Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-24 00:59:42.442 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33076 1 109 1 2025-11-24 00:59:42.442 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35760 1 80 1 2025-11-24 00:59:42.432 00:00:00.000 UDP 28.104.0.1:35760 -> 198.28.0.2:53 1 64 1 2025-11-24 00:59:42.432 00:00:00.000 UDP 28.104.0.1:33076 -> 198.28.0.2:53 1 64 1 2025-11-24 00:55:45.353 00:05:10.165 OSPF 28.0.2.1:0 -> 224.0.0.5:0 43 3044 1 2025-11-24 01:00:43.203 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39076 1 80 1 2025-11-24 01:00:43.203 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60897 1 109 1 2025-11-24 01:00:43.193 00:00:00.000 UDP 28.104.0.1:39076 -> 198.28.0.2:53 1 64 1 2025-11-24 01:00:43.193 00:00:00.000 UDP 28.104.0.1:60897 -> 198.28.0.2:53 1 64 1 2025-11-24 00:57:11.347 00:04:00.419 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-11-24 00:57:11.347 00:04:00.103 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-11-24 00:57:02.840 00:05:08.525 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-24 01:01:43.490 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42737 1 80 1 2025-11-24 01:01:43.491 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42934 1 109 1 2025-11-24 01:01:43.481 00:00:00.000 UDP 28.104.0.1:42934 -> 198.28.0.2:53 1 64 1 2025-11-24 01:01:43.480 00:00:00.000 UDP 28.104.0.1:42737 -> 198.28.0.2:53 1 64 1 2025-11-24 01:02:00.734 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-24 00:58:02.892 00:05:08.659 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-24 01:02:43.743 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53033 1 109 1 2025-11-24 01:02:43.742 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57546 1 80 1 2025-11-24 01:02:43.733 00:00:00.000 UDP 28.104.0.1:57546 -> 198.28.0.2:53 1 64 1 2025-11-24 01:02:43.733 00:00:00.000 UDP 28.104.0.1:53033 -> 198.28.0.2:53 1 64 1 2025-11-24 00:58:11.348 00:05:51.506 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-24 00:58:11.560 00:05:51.284 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-24 01:02:11.355 00:01:00.411 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-24 01:02:11.355 00:01:00.096 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-24 01:03:44.055 00:00:00.000 UDP 28.104.0.1:51321 -> 198.28.0.2:53 1 64 1 2025-11-24 01:03:44.054 00:00:00.000 UDP 28.104.0.1:42512 -> 198.28.0.2:53 1 64 1 2025-11-24 01:03:44.066 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51321 1 109 1 2025-11-24 01:03:44.065 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42512 1 80 1 2025-11-24 01:04:44.311 00:00:00.000 UDP 28.104.0.1:54065 -> 198.28.0.2:53 1 64 1 2025-11-24 01:04:44.311 00:00:00.000 UDP 28.104.0.1:50276 -> 198.28.0.2:53 1 64 1 2025-11-24 01:04:44.320 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54065 1 109 1 2025-11-24 01:04:44.320 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50276 1 80 1 2025-11-24 01:01:05.370 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 47 3348 1 2025-11-24 01:05:44.608 00:00:00.000 UDP 28.104.0.1:56818 -> 198.28.0.2:53 1 64 1 2025-11-24 01:05:44.608 00:00:00.000 UDP 28.104.0.1:45195 -> 198.28.0.2:53 1 64 1 2025-11-24 01:05:44.619 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45195 1 109 1 2025-11-24 01:05:44.619 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56818 1 80 1 2025-11-24 01:04:11.358 00:02:00.411 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-11-24 01:04:11.358 00:02:00.096 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-11-24 01:06:44.909 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33362 1 109 1 2025-11-24 01:06:44.909 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33422 1 80 1 2025-11-24 01:06:44.899 00:00:00.000 UDP 28.104.0.1:33422 -> 198.28.0.2:53 1 64 1 2025-11-24 01:06:44.899 00:00:00.000 UDP 28.104.0.1:33362 -> 198.28.0.2:53 1 64 1 2025-11-24 01:07:00.582 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-24 01:03:02.843 00:05:08.523 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-24 01:07:45.198 00:00:00.000 UDP 28.104.0.1:58958 -> 198.28.0.2:53 1 64 1 2025-11-24 01:07:45.198 00:00:00.000 UDP 28.104.0.1:40465 -> 198.28.0.2:53 1 64 1 2025-11-24 01:07:45.209 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58958 1 109 1 2025-11-24 01:07:45.208 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40465 1 80 1 2025-11-24 01:07:11.357 00:01:00.411 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-24 01:07:11.357 00:01:00.096 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-24 01:04:02.894 00:05:08.658 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-24 01:08:45.502 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44576 1 80 1 2025-11-24 01:08:45.502 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54397 1 109 1 2025-11-24 01:08:45.492 00:00:00.000 UDP 28.104.0.1:44576 -> 198.28.0.2:53 1 64 1 2025-11-24 01:08:45.492 00:00:00.000 UDP 28.104.0.1:54397 -> 198.28.0.2:53 1 64 1 2025-11-24 01:04:11.355 00:05:51.499 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-24 01:04:11.560 00:05:51.284 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-24 01:09:45.747 00:00:00.000 UDP 28.104.0.1:34151 -> 198.28.0.2:53 1 64 1 2025-11-24 01:09:45.746 00:00:00.000 UDP 28.104.0.1:45007 -> 198.28.0.2:53 1 64 1 2025-11-24 01:09:45.756 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45007 1 109 1 2025-11-24 01:09:45.756 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34151 1 80 1 2025-11-24 01:06:25.375 00:05:10.267 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2708 1 2025-11-24 01:10:46.002 00:00:00.000 UDP 28.104.0.1:57733 -> 198.28.0.2:53 1 64 1 2025-11-24 01:10:46.002 00:00:00.000 UDP 28.104.0.1:44471 -> 198.28.0.2:53 1 64 1 2025-11-24 01:10:46.014 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57733 1 80 1 2025-11-24 01:10:46.019 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44471 1 109 1 2025-11-24 01:09:11.358 00:02:00.412 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-11-24 01:09:11.358 00:02:00.097 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-11-24 01:11:46.348 00:00:00.000 UDP 28.104.0.1:33006 -> 198.28.0.2:53 1 64 1 2025-11-24 01:11:46.348 00:00:00.000 UDP 28.104.0.1:36271 -> 198.28.0.2:53 1 64 1 2025-11-24 01:11:46.358 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33006 1 109 1 2025-11-24 01:11:46.358 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36271 1 80 1 2025-11-24 01:12:00.504 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-24 01:12:46.601 00:00:00.000 UDP 28.104.0.1:41066 -> 198.28.0.2:53 1 64 1 2025-11-24 01:12:46.601 00:00:00.000 UDP 28.104.0.1:48446 -> 198.28.0.2:53 1 64 1 2025-11-24 01:12:46.611 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41066 1 109 1 2025-11-24 01:12:46.611 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48446 1 80 1 2025-11-24 01:12:11.359 00:01:00.411 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-24 01:12:11.359 00:01:00.099 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-24 01:09:02.845 00:05:08.524 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-24 01:13:46.915 00:00:00.000 UDP 28.104.0.1:40219 -> 198.28.0.2:53 1 64 1 2025-11-24 01:13:46.915 00:00:00.000 UDP 28.104.0.1:38357 -> 198.28.0.2:53 1 64 1 2025-11-24 01:13:46.926 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40219 1 109 1 2025-11-24 01:13:46.926 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38357 1 80 1 2025-11-24 01:10:02.895 00:05:08.658 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-24 01:14:47.237 00:00:00.000 UDP 28.104.0.1:34203 -> 198.28.0.2:53 1 64 1 2025-11-24 01:14:47.237 00:00:00.000 UDP 28.104.0.1:52398 -> 198.28.0.2:53 1 64 1 2025-11-24 01:14:47.247 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34203 1 80 1 2025-11-24 01:14:47.247 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52398 1 109 1 2025-11-24 01:10:11.360 00:05:51.497 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-24 01:10:11.562 00:05:51.284 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-24 01:15:47.544 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49910 1 109 1 2025-11-24 01:15:47.544 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56434 1 80 1 2025-11-24 01:15:47.535 00:00:00.000 UDP 28.104.0.1:56434 -> 198.28.0.2:53 1 64 1 2025-11-24 01:15:47.535 00:00:00.000 UDP 28.104.0.1:49910 -> 198.28.0.2:53 1 64 1 2025-11-24 01:11:45.381 00:05:10.010 OSPF 28.0.2.1:0 -> 224.0.0.5:0 34 2360 1 2025-11-24 01:14:11.359 00:02:00.412 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-11-24 01:14:11.359 00:02:00.100 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-11-24 01:16:47.840 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41888 1 80 1 2025-11-24 01:16:47.840 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39902 1 109 1 2025-11-24 01:16:47.832 00:00:00.000 UDP 28.104.0.1:39902 -> 198.28.0.2:53 1 64 1 2025-11-24 01:16:47.832 00:00:00.000 UDP 28.104.0.1:41888 -> 198.28.0.2:53 1 64 1 2025-11-24 01:17:00.795 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-24 01:17:48.137 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35158 1 80 1 2025-11-24 01:17:48.138 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35990 1 109 1 2025-11-24 01:17:48.129 00:00:00.000 UDP 28.104.0.1:35990 -> 198.28.0.2:53 1 64 1 2025-11-24 01:17:48.128 00:00:00.000 UDP 28.104.0.1:35158 -> 198.28.0.2:53 1 64 1 2025-11-24 01:17:11.359 00:01:00.412 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-24 01:17:11.359 00:01:00.099 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-24 01:18:48.380 00:00:00.000 UDP 28.104.0.1:35277 -> 198.28.0.2:53 1 64 1 2025-11-24 01:18:48.380 00:00:00.000 UDP 28.104.0.1:32969 -> 198.28.0.2:53 1 64 1 2025-11-24 01:18:48.390 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32969 1 80 1 2025-11-24 01:18:48.390 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35277 1 109 1 2025-11-24 01:15:02.845 00:05:08.526 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-24 01:19:48.676 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43962 1 80 1 2025-11-24 01:19:48.676 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41842 1 109 1 2025-11-24 01:19:48.666 00:00:00.000 UDP 28.104.0.1:41842 -> 198.28.0.2:53 1 64 1 2025-11-24 01:19:48.666 00:00:00.000 UDP 28.104.0.1:43962 -> 198.28.0.2:53 1 64 1 2025-11-24 01:16:02.895 00:05:08.659 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-24 01:20:48.928 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33224 1 109 1 2025-11-24 01:20:48.947 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52816 1 80 1 2025-11-24 01:20:48.918 00:00:00.000 UDP 28.104.0.1:33224 -> 198.28.0.2:53 1 64 1 2025-11-24 01:20:48.918 00:00:00.000 UDP 28.104.0.1:52816 -> 198.28.0.2:53 1 64 1 2025-11-24 01:16:11.359 00:05:51.497 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-24 01:16:11.563 00:05:51.283 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-24 01:19:11.360 00:02:00.411 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-11-24 01:19:11.360 00:02:00.099 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-11-24 01:17:05.391 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 32 2176 1 2025-11-24 01:21:49.290 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52279 1 80 1 2025-11-24 01:21:49.290 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50425 1 109 1 2025-11-24 01:21:49.279 00:00:00.000 UDP 28.104.0.1:50425 -> 198.28.0.2:53 1 64 1 2025-11-24 01:21:49.279 00:00:00.000 UDP 28.104.0.1:52279 -> 198.28.0.2:53 1 64 1 2025-11-24 01:22:01.115 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-24 01:22:49.587 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58714 1 109 1 2025-11-24 01:22:49.587 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39298 1 80 1 2025-11-24 01:22:49.576 00:00:00.000 UDP 28.104.0.1:39298 -> 198.28.0.2:53 1 64 1 2025-11-24 01:22:49.576 00:00:00.000 UDP 28.104.0.1:58714 -> 198.28.0.2:53 1 64 1 2025-11-24 01:22:11.360 00:01:00.411 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-24 01:22:11.360 00:01:00.098 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-24 01:23:49.869 00:00:00.000 UDP 28.104.0.1:38272 -> 198.28.0.2:53 1 64 1 2025-11-24 01:23:49.869 00:00:00.000 UDP 28.104.0.1:37104 -> 198.28.0.2:53 1 64 1 2025-11-24 01:23:49.880 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38272 1 109 1 2025-11-24 01:23:49.880 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37104 1 80 1 2025-11-24 01:24:50.180 00:00:00.000 UDP 28.104.0.1:46611 -> 198.28.0.2:53 1 64 1 2025-11-24 01:24:50.179 00:00:00.000 UDP 28.104.0.1:56399 -> 198.28.0.2:53 1 64 1 2025-11-24 01:24:50.191 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46611 1 109 1 2025-11-24 01:24:50.190 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56399 1 80 1 2025-11-24 01:21:02.846 00:05:08.526 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-24 01:25:50.475 00:00:00.000 UDP 28.104.0.1:54592 -> 198.28.0.2:53 1 64 1 2025-11-24 01:25:50.475 00:00:00.000 UDP 28.104.0.1:57713 -> 198.28.0.2:53 1 64 1 2025-11-24 01:25:50.485 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54592 1 109 1 2025-11-24 01:25:50.485 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57713 1 80 1 2025-11-24 01:22:02.896 00:05:08.659 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-24 01:22:25.395 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 42 3136 1 2025-11-24 01:26:50.739 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53252 1 109 1 2025-11-24 01:26:50.741 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43754 1 80 1 2025-11-24 01:26:50.729 00:00:00.000 UDP 28.104.0.1:53252 -> 198.28.0.2:53 1 64 1 2025-11-24 01:26:50.729 00:00:00.000 UDP 28.104.0.1:43754 -> 198.28.0.2:53 1 64 1 2025-11-24 01:27:00.856 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-24 01:22:11.360 00:05:51.496 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-24 01:22:11.565 00:05:51.282 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-24 01:27:50.996 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45405 1 80 1 2025-11-24 01:27:50.996 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34789 1 109 1 2025-11-24 01:27:50.987 00:00:00.000 UDP 28.104.0.1:34789 -> 198.28.0.2:53 1 64 1 2025-11-24 01:27:50.987 00:00:00.000 UDP 28.104.0.1:45405 -> 198.28.0.2:53 1 64 1 2025-11-24 01:24:11.360 00:04:00.412 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-11-24 01:24:11.360 00:04:00.099 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-11-24 01:28:51.289 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34360 1 80 1 2025-11-24 01:28:51.289 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35584 1 109 1 2025-11-24 01:28:51.279 00:00:00.000 UDP 28.104.0.1:35584 -> 198.28.0.2:53 1 64 1 2025-11-24 01:28:51.279 00:00:00.000 UDP 28.104.0.1:34360 -> 198.28.0.2:53 1 64 1 2025-11-24 01:29:51.582 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52697 1 109 1 2025-11-24 01:29:51.582 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54766 1 80 1 2025-11-24 01:29:51.572 00:00:00.000 UDP 28.104.0.1:54766 -> 198.28.0.2:53 1 64 1 2025-11-24 01:29:51.572 00:00:00.000 UDP 28.104.0.1:52697 -> 198.28.0.2:53 1 64 1 2025-11-24 01:29:11.362 00:01:00.410 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-24 01:29:11.362 00:01:00.098 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-24 01:30:51.865 00:00:00.000 UDP 28.104.0.1:47858 -> 198.28.0.2:53 1 64 1 2025-11-24 01:30:51.865 00:00:00.000 UDP 28.104.0.1:45904 -> 198.28.0.2:53 1 64 1 2025-11-24 01:30:51.875 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47858 1 109 1 2025-11-24 01:30:51.875 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45904 1 80 1 2025-11-24 01:27:02.848 00:05:08.526 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-24 01:31:52.180 00:00:00.000 UDP 28.104.0.1:57171 -> 198.28.0.2:53 1 64 1 2025-11-24 01:31:52.180 00:00:00.000 UDP 28.104.0.1:39129 -> 198.28.0.2:53 1 64 1 2025-11-24 01:27:45.400 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 45 3128 1 2025-11-24 01:31:52.191 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39129 1 109 1 2025-11-24 01:31:52.191 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57171 1 80 1 2025-11-24 01:32:01.212 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-24 01:28:02.897 00:05:08.659 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-24 01:32:52.810 00:00:00.000 UDP 28.104.0.1:59070 -> 198.28.0.2:53 1 64 1 2025-11-24 01:32:52.810 00:00:00.000 UDP 28.104.0.1:52237 -> 198.28.0.2:53 1 64 1 2025-11-24 01:32:52.820 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59070 1 80 1 2025-11-24 01:32:52.820 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52237 1 109 1 2025-11-24 01:28:11.566 00:05:51.284 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-24 01:28:11.362 00:05:51.498 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-24 01:31:11.362 00:02:00.411 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-11-24 01:31:11.362 00:02:00.102 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-11-24 01:33:53.132 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33553 1 80 1 2025-11-24 01:33:53.132 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52900 1 109 1 2025-11-24 01:33:53.121 00:00:00.000 UDP 28.104.0.1:33553 -> 198.28.0.2:53 1 64 1 2025-11-24 01:33:53.121 00:00:00.000 UDP 28.104.0.1:52900 -> 198.28.0.2:53 1 64 1 2025-11-24 01:34:53.423 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35755 1 109 1 2025-11-24 01:34:53.424 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48558 1 80 1 2025-11-24 01:34:53.413 00:00:00.000 UDP 28.104.0.1:35755 -> 198.28.0.2:53 1 64 1 2025-11-24 01:34:53.413 00:00:00.000 UDP 28.104.0.1:48558 -> 198.28.0.2:53 1 64 1 2025-11-24 01:34:11.365 00:01:00.408 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-24 01:34:11.365 00:01:00.099 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-24 01:35:53.675 00:00:00.000 UDP 28.104.0.1:57581 -> 198.28.0.2:53 1 64 1 2025-11-24 01:35:53.675 00:00:00.000 UDP 28.104.0.1:54022 -> 198.28.0.2:53 1 64 1 2025-11-24 01:35:53.686 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54022 1 109 1 2025-11-24 01:35:53.686 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57581 1 80 1 2025-11-24 01:36:53.926 00:00:00.000 UDP 28.104.0.1:60756 -> 198.28.0.2:53 1 64 1 2025-11-24 01:36:53.926 00:00:00.000 UDP 28.104.0.1:57554 -> 198.28.0.2:53 1 64 1 2025-11-24 01:36:53.936 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60756 1 80 1 2025-11-24 01:36:53.936 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57554 1 109 1 2025-11-24 01:37:01.222 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-24 01:33:02.849 00:05:08.528 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-24 01:33:05.403 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2828 1 2025-11-24 01:37:54.238 00:00:00.000 UDP 28.104.0.1:60249 -> 198.28.0.2:53 1 64 1 2025-11-24 01:37:54.237 00:00:00.000 UDP 28.104.0.1:59137 -> 198.28.0.2:53 1 64 1 2025-11-24 01:37:54.248 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59137 1 80 1 2025-11-24 01:37:54.249 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60249 1 109 1 2025-11-24 01:36:11.365 00:02:00.408 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-11-24 01:36:11.365 00:02:00.099 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-11-24 01:34:02.899 00:05:08.657 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-24 01:38:54.535 00:00:00.000 UDP 28.104.0.1:37345 -> 198.28.0.2:53 1 64 1 2025-11-24 01:38:54.535 00:00:00.000 UDP 28.104.0.1:49035 -> 198.28.0.2:53 1 64 1 2025-11-24 01:38:54.545 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37345 1 109 1 2025-11-24 01:38:54.544 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49035 1 80 1 2025-11-24 01:34:11.364 00:05:51.496 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-24 01:34:11.567 00:05:51.283 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-24 01:39:54.800 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42241 1 109 1 2025-11-24 01:39:54.800 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46871 1 80 1 2025-11-24 01:39:54.790 00:00:00.000 UDP 28.104.0.1:42241 -> 198.28.0.2:53 1 64 1 2025-11-24 01:39:54.790 00:00:00.000 UDP 28.104.0.1:46871 -> 198.28.0.2:53 1 64 1 2025-11-24 01:39:11.368 00:01:00.406 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-24 01:39:11.368 00:01:00.097 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-24 01:40:55.101 00:00:00.000 UDP 28.104.0.1:46052 -> 198.28.0.2:53 1 64 1 2025-11-24 01:40:55.101 00:00:00.000 UDP 28.104.0.1:43544 -> 198.28.0.2:53 1 64 1 2025-11-24 01:40:55.112 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43544 1 80 1 2025-11-24 01:40:55.112 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46052 1 109 1 2025-11-24 01:41:55.352 00:00:00.000 UDP 28.104.0.1:48037 -> 198.28.0.2:53 1 64 1 2025-11-24 01:41:55.352 00:00:00.000 UDP 28.104.0.1:38448 -> 198.28.0.2:53 1 64 1 2025-11-24 01:41:55.361 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38448 1 109 1 2025-11-24 01:41:55.361 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48037 1 80 1 2025-11-24 01:42:01.155 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-24 01:38:25.409 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2528 1 2025-11-24 01:42:55.644 00:00:00.000 UDP 28.104.0.1:58949 -> 198.28.0.2:53 1 64 1 2025-11-24 01:42:55.644 00:00:00.000 UDP 28.104.0.1:46695 -> 198.28.0.2:53 1 64 1 2025-11-24 01:42:55.655 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58949 1 80 1 2025-11-24 01:42:55.655 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46695 1 109 1 2025-11-24 01:41:11.369 00:02:00.097 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-11-24 01:41:11.369 00:02:00.406 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-11-24 01:39:02.850 00:05:08.528 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-24 01:43:55.898 00:00:00.000 UDP 28.104.0.1:53759 -> 198.28.0.2:53 1 64 1 2025-11-24 01:43:55.898 00:00:00.000 UDP 28.104.0.1:54047 -> 198.28.0.2:53 1 64 1 2025-11-24 01:43:55.909 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53759 1 109 1 2025-11-24 01:43:55.909 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54047 1 80 1 2025-11-24 01:40:02.900 00:05:08.657 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-24 01:44:56.204 00:00:00.000 UDP 28.104.0.1:53127 -> 198.28.0.2:53 1 64 1 2025-11-24 01:44:56.204 00:00:00.000 UDP 28.104.0.1:51100 -> 198.28.0.2:53 1 64 1 2025-11-24 01:44:56.216 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53127 1 80 1 2025-11-24 01:44:56.216 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51100 1 109 1 2025-11-24 01:40:11.368 00:05:51.497 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-24 01:40:11.567 00:05:51.288 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-24 01:44:11.368 00:01:00.406 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-24 01:44:11.368 00:01:00.097 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-24 01:45:56.514 00:00:00.000 UDP 28.104.0.1:54061 -> 198.28.0.2:53 1 64 1 2025-11-24 01:45:56.514 00:00:00.000 UDP 28.104.0.1:37513 -> 198.28.0.2:53 1 64 1 2025-11-24 01:45:56.524 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54061 1 80 1 2025-11-24 01:45:56.525 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37513 1 109 1 2025-11-24 01:46:56.815 00:00:00.000 UDP 28.104.0.1:43411 -> 198.28.0.2:53 1 64 1 2025-11-24 01:46:56.815 00:00:00.000 UDP 28.104.0.1:53041 -> 198.28.0.2:53 1 64 1 2025-11-24 01:46:56.826 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43411 1 109 1 2025-11-24 01:46:56.826 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53041 1 80 1 2025-11-24 01:47:01.334 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-24 01:47:57.076 00:00:00.000 UDP 28.104.0.1:38040 -> 198.28.0.2:53 1 64 1 2025-11-24 01:47:57.076 00:00:00.000 UDP 28.104.0.1:51117 -> 198.28.0.2:53 1 64 1 2025-11-24 01:43:45.414 00:05:10.009 OSPF 28.0.2.1:0 -> 224.0.0.5:0 34 2360 1 2025-11-24 01:47:57.087 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51117 1 80 1 2025-11-24 01:47:57.087 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38040 1 109 1 2025-11-24 01:46:11.368 00:02:00.407 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-11-24 01:46:11.368 00:02:00.097 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-11-24 01:48:57.373 00:00:00.000 UDP 28.104.0.1:46628 -> 198.28.0.2:53 1 64 1 2025-11-24 01:48:57.373 00:00:00.000 UDP 28.104.0.1:53635 -> 198.28.0.2:53 1 64 1 2025-11-24 01:48:57.383 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46628 1 80 1 2025-11-24 01:48:57.383 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53635 1 109 1 2025-11-24 01:45:02.851 00:05:08.531 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-24 01:49:57.663 00:00:00.000 UDP 28.104.0.1:56736 -> 198.28.0.2:53 1 64 1 2025-11-24 01:49:57.663 00:00:00.000 UDP 28.104.0.1:33085 -> 198.28.0.2:53 1 64 1 2025-11-24 01:49:57.674 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56736 1 80 1 2025-11-24 01:49:57.673 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33085 1 109 1 2025-11-24 01:49:11.372 00:01:00.403 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-24 01:49:11.372 00:01:00.095 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-24 01:46:02.905 00:05:08.654 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-24 01:50:57.918 00:00:00.000 UDP 28.104.0.1:47298 -> 198.28.0.2:53 1 64 1 2025-11-24 01:50:57.918 00:00:00.000 UDP 28.104.0.1:35555 -> 198.28.0.2:53 1 64 1 2025-11-24 01:50:57.929 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47298 1 109 1 2025-11-24 01:50:57.929 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35555 1 80 1 2025-11-24 01:46:11.369 00:05:51.498 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-24 01:46:11.568 00:05:51.288 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-24 01:52:01.461 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-24 01:51:58.248 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49680 1 80 1 2025-11-24 01:51:58.248 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48954 1 109 1 2025-11-24 01:51:58.238 00:00:00.000 UDP 28.104.0.1:48954 -> 198.28.0.2:53 1 64 1 2025-11-24 01:51:58.239 00:00:00.000 UDP 28.104.0.1:49680 -> 198.28.0.2:53 1 64 1 2025-11-24 01:52:58.530 00:00:00.000 UDP 28.104.0.1:39597 -> 198.28.0.2:53 1 64 1 2025-11-24 01:52:58.530 00:00:00.000 UDP 28.104.0.1:35391 -> 198.28.0.2:53 1 64 1 2025-11-24 01:52:58.542 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35391 1 80 1 2025-11-24 01:52:58.541 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39597 1 109 1 2025-11-24 01:51:11.372 00:02:00.403 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-11-24 01:51:11.372 00:02:00.102 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-11-24 01:49:05.424 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2652 1 2025-11-24 01:53:58.837 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56486 1 80 1 2025-11-24 01:53:58.837 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33955 1 109 1 2025-11-24 01:53:58.826 00:00:00.000 UDP 28.104.0.1:33955 -> 198.28.0.2:53 1 64 1 2025-11-24 01:53:58.826 00:00:00.000 UDP 28.104.0.1:56486 -> 198.28.0.2:53 1 64 1 2025-11-24 01:54:59.120 00:00:00.000 UDP 28.104.0.1:37944 -> 198.28.0.2:53 1 64 1 2025-11-24 01:54:59.120 00:00:00.000 UDP 28.104.0.1:37808 -> 198.28.0.2:53 1 64 1 2025-11-24 01:54:59.131 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37944 1 109 1 2025-11-24 01:54:59.131 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37808 1 80 1 2025-11-24 01:51:02.857 00:05:08.527 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-24 01:54:11.374 00:01:00.403 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-24 01:54:11.374 00:01:00.101 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-24 01:55:59.413 00:00:00.000 UDP 28.104.0.1:46743 -> 198.28.0.2:53 1 64 1 2025-11-24 01:55:59.413 00:00:00.000 UDP 28.104.0.1:47690 -> 198.28.0.2:53 1 64 1 2025-11-24 01:55:59.424 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47690 1 80 1 2025-11-24 01:55:59.423 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46743 1 109 1 2025-11-24 01:52:02.906 00:05:08.653 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-24 01:56:59.661 00:00:00.000 UDP 28.104.0.1:52401 -> 198.28.0.2:53 1 64 1 2025-11-24 01:56:59.661 00:00:00.000 UDP 28.104.0.1:37147 -> 198.28.0.2:53 1 64 1 2025-11-24 01:57:01.569 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-24 01:56:59.671 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52401 1 80 1 2025-11-24 01:56:59.671 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37147 1 109 1 2025-11-24 01:52:11.372 00:05:51.495 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-24 01:52:11.570 00:05:51.288 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-24 01:57:59.974 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39256 1 80 1 2025-11-24 01:57:59.974 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53820 1 109 1 2025-11-24 01:57:59.963 00:00:00.000 UDP 28.104.0.1:53820 -> 198.28.0.2:53 1 64 1 2025-11-24 01:57:59.964 00:00:00.000 UDP 28.104.0.1:39256 -> 198.28.0.2:53 1 64 1 2025-11-24 01:56:11.374 00:02:00.404 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-11-24 01:56:11.374 00:02:00.102 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-11-24 01:54:25.431 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 45 3128 1 Summary: total flows: 346, total bytes: 99895, total packets: 1472, avg bps: 208, avg pps: 0, avg bpp: 67 Time window: 2025-11-24 00:55:45 - 2025-11-24 01:59:35 Total flows processed: 346, passed: 346, Blocks skipped: 0, Bytes read: 36048 Sys: 0.0031s User: 0.0041s Wall: 0.0048s flows/second: 72114.4 Runtime: 0.0048s