Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-20 07:54:09.354 00:06:00.574 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-20 07:59:45.853 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46657 1 80 1 2025-11-20 07:59:45.853 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34729 1 109 1 2025-11-20 07:59:45.843 00:00:00.000 UDP 28.104.0.1:46657 -> 198.28.0.2:53 1 64 1 2025-11-20 07:59:45.843 00:00:00.000 UDP 28.104.0.1:34729 -> 198.28.0.2:53 1 64 1 2025-11-20 08:00:11.406 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 07:55:09.354 00:06:00.209 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-20 08:00:46.137 00:00:00.000 UDP 28.104.0.1:45593 -> 198.28.0.2:53 1 64 1 2025-11-20 08:00:46.137 00:00:00.000 UDP 28.104.0.1:37468 -> 198.28.0.2:53 1 64 1 2025-11-20 08:00:46.147 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37468 1 80 1 2025-11-20 08:00:46.147 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45593 1 109 1 2025-11-20 08:01:46.399 00:00:00.000 UDP 28.104.0.1:50835 -> 198.28.0.2:53 1 64 1 2025-11-20 08:01:46.399 00:00:00.000 UDP 28.104.0.1:57734 -> 198.28.0.2:53 1 64 1 2025-11-20 08:01:46.410 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50835 1 80 1 2025-11-20 08:01:46.410 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57734 1 109 1 2025-11-20 07:58:00.689 00:05:08.678 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 08:02:46.701 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37451 1 109 1 2025-11-20 08:02:46.700 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50836 1 80 1 2025-11-20 08:02:46.689 00:00:00.000 UDP 28.104.0.1:37451 -> 198.28.0.2:53 1 64 1 2025-11-20 08:02:46.689 00:00:00.000 UDP 28.104.0.1:50836 -> 198.28.0.2:53 1 64 1 2025-11-20 07:58:09.809 00:05:50.931 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 08:03:46.982 00:00:00.000 UDP 28.104.0.1:52787 -> 198.28.0.2:53 1 64 1 2025-11-20 08:03:46.982 00:00:00.000 UDP 28.104.0.1:56579 -> 198.28.0.2:53 1 64 1 2025-11-20 08:03:46.993 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52787 1 109 1 2025-11-20 08:03:46.993 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56579 1 80 1 2025-11-20 07:59:09.819 00:05:50.871 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 07:59:48.133 00:05:10.011 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2760 1 2025-11-20 08:00:00.699 00:05:08.659 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 08:04:47.283 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49140 1 109 1 2025-11-20 08:04:47.284 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57541 1 80 1 2025-11-20 08:04:47.273 00:00:00.000 UDP 28.104.0.1:49140 -> 198.28.0.2:53 1 64 1 2025-11-20 08:04:47.273 00:00:00.000 UDP 28.104.0.1:57541 -> 198.28.0.2:53 1 64 1 2025-11-20 08:05:11.941 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 08:05:55.764 00:00:00.000 UDP 28.104.0.1:45389 -> 198.28.0.2:53 1 64 1 2025-11-20 08:05:55.764 00:00:00.000 UDP 28.104.0.1:35328 -> 198.28.0.2:53 1 64 1 2025-11-20 08:05:55.774 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45389 1 80 1 2025-11-20 08:05:55.773 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35328 1 109 1 2025-11-20 08:01:09.356 00:06:00.576 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-20 08:06:56.079 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42653 1 80 1 2025-11-20 08:06:56.079 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32857 1 109 1 2025-11-20 08:06:56.068 00:00:00.000 UDP 28.104.0.1:32857 -> 198.28.0.2:53 1 64 1 2025-11-20 08:06:56.068 00:00:00.000 UDP 28.104.0.1:42653 -> 198.28.0.2:53 1 64 1 2025-11-20 08:02:09.359 00:06:00.207 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-20 08:07:56.358 00:00:00.000 UDP 28.104.0.1:53436 -> 198.28.0.2:53 1 64 1 2025-11-20 08:07:56.358 00:00:00.000 UDP 28.104.0.1:46503 -> 198.28.0.2:53 1 64 1 2025-11-20 08:07:56.368 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53436 1 109 1 2025-11-20 08:07:56.368 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46503 1 80 1 2025-11-20 08:04:00.690 00:05:08.679 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 08:08:56.652 00:00:00.000 UDP 28.104.0.1:53865 -> 198.28.0.2:53 1 64 1 2025-11-20 08:08:56.652 00:00:00.000 UDP 28.104.0.1:35498 -> 198.28.0.2:53 1 64 1 2025-11-20 08:08:56.663 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35498 1 80 1 2025-11-20 08:08:56.663 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53865 1 109 1 2025-11-20 08:04:09.811 00:05:50.934 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 08:05:08.144 00:05:10.013 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2648 1 2025-11-20 08:09:56.946 00:00:00.000 UDP 28.104.0.1:50183 -> 198.28.0.2:53 1 64 1 2025-11-20 08:09:56.946 00:00:00.000 UDP 28.104.0.1:55591 -> 198.28.0.2:53 1 64 1 2025-11-20 08:09:56.957 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55591 1 80 1 2025-11-20 08:09:56.956 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50183 1 109 1 2025-11-20 08:05:09.820 00:05:50.874 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 08:10:11.628 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 08:06:00.700 00:05:08.659 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 08:10:57.240 00:00:00.000 UDP 28.104.0.1:50961 -> 198.28.0.2:53 1 64 1 2025-11-20 08:10:57.240 00:00:00.000 UDP 28.104.0.1:37952 -> 198.28.0.2:53 1 64 1 2025-11-20 08:10:57.251 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50961 1 80 1 2025-11-20 08:10:57.251 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37952 1 109 1 2025-11-20 08:11:57.542 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41335 1 109 1 2025-11-20 08:11:57.542 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58433 1 80 1 2025-11-20 08:11:57.532 00:00:00.000 UDP 28.104.0.1:58433 -> 198.28.0.2:53 1 64 1 2025-11-20 08:11:57.532 00:00:00.000 UDP 28.104.0.1:41335 -> 198.28.0.2:53 1 64 1 2025-11-20 08:12:57.829 00:00:00.000 UDP 28.104.0.1:56969 -> 198.28.0.2:53 1 64 1 2025-11-20 08:12:57.829 00:00:00.000 UDP 28.104.0.1:47720 -> 198.28.0.2:53 1 64 1 2025-11-20 08:12:57.840 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47720 1 109 1 2025-11-20 08:12:57.840 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56969 1 80 1 2025-11-20 08:08:09.360 00:06:00.574 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-20 08:13:58.102 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48650 1 109 1 2025-11-20 08:13:58.102 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50477 1 80 1 2025-11-20 08:13:58.091 00:00:00.000 UDP 28.104.0.1:48650 -> 198.28.0.2:53 1 64 1 2025-11-20 08:13:58.091 00:00:00.000 UDP 28.104.0.1:50477 -> 198.28.0.2:53 1 64 1 2025-11-20 08:09:09.358 00:06:00.209 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-20 08:10:00.695 00:05:08.676 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 08:10:28.158 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 34 2444 1 2025-11-20 08:10:09.811 00:05:50.933 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 08:14:58.376 00:00:00.000 UDP 28.104.0.1:44195 -> 198.28.0.2:53 1 64 1 2025-11-20 08:14:58.376 00:00:00.000 UDP 28.104.0.1:49232 -> 198.28.0.2:53 1 64 1 2025-11-20 08:14:58.386 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49232 1 109 1 2025-11-20 08:14:58.386 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44195 1 80 1 2025-11-20 08:15:11.943 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 08:15:58.670 00:00:00.000 UDP 28.104.0.1:41155 -> 198.28.0.2:53 1 64 1 2025-11-20 08:15:58.670 00:00:00.000 UDP 28.104.0.1:56973 -> 198.28.0.2:53 1 64 1 2025-11-20 08:11:09.823 00:05:50.872 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 08:15:58.681 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56973 1 109 1 2025-11-20 08:15:58.681 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41155 1 80 1 2025-11-20 08:12:00.704 00:05:08.656 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 08:16:58.965 00:00:00.000 UDP 28.104.0.1:53289 -> 198.28.0.2:53 1 64 1 2025-11-20 08:16:58.965 00:00:00.000 UDP 28.104.0.1:40059 -> 198.28.0.2:53 1 64 1 2025-11-20 08:16:58.975 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53289 1 80 1 2025-11-20 08:16:58.975 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40059 1 109 1 2025-11-20 08:17:59.281 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47432 1 80 1 2025-11-20 08:17:59.279 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44798 1 109 1 2025-11-20 08:17:59.269 00:00:00.000 UDP 28.104.0.1:47432 -> 198.28.0.2:53 1 64 1 2025-11-20 08:17:59.269 00:00:00.000 UDP 28.104.0.1:44798 -> 198.28.0.2:53 1 64 1 2025-11-20 08:18:59.619 00:00:00.000 UDP 28.104.0.1:60627 -> 198.28.0.2:53 1 64 1 2025-11-20 08:18:59.619 00:00:00.000 UDP 28.104.0.1:57580 -> 198.28.0.2:53 1 64 1 2025-11-20 08:18:59.628 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60627 1 80 1 2025-11-20 08:18:59.629 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57580 1 109 1 2025-11-20 08:19:59.917 00:00:00.000 UDP 28.104.0.1:49031 -> 198.28.0.2:53 1 64 1 2025-11-20 08:19:59.917 00:00:00.000 UDP 28.104.0.1:57183 -> 198.28.0.2:53 1 64 1 2025-11-20 08:19:59.927 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49031 1 80 1 2025-11-20 08:15:48.162 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 34 2340 1 2025-11-20 08:19:59.927 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57183 1 109 1 2025-11-20 08:20:11.868 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 08:16:00.695 00:05:08.676 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 08:15:09.359 00:06:00.576 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-20 08:21:00.195 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39994 1 80 1 2025-11-20 08:21:00.195 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45899 1 109 1 2025-11-20 08:16:09.814 00:05:50.933 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 08:21:00.184 00:00:00.000 UDP 28.104.0.1:39994 -> 198.28.0.2:53 1 64 1 2025-11-20 08:21:00.184 00:00:00.000 UDP 28.104.0.1:45899 -> 198.28.0.2:53 1 64 1 2025-11-20 08:16:09.359 00:06:00.208 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-20 08:22:00.449 00:00:00.000 UDP 28.104.0.1:53783 -> 198.28.0.2:53 1 64 1 2025-11-20 08:22:00.449 00:00:00.000 UDP 28.104.0.1:40260 -> 198.28.0.2:53 1 64 1 2025-11-20 08:22:00.460 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40260 1 80 1 2025-11-20 08:22:00.460 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53783 1 109 1 2025-11-20 08:17:09.825 00:05:50.874 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 08:18:00.708 00:05:08.653 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 08:23:00.713 00:00:00.000 UDP 28.104.0.1:55344 -> 198.28.0.2:53 1 64 1 2025-11-20 08:23:00.714 00:00:00.000 UDP 28.104.0.1:45240 -> 198.28.0.2:53 1 64 1 2025-11-20 08:23:00.724 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55344 1 109 1 2025-11-20 08:23:00.724 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45240 1 80 1 2025-11-20 08:24:01.045 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35315 1 80 1 2025-11-20 08:24:01.045 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53546 1 109 1 2025-11-20 08:24:01.035 00:00:00.000 UDP 28.104.0.1:53546 -> 198.28.0.2:53 1 64 1 2025-11-20 08:24:01.035 00:00:00.000 UDP 28.104.0.1:35315 -> 198.28.0.2:53 1 64 1 2025-11-20 08:25:01.337 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48223 1 80 1 2025-11-20 08:25:01.337 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42166 1 109 1 2025-11-20 08:25:01.326 00:00:00.000 UDP 28.104.0.1:42166 -> 198.28.0.2:53 1 64 1 2025-11-20 08:25:01.326 00:00:00.000 UDP 28.104.0.1:48223 -> 198.28.0.2:53 1 64 1 2025-11-20 08:25:12.049 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 08:21:08.166 00:05:10.653 OSPF 28.0.2.1:0 -> 224.0.0.5:0 46 3388 1 2025-11-20 08:26:01.627 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52968 1 80 1 2025-11-20 08:26:01.628 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43670 1 109 1 2025-11-20 08:26:01.617 00:00:00.000 UDP 28.104.0.1:52968 -> 198.28.0.2:53 1 64 1 2025-11-20 08:26:01.617 00:00:00.000 UDP 28.104.0.1:43670 -> 198.28.0.2:53 1 64 1 2025-11-20 08:22:00.698 00:05:08.675 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 08:27:01.924 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34325 1 80 1 2025-11-20 08:27:01.924 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53136 1 109 1 2025-11-20 08:27:01.914 00:00:00.000 UDP 28.104.0.1:34325 -> 198.28.0.2:53 1 64 1 2025-11-20 08:27:01.914 00:00:00.000 UDP 28.104.0.1:53136 -> 198.28.0.2:53 1 64 1 2025-11-20 08:22:09.817 00:05:50.937 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 08:22:09.360 00:06:00.576 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-20 08:23:09.827 00:05:50.892 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 08:28:03.255 00:00:00.000 UDP 28.104.0.1:40748 -> 198.28.0.2:53 1 64 1 2025-11-20 08:28:03.255 00:00:00.000 UDP 28.104.0.1:50674 -> 198.28.0.2:53 1 64 1 2025-11-20 08:28:03.265 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50674 1 80 1 2025-11-20 08:28:03.265 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40748 1 109 1 2025-11-20 08:24:00.711 00:05:08.651 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 08:23:09.360 00:06:00.215 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-20 08:29:03.545 00:00:00.000 UDP 28.104.0.1:42063 -> 198.28.0.2:53 1 64 1 2025-11-20 08:29:03.545 00:00:00.000 UDP 28.104.0.1:47787 -> 198.28.0.2:53 1 64 1 2025-11-20 08:29:03.555 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47787 1 109 1 2025-11-20 08:29:03.556 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42063 1 80 1 2025-11-20 08:30:12.097 00:00:00.000 UDP 28.104.0.1:35802 -> 198.28.0.2:53 1 64 1 2025-11-20 08:30:12.097 00:00:00.000 UDP 28.104.0.1:54748 -> 198.28.0.2:53 1 64 1 2025-11-20 08:30:12.194 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 08:30:12.108 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35802 1 109 1 2025-11-20 08:30:12.107 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54748 1 80 1 2025-11-20 08:26:28.174 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2832 1 2025-11-20 08:31:12.420 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34005 1 109 1 2025-11-20 08:31:12.420 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54857 1 80 1 2025-11-20 08:31:12.409 00:00:00.000 UDP 28.104.0.1:34005 -> 198.28.0.2:53 1 64 1 2025-11-20 08:31:12.409 00:00:00.000 UDP 28.104.0.1:54857 -> 198.28.0.2:53 1 64 1 2025-11-20 08:28:00.703 00:05:08.669 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 08:32:12.721 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52179 1 109 1 2025-11-20 08:32:12.721 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55916 1 80 1 2025-11-20 08:32:12.712 00:00:00.000 UDP 28.104.0.1:55916 -> 198.28.0.2:53 1 64 1 2025-11-20 08:32:12.712 00:00:00.000 UDP 28.104.0.1:52179 -> 198.28.0.2:53 1 64 1 2025-11-20 08:28:09.819 00:05:50.949 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 08:33:13.043 00:00:00.000 UDP 28.104.0.1:45873 -> 198.28.0.2:53 1 64 1 2025-11-20 08:33:13.043 00:00:00.000 UDP 28.104.0.1:60792 -> 198.28.0.2:53 1 64 1 2025-11-20 08:33:13.054 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45873 1 80 1 2025-11-20 08:33:13.053 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60792 1 109 1 2025-11-20 08:29:09.828 00:05:50.890 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 08:29:09.363 00:06:00.575 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-20 08:30:00.725 00:05:08.638 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 08:34:13.357 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59244 1 109 1 2025-11-20 08:34:13.357 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56122 1 80 1 2025-11-20 08:34:13.347 00:00:00.000 UDP 28.104.0.1:59244 -> 198.28.0.2:53 1 64 1 2025-11-20 08:34:13.347 00:00:00.000 UDP 28.104.0.1:56122 -> 198.28.0.2:53 1 64 1 2025-11-20 08:30:09.363 00:06:00.213 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-20 08:35:13.654 00:00:00.000 UDP 28.104.0.1:35265 -> 198.28.0.2:53 1 64 1 2025-11-20 08:35:13.654 00:00:00.000 UDP 28.104.0.1:49503 -> 198.28.0.2:53 1 64 1 2025-11-20 08:35:13.665 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35265 1 80 1 2025-11-20 08:35:13.665 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49503 1 109 1 2025-11-20 08:35:12.262 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 08:31:48.178 00:05:10.012 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2688 1 2025-11-20 08:36:13.943 00:00:00.000 UDP 28.104.0.1:41836 -> 198.28.0.2:53 1 64 1 2025-11-20 08:36:13.943 00:00:00.000 UDP 28.104.0.1:38307 -> 198.28.0.2:53 1 64 1 2025-11-20 08:36:13.952 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38307 1 80 1 2025-11-20 08:36:13.952 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41836 1 109 1 2025-11-20 08:37:14.255 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56473 1 80 1 2025-11-20 08:37:14.255 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59002 1 109 1 2025-11-20 08:37:14.245 00:00:00.000 UDP 28.104.0.1:59002 -> 198.28.0.2:53 1 64 1 2025-11-20 08:37:14.245 00:00:00.000 UDP 28.104.0.1:56473 -> 198.28.0.2:53 1 64 1 2025-11-20 08:38:14.546 00:00:00.000 UDP 28.104.0.1:36691 -> 198.28.0.2:53 1 64 1 2025-11-20 08:38:14.546 00:00:00.000 UDP 28.104.0.1:41788 -> 198.28.0.2:53 1 64 1 2025-11-20 08:34:00.717 00:05:08.656 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 08:38:14.555 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41788 1 109 1 2025-11-20 08:38:14.555 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36691 1 80 1 2025-11-20 08:34:09.819 00:05:50.952 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 08:39:14.856 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60345 1 80 1 2025-11-20 08:39:14.856 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59700 1 109 1 2025-11-20 08:39:14.846 00:00:00.000 UDP 28.104.0.1:60345 -> 198.28.0.2:53 1 64 1 2025-11-20 08:39:14.846 00:00:00.000 UDP 28.104.0.1:59700 -> 198.28.0.2:53 1 64 1 2025-11-20 08:35:09.829 00:05:50.891 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 08:36:00.728 00:05:08.636 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 08:40:15.135 00:00:00.000 UDP 28.104.0.1:46139 -> 198.28.0.2:53 1 64 1 2025-11-20 08:40:15.135 00:00:00.000 UDP 28.104.0.1:38326 -> 198.28.0.2:53 1 64 1 2025-11-20 08:40:12.285 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 08:40:15.146 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38326 1 80 1 2025-11-20 08:40:15.146 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46139 1 109 1 2025-11-20 08:36:09.363 00:06:00.577 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-20 08:41:15.400 00:00:00.000 UDP 28.104.0.1:57269 -> 198.28.0.2:53 1 64 1 2025-11-20 08:41:15.400 00:00:00.000 UDP 28.104.0.1:59386 -> 198.28.0.2:53 1 64 1 2025-11-20 08:41:15.411 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57269 1 80 1 2025-11-20 08:41:15.411 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59386 1 109 1 2025-11-20 08:37:08.190 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2424 1 2025-11-20 08:37:09.363 00:06:00.211 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-20 08:42:15.712 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33943 1 109 1 2025-11-20 08:42:15.712 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42228 1 80 1 2025-11-20 08:42:15.702 00:00:00.000 UDP 28.104.0.1:33943 -> 198.28.0.2:53 1 64 1 2025-11-20 08:42:15.702 00:00:00.000 UDP 28.104.0.1:42228 -> 198.28.0.2:53 1 64 1 2025-11-20 08:43:16.410 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44233 1 80 1 2025-11-20 08:43:16.409 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41217 1 109 1 2025-11-20 08:43:16.400 00:00:00.000 UDP 28.104.0.1:44233 -> 198.28.0.2:53 1 64 1 2025-11-20 08:43:16.399 00:00:00.000 UDP 28.104.0.1:41217 -> 198.28.0.2:53 1 64 1 2025-11-20 08:40:00.721 00:05:08.653 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 08:44:16.706 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56093 1 109 1 2025-11-20 08:44:16.706 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49341 1 80 1 2025-11-20 08:44:16.696 00:00:00.000 UDP 28.104.0.1:49341 -> 198.28.0.2:53 1 64 1 2025-11-20 08:44:16.696 00:00:00.000 UDP 28.104.0.1:56093 -> 198.28.0.2:53 1 64 1 2025-11-20 08:40:09.820 00:05:50.953 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 08:45:12.588 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 08:45:17.018 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34363 1 109 1 2025-11-20 08:45:17.015 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54142 1 80 1 2025-11-20 08:45:17.005 00:00:00.000 UDP 28.104.0.1:34363 -> 198.28.0.2:53 1 64 1 2025-11-20 08:45:17.005 00:00:00.000 UDP 28.104.0.1:54142 -> 198.28.0.2:53 1 64 1 2025-11-20 08:41:09.830 00:05:50.893 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 08:42:00.732 00:05:08.633 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 08:46:17.312 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54743 1 109 1 2025-11-20 08:46:17.312 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55438 1 80 1 2025-11-20 08:46:17.302 00:00:00.000 UDP 28.104.0.1:54743 -> 198.28.0.2:53 1 64 1 2025-11-20 08:46:17.302 00:00:00.000 UDP 28.104.0.1:55438 -> 198.28.0.2:53 1 64 1 2025-11-20 08:42:28.196 00:05:00.924 OSPF 28.0.2.1:0 -> 224.0.0.5:0 33 2376 1 2025-11-20 08:47:17.603 00:00:00.000 UDP 28.104.0.1:52032 -> 198.28.0.2:53 1 64 1 2025-11-20 08:47:17.603 00:00:00.000 UDP 28.104.0.1:45232 -> 198.28.0.2:53 1 64 1 2025-11-20 08:47:17.614 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45232 1 109 1 2025-11-20 08:47:17.614 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52032 1 80 1 2025-11-20 08:43:09.364 00:06:00.583 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-20 08:48:17.904 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48985 1 80 1 2025-11-20 08:48:17.904 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60162 1 109 1 2025-11-20 08:48:17.893 00:00:00.000 UDP 28.104.0.1:48985 -> 198.28.0.2:53 1 64 1 2025-11-20 08:48:17.894 00:00:00.000 UDP 28.104.0.1:60162 -> 198.28.0.2:53 1 64 1 2025-11-20 08:44:09.364 00:06:00.217 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-20 08:49:18.210 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47530 1 80 1 2025-11-20 08:49:18.210 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58454 1 109 1 2025-11-20 08:49:18.200 00:00:00.000 UDP 28.104.0.1:47530 -> 198.28.0.2:53 1 64 1 2025-11-20 08:49:18.200 00:00:00.000 UDP 28.104.0.1:58454 -> 198.28.0.2:53 1 64 1 2025-11-20 08:50:18.499 00:00:00.000 UDP 28.104.0.1:54062 -> 198.28.0.2:53 1 64 1 2025-11-20 08:50:18.499 00:00:00.000 UDP 28.104.0.1:60117 -> 198.28.0.2:53 1 64 1 2025-11-20 08:46:00.724 00:05:08.652 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 08:50:13.070 00:00:00.042 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 08:50:18.512 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54062 1 80 1 2025-11-20 08:50:18.512 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60117 1 109 1 2025-11-20 08:46:09.820 00:05:50.957 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 08:51:18.816 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55352 1 80 1 2025-11-20 08:51:18.816 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54287 1 109 1 2025-11-20 08:51:18.808 00:00:00.000 UDP 28.104.0.1:54287 -> 198.28.0.2:53 1 64 1 2025-11-20 08:51:18.807 00:00:00.000 UDP 28.104.0.1:55352 -> 198.28.0.2:53 1 64 1 2025-11-20 08:47:38.200 00:05:10.011 OSPF 28.0.2.1:0 -> 224.0.0.5:0 43 3164 1 2025-11-20 08:47:09.832 00:05:50.896 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 08:48:00.734 00:05:08.633 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 08:52:19.119 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34851 1 80 1 2025-11-20 08:52:19.119 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58718 1 109 1 2025-11-20 08:52:19.110 00:00:00.000 UDP 28.104.0.1:34851 -> 198.28.0.2:53 1 64 1 2025-11-20 08:52:19.110 00:00:00.000 UDP 28.104.0.1:58718 -> 198.28.0.2:53 1 64 1 2025-11-20 08:53:19.389 00:00:00.000 UDP 28.104.0.1:35070 -> 198.28.0.2:53 1 64 1 2025-11-20 08:53:19.390 00:00:00.000 UDP 28.104.0.1:44295 -> 198.28.0.2:53 1 64 1 2025-11-20 08:53:19.400 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44295 1 109 1 2025-11-20 08:53:19.399 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35070 1 80 1 2025-11-20 08:54:19.754 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60555 1 80 1 2025-11-20 08:54:19.754 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42123 1 109 1 2025-11-20 08:54:19.743 00:00:00.000 UDP 28.104.0.1:42123 -> 198.28.0.2:53 1 64 1 2025-11-20 08:54:19.743 00:00:00.000 UDP 28.104.0.1:60555 -> 198.28.0.2:53 1 64 1 2025-11-20 08:50:09.365 00:06:00.582 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-20 08:55:12.659 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 08:55:20.056 00:00:00.000 UDP 28.104.0.1:58694 -> 198.28.0.2:53 1 64 1 2025-11-20 08:55:20.056 00:00:00.000 UDP 28.104.0.1:45565 -> 198.28.0.2:53 1 64 1 2025-11-20 08:55:20.066 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45565 1 109 1 2025-11-20 08:55:20.066 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58694 1 80 1 2025-11-20 08:51:09.365 00:06:00.217 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-20 08:52:00.728 00:05:08.649 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 08:56:20.365 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60542 1 80 1 2025-11-20 08:56:20.365 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46111 1 109 1 2025-11-20 08:56:20.356 00:00:00.000 UDP 28.104.0.1:60542 -> 198.28.0.2:53 1 64 1 2025-11-20 08:56:20.356 00:00:00.000 UDP 28.104.0.1:46111 -> 198.28.0.2:53 1 64 1 2025-11-20 08:52:09.824 00:05:50.955 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 08:52:58.211 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 44 3064 1 2025-11-20 08:57:20.656 00:00:00.000 UDP 28.104.0.1:56044 -> 198.28.0.2:53 1 64 1 2025-11-20 08:57:20.656 00:00:00.000 UDP 28.104.0.1:38309 -> 198.28.0.2:53 1 64 1 2025-11-20 08:57:20.667 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56044 1 80 1 2025-11-20 08:57:20.667 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38309 1 109 1 2025-11-20 08:53:09.835 00:05:50.896 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 08:54:00.738 00:05:08.629 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 08:58:20.956 00:00:00.000 UDP 28.104.0.1:50035 -> 198.28.0.2:53 1 64 1 2025-11-20 08:58:20.956 00:00:00.000 UDP 28.104.0.1:35186 -> 198.28.0.2:53 1 64 1 2025-11-20 08:58:20.966 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35186 1 109 1 2025-11-20 08:58:20.966 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50035 1 80 1 Summary: total flows: 317, total bytes: 96873, total packets: 1429, avg bps: 198, avg pps: 0, avg bpp: 67 Time window: 2025-11-20 07:54:09 - 2025-11-20 08:59:09 Total flows processed: 317, passed: 317, Blocks skipped: 0, Bytes read: 33032 Sys: 0.0051s User: 0.0017s Wall: 0.0039s flows/second: 80537.5 Runtime: 0.0040s