Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-20 04:59:40.941 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56664 1 80 1 2025-11-20 04:59:40.942 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44483 1 109 1 2025-11-20 04:59:40.930 00:00:00.000 UDP 28.104.0.1:44483 -> 198.28.0.2:53 1 64 1 2025-11-20 04:59:40.930 00:00:00.000 UDP 28.104.0.1:56664 -> 198.28.0.2:53 1 64 1 2025-11-20 05:00:07.828 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 05:00:41.212 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46606 1 80 1 2025-11-20 05:00:41.213 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34626 1 109 1 2025-11-20 05:00:41.201 00:00:00.000 UDP 28.104.0.1:34626 -> 198.28.0.2:53 1 64 1 2025-11-20 05:00:41.201 00:00:00.000 UDP 28.104.0.1:46606 -> 198.28.0.2:53 1 64 1 2025-11-20 05:01:41.658 00:00:00.000 UDP 28.104.0.1:34217 -> 198.28.0.2:53 1 64 1 2025-11-20 05:01:41.658 00:00:00.000 UDP 28.104.0.1:47817 -> 198.28.0.2:53 1 64 1 2025-11-20 05:01:41.668 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47817 1 109 1 2025-11-20 05:01:41.668 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34217 1 80 1 2025-11-20 04:58:00.592 00:05:08.715 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 05:02:41.957 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60782 1 80 1 2025-11-20 05:02:41.956 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60769 1 109 1 2025-11-20 05:02:41.946 00:00:00.000 UDP 28.104.0.1:60769 -> 198.28.0.2:53 1 64 1 2025-11-20 05:02:41.946 00:00:00.000 UDP 28.104.0.1:60782 -> 198.28.0.2:53 1 64 1 2025-11-20 04:58:09.748 00:05:50.898 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 04:58:57.843 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 42 3020 1 2025-11-20 05:03:42.256 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44888 1 80 1 2025-11-20 05:03:42.256 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49581 1 109 1 2025-11-20 05:03:42.245 00:00:00.000 UDP 28.104.0.1:44888 -> 198.28.0.2:53 1 64 1 2025-11-20 05:03:42.245 00:00:00.000 UDP 28.104.0.1:49581 -> 198.28.0.2:53 1 64 1 2025-11-20 04:59:09.758 00:05:50.838 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 04:59:09.296 00:06:00.582 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-20 05:00:00.603 00:05:08.695 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 05:04:42.539 00:00:00.000 UDP 28.104.0.1:50788 -> 198.28.0.2:53 1 64 1 2025-11-20 05:04:42.539 00:00:00.000 UDP 28.104.0.1:36373 -> 198.28.0.2:53 1 64 1 2025-11-20 05:04:42.549 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50788 1 109 1 2025-11-20 05:04:42.549 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36373 1 80 1 2025-11-20 05:00:09.297 00:06:00.210 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-20 05:05:08.048 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 05:05:42.840 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53458 1 80 1 2025-11-20 05:05:42.841 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47652 1 109 1 2025-11-20 05:05:42.829 00:00:00.000 UDP 28.104.0.1:47652 -> 198.28.0.2:53 1 64 1 2025-11-20 05:05:42.829 00:00:00.000 UDP 28.104.0.1:53458 -> 198.28.0.2:53 1 64 1 2025-11-20 05:06:43.119 00:00:00.000 UDP 28.104.0.1:44366 -> 198.28.0.2:53 1 64 1 2025-11-20 05:06:43.119 00:00:00.000 UDP 28.104.0.1:36799 -> 198.28.0.2:53 1 64 1 2025-11-20 05:06:43.129 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36799 1 109 1 2025-11-20 05:06:43.129 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44366 1 80 1 2025-11-20 05:07:43.430 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51549 1 109 1 2025-11-20 05:07:43.430 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36642 1 80 1 2025-11-20 05:07:43.419 00:00:00.000 UDP 28.104.0.1:51549 -> 198.28.0.2:53 1 64 1 2025-11-20 05:07:43.419 00:00:00.000 UDP 28.104.0.1:36642 -> 198.28.0.2:53 1 64 1 2025-11-20 05:04:00.596 00:05:08.714 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 05:04:17.846 00:05:10.009 OSPF 28.0.2.1:0 -> 224.0.0.5:0 46 3380 1 2025-11-20 05:08:43.727 00:00:00.000 UDP 28.104.0.1:59613 -> 198.28.0.2:53 1 64 1 2025-11-20 05:08:43.727 00:00:00.000 UDP 28.104.0.1:47603 -> 198.28.0.2:53 1 64 1 2025-11-20 05:08:43.737 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47603 1 80 1 2025-11-20 05:08:43.737 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59613 1 109 1 2025-11-20 05:04:09.749 00:05:50.903 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 05:09:44.042 00:00:00.000 UDP 28.104.0.1:55305 -> 198.28.0.2:53 1 64 1 2025-11-20 05:09:44.042 00:00:00.000 UDP 28.104.0.1:37835 -> 198.28.0.2:53 1 64 1 2025-11-20 05:09:44.054 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37835 1 109 1 2025-11-20 05:09:44.054 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55305 1 80 1 2025-11-20 05:05:09.760 00:05:50.842 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 05:10:08.106 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 05:06:00.610 00:05:08.690 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 05:10:44.304 00:00:00.000 UDP 28.104.0.1:50989 -> 198.28.0.2:53 1 64 1 2025-11-20 05:10:44.303 00:00:00.000 UDP 28.104.0.1:50944 -> 198.28.0.2:53 1 64 1 2025-11-20 05:10:44.313 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50944 1 80 1 2025-11-20 05:10:44.314 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50989 1 109 1 2025-11-20 05:06:09.299 00:06:00.581 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-20 05:11:44.605 00:00:00.000 UDP 28.104.0.1:34515 -> 198.28.0.2:53 1 64 1 2025-11-20 05:11:44.605 00:00:00.000 UDP 28.104.0.1:45030 -> 198.28.0.2:53 1 64 1 2025-11-20 05:11:44.616 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45030 1 80 1 2025-11-20 05:11:44.616 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34515 1 109 1 2025-11-20 05:07:09.298 00:06:00.209 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-20 05:12:44.891 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46872 1 109 1 2025-11-20 05:12:44.890 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59085 1 80 1 2025-11-20 05:12:44.880 00:00:00.000 UDP 28.104.0.1:59085 -> 198.28.0.2:53 1 64 1 2025-11-20 05:12:44.881 00:00:00.000 UDP 28.104.0.1:46872 -> 198.28.0.2:53 1 64 1 2025-11-20 05:09:37.856 00:05:00.191 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2556 1 2025-11-20 05:13:45.178 00:00:00.000 UDP 28.104.0.1:58971 -> 198.28.0.2:53 1 64 1 2025-11-20 05:13:45.178 00:00:00.000 UDP 28.104.0.1:42876 -> 198.28.0.2:53 1 64 1 2025-11-20 05:13:45.187 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58971 1 109 1 2025-11-20 05:13:45.187 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42876 1 80 1 2025-11-20 05:10:00.601 00:05:08.712 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 05:14:45.493 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34206 1 80 1 2025-11-20 05:14:45.493 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37035 1 109 1 2025-11-20 05:14:45.483 00:00:00.000 UDP 28.104.0.1:34206 -> 198.28.0.2:53 1 64 1 2025-11-20 05:14:45.483 00:00:00.000 UDP 28.104.0.1:37035 -> 198.28.0.2:53 1 64 1 2025-11-20 05:10:09.750 00:05:50.904 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 05:15:08.353 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 05:15:45.746 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58169 1 80 1 2025-11-20 05:15:45.747 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56986 1 109 1 2025-11-20 05:15:45.738 00:00:00.000 UDP 28.104.0.1:56986 -> 198.28.0.2:53 1 64 1 2025-11-20 05:15:45.738 00:00:00.000 UDP 28.104.0.1:58169 -> 198.28.0.2:53 1 64 1 2025-11-20 05:11:09.764 00:05:50.841 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 05:12:00.611 00:05:08.692 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 05:16:46.073 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49893 1 109 1 2025-11-20 05:16:46.073 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58680 1 80 1 2025-11-20 05:16:46.062 00:00:00.000 UDP 28.104.0.1:49893 -> 198.28.0.2:53 1 64 1 2025-11-20 05:16:46.062 00:00:00.000 UDP 28.104.0.1:58680 -> 198.28.0.2:53 1 64 1 2025-11-20 05:17:46.327 00:00:00.000 UDP 28.104.0.1:49788 -> 198.28.0.2:53 1 64 1 2025-11-20 05:17:46.330 00:00:00.000 UDP 28.104.0.1:41423 -> 198.28.0.2:53 1 64 1 2025-11-20 05:17:46.339 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49788 1 80 1 2025-11-20 05:17:46.342 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41423 1 109 1 2025-11-20 05:13:09.303 00:06:00.580 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-20 05:18:46.634 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53376 1 80 1 2025-11-20 05:18:46.634 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37917 1 109 1 2025-11-20 05:18:46.623 00:00:00.000 UDP 28.104.0.1:37917 -> 198.28.0.2:53 1 64 1 2025-11-20 05:18:46.623 00:00:00.000 UDP 28.104.0.1:53376 -> 198.28.0.2:53 1 64 1 2025-11-20 05:14:47.867 00:05:10.016 OSPF 28.0.2.1:0 -> 224.0.0.5:0 34 2360 1 2025-11-20 05:14:09.301 00:06:00.210 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-20 05:19:46.890 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47646 1 80 1 2025-11-20 05:19:46.890 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34289 1 109 1 2025-11-20 05:19:46.880 00:00:00.000 UDP 28.104.0.1:34289 -> 198.28.0.2:53 1 64 1 2025-11-20 05:19:46.880 00:00:00.000 UDP 28.104.0.1:47646 -> 198.28.0.2:53 1 64 1 2025-11-20 05:20:08.584 00:00:00.031 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 05:16:00.604 00:05:08.709 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 05:20:47.198 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36065 1 109 1 2025-11-20 05:20:47.198 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49628 1 80 1 2025-11-20 05:20:47.187 00:00:00.000 UDP 28.104.0.1:49628 -> 198.28.0.2:53 1 64 1 2025-11-20 05:20:47.187 00:00:00.000 UDP 28.104.0.1:36065 -> 198.28.0.2:53 1 64 1 2025-11-20 05:16:09.754 00:05:50.909 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 05:21:47.483 00:00:00.000 UDP 28.104.0.1:42917 -> 198.28.0.2:53 1 64 1 2025-11-20 05:21:47.483 00:00:00.000 UDP 28.104.0.1:40333 -> 198.28.0.2:53 1 64 1 2025-11-20 05:21:47.493 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42917 1 109 1 2025-11-20 05:21:47.493 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40333 1 80 1 2025-11-20 05:17:09.764 00:05:50.850 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 05:18:00.623 00:05:08.681 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 05:22:47.787 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56732 1 109 1 2025-11-20 05:22:47.787 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45355 1 80 1 2025-11-20 05:22:47.776 00:00:00.000 UDP 28.104.0.1:45355 -> 198.28.0.2:53 1 64 1 2025-11-20 05:22:47.776 00:00:00.000 UDP 28.104.0.1:56732 -> 198.28.0.2:53 1 64 1 2025-11-20 05:23:48.068 00:00:00.000 UDP 28.104.0.1:51349 -> 198.28.0.2:53 1 64 1 2025-11-20 05:23:48.069 00:00:00.000 UDP 28.104.0.1:35557 -> 198.28.0.2:53 1 64 1 2025-11-20 05:23:48.079 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51349 1 80 1 2025-11-20 05:23:48.079 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35557 1 109 1 2025-11-20 05:20:07.885 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 34 2444 1 2025-11-20 05:24:48.378 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39975 1 80 1 2025-11-20 05:24:48.381 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41589 1 109 1 2025-11-20 05:24:48.369 00:00:00.000 UDP 28.104.0.1:39975 -> 198.28.0.2:53 1 64 1 2025-11-20 05:24:48.369 00:00:00.000 UDP 28.104.0.1:41589 -> 198.28.0.2:53 1 64 1 2025-11-20 05:20:09.303 00:06:00.581 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-20 05:25:08.378 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 05:25:48.675 00:00:00.000 UDP 28.104.0.1:42441 -> 198.28.0.2:53 1 64 1 2025-11-20 05:25:48.675 00:00:00.000 UDP 28.104.0.1:41852 -> 198.28.0.2:53 1 64 1 2025-11-20 05:25:48.684 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42441 1 80 1 2025-11-20 05:25:48.685 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41852 1 109 1 2025-11-20 05:22:00.613 00:05:08.701 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 05:21:09.305 00:06:00.209 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-20 05:26:48.982 00:00:00.000 UDP 28.104.0.1:37963 -> 198.28.0.2:53 1 64 1 2025-11-20 05:26:48.982 00:00:00.000 UDP 28.104.0.1:40388 -> 198.28.0.2:53 1 64 1 2025-11-20 05:26:48.991 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40388 1 109 1 2025-11-20 05:26:48.991 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37963 1 80 1 2025-11-20 05:22:09.756 00:05:50.912 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 05:27:49.238 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48631 1 80 1 2025-11-20 05:27:49.238 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59279 1 109 1 2025-11-20 05:27:49.228 00:00:00.000 UDP 28.104.0.1:48631 -> 198.28.0.2:53 1 64 1 2025-11-20 05:27:49.228 00:00:00.000 UDP 28.104.0.1:59279 -> 198.28.0.2:53 1 64 1 2025-11-20 05:23:09.767 00:05:50.854 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 05:24:00.625 00:05:08.680 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 05:28:49.519 00:00:00.000 UDP 28.104.0.1:36050 -> 198.28.0.2:53 1 64 1 2025-11-20 05:28:49.519 00:00:00.000 UDP 28.104.0.1:49971 -> 198.28.0.2:53 1 64 1 2025-11-20 05:28:49.531 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36050 1 80 1 2025-11-20 05:28:49.531 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49971 1 109 1 2025-11-20 05:25:27.892 00:05:05.398 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2564 1 2025-11-20 05:29:49.847 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44077 1 80 1 2025-11-20 05:29:49.847 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58718 1 109 1 2025-11-20 05:29:49.835 00:00:00.000 UDP 28.104.0.1:44077 -> 198.28.0.2:53 1 64 1 2025-11-20 05:29:49.835 00:00:00.000 UDP 28.104.0.1:58718 -> 198.28.0.2:53 1 64 1 2025-11-20 05:30:08.622 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 05:30:50.163 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60768 1 80 1 2025-11-20 05:30:50.163 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37622 1 109 1 2025-11-20 05:30:50.153 00:00:00.000 UDP 28.104.0.1:37622 -> 198.28.0.2:53 1 64 1 2025-11-20 05:30:50.153 00:00:00.000 UDP 28.104.0.1:60768 -> 198.28.0.2:53 1 64 1 2025-11-20 05:31:50.461 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46419 1 80 1 2025-11-20 05:31:50.461 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39431 1 109 1 2025-11-20 05:31:50.451 00:00:00.000 UDP 28.104.0.1:46419 -> 198.28.0.2:53 1 64 1 2025-11-20 05:31:50.451 00:00:00.000 UDP 28.104.0.1:39431 -> 198.28.0.2:53 1 64 1 2025-11-20 05:27:09.305 00:06:00.581 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-20 05:28:00.617 00:05:08.698 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 05:32:50.747 00:00:00.000 UDP 28.104.0.1:43630 -> 198.28.0.2:53 1 64 1 2025-11-20 05:32:50.747 00:00:00.000 UDP 28.104.0.1:32923 -> 198.28.0.2:53 1 64 1 2025-11-20 05:32:50.757 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32923 1 80 1 2025-11-20 05:32:50.758 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43630 1 109 1 2025-11-20 05:28:09.756 00:05:50.919 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 05:28:09.304 00:06:00.210 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-20 05:33:51.056 00:00:00.000 UDP 28.104.0.1:45324 -> 198.28.0.2:53 1 64 1 2025-11-20 05:33:51.056 00:00:00.000 UDP 28.104.0.1:48686 -> 198.28.0.2:53 1 64 1 2025-11-20 05:33:51.067 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48686 1 80 1 2025-11-20 05:33:51.067 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45324 1 109 1 2025-11-20 05:29:09.766 00:05:50.859 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 05:30:00.630 00:05:08.675 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 05:30:37.896 00:05:10.453 OSPF 28.0.2.1:0 -> 224.0.0.5:0 44 3224 1 2025-11-20 05:34:51.363 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47131 1 109 1 2025-11-20 05:34:51.363 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45601 1 80 1 2025-11-20 05:34:51.353 00:00:00.000 UDP 28.104.0.1:45601 -> 198.28.0.2:53 1 64 1 2025-11-20 05:34:51.353 00:00:00.000 UDP 28.104.0.1:47131 -> 198.28.0.2:53 1 64 1 2025-11-20 05:35:08.659 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 05:35:51.661 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39263 1 80 1 2025-11-20 05:35:51.660 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33285 1 109 1 2025-11-20 05:35:51.651 00:00:00.000 UDP 28.104.0.1:33285 -> 198.28.0.2:53 1 64 1 2025-11-20 05:35:51.651 00:00:00.000 UDP 28.104.0.1:39263 -> 198.28.0.2:53 1 64 1 2025-11-20 05:36:51.953 00:00:00.000 UDP 28.104.0.1:51095 -> 198.28.0.2:53 1 64 1 2025-11-20 05:36:51.953 00:00:00.000 UDP 28.104.0.1:47850 -> 198.28.0.2:53 1 64 1 2025-11-20 05:36:51.964 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47850 1 109 1 2025-11-20 05:36:51.964 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51095 1 80 1 2025-11-20 05:37:52.270 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51223 1 109 1 2025-11-20 05:37:52.270 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47373 1 80 1 2025-11-20 05:37:52.261 00:00:00.000 UDP 28.104.0.1:51223 -> 198.28.0.2:53 1 64 1 2025-11-20 05:37:52.261 00:00:00.000 UDP 28.104.0.1:47373 -> 198.28.0.2:53 1 64 1 2025-11-20 05:34:00.626 00:05:08.691 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 05:38:52.532 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53398 1 80 1 2025-11-20 05:38:52.533 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45892 1 109 1 2025-11-20 05:38:52.522 00:00:00.000 UDP 28.104.0.1:53398 -> 198.28.0.2:53 1 64 1 2025-11-20 05:38:52.522 00:00:00.000 UDP 28.104.0.1:45892 -> 198.28.0.2:53 1 64 1 2025-11-20 05:34:09.760 00:05:50.915 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 05:34:09.306 00:06:00.583 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-20 05:39:52.818 00:00:00.000 UDP 28.104.0.1:48316 -> 198.28.0.2:53 1 64 1 2025-11-20 05:39:52.819 00:00:00.000 UDP 28.104.0.1:41553 -> 198.28.0.2:53 1 64 1 2025-11-20 05:39:52.830 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41553 1 80 1 2025-11-20 05:39:52.829 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48316 1 109 1 2025-11-20 05:35:09.771 00:05:50.855 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 05:36:00.635 00:05:08.671 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 05:35:09.305 00:06:00.210 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-20 05:40:08.690 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 05:35:57.903 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2876 1 2025-11-20 05:40:53.193 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58501 1 109 1 2025-11-20 05:40:53.193 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47381 1 80 1 2025-11-20 05:40:53.183 00:00:00.000 UDP 28.104.0.1:58501 -> 198.28.0.2:53 1 64 1 2025-11-20 05:40:53.183 00:00:00.000 UDP 28.104.0.1:47381 -> 198.28.0.2:53 1 64 1 2025-11-20 05:41:53.489 00:00:00.000 UDP 28.104.0.1:49337 -> 198.28.0.2:53 1 64 1 2025-11-20 05:41:53.489 00:00:00.000 UDP 28.104.0.1:56079 -> 198.28.0.2:53 1 64 1 2025-11-20 05:41:53.499 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56079 1 109 1 2025-11-20 05:41:53.499 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49337 1 80 1 2025-11-20 05:42:53.791 00:00:00.000 UDP 28.104.0.1:58201 -> 198.28.0.2:53 1 64 1 2025-11-20 05:42:53.790 00:00:00.000 UDP 28.104.0.1:53979 -> 198.28.0.2:53 1 64 1 2025-11-20 05:42:53.802 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58201 1 109 1 2025-11-20 05:42:53.802 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53979 1 80 1 2025-11-20 05:43:54.092 00:00:00.000 UDP 28.104.0.1:45998 -> 198.28.0.2:53 1 64 1 2025-11-20 05:43:54.093 00:00:00.000 UDP 28.104.0.1:35201 -> 198.28.0.2:53 1 64 1 2025-11-20 05:43:54.104 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35201 1 109 1 2025-11-20 05:43:54.104 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45998 1 80 1 2025-11-20 05:40:00.625 00:05:08.693 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 05:44:54.388 00:00:00.000 UDP 28.104.0.1:56508 -> 198.28.0.2:53 1 64 1 2025-11-20 05:44:54.388 00:00:00.000 UDP 28.104.0.1:46940 -> 198.28.0.2:53 1 64 1 2025-11-20 05:44:54.399 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46940 1 109 1 2025-11-20 05:44:54.399 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56508 1 80 1 2025-11-20 05:40:09.763 00:05:50.914 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 05:45:08.756 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 05:41:17.911 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2544 1 2025-11-20 05:45:54.697 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43392 1 80 1 2025-11-20 05:45:54.697 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45299 1 109 1 2025-11-20 05:45:54.687 00:00:00.000 UDP 28.104.0.1:43392 -> 198.28.0.2:53 1 64 1 2025-11-20 05:45:54.688 00:00:00.000 UDP 28.104.0.1:45299 -> 198.28.0.2:53 1 64 1 2025-11-20 05:41:09.773 00:05:50.854 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 05:41:09.307 00:06:00.583 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-20 05:42:00.636 00:05:08.673 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 05:46:54.980 00:00:00.000 UDP 28.104.0.1:33242 -> 198.28.0.2:53 1 64 1 2025-11-20 05:46:54.980 00:00:00.000 UDP 28.104.0.1:35063 -> 198.28.0.2:53 1 64 1 2025-11-20 05:46:54.991 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33242 1 109 1 2025-11-20 05:46:54.991 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35063 1 80 1 2025-11-20 05:42:09.307 00:06:00.210 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-20 05:47:55.993 00:00:00.000 UDP 28.104.0.1:57093 -> 198.28.0.2:53 1 64 1 2025-11-20 05:47:55.993 00:00:00.000 UDP 28.104.0.1:35901 -> 198.28.0.2:53 1 64 1 2025-11-20 05:47:56.004 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35901 1 80 1 2025-11-20 05:47:56.004 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57093 1 109 1 2025-11-20 05:48:56.297 00:00:00.000 UDP 28.104.0.1:59058 -> 198.28.0.2:53 1 64 1 2025-11-20 05:48:56.297 00:00:00.000 UDP 28.104.0.1:51359 -> 198.28.0.2:53 1 64 1 2025-11-20 05:48:56.307 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51359 1 109 1 2025-11-20 05:48:56.307 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59058 1 80 1 2025-11-20 05:49:56.605 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39545 1 109 1 2025-11-20 05:49:56.604 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46970 1 80 1 2025-11-20 05:49:56.594 00:00:00.000 UDP 28.104.0.1:39545 -> 198.28.0.2:53 1 64 1 2025-11-20 05:49:56.593 00:00:00.000 UDP 28.104.0.1:46970 -> 198.28.0.2:53 1 64 1 2025-11-20 05:50:09.063 00:00:00.044 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 05:46:00.627 00:05:08.692 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 05:46:37.916 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 34 2360 1 2025-11-20 05:50:56.846 00:00:00.000 UDP 28.104.0.1:48318 -> 198.28.0.2:53 1 64 1 2025-11-20 05:50:56.846 00:00:00.000 UDP 28.104.0.1:57063 -> 198.28.0.2:53 1 64 1 2025-11-20 05:50:56.856 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57063 1 80 1 2025-11-20 05:50:56.856 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48318 1 109 1 2025-11-20 05:46:09.765 00:05:50.913 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 05:47:09.775 00:05:50.852 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 05:51:57.151 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36196 1 80 1 2025-11-20 05:51:57.151 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39088 1 109 1 2025-11-20 05:51:57.141 00:00:00.000 UDP 28.104.0.1:36196 -> 198.28.0.2:53 1 64 1 2025-11-20 05:51:57.141 00:00:00.000 UDP 28.104.0.1:39088 -> 198.28.0.2:53 1 64 1 2025-11-20 05:48:00.637 00:05:08.672 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 05:52:57.435 00:00:00.000 UDP 28.104.0.1:57234 -> 198.28.0.2:53 1 64 1 2025-11-20 05:52:57.436 00:00:00.000 UDP 28.104.0.1:33886 -> 198.28.0.2:53 1 64 1 2025-11-20 05:52:57.446 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57234 1 80 1 2025-11-20 05:52:57.446 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33886 1 109 1 2025-11-20 05:48:09.308 00:06:00.584 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-20 05:53:57.768 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33860 1 80 1 2025-11-20 05:53:57.768 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60127 1 109 1 2025-11-20 05:53:57.758 00:00:00.000 UDP 28.104.0.1:60127 -> 198.28.0.2:53 1 64 1 2025-11-20 05:53:57.758 00:00:00.000 UDP 28.104.0.1:33860 -> 198.28.0.2:53 1 64 1 2025-11-20 05:49:09.309 00:06:00.212 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-20 05:54:58.070 00:00:00.000 UDP 28.104.0.1:33436 -> 198.28.0.2:53 1 64 1 2025-11-20 05:54:58.070 00:00:00.000 UDP 28.104.0.1:40644 -> 198.28.0.2:53 1 64 1 2025-11-20 05:54:58.079 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33436 1 109 1 2025-11-20 05:54:58.079 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40644 1 80 1 2025-11-20 05:55:09.163 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 05:55:58.374 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45937 1 109 1 2025-11-20 05:55:58.374 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51489 1 80 1 2025-11-20 05:55:58.364 00:00:00.000 UDP 28.104.0.1:51489 -> 198.28.0.2:53 1 64 1 2025-11-20 05:55:58.364 00:00:00.000 UDP 28.104.0.1:45937 -> 198.28.0.2:53 1 64 1 2025-11-20 05:52:00.628 00:05:08.694 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 05:51:57.922 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2508 1 2025-11-20 05:56:58.672 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47701 1 80 1 2025-11-20 05:56:58.672 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49686 1 109 1 2025-11-20 05:52:09.767 00:05:50.913 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 05:56:58.662 00:00:00.000 UDP 28.104.0.1:49686 -> 198.28.0.2:53 1 64 1 2025-11-20 05:56:58.662 00:00:00.000 UDP 28.104.0.1:47701 -> 198.28.0.2:53 1 64 1 2025-11-20 05:57:58.970 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42473 1 109 1 2025-11-20 05:53:09.776 00:05:50.853 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 05:57:58.971 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45376 1 80 1 2025-11-20 05:57:58.960 00:00:00.000 UDP 28.104.0.1:42473 -> 198.28.0.2:53 1 64 1 2025-11-20 05:57:58.961 00:00:00.000 UDP 28.104.0.1:45376 -> 198.28.0.2:53 1 64 1 2025-11-20 05:54:00.639 00:05:08.674 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 Summary: total flows: 315, total bytes: 94859, total packets: 1397, avg bps: 206, avg pps: 0, avg bpp: 67 Time window: 2025-11-20 04:58:00 - 2025-11-20 05:59:09 Total flows processed: 315, passed: 315, Blocks skipped: 0, Bytes read: 32824 Sys: 0.0025s User: 0.0042s Wall: 0.0033s flows/second: 95483.5 Runtime: 0.0033s