Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-23 16:59:43.698 00:00:00.000 UDP 28.104.0.1:46820 -> 198.28.0.2:53 1 64 1 2025-11-23 16:59:43.698 00:00:00.000 UDP 28.104.0.1:58875 -> 198.28.0.2:53 1 64 1 2025-11-23 16:59:43.708 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58875 1 109 1 2025-11-23 16:59:43.708 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46820 1 80 1 2025-11-23 16:56:14.622 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 43 3000 1 2025-11-23 17:00:44.006 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34186 1 80 1 2025-11-23 17:00:44.006 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35797 1 109 1 2025-11-23 17:00:43.995 00:00:00.000 UDP 28.104.0.1:35797 -> 198.28.0.2:53 1 64 1 2025-11-23 17:00:43.995 00:00:00.000 UDP 28.104.0.1:34186 -> 198.28.0.2:53 1 64 1 2025-11-23 16:57:11.185 00:04:00.428 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-11-23 16:57:11.185 00:04:00.115 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-11-23 16:57:02.682 00:05:08.514 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-23 17:01:44.339 00:00:00.000 UDP 28.104.0.1:34384 -> 198.28.0.2:53 1 64 1 2025-11-23 17:01:44.338 00:00:00.000 UDP 28.104.0.1:36353 -> 198.28.0.2:53 1 64 1 2025-11-23 17:01:44.348 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36353 1 80 1 2025-11-23 17:01:44.348 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34384 1 109 1 2025-11-23 17:01:50.771 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-23 16:58:02.732 00:05:08.664 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-23 17:02:44.649 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44468 1 80 1 2025-11-23 17:02:44.649 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35676 1 109 1 2025-11-23 17:02:44.639 00:00:00.000 UDP 28.104.0.1:35676 -> 198.28.0.2:53 1 64 1 2025-11-23 17:02:44.639 00:00:00.000 UDP 28.104.0.1:44468 -> 198.28.0.2:53 1 64 1 2025-11-23 16:58:11.405 00:05:51.277 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-23 16:58:11.185 00:05:51.508 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-23 17:03:44.937 00:00:00.000 UDP 28.104.0.1:56200 -> 198.28.0.2:53 1 64 1 2025-11-23 17:03:44.937 00:00:00.000 UDP 28.104.0.1:42566 -> 198.28.0.2:53 1 64 1 2025-11-23 17:03:44.947 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42566 1 80 1 2025-11-23 17:03:44.947 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56200 1 109 1 2025-11-23 17:04:45.247 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60785 1 80 1 2025-11-23 17:04:45.247 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46776 1 109 1 2025-11-23 17:04:45.238 00:00:00.000 UDP 28.104.0.1:60785 -> 198.28.0.2:53 1 64 1 2025-11-23 17:04:45.238 00:00:00.000 UDP 28.104.0.1:46776 -> 198.28.0.2:53 1 64 1 2025-11-23 17:01:34.626 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2708 1 2025-11-23 17:05:45.675 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44122 1 80 1 2025-11-23 17:05:45.675 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38913 1 109 1 2025-11-23 17:05:45.666 00:00:00.000 UDP 28.104.0.1:38913 -> 198.28.0.2:53 1 64 1 2025-11-23 17:05:45.666 00:00:00.000 UDP 28.104.0.1:44122 -> 198.28.0.2:53 1 64 1 2025-11-23 17:02:11.186 00:04:00.428 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-11-23 17:02:11.186 00:04:00.116 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-11-23 17:06:45.935 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49767 1 109 1 2025-11-23 17:06:45.935 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53172 1 80 1 2025-11-23 17:06:45.925 00:00:00.000 UDP 28.104.0.1:53172 -> 198.28.0.2:53 1 64 1 2025-11-23 17:06:45.925 00:00:00.000 UDP 28.104.0.1:49767 -> 198.28.0.2:53 1 64 1 2025-11-23 17:06:50.831 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-23 17:03:02.682 00:05:08.514 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-23 17:07:46.256 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35574 1 80 1 2025-11-23 17:07:46.256 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53686 1 109 1 2025-11-23 17:07:46.245 00:00:00.000 UDP 28.104.0.1:35574 -> 198.28.0.2:53 1 64 1 2025-11-23 17:07:46.245 00:00:00.000 UDP 28.104.0.1:53686 -> 198.28.0.2:53 1 64 1 2025-11-23 17:04:02.732 00:05:08.667 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-23 17:07:11.186 00:01:00.116 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-23 17:08:46.540 00:00:00.000 UDP 28.104.0.1:57953 -> 198.28.0.2:53 1 64 1 2025-11-23 17:08:46.540 00:00:00.000 UDP 28.104.0.1:42709 -> 198.28.0.2:53 1 64 1 2025-11-23 17:08:46.549 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42709 1 80 1 2025-11-23 17:08:46.549 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57953 1 109 1 2025-11-23 17:04:11.185 00:05:51.508 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-23 17:04:11.407 00:05:51.277 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-23 17:09:46.839 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43031 1 109 1 2025-11-23 17:09:46.839 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43061 1 80 1 2025-11-23 17:09:46.828 00:00:00.000 UDP 28.104.0.1:43061 -> 198.28.0.2:53 1 64 1 2025-11-23 17:09:46.828 00:00:00.000 UDP 28.104.0.1:43031 -> 198.28.0.2:53 1 64 1 2025-11-23 17:10:47.126 00:00:00.000 UDP 28.104.0.1:55844 -> 198.28.0.2:53 1 64 1 2025-11-23 17:10:47.126 00:00:00.000 UDP 28.104.0.1:39683 -> 198.28.0.2:53 1 64 1 2025-11-23 17:10:47.137 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55844 1 80 1 2025-11-23 17:10:47.137 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39683 1 109 1 2025-11-23 17:06:54.635 00:05:10.009 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2424 1 2025-11-23 17:11:51.157 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-23 17:11:47.434 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53901 1 109 1 2025-11-23 17:11:47.434 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59310 1 80 1 2025-11-23 17:11:47.424 00:00:00.000 UDP 28.104.0.1:53901 -> 198.28.0.2:53 1 64 1 2025-11-23 17:11:47.424 00:00:00.000 UDP 28.104.0.1:59310 -> 198.28.0.2:53 1 64 1 2025-11-23 17:07:11.187 00:06:00.429 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-23 17:12:47.717 00:00:00.000 UDP 28.104.0.1:37567 -> 198.28.0.2:53 1 64 1 2025-11-23 17:12:47.717 00:00:00.000 UDP 28.104.0.1:58001 -> 198.28.0.2:53 1 64 1 2025-11-23 17:12:47.727 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58001 1 80 1 2025-11-23 17:12:47.727 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37567 1 109 1 2025-11-23 17:09:11.186 00:04:00.117 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-11-23 17:09:02.683 00:05:08.516 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-23 17:13:47.966 00:00:00.000 UDP 28.104.0.1:39432 -> 198.28.0.2:53 1 64 1 2025-11-23 17:13:47.966 00:00:00.000 UDP 28.104.0.1:40239 -> 198.28.0.2:53 1 64 1 2025-11-23 17:13:47.976 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39432 1 109 1 2025-11-23 17:13:47.976 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40239 1 80 1 2025-11-23 17:10:02.733 00:05:08.667 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-23 17:14:48.260 00:00:00.000 UDP 28.104.0.1:59605 -> 198.28.0.2:53 1 64 1 2025-11-23 17:14:48.260 00:00:00.000 UDP 28.104.0.1:59831 -> 198.28.0.2:53 1 64 1 2025-11-23 17:14:48.270 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59605 1 109 1 2025-11-23 17:14:48.269 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59831 1 80 1 2025-11-23 17:10:11.409 00:05:51.277 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-23 17:10:11.186 00:05:51.509 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-23 17:15:48.535 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34398 1 109 1 2025-11-23 17:15:48.535 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38553 1 80 1 2025-11-23 17:15:48.526 00:00:00.000 UDP 28.104.0.1:38553 -> 198.28.0.2:53 1 64 1 2025-11-23 17:15:48.525 00:00:00.000 UDP 28.104.0.1:34398 -> 198.28.0.2:53 1 64 1 2025-11-23 17:12:14.643 00:05:10.014 OSPF 28.0.2.1:0 -> 224.0.0.5:0 33 2380 1 2025-11-23 17:16:50.872 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-23 17:16:50.915 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60358 1 109 1 2025-11-23 17:16:50.915 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41265 1 80 1 2025-11-23 17:16:50.905 00:00:00.000 UDP 28.104.0.1:60358 -> 198.28.0.2:53 1 64 1 2025-11-23 17:16:50.905 00:00:00.000 UDP 28.104.0.1:41265 -> 198.28.0.2:53 1 64 1 2025-11-23 17:17:51.207 00:00:00.000 UDP 28.104.0.1:42784 -> 198.28.0.2:53 1 64 1 2025-11-23 17:17:51.207 00:00:00.000 UDP 28.104.0.1:46640 -> 198.28.0.2:53 1 64 1 2025-11-23 17:17:51.218 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46640 1 80 1 2025-11-23 17:17:51.218 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42784 1 109 1 2025-11-23 17:14:11.189 00:04:00.429 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-11-23 17:14:11.189 00:04:00.114 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-11-23 17:18:51.508 00:00:00.000 UDP 28.104.0.1:34965 -> 198.28.0.2:53 1 64 1 2025-11-23 17:18:51.508 00:00:00.000 UDP 28.104.0.1:51071 -> 198.28.0.2:53 1 64 1 2025-11-23 17:18:51.518 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51071 1 109 1 2025-11-23 17:18:51.518 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34965 1 80 1 2025-11-23 17:15:02.685 00:05:08.517 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-23 17:19:51.811 00:00:00.000 UDP 28.104.0.1:46108 -> 198.28.0.2:53 1 64 1 2025-11-23 17:19:51.811 00:00:00.000 UDP 28.104.0.1:58240 -> 198.28.0.2:53 1 64 1 2025-11-23 17:19:51.822 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58240 1 109 1 2025-11-23 17:19:51.822 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46108 1 80 1 2025-11-23 17:16:02.736 00:05:08.666 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-23 17:20:52.106 00:00:00.000 UDP 28.104.0.1:59348 -> 198.28.0.2:53 1 64 1 2025-11-23 17:20:52.106 00:00:00.000 UDP 28.104.0.1:58746 -> 198.28.0.2:53 1 64 1 2025-11-23 17:20:52.115 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58746 1 80 1 2025-11-23 17:20:52.115 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59348 1 109 1 2025-11-23 17:16:11.188 00:05:51.509 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-23 17:16:11.412 00:05:51.276 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-23 17:17:34.659 00:05:10.217 OSPF 28.0.2.1:0 -> 224.0.0.5:0 44 3140 1 2025-11-23 17:21:51.078 00:00:00.041 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-23 17:21:52.400 00:00:00.000 UDP 28.104.0.1:36544 -> 198.28.0.2:53 1 64 1 2025-11-23 17:21:52.399 00:00:00.000 UDP 28.104.0.1:36358 -> 198.28.0.2:53 1 64 1 2025-11-23 17:21:52.409 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36358 1 109 1 2025-11-23 17:21:52.409 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36544 1 80 1 2025-11-23 17:22:52.710 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49029 1 109 1 2025-11-23 17:22:52.710 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33906 1 80 1 2025-11-23 17:22:52.700 00:00:00.000 UDP 28.104.0.1:33906 -> 198.28.0.2:53 1 64 1 2025-11-23 17:22:52.700 00:00:00.000 UDP 28.104.0.1:49029 -> 198.28.0.2:53 1 64 1 2025-11-23 17:19:11.191 00:04:00.428 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-11-23 17:19:11.191 00:04:00.113 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-11-23 17:23:53.007 00:00:00.000 UDP 28.104.0.1:43007 -> 198.28.0.2:53 1 64 1 2025-11-23 17:23:53.007 00:00:00.000 UDP 28.104.0.1:35477 -> 198.28.0.2:53 1 64 1 2025-11-23 17:23:53.018 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43007 1 109 1 2025-11-23 17:23:53.021 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35477 1 80 1 2025-11-23 17:24:53.319 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33932 1 109 1 2025-11-23 17:24:53.319 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53455 1 80 1 2025-11-23 17:24:53.308 00:00:00.000 UDP 28.104.0.1:53455 -> 198.28.0.2:53 1 64 1 2025-11-23 17:24:53.308 00:00:00.000 UDP 28.104.0.1:33932 -> 198.28.0.2:53 1 64 1 2025-11-23 17:21:02.687 00:05:08.516 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-23 17:25:53.572 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44875 1 109 1 2025-11-23 17:25:53.571 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34172 1 80 1 2025-11-23 17:25:53.560 00:00:00.000 UDP 28.104.0.1:34172 -> 198.28.0.2:53 1 64 1 2025-11-23 17:25:53.561 00:00:00.000 UDP 28.104.0.1:44875 -> 198.28.0.2:53 1 64 1 2025-11-23 17:22:02.738 00:05:08.665 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-23 17:26:51.422 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-23 17:26:53.867 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49909 1 80 1 2025-11-23 17:26:53.868 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45704 1 109 1 2025-11-23 17:26:53.858 00:00:00.000 UDP 28.104.0.1:45704 -> 198.28.0.2:53 1 64 1 2025-11-23 17:26:53.858 00:00:00.000 UDP 28.104.0.1:49909 -> 198.28.0.2:53 1 64 1 2025-11-23 17:22:11.412 00:05:51.276 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-23 17:22:54.671 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 45 3240 1 2025-11-23 17:22:11.191 00:05:51.508 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-23 17:27:54.143 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55292 1 109 1 2025-11-23 17:27:54.144 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56894 1 80 1 2025-11-23 17:27:54.133 00:00:00.000 UDP 28.104.0.1:55292 -> 198.28.0.2:53 1 64 1 2025-11-23 17:27:54.133 00:00:00.000 UDP 28.104.0.1:56894 -> 198.28.0.2:53 1 64 1 2025-11-23 17:24:11.192 00:04:00.428 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-11-23 17:24:11.192 00:04:00.115 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-11-23 17:28:54.385 00:00:00.000 UDP 28.104.0.1:41949 -> 198.28.0.2:53 1 64 1 2025-11-23 17:28:54.385 00:00:00.000 UDP 28.104.0.1:55043 -> 198.28.0.2:53 1 64 1 2025-11-23 17:28:54.396 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55043 1 80 1 2025-11-23 17:28:54.396 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41949 1 109 1 2025-11-23 17:29:54.680 00:00:00.000 UDP 28.104.0.1:32902 -> 198.28.0.2:53 1 64 1 2025-11-23 17:29:54.680 00:00:00.000 UDP 28.104.0.1:59884 -> 198.28.0.2:53 1 64 1 2025-11-23 17:29:54.691 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59884 1 109 1 2025-11-23 17:29:54.691 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32902 1 80 1 2025-11-23 17:30:54.937 00:00:00.000 UDP 28.104.0.1:39151 -> 198.28.0.2:53 1 64 1 2025-11-23 17:30:54.937 00:00:00.000 UDP 28.104.0.1:59617 -> 198.28.0.2:53 1 64 1 2025-11-23 17:30:54.948 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59617 1 109 1 2025-11-23 17:30:54.948 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39151 1 80 1 2025-11-23 17:27:02.688 00:05:08.517 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-23 17:31:51.532 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-23 17:31:55.245 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41490 1 80 1 2025-11-23 17:31:55.246 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55482 1 109 1 2025-11-23 17:31:55.235 00:00:00.000 UDP 28.104.0.1:55482 -> 198.28.0.2:53 1 64 1 2025-11-23 17:31:55.235 00:00:00.000 UDP 28.104.0.1:41490 -> 198.28.0.2:53 1 64 1 2025-11-23 17:28:02.739 00:05:08.667 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-23 17:28:14.677 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2788 1 2025-11-23 17:32:55.543 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39011 1 80 1 2025-11-23 17:32:55.543 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39537 1 109 1 2025-11-23 17:32:55.533 00:00:00.000 UDP 28.104.0.1:39537 -> 198.28.0.2:53 1 64 1 2025-11-23 17:32:55.533 00:00:00.000 UDP 28.104.0.1:39011 -> 198.28.0.2:53 1 64 1 2025-11-23 17:28:11.194 00:05:51.505 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-23 17:28:11.415 00:05:51.274 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-23 17:29:11.195 00:04:00.428 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-11-23 17:29:11.195 00:04:00.113 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-11-23 17:33:55.834 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42907 1 80 1 2025-11-23 17:33:55.834 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48620 1 109 1 2025-11-23 17:33:55.823 00:00:00.000 UDP 28.104.0.1:42907 -> 198.28.0.2:53 1 64 1 2025-11-23 17:33:55.823 00:00:00.000 UDP 28.104.0.1:48620 -> 198.28.0.2:53 1 64 1 2025-11-23 17:34:56.128 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52376 1 80 1 2025-11-23 17:34:56.128 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34567 1 109 1 2025-11-23 17:34:56.119 00:00:00.000 UDP 28.104.0.1:52376 -> 198.28.0.2:53 1 64 1 2025-11-23 17:34:56.118 00:00:00.000 UDP 28.104.0.1:34567 -> 198.28.0.2:53 1 64 1 2025-11-23 17:35:56.407 00:00:00.000 UDP 28.104.0.1:48389 -> 198.28.0.2:53 1 64 1 2025-11-23 17:35:56.407 00:00:00.000 UDP 28.104.0.1:42111 -> 198.28.0.2:53 1 64 1 2025-11-23 17:35:56.417 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42111 1 80 1 2025-11-23 17:35:56.417 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48389 1 109 1 2025-11-23 17:36:51.478 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-23 17:36:56.711 00:00:00.000 UDP 28.104.0.1:57227 -> 198.28.0.2:53 1 64 1 2025-11-23 17:36:56.711 00:00:00.000 UDP 28.104.0.1:50815 -> 198.28.0.2:53 1 64 1 2025-11-23 17:36:56.721 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50815 1 109 1 2025-11-23 17:36:56.721 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57227 1 80 1 2025-11-23 17:33:02.689 00:05:08.517 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-23 17:33:34.681 00:05:10.010 OSPF 28.0.2.1:0 -> 224.0.0.5:0 34 2360 1 2025-11-23 17:37:57.040 00:00:00.000 UDP 28.104.0.1:57733 -> 198.28.0.2:53 1 64 1 2025-11-23 17:37:57.040 00:00:00.000 UDP 28.104.0.1:37110 -> 198.28.0.2:53 1 64 1 2025-11-23 17:37:57.052 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57733 1 80 1 2025-11-23 17:37:57.052 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37110 1 109 1 2025-11-23 17:34:11.195 00:04:00.430 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-11-23 17:34:11.195 00:04:00.113 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-11-23 17:34:02.740 00:05:08.668 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-23 17:38:57.346 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42705 1 109 1 2025-11-23 17:38:57.346 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55713 1 80 1 2025-11-23 17:38:57.335 00:00:00.000 UDP 28.104.0.1:42705 -> 198.28.0.2:53 1 64 1 2025-11-23 17:38:57.336 00:00:00.000 UDP 28.104.0.1:55713 -> 198.28.0.2:53 1 64 1 2025-11-23 17:34:11.414 00:05:51.277 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-23 17:34:11.195 00:05:51.506 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-23 17:39:57.644 00:00:00.000 UDP 28.104.0.1:56987 -> 198.28.0.2:53 1 64 1 2025-11-23 17:39:57.644 00:00:00.000 UDP 28.104.0.1:42749 -> 198.28.0.2:53 1 64 1 2025-11-23 17:39:57.654 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56987 1 109 1 2025-11-23 17:39:57.654 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42749 1 80 1 2025-11-23 17:39:11.198 00:01:00.428 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-23 17:39:11.198 00:01:00.112 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-23 17:40:57.900 00:00:00.000 UDP 28.104.0.1:50887 -> 198.28.0.2:53 1 64 1 2025-11-23 17:40:57.900 00:00:00.000 UDP 28.104.0.1:54013 -> 198.28.0.2:53 1 64 1 2025-11-23 17:40:57.912 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50887 1 80 1 2025-11-23 17:40:57.912 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54013 1 109 1 2025-11-23 17:41:51.657 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-23 17:41:58.163 00:00:00.000 UDP 28.104.0.1:45219 -> 198.28.0.2:53 1 64 1 2025-11-23 17:41:58.163 00:00:00.000 UDP 28.104.0.1:46456 -> 198.28.0.2:53 1 64 1 2025-11-23 17:41:58.174 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46456 1 109 1 2025-11-23 17:41:58.173 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45219 1 80 1 2025-11-23 17:42:58.460 00:00:00.000 UDP 28.104.0.1:38668 -> 198.28.0.2:53 1 64 1 2025-11-23 17:42:58.460 00:00:00.000 UDP 28.104.0.1:33831 -> 198.28.0.2:53 1 64 1 2025-11-23 17:42:58.470 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33831 1 80 1 2025-11-23 17:42:58.471 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38668 1 109 1 2025-11-23 17:38:54.690 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 32 2176 1 2025-11-23 17:39:02.690 00:05:08.520 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-23 17:43:58.749 00:00:00.000 UDP 28.104.0.1:60866 -> 198.28.0.2:53 1 64 1 2025-11-23 17:43:58.749 00:00:00.000 UDP 28.104.0.1:43422 -> 198.28.0.2:53 1 64 1 2025-11-23 17:43:58.759 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43422 1 109 1 2025-11-23 17:43:58.759 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60866 1 80 1 2025-11-23 17:40:02.741 00:05:08.666 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-23 17:44:59.058 00:00:00.000 UDP 28.104.0.1:45281 -> 198.28.0.2:53 1 64 1 2025-11-23 17:44:59.058 00:00:00.000 UDP 28.104.0.1:57515 -> 198.28.0.2:53 1 64 1 2025-11-23 17:40:11.198 00:05:51.503 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-23 17:44:59.068 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45281 1 80 1 2025-11-23 17:44:59.069 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57515 1 109 1 2025-11-23 17:40:11.417 00:05:51.275 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-23 17:41:11.200 00:04:00.427 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-11-23 17:41:11.200 00:04:00.111 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-11-23 17:45:59.368 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40228 1 80 1 2025-11-23 17:45:59.368 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52497 1 109 1 2025-11-23 17:45:59.356 00:00:00.000 UDP 28.104.0.1:40228 -> 198.28.0.2:53 1 64 1 2025-11-23 17:45:59.356 00:00:00.000 UDP 28.104.0.1:52497 -> 198.28.0.2:53 1 64 1 2025-11-23 17:46:51.555 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-23 17:46:59.659 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52416 1 80 1 2025-11-23 17:46:59.659 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60591 1 109 1 2025-11-23 17:46:59.648 00:00:00.000 UDP 28.104.0.1:52416 -> 198.28.0.2:53 1 64 1 2025-11-23 17:46:59.649 00:00:00.000 UDP 28.104.0.1:60591 -> 198.28.0.2:53 1 64 1 2025-11-23 17:47:59.942 00:00:00.000 UDP 28.104.0.1:48548 -> 198.28.0.2:53 1 64 1 2025-11-23 17:47:59.942 00:00:00.000 UDP 28.104.0.1:48046 -> 198.28.0.2:53 1 64 1 2025-11-23 17:47:59.952 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48548 1 109 1 2025-11-23 17:47:59.952 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48046 1 80 1 2025-11-23 17:44:14.694 00:05:10.009 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2816 1 2025-11-23 17:49:00.242 00:00:00.000 UDP 28.104.0.1:52820 -> 198.28.0.2:53 1 64 1 2025-11-23 17:49:00.242 00:00:00.000 UDP 28.104.0.1:41634 -> 198.28.0.2:53 1 64 1 2025-11-23 17:49:00.253 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41634 1 80 1 2025-11-23 17:49:00.253 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52820 1 109 1 2025-11-23 17:45:02.690 00:05:08.523 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-23 17:50:00.542 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43263 1 80 1 2025-11-23 17:50:00.542 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47250 1 109 1 2025-11-23 17:50:00.533 00:00:00.000 UDP 28.104.0.1:43263 -> 198.28.0.2:53 1 64 1 2025-11-23 17:50:00.533 00:00:00.000 UDP 28.104.0.1:47250 -> 198.28.0.2:53 1 64 1 2025-11-23 17:46:11.202 00:04:00.425 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-11-23 17:46:11.202 00:04:00.110 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-11-23 17:46:02.741 00:05:08.667 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-23 17:51:01.631 00:00:00.000 UDP 28.104.0.1:51445 -> 198.28.0.2:53 1 64 1 2025-11-23 17:51:01.631 00:00:00.000 UDP 28.104.0.1:43701 -> 198.28.0.2:53 1 64 1 2025-11-23 17:51:01.641 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51445 1 109 1 2025-11-23 17:51:01.641 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43701 1 80 1 2025-11-23 17:46:11.418 00:05:51.278 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-23 17:46:11.203 00:05:51.504 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-23 17:51:51.747 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-23 17:52:01.920 00:00:00.000 UDP 28.104.0.1:33199 -> 198.28.0.2:53 1 64 1 2025-11-23 17:52:01.920 00:00:00.000 UDP 28.104.0.1:41534 -> 198.28.0.2:53 1 64 1 2025-11-23 17:52:01.931 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41534 1 109 1 2025-11-23 17:52:01.931 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33199 1 80 1 2025-11-23 17:53:02.243 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38463 1 80 1 2025-11-23 17:53:02.243 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41342 1 109 1 2025-11-23 17:53:02.232 00:00:00.000 UDP 28.104.0.1:41342 -> 198.28.0.2:53 1 64 1 2025-11-23 17:53:02.232 00:00:00.000 UDP 28.104.0.1:38463 -> 198.28.0.2:53 1 64 1 2025-11-23 17:49:34.704 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 44 3100 1 2025-11-23 17:54:02.527 00:00:00.000 UDP 28.104.0.1:34757 -> 198.28.0.2:53 1 64 1 2025-11-23 17:54:02.527 00:00:00.000 UDP 28.104.0.1:35716 -> 198.28.0.2:53 1 64 1 2025-11-23 17:54:02.538 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35716 1 80 1 2025-11-23 17:54:02.538 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34757 1 109 1 2025-11-23 17:55:02.829 00:00:00.000 UDP 28.104.0.1:55482 -> 198.28.0.2:53 1 64 1 2025-11-23 17:55:02.830 00:00:00.000 UDP 28.104.0.1:58243 -> 198.28.0.2:53 1 64 1 2025-11-23 17:51:11.205 00:04:00.424 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-11-23 17:51:11.205 00:04:00.109 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-11-23 17:55:02.839 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58243 1 80 1 2025-11-23 17:55:02.839 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55482 1 109 1 2025-11-23 17:51:02.695 00:05:08.520 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-23 17:56:03.138 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45335 1 109 1 2025-11-23 17:56:03.138 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39505 1 80 1 2025-11-23 17:56:03.127 00:00:00.000 UDP 28.104.0.1:39505 -> 198.28.0.2:53 1 64 1 2025-11-23 17:56:03.126 00:00:00.000 UDP 28.104.0.1:45335 -> 198.28.0.2:53 1 64 1 2025-11-23 17:52:02.745 00:05:08.664 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-23 17:56:51.829 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-23 17:57:03.416 00:00:00.000 UDP 28.104.0.1:55369 -> 198.28.0.2:53 1 64 1 2025-11-23 17:57:03.416 00:00:00.000 UDP 28.104.0.1:49272 -> 198.28.0.2:53 1 64 1 2025-11-23 17:52:11.204 00:05:51.504 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-23 17:52:11.419 00:05:51.280 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-23 17:57:03.426 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49272 1 80 1 2025-11-23 17:57:03.428 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55369 1 109 1 2025-11-23 17:58:03.669 00:00:00.000 UDP 28.104.0.1:60980 -> 198.28.0.2:53 1 64 1 2025-11-23 17:58:03.669 00:00:00.000 UDP 28.104.0.1:36621 -> 198.28.0.2:53 1 64 1 2025-11-23 17:58:03.680 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60980 1 80 1 2025-11-23 17:58:03.680 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36621 1 109 1 Summary: total flows: 324, total bytes: 95893, total packets: 1413, avg bps: 206, avg pps: 0, avg bpp: 67 Time window: 2025-11-23 16:56:14 - 2025-11-23 17:58:03 Total flows processed: 324, passed: 324, Blocks skipped: 0, Bytes read: 33760 Sys: 0.0044s User: 0.0022s Wall: 0.0041s flows/second: 79606.0 Runtime: 0.0041s