Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-20 14:59:47.944 00:00:00.000 UDP 28.104.0.1:45023 -> 198.28.0.2:53 1 64 1 2025-11-20 14:59:47.944 00:00:00.000 UDP 28.104.0.1:40378 -> 198.28.0.2:53 1 64 1 2025-11-20 14:59:47.954 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40378 1 80 1 2025-11-20 14:59:47.954 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45023 1 109 1 2025-11-20 14:55:09.459 00:06:00.251 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-20 15:00:21.526 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 15:00:48.263 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42990 1 80 1 2025-11-20 15:00:48.263 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51222 1 109 1 2025-11-20 15:00:48.252 00:00:00.000 UDP 28.104.0.1:51222 -> 198.28.0.2:53 1 64 1 2025-11-20 15:00:48.252 00:00:00.000 UDP 28.104.0.1:42990 -> 198.28.0.2:53 1 64 1 2025-11-20 15:01:48.554 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46585 1 80 1 2025-11-20 15:01:48.554 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35585 1 109 1 2025-11-20 15:01:48.544 00:00:00.000 UDP 28.104.0.1:46585 -> 198.28.0.2:53 1 64 1 2025-11-20 15:01:48.544 00:00:00.000 UDP 28.104.0.1:35585 -> 198.28.0.2:53 1 64 1 2025-11-20 14:58:00.940 00:05:08.529 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 15:02:48.850 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49113 1 80 1 2025-11-20 15:02:48.850 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34820 1 109 1 2025-11-20 15:02:48.840 00:00:00.000 UDP 28.104.0.1:49113 -> 198.28.0.2:53 1 64 1 2025-11-20 15:02:48.840 00:00:00.000 UDP 28.104.0.1:34820 -> 198.28.0.2:53 1 64 1 2025-11-20 14:58:09.927 00:05:51.066 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 15:03:49.185 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50890 1 109 1 2025-11-20 15:03:49.185 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41632 1 80 1 2025-11-20 15:03:49.176 00:00:00.000 UDP 28.104.0.1:41632 -> 198.28.0.2:53 1 64 1 2025-11-20 15:03:49.176 00:00:00.000 UDP 28.104.0.1:50890 -> 198.28.0.2:53 1 64 1 2025-11-20 14:59:09.937 00:05:51.006 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 14:59:48.739 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2920 1 2025-11-20 15:00:09.459 00:05:00.654 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-20 15:00:00.952 00:05:08.507 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 15:04:49.480 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39701 1 109 1 2025-11-20 15:04:49.480 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52886 1 80 1 2025-11-20 15:04:49.469 00:00:00.000 UDP 28.104.0.1:39701 -> 198.28.0.2:53 1 64 1 2025-11-20 15:04:49.469 00:00:00.000 UDP 28.104.0.1:52886 -> 198.28.0.2:53 1 64 1 2025-11-20 15:05:21.910 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 15:05:49.772 00:00:00.000 UDP 28.104.0.1:42437 -> 198.28.0.2:53 1 64 1 2025-11-20 15:05:49.772 00:00:00.000 UDP 28.104.0.1:34260 -> 198.28.0.2:53 1 64 1 2025-11-20 15:05:49.783 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34260 1 80 1 2025-11-20 15:05:49.783 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42437 1 109 1 2025-11-20 15:06:50.065 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54921 1 80 1 2025-11-20 15:06:50.065 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56509 1 109 1 2025-11-20 15:06:50.054 00:00:00.000 UDP 28.104.0.1:56509 -> 198.28.0.2:53 1 64 1 2025-11-20 15:06:50.054 00:00:00.000 UDP 28.104.0.1:54921 -> 198.28.0.2:53 1 64 1 2025-11-20 15:02:09.459 00:06:00.253 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-20 15:07:50.362 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47868 1 109 1 2025-11-20 15:07:50.362 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40766 1 80 1 2025-11-20 15:07:50.352 00:00:00.000 UDP 28.104.0.1:40766 -> 198.28.0.2:53 1 64 1 2025-11-20 15:07:50.351 00:00:00.000 UDP 28.104.0.1:47868 -> 198.28.0.2:53 1 64 1 2025-11-20 15:04:00.943 00:05:08.528 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 15:08:50.619 00:00:00.000 UDP 28.104.0.1:35022 -> 198.28.0.2:53 1 64 1 2025-11-20 15:08:50.618 00:00:00.000 UDP 28.104.0.1:48487 -> 198.28.0.2:53 1 64 1 2025-11-20 15:08:50.630 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35022 1 80 1 2025-11-20 15:08:50.629 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48487 1 109 1 2025-11-20 15:04:09.928 00:05:51.066 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 15:05:08.749 00:05:10.001 OSPF 28.0.2.1:0 -> 224.0.0.5:0 44 3256 1 2025-11-20 15:09:50.920 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35836 1 80 1 2025-11-20 15:09:50.920 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39470 1 109 1 2025-11-20 15:09:50.910 00:00:00.000 UDP 28.104.0.1:35836 -> 198.28.0.2:53 1 64 1 2025-11-20 15:09:50.910 00:00:00.000 UDP 28.104.0.1:39470 -> 198.28.0.2:53 1 64 1 2025-11-20 15:05:09.940 00:05:51.005 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 15:06:09.458 00:05:00.657 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-20 15:06:00.952 00:05:08.508 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 15:10:21.828 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 15:10:51.235 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56428 1 109 1 2025-11-20 15:10:51.235 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53802 1 80 1 2025-11-20 15:10:51.224 00:00:00.000 UDP 28.104.0.1:56428 -> 198.28.0.2:53 1 64 1 2025-11-20 15:10:51.224 00:00:00.000 UDP 28.104.0.1:53802 -> 198.28.0.2:53 1 64 1 2025-11-20 15:11:51.526 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38073 1 80 1 2025-11-20 15:11:51.526 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59532 1 109 1 2025-11-20 15:11:51.517 00:00:00.000 UDP 28.104.0.1:38073 -> 198.28.0.2:53 1 64 1 2025-11-20 15:11:51.517 00:00:00.000 UDP 28.104.0.1:59532 -> 198.28.0.2:53 1 64 1 2025-11-20 15:12:51.791 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54475 1 80 1 2025-11-20 15:12:51.791 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54745 1 109 1 2025-11-20 15:12:51.779 00:00:00.000 UDP 28.104.0.1:54745 -> 198.28.0.2:53 1 64 1 2025-11-20 15:12:51.780 00:00:00.000 UDP 28.104.0.1:54475 -> 198.28.0.2:53 1 64 1 2025-11-20 15:13:52.068 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33082 1 109 1 2025-11-20 15:13:52.068 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34570 1 80 1 2025-11-20 15:13:52.058 00:00:00.000 UDP 28.104.0.1:33082 -> 198.28.0.2:53 1 64 1 2025-11-20 15:13:52.058 00:00:00.000 UDP 28.104.0.1:34570 -> 198.28.0.2:53 1 64 1 2025-11-20 15:09:09.461 00:06:00.252 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-20 15:10:00.946 00:05:08.526 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 15:10:28.750 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2688 1 2025-11-20 15:14:52.351 00:00:00.000 UDP 28.104.0.1:53600 -> 198.28.0.2:53 1 64 1 2025-11-20 15:14:52.351 00:00:00.000 UDP 28.104.0.1:49584 -> 198.28.0.2:53 1 64 1 2025-11-20 15:14:52.361 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53600 1 80 1 2025-11-20 15:14:52.361 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49584 1 109 1 2025-11-20 15:10:09.930 00:05:51.068 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 15:15:22.015 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 15:15:52.679 00:00:00.000 UDP 28.104.0.1:40471 -> 198.28.0.2:53 1 64 1 2025-11-20 15:15:52.679 00:00:00.000 UDP 28.104.0.1:33401 -> 198.28.0.2:53 1 64 1 2025-11-20 15:15:52.689 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40471 1 80 1 2025-11-20 15:15:52.689 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33401 1 109 1 2025-11-20 15:11:09.941 00:05:51.009 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 15:12:09.461 00:05:00.657 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-20 15:12:00.955 00:05:08.507 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 15:16:52.999 00:00:00.000 UDP 28.104.0.1:52115 -> 198.28.0.2:53 1 64 1 2025-11-20 15:16:53.000 00:00:00.000 UDP 28.104.0.1:34667 -> 198.28.0.2:53 1 64 1 2025-11-20 15:16:53.009 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34667 1 109 1 2025-11-20 15:16:53.009 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52115 1 80 1 2025-11-20 15:17:53.277 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52221 1 109 1 2025-11-20 15:17:53.277 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38242 1 80 1 2025-11-20 15:17:53.266 00:00:00.000 UDP 28.104.0.1:38242 -> 198.28.0.2:53 1 64 1 2025-11-20 15:17:53.266 00:00:00.000 UDP 28.104.0.1:52221 -> 198.28.0.2:53 1 64 1 2025-11-20 15:18:53.570 00:00:00.000 UDP 28.104.0.1:45906 -> 198.28.0.2:53 1 64 1 2025-11-20 15:18:53.570 00:00:00.000 UDP 28.104.0.1:40940 -> 198.28.0.2:53 1 64 1 2025-11-20 15:18:53.580 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40940 1 80 1 2025-11-20 15:18:53.580 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45906 1 109 1 2025-11-20 15:15:48.755 00:05:00.997 OSPF 28.0.2.1:0 -> 224.0.0.5:0 33 2292 1 2025-11-20 15:19:53.871 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54635 1 80 1 2025-11-20 15:19:53.871 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49972 1 109 1 2025-11-20 15:19:53.862 00:00:00.000 UDP 28.104.0.1:49972 -> 198.28.0.2:53 1 64 1 2025-11-20 15:19:53.862 00:00:00.000 UDP 28.104.0.1:54635 -> 198.28.0.2:53 1 64 1 2025-11-20 15:16:00.947 00:05:08.524 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 15:20:22.060 00:00:00.052 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 15:20:54.188 00:00:00.000 UDP 28.104.0.1:39192 -> 198.28.0.2:53 1 64 1 2025-11-20 15:20:54.189 00:00:00.000 UDP 28.104.0.1:57984 -> 198.28.0.2:53 1 64 1 2025-11-20 15:20:54.198 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39192 1 80 1 2025-11-20 15:20:54.198 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57984 1 109 1 2025-11-20 15:16:09.933 00:05:51.085 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 15:16:09.461 00:06:00.253 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-20 15:21:54.445 00:00:00.000 UDP 28.104.0.1:55542 -> 198.28.0.2:53 1 64 1 2025-11-20 15:21:54.445 00:00:00.000 UDP 28.104.0.1:33110 -> 198.28.0.2:53 1 64 1 2025-11-20 15:21:54.456 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33110 1 80 1 2025-11-20 15:21:54.456 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55542 1 109 1 2025-11-20 15:17:09.942 00:05:51.012 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 15:18:09.461 00:05:00.659 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-20 15:18:00.963 00:05:08.499 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 15:22:54.706 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47117 1 109 1 2025-11-20 15:22:54.706 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39681 1 80 1 2025-11-20 15:22:54.696 00:00:00.000 UDP 28.104.0.1:39681 -> 198.28.0.2:53 1 64 1 2025-11-20 15:22:54.696 00:00:00.000 UDP 28.104.0.1:47117 -> 198.28.0.2:53 1 64 1 2025-11-20 15:23:54.969 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41483 1 80 1 2025-11-20 15:23:54.969 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56748 1 109 1 2025-11-20 15:23:54.959 00:00:00.000 UDP 28.104.0.1:41483 -> 198.28.0.2:53 1 64 1 2025-11-20 15:23:54.958 00:00:00.000 UDP 28.104.0.1:56748 -> 198.28.0.2:53 1 64 1 2025-11-20 15:24:55.264 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57892 1 80 1 2025-11-20 15:24:55.263 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44866 1 109 1 2025-11-20 15:24:55.253 00:00:00.000 UDP 28.104.0.1:44866 -> 198.28.0.2:53 1 64 1 2025-11-20 15:24:55.253 00:00:00.000 UDP 28.104.0.1:57892 -> 198.28.0.2:53 1 64 1 2025-11-20 15:20:58.761 00:05:10.018 OSPF 28.0.2.1:0 -> 224.0.0.5:0 33 2380 1 2025-11-20 15:25:22.145 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 15:25:55.545 00:00:00.000 UDP 28.104.0.1:54525 -> 198.28.0.2:53 1 64 1 2025-11-20 15:25:55.545 00:00:00.000 UDP 28.104.0.1:42295 -> 198.28.0.2:53 1 64 1 2025-11-20 15:25:55.555 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42295 1 80 1 2025-11-20 15:25:55.555 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54525 1 109 1 2025-11-20 15:22:00.955 00:05:08.521 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 15:26:55.838 00:00:00.000 UDP 28.104.0.1:32851 -> 198.28.0.2:53 1 64 1 2025-11-20 15:26:55.838 00:00:00.000 UDP 28.104.0.1:50867 -> 198.28.0.2:53 1 64 1 2025-11-20 15:26:55.848 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50867 1 80 1 2025-11-20 15:26:55.848 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32851 1 109 1 2025-11-20 15:22:09.934 00:05:51.072 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 15:27:56.098 00:00:00.000 UDP 28.104.0.1:54693 -> 198.28.0.2:53 1 64 1 2025-11-20 15:27:56.098 00:00:00.000 UDP 28.104.0.1:46925 -> 198.28.0.2:53 1 64 1 2025-11-20 15:27:56.109 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54693 1 109 1 2025-11-20 15:27:56.109 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46925 1 80 1 2025-11-20 15:23:09.946 00:05:51.010 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 15:24:09.463 00:05:00.658 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-20 15:24:00.964 00:05:08.500 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 15:23:09.462 00:06:00.252 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-20 15:28:56.400 00:00:00.000 UDP 28.104.0.1:39123 -> 198.28.0.2:53 1 64 1 2025-11-20 15:28:56.400 00:00:00.000 UDP 28.104.0.1:60628 -> 198.28.0.2:53 1 64 1 2025-11-20 15:28:56.411 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39123 1 109 1 2025-11-20 15:28:56.411 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60628 1 80 1 2025-11-20 15:29:56.700 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46817 1 80 1 2025-11-20 15:29:56.700 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37697 1 109 1 2025-11-20 15:29:56.690 00:00:00.000 UDP 28.104.0.1:46817 -> 198.28.0.2:53 1 64 1 2025-11-20 15:29:56.690 00:00:00.000 UDP 28.104.0.1:37697 -> 198.28.0.2:53 1 64 1 2025-11-20 15:30:22.128 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 15:26:18.780 00:05:10.010 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2548 1 2025-11-20 15:30:56.992 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42434 1 80 1 2025-11-20 15:30:56.992 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37694 1 109 1 2025-11-20 15:30:56.982 00:00:00.000 UDP 28.104.0.1:42434 -> 198.28.0.2:53 1 64 1 2025-11-20 15:30:56.982 00:00:00.000 UDP 28.104.0.1:37694 -> 198.28.0.2:53 1 64 1 2025-11-20 15:31:57.284 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43418 1 109 1 2025-11-20 15:31:57.284 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33418 1 80 1 2025-11-20 15:31:57.275 00:00:00.000 UDP 28.104.0.1:33418 -> 198.28.0.2:53 1 64 1 2025-11-20 15:31:57.276 00:00:00.000 UDP 28.104.0.1:43418 -> 198.28.0.2:53 1 64 1 2025-11-20 15:28:00.956 00:05:08.520 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 15:32:57.577 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47132 1 109 1 2025-11-20 15:32:57.577 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46615 1 80 1 2025-11-20 15:32:57.566 00:00:00.000 UDP 28.104.0.1:47132 -> 198.28.0.2:53 1 64 1 2025-11-20 15:28:09.940 00:05:51.067 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 15:32:57.565 00:00:00.000 UDP 28.104.0.1:46615 -> 198.28.0.2:53 1 64 1 2025-11-20 15:33:57.873 00:00:00.000 UDP 28.104.0.1:33179 -> 198.28.0.2:53 1 64 1 2025-11-20 15:33:57.874 00:00:00.000 UDP 28.104.0.1:40917 -> 198.28.0.2:53 1 64 1 2025-11-20 15:29:09.952 00:05:51.006 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 15:33:57.884 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40917 1 109 1 2025-11-20 15:33:57.883 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33179 1 80 1 2025-11-20 15:30:09.467 00:05:00.658 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-20 15:30:00.967 00:05:08.502 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 15:34:58.143 00:00:00.000 UDP 28.104.0.1:48074 -> 198.28.0.2:53 1 64 1 2025-11-20 15:34:58.143 00:00:00.000 UDP 28.104.0.1:58170 -> 198.28.0.2:53 1 64 1 2025-11-20 15:34:58.154 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48074 1 80 1 2025-11-20 15:34:58.154 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58170 1 109 1 2025-11-20 15:30:09.466 00:06:00.252 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-20 15:35:22.463 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 15:31:38.791 00:05:10.215 OSPF 28.0.2.1:0 -> 224.0.0.5:0 46 3428 1 2025-11-20 15:35:58.446 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37439 1 80 1 2025-11-20 15:35:58.447 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54990 1 109 1 2025-11-20 15:35:58.437 00:00:00.000 UDP 28.104.0.1:54990 -> 198.28.0.2:53 1 64 1 2025-11-20 15:35:58.436 00:00:00.000 UDP 28.104.0.1:37439 -> 198.28.0.2:53 1 64 1 2025-11-20 15:36:58.727 00:00:00.000 UDP 28.104.0.1:44307 -> 198.28.0.2:53 1 64 1 2025-11-20 15:36:58.726 00:00:00.000 UDP 28.104.0.1:36517 -> 198.28.0.2:53 1 64 1 2025-11-20 15:36:58.737 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44307 1 109 1 2025-11-20 15:36:58.737 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36517 1 80 1 2025-11-20 15:37:59.641 00:00:00.000 UDP 28.104.0.1:37676 -> 198.28.0.2:53 1 64 1 2025-11-20 15:37:59.641 00:00:00.000 UDP 28.104.0.1:51027 -> 198.28.0.2:53 1 64 1 2025-11-20 15:37:59.654 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37676 1 109 1 2025-11-20 15:37:59.652 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51027 1 80 1 2025-11-20 15:34:00.957 00:05:08.520 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 15:38:59.940 00:00:00.000 UDP 28.104.0.1:38937 -> 198.28.0.2:53 1 64 1 2025-11-20 15:38:59.940 00:00:00.000 UDP 28.104.0.1:57382 -> 198.28.0.2:53 1 64 1 2025-11-20 15:34:09.942 00:05:51.069 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 15:38:59.950 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38937 1 109 1 2025-11-20 15:38:59.950 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57382 1 80 1 2025-11-20 15:35:09.953 00:05:51.007 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 15:40:00.247 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43586 1 109 1 2025-11-20 15:40:00.248 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54087 1 80 1 2025-11-20 15:40:00.239 00:00:00.000 UDP 28.104.0.1:54087 -> 198.28.0.2:53 1 64 1 2025-11-20 15:40:00.239 00:00:00.000 UDP 28.104.0.1:43586 -> 198.28.0.2:53 1 64 1 2025-11-20 15:36:09.466 00:05:00.657 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-20 15:36:00.967 00:05:08.499 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 15:40:22.358 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 15:41:00.546 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59825 1 80 1 2025-11-20 15:41:00.546 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34352 1 109 1 2025-11-20 15:41:00.537 00:00:00.000 UDP 28.104.0.1:34352 -> 198.28.0.2:53 1 64 1 2025-11-20 15:41:00.537 00:00:00.000 UDP 28.104.0.1:59825 -> 198.28.0.2:53 1 64 1 2025-11-20 15:36:58.801 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2868 1 2025-11-20 15:42:00.827 00:00:00.000 UDP 28.104.0.1:32948 -> 198.28.0.2:53 1 64 1 2025-11-20 15:42:00.828 00:00:00.000 UDP 28.104.0.1:38607 -> 198.28.0.2:53 1 64 1 2025-11-20 15:42:00.836 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38607 1 80 1 2025-11-20 15:42:00.836 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32948 1 109 1 2025-11-20 15:37:09.466 00:06:00.251 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-20 15:43:01.120 00:00:00.000 UDP 28.104.0.1:60144 -> 198.28.0.2:53 1 64 1 2025-11-20 15:43:01.120 00:00:00.000 UDP 28.104.0.1:58081 -> 198.28.0.2:53 1 64 1 2025-11-20 15:43:01.130 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60144 1 109 1 2025-11-20 15:43:01.130 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58081 1 80 1 2025-11-20 15:44:01.409 00:00:00.000 UDP 28.104.0.1:48629 -> 198.28.0.2:53 1 64 1 2025-11-20 15:44:01.409 00:00:00.000 UDP 28.104.0.1:48005 -> 198.28.0.2:53 1 64 1 2025-11-20 15:44:01.420 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48629 1 80 1 2025-11-20 15:44:01.420 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48005 1 109 1 2025-11-20 15:40:00.959 00:05:08.518 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 15:45:01.676 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51749 1 109 1 2025-11-20 15:45:01.676 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49524 1 80 1 2025-11-20 15:40:09.942 00:05:51.071 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 15:45:01.665 00:00:00.000 UDP 28.104.0.1:51749 -> 198.28.0.2:53 1 64 1 2025-11-20 15:45:01.666 00:00:00.000 UDP 28.104.0.1:49524 -> 198.28.0.2:53 1 64 1 2025-11-20 15:45:22.620 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 15:46:01.970 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53999 1 109 1 2025-11-20 15:41:09.953 00:05:51.009 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 15:46:01.968 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41764 1 80 1 2025-11-20 15:46:01.960 00:00:00.000 UDP 28.104.0.1:53999 -> 198.28.0.2:53 1 64 1 2025-11-20 15:46:01.960 00:00:00.000 UDP 28.104.0.1:41764 -> 198.28.0.2:53 1 64 1 2025-11-20 15:42:09.469 00:05:00.657 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-20 15:42:00.972 00:05:08.497 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 15:42:18.812 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2584 1 2025-11-20 15:47:02.254 00:00:00.000 UDP 28.104.0.1:52586 -> 198.28.0.2:53 1 64 1 2025-11-20 15:47:02.254 00:00:00.000 UDP 28.104.0.1:42957 -> 198.28.0.2:53 1 64 1 2025-11-20 15:47:02.264 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42957 1 109 1 2025-11-20 15:47:02.264 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52586 1 80 1 2025-11-20 15:48:02.849 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55935 1 80 1 2025-11-20 15:48:02.849 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33353 1 109 1 2025-11-20 15:48:02.837 00:00:00.000 UDP 28.104.0.1:33353 -> 198.28.0.2:53 1 64 1 2025-11-20 15:48:02.837 00:00:00.000 UDP 28.104.0.1:55935 -> 198.28.0.2:53 1 64 1 2025-11-20 15:49:03.180 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44044 1 109 1 2025-11-20 15:49:03.180 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39509 1 80 1 2025-11-20 15:49:03.169 00:00:00.000 UDP 28.104.0.1:44044 -> 198.28.0.2:53 1 64 1 2025-11-20 15:49:03.169 00:00:00.000 UDP 28.104.0.1:39509 -> 198.28.0.2:53 1 64 1 2025-11-20 15:44:09.468 00:06:00.251 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-20 15:50:03.430 00:00:00.000 UDP 28.104.0.1:43192 -> 198.28.0.2:53 1 64 1 2025-11-20 15:50:03.430 00:00:00.000 UDP 28.104.0.1:41605 -> 198.28.0.2:53 1 64 1 2025-11-20 15:50:03.441 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43192 1 109 1 2025-11-20 15:50:03.442 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41605 1 80 1 2025-11-20 15:46:00.963 00:05:08.517 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 15:50:23.243 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 15:46:09.944 00:05:51.070 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 15:51:03.734 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54428 1 80 1 2025-11-20 15:51:03.734 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52807 1 109 1 2025-11-20 15:51:03.724 00:00:00.000 UDP 28.104.0.1:54428 -> 198.28.0.2:53 1 64 1 2025-11-20 15:51:03.724 00:00:00.000 UDP 28.104.0.1:52807 -> 198.28.0.2:53 1 64 1 2025-11-20 15:47:38.818 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 33 2240 1 2025-11-20 15:47:09.954 00:05:51.009 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 15:52:04.057 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60499 1 80 1 2025-11-20 15:52:04.057 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40830 1 109 1 2025-11-20 15:52:04.047 00:00:00.000 UDP 28.104.0.1:60499 -> 198.28.0.2:53 1 64 1 2025-11-20 15:52:04.047 00:00:00.000 UDP 28.104.0.1:40830 -> 198.28.0.2:53 1 64 1 2025-11-20 15:48:09.468 00:05:00.658 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-20 15:48:00.972 00:05:08.498 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-20 15:53:04.356 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48151 1 109 1 2025-11-20 15:53:04.356 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39597 1 80 1 2025-11-20 15:53:04.348 00:00:00.000 UDP 28.104.0.1:39597 -> 198.28.0.2:53 1 64 1 2025-11-20 15:53:04.348 00:00:00.000 UDP 28.104.0.1:48151 -> 198.28.0.2:53 1 64 1 2025-11-20 15:54:04.650 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36582 1 80 1 2025-11-20 15:54:04.650 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44900 1 109 1 2025-11-20 15:54:04.640 00:00:00.000 UDP 28.104.0.1:44900 -> 198.28.0.2:53 1 64 1 2025-11-20 15:54:04.640 00:00:00.000 UDP 28.104.0.1:36582 -> 198.28.0.2:53 1 64 1 2025-11-20 15:55:04.931 00:00:00.000 UDP 28.104.0.1:52840 -> 198.28.0.2:53 1 64 1 2025-11-20 15:55:04.931 00:00:00.000 UDP 28.104.0.1:59714 -> 198.28.0.2:53 1 64 1 2025-11-20 15:55:04.942 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59714 1 109 1 2025-11-20 15:55:04.942 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52840 1 80 1 2025-11-20 15:55:22.814 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-20 15:56:05.240 00:00:00.000 UDP 28.104.0.1:37530 -> 198.28.0.2:53 1 64 1 2025-11-20 15:56:05.240 00:00:00.000 UDP 28.104.0.1:35957 -> 198.28.0.2:53 1 64 1 2025-11-20 15:56:05.250 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37530 1 109 1 2025-11-20 15:56:05.250 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35957 1 80 1 2025-11-20 15:51:09.470 00:06:00.252 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-20 15:52:00.962 00:05:08.521 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-20 15:52:09.947 00:05:51.068 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-20 15:57:05.531 00:00:00.000 UDP 28.104.0.1:38029 -> 198.28.0.2:53 1 64 1 2025-11-20 15:57:05.531 00:00:00.000 UDP 28.104.0.1:38859 -> 198.28.0.2:53 1 64 1 2025-11-20 15:57:05.542 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38859 1 109 1 2025-11-20 15:57:05.541 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38029 1 80 1 2025-11-20 15:52:58.824 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2652 1 2025-11-20 15:58:05.827 00:00:00.000 UDP 28.104.0.1:42087 -> 198.28.0.2:53 1 64 1 2025-11-20 15:58:05.827 00:00:00.000 UDP 28.104.0.1:48489 -> 198.28.0.2:53 1 64 1 2025-11-20 15:53:09.957 00:05:51.007 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-20 15:58:05.837 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48489 1 109 1 2025-11-20 15:58:05.837 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42087 1 80 1 2025-11-20 15:54:09.471 00:05:00.657 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-20 15:54:00.974 00:05:08.500 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 Summary: total flows: 318, total bytes: 96232, total packets: 1419, avg bps: 200, avg pps: 0, avg bpp: 67 Time window: 2025-11-20 14:55:09 - 2025-11-20 15:59:10 Total flows processed: 318, passed: 318, Blocks skipped: 0, Bytes read: 33136 Sys: 0.0051s User: 0.0017s Wall: 0.0036s flows/second: 89378.1 Runtime: 0.0036s