Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-17 04:54:08.317 00:05:50.525 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-17 04:55:07.921 00:05:00.080 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-17 04:59:34.625 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51953 1 109 1 2025-11-17 04:59:34.624 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46253 1 80 1 2025-11-17 04:59:34.614 00:00:00.000 UDP 28.104.0.1:46253 -> 198.28.0.2:53 1 64 1 2025-11-17 04:59:34.614 00:00:00.000 UDP 28.104.0.1:51953 -> 198.28.0.2:53 1 64 1 2025-11-17 04:55:07.921 00:05:50.934 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-17 05:00:34.913 00:00:00.000 UDP 28.104.0.1:54964 -> 198.28.0.2:53 1 64 1 2025-11-17 05:00:34.914 00:00:00.000 UDP 28.104.0.1:56917 -> 198.28.0.2:53 1 64 1 2025-11-17 05:00:34.923 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56917 1 109 1 2025-11-17 05:00:34.923 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54964 1 80 1 2025-11-17 04:57:07.922 00:05:00.506 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-17 05:01:35.227 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46903 1 109 1 2025-11-17 05:01:35.229 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37422 1 80 1 2025-11-17 05:01:35.217 00:00:00.000 UDP 28.104.0.1:37422 -> 198.28.0.2:53 1 64 1 2025-11-17 05:01:35.217 00:00:00.000 UDP 28.104.0.1:46903 -> 198.28.0.2:53 1 64 1 2025-11-17 05:02:35.525 00:00:00.000 UDP 28.104.0.1:56031 -> 198.28.0.2:53 1 64 1 2025-11-17 05:02:35.525 00:00:00.000 UDP 28.104.0.1:40072 -> 198.28.0.2:53 1 64 1 2025-11-17 05:02:35.534 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56031 1 109 1 2025-11-17 05:02:35.534 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40072 1 80 1 2025-11-17 05:03:35.817 00:00:00.000 UDP 28.104.0.1:42753 -> 198.28.0.2:53 1 64 1 2025-11-17 05:03:35.817 00:00:00.000 UDP 28.104.0.1:54174 -> 198.28.0.2:53 1 64 1 2025-11-17 04:59:31.910 00:05:02.682 OSPF 28.0.2.1:0 -> 224.0.0.5:0 34 2496 1 2025-11-17 05:03:35.828 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42753 1 80 1 2025-11-17 05:03:35.828 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54174 1 109 1 2025-11-17 05:03:41.581 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-17 04:59:07.933 00:05:50.914 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-17 04:59:58.893 00:05:09.420 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-17 05:04:36.123 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39547 1 109 1 2025-11-17 05:04:36.123 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53336 1 80 1 2025-11-17 05:04:36.113 00:00:00.000 UDP 28.104.0.1:53336 -> 198.28.0.2:53 1 64 1 2025-11-17 05:04:36.113 00:00:00.000 UDP 28.104.0.1:39547 -> 198.28.0.2:53 1 64 1 2025-11-17 05:00:08.318 00:05:50.529 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-17 05:01:07.923 00:05:00.080 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-17 05:05:36.417 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37313 1 80 1 2025-11-17 05:05:36.417 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48917 1 109 1 2025-11-17 05:05:36.407 00:00:00.000 UDP 28.104.0.1:37313 -> 198.28.0.2:53 1 64 1 2025-11-17 05:05:36.407 00:00:00.000 UDP 28.104.0.1:48917 -> 198.28.0.2:53 1 64 1 2025-11-17 05:01:07.923 00:05:50.934 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-17 05:06:36.714 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59637 1 109 1 2025-11-17 05:06:36.714 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56750 1 80 1 2025-11-17 05:06:36.705 00:00:00.000 UDP 28.104.0.1:56750 -> 198.28.0.2:53 1 64 1 2025-11-17 05:06:36.705 00:00:00.000 UDP 28.104.0.1:59637 -> 198.28.0.2:53 1 64 1 2025-11-17 05:03:07.925 00:05:00.497 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-17 05:07:37.006 00:00:00.000 UDP 28.104.0.1:32868 -> 198.28.0.2:53 1 64 1 2025-11-17 05:07:37.006 00:00:00.000 UDP 28.104.0.1:50537 -> 198.28.0.2:53 1 64 1 2025-11-17 05:07:37.019 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32868 1 109 1 2025-11-17 05:07:37.020 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50537 1 80 1 2025-11-17 05:08:41.397 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-17 05:08:37.270 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57155 1 80 1 2025-11-17 05:08:37.270 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38707 1 109 1 2025-11-17 05:08:37.260 00:00:00.000 UDP 28.104.0.1:57155 -> 198.28.0.2:53 1 64 1 2025-11-17 05:08:37.260 00:00:00.000 UDP 28.104.0.1:38707 -> 198.28.0.2:53 1 64 1 2025-11-17 05:04:41.912 00:05:00.755 OSPF 28.0.2.1:0 -> 224.0.0.5:0 47 3484 1 2025-11-17 05:09:37.554 00:00:00.000 UDP 28.104.0.1:44915 -> 198.28.0.2:53 1 64 1 2025-11-17 05:09:37.554 00:00:00.000 UDP 28.104.0.1:34725 -> 198.28.0.2:53 1 64 1 2025-11-17 05:09:37.566 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34725 1 109 1 2025-11-17 05:09:37.566 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44915 1 80 1 2025-11-17 05:05:07.935 00:05:50.915 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-17 05:05:58.896 00:05:09.416 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-17 05:10:37.848 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54716 1 109 1 2025-11-17 05:10:37.848 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51370 1 80 1 2025-11-17 05:10:37.840 00:00:00.000 UDP 28.104.0.1:54716 -> 198.28.0.2:53 1 64 1 2025-11-17 05:10:37.839 00:00:00.000 UDP 28.104.0.1:51370 -> 198.28.0.2:53 1 64 1 2025-11-17 05:06:08.324 00:05:50.528 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-17 05:07:07.928 00:05:00.078 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-17 05:11:38.164 00:00:00.000 UDP 28.104.0.1:34807 -> 198.28.0.2:53 1 64 1 2025-11-17 05:11:38.164 00:00:00.000 UDP 28.104.0.1:58273 -> 198.28.0.2:53 1 64 1 2025-11-17 05:11:38.173 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58273 1 80 1 2025-11-17 05:11:38.174 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34807 1 109 1 2025-11-17 05:07:07.928 00:05:50.934 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-17 05:12:38.471 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48035 1 80 1 2025-11-17 05:12:38.471 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37974 1 109 1 2025-11-17 05:12:38.461 00:00:00.000 UDP 28.104.0.1:48035 -> 198.28.0.2:53 1 64 1 2025-11-17 05:12:38.461 00:00:00.000 UDP 28.104.0.1:37974 -> 198.28.0.2:53 1 64 1 2025-11-17 05:09:07.928 00:05:00.496 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-17 05:13:38.755 00:00:00.000 UDP 28.104.0.1:41716 -> 198.28.0.2:53 1 64 1 2025-11-17 05:13:38.755 00:00:00.000 UDP 28.104.0.1:46697 -> 198.28.0.2:53 1 64 1 2025-11-17 05:13:41.658 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-17 05:13:38.765 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41716 1 109 1 2025-11-17 05:13:38.765 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46697 1 80 1 2025-11-17 05:09:51.917 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2736 1 2025-11-17 05:14:39.069 00:00:00.000 UDP 28.104.0.1:60090 -> 198.28.0.2:53 1 64 1 2025-11-17 05:14:39.069 00:00:00.000 UDP 28.104.0.1:56164 -> 198.28.0.2:53 1 64 1 2025-11-17 05:14:39.079 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60090 1 109 1 2025-11-17 05:14:39.078 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56164 1 80 1 2025-11-17 05:15:39.334 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46428 1 80 1 2025-11-17 05:15:39.334 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53238 1 109 1 2025-11-17 05:15:39.323 00:00:00.000 UDP 28.104.0.1:46428 -> 198.28.0.2:53 1 64 1 2025-11-17 05:15:39.323 00:00:00.000 UDP 28.104.0.1:53238 -> 198.28.0.2:53 1 64 1 2025-11-17 05:11:07.938 00:05:50.913 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-17 05:11:58.901 00:05:09.414 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-17 05:16:39.599 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48715 1 80 1 2025-11-17 05:16:39.599 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44271 1 109 1 2025-11-17 05:16:39.588 00:00:00.000 UDP 28.104.0.1:44271 -> 198.28.0.2:53 1 64 1 2025-11-17 05:16:39.588 00:00:00.000 UDP 28.104.0.1:48715 -> 198.28.0.2:53 1 64 1 2025-11-17 05:12:08.323 00:05:50.528 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-17 05:13:07.930 00:05:00.078 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-17 05:17:39.853 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53172 1 80 1 2025-11-17 05:17:39.857 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55190 1 109 1 2025-11-17 05:17:39.843 00:00:00.000 UDP 28.104.0.1:55190 -> 198.28.0.2:53 1 64 1 2025-11-17 05:17:39.844 00:00:00.000 UDP 28.104.0.1:53172 -> 198.28.0.2:53 1 64 1 2025-11-17 05:13:07.928 00:05:50.933 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-17 05:18:41.775 00:00:00.026 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-17 05:18:40.190 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48147 1 80 1 2025-11-17 05:18:40.190 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43214 1 109 1 2025-11-17 05:18:40.179 00:00:00.000 UDP 28.104.0.1:48147 -> 198.28.0.2:53 1 64 1 2025-11-17 05:18:40.179 00:00:00.000 UDP 28.104.0.1:43214 -> 198.28.0.2:53 1 64 1 2025-11-17 05:15:07.930 00:05:00.495 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-17 05:15:11.917 00:05:10.014 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2856 1 2025-11-17 05:19:40.435 00:00:00.000 UDP 28.104.0.1:56221 -> 198.28.0.2:53 1 64 1 2025-11-17 05:19:40.435 00:00:00.000 UDP 28.104.0.1:58189 -> 198.28.0.2:53 1 64 1 2025-11-17 05:19:40.445 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58189 1 80 1 2025-11-17 05:19:40.445 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56221 1 109 1 2025-11-17 05:20:40.741 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46965 1 80 1 2025-11-17 05:20:40.740 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60244 1 109 1 2025-11-17 05:20:40.730 00:00:00.000 UDP 28.104.0.1:46965 -> 198.28.0.2:53 1 64 1 2025-11-17 05:20:40.729 00:00:00.000 UDP 28.104.0.1:60244 -> 198.28.0.2:53 1 64 1 2025-11-17 05:21:41.062 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59994 1 80 1 2025-11-17 05:21:41.062 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52659 1 109 1 2025-11-17 05:21:41.050 00:00:00.000 UDP 28.104.0.1:59994 -> 198.28.0.2:53 1 64 1 2025-11-17 05:21:41.051 00:00:00.000 UDP 28.104.0.1:52659 -> 198.28.0.2:53 1 64 1 2025-11-17 05:17:07.941 00:05:50.912 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-17 05:17:58.902 00:05:09.414 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-17 05:22:41.301 00:00:00.000 UDP 28.104.0.1:60382 -> 198.28.0.2:53 1 64 1 2025-11-17 05:22:41.301 00:00:00.000 UDP 28.104.0.1:41839 -> 198.28.0.2:53 1 64 1 2025-11-17 05:22:41.311 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60382 1 80 1 2025-11-17 05:22:41.311 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41839 1 109 1 2025-11-17 05:18:08.324 00:05:50.530 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-17 05:19:07.932 00:05:00.075 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-17 05:23:41.594 00:00:00.000 UDP 28.104.0.1:49430 -> 198.28.0.2:53 1 64 1 2025-11-17 05:23:41.594 00:00:00.000 UDP 28.104.0.1:42652 -> 198.28.0.2:53 1 64 1 2025-11-17 05:23:41.813 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-17 05:23:41.604 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42652 1 80 1 2025-11-17 05:23:41.604 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49430 1 109 1 2025-11-17 05:19:07.932 00:05:50.933 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-17 05:24:41.889 00:00:00.000 UDP 28.104.0.1:58283 -> 198.28.0.2:53 1 64 1 2025-11-17 05:24:41.889 00:00:00.000 UDP 28.104.0.1:44698 -> 198.28.0.2:53 1 64 1 2025-11-17 05:24:41.899 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58283 1 80 1 2025-11-17 05:24:41.899 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44698 1 109 1 2025-11-17 05:20:31.931 00:05:10.010 OSPF 28.0.2.1:0 -> 224.0.0.5:0 33 2240 1 2025-11-17 05:21:07.933 00:05:00.494 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-17 05:25:44.062 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47949 1 80 1 2025-11-17 05:25:44.062 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43386 1 109 1 2025-11-17 05:25:44.052 00:00:00.000 UDP 28.104.0.1:47949 -> 198.28.0.2:53 1 64 1 2025-11-17 05:25:44.052 00:00:00.000 UDP 28.104.0.1:43386 -> 198.28.0.2:53 1 64 1 2025-11-17 05:26:44.358 00:00:00.000 UDP 28.104.0.1:37651 -> 198.28.0.2:53 1 64 1 2025-11-17 05:26:44.358 00:00:00.000 UDP 28.104.0.1:39468 -> 198.28.0.2:53 1 64 1 2025-11-17 05:26:44.368 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37651 1 80 1 2025-11-17 05:26:44.369 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39468 1 109 1 2025-11-17 05:27:44.672 00:00:00.000 UDP 28.104.0.1:53440 -> 198.28.0.2:53 1 64 1 2025-11-17 05:27:44.672 00:00:00.000 UDP 28.104.0.1:46347 -> 198.28.0.2:53 1 64 1 2025-11-17 05:27:44.682 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46347 1 109 1 2025-11-17 05:27:44.682 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53440 1 80 1 2025-11-17 05:23:07.943 00:05:50.917 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-17 05:23:58.905 00:05:09.412 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-17 05:28:41.956 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-17 05:28:44.977 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54637 1 80 1 2025-11-17 05:28:44.978 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37397 1 109 1 2025-11-17 05:28:44.967 00:00:00.000 UDP 28.104.0.1:54637 -> 198.28.0.2:53 1 64 1 2025-11-17 05:28:44.967 00:00:00.000 UDP 28.104.0.1:37397 -> 198.28.0.2:53 1 64 1 2025-11-17 05:24:08.326 00:05:50.534 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-17 05:25:07.933 00:05:00.076 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-17 05:29:45.269 00:00:00.000 UDP 28.104.0.1:42444 -> 198.28.0.2:53 1 64 1 2025-11-17 05:29:45.269 00:00:00.000 UDP 28.104.0.1:38953 -> 198.28.0.2:53 1 64 1 2025-11-17 05:29:45.280 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38953 1 109 1 2025-11-17 05:29:45.280 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42444 1 80 1 2025-11-17 05:25:07.933 00:05:50.938 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-17 05:25:51.941 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 33 2380 1 2025-11-17 05:30:45.583 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34441 1 80 1 2025-11-17 05:30:45.583 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43279 1 109 1 2025-11-17 05:30:45.572 00:00:00.000 UDP 28.104.0.1:43279 -> 198.28.0.2:53 1 64 1 2025-11-17 05:30:45.572 00:00:00.000 UDP 28.104.0.1:34441 -> 198.28.0.2:53 1 64 1 2025-11-17 05:27:07.933 00:05:00.495 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-17 05:31:45.892 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37131 1 80 1 2025-11-17 05:31:45.892 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38101 1 109 1 2025-11-17 05:31:45.880 00:00:00.000 UDP 28.104.0.1:37131 -> 198.28.0.2:53 1 64 1 2025-11-17 05:31:45.881 00:00:00.000 UDP 28.104.0.1:38101 -> 198.28.0.2:53 1 64 1 2025-11-17 05:32:46.195 00:00:00.000 UDP 28.104.0.1:32797 -> 198.28.0.2:53 1 64 1 2025-11-17 05:32:46.194 00:00:00.000 UDP 28.104.0.1:39263 -> 198.28.0.2:53 1 64 1 2025-11-17 05:32:46.205 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39263 1 109 1 2025-11-17 05:32:46.205 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32797 1 80 1 2025-11-17 05:33:46.486 00:00:00.000 UDP 28.104.0.1:40059 -> 198.28.0.2:53 1 64 1 2025-11-17 05:33:46.486 00:00:00.000 UDP 28.104.0.1:46957 -> 198.28.0.2:53 1 64 1 2025-11-17 05:33:42.002 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-17 05:33:46.496 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40059 1 109 1 2025-11-17 05:33:46.496 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46957 1 80 1 2025-11-17 05:29:07.944 00:05:50.917 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-17 05:29:58.909 00:05:09.423 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-17 05:34:46.791 00:00:00.000 UDP 28.104.0.1:49171 -> 198.28.0.2:53 1 64 1 2025-11-17 05:34:46.792 00:00:00.000 UDP 28.104.0.1:43758 -> 198.28.0.2:53 1 64 1 2025-11-17 05:34:46.802 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49171 1 109 1 2025-11-17 05:34:46.802 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43758 1 80 1 2025-11-17 05:30:08.326 00:05:50.538 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-17 05:31:07.934 00:05:00.077 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-17 05:31:11.945 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 44 3264 1 2025-11-17 05:35:47.104 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58850 1 109 1 2025-11-17 05:35:47.104 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35723 1 80 1 2025-11-17 05:35:47.093 00:00:00.000 UDP 28.104.0.1:58850 -> 198.28.0.2:53 1 64 1 2025-11-17 05:35:47.093 00:00:00.000 UDP 28.104.0.1:35723 -> 198.28.0.2:53 1 64 1 2025-11-17 05:31:07.933 00:05:50.940 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-17 05:36:47.347 00:00:00.000 UDP 28.104.0.1:55246 -> 198.28.0.2:53 1 64 1 2025-11-17 05:36:47.347 00:00:00.000 UDP 28.104.0.1:33100 -> 198.28.0.2:53 1 64 1 2025-11-17 05:36:47.358 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33100 1 109 1 2025-11-17 05:36:47.359 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55246 1 80 1 2025-11-17 05:33:07.934 00:05:00.512 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-17 05:37:47.641 00:00:00.000 UDP 28.104.0.1:50451 -> 198.28.0.2:53 1 64 1 2025-11-17 05:37:47.642 00:00:00.000 UDP 28.104.0.1:54949 -> 198.28.0.2:53 1 64 1 2025-11-17 05:37:47.652 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54949 1 80 1 2025-11-17 05:37:47.652 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50451 1 109 1 2025-11-17 05:38:41.997 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-17 05:38:47.899 00:00:00.000 UDP 28.104.0.1:51432 -> 198.28.0.2:53 1 64 1 2025-11-17 05:38:47.899 00:00:00.000 UDP 28.104.0.1:45600 -> 198.28.0.2:53 1 64 1 2025-11-17 05:38:47.911 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45600 1 109 1 2025-11-17 05:38:47.911 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51432 1 80 1 2025-11-17 05:39:48.162 00:00:00.000 UDP 28.104.0.1:54442 -> 198.28.0.2:53 1 64 1 2025-11-17 05:39:48.162 00:00:00.000 UDP 28.104.0.1:53444 -> 198.28.0.2:53 1 64 1 2025-11-17 05:39:48.172 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54442 1 109 1 2025-11-17 05:39:48.172 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53444 1 80 1 2025-11-17 05:35:07.945 00:05:50.921 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-17 05:35:58.916 00:05:09.417 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-17 05:36:31.953 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 42 2920 1 2025-11-17 05:40:48.467 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38386 1 80 1 2025-11-17 05:40:48.467 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57028 1 109 1 2025-11-17 05:40:48.457 00:00:00.000 UDP 28.104.0.1:38386 -> 198.28.0.2:53 1 64 1 2025-11-17 05:40:48.458 00:00:00.000 UDP 28.104.0.1:57028 -> 198.28.0.2:53 1 64 1 2025-11-17 05:36:08.342 00:05:50.522 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-17 05:37:07.936 00:05:00.077 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-17 05:41:48.753 00:00:00.000 UDP 28.104.0.1:51454 -> 198.28.0.2:53 1 64 1 2025-11-17 05:41:48.753 00:00:00.000 UDP 28.104.0.1:40530 -> 198.28.0.2:53 1 64 1 2025-11-17 05:41:48.764 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51454 1 109 1 2025-11-17 05:41:48.764 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40530 1 80 1 2025-11-17 05:37:07.936 00:05:50.940 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-17 05:42:49.005 00:00:00.000 UDP 28.104.0.1:60662 -> 198.28.0.2:53 1 64 1 2025-11-17 05:42:49.004 00:00:00.000 UDP 28.104.0.1:60577 -> 198.28.0.2:53 1 64 1 2025-11-17 05:42:49.016 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60577 1 80 1 2025-11-17 05:42:49.016 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60662 1 109 1 2025-11-17 05:39:07.935 00:05:00.513 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-17 05:43:41.967 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-17 05:43:49.332 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60369 1 80 1 2025-11-17 05:43:49.332 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60834 1 109 1 2025-11-17 05:43:49.321 00:00:00.000 UDP 28.104.0.1:60369 -> 198.28.0.2:53 1 64 1 2025-11-17 05:43:49.321 00:00:00.000 UDP 28.104.0.1:60834 -> 198.28.0.2:53 1 64 1 2025-11-17 05:44:49.632 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57772 1 109 1 2025-11-17 05:44:49.632 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34197 1 80 1 2025-11-17 05:44:49.622 00:00:00.000 UDP 28.104.0.1:57772 -> 198.28.0.2:53 1 64 1 2025-11-17 05:44:49.622 00:00:00.000 UDP 28.104.0.1:34197 -> 198.28.0.2:53 1 64 1 2025-11-17 05:45:49.884 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50296 1 109 1 2025-11-17 05:45:49.884 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37687 1 80 1 2025-11-17 05:45:49.874 00:00:00.000 UDP 28.104.0.1:50296 -> 198.28.0.2:53 1 64 1 2025-11-17 05:45:49.874 00:00:00.000 UDP 28.104.0.1:37687 -> 198.28.0.2:53 1 64 1 2025-11-17 05:41:07.946 00:05:50.920 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-17 05:41:51.957 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2768 1 2025-11-17 05:41:58.915 00:05:09.420 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-17 05:46:50.196 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50200 1 109 1 2025-11-17 05:46:50.196 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47500 1 80 1 2025-11-17 05:46:50.185 00:00:00.000 UDP 28.104.0.1:47500 -> 198.28.0.2:53 1 64 1 2025-11-17 05:46:50.185 00:00:00.000 UDP 28.104.0.1:50200 -> 198.28.0.2:53 1 64 1 2025-11-17 05:42:08.343 00:05:50.523 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-17 05:43:07.936 00:05:00.077 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-17 05:47:50.526 00:00:00.000 UDP 28.104.0.1:60359 -> 198.28.0.2:53 1 64 1 2025-11-17 05:47:50.526 00:00:00.000 UDP 28.104.0.1:44547 -> 198.28.0.2:53 1 64 1 2025-11-17 05:47:50.538 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44547 1 80 1 2025-11-17 05:47:50.538 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60359 1 109 1 2025-11-17 05:43:07.936 00:05:50.940 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-17 05:48:42.329 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-17 05:48:50.829 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51212 1 109 1 2025-11-17 05:48:50.829 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56723 1 80 1 2025-11-17 05:48:50.819 00:00:00.000 UDP 28.104.0.1:51212 -> 198.28.0.2:53 1 64 1 2025-11-17 05:48:50.818 00:00:00.000 UDP 28.104.0.1:56723 -> 198.28.0.2:53 1 64 1 2025-11-17 05:45:07.940 00:05:00.514 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-17 05:49:51.125 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43778 1 80 1 2025-11-17 05:49:51.124 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50884 1 109 1 2025-11-17 05:49:51.115 00:00:00.000 UDP 28.104.0.1:50884 -> 198.28.0.2:53 1 64 1 2025-11-17 05:49:51.115 00:00:00.000 UDP 28.104.0.1:43778 -> 198.28.0.2:53 1 64 1 2025-11-17 05:50:51.430 00:00:00.000 UDP 28.104.0.1:60353 -> 198.28.0.2:53 1 64 1 2025-11-17 05:50:51.430 00:00:00.000 UDP 28.104.0.1:50850 -> 198.28.0.2:53 1 64 1 2025-11-17 05:50:51.441 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60353 1 109 1 2025-11-17 05:50:51.441 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50850 1 80 1 2025-11-17 05:47:11.962 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2488 1 2025-11-17 05:51:51.742 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48941 1 109 1 2025-11-17 05:51:51.741 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46101 1 80 1 2025-11-17 05:51:51.731 00:00:00.000 UDP 28.104.0.1:46101 -> 198.28.0.2:53 1 64 1 2025-11-17 05:51:51.731 00:00:00.000 UDP 28.104.0.1:48941 -> 198.28.0.2:53 1 64 1 2025-11-17 05:47:07.948 00:05:50.921 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-17 05:47:58.916 00:05:09.421 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-17 05:52:52.052 00:00:00.000 UDP 28.104.0.1:34722 -> 198.28.0.2:53 1 64 1 2025-11-17 05:52:52.052 00:00:00.000 UDP 28.104.0.1:41379 -> 198.28.0.2:53 1 64 1 2025-11-17 05:52:52.061 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34722 1 80 1 2025-11-17 05:52:52.062 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41379 1 109 1 2025-11-17 05:48:08.344 00:05:50.523 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-17 05:49:07.937 00:05:00.077 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-17 05:53:42.373 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-17 05:53:52.352 00:00:00.000 UDP 28.104.0.1:59187 -> 198.28.0.2:53 1 64 1 2025-11-17 05:53:52.352 00:00:00.000 UDP 28.104.0.1:46265 -> 198.28.0.2:53 1 64 1 2025-11-17 05:53:52.363 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59187 1 80 1 2025-11-17 05:53:52.363 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46265 1 109 1 2025-11-17 05:49:07.936 00:05:50.942 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-17 05:54:52.613 00:00:00.000 UDP 28.104.0.1:53703 -> 198.28.0.2:53 1 64 1 2025-11-17 05:54:52.613 00:00:00.000 UDP 28.104.0.1:36499 -> 198.28.0.2:53 1 64 1 2025-11-17 05:54:52.624 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36499 1 109 1 2025-11-17 05:54:52.624 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53703 1 80 1 2025-11-17 05:51:07.937 00:05:00.516 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-17 05:55:52.910 00:00:00.000 UDP 28.104.0.1:60562 -> 198.28.0.2:53 1 64 1 2025-11-17 05:55:52.911 00:00:00.000 UDP 28.104.0.1:38789 -> 198.28.0.2:53 1 64 1 2025-11-17 05:55:52.922 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60562 1 80 1 2025-11-17 05:55:52.923 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38789 1 109 1 2025-11-17 05:52:31.971 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 33 2380 1 2025-11-17 05:56:53.226 00:00:00.000 UDP 28.104.0.1:47536 -> 198.28.0.2:53 1 64 1 2025-11-17 05:56:53.226 00:00:00.000 UDP 28.104.0.1:33276 -> 198.28.0.2:53 1 64 1 2025-11-17 05:56:53.236 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47536 1 80 1 2025-11-17 05:56:53.236 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33276 1 109 1 2025-11-17 05:57:53.531 00:00:00.000 UDP 28.104.0.1:36436 -> 198.28.0.2:53 1 64 1 2025-11-17 05:57:53.531 00:00:00.000 UDP 28.104.0.1:45250 -> 198.28.0.2:53 1 64 1 2025-11-17 05:57:53.542 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45250 1 80 1 2025-11-17 05:57:53.542 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36436 1 109 1 2025-11-17 05:53:07.948 00:05:50.921 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-17 05:53:58.919 00:05:09.431 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-17 05:58:42.435 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 Summary: total flows: 319, total bytes: 96019, total packets: 1415, avg bps: 196, avg pps: 0, avg bpp: 67 Time window: 2025-11-17 04:54:08 - 2025-11-17 05:59:08 Total flows processed: 319, passed: 319, Blocks skipped: 0, Bytes read: 33240 Sys: 0.0050s User: 0.0010s Wall: 0.0035s flows/second: 90367.6 Runtime: 0.0035s