Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-23 18:55:11.228 00:04:00.416 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-11-23 18:55:11.228 00:04:00.106 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-11-23 18:59:23.139 00:00:00.000 UDP 28.104.0.1:34522 -> 198.28.0.2:53 1 64 1 2025-11-23 18:59:23.139 00:00:00.000 UDP 28.104.0.1:47712 -> 198.28.0.2:53 1 64 1 2025-11-23 18:59:23.151 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47712 1 109 1 2025-11-23 18:59:23.151 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34522 1 80 1 2025-11-23 19:00:23.446 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49548 1 80 1 2025-11-23 19:00:23.446 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34038 1 109 1 2025-11-23 19:00:23.437 00:00:00.000 UDP 28.104.0.1:34038 -> 198.28.0.2:53 1 64 1 2025-11-23 19:00:23.437 00:00:00.000 UDP 28.104.0.1:49548 -> 198.28.0.2:53 1 64 1 2025-11-23 18:57:02.717 00:05:08.523 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-23 19:01:23.744 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50724 1 109 1 2025-11-23 19:01:23.744 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53084 1 80 1 2025-11-23 19:01:23.732 00:00:00.000 UDP 28.104.0.1:53084 -> 198.28.0.2:53 1 64 1 2025-11-23 19:01:23.732 00:00:00.000 UDP 28.104.0.1:50724 -> 198.28.0.2:53 1 64 1 2025-11-23 19:01:53.187 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-23 18:58:02.767 00:05:08.673 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-23 19:02:24.050 00:00:00.000 UDP 28.104.0.1:35607 -> 198.28.0.2:53 1 64 1 2025-11-23 19:02:24.051 00:00:00.000 UDP 28.104.0.1:39816 -> 198.28.0.2:53 1 64 1 2025-11-23 19:02:24.062 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35607 1 80 1 2025-11-23 19:02:24.063 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39816 1 109 1 2025-11-23 18:58:11.229 00:05:51.502 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-23 18:58:11.450 00:05:51.271 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-23 18:58:54.816 00:05:10.009 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2568 1 2025-11-23 19:03:24.354 00:00:00.000 UDP 28.104.0.1:38876 -> 198.28.0.2:53 1 64 1 2025-11-23 19:03:24.354 00:00:00.000 UDP 28.104.0.1:35763 -> 198.28.0.2:53 1 64 1 2025-11-23 19:03:24.363 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38876 1 80 1 2025-11-23 19:03:24.363 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35763 1 109 1 2025-11-23 19:00:11.230 00:04:00.415 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-11-23 19:00:11.230 00:04:00.105 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-11-23 19:04:24.661 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59920 1 80 1 2025-11-23 19:04:24.661 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54990 1 109 1 2025-11-23 19:04:24.651 00:00:00.000 UDP 28.104.0.1:54990 -> 198.28.0.2:53 1 64 1 2025-11-23 19:04:24.651 00:00:00.000 UDP 28.104.0.1:59920 -> 198.28.0.2:53 1 64 1 2025-11-23 19:05:24.949 00:00:00.000 UDP 28.104.0.1:57169 -> 198.28.0.2:53 1 64 1 2025-11-23 19:05:24.949 00:00:00.000 UDP 28.104.0.1:35639 -> 198.28.0.2:53 1 64 1 2025-11-23 19:05:24.960 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57169 1 80 1 2025-11-23 19:05:24.960 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35639 1 109 1 2025-11-23 19:06:25.251 00:00:00.000 UDP 28.104.0.1:59672 -> 198.28.0.2:53 1 64 1 2025-11-23 19:06:25.251 00:00:00.000 UDP 28.104.0.1:56732 -> 198.28.0.2:53 1 64 1 2025-11-23 19:06:25.262 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56732 1 80 1 2025-11-23 19:06:25.262 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59672 1 109 1 2025-11-23 19:06:53.450 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-23 19:03:02.721 00:05:08.521 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-23 19:07:25.549 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48310 1 80 1 2025-11-23 19:07:25.550 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52549 1 109 1 2025-11-23 19:07:25.541 00:00:00.000 UDP 28.104.0.1:48310 -> 198.28.0.2:53 1 64 1 2025-11-23 19:07:25.541 00:00:00.000 UDP 28.104.0.1:52549 -> 198.28.0.2:53 1 64 1 2025-11-23 19:04:02.771 00:05:08.672 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-23 19:08:25.830 00:00:00.000 UDP 28.104.0.1:35160 -> 198.28.0.2:53 1 64 1 2025-11-23 19:08:25.829 00:00:00.000 UDP 28.104.0.1:45274 -> 198.28.0.2:53 1 64 1 2025-11-23 19:04:14.825 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 32 2176 1 2025-11-23 19:08:25.839 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35160 1 109 1 2025-11-23 19:08:25.839 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45274 1 80 1 2025-11-23 19:04:11.230 00:05:51.504 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-23 19:04:11.451 00:05:51.273 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-23 19:05:11.230 00:04:00.415 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-11-23 19:05:11.230 00:04:00.105 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-11-23 19:09:26.146 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57396 1 80 1 2025-11-23 19:09:26.146 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35092 1 109 1 2025-11-23 19:09:26.136 00:00:00.000 UDP 28.104.0.1:57396 -> 198.28.0.2:53 1 64 1 2025-11-23 19:09:26.136 00:00:00.000 UDP 28.104.0.1:35092 -> 198.28.0.2:53 1 64 1 2025-11-23 19:10:26.445 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55247 1 80 1 2025-11-23 19:10:26.445 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54050 1 109 1 2025-11-23 19:10:26.434 00:00:00.000 UDP 28.104.0.1:54050 -> 198.28.0.2:53 1 64 1 2025-11-23 19:10:26.434 00:00:00.000 UDP 28.104.0.1:55247 -> 198.28.0.2:53 1 64 1 2025-11-23 19:11:26.735 00:00:00.000 UDP 28.104.0.1:58474 -> 198.28.0.2:53 1 64 1 2025-11-23 19:11:26.734 00:00:00.000 UDP 28.104.0.1:37201 -> 198.28.0.2:53 1 64 1 2025-11-23 19:11:26.745 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58474 1 80 1 2025-11-23 19:11:26.745 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37201 1 109 1 2025-11-23 19:11:53.368 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-23 19:12:27.061 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49328 1 80 1 2025-11-23 19:12:27.061 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52036 1 109 1 2025-11-23 19:12:27.052 00:00:00.000 UDP 28.104.0.1:52036 -> 198.28.0.2:53 1 64 1 2025-11-23 19:12:27.051 00:00:00.000 UDP 28.104.0.1:49328 -> 198.28.0.2:53 1 64 1 2025-11-23 19:09:02.723 00:05:08.520 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-23 19:13:27.343 00:00:00.000 UDP 28.104.0.1:50108 -> 198.28.0.2:53 1 64 1 2025-11-23 19:13:27.343 00:00:00.000 UDP 28.104.0.1:59820 -> 198.28.0.2:53 1 64 1 2025-11-23 19:13:27.354 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50108 1 80 1 2025-11-23 19:13:27.354 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59820 1 109 1 2025-11-23 19:09:34.833 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2652 1 2025-11-23 19:10:11.233 00:04:00.414 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-11-23 19:10:11.233 00:04:00.103 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-11-23 19:10:02.774 00:05:08.672 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-23 19:14:27.607 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44190 1 80 1 2025-11-23 19:14:27.607 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34637 1 109 1 2025-11-23 19:14:27.597 00:00:00.000 UDP 28.104.0.1:34637 -> 198.28.0.2:53 1 64 1 2025-11-23 19:14:27.597 00:00:00.000 UDP 28.104.0.1:44190 -> 198.28.0.2:53 1 64 1 2025-11-23 19:10:11.232 00:05:51.502 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-23 19:10:11.453 00:05:51.271 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-23 19:15:27.896 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54110 1 80 1 2025-11-23 19:15:27.896 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44571 1 109 1 2025-11-23 19:15:27.887 00:00:00.000 UDP 28.104.0.1:54110 -> 198.28.0.2:53 1 64 1 2025-11-23 19:15:27.887 00:00:00.000 UDP 28.104.0.1:44571 -> 198.28.0.2:53 1 64 1 2025-11-23 19:16:28.194 00:00:00.000 UDP 28.104.0.1:52699 -> 198.28.0.2:53 1 64 1 2025-11-23 19:16:28.194 00:00:00.000 UDP 28.104.0.1:38816 -> 198.28.0.2:53 1 64 1 2025-11-23 19:16:28.205 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38816 1 109 1 2025-11-23 19:16:28.205 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52699 1 80 1 2025-11-23 19:16:53.881 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-23 19:17:33.391 00:00:00.000 UDP 28.104.0.1:36842 -> 198.28.0.2:53 1 64 1 2025-11-23 19:17:33.392 00:00:00.000 UDP 28.104.0.1:37518 -> 198.28.0.2:53 1 64 1 2025-11-23 19:17:33.401 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36842 1 80 1 2025-11-23 19:17:33.402 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37518 1 109 1 2025-11-23 19:18:33.698 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57958 1 80 1 2025-11-23 19:18:33.698 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40904 1 109 1 2025-11-23 19:18:33.688 00:00:00.000 UDP 28.104.0.1:57958 -> 198.28.0.2:53 1 64 1 2025-11-23 19:18:33.688 00:00:00.000 UDP 28.104.0.1:40904 -> 198.28.0.2:53 1 64 1 2025-11-23 19:14:54.837 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 47 3272 1 2025-11-23 19:15:11.234 00:04:00.414 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-11-23 19:15:11.234 00:04:00.103 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-11-23 19:15:02.724 00:05:08.519 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-23 19:19:34.580 00:00:00.000 UDP 28.104.0.1:51523 -> 198.28.0.2:53 1 64 1 2025-11-23 19:19:34.580 00:00:00.000 UDP 28.104.0.1:37478 -> 198.28.0.2:53 1 64 1 2025-11-23 19:19:34.591 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37478 1 109 1 2025-11-23 19:19:34.591 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51523 1 80 1 2025-11-23 19:16:02.774 00:05:08.671 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-23 19:20:34.902 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37153 1 80 1 2025-11-23 19:20:34.902 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57783 1 109 1 2025-11-23 19:20:34.893 00:00:00.000 UDP 28.104.0.1:37153 -> 198.28.0.2:53 1 64 1 2025-11-23 19:20:34.893 00:00:00.000 UDP 28.104.0.1:57783 -> 198.28.0.2:53 1 64 1 2025-11-23 19:16:11.234 00:05:51.502 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-23 19:16:11.455 00:05:51.271 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-23 19:20:11.234 00:01:00.414 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-23 19:20:11.234 00:01:00.103 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-23 19:21:35.209 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46007 1 109 1 2025-11-23 19:21:35.209 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60335 1 80 1 2025-11-23 19:21:35.199 00:00:00.000 UDP 28.104.0.1:46007 -> 198.28.0.2:53 1 64 1 2025-11-23 19:21:35.199 00:00:00.000 UDP 28.104.0.1:60335 -> 198.28.0.2:53 1 64 1 2025-11-23 19:21:53.417 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-23 19:22:35.505 00:00:00.000 UDP 28.104.0.1:34135 -> 198.28.0.2:53 1 64 1 2025-11-23 19:22:35.505 00:00:00.000 UDP 28.104.0.1:52794 -> 198.28.0.2:53 1 64 1 2025-11-23 19:22:35.516 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52794 1 109 1 2025-11-23 19:22:35.516 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34135 1 80 1 2025-11-23 19:23:35.816 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40649 1 80 1 2025-11-23 19:23:35.816 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35623 1 109 1 2025-11-23 19:23:35.806 00:00:00.000 UDP 28.104.0.1:35623 -> 198.28.0.2:53 1 64 1 2025-11-23 19:23:35.806 00:00:00.000 UDP 28.104.0.1:40649 -> 198.28.0.2:53 1 64 1 2025-11-23 19:20:14.842 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 42 3036 1 2025-11-23 19:24:36.125 00:00:00.000 UDP 28.104.0.1:55773 -> 198.28.0.2:53 1 64 1 2025-11-23 19:24:36.125 00:00:00.000 UDP 28.104.0.1:44734 -> 198.28.0.2:53 1 64 1 2025-11-23 19:24:36.135 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44734 1 80 1 2025-11-23 19:24:36.135 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55773 1 109 1 2025-11-23 19:21:02.725 00:05:08.523 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-23 19:25:36.381 00:00:00.000 UDP 28.104.0.1:49708 -> 198.28.0.2:53 1 64 1 2025-11-23 19:25:36.381 00:00:00.000 UDP 28.104.0.1:35616 -> 198.28.0.2:53 1 64 1 2025-11-23 19:25:36.390 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35616 1 80 1 2025-11-23 19:25:36.391 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49708 1 109 1 2025-11-23 19:22:11.237 00:04:00.412 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-11-23 19:22:11.237 00:04:00.104 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-11-23 19:22:02.777 00:05:08.674 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-23 19:26:36.645 00:00:00.000 UDP 28.104.0.1:50180 -> 198.28.0.2:53 1 64 1 2025-11-23 19:26:36.645 00:00:00.000 UDP 28.104.0.1:57220 -> 198.28.0.2:53 1 64 1 2025-11-23 19:26:36.657 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57220 1 80 1 2025-11-23 19:26:36.656 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50180 1 109 1 2025-11-23 19:26:53.595 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-23 19:22:11.456 00:05:51.271 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-23 19:22:11.237 00:05:51.499 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-23 19:27:36.931 00:00:00.000 UDP 28.104.0.1:60799 -> 198.28.0.2:53 1 64 1 2025-11-23 19:27:36.932 00:00:00.000 UDP 28.104.0.1:33482 -> 198.28.0.2:53 1 64 1 2025-11-23 19:27:36.943 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33482 1 109 1 2025-11-23 19:27:36.942 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60799 1 80 1 2025-11-23 19:28:37.249 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60902 1 80 1 2025-11-23 19:28:37.249 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41979 1 109 1 2025-11-23 19:28:37.240 00:00:00.000 UDP 28.104.0.1:41979 -> 198.28.0.2:53 1 64 1 2025-11-23 19:28:37.240 00:00:00.000 UDP 28.104.0.1:60902 -> 198.28.0.2:53 1 64 1 2025-11-23 19:29:37.548 00:00:00.000 UDP 28.104.0.1:48923 -> 198.28.0.2:53 1 64 1 2025-11-23 19:29:37.548 00:00:00.000 UDP 28.104.0.1:52834 -> 198.28.0.2:53 1 64 1 2025-11-23 19:29:37.558 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52834 1 109 1 2025-11-23 19:29:37.558 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48923 1 80 1 2025-11-23 19:25:34.847 00:05:10.015 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2712 1 2025-11-23 19:30:37.845 00:00:00.000 UDP 28.104.0.1:38440 -> 198.28.0.2:53 1 64 1 2025-11-23 19:30:37.845 00:00:00.000 UDP 28.104.0.1:47417 -> 198.28.0.2:53 1 64 1 2025-11-23 19:30:37.855 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38440 1 109 1 2025-11-23 19:30:37.855 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47417 1 80 1 2025-11-23 19:27:02.726 00:05:08.526 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-23 19:27:11.238 00:04:00.413 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-11-23 19:27:11.238 00:04:00.105 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-11-23 19:31:38.146 00:00:00.000 UDP 28.104.0.1:49472 -> 198.28.0.2:53 1 64 1 2025-11-23 19:31:38.146 00:00:00.000 UDP 28.104.0.1:44086 -> 198.28.0.2:53 1 64 1 2025-11-23 19:31:38.155 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44086 1 80 1 2025-11-23 19:31:38.156 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49472 1 109 1 2025-11-23 19:31:53.890 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-23 19:28:02.776 00:05:08.675 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-23 19:32:38.442 00:00:00.000 UDP 28.104.0.1:58028 -> 198.28.0.2:53 1 64 1 2025-11-23 19:32:38.441 00:00:00.000 UDP 28.104.0.1:46455 -> 198.28.0.2:53 1 64 1 2025-11-23 19:32:38.451 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46455 1 109 1 2025-11-23 19:32:38.451 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58028 1 80 1 2025-11-23 19:28:11.462 00:05:51.267 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-23 19:28:11.238 00:05:51.500 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-23 19:33:38.731 00:00:00.000 UDP 28.104.0.1:41882 -> 198.28.0.2:53 1 64 1 2025-11-23 19:33:38.731 00:00:00.000 UDP 28.104.0.1:32828 -> 198.28.0.2:53 1 64 1 2025-11-23 19:33:38.741 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41882 1 109 1 2025-11-23 19:33:38.741 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32828 1 80 1 2025-11-23 19:34:39.051 00:00:00.000 UDP 28.104.0.1:33191 -> 198.28.0.2:53 1 64 1 2025-11-23 19:34:39.051 00:00:00.000 UDP 28.104.0.1:52591 -> 198.28.0.2:53 1 64 1 2025-11-23 19:34:39.062 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33191 1 109 1 2025-11-23 19:34:39.062 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52591 1 80 1 2025-11-23 19:30:54.863 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 32 2176 1 2025-11-23 19:35:39.345 00:00:00.000 UDP 28.104.0.1:39108 -> 198.28.0.2:53 1 64 1 2025-11-23 19:35:39.345 00:00:00.000 UDP 28.104.0.1:36338 -> 198.28.0.2:53 1 64 1 2025-11-23 19:35:39.355 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39108 1 109 1 2025-11-23 19:35:39.355 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36338 1 80 1 2025-11-23 19:32:11.243 00:04:00.410 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-11-23 19:32:11.243 00:04:00.101 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-11-23 19:36:39.640 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55968 1 109 1 2025-11-23 19:36:39.639 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57584 1 80 1 2025-11-23 19:36:39.629 00:00:00.000 UDP 28.104.0.1:55968 -> 198.28.0.2:53 1 64 1 2025-11-23 19:36:39.629 00:00:00.000 UDP 28.104.0.1:57584 -> 198.28.0.2:53 1 64 1 2025-11-23 19:36:53.808 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-23 19:33:02.728 00:05:08.525 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-23 19:37:39.925 00:00:00.000 UDP 28.104.0.1:39089 -> 198.28.0.2:53 1 64 1 2025-11-23 19:37:39.925 00:00:00.000 UDP 28.104.0.1:46119 -> 198.28.0.2:53 1 64 1 2025-11-23 19:37:39.935 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46119 1 109 1 2025-11-23 19:37:39.935 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39089 1 80 1 2025-11-23 19:34:02.778 00:05:08.675 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-23 19:38:40.246 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53558 1 80 1 2025-11-23 19:38:40.246 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59798 1 109 1 2025-11-23 19:38:40.237 00:00:00.000 UDP 28.104.0.1:53558 -> 198.28.0.2:53 1 64 1 2025-11-23 19:38:40.237 00:00:00.000 UDP 28.104.0.1:59798 -> 198.28.0.2:53 1 64 1 2025-11-23 19:34:11.243 00:05:51.497 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-23 19:34:11.462 00:05:51.267 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-23 19:39:40.529 00:00:00.000 UDP 28.104.0.1:34940 -> 198.28.0.2:53 1 64 1 2025-11-23 19:39:40.528 00:00:00.000 UDP 28.104.0.1:42268 -> 198.28.0.2:53 1 64 1 2025-11-23 19:39:40.538 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42268 1 80 1 2025-11-23 19:39:40.538 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34940 1 109 1 2025-11-23 19:36:14.868 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 34 2444 1 2025-11-23 19:40:40.819 00:00:00.000 UDP 28.104.0.1:59892 -> 198.28.0.2:53 1 64 1 2025-11-23 19:40:40.819 00:00:00.000 UDP 28.104.0.1:38720 -> 198.28.0.2:53 1 64 1 2025-11-23 19:40:40.829 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38720 1 80 1 2025-11-23 19:40:40.829 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59892 1 109 1 2025-11-23 19:37:11.243 00:04:00.411 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-11-23 19:37:11.243 00:04:00.102 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-11-23 19:41:41.083 00:00:00.000 UDP 28.104.0.1:57034 -> 198.28.0.2:53 1 64 1 2025-11-23 19:41:41.083 00:00:00.000 UDP 28.104.0.1:34063 -> 198.28.0.2:53 1 64 1 2025-11-23 19:41:41.093 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34063 1 109 1 2025-11-23 19:41:41.093 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57034 1 80 1 2025-11-23 19:41:54.076 00:00:00.038 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-23 19:42:41.402 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36378 1 109 1 2025-11-23 19:42:41.402 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60989 1 80 1 2025-11-23 19:42:41.392 00:00:00.000 UDP 28.104.0.1:36378 -> 198.28.0.2:53 1 64 1 2025-11-23 19:42:41.393 00:00:00.000 UDP 28.104.0.1:60989 -> 198.28.0.2:53 1 64 1 2025-11-23 19:39:02.730 00:05:08.524 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-23 19:43:43.995 00:00:00.000 UDP 28.104.0.1:44660 -> 198.28.0.2:53 1 64 1 2025-11-23 19:43:43.995 00:00:00.000 UDP 28.104.0.1:50358 -> 198.28.0.2:53 1 64 1 2025-11-23 19:43:44.006 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44660 1 109 1 2025-11-23 19:43:44.006 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50358 1 80 1 2025-11-23 19:40:02.780 00:05:08.674 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-23 19:44:44.301 00:00:00.000 UDP 28.104.0.1:54248 -> 198.28.0.2:53 1 64 1 2025-11-23 19:44:44.301 00:00:00.000 UDP 28.104.0.1:35036 -> 198.28.0.2:53 1 64 1 2025-11-23 19:44:44.312 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54248 1 80 1 2025-11-23 19:44:44.311 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35036 1 109 1 2025-11-23 19:40:11.462 00:05:51.269 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-23 19:40:11.243 00:05:51.499 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-23 19:45:44.612 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56683 1 80 1 2025-11-23 19:45:44.612 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38299 1 109 1 2025-11-23 19:41:34.871 00:05:10.014 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2864 1 2025-11-23 19:45:44.601 00:00:00.000 UDP 28.104.0.1:56683 -> 198.28.0.2:53 1 64 1 2025-11-23 19:45:44.601 00:00:00.000 UDP 28.104.0.1:38299 -> 198.28.0.2:53 1 64 1 2025-11-23 19:42:11.243 00:04:00.411 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-11-23 19:42:11.243 00:04:00.108 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-11-23 19:46:44.922 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33518 1 109 1 2025-11-23 19:46:44.922 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40198 1 80 1 2025-11-23 19:46:44.911 00:00:00.000 UDP 28.104.0.1:40198 -> 198.28.0.2:53 1 64 1 2025-11-23 19:46:44.911 00:00:00.000 UDP 28.104.0.1:33518 -> 198.28.0.2:53 1 64 1 2025-11-23 19:46:54.023 00:00:00.018 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-23 19:47:45.231 00:00:00.000 UDP 28.104.0.1:50803 -> 198.28.0.2:53 1 64 1 2025-11-23 19:47:45.231 00:00:00.000 UDP 28.104.0.1:36171 -> 198.28.0.2:53 1 64 1 2025-11-23 19:47:45.241 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36171 1 80 1 2025-11-23 19:47:45.241 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50803 1 109 1 2025-11-23 19:47:11.245 00:01:00.411 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-23 19:47:11.245 00:01:00.109 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-23 19:48:51.103 00:00:00.000 UDP 28.104.0.1:53215 -> 198.28.0.2:53 1 64 1 2025-11-23 19:48:51.103 00:00:00.000 UDP 28.104.0.1:45525 -> 198.28.0.2:53 1 64 1 2025-11-23 19:48:51.115 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53215 1 80 1 2025-11-23 19:48:51.115 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45525 1 109 1 2025-11-23 19:45:02.732 00:05:08.522 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-23 19:49:51.404 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50655 1 80 1 2025-11-23 19:49:51.404 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42454 1 109 1 2025-11-23 19:49:51.393 00:00:00.000 UDP 28.104.0.1:50655 -> 198.28.0.2:53 1 64 1 2025-11-23 19:49:51.394 00:00:00.000 UDP 28.104.0.1:42454 -> 198.28.0.2:53 1 64 1 2025-11-23 19:46:02.781 00:05:08.674 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-23 19:50:51.697 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55115 1 80 1 2025-11-23 19:50:51.698 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46593 1 109 1 2025-11-23 19:50:51.686 00:00:00.000 UDP 28.104.0.1:46593 -> 198.28.0.2:53 1 64 1 2025-11-23 19:50:51.686 00:00:00.000 UDP 28.104.0.1:55115 -> 198.28.0.2:53 1 64 1 2025-11-23 19:46:11.464 00:05:51.270 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-23 19:46:54.885 00:05:10.022 OSPF 28.0.2.1:0 -> 224.0.0.5:0 47 3364 1 2025-11-23 19:46:11.244 00:05:51.501 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-23 19:51:51.942 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39888 1 109 1 2025-11-23 19:51:51.942 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56227 1 80 1 2025-11-23 19:51:51.932 00:00:00.000 UDP 28.104.0.1:56227 -> 198.28.0.2:53 1 64 1 2025-11-23 19:51:51.932 00:00:00.000 UDP 28.104.0.1:39888 -> 198.28.0.2:53 1 64 1 2025-11-23 19:51:54.176 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-23 19:52:52.251 00:00:00.000 UDP 28.104.0.1:38742 -> 198.28.0.2:53 1 64 1 2025-11-23 19:52:52.251 00:00:00.000 UDP 28.104.0.1:50541 -> 198.28.0.2:53 1 64 1 2025-11-23 19:52:52.261 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38742 1 109 1 2025-11-23 19:52:52.261 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50541 1 80 1 2025-11-23 19:49:11.244 00:04:00.415 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-11-23 19:49:11.244 00:04:00.109 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-11-23 19:53:52.553 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33021 1 80 1 2025-11-23 19:53:52.553 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42129 1 109 1 2025-11-23 19:53:52.541 00:00:00.000 UDP 28.104.0.1:33021 -> 198.28.0.2:53 1 64 1 2025-11-23 19:53:52.541 00:00:00.000 UDP 28.104.0.1:42129 -> 198.28.0.2:53 1 64 1 2025-11-23 19:54:52.847 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58033 1 80 1 2025-11-23 19:54:52.844 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54509 1 109 1 2025-11-23 19:54:52.835 00:00:00.000 UDP 28.104.0.1:54509 -> 198.28.0.2:53 1 64 1 2025-11-23 19:54:52.835 00:00:00.000 UDP 28.104.0.1:58033 -> 198.28.0.2:53 1 64 1 2025-11-23 19:51:02.734 00:05:08.522 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-23 19:55:53.184 00:00:00.000 UDP 28.104.0.1:36857 -> 198.28.0.2:53 1 64 1 2025-11-23 19:55:53.183 00:00:00.000 UDP 28.104.0.1:45107 -> 198.28.0.2:53 1 64 1 2025-11-23 19:55:53.193 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45107 1 80 1 2025-11-23 19:55:53.194 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36857 1 109 1 2025-11-23 19:52:02.784 00:05:08.672 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-23 19:52:14.907 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2644 1 2025-11-23 19:56:53.538 00:00:00.000 UDP 28.104.0.1:37049 -> 198.28.0.2:53 1 64 1 2025-11-23 19:56:53.539 00:00:00.000 UDP 28.104.0.1:59656 -> 198.28.0.2:53 1 64 1 2025-11-23 19:56:54.484 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-23 19:56:53.548 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37049 1 80 1 2025-11-23 19:56:53.549 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59656 1 109 1 2025-11-23 19:52:11.466 00:05:51.269 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-23 19:52:11.245 00:05:51.499 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-23 19:57:53.845 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58553 1 109 1 2025-11-23 19:57:53.846 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36530 1 80 1 2025-11-23 19:57:53.835 00:00:00.000 UDP 28.104.0.1:36530 -> 198.28.0.2:53 1 64 1 2025-11-23 19:57:53.835 00:00:00.000 UDP 28.104.0.1:58553 -> 198.28.0.2:53 1 64 1 2025-11-23 19:54:11.246 00:04:00.414 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-11-23 19:54:11.246 00:04:00.108 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 Summary: total flows: 327, total bytes: 96899, total packets: 1432, avg bps: 205, avg pps: 0, avg bpp: 67 Time window: 2025-11-23 18:55:11 - 2025-11-23 19:58:11 Total flows processed: 327, passed: 327, Blocks skipped: 0, Bytes read: 34072 Sys: 0.0036s User: 0.0024s Wall: 0.0029s flows/second: 112062.9 Runtime: 0.0029s