Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-17 01:54:08.254 00:05:50.533 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-17 01:59:30.271 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52917 1 109 1 2025-11-17 01:59:30.271 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50781 1 80 1 2025-11-17 01:59:30.261 00:00:00.000 UDP 28.104.0.1:50781 -> 198.28.0.2:53 1 64 1 2025-11-17 01:59:30.261 00:00:00.000 UDP 28.104.0.1:52917 -> 198.28.0.2:53 1 64 1 2025-11-17 01:55:07.855 00:05:50.942 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-17 02:00:30.590 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52087 1 80 1 2025-11-17 02:00:30.590 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40184 1 109 1 2025-11-17 02:00:30.580 00:00:00.000 UDP 28.104.0.1:52087 -> 198.28.0.2:53 1 64 1 2025-11-17 02:00:30.580 00:00:00.000 UDP 28.104.0.1:40184 -> 198.28.0.2:53 1 64 1 2025-11-17 01:57:07.857 00:05:00.488 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-17 02:01:30.881 00:00:00.000 UDP 28.104.0.1:44365 -> 198.28.0.2:53 1 64 1 2025-11-17 02:01:30.881 00:00:00.000 UDP 28.104.0.1:57037 -> 198.28.0.2:53 1 64 1 2025-11-17 02:01:30.891 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57037 1 80 1 2025-11-17 02:01:30.891 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44365 1 109 1 2025-11-17 02:02:31.205 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47741 1 80 1 2025-11-17 02:02:31.204 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47820 1 109 1 2025-11-17 02:02:31.193 00:00:00.000 UDP 28.104.0.1:47820 -> 198.28.0.2:53 1 64 1 2025-11-17 02:02:31.193 00:00:00.000 UDP 28.104.0.1:47741 -> 198.28.0.2:53 1 64 1 2025-11-17 01:58:31.622 00:05:10.011 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2424 1 2025-11-17 02:03:31.500 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41056 1 109 1 2025-11-17 02:03:31.500 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41976 1 80 1 2025-11-17 02:03:31.490 00:00:00.000 UDP 28.104.0.1:41056 -> 198.28.0.2:53 1 64 1 2025-11-17 02:03:31.490 00:00:00.000 UDP 28.104.0.1:41976 -> 198.28.0.2:53 1 64 1 2025-11-17 02:03:38.011 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-17 01:59:07.869 00:05:50.921 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-17 01:59:58.837 00:05:09.409 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-17 02:04:31.796 00:00:00.000 UDP 28.104.0.1:50559 -> 198.28.0.2:53 1 64 1 2025-11-17 02:04:31.796 00:00:00.000 UDP 28.104.0.1:53353 -> 198.28.0.2:53 1 64 1 2025-11-17 02:04:31.805 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53353 1 109 1 2025-11-17 02:04:31.805 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50559 1 80 1 2025-11-17 02:00:08.255 00:05:50.534 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-17 02:00:07.858 00:06:00.081 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-17 02:05:32.064 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33086 1 109 1 2025-11-17 02:05:32.064 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55614 1 80 1 2025-11-17 02:05:32.054 00:00:00.000 UDP 28.104.0.1:33086 -> 198.28.0.2:53 1 64 1 2025-11-17 02:05:32.054 00:00:00.000 UDP 28.104.0.1:55614 -> 198.28.0.2:53 1 64 1 2025-11-17 02:01:07.856 00:05:50.942 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-17 02:06:32.307 00:00:00.000 UDP 28.104.0.1:44381 -> 198.28.0.2:53 1 64 1 2025-11-17 02:06:32.307 00:00:00.000 UDP 28.104.0.1:39341 -> 198.28.0.2:53 1 64 1 2025-11-17 02:06:32.317 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44381 1 109 1 2025-11-17 02:06:32.317 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39341 1 80 1 2025-11-17 02:03:07.856 00:05:00.489 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-17 02:07:32.611 00:00:00.000 UDP 28.104.0.1:43881 -> 198.28.0.2:53 1 64 1 2025-11-17 02:07:32.611 00:00:00.000 UDP 28.104.0.1:40873 -> 198.28.0.2:53 1 64 1 2025-11-17 02:07:32.621 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40873 1 80 1 2025-11-17 02:07:32.621 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43881 1 109 1 2025-11-17 02:03:51.632 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 33 2380 1 2025-11-17 02:08:32.908 00:00:00.000 UDP 28.104.0.1:40271 -> 198.28.0.2:53 1 64 1 2025-11-17 02:08:32.908 00:00:00.000 UDP 28.104.0.1:54592 -> 198.28.0.2:53 1 64 1 2025-11-17 02:08:32.918 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40271 1 80 1 2025-11-17 02:08:32.918 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54592 1 109 1 2025-11-17 02:08:37.813 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-17 02:09:33.220 00:00:00.000 UDP 28.104.0.1:52300 -> 198.28.0.2:53 1 64 1 2025-11-17 02:09:33.220 00:00:00.000 UDP 28.104.0.1:57668 -> 198.28.0.2:53 1 64 1 2025-11-17 02:09:33.230 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57668 1 109 1 2025-11-17 02:09:33.230 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52300 1 80 1 2025-11-17 02:05:07.872 00:05:50.918 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-17 02:05:58.839 00:05:09.408 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-17 02:10:34.013 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40818 1 80 1 2025-11-17 02:10:34.013 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57686 1 109 1 2025-11-17 02:10:34.002 00:00:00.000 UDP 28.104.0.1:40818 -> 198.28.0.2:53 1 64 1 2025-11-17 02:10:34.002 00:00:00.000 UDP 28.104.0.1:57686 -> 198.28.0.2:53 1 64 1 2025-11-17 02:06:08.256 00:05:50.533 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-17 02:11:34.309 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47184 1 109 1 2025-11-17 02:11:34.309 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32818 1 80 1 2025-11-17 02:11:34.298 00:00:00.000 UDP 28.104.0.1:32818 -> 198.28.0.2:53 1 64 1 2025-11-17 02:11:34.298 00:00:00.000 UDP 28.104.0.1:47184 -> 198.28.0.2:53 1 64 1 2025-11-17 02:07:07.861 00:05:50.939 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-17 02:07:07.862 00:06:00.079 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-17 02:12:34.605 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39444 1 109 1 2025-11-17 02:12:34.602 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60138 1 80 1 2025-11-17 02:12:34.592 00:00:00.000 UDP 28.104.0.1:60138 -> 198.28.0.2:53 1 64 1 2025-11-17 02:12:34.594 00:00:00.000 UDP 28.104.0.1:39444 -> 198.28.0.2:53 1 64 1 2025-11-17 02:09:07.862 00:05:00.487 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-17 02:09:11.638 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2504 1 2025-11-17 02:13:34.901 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55039 1 80 1 2025-11-17 02:13:34.901 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48050 1 109 1 2025-11-17 02:13:34.889 00:00:00.000 UDP 28.104.0.1:48050 -> 198.28.0.2:53 1 64 1 2025-11-17 02:13:34.889 00:00:00.000 UDP 28.104.0.1:55039 -> 198.28.0.2:53 1 64 1 2025-11-17 02:13:37.867 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-17 02:14:35.220 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44326 1 80 1 2025-11-17 02:14:35.221 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40973 1 109 1 2025-11-17 02:14:35.210 00:00:00.000 UDP 28.104.0.1:44326 -> 198.28.0.2:53 1 64 1 2025-11-17 02:14:35.210 00:00:00.000 UDP 28.104.0.1:40973 -> 198.28.0.2:53 1 64 1 2025-11-17 02:15:35.513 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53059 1 80 1 2025-11-17 02:15:35.513 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55597 1 109 1 2025-11-17 02:15:35.502 00:00:00.000 UDP 28.104.0.1:55597 -> 198.28.0.2:53 1 64 1 2025-11-17 02:15:35.502 00:00:00.000 UDP 28.104.0.1:53059 -> 198.28.0.2:53 1 64 1 2025-11-17 02:11:07.873 00:05:50.918 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-17 02:11:58.840 00:05:09.410 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-17 02:16:35.795 00:00:00.000 UDP 28.104.0.1:47372 -> 198.28.0.2:53 1 64 1 2025-11-17 02:16:35.795 00:00:00.000 UDP 28.104.0.1:41867 -> 198.28.0.2:53 1 64 1 2025-11-17 02:16:35.805 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47372 1 80 1 2025-11-17 02:16:35.805 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41867 1 109 1 2025-11-17 02:12:08.256 00:05:50.534 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-17 02:17:36.143 00:00:00.000 UDP 28.104.0.1:49100 -> 198.28.0.2:53 1 64 1 2025-11-17 02:17:36.142 00:00:00.000 UDP 28.104.0.1:34777 -> 198.28.0.2:53 1 64 1 2025-11-17 02:17:36.153 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49100 1 109 1 2025-11-17 02:17:36.153 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34777 1 80 1 2025-11-17 02:13:07.863 00:05:50.938 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-17 02:18:36.452 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37429 1 80 1 2025-11-17 02:18:36.452 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52185 1 109 1 2025-11-17 02:18:36.442 00:00:00.000 UDP 28.104.0.1:37429 -> 198.28.0.2:53 1 64 1 2025-11-17 02:18:36.442 00:00:00.000 UDP 28.104.0.1:52185 -> 198.28.0.2:53 1 64 1 2025-11-17 02:18:37.951 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-17 02:14:31.646 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 47 3492 1 2025-11-17 02:15:07.863 00:05:00.487 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-17 02:14:07.862 00:06:00.080 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-17 02:19:36.743 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48356 1 80 1 2025-11-17 02:19:36.743 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36195 1 109 1 2025-11-17 02:19:36.731 00:00:00.000 UDP 28.104.0.1:36195 -> 198.28.0.2:53 1 64 1 2025-11-17 02:19:36.731 00:00:00.000 UDP 28.104.0.1:48356 -> 198.28.0.2:53 1 64 1 2025-11-17 02:20:40.583 00:00:00.000 UDP 28.104.0.1:38265 -> 198.28.0.2:53 1 64 1 2025-11-17 02:20:40.582 00:00:00.000 UDP 28.104.0.1:38131 -> 198.28.0.2:53 1 64 1 2025-11-17 02:20:40.592 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38265 1 80 1 2025-11-17 02:20:40.592 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38131 1 109 1 2025-11-17 02:21:40.894 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43710 1 80 1 2025-11-17 02:21:40.894 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53427 1 109 1 2025-11-17 02:21:40.883 00:00:00.000 UDP 28.104.0.1:43710 -> 198.28.0.2:53 1 64 1 2025-11-17 02:21:40.883 00:00:00.000 UDP 28.104.0.1:53427 -> 198.28.0.2:53 1 64 1 2025-11-17 02:17:07.874 00:05:50.918 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-17 02:17:58.840 00:05:09.410 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-17 02:22:41.199 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50731 1 109 1 2025-11-17 02:22:41.199 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35122 1 80 1 2025-11-17 02:22:41.188 00:00:00.000 UDP 28.104.0.1:35122 -> 198.28.0.2:53 1 64 1 2025-11-17 02:22:41.188 00:00:00.000 UDP 28.104.0.1:50731 -> 198.28.0.2:53 1 64 1 2025-11-17 02:18:08.260 00:05:50.531 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-17 02:23:42.176 00:00:00.000 UDP 28.104.0.1:34240 -> 198.28.0.2:53 1 64 1 2025-11-17 02:23:42.176 00:00:00.000 UDP 28.104.0.1:60017 -> 198.28.0.2:53 1 64 1 2025-11-17 02:23:38.219 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-17 02:23:42.187 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60017 1 109 1 2025-11-17 02:23:42.187 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34240 1 80 1 2025-11-17 02:19:42.176 00:05:09.482 OSPF 28.0.2.1:0 -> 224.0.0.5:0 42 2892 1 2025-11-17 02:19:07.864 00:05:50.938 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-17 02:24:42.476 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45206 1 80 1 2025-11-17 02:24:42.476 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50223 1 109 1 2025-11-17 02:24:42.465 00:00:00.000 UDP 28.104.0.1:50223 -> 198.28.0.2:53 1 64 1 2025-11-17 02:24:42.465 00:00:00.000 UDP 28.104.0.1:45206 -> 198.28.0.2:53 1 64 1 2025-11-17 02:21:07.867 00:05:00.488 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-17 02:25:42.722 00:00:00.000 UDP 28.104.0.1:50681 -> 198.28.0.2:53 1 64 1 2025-11-17 02:25:42.721 00:00:00.000 UDP 28.104.0.1:34565 -> 198.28.0.2:53 1 64 1 2025-11-17 02:25:42.732 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34565 1 109 1 2025-11-17 02:25:42.732 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50681 1 80 1 2025-11-17 02:21:07.867 00:06:00.076 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-17 02:26:42.983 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33705 1 80 1 2025-11-17 02:26:42.983 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51038 1 109 1 2025-11-17 02:26:42.973 00:00:00.000 UDP 28.104.0.1:33705 -> 198.28.0.2:53 1 64 1 2025-11-17 02:26:42.973 00:00:00.000 UDP 28.104.0.1:51038 -> 198.28.0.2:53 1 64 1 2025-11-17 02:27:43.287 00:00:00.000 UDP 28.104.0.1:59790 -> 198.28.0.2:53 1 64 1 2025-11-17 02:27:43.287 00:00:00.000 UDP 28.104.0.1:50938 -> 198.28.0.2:53 1 64 1 2025-11-17 02:27:43.297 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59790 1 80 1 2025-11-17 02:27:43.297 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50938 1 109 1 2025-11-17 02:23:07.879 00:05:50.916 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-17 02:23:58.842 00:05:09.411 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-17 02:28:38.321 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-17 02:28:43.586 00:00:00.000 UDP 28.104.0.1:33302 -> 198.28.0.2:53 1 64 1 2025-11-17 02:28:43.586 00:00:00.000 UDP 28.104.0.1:57380 -> 198.28.0.2:53 1 64 1 2025-11-17 02:28:43.596 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57380 1 80 1 2025-11-17 02:28:43.596 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33302 1 109 1 2025-11-17 02:24:08.262 00:05:50.532 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-17 02:25:01.659 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2488 1 2025-11-17 02:29:43.896 00:00:00.000 UDP 28.104.0.1:50477 -> 198.28.0.2:53 1 64 1 2025-11-17 02:29:43.896 00:00:00.000 UDP 28.104.0.1:60391 -> 198.28.0.2:53 1 64 1 2025-11-17 02:29:43.906 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60391 1 80 1 2025-11-17 02:29:43.906 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50477 1 109 1 2025-11-17 02:25:07.870 00:05:50.932 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-17 02:30:44.216 00:00:00.000 UDP 28.104.0.1:38378 -> 198.28.0.2:53 1 64 1 2025-11-17 02:30:44.216 00:00:00.000 UDP 28.104.0.1:42953 -> 198.28.0.2:53 1 64 1 2025-11-17 02:30:44.228 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38378 1 109 1 2025-11-17 02:30:44.228 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42953 1 80 1 2025-11-17 02:27:07.871 00:05:00.492 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-17 02:31:44.528 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49811 1 80 1 2025-11-17 02:31:44.528 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47179 1 109 1 2025-11-17 02:31:44.518 00:00:00.000 UDP 28.104.0.1:49811 -> 198.28.0.2:53 1 64 1 2025-11-17 02:31:44.518 00:00:00.000 UDP 28.104.0.1:47179 -> 198.28.0.2:53 1 64 1 2025-11-17 02:32:44.811 00:00:00.000 UDP 28.104.0.1:39438 -> 198.28.0.2:53 1 64 1 2025-11-17 02:32:44.810 00:00:00.000 UDP 28.104.0.1:47233 -> 198.28.0.2:53 1 64 1 2025-11-17 02:32:44.820 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47233 1 80 1 2025-11-17 02:32:44.820 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39438 1 109 1 2025-11-17 02:28:07.870 00:06:00.077 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-17 02:33:45.127 00:00:00.000 UDP 28.104.0.1:33401 -> 198.28.0.2:53 1 64 1 2025-11-17 02:33:45.127 00:00:00.000 UDP 28.104.0.1:57165 -> 198.28.0.2:53 1 64 1 2025-11-17 02:33:38.389 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-17 02:33:45.138 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57165 1 109 1 2025-11-17 02:33:45.138 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33401 1 80 1 2025-11-17 02:29:07.882 00:05:50.912 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-17 02:29:58.842 00:05:09.411 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-17 02:30:21.666 00:05:10.010 OSPF 28.0.2.1:0 -> 224.0.0.5:0 32 2176 1 2025-11-17 02:34:45.383 00:00:00.000 UDP 28.104.0.1:36057 -> 198.28.0.2:53 1 64 1 2025-11-17 02:34:45.383 00:00:00.000 UDP 28.104.0.1:38561 -> 198.28.0.2:53 1 64 1 2025-11-17 02:34:45.393 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36057 1 80 1 2025-11-17 02:34:45.394 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38561 1 109 1 2025-11-17 02:30:08.263 00:05:50.530 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-17 02:35:45.685 00:00:00.000 UDP 28.104.0.1:52402 -> 198.28.0.2:53 1 64 1 2025-11-17 02:35:45.685 00:00:00.000 UDP 28.104.0.1:34313 -> 198.28.0.2:53 1 64 1 2025-11-17 02:35:45.696 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52402 1 109 1 2025-11-17 02:35:45.697 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34313 1 80 1 2025-11-17 02:31:07.870 00:05:50.933 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-17 02:36:46.303 00:00:00.000 UDP 28.104.0.1:55012 -> 198.28.0.2:53 1 64 1 2025-11-17 02:36:46.303 00:00:00.000 UDP 28.104.0.1:44446 -> 198.28.0.2:53 1 64 1 2025-11-17 02:36:46.313 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55012 1 109 1 2025-11-17 02:36:46.314 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44446 1 80 1 2025-11-17 02:33:07.873 00:05:00.491 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-17 02:37:46.599 00:00:00.000 UDP 28.104.0.1:41782 -> 198.28.0.2:53 1 64 1 2025-11-17 02:37:46.599 00:00:00.000 UDP 28.104.0.1:33910 -> 198.28.0.2:53 1 64 1 2025-11-17 02:37:46.609 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33910 1 109 1 2025-11-17 02:37:46.609 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41782 1 80 1 2025-11-17 02:38:46.918 00:00:00.000 UDP 28.104.0.1:57367 -> 198.28.0.2:53 1 64 1 2025-11-17 02:38:46.918 00:00:00.000 UDP 28.104.0.1:37715 -> 198.28.0.2:53 1 64 1 2025-11-17 02:38:38.505 00:00:00.025 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-17 02:38:46.928 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37715 1 80 1 2025-11-17 02:38:46.928 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57367 1 109 1 2025-11-17 02:39:47.235 00:00:00.000 UDP 28.104.0.1:56810 -> 198.28.0.2:53 1 64 1 2025-11-17 02:39:47.235 00:00:00.000 UDP 28.104.0.1:47043 -> 198.28.0.2:53 1 64 1 2025-11-17 02:39:47.246 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47043 1 109 1 2025-11-17 02:39:47.246 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56810 1 80 1 2025-11-17 02:35:41.676 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 33 2380 1 2025-11-17 02:35:07.881 00:05:50.914 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-17 02:35:58.845 00:05:09.411 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-17 02:35:07.873 00:06:00.078 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-17 02:40:47.540 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38798 1 109 1 2025-11-17 02:40:47.539 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40793 1 80 1 2025-11-17 02:40:47.528 00:00:00.000 UDP 28.104.0.1:40793 -> 198.28.0.2:53 1 64 1 2025-11-17 02:40:47.528 00:00:00.000 UDP 28.104.0.1:38798 -> 198.28.0.2:53 1 64 1 2025-11-17 02:36:08.265 00:05:50.531 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-17 02:41:47.793 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48883 1 109 1 2025-11-17 02:41:47.793 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38191 1 80 1 2025-11-17 02:41:47.782 00:00:00.000 UDP 28.104.0.1:38191 -> 198.28.0.2:53 1 64 1 2025-11-17 02:41:47.782 00:00:00.000 UDP 28.104.0.1:48883 -> 198.28.0.2:53 1 64 1 2025-11-17 02:37:07.872 00:05:50.935 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-17 02:42:48.085 00:00:00.000 UDP 28.104.0.1:41674 -> 198.28.0.2:53 1 64 1 2025-11-17 02:42:48.085 00:00:00.000 UDP 28.104.0.1:33809 -> 198.28.0.2:53 1 64 1 2025-11-17 02:42:48.096 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33809 1 80 1 2025-11-17 02:42:48.096 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41674 1 109 1 2025-11-17 02:39:07.872 00:05:00.492 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-17 02:43:38.419 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-17 02:43:48.348 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41950 1 80 1 2025-11-17 02:43:48.348 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40964 1 109 1 2025-11-17 02:43:48.338 00:00:00.000 UDP 28.104.0.1:41950 -> 198.28.0.2:53 1 64 1 2025-11-17 02:43:48.339 00:00:00.000 UDP 28.104.0.1:40964 -> 198.28.0.2:53 1 64 1 2025-11-17 02:44:48.642 00:00:00.000 UDP 28.104.0.1:51188 -> 198.28.0.2:53 1 64 1 2025-11-17 02:44:48.641 00:00:00.000 UDP 28.104.0.1:38181 -> 198.28.0.2:53 1 64 1 2025-11-17 02:44:48.652 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51188 1 80 1 2025-11-17 02:44:48.652 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38181 1 109 1 2025-11-17 02:41:01.682 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 45 3364 1 2025-11-17 02:45:48.957 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43858 1 109 1 2025-11-17 02:45:48.957 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58181 1 80 1 2025-11-17 02:45:48.948 00:00:00.000 UDP 28.104.0.1:58181 -> 198.28.0.2:53 1 64 1 2025-11-17 02:45:48.948 00:00:00.000 UDP 28.104.0.1:43858 -> 198.28.0.2:53 1 64 1 2025-11-17 02:41:07.882 00:05:50.915 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-17 02:41:58.845 00:05:09.413 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-17 02:46:49.254 00:00:00.000 UDP 28.104.0.1:49171 -> 198.28.0.2:53 1 64 1 2025-11-17 02:46:49.254 00:00:00.000 UDP 28.104.0.1:58578 -> 198.28.0.2:53 1 64 1 2025-11-17 02:46:49.265 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49171 1 109 1 2025-11-17 02:46:49.265 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58578 1 80 1 2025-11-17 02:42:08.265 00:05:50.532 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-17 02:42:07.874 00:06:00.078 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-17 02:47:49.508 00:00:00.000 UDP 28.104.0.1:57888 -> 198.28.0.2:53 1 64 1 2025-11-17 02:47:49.508 00:00:00.000 UDP 28.104.0.1:36319 -> 198.28.0.2:53 1 64 1 2025-11-17 02:47:49.518 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36319 1 80 1 2025-11-17 02:47:49.517 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57888 1 109 1 2025-11-17 02:43:07.872 00:05:50.935 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-17 02:48:38.743 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-17 02:48:49.798 00:00:00.000 UDP 28.104.0.1:51908 -> 198.28.0.2:53 1 64 1 2025-11-17 02:48:49.798 00:00:00.000 UDP 28.104.0.1:60201 -> 198.28.0.2:53 1 64 1 2025-11-17 02:48:49.809 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60201 1 109 1 2025-11-17 02:48:49.809 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51908 1 80 1 2025-11-17 02:45:07.873 00:05:00.493 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-17 02:49:50.109 00:00:00.000 UDP 28.104.0.1:55130 -> 198.28.0.2:53 1 64 1 2025-11-17 02:49:50.109 00:00:00.000 UDP 28.104.0.1:47100 -> 198.28.0.2:53 1 64 1 2025-11-17 02:49:50.121 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47100 1 80 1 2025-11-17 02:49:50.121 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55130 1 109 1 2025-11-17 02:46:21.691 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 43 2984 1 2025-11-17 02:50:50.413 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36377 1 109 1 2025-11-17 02:50:50.413 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34007 1 80 1 2025-11-17 02:50:50.402 00:00:00.000 UDP 28.104.0.1:34007 -> 198.28.0.2:53 1 64 1 2025-11-17 02:50:50.402 00:00:00.000 UDP 28.104.0.1:36377 -> 198.28.0.2:53 1 64 1 2025-11-17 02:51:50.654 00:00:00.000 UDP 28.104.0.1:49061 -> 198.28.0.2:53 1 64 1 2025-11-17 02:51:50.654 00:00:00.000 UDP 28.104.0.1:33964 -> 198.28.0.2:53 1 64 1 2025-11-17 02:51:50.665 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49061 1 109 1 2025-11-17 02:51:50.665 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33964 1 80 1 2025-11-17 02:47:07.883 00:05:50.916 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-17 02:47:58.846 00:05:09.414 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-17 02:52:50.945 00:00:00.000 UDP 28.104.0.1:47444 -> 198.28.0.2:53 1 64 1 2025-11-17 02:52:50.946 00:00:00.000 UDP 28.104.0.1:33211 -> 198.28.0.2:53 1 64 1 2025-11-17 02:52:50.957 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33211 1 109 1 2025-11-17 02:52:50.957 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47444 1 80 1 2025-11-17 02:48:08.269 00:05:50.529 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-17 02:53:38.732 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-17 02:53:51.239 00:00:00.000 UDP 28.104.0.1:43292 -> 198.28.0.2:53 1 64 1 2025-11-17 02:53:51.239 00:00:00.000 UDP 28.104.0.1:39480 -> 198.28.0.2:53 1 64 1 2025-11-17 02:53:51.251 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39480 1 80 1 2025-11-17 02:53:51.251 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43292 1 109 1 2025-11-17 02:49:07.873 00:05:50.936 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-17 02:49:07.873 00:06:00.080 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-17 02:54:51.492 00:00:00.000 UDP 28.104.0.1:37675 -> 198.28.0.2:53 1 64 1 2025-11-17 02:54:51.492 00:00:00.000 UDP 28.104.0.1:37439 -> 198.28.0.2:53 1 64 1 2025-11-17 02:54:51.502 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37439 1 80 1 2025-11-17 02:54:51.502 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37675 1 109 1 2025-11-17 02:51:07.874 00:05:00.494 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-17 02:55:51.746 00:00:00.000 UDP 28.104.0.1:60898 -> 198.28.0.2:53 1 64 1 2025-11-17 02:55:51.746 00:00:00.000 UDP 28.104.0.1:53795 -> 198.28.0.2:53 1 64 1 2025-11-17 02:55:51.756 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53795 1 80 1 2025-11-17 02:55:51.756 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60898 1 109 1 2025-11-17 02:51:41.695 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2828 1 2025-11-17 02:56:52.070 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40944 1 109 1 2025-11-17 02:56:52.069 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60004 1 80 1 2025-11-17 02:56:52.059 00:00:00.000 UDP 28.104.0.1:40944 -> 198.28.0.2:53 1 64 1 2025-11-17 02:56:52.059 00:00:00.000 UDP 28.104.0.1:60004 -> 198.28.0.2:53 1 64 1 2025-11-17 02:57:52.367 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37343 1 109 1 2025-11-17 02:57:52.368 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45229 1 80 1 2025-11-17 02:57:52.357 00:00:00.000 UDP 28.104.0.1:45229 -> 198.28.0.2:53 1 64 1 2025-11-17 02:57:52.357 00:00:00.000 UDP 28.104.0.1:37343 -> 198.28.0.2:53 1 64 1 2025-11-17 02:53:07.884 00:05:50.915 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-17 02:53:58.848 00:05:09.413 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-17 02:58:38.686 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 Summary: total flows: 317, total bytes: 95427, total packets: 1406, avg bps: 195, avg pps: 0, avg bpp: 67 Time window: 2025-11-17 01:54:08 - 2025-11-17 02:59:08 Total flows processed: 317, passed: 317, Blocks skipped: 0, Bytes read: 33032 Sys: 0.0043s User: 0.0035s Wall: 0.0041s flows/second: 76828.5 Runtime: 0.0041s