Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-20 03:54:57.736 00:05:10.014 OSPF 28.0.2.1:0 -> 224.0.0.5:0 33 2380 1 2025-11-20 03:59:21.242 00:00:00.000 UDP 28.104.0.1:42131 -> 198.28.0.2:53 1 64 1 2025-11-20 03:59:21.242 00:00:00.000 UDP 28.104.0.1:39417 -> 198.28.0.2:53 1 64 1 2025-11-20 03:59:21.251 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39417 1 80 1 2025-11-20 03:59:21.251 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42131 1 109 1 2025-11-20 04:00:06.842 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 04:00:21.519 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35710 1 109 1 2025-11-20 04:00:21.519 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44618 1 80 1 2025-11-20 04:00:21.509 00:00:00.000 UDP 28.104.0.1:35710 -> 198.28.0.2:53 1 64 1 2025-11-20 04:00:21.509 00:00:00.000 UDP 28.104.0.1:44618 -> 198.28.0.2:53 1 64 1 2025-11-20 03:56:09.281 00:06:00.568 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-20 04:01:21.818 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46172 1 80 1 2025-11-20 04:01:21.818 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60384 1 109 1 2025-11-20 04:01:21.809 00:00:00.000 UDP 28.104.0.1:60384 -> 198.28.0.2:53 1 64 1 2025-11-20 04:01:21.809 00:00:00.000 UDP 28.104.0.1:46172 -> 198.28.0.2:53 1 64 1 2025-11-20 03:58:00.572 00:05:08.720 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 03:57:09.281 00:06:00.203 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-20 04:02:22.102 00:00:00.000 UDP 28.104.0.1:41913 -> 198.28.0.2:53 1 64 1 2025-11-20 04:02:22.103 00:00:00.000 UDP 28.104.0.1:52892 -> 198.28.0.2:53 1 64 1 2025-11-20 04:02:22.113 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41913 1 80 1 2025-11-20 04:02:22.113 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52892 1 109 1 2025-11-20 03:58:09.728 00:05:50.895 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 04:03:22.416 00:00:00.000 UDP 28.104.0.1:33408 -> 198.28.0.2:53 1 64 1 2025-11-20 04:03:22.416 00:00:00.000 UDP 28.104.0.1:37665 -> 198.28.0.2:53 1 64 1 2025-11-20 04:03:22.425 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37665 1 109 1 2025-11-20 04:03:22.426 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33408 1 80 1 2025-11-20 03:59:09.738 00:05:50.835 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 04:00:00.583 00:05:08.699 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 04:04:22.664 00:00:00.000 UDP 28.104.0.1:47872 -> 198.28.0.2:53 1 64 1 2025-11-20 04:04:22.664 00:00:00.000 UDP 28.104.0.1:32993 -> 198.28.0.2:53 1 64 1 2025-11-20 04:04:22.674 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32993 1 80 1 2025-11-20 04:04:22.674 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47872 1 109 1 2025-11-20 04:00:17.749 00:05:10.015 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2668 1 2025-11-20 04:05:06.750 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 04:05:22.964 00:00:00.000 UDP 28.104.0.1:45955 -> 198.28.0.2:53 1 64 1 2025-11-20 04:05:22.964 00:00:00.000 UDP 28.104.0.1:59380 -> 198.28.0.2:53 1 64 1 2025-11-20 04:05:22.975 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59380 1 80 1 2025-11-20 04:05:22.975 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45955 1 109 1 2025-11-20 04:06:23.267 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34404 1 80 1 2025-11-20 04:06:23.267 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59414 1 109 1 2025-11-20 04:06:23.256 00:00:00.000 UDP 28.104.0.1:34404 -> 198.28.0.2:53 1 64 1 2025-11-20 04:06:23.256 00:00:00.000 UDP 28.104.0.1:59414 -> 198.28.0.2:53 1 64 1 2025-11-20 04:07:23.550 00:00:00.000 UDP 28.104.0.1:60257 -> 198.28.0.2:53 1 64 1 2025-11-20 04:07:23.550 00:00:00.000 UDP 28.104.0.1:49747 -> 198.28.0.2:53 1 64 1 2025-11-20 04:07:23.561 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49747 1 109 1 2025-11-20 04:07:23.561 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60257 1 80 1 2025-11-20 04:03:09.283 00:06:00.567 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-20 04:04:00.573 00:05:08.720 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 04:08:23.847 00:00:00.000 UDP 28.104.0.1:47297 -> 198.28.0.2:53 1 64 1 2025-11-20 04:08:23.847 00:00:00.000 UDP 28.104.0.1:38544 -> 198.28.0.2:53 1 64 1 2025-11-20 04:08:23.858 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38544 1 109 1 2025-11-20 04:08:23.858 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47297 1 80 1 2025-11-20 04:04:09.729 00:05:50.895 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 04:04:09.282 00:06:00.209 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-20 04:09:24.138 00:00:00.000 UDP 28.104.0.1:42405 -> 198.28.0.2:53 1 64 1 2025-11-20 04:09:24.138 00:00:00.000 UDP 28.104.0.1:53181 -> 198.28.0.2:53 1 64 1 2025-11-20 04:09:24.148 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53181 1 109 1 2025-11-20 04:09:24.148 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42405 1 80 1 2025-11-20 04:05:37.764 00:05:10.377 OSPF 28.0.2.1:0 -> 224.0.0.5:0 50 3732 1 2025-11-20 04:05:09.740 00:05:50.835 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 04:06:00.583 00:05:08.702 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 04:10:07.172 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 04:10:24.448 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51884 1 109 1 2025-11-20 04:10:24.447 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48235 1 80 1 2025-11-20 04:10:24.437 00:00:00.000 UDP 28.104.0.1:51884 -> 198.28.0.2:53 1 64 1 2025-11-20 04:10:24.436 00:00:00.000 UDP 28.104.0.1:48235 -> 198.28.0.2:53 1 64 1 2025-11-20 04:11:24.735 00:00:00.000 UDP 28.104.0.1:36510 -> 198.28.0.2:53 1 64 1 2025-11-20 04:11:24.734 00:00:00.000 UDP 28.104.0.1:46514 -> 198.28.0.2:53 1 64 1 2025-11-20 04:11:24.746 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36510 1 109 1 2025-11-20 04:11:24.746 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46514 1 80 1 2025-11-20 04:12:25.054 00:00:00.000 UDP 28.104.0.1:54951 -> 198.28.0.2:53 1 64 1 2025-11-20 04:12:25.053 00:00:00.000 UDP 28.104.0.1:46120 -> 198.28.0.2:53 1 64 1 2025-11-20 04:12:25.064 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46120 1 80 1 2025-11-20 04:12:25.063 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54951 1 109 1 2025-11-20 04:13:25.344 00:00:00.000 UDP 28.104.0.1:58552 -> 198.28.0.2:53 1 64 1 2025-11-20 04:13:25.344 00:00:00.000 UDP 28.104.0.1:54431 -> 198.28.0.2:53 1 64 1 2025-11-20 04:13:25.354 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54431 1 109 1 2025-11-20 04:13:25.354 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58552 1 80 1 2025-11-20 04:10:00.573 00:05:08.722 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 04:14:26.741 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41386 1 80 1 2025-11-20 04:14:26.741 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40896 1 109 1 2025-11-20 04:14:26.730 00:00:00.000 UDP 28.104.0.1:40896 -> 198.28.0.2:53 1 64 1 2025-11-20 04:14:26.730 00:00:00.000 UDP 28.104.0.1:41386 -> 198.28.0.2:53 1 64 1 2025-11-20 04:10:09.730 00:05:50.895 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 04:15:06.966 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 04:10:57.773 00:05:10.009 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2544 1 2025-11-20 04:10:09.285 00:06:00.572 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-20 04:15:27.066 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41084 1 109 1 2025-11-20 04:15:27.066 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55051 1 80 1 2025-11-20 04:15:27.056 00:00:00.000 UDP 28.104.0.1:55051 -> 198.28.0.2:53 1 64 1 2025-11-20 04:15:27.056 00:00:00.000 UDP 28.104.0.1:41084 -> 198.28.0.2:53 1 64 1 2025-11-20 04:11:09.741 00:05:50.835 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 04:12:00.583 00:05:08.702 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 04:11:09.284 00:06:00.207 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-20 04:16:27.345 00:00:00.000 UDP 28.104.0.1:56825 -> 198.28.0.2:53 1 64 1 2025-11-20 04:16:27.345 00:00:00.000 UDP 28.104.0.1:57854 -> 198.28.0.2:53 1 64 1 2025-11-20 04:16:27.356 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57854 1 109 1 2025-11-20 04:16:27.356 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56825 1 80 1 2025-11-20 04:17:27.648 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44281 1 109 1 2025-11-20 04:17:27.647 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48805 1 80 1 2025-11-20 04:17:27.636 00:00:00.000 UDP 28.104.0.1:48805 -> 198.28.0.2:53 1 64 1 2025-11-20 04:17:27.636 00:00:00.000 UDP 28.104.0.1:44281 -> 198.28.0.2:53 1 64 1 2025-11-20 04:18:27.940 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47124 1 80 1 2025-11-20 04:18:27.940 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47659 1 109 1 2025-11-20 04:18:27.930 00:00:00.000 UDP 28.104.0.1:47124 -> 198.28.0.2:53 1 64 1 2025-11-20 04:18:27.930 00:00:00.000 UDP 28.104.0.1:47659 -> 198.28.0.2:53 1 64 1 2025-11-20 04:19:28.251 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53867 1 80 1 2025-11-20 04:19:28.251 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53878 1 109 1 2025-11-20 04:19:28.240 00:00:00.000 UDP 28.104.0.1:53878 -> 198.28.0.2:53 1 64 1 2025-11-20 04:19:28.240 00:00:00.000 UDP 28.104.0.1:53867 -> 198.28.0.2:53 1 64 1 2025-11-20 04:20:07.171 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 04:16:00.576 00:05:08.720 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 04:20:28.532 00:00:00.000 UDP 28.104.0.1:46981 -> 198.28.0.2:53 1 64 1 2025-11-20 04:20:28.532 00:00:00.000 UDP 28.104.0.1:39432 -> 198.28.0.2:53 1 64 1 2025-11-20 04:16:17.782 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2648 1 2025-11-20 04:20:28.542 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39432 1 80 1 2025-11-20 04:20:28.542 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46981 1 109 1 2025-11-20 04:16:09.733 00:05:50.895 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 04:21:28.823 00:00:00.000 UDP 28.104.0.1:47943 -> 198.28.0.2:53 1 64 1 2025-11-20 04:21:28.823 00:00:00.000 UDP 28.104.0.1:54668 -> 198.28.0.2:53 1 64 1 2025-11-20 04:21:28.833 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47943 1 109 1 2025-11-20 04:21:28.833 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54668 1 80 1 2025-11-20 04:17:09.742 00:05:50.836 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 04:17:09.286 00:06:00.573 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-20 04:18:00.587 00:05:08.700 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 04:22:29.129 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50793 1 80 1 2025-11-20 04:22:29.129 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42939 1 109 1 2025-11-20 04:22:29.118 00:00:00.000 UDP 28.104.0.1:42939 -> 198.28.0.2:53 1 64 1 2025-11-20 04:22:29.118 00:00:00.000 UDP 28.104.0.1:50793 -> 198.28.0.2:53 1 64 1 2025-11-20 04:18:09.285 00:06:00.209 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-20 04:23:29.411 00:00:00.000 UDP 28.104.0.1:34363 -> 198.28.0.2:53 1 64 1 2025-11-20 04:23:29.411 00:00:00.000 UDP 28.104.0.1:42681 -> 198.28.0.2:53 1 64 1 2025-11-20 04:23:29.422 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42681 1 80 1 2025-11-20 04:23:29.422 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34363 1 109 1 2025-11-20 04:24:29.712 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58431 1 109 1 2025-11-20 04:24:29.712 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35116 1 80 1 2025-11-20 04:24:29.702 00:00:00.000 UDP 28.104.0.1:35116 -> 198.28.0.2:53 1 64 1 2025-11-20 04:24:29.702 00:00:00.000 UDP 28.104.0.1:58431 -> 198.28.0.2:53 1 64 1 2025-11-20 04:25:07.340 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 04:25:30.005 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55940 1 109 1 2025-11-20 04:25:30.006 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35708 1 80 1 2025-11-20 04:25:29.994 00:00:00.000 UDP 28.104.0.1:55940 -> 198.28.0.2:53 1 64 1 2025-11-20 04:25:29.994 00:00:00.000 UDP 28.104.0.1:35708 -> 198.28.0.2:53 1 64 1 2025-11-20 04:21:37.788 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 34 2444 1 2025-11-20 04:22:00.579 00:05:08.721 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 04:26:30.262 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42668 1 109 1 2025-11-20 04:26:30.262 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36233 1 80 1 2025-11-20 04:26:30.251 00:00:00.000 UDP 28.104.0.1:36233 -> 198.28.0.2:53 1 64 1 2025-11-20 04:26:30.251 00:00:00.000 UDP 28.104.0.1:42668 -> 198.28.0.2:53 1 64 1 2025-11-20 04:22:09.732 00:05:50.901 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 04:27:30.545 00:00:00.000 UDP 28.104.0.1:47026 -> 198.28.0.2:53 1 64 1 2025-11-20 04:27:30.545 00:00:00.000 UDP 28.104.0.1:43570 -> 198.28.0.2:53 1 64 1 2025-11-20 04:27:30.557 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47026 1 109 1 2025-11-20 04:27:30.556 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43570 1 80 1 2025-11-20 04:23:09.743 00:05:50.841 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 04:24:00.587 00:05:08.701 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 04:28:30.851 00:00:00.000 UDP 28.104.0.1:59336 -> 198.28.0.2:53 1 64 1 2025-11-20 04:28:30.851 00:00:00.000 UDP 28.104.0.1:56008 -> 198.28.0.2:53 1 64 1 2025-11-20 04:28:30.861 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59336 1 80 1 2025-11-20 04:28:30.861 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56008 1 109 1 2025-11-20 04:24:09.286 00:06:00.578 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-20 04:29:31.147 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42723 1 80 1 2025-11-20 04:29:31.147 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41234 1 109 1 2025-11-20 04:29:31.136 00:00:00.000 UDP 28.104.0.1:42723 -> 198.28.0.2:53 1 64 1 2025-11-20 04:29:31.136 00:00:00.000 UDP 28.104.0.1:41234 -> 198.28.0.2:53 1 64 1 2025-11-20 04:25:09.288 00:06:00.207 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-20 04:30:07.184 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 04:30:31.452 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45299 1 109 1 2025-11-20 04:30:31.452 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38287 1 80 1 2025-11-20 04:30:31.441 00:00:00.000 UDP 28.104.0.1:38287 -> 198.28.0.2:53 1 64 1 2025-11-20 04:30:31.441 00:00:00.000 UDP 28.104.0.1:45299 -> 198.28.0.2:53 1 64 1 2025-11-20 04:26:57.795 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 34 2304 1 2025-11-20 04:31:31.743 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53880 1 80 1 2025-11-20 04:31:31.742 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38684 1 109 1 2025-11-20 04:31:31.733 00:00:00.000 UDP 28.104.0.1:53880 -> 198.28.0.2:53 1 64 1 2025-11-20 04:31:31.734 00:00:00.000 UDP 28.104.0.1:38684 -> 198.28.0.2:53 1 64 1 2025-11-20 04:28:00.583 00:05:08.717 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 04:32:32.050 00:00:00.000 UDP 28.104.0.1:32864 -> 198.28.0.2:53 1 64 1 2025-11-20 04:32:32.050 00:00:00.000 UDP 28.104.0.1:40232 -> 198.28.0.2:53 1 64 1 2025-11-20 04:32:32.061 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40232 1 80 1 2025-11-20 04:32:32.061 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32864 1 109 1 2025-11-20 04:28:09.734 00:05:50.901 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 04:33:32.346 00:00:00.000 UDP 28.104.0.1:51751 -> 198.28.0.2:53 1 64 1 2025-11-20 04:33:32.346 00:00:00.000 UDP 28.104.0.1:39369 -> 198.28.0.2:53 1 64 1 2025-11-20 04:33:32.357 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51751 1 80 1 2025-11-20 04:33:32.356 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39369 1 109 1 2025-11-20 04:29:09.744 00:05:50.840 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 04:30:00.594 00:05:08.696 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 04:34:32.646 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47950 1 109 1 2025-11-20 04:34:32.646 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55724 1 80 1 2025-11-20 04:34:32.636 00:00:00.000 UDP 28.104.0.1:55724 -> 198.28.0.2:53 1 64 1 2025-11-20 04:34:32.636 00:00:00.000 UDP 28.104.0.1:47950 -> 198.28.0.2:53 1 64 1 2025-11-20 04:35:07.442 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 04:35:32.942 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48109 1 80 1 2025-11-20 04:35:32.941 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34107 1 109 1 2025-11-20 04:35:32.931 00:00:00.000 UDP 28.104.0.1:48109 -> 198.28.0.2:53 1 64 1 2025-11-20 04:35:32.931 00:00:00.000 UDP 28.104.0.1:34107 -> 198.28.0.2:53 1 64 1 2025-11-20 04:31:09.289 00:06:00.578 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-20 04:36:33.197 00:00:00.000 UDP 28.104.0.1:57555 -> 198.28.0.2:53 1 64 1 2025-11-20 04:36:33.197 00:00:00.000 UDP 28.104.0.1:57761 -> 198.28.0.2:53 1 64 1 2025-11-20 04:32:17.799 00:05:10.009 OSPF 28.0.2.1:0 -> 224.0.0.5:0 44 3244 1 2025-11-20 04:36:33.208 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57761 1 109 1 2025-11-20 04:36:33.208 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57555 1 80 1 2025-11-20 04:32:09.290 00:06:00.208 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-20 04:37:34.250 00:00:00.000 UDP 28.104.0.1:58846 -> 198.28.0.2:53 1 64 1 2025-11-20 04:37:34.250 00:00:00.000 UDP 28.104.0.1:33511 -> 198.28.0.2:53 1 64 1 2025-11-20 04:37:34.262 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58846 1 109 1 2025-11-20 04:37:34.262 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33511 1 80 1 2025-11-20 04:34:00.586 00:05:08.719 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 04:38:34.554 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33036 1 109 1 2025-11-20 04:38:34.554 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55995 1 80 1 2025-11-20 04:38:34.544 00:00:00.000 UDP 28.104.0.1:33036 -> 198.28.0.2:53 1 64 1 2025-11-20 04:38:34.544 00:00:00.000 UDP 28.104.0.1:55995 -> 198.28.0.2:53 1 64 1 2025-11-20 04:34:09.740 00:05:50.896 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 04:39:34.846 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42844 1 109 1 2025-11-20 04:39:34.846 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58977 1 80 1 2025-11-20 04:39:34.836 00:00:00.000 UDP 28.104.0.1:42844 -> 198.28.0.2:53 1 64 1 2025-11-20 04:39:34.836 00:00:00.000 UDP 28.104.0.1:58977 -> 198.28.0.2:53 1 64 1 2025-11-20 04:35:09.750 00:05:50.836 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 04:40:07.560 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 04:36:00.595 00:05:08.696 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 04:40:35.116 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58462 1 109 1 2025-11-20 04:40:35.116 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40257 1 80 1 2025-11-20 04:40:35.106 00:00:00.000 UDP 28.104.0.1:58462 -> 198.28.0.2:53 1 64 1 2025-11-20 04:40:35.106 00:00:00.000 UDP 28.104.0.1:40257 -> 198.28.0.2:53 1 64 1 2025-11-20 04:41:35.405 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40858 1 80 1 2025-11-20 04:41:35.404 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42341 1 109 1 2025-11-20 04:41:35.394 00:00:00.000 UDP 28.104.0.1:42341 -> 198.28.0.2:53 1 64 1 2025-11-20 04:41:35.394 00:00:00.000 UDP 28.104.0.1:40858 -> 198.28.0.2:53 1 64 1 2025-11-20 04:37:37.809 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 44 3064 1 2025-11-20 04:42:35.696 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52304 1 109 1 2025-11-20 04:42:35.697 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55227 1 80 1 2025-11-20 04:42:35.686 00:00:00.000 UDP 28.104.0.1:52304 -> 198.28.0.2:53 1 64 1 2025-11-20 04:42:35.686 00:00:00.000 UDP 28.104.0.1:55227 -> 198.28.0.2:53 1 64 1 2025-11-20 04:38:09.290 00:06:00.579 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-20 04:43:36.003 00:00:00.000 UDP 28.104.0.1:43182 -> 198.28.0.2:53 1 64 1 2025-11-20 04:43:36.003 00:00:00.000 UDP 28.104.0.1:40337 -> 198.28.0.2:53 1 64 1 2025-11-20 04:43:36.017 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40337 1 80 1 2025-11-20 04:43:36.014 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43182 1 109 1 2025-11-20 04:39:09.294 00:06:00.205 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-20 04:40:00.587 00:05:08.722 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 04:44:36.304 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50312 1 109 1 2025-11-20 04:44:36.304 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32884 1 80 1 2025-11-20 04:44:36.293 00:00:00.000 UDP 28.104.0.1:32884 -> 198.28.0.2:53 1 64 1 2025-11-20 04:44:36.293 00:00:00.000 UDP 28.104.0.1:50312 -> 198.28.0.2:53 1 64 1 2025-11-20 04:40:09.742 00:05:50.898 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 04:45:07.606 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 04:45:36.587 00:00:00.000 UDP 28.104.0.1:50344 -> 198.28.0.2:53 1 64 1 2025-11-20 04:45:36.587 00:00:00.000 UDP 28.104.0.1:45771 -> 198.28.0.2:53 1 64 1 2025-11-20 04:45:36.598 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45771 1 109 1 2025-11-20 04:45:36.598 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50344 1 80 1 2025-11-20 04:41:09.753 00:05:50.838 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 04:42:00.597 00:05:08.697 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 04:46:36.889 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32946 1 80 1 2025-11-20 04:46:36.889 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47168 1 109 1 2025-11-20 04:46:36.879 00:00:00.000 UDP 28.104.0.1:32946 -> 198.28.0.2:53 1 64 1 2025-11-20 04:46:36.879 00:00:00.000 UDP 28.104.0.1:47168 -> 198.28.0.2:53 1 64 1 2025-11-20 04:42:57.813 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2480 1 2025-11-20 04:47:37.190 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41658 1 80 1 2025-11-20 04:47:37.190 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57609 1 109 1 2025-11-20 04:47:37.181 00:00:00.000 UDP 28.104.0.1:57609 -> 198.28.0.2:53 1 64 1 2025-11-20 04:47:37.181 00:00:00.000 UDP 28.104.0.1:41658 -> 198.28.0.2:53 1 64 1 2025-11-20 04:48:37.534 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50355 1 80 1 2025-11-20 04:48:37.535 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37699 1 109 1 2025-11-20 04:48:37.524 00:00:00.000 UDP 28.104.0.1:37699 -> 198.28.0.2:53 1 64 1 2025-11-20 04:48:37.524 00:00:00.000 UDP 28.104.0.1:50355 -> 198.28.0.2:53 1 64 1 2025-11-20 04:49:37.776 00:00:00.000 UDP 28.104.0.1:48273 -> 198.28.0.2:53 1 64 1 2025-11-20 04:49:37.776 00:00:00.000 UDP 28.104.0.1:47518 -> 198.28.0.2:53 1 64 1 2025-11-20 04:49:37.786 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48273 1 80 1 2025-11-20 04:49:37.786 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47518 1 109 1 2025-11-20 04:45:09.298 00:06:00.575 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-20 04:50:07.898 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 04:46:00.590 00:05:08.713 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 04:50:38.085 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40302 1 109 1 2025-11-20 04:50:38.086 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54155 1 80 1 2025-11-20 04:50:38.074 00:00:00.000 UDP 28.104.0.1:40302 -> 198.28.0.2:53 1 64 1 2025-11-20 04:50:38.074 00:00:00.000 UDP 28.104.0.1:54155 -> 198.28.0.2:53 1 64 1 2025-11-20 04:46:09.744 00:05:50.898 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 04:46:09.293 00:06:00.208 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-20 04:51:38.604 00:00:00.000 UDP 28.104.0.1:39213 -> 198.28.0.2:53 1 64 1 2025-11-20 04:51:38.605 00:00:00.000 UDP 28.104.0.1:52736 -> 198.28.0.2:53 1 64 1 2025-11-20 04:51:38.616 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39213 1 109 1 2025-11-20 04:51:38.616 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52736 1 80 1 2025-11-20 04:47:09.755 00:05:50.837 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 04:48:00.601 00:05:08.693 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 04:48:17.817 00:05:10.013 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2424 1 2025-11-20 04:52:38.902 00:00:00.000 UDP 28.104.0.1:33085 -> 198.28.0.2:53 1 64 1 2025-11-20 04:52:38.902 00:00:00.000 UDP 28.104.0.1:57124 -> 198.28.0.2:53 1 64 1 2025-11-20 04:52:38.912 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57124 1 109 1 2025-11-20 04:52:38.912 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33085 1 80 1 2025-11-20 04:53:39.223 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45907 1 109 1 2025-11-20 04:53:39.223 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49459 1 80 1 2025-11-20 04:53:39.213 00:00:00.000 UDP 28.104.0.1:45907 -> 198.28.0.2:53 1 64 1 2025-11-20 04:53:39.213 00:00:00.000 UDP 28.104.0.1:49459 -> 198.28.0.2:53 1 64 1 2025-11-20 04:54:39.482 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34594 1 109 1 2025-11-20 04:54:39.482 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60426 1 80 1 2025-11-20 04:54:39.472 00:00:00.000 UDP 28.104.0.1:60426 -> 198.28.0.2:53 1 64 1 2025-11-20 04:54:39.472 00:00:00.000 UDP 28.104.0.1:34594 -> 198.28.0.2:53 1 64 1 2025-11-20 04:55:07.885 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 04:55:39.766 00:00:00.000 UDP 28.104.0.1:34955 -> 198.28.0.2:53 1 64 1 2025-11-20 04:55:39.766 00:00:00.000 UDP 28.104.0.1:44007 -> 198.28.0.2:53 1 64 1 2025-11-20 04:55:39.776 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44007 1 80 1 2025-11-20 04:55:39.776 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34955 1 109 1 2025-11-20 04:52:00.592 00:05:08.715 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 04:56:40.044 00:00:00.000 UDP 28.104.0.1:36652 -> 198.28.0.2:53 1 64 1 2025-11-20 04:56:40.045 00:00:00.000 UDP 28.104.0.1:51319 -> 198.28.0.2:53 1 64 1 2025-11-20 04:56:40.054 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36652 1 109 1 2025-11-20 04:56:40.054 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51319 1 80 1 2025-11-20 04:52:09.753 00:05:50.891 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 04:52:09.294 00:06:00.583 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-20 04:57:40.350 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47522 1 80 1 2025-11-20 04:57:40.350 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39688 1 109 1 2025-11-20 04:57:40.339 00:00:00.000 UDP 28.104.0.1:39688 -> 198.28.0.2:53 1 64 1 2025-11-20 04:57:40.339 00:00:00.000 UDP 28.104.0.1:47522 -> 198.28.0.2:53 1 64 1 2025-11-20 04:53:37.831 00:05:10.011 OSPF 28.0.2.1:0 -> 224.0.0.5:0 33 2380 1 2025-11-20 04:53:09.758 00:05:50.835 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 04:54:00.603 00:05:08.694 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 04:53:09.295 00:06:00.211 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-20 04:58:40.633 00:00:00.000 UDP 28.104.0.1:40181 -> 198.28.0.2:53 1 64 1 2025-11-20 04:58:40.633 00:00:00.000 UDP 28.104.0.1:58260 -> 198.28.0.2:53 1 64 1 2025-11-20 04:58:40.643 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40181 1 80 1 2025-11-20 04:58:40.643 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58260 1 109 1 Summary: total flows: 322, total bytes: 99374, total packets: 1464, avg bps: 206, avg pps: 0, avg bpp: 67 Time window: 2025-11-20 03:54:57 - 2025-11-20 04:59:09 Total flows processed: 322, passed: 322, Blocks skipped: 0, Bytes read: 33552 Sys: 0.0044s User: 0.0033s Wall: 0.0043s flows/second: 75248.8 Runtime: 0.0043s