:07.786 00:05:50.946 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-16 22:36:17.338 00:00:00.000 UDP 28.104.0.1:53945 -> 198.28.0.2:53 1 64 1 2025-11-16 22:36:17.338 00:00:00.000 UDP 28.104.0.1:34288 -> 198.28.0.2:53 1 64 1 2025-11-16 22:36:17.348 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53945 1 80 1 2025-11-16 22:36:17.348 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34288 1 109 1 2025-11-16 22:33:07.789 00:05:00.421 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-16 22:37:17.646 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42169 1 80 1 2025-11-16 22:37:17.646 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44638 1 109 1 2025-11-16 22:37:17.636 00:00:00.000 UDP 28.104.0.1:42169 -> 198.28.0.2:53 1 64 1 2025-11-16 22:37:17.636 00:00:00.000 UDP 28.104.0.1:44638 -> 198.28.0.2:53 1 64 1 2025-11-16 22:38:17.941 00:00:00.000 UDP 28.104.0.1:46833 -> 198.28.0.2:53 1 64 1 2025-11-16 22:38:17.941 00:00:00.000 UDP 28.104.0.1:41841 -> 198.28.0.2:53 1 64 1 2025-11-16 22:38:17.951 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46833 1 80 1 2025-11-16 22:38:17.951 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41841 1 109 1 2025-11-16 22:38:33.662 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-16 22:39:18.250 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34691 1 80 1 2025-11-16 22:39:18.250 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57559 1 109 1 2025-11-16 22:39:18.240 00:00:00.000 UDP 28.104.0.1:34691 -> 198.28.0.2:53 1 64 1 2025-11-16 22:39:18.240 00:00:00.000 UDP 28.104.0.1:57559 -> 198.28.0.2:53 1 64 1 2025-11-16 22:35:07.796 00:05:50.927 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-16 22:35:58.773 00:05:09.413 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-16 22:40:18.542 00:00:00.000 UDP 28.104.0.1:46559 -> 198.28.0.2:53 1 64 1 2025-11-16 22:40:18.542 00:00:00.000 UDP 28.104.0.1:59018 -> 198.28.0.2:53 1 64 1 2025-11-16 22:40:18.553 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59018 1 109 1 2025-11-16 22:40:18.553 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46559 1 80 1 2025-11-16 22:36:21.328 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2632 1 2025-11-16 22:36:08.192 00:05:50.531 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-16 22:41:18.845 00:00:00.000 UDP 28.104.0.1:38466 -> 198.28.0.2:53 1 64 1 2025-11-16 22:41:18.845 00:00:00.000 UDP 28.104.0.1:48107 -> 198.28.0.2:53 1 64 1 2025-11-16 22:41:18.856 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48107 1 80 1 2025-11-16 22:41:18.856 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38466 1 109 1 2025-11-16 22:37:07.787 00:05:50.947 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-16 22:37:07.788 00:06:00.081 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-16 22:42:19.326 00:00:00.000 UDP 28.104.0.1:57874 -> 198.28.0.2:53 1 64 1 2025-11-16 22:42:19.326 00:00:00.000 UDP 28.104.0.1:50088 -> 198.28.0.2:53 1 64 1 2025-11-16 22:42:19.336 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50088 1 109 1 2025-11-16 22:42:19.336 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57874 1 80 1 2025-11-16 22:39:07.790 00:05:00.422 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-16 22:43:19.579 00:00:00.000 UDP 28.104.0.1:38316 -> 198.28.0.2:53 1 64 1 2025-11-16 22:43:19.580 00:00:00.000 UDP 28.104.0.1:40138 -> 198.28.0.2:53 1 64 1 2025-11-16 22:43:19.591 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40138 1 80 1 2025-11-16 22:43:19.591 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38316 1 109 1 2025-11-16 22:43:33.718 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-16 22:44:19.905 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56762 1 80 1 2025-11-16 22:44:19.905 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54600 1 109 1 2025-11-16 22:44:19.895 00:00:00.000 UDP 28.104.0.1:54600 -> 198.28.0.2:53 1 64 1 2025-11-16 22:44:19.895 00:00:00.000 UDP 28.104.0.1:56762 -> 198.28.0.2:53 1 64 1 2025-11-16 22:45:20.225 00:00:00.000 UDP 28.104.0.1:47976 -> 198.28.0.2:53 1 64 1 2025-11-16 22:45:20.225 00:00:00.000 UDP 28.104.0.1:34900 -> 198.28.0.2:53 1 64 1 2025-11-16 22:45:20.237 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34900 1 109 1 2025-11-16 22:45:20.237 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47976 1 80 1 2025-11-16 22:41:41.331 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 32 2176 1 2025-11-16 22:41:07.799 00:05:50.926 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-16 22:41:58.773 00:05:09.413 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-16 22:46:20.486 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51222 1 80 1 2025-11-16 22:46:20.485 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37112 1 109 1 2025-11-16 22:46:20.475 00:00:00.000 UDP 28.104.0.1:51222 -> 198.28.0.2:53 1 64 1 2025-11-16 22:46:20.475 00:00:00.000 UDP 28.104.0.1:37112 -> 198.28.0.2:53 1 64 1 2025-11-16 22:42:08.195 00:05:50.531 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-16 22:47:20.783 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52462 1 109 1 2025-11-16 22:47:20.782 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60012 1 80 1 2025-11-16 22:47:20.774 00:00:00.000 UDP 28.104.0.1:60012 -> 198.28.0.2:53 1 64 1 2025-11-16 22:47:20.774 00:00:00.000 UDP 28.104.0.1:52462 -> 198.28.0.2:53 1 64 1 2025-11-16 22:43:07.791 00:05:50.945 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-16 22:48:21.090 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53241 1 80 1 2025-11-16 22:48:21.090 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56416 1 109 1 2025-11-16 22:48:21.080 00:00:00.000 UDP 28.104.0.1:56416 -> 198.28.0.2:53 1 64 1 2025-11-16 22:48:21.080 00:00:00.000 UDP 28.104.0.1:53241 -> 198.28.0.2:53 1 64 1 2025-11-16 22:48:33.800 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-16 22:45:07.790 00:05:00.423 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-16 22:44:07.790 00:06:00.079 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-16 22:49:21.400 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43460 1 109 1 2025-11-16 22:49:21.400 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44209 1 80 1 2025-11-16 22:49:21.388 00:00:00.000 UDP 28.104.0.1:44209 -> 198.28.0.2:53 1 64 1 2025-11-16 22:49:21.388 00:00:00.000 UDP 28.104.0.1:43460 -> 198.28.0.2:53 1 64 1 2025-11-16 22:50:21.688 00:00:00.000 UDP 28.104.0.1:42255 -> 198.28.0.2:53 1 64 1 2025-11-16 22:50:21.689 00:00:00.000 UDP 28.104.0.1:40859 -> 198.28.0.2:53 1 64 1 2025-11-16 22:50:21.699 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42255 1 109 1 2025-11-16 22:50:21.699 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40859 1 80 1 2025-11-16 22:47:01.339 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 33 2380 1 2025-11-16 22:51:21.994 00:00:00.000 UDP 28.104.0.1:38601 -> 198.28.0.2:53 1 64 1 2025-11-16 22:51:21.994 00:00:00.000 UDP 28.104.0.1:47922 -> 198.28.0.2:53 1 64 1 2025-11-16 22:51:22.004 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38601 1 109 1 2025-11-16 22:51:22.004 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47922 1 80 1 2025-11-16 22:47:07.800 00:05:50.928 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-16 22:47:58.776 00:05:09.411 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-16 22:52:22.300 00:00:00.000 UDP 28.104.0.1:36225 -> 198.28.0.2:53 1 64 1 2025-11-16 22:52:22.300 00:00:00.000 UDP 28.104.0.1:35754 -> 198.28.0.2:53 1 64 1 2025-11-16 22:52:22.310 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35754 1 109 1 2025-11-16 22:52:22.310 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36225 1 80 1 2025-11-16 22:48:08.196 00:05:50.531 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-16 22:53:22.627 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55319 1 80 1 2025-11-16 22:53:22.627 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42374 1 109 1 2025-11-16 22:53:22.617 00:00:00.000 UDP 28.104.0.1:42374 -> 198.28.0.2:53 1 64 1 2025-11-16 22:53:22.617 00:00:00.000 UDP 28.104.0.1:55319 -> 198.28.0.2:53 1 64 1 2025-11-16 22:53:33.864 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-16 22:49:07.792 00:05:50.946 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-16 22:54:22.931 00:00:00.000 UDP 28.104.0.1:54682 -> 198.28.0.2:53 1 64 1 2025-11-16 22:54:22.931 00:00:00.000 UDP 28.104.0.1:42693 -> 198.28.0.2:53 1 64 1 2025-11-16 22:54:22.941 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54682 1 80 1 2025-11-16 22:54:22.941 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42693 1 109 1 2025-11-16 22:51:07.792 00:05:00.443 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-16 22:55:23.242 00:00:00.000 UDP 28.104.0.1:53400 -> 198.28.0.2:53 1 64 1 2025-11-16 22:55:23.242 00:00:00.000 UDP 28.104.0.1:42076 -> 198.28.0.2:53 1 64 1 2025-11-16 22:55:23.251 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42076 1 80 1 2025-11-16 22:55:23.251 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53400 1 109 1 2025-11-16 22:51:07.791 00:06:00.081 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-16 22:56:23.508 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41707 1 109 1 2025-11-16 22:56:23.507 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50074 1 80 1 2025-11-16 22:56:23.497 00:00:00.000 UDP 28.104.0.1:41707 -> 198.28.0.2:53 1 64 1 2025-11-16 22:56:23.497 00:00:00.000 UDP 28.104.0.1:50074 -> 198.28.0.2:53 1 64 1 2025-11-16 22:52:21.347 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 48 3516 1 2025-11-16 22:57:23.800 00:00:00.000 UDP 28.104.0.1:52919 -> 198.28.0.2:53 1 64 1 2025-11-16 22:57:23.800 00:00:00.000 UDP 28.104.0.1:36850 -> 198.28.0.2:53 1 64 1 2025-11-16 22:57:23.810 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36850 1 109 1 2025-11-16 22:57:23.809 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52919 1 80 1 2025-11-16 22:53:07.801 00:05:50.928 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-16 22:53:58.778 00:05:09.410 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-16 22:58:24.106 00:00:00.000 UDP 28.104.0.1:44615 -> 198.28.0.2:53 1 64 1 2025-11-16 22:58:24.106 00:00:00.000 UDP 28.104.0.1:46145 -> 198.28.0.2:53 1 64 1 2025-11-16 22:58:24.115 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46145 1 80 1 2025-11-16 22:58:24.115 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44615 1 109 1 2025-11-16 22:58:34.032 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 Summary: total flows: 322, total bytes: 96685, total packets: 1427, avg bps: 198, avg pps: 0, avg bpp: 67 Time window: 2025-11-16 21:54:08 - 2025-11-16 22:59:08 Total flows processed: 322, passed: 322, Blocks skipped: 0, Bytes read: 33552 Sys: 0.0056s User: 0.0011s Wall: 0.0035s flows/second: 93277.6 Runtime: 0.0035s