Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-17 00:54:41.517 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2768 1 2025-11-17 00:54:08.238 00:05:50.528 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-17 00:58:59.837 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33339 1 109 1 2025-11-17 00:58:59.837 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59165 1 80 1 2025-11-17 00:58:59.828 00:00:00.000 UDP 28.104.0.1:59165 -> 198.28.0.2:53 1 64 1 2025-11-17 00:58:59.828 00:00:00.000 UDP 28.104.0.1:33339 -> 198.28.0.2:53 1 64 1 2025-11-17 01:00:00.124 00:00:00.000 UDP 28.104.0.1:56919 -> 198.28.0.2:53 1 64 1 2025-11-17 00:55:07.836 00:05:50.942 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-17 01:00:00.124 00:00:00.000 UDP 28.104.0.1:38841 -> 198.28.0.2:53 1 64 1 2025-11-17 01:00:00.134 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38841 1 109 1 2025-11-17 01:00:00.134 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56919 1 80 1 2025-11-17 01:01:05.801 00:00:00.000 UDP 28.104.0.1:53306 -> 198.28.0.2:53 1 64 1 2025-11-17 01:01:05.802 00:00:00.000 UDP 28.104.0.1:58763 -> 198.28.0.2:53 1 64 1 2025-11-17 01:01:05.811 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53306 1 80 1 2025-11-17 01:01:05.812 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58763 1 109 1 2025-11-17 00:57:07.838 00:05:00.484 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-17 01:02:06.107 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48592 1 80 1 2025-11-17 01:02:06.107 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45815 1 109 1 2025-11-17 01:02:06.096 00:00:00.000 UDP 28.104.0.1:45815 -> 198.28.0.2:53 1 64 1 2025-11-17 01:02:06.096 00:00:00.000 UDP 28.104.0.1:48592 -> 198.28.0.2:53 1 64 1 2025-11-17 00:57:07.837 00:06:00.084 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-17 01:03:06.406 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45436 1 80 1 2025-11-17 01:03:06.406 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43156 1 109 1 2025-11-17 01:03:06.397 00:00:00.000 UDP 28.104.0.1:43156 -> 198.28.0.2:53 1 64 1 2025-11-17 01:03:06.396 00:00:00.000 UDP 28.104.0.1:45436 -> 198.28.0.2:53 1 64 1 2025-11-17 01:03:36.674 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-17 00:59:07.849 00:05:50.919 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-17 01:04:06.687 00:00:00.000 UDP 28.104.0.1:50285 -> 198.28.0.2:53 1 64 1 2025-11-17 01:04:06.687 00:00:00.000 UDP 28.104.0.1:51433 -> 198.28.0.2:53 1 64 1 2025-11-17 01:04:06.698 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51433 1 109 1 2025-11-17 01:04:06.698 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50285 1 80 1 2025-11-17 00:59:58.817 00:05:09.415 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-17 01:00:01.523 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2444 1 2025-11-17 01:00:08.240 00:05:50.528 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-17 01:05:06.957 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51635 1 109 1 2025-11-17 01:05:06.957 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44109 1 80 1 2025-11-17 01:05:06.947 00:00:00.000 UDP 28.104.0.1:51635 -> 198.28.0.2:53 1 64 1 2025-11-17 01:05:06.947 00:00:00.000 UDP 28.104.0.1:44109 -> 198.28.0.2:53 1 64 1 2025-11-17 01:01:07.839 00:05:50.939 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-17 01:06:07.239 00:00:00.000 UDP 28.104.0.1:36351 -> 198.28.0.2:53 1 64 1 2025-11-17 01:06:07.239 00:00:00.000 UDP 28.104.0.1:57421 -> 198.28.0.2:53 1 64 1 2025-11-17 01:06:07.251 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36351 1 109 1 2025-11-17 01:06:07.251 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57421 1 80 1 2025-11-17 01:03:07.840 00:05:00.483 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-17 01:07:07.531 00:00:00.000 UDP 28.104.0.1:42850 -> 198.28.0.2:53 1 64 1 2025-11-17 01:07:07.531 00:00:00.000 UDP 28.104.0.1:50449 -> 198.28.0.2:53 1 64 1 2025-11-17 01:07:07.543 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42850 1 109 1 2025-11-17 01:07:07.543 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50449 1 80 1 2025-11-17 01:08:07.822 00:00:00.000 UDP 28.104.0.1:55838 -> 198.28.0.2:53 1 64 1 2025-11-17 01:08:07.822 00:00:00.000 UDP 28.104.0.1:57911 -> 198.28.0.2:53 1 64 1 2025-11-17 01:08:07.831 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57911 1 109 1 2025-11-17 01:08:07.831 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55838 1 80 1 2025-11-17 01:08:36.709 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-17 01:09:08.128 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39241 1 109 1 2025-11-17 01:09:08.128 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54296 1 80 1 2025-11-17 01:09:08.118 00:00:00.000 UDP 28.104.0.1:39241 -> 198.28.0.2:53 1 64 1 2025-11-17 01:04:07.839 00:06:00.083 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-17 01:09:08.118 00:00:00.000 UDP 28.104.0.1:54296 -> 198.28.0.2:53 1 64 1 2025-11-17 01:05:21.527 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 32 2176 1 2025-11-17 01:05:07.850 00:05:50.921 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-17 01:10:08.427 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33928 1 80 1 2025-11-17 01:10:08.427 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46451 1 109 1 2025-11-17 01:10:08.416 00:00:00.000 UDP 28.104.0.1:33928 -> 198.28.0.2:53 1 64 1 2025-11-17 01:05:58.819 00:05:09.413 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-17 01:10:08.416 00:00:00.000 UDP 28.104.0.1:46451 -> 198.28.0.2:53 1 64 1 2025-11-17 01:06:08.241 00:05:50.529 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-17 01:11:08.722 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48460 1 80 1 2025-11-17 01:11:08.722 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35105 1 109 1 2025-11-17 01:11:08.714 00:00:00.000 UDP 28.104.0.1:35105 -> 198.28.0.2:53 1 64 1 2025-11-17 01:11:08.715 00:00:00.000 UDP 28.104.0.1:48460 -> 198.28.0.2:53 1 64 1 2025-11-17 01:07:07.840 00:05:50.940 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-17 01:12:09.004 00:00:00.000 UDP 28.104.0.1:43246 -> 198.28.0.2:53 1 64 1 2025-11-17 01:12:09.005 00:00:00.000 UDP 28.104.0.1:34418 -> 198.28.0.2:53 1 64 1 2025-11-17 01:12:09.016 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34418 1 109 1 2025-11-17 01:12:09.015 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43246 1 80 1 2025-11-17 01:13:09.307 00:00:00.000 UDP 28.104.0.1:44380 -> 198.28.0.2:53 1 64 1 2025-11-17 01:09:07.843 00:05:00.482 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-17 01:13:09.307 00:00:00.000 UDP 28.104.0.1:42325 -> 198.28.0.2:53 1 64 1 2025-11-17 01:13:09.318 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44380 1 80 1 2025-11-17 01:13:09.317 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42325 1 109 1 2025-11-17 01:13:37.036 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-17 01:14:15.793 00:00:00.000 UDP 28.104.0.1:52169 -> 198.28.0.2:53 1 64 1 2025-11-17 01:14:15.793 00:00:00.000 UDP 28.104.0.1:37540 -> 198.28.0.2:53 1 64 1 2025-11-17 01:14:15.804 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52169 1 109 1 2025-11-17 01:14:15.804 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37540 1 80 1 2025-11-17 01:10:41.535 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2564 1 2025-11-17 01:15:16.105 00:00:00.000 UDP 28.104.0.1:38119 -> 198.28.0.2:53 1 64 1 2025-11-17 01:15:16.105 00:00:00.000 UDP 28.104.0.1:59096 -> 198.28.0.2:53 1 64 1 2025-11-17 01:15:16.115 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38119 1 80 1 2025-11-17 01:15:16.115 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59096 1 109 1 2025-11-17 01:11:07.851 00:05:50.922 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-17 01:11:58.820 00:05:09.413 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-17 01:11:07.841 00:06:00.082 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-17 01:16:16.393 00:00:00.000 UDP 28.104.0.1:59881 -> 198.28.0.2:53 1 64 1 2025-11-17 01:16:16.393 00:00:00.000 UDP 28.104.0.1:50104 -> 198.28.0.2:53 1 64 1 2025-11-17 01:16:16.403 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59881 1 109 1 2025-11-17 01:16:16.403 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50104 1 80 1 2025-11-17 01:12:08.243 00:05:50.531 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-17 01:17:16.684 00:00:00.000 UDP 28.104.0.1:59239 -> 198.28.0.2:53 1 64 1 2025-11-17 01:17:16.684 00:00:00.000 UDP 28.104.0.1:40030 -> 198.28.0.2:53 1 64 1 2025-11-17 01:17:16.696 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40030 1 109 1 2025-11-17 01:17:16.696 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59239 1 80 1 2025-11-17 01:13:07.841 00:05:50.943 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-17 01:18:17.065 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46023 1 109 1 2025-11-17 01:18:17.065 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43500 1 80 1 2025-11-17 01:18:17.054 00:00:00.000 UDP 28.104.0.1:43500 -> 198.28.0.2:53 1 64 1 2025-11-17 01:18:17.054 00:00:00.000 UDP 28.104.0.1:46023 -> 198.28.0.2:53 1 64 1 2025-11-17 01:18:36.915 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-17 01:15:07.841 00:05:00.493 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-17 01:19:17.306 00:00:00.000 UDP 28.104.0.1:57711 -> 198.28.0.2:53 1 64 1 2025-11-17 01:19:17.306 00:00:00.000 UDP 28.104.0.1:39958 -> 198.28.0.2:53 1 64 1 2025-11-17 01:19:17.316 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39958 1 109 1 2025-11-17 01:19:17.316 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57711 1 80 1 2025-11-17 01:16:01.544 00:05:10.011 OSPF 28.0.2.1:0 -> 224.0.0.5:0 44 3244 1 2025-11-17 01:20:17.598 00:00:00.000 UDP 28.104.0.1:33515 -> 198.28.0.2:53 1 64 1 2025-11-17 01:20:17.598 00:00:00.000 UDP 28.104.0.1:46403 -> 198.28.0.2:53 1 64 1 2025-11-17 01:20:17.609 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46403 1 109 1 2025-11-17 01:20:17.608 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33515 1 80 1 2025-11-17 01:21:18.313 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51323 1 80 1 2025-11-17 01:21:18.313 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42816 1 109 1 2025-11-17 01:21:18.303 00:00:00.000 UDP 28.104.0.1:42816 -> 198.28.0.2:53 1 64 1 2025-11-17 01:21:18.303 00:00:00.000 UDP 28.104.0.1:51323 -> 198.28.0.2:53 1 64 1 2025-11-17 01:17:07.853 00:05:50.921 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-17 01:17:58.823 00:05:09.412 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-17 01:22:18.614 00:00:00.000 UDP 28.104.0.1:44840 -> 198.28.0.2:53 1 64 1 2025-11-17 01:22:18.614 00:00:00.000 UDP 28.104.0.1:59581 -> 198.28.0.2:53 1 64 1 2025-11-17 01:22:18.625 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44840 1 109 1 2025-11-17 01:22:18.625 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59581 1 80 1 2025-11-17 01:18:08.244 00:05:50.531 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-17 01:18:07.843 00:06:00.080 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-17 01:23:18.924 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52511 1 109 1 2025-11-17 01:23:18.924 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56480 1 80 1 2025-11-17 01:23:18.916 00:00:00.000 UDP 28.104.0.1:52511 -> 198.28.0.2:53 1 64 1 2025-11-17 01:23:18.916 00:00:00.000 UDP 28.104.0.1:56480 -> 198.28.0.2:53 1 64 1 2025-11-17 01:23:36.822 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-17 01:19:07.844 00:05:50.940 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-17 01:24:19.230 00:00:00.000 UDP 28.104.0.1:38685 -> 198.28.0.2:53 1 64 1 2025-11-17 01:24:19.231 00:00:00.000 UDP 28.104.0.1:60539 -> 198.28.0.2:53 1 64 1 2025-11-17 01:24:19.240 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60539 1 80 1 2025-11-17 01:24:19.240 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38685 1 109 1 2025-11-17 01:21:07.845 00:05:00.493 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-17 01:25:19.505 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59018 1 109 1 2025-11-17 01:25:19.505 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44337 1 80 1 2025-11-17 01:25:19.493 00:00:00.000 UDP 28.104.0.1:59018 -> 198.28.0.2:53 1 64 1 2025-11-17 01:25:19.493 00:00:00.000 UDP 28.104.0.1:44337 -> 198.28.0.2:53 1 64 1 2025-11-17 01:21:21.555 00:05:00.855 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2852 1 2025-11-17 01:26:19.814 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56657 1 80 1 2025-11-17 01:26:19.814 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33884 1 109 1 2025-11-17 01:26:19.805 00:00:00.000 UDP 28.104.0.1:56657 -> 198.28.0.2:53 1 64 1 2025-11-17 01:26:19.804 00:00:00.000 UDP 28.104.0.1:33884 -> 198.28.0.2:53 1 64 1 2025-11-17 01:27:20.116 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33667 1 109 1 2025-11-17 01:27:20.115 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60676 1 80 1 2025-11-17 01:27:20.104 00:00:00.000 UDP 28.104.0.1:60676 -> 198.28.0.2:53 1 64 1 2025-11-17 01:27:20.104 00:00:00.000 UDP 28.104.0.1:33667 -> 198.28.0.2:53 1 64 1 2025-11-17 01:23:07.854 00:05:50.921 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-17 01:23:58.825 00:05:09.412 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-17 01:28:20.510 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48348 1 109 1 2025-11-17 01:28:20.509 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52233 1 80 1 2025-11-17 01:28:20.500 00:00:00.000 UDP 28.104.0.1:52233 -> 198.28.0.2:53 1 64 1 2025-11-17 01:28:20.500 00:00:00.000 UDP 28.104.0.1:48348 -> 198.28.0.2:53 1 64 1 2025-11-17 01:28:37.156 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-17 01:24:08.246 00:05:50.530 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-17 01:29:20.793 00:00:00.000 UDP 28.104.0.1:48572 -> 198.28.0.2:53 1 64 1 2025-11-17 01:29:20.792 00:00:00.000 UDP 28.104.0.1:42897 -> 198.28.0.2:53 1 64 1 2025-11-17 01:29:20.801 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48572 1 109 1 2025-11-17 01:29:20.801 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42897 1 80 1 2025-11-17 01:25:07.845 00:05:50.943 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-17 01:25:07.844 00:06:00.081 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-17 01:30:21.055 00:00:00.000 UDP 28.104.0.1:54817 -> 198.28.0.2:53 1 64 1 2025-11-17 01:30:21.055 00:00:00.000 UDP 28.104.0.1:37276 -> 198.28.0.2:53 1 64 1 2025-11-17 01:30:21.066 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54817 1 80 1 2025-11-17 01:30:21.066 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37276 1 109 1 2025-11-17 01:26:31.562 00:05:10.927 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2728 1 2025-11-17 01:27:07.846 00:05:00.493 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-17 01:31:21.370 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55870 1 109 1 2025-11-17 01:31:21.371 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45510 1 80 1 2025-11-17 01:31:21.360 00:00:00.000 UDP 28.104.0.1:55870 -> 198.28.0.2:53 1 64 1 2025-11-17 01:31:21.360 00:00:00.000 UDP 28.104.0.1:45510 -> 198.28.0.2:53 1 64 1 2025-11-17 01:32:22.409 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52129 1 80 1 2025-11-17 01:32:22.409 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60510 1 109 1 2025-11-17 01:32:22.398 00:00:00.000 UDP 28.104.0.1:52129 -> 198.28.0.2:53 1 64 1 2025-11-17 01:32:22.398 00:00:00.000 UDP 28.104.0.1:60510 -> 198.28.0.2:53 1 64 1 2025-11-17 01:33:22.648 00:00:00.000 UDP 28.104.0.1:45936 -> 198.28.0.2:53 1 64 1 2025-11-17 01:33:22.648 00:00:00.000 UDP 28.104.0.1:53027 -> 198.28.0.2:53 1 64 1 2025-11-17 01:33:22.658 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45936 1 80 1 2025-11-17 01:33:22.658 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53027 1 109 1 2025-11-17 01:33:37.341 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-17 01:29:07.857 00:05:50.926 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-17 01:29:58.826 00:05:09.413 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-17 01:34:22.914 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45631 1 109 1 2025-11-17 01:34:22.914 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34734 1 80 1 2025-11-17 01:34:22.903 00:00:00.000 UDP 28.104.0.1:45631 -> 198.28.0.2:53 1 64 1 2025-11-17 01:34:22.903 00:00:00.000 UDP 28.104.0.1:34734 -> 198.28.0.2:53 1 64 1 2025-11-17 01:30:08.249 00:05:50.533 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-17 01:35:23.224 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55061 1 109 1 2025-11-17 01:35:23.224 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50780 1 80 1 2025-11-17 01:35:23.215 00:00:00.000 UDP 28.104.0.1:55061 -> 198.28.0.2:53 1 64 1 2025-11-17 01:35:23.215 00:00:00.000 UDP 28.104.0.1:50780 -> 198.28.0.2:53 1 64 1 2025-11-17 01:31:07.847 00:05:50.944 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-17 01:31:51.564 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 33 2240 1 2025-11-17 01:36:23.517 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40518 1 80 1 2025-11-17 01:36:23.517 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38432 1 109 1 2025-11-17 01:36:23.506 00:00:00.000 UDP 28.104.0.1:40518 -> 198.28.0.2:53 1 64 1 2025-11-17 01:36:23.506 00:00:00.000 UDP 28.104.0.1:38432 -> 198.28.0.2:53 1 64 1 2025-11-17 01:33:07.848 00:05:00.492 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-17 01:32:07.847 00:06:00.083 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-17 01:37:23.808 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48229 1 109 1 2025-11-17 01:37:23.808 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43354 1 80 1 2025-11-17 01:37:23.799 00:00:00.000 UDP 28.104.0.1:48229 -> 198.28.0.2:53 1 64 1 2025-11-17 01:37:23.799 00:00:00.000 UDP 28.104.0.1:43354 -> 198.28.0.2:53 1 64 1 2025-11-17 01:38:24.093 00:00:00.000 UDP 28.104.0.1:42790 -> 198.28.0.2:53 1 64 1 2025-11-17 01:38:24.093 00:00:00.000 UDP 28.104.0.1:47937 -> 198.28.0.2:53 1 64 1 2025-11-17 01:38:24.103 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47937 1 109 1 2025-11-17 01:38:24.103 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42790 1 80 1 2025-11-17 01:38:37.618 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-17 01:39:24.392 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47707 1 109 1 2025-11-17 01:39:24.392 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57754 1 80 1 2025-11-17 01:39:24.380 00:00:00.000 UDP 28.104.0.1:47707 -> 198.28.0.2:53 1 64 1 2025-11-17 01:39:24.380 00:00:00.000 UDP 28.104.0.1:57754 -> 198.28.0.2:53 1 64 1 2025-11-17 01:35:07.857 00:05:50.926 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-17 01:35:58.831 00:05:09.409 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-17 01:40:24.675 00:00:00.000 UDP 28.104.0.1:37992 -> 198.28.0.2:53 1 64 1 2025-11-17 01:40:24.675 00:00:00.000 UDP 28.104.0.1:59659 -> 198.28.0.2:53 1 64 1 2025-11-17 01:40:24.685 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37992 1 80 1 2025-11-17 01:40:24.685 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59659 1 109 1 2025-11-17 01:36:08.249 00:05:50.534 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-17 01:37:11.567 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 33 2380 1 2025-11-17 01:41:24.978 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59306 1 80 1 2025-11-17 01:41:24.976 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45497 1 109 1 2025-11-17 01:41:24.966 00:00:00.000 UDP 28.104.0.1:45497 -> 198.28.0.2:53 1 64 1 2025-11-17 01:41:24.966 00:00:00.000 UDP 28.104.0.1:59306 -> 198.28.0.2:53 1 64 1 2025-11-17 01:37:07.847 00:05:50.946 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-17 01:42:25.268 00:00:00.000 UDP 28.104.0.1:46094 -> 198.28.0.2:53 1 64 1 2025-11-17 01:42:25.268 00:00:00.000 UDP 28.104.0.1:34535 -> 198.28.0.2:53 1 64 1 2025-11-17 01:42:25.278 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34535 1 80 1 2025-11-17 01:42:25.278 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46094 1 109 1 2025-11-17 01:39:07.853 00:05:00.494 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-17 01:43:25.538 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44820 1 109 1 2025-11-17 01:43:25.537 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39202 1 80 1 2025-11-17 01:43:25.528 00:00:00.000 UDP 28.104.0.1:39202 -> 198.28.0.2:53 1 64 1 2025-11-17 01:43:25.528 00:00:00.000 UDP 28.104.0.1:44820 -> 198.28.0.2:53 1 64 1 2025-11-17 01:43:37.092 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-17 01:39:07.853 00:06:00.079 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-17 01:44:25.836 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36387 1 109 1 2025-11-17 01:44:25.836 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42961 1 80 1 2025-11-17 01:44:25.826 00:00:00.000 UDP 28.104.0.1:42961 -> 198.28.0.2:53 1 64 1 2025-11-17 01:44:25.826 00:00:00.000 UDP 28.104.0.1:36387 -> 198.28.0.2:53 1 64 1 2025-11-17 01:45:26.125 00:00:00.000 UDP 28.104.0.1:41271 -> 198.28.0.2:53 1 64 1 2025-11-17 01:45:26.125 00:00:00.000 UDP 28.104.0.1:34505 -> 198.28.0.2:53 1 64 1 2025-11-17 01:45:26.136 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34505 1 109 1 2025-11-17 01:45:26.136 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41271 1 80 1 2025-11-17 01:41:07.862 00:05:50.921 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-17 01:41:58.834 00:05:09.408 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-17 01:46:26.431 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54672 1 109 1 2025-11-17 01:46:26.431 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35138 1 80 1 2025-11-17 01:46:26.422 00:00:00.000 UDP 28.104.0.1:35138 -> 198.28.0.2:53 1 64 1 2025-11-17 01:46:26.422 00:00:00.000 UDP 28.104.0.1:54672 -> 198.28.0.2:53 1 64 1 2025-11-17 01:42:31.574 00:05:10.177 OSPF 28.0.2.1:0 -> 224.0.0.5:0 44 3284 1 2025-11-17 01:42:08.252 00:05:50.532 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-17 01:47:26.725 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55657 1 109 1 2025-11-17 01:47:26.725 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45874 1 80 1 2025-11-17 01:47:26.716 00:00:00.000 UDP 28.104.0.1:45874 -> 198.28.0.2:53 1 64 1 2025-11-17 01:47:26.716 00:00:00.000 UDP 28.104.0.1:55657 -> 198.28.0.2:53 1 64 1 2025-11-17 01:43:07.853 00:05:50.942 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-17 01:48:27.046 00:00:00.000 UDP 28.104.0.1:35855 -> 198.28.0.2:53 1 64 1 2025-11-17 01:48:27.046 00:00:00.000 UDP 28.104.0.1:48925 -> 198.28.0.2:53 1 64 1 2025-11-17 01:48:27.056 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48925 1 80 1 2025-11-17 01:48:27.056 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35855 1 109 1 2025-11-17 01:48:37.588 00:00:00.025 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-17 01:45:07.853 00:05:00.489 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-17 01:49:27.338 00:00:00.000 UDP 28.104.0.1:38771 -> 198.28.0.2:53 1 64 1 2025-11-17 01:49:27.339 00:00:00.000 UDP 28.104.0.1:57819 -> 198.28.0.2:53 1 64 1 2025-11-17 01:49:27.350 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38771 1 109 1 2025-11-17 01:49:27.350 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57819 1 80 1 2025-11-17 01:50:27.641 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58341 1 80 1 2025-11-17 01:50:27.640 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45830 1 109 1 2025-11-17 01:50:27.630 00:00:00.000 UDP 28.104.0.1:58341 -> 198.28.0.2:53 1 64 1 2025-11-17 01:50:27.630 00:00:00.000 UDP 28.104.0.1:45830 -> 198.28.0.2:53 1 64 1 2025-11-17 01:46:07.854 00:06:00.079 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-17 01:51:27.933 00:00:00.000 UDP 28.104.0.1:53526 -> 198.28.0.2:53 1 64 1 2025-11-17 01:51:27.932 00:00:00.000 UDP 28.104.0.1:53951 -> 198.28.0.2:53 1 64 1 2025-11-17 01:51:27.943 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53526 1 80 1 2025-11-17 01:51:27.943 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53951 1 109 1 2025-11-17 01:47:07.863 00:05:50.922 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-17 01:47:51.592 00:05:10.022 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2892 1 2025-11-17 01:47:58.834 00:05:09.410 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-17 01:52:28.233 00:00:00.000 UDP 28.104.0.1:54505 -> 198.28.0.2:53 1 64 1 2025-11-17 01:52:28.233 00:00:00.000 UDP 28.104.0.1:39914 -> 198.28.0.2:53 1 64 1 2025-11-17 01:52:28.242 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39914 1 80 1 2025-11-17 01:52:28.242 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54505 1 109 1 2025-11-17 01:48:08.252 00:05:50.535 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-17 01:53:28.539 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41824 1 109 1 2025-11-17 01:53:28.539 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39108 1 80 1 2025-11-17 01:53:28.529 00:00:00.000 UDP 28.104.0.1:39108 -> 198.28.0.2:53 1 64 1 2025-11-17 01:53:28.529 00:00:00.000 UDP 28.104.0.1:41824 -> 198.28.0.2:53 1 64 1 2025-11-17 01:53:37.539 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-17 01:49:07.853 00:05:50.943 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-17 01:54:28.818 00:00:00.000 UDP 28.104.0.1:53226 -> 198.28.0.2:53 1 64 1 2025-11-17 01:54:28.819 00:00:00.000 UDP 28.104.0.1:53478 -> 198.28.0.2:53 1 64 1 2025-11-17 01:54:28.830 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53478 1 80 1 2025-11-17 01:54:28.830 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53226 1 109 1 2025-11-17 01:51:07.855 00:05:00.489 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-17 01:55:29.121 00:00:00.000 UDP 28.104.0.1:60519 -> 198.28.0.2:53 1 64 1 2025-11-17 01:55:29.121 00:00:00.000 UDP 28.104.0.1:41503 -> 198.28.0.2:53 1 64 1 2025-11-17 01:55:29.131 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41503 1 80 1 2025-11-17 01:55:29.132 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60519 1 109 1 2025-11-17 01:56:29.432 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40060 1 109 1 2025-11-17 01:56:29.432 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33710 1 80 1 2025-11-17 01:56:29.421 00:00:00.000 UDP 28.104.0.1:33710 -> 198.28.0.2:53 1 64 1 2025-11-17 01:56:29.421 00:00:00.000 UDP 28.104.0.1:40060 -> 198.28.0.2:53 1 64 1 2025-11-17 01:53:11.614 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2752 1 2025-11-17 01:57:29.722 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40185 1 80 1 2025-11-17 01:57:29.722 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43192 1 109 1 2025-11-17 01:57:29.711 00:00:00.000 UDP 28.104.0.1:40185 -> 198.28.0.2:53 1 64 1 2025-11-17 01:57:29.710 00:00:00.000 UDP 28.104.0.1:43192 -> 198.28.0.2:53 1 64 1 2025-11-17 01:53:07.865 00:05:50.921 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-17 01:53:58.837 00:05:09.408 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-17 01:53:07.856 00:06:00.081 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-17 01:58:29.969 00:00:00.000 UDP 28.104.0.1:38111 -> 198.28.0.2:53 1 64 1 2025-11-17 01:58:29.969 00:00:00.000 UDP 28.104.0.1:33765 -> 198.28.0.2:53 1 64 1 2025-11-17 01:58:29.980 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38111 1 109 1 2025-11-17 01:58:29.979 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33765 1 80 1 2025-11-17 01:58:37.838 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 Summary: total flows: 323, total bytes: 99017, total packets: 1459, avg bps: 203, avg pps: 0, avg bpp: 67 Time window: 2025-11-17 00:54:08 - 2025-11-17 01:59:08 Total flows processed: 323, passed: 323, Blocks skipped: 0, Bytes read: 33656 Sys: 0.0039s User: 0.0039s Wall: 0.0044s flows/second: 73877.2 Runtime: 0.0044s