Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-24 02:58:11.387 00:01:00.406 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-24 02:58:11.387 00:01:00.099 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-24 02:59:19.119 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37684 1 109 1 2025-11-24 02:59:19.119 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43422 1 80 1 2025-11-24 02:59:19.109 00:00:00.000 UDP 28.104.0.1:37684 -> 198.28.0.2:53 1 64 1 2025-11-24 02:59:19.109 00:00:00.000 UDP 28.104.0.1:43422 -> 198.28.0.2:53 1 64 1 2025-11-24 03:00:19.406 00:00:00.000 UDP 28.104.0.1:47635 -> 198.28.0.2:53 1 64 1 2025-11-24 03:00:19.406 00:00:00.000 UDP 28.104.0.1:53838 -> 198.28.0.2:53 1 64 1 2025-11-24 03:00:19.417 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47635 1 109 1 2025-11-24 03:00:19.416 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53838 1 80 1 2025-11-24 02:57:02.873 00:05:08.525 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-24 03:01:19.704 00:00:00.000 UDP 28.104.0.1:55721 -> 198.28.0.2:53 1 64 1 2025-11-24 03:01:19.704 00:00:00.000 UDP 28.104.0.1:35370 -> 198.28.0.2:53 1 64 1 2025-11-24 03:01:19.714 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35370 1 80 1 2025-11-24 03:01:19.714 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55721 1 109 1 2025-11-24 03:02:02.810 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-24 03:00:11.388 00:02:00.406 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-11-24 03:00:11.388 00:02:00.100 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-11-24 02:58:02.924 00:05:08.665 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-24 03:02:20.008 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33557 1 109 1 2025-11-24 03:02:20.008 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52302 1 80 1 2025-11-24 03:02:19.996 00:00:00.000 UDP 28.104.0.1:33557 -> 198.28.0.2:53 1 64 1 2025-11-24 03:02:19.996 00:00:00.000 UDP 28.104.0.1:52302 -> 198.28.0.2:53 1 64 1 2025-11-24 02:58:15.520 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2992 1 2025-11-24 02:58:11.387 00:05:51.498 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-24 02:58:11.598 00:05:51.278 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-24 03:03:20.263 00:00:00.000 UDP 28.104.0.1:48344 -> 198.28.0.2:53 1 64 1 2025-11-24 03:03:20.263 00:00:00.000 UDP 28.104.0.1:39129 -> 198.28.0.2:53 1 64 1 2025-11-24 03:03:20.275 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39129 1 109 1 2025-11-24 03:03:20.274 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48344 1 80 1 2025-11-24 03:03:11.390 00:01:00.405 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-24 03:03:11.390 00:01:00.099 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-24 03:04:20.565 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51400 1 109 1 2025-11-24 03:04:20.565 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46586 1 80 1 2025-11-24 03:04:20.555 00:00:00.000 UDP 28.104.0.1:51400 -> 198.28.0.2:53 1 64 1 2025-11-24 03:04:20.555 00:00:00.000 UDP 28.104.0.1:46586 -> 198.28.0.2:53 1 64 1 2025-11-24 03:05:20.824 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47417 1 109 1 2025-11-24 03:05:20.824 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58483 1 80 1 2025-11-24 03:05:20.814 00:00:00.000 UDP 28.104.0.1:58483 -> 198.28.0.2:53 1 64 1 2025-11-24 03:05:20.814 00:00:00.000 UDP 28.104.0.1:47417 -> 198.28.0.2:53 1 64 1 2025-11-24 03:05:11.390 00:01:00.100 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-24 03:06:21.077 00:00:00.000 UDP 28.104.0.1:38694 -> 198.28.0.2:53 1 64 1 2025-11-24 03:06:21.077 00:00:00.000 UDP 28.104.0.1:56994 -> 198.28.0.2:53 1 64 1 2025-11-24 03:06:21.088 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38694 1 80 1 2025-11-24 03:06:21.088 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56994 1 109 1 2025-11-24 03:07:02.900 00:00:00.029 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-24 03:03:02.876 00:05:08.528 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-24 03:07:21.376 00:00:00.000 UDP 28.104.0.1:36689 -> 198.28.0.2:53 1 64 1 2025-11-24 03:07:21.376 00:00:00.000 UDP 28.104.0.1:40734 -> 198.28.0.2:53 1 64 1 2025-11-24 03:07:21.386 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40734 1 80 1 2025-11-24 03:07:21.386 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36689 1 109 1 2025-11-24 03:03:35.525 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2528 1 2025-11-24 03:04:02.926 00:05:08.664 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-24 03:08:21.668 00:00:00.000 UDP 28.104.0.1:47928 -> 198.28.0.2:53 1 64 1 2025-11-24 03:08:21.668 00:00:00.000 UDP 28.104.0.1:60635 -> 198.28.0.2:53 1 64 1 2025-11-24 03:08:21.677 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47928 1 80 1 2025-11-24 03:08:21.677 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60635 1 109 1 2025-11-24 03:04:11.599 00:05:51.278 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-24 03:04:11.390 00:05:51.497 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-24 03:05:11.390 00:04:00.411 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-11-24 03:07:11.393 00:02:00.098 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-11-24 03:09:21.968 00:00:00.000 UDP 28.104.0.1:41343 -> 198.28.0.2:53 1 64 1 2025-11-24 03:09:21.968 00:00:00.000 UDP 28.104.0.1:53122 -> 198.28.0.2:53 1 64 1 2025-11-24 03:09:21.978 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53122 1 80 1 2025-11-24 03:09:21.978 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41343 1 109 1 2025-11-24 03:10:22.265 00:00:00.000 UDP 28.104.0.1:40390 -> 198.28.0.2:53 1 64 1 2025-11-24 03:10:22.265 00:00:00.000 UDP 28.104.0.1:43708 -> 198.28.0.2:53 1 64 1 2025-11-24 03:10:22.276 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43708 1 80 1 2025-11-24 03:10:22.276 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40390 1 109 1 2025-11-24 03:10:11.394 00:01:00.407 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-24 03:10:11.394 00:01:00.099 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-24 03:11:23.156 00:00:00.000 UDP 28.104.0.1:43562 -> 198.28.0.2:53 1 64 1 2025-11-24 03:11:23.156 00:00:00.000 UDP 28.104.0.1:58135 -> 198.28.0.2:53 1 64 1 2025-11-24 03:11:23.166 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43562 1 80 1 2025-11-24 03:11:23.166 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58135 1 109 1 2025-11-24 03:12:02.818 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-24 03:12:23.519 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57572 1 80 1 2025-11-24 03:12:23.519 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55969 1 109 1 2025-11-24 03:12:23.510 00:00:00.000 UDP 28.104.0.1:55969 -> 198.28.0.2:53 1 64 1 2025-11-24 03:12:23.509 00:00:00.000 UDP 28.104.0.1:57572 -> 198.28.0.2:53 1 64 1 2025-11-24 03:08:55.534 00:05:10.002 OSPF 28.0.2.1:0 -> 224.0.0.5:0 33 2296 1 2025-11-24 03:09:02.876 00:05:08.528 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-24 03:13:23.806 00:00:00.000 UDP 28.104.0.1:58396 -> 198.28.0.2:53 1 64 1 2025-11-24 03:13:23.807 00:00:00.000 UDP 28.104.0.1:53858 -> 198.28.0.2:53 1 64 1 2025-11-24 03:13:23.816 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58396 1 80 1 2025-11-24 03:13:23.817 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53858 1 109 1 2025-11-24 03:12:11.393 00:02:00.408 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-11-24 03:12:11.393 00:02:00.102 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-11-24 03:10:02.926 00:05:08.664 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-24 03:14:24.118 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59748 1 80 1 2025-11-24 03:14:24.118 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43401 1 109 1 2025-11-24 03:14:24.108 00:00:00.000 UDP 28.104.0.1:59748 -> 198.28.0.2:53 1 64 1 2025-11-24 03:14:24.108 00:00:00.000 UDP 28.104.0.1:43401 -> 198.28.0.2:53 1 64 1 2025-11-24 03:10:11.394 00:05:51.494 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-24 03:10:11.602 00:05:51.277 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-24 03:15:24.425 00:00:00.000 UDP 28.104.0.1:37705 -> 198.28.0.2:53 1 64 1 2025-11-24 03:15:24.425 00:00:00.000 UDP 28.104.0.1:48085 -> 198.28.0.2:53 1 64 1 2025-11-24 03:15:24.435 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48085 1 109 1 2025-11-24 03:15:24.435 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37705 1 80 1 2025-11-24 03:15:11.396 00:01:00.410 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-24 03:15:11.396 00:01:00.096 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-24 03:16:24.726 00:00:00.000 UDP 28.104.0.1:54025 -> 198.28.0.2:53 1 64 1 2025-11-24 03:16:24.726 00:00:00.000 UDP 28.104.0.1:37970 -> 198.28.0.2:53 1 64 1 2025-11-24 03:16:24.737 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37970 1 80 1 2025-11-24 03:16:24.737 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54025 1 109 1 2025-11-24 03:17:03.198 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-24 03:17:25.061 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41941 1 109 1 2025-11-24 03:17:25.061 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36831 1 80 1 2025-11-24 03:17:25.051 00:00:00.000 UDP 28.104.0.1:36831 -> 198.28.0.2:53 1 64 1 2025-11-24 03:17:25.051 00:00:00.000 UDP 28.104.0.1:41941 -> 198.28.0.2:53 1 64 1 2025-11-24 03:14:15.535 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2784 1 2025-11-24 03:18:25.362 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37294 1 80 1 2025-11-24 03:18:25.363 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48266 1 109 1 2025-11-24 03:18:25.352 00:00:00.000 UDP 28.104.0.1:48266 -> 198.28.0.2:53 1 64 1 2025-11-24 03:18:25.352 00:00:00.000 UDP 28.104.0.1:37294 -> 198.28.0.2:53 1 64 1 2025-11-24 03:17:11.394 00:02:00.408 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-11-24 03:17:11.394 00:02:00.100 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-11-24 03:15:02.877 00:05:08.528 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-24 03:19:25.658 00:00:00.000 UDP 28.104.0.1:36642 -> 198.28.0.2:53 1 64 1 2025-11-24 03:19:25.658 00:00:00.000 UDP 28.104.0.1:46563 -> 198.28.0.2:53 1 64 1 2025-11-24 03:19:25.667 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36642 1 109 1 2025-11-24 03:19:25.667 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46563 1 80 1 2025-11-24 03:16:02.928 00:05:08.664 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-24 03:20:25.954 00:00:00.000 UDP 28.104.0.1:43770 -> 198.28.0.2:53 1 64 1 2025-11-24 03:20:25.954 00:00:00.000 UDP 28.104.0.1:36179 -> 198.28.0.2:53 1 64 1 2025-11-24 03:20:25.964 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36179 1 80 1 2025-11-24 03:20:25.964 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43770 1 109 1 2025-11-24 03:16:11.602 00:05:51.278 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-24 03:16:11.395 00:05:51.495 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-24 03:20:11.397 00:01:00.408 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-24 03:20:11.397 00:01:00.100 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-24 03:21:26.256 00:00:00.000 UDP 28.104.0.1:47556 -> 198.28.0.2:53 1 64 1 2025-11-24 03:21:26.256 00:00:00.000 UDP 28.104.0.1:41273 -> 198.28.0.2:53 1 64 1 2025-11-24 03:21:26.267 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41273 1 109 1 2025-11-24 03:21:26.267 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47556 1 80 1 2025-11-24 03:22:03.017 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-24 03:22:26.601 00:00:00.000 UDP 28.104.0.1:38800 -> 198.28.0.2:53 1 64 1 2025-11-24 03:22:26.601 00:00:00.000 UDP 28.104.0.1:49152 -> 198.28.0.2:53 1 64 1 2025-11-24 03:22:26.610 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38800 1 109 1 2025-11-24 03:22:26.610 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49152 1 80 1 2025-11-24 03:23:26.859 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40592 1 80 1 2025-11-24 03:23:26.859 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54491 1 109 1 2025-11-24 03:23:26.850 00:00:00.000 UDP 28.104.0.1:54491 -> 198.28.0.2:53 1 64 1 2025-11-24 03:23:26.849 00:00:00.000 UDP 28.104.0.1:40592 -> 198.28.0.2:53 1 64 1 2025-11-24 03:19:35.540 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 44 3064 1 2025-11-24 03:22:11.396 00:02:00.408 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-11-24 03:22:11.396 00:02:00.100 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-11-24 03:24:27.163 00:00:00.000 UDP 28.104.0.1:43403 -> 198.28.0.2:53 1 64 1 2025-11-24 03:24:27.163 00:00:00.000 UDP 28.104.0.1:40733 -> 198.28.0.2:53 1 64 1 2025-11-24 03:24:27.174 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40733 1 109 1 2025-11-24 03:24:27.174 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43403 1 80 1 2025-11-24 03:21:02.878 00:05:08.531 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-24 03:25:27.464 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45450 1 109 1 2025-11-24 03:25:27.464 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49580 1 80 1 2025-11-24 03:25:27.455 00:00:00.000 UDP 28.104.0.1:49580 -> 198.28.0.2:53 1 64 1 2025-11-24 03:25:27.454 00:00:00.000 UDP 28.104.0.1:45450 -> 198.28.0.2:53 1 64 1 2025-11-24 03:25:11.398 00:01:00.407 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-24 03:25:11.398 00:01:00.098 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-24 03:22:02.929 00:05:08.665 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-24 03:26:27.757 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55980 1 80 1 2025-11-24 03:26:27.756 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57954 1 109 1 2025-11-24 03:26:27.746 00:00:00.000 UDP 28.104.0.1:57954 -> 198.28.0.2:53 1 64 1 2025-11-24 03:26:27.746 00:00:00.000 UDP 28.104.0.1:55980 -> 198.28.0.2:53 1 64 1 2025-11-24 03:22:11.396 00:05:51.495 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-24 03:27:03.471 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-24 03:22:11.602 00:05:51.278 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-24 03:27:28.055 00:00:00.000 UDP 28.104.0.1:36531 -> 198.28.0.2:53 1 64 1 2025-11-24 03:27:28.055 00:00:00.000 UDP 28.104.0.1:32840 -> 198.28.0.2:53 1 64 1 2025-11-24 03:27:28.066 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32840 1 109 1 2025-11-24 03:27:28.066 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36531 1 80 1 2025-11-24 03:28:28.323 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38434 1 80 1 2025-11-24 03:28:28.324 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55832 1 109 1 2025-11-24 03:28:28.312 00:00:00.000 UDP 28.104.0.1:38434 -> 198.28.0.2:53 1 64 1 2025-11-24 03:28:28.312 00:00:00.000 UDP 28.104.0.1:55832 -> 198.28.0.2:53 1 64 1 2025-11-24 03:24:55.548 00:05:10.002 OSPF 28.0.2.1:0 -> 224.0.0.5:0 46 3244 1 2025-11-24 03:27:11.400 00:02:00.406 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-11-24 03:27:11.400 00:02:00.099 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-11-24 03:29:28.612 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56506 1 80 1 2025-11-24 03:29:28.613 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47719 1 109 1 2025-11-24 03:29:28.603 00:00:00.000 UDP 28.104.0.1:47719 -> 198.28.0.2:53 1 64 1 2025-11-24 03:29:28.603 00:00:00.000 UDP 28.104.0.1:56506 -> 198.28.0.2:53 1 64 1 2025-11-24 03:30:28.867 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50320 1 109 1 2025-11-24 03:30:28.866 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35984 1 80 1 2025-11-24 03:30:28.855 00:00:00.000 UDP 28.104.0.1:35984 -> 198.28.0.2:53 1 64 1 2025-11-24 03:30:28.855 00:00:00.000 UDP 28.104.0.1:50320 -> 198.28.0.2:53 1 64 1 2025-11-24 03:27:02.880 00:05:08.533 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-24 03:30:11.400 00:01:00.407 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-24 03:30:11.400 00:01:00.098 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-24 03:31:29.195 00:00:00.000 UDP 28.104.0.1:50917 -> 198.28.0.2:53 1 64 1 2025-11-24 03:31:29.186 00:00:00.000 UDP 28.104.0.1:34824 -> 198.28.0.2:53 1 64 1 2025-11-24 03:31:29.207 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50917 1 109 1 2025-11-24 03:31:29.199 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34824 1 80 1 2025-11-24 03:32:03.420 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-24 03:28:02.931 00:05:08.666 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-24 03:32:29.498 00:00:00.000 UDP 28.104.0.1:53480 -> 198.28.0.2:53 1 64 1 2025-11-24 03:32:29.498 00:00:00.000 UDP 28.104.0.1:52055 -> 198.28.0.2:53 1 64 1 2025-11-24 03:32:29.510 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53480 1 109 1 2025-11-24 03:32:29.509 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52055 1 80 1 2025-11-24 03:28:11.604 00:05:51.276 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-24 03:28:11.401 00:05:51.491 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-24 03:33:29.807 00:00:00.000 UDP 28.104.0.1:37094 -> 198.28.0.2:53 1 64 1 2025-11-24 03:33:29.807 00:00:00.000 UDP 28.104.0.1:37141 -> 198.28.0.2:53 1 64 1 2025-11-24 03:33:29.818 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37094 1 80 1 2025-11-24 03:33:29.818 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37141 1 109 1 2025-11-24 03:32:11.403 00:02:00.406 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-11-24 03:32:11.403 00:02:00.095 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-11-24 03:30:15.551 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2644 1 2025-11-24 03:34:30.108 00:00:00.000 UDP 28.104.0.1:43085 -> 198.28.0.2:53 1 64 1 2025-11-24 03:34:30.108 00:00:00.000 UDP 28.104.0.1:54953 -> 198.28.0.2:53 1 64 1 2025-11-24 03:34:30.118 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43085 1 109 1 2025-11-24 03:34:30.118 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54953 1 80 1 2025-11-24 03:35:30.665 00:00:00.000 UDP 28.104.0.1:41486 -> 198.28.0.2:53 1 64 1 2025-11-24 03:35:30.664 00:00:00.000 UDP 28.104.0.1:48107 -> 198.28.0.2:53 1 64 1 2025-11-24 03:35:30.676 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48107 1 109 1 2025-11-24 03:35:30.676 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41486 1 80 1 2025-11-24 03:35:11.404 00:01:00.406 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-24 03:35:11.404 00:01:00.094 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-24 03:36:30.967 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56602 1 109 1 2025-11-24 03:36:30.967 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33634 1 80 1 2025-11-24 03:36:30.958 00:00:00.000 UDP 28.104.0.1:56602 -> 198.28.0.2:53 1 64 1 2025-11-24 03:36:30.958 00:00:00.000 UDP 28.104.0.1:33634 -> 198.28.0.2:53 1 64 1 2025-11-24 03:37:03.547 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-24 03:33:02.881 00:05:08.534 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-24 03:37:31.264 00:00:00.000 UDP 28.104.0.1:44689 -> 198.28.0.2:53 1 64 1 2025-11-24 03:37:31.264 00:00:00.000 UDP 28.104.0.1:55339 -> 198.28.0.2:53 1 64 1 2025-11-24 03:37:31.275 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44689 1 109 1 2025-11-24 03:37:31.275 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55339 1 80 1 2025-11-24 03:37:11.405 00:01:00.405 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-24 03:37:11.405 00:01:00.094 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-24 03:34:02.931 00:05:08.668 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-24 03:38:31.555 00:00:00.000 UDP 28.104.0.1:51925 -> 198.28.0.2:53 1 64 1 2025-11-24 03:38:31.555 00:00:00.000 UDP 28.104.0.1:40983 -> 198.28.0.2:53 1 64 1 2025-11-24 03:38:31.564 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40983 1 109 1 2025-11-24 03:38:31.565 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51925 1 80 1 2025-11-24 03:34:11.610 00:05:51.271 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-24 03:34:11.405 00:05:51.487 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-24 03:39:11.406 00:00:00.404 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 123 1 2025-11-24 03:39:11.406 00:00:00.094 TCP 28.154.0.1:179 -> 28.155.0.1:36643 2 123 1 2025-11-24 03:39:31.858 00:00:00.000 UDP 28.104.0.1:50113 -> 198.28.0.2:53 1 64 1 2025-11-24 03:39:31.858 00:00:00.000 UDP 28.104.0.1:56197 -> 198.28.0.2:53 1 64 1 2025-11-24 03:39:31.868 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50113 1 80 1 2025-11-24 03:39:31.868 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56197 1 109 1 2025-11-24 03:35:35.557 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2424 1 2025-11-24 03:40:32.136 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36795 1 109 1 2025-11-24 03:40:32.136 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43696 1 80 1 2025-11-24 03:40:32.126 00:00:00.000 UDP 28.104.0.1:43696 -> 198.28.0.2:53 1 64 1 2025-11-24 03:40:32.126 00:00:00.000 UDP 28.104.0.1:36795 -> 198.28.0.2:53 1 64 1 2025-11-24 03:40:11.406 00:01:00.405 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-24 03:40:11.406 00:01:00.095 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-24 03:41:32.437 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43967 1 109 1 2025-11-24 03:41:32.437 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37107 1 80 1 2025-11-24 03:41:32.426 00:00:00.000 UDP 28.104.0.1:43967 -> 198.28.0.2:53 1 64 1 2025-11-24 03:41:32.427 00:00:00.000 UDP 28.104.0.1:37107 -> 198.28.0.2:53 1 64 1 2025-11-24 03:42:04.035 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-24 03:42:32.687 00:00:00.000 UDP 28.104.0.1:42411 -> 198.28.0.2:53 1 64 1 2025-11-24 03:42:32.687 00:00:00.000 UDP 28.104.0.1:40330 -> 198.28.0.2:53 1 64 1 2025-11-24 03:42:32.698 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40330 1 109 1 2025-11-24 03:42:32.698 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42411 1 80 1 2025-11-24 03:39:02.882 00:05:08.535 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-24 03:42:11.406 00:01:00.405 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-24 03:42:11.406 00:01:00.095 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-24 03:43:32.990 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50426 1 80 1 2025-11-24 03:43:32.990 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47821 1 109 1 2025-11-24 03:43:32.979 00:00:00.000 UDP 28.104.0.1:50426 -> 198.28.0.2:53 1 64 1 2025-11-24 03:43:32.979 00:00:00.000 UDP 28.104.0.1:47821 -> 198.28.0.2:53 1 64 1 2025-11-24 03:40:02.933 00:05:08.669 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-24 03:44:33.587 00:00:00.000 UDP 28.104.0.1:50728 -> 198.28.0.2:53 1 64 1 2025-11-24 03:44:33.586 00:00:00.000 UDP 28.104.0.1:44876 -> 198.28.0.2:53 1 64 1 2025-11-24 03:44:33.595 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44876 1 80 1 2025-11-24 03:44:33.598 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50728 1 109 1 2025-11-24 03:40:11.609 00:05:51.276 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-24 03:40:55.561 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 33 2380 1 2025-11-24 03:40:11.407 00:05:51.489 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-24 03:45:33.885 00:00:00.000 UDP 28.104.0.1:59707 -> 198.28.0.2:53 1 64 1 2025-11-24 03:45:33.885 00:00:00.000 UDP 28.104.0.1:57148 -> 198.28.0.2:53 1 64 1 2025-11-24 03:45:33.898 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57148 1 109 1 2025-11-24 03:45:33.896 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59707 1 80 1 2025-11-24 03:44:11.405 00:02:00.405 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-11-24 03:44:11.405 00:02:00.096 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-11-24 03:46:34.207 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47617 1 109 1 2025-11-24 03:46:34.206 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57344 1 80 1 2025-11-24 03:46:34.196 00:00:00.000 UDP 28.104.0.1:57344 -> 198.28.0.2:53 1 64 1 2025-11-24 03:46:34.196 00:00:00.000 UDP 28.104.0.1:47617 -> 198.28.0.2:53 1 64 1 2025-11-24 03:47:03.712 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-24 03:47:34.511 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57998 1 80 1 2025-11-24 03:47:34.511 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36380 1 109 1 2025-11-24 03:47:34.502 00:00:00.000 UDP 28.104.0.1:36380 -> 198.28.0.2:53 1 64 1 2025-11-24 03:47:34.502 00:00:00.000 UDP 28.104.0.1:57998 -> 198.28.0.2:53 1 64 1 2025-11-24 03:47:11.406 00:01:00.405 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-24 03:47:11.406 00:01:00.096 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-24 03:48:34.803 00:00:00.000 UDP 28.104.0.1:43989 -> 198.28.0.2:53 1 64 1 2025-11-24 03:48:34.802 00:00:00.000 UDP 28.104.0.1:38997 -> 198.28.0.2:53 1 64 1 2025-11-24 03:48:34.813 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38997 1 109 1 2025-11-24 03:48:34.813 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43989 1 80 1 2025-11-24 03:45:02.885 00:05:08.533 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-24 03:49:35.115 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34109 1 80 1 2025-11-24 03:49:35.115 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39358 1 109 1 2025-11-24 03:49:35.105 00:00:00.000 UDP 28.104.0.1:39358 -> 198.28.0.2:53 1 64 1 2025-11-24 03:49:35.105 00:00:00.000 UDP 28.104.0.1:34109 -> 198.28.0.2:53 1 64 1 2025-11-24 03:46:02.937 00:05:08.667 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-24 03:46:15.567 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 42 2944 1 2025-11-24 03:50:35.416 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58182 1 109 1 2025-11-24 03:50:35.417 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59171 1 80 1 2025-11-24 03:50:35.405 00:00:00.000 UDP 28.104.0.1:59171 -> 198.28.0.2:53 1 64 1 2025-11-24 03:50:35.405 00:00:00.000 UDP 28.104.0.1:58182 -> 198.28.0.2:53 1 64 1 2025-11-24 03:46:11.406 00:05:51.491 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-24 03:46:11.613 00:05:51.274 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-24 03:49:11.407 00:02:00.405 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-11-24 03:49:11.407 00:02:00.096 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-11-24 03:51:35.761 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57468 1 109 1 2025-11-24 03:51:35.761 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56887 1 80 1 2025-11-24 03:51:35.752 00:00:00.000 UDP 28.104.0.1:56887 -> 198.28.0.2:53 1 64 1 2025-11-24 03:51:35.752 00:00:00.000 UDP 28.104.0.1:57468 -> 198.28.0.2:53 1 64 1 2025-11-24 03:52:03.816 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-24 03:52:36.076 00:00:00.000 UDP 28.104.0.1:42167 -> 198.28.0.2:53 1 64 1 2025-11-24 03:52:36.076 00:00:00.000 UDP 28.104.0.1:40915 -> 198.28.0.2:53 1 64 1 2025-11-24 03:52:36.087 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40915 1 80 1 2025-11-24 03:52:36.087 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42167 1 109 1 2025-11-24 03:52:11.411 00:01:00.402 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-24 03:52:11.411 00:01:00.093 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-24 03:53:36.385 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37340 1 109 1 2025-11-24 03:53:36.384 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45134 1 80 1 2025-11-24 03:53:36.375 00:00:00.000 UDP 28.104.0.1:37340 -> 198.28.0.2:53 1 64 1 2025-11-24 03:53:36.375 00:00:00.000 UDP 28.104.0.1:45134 -> 198.28.0.2:53 1 64 1 2025-11-24 03:54:36.678 00:00:00.000 UDP 28.104.0.1:58755 -> 198.28.0.2:53 1 64 1 2025-11-24 03:54:36.679 00:00:00.000 UDP 28.104.0.1:48145 -> 198.28.0.2:53 1 64 1 2025-11-24 03:54:36.688 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58755 1 80 1 2025-11-24 03:54:36.689 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48145 1 109 1 2025-11-24 03:51:02.887 00:05:08.533 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-24 03:55:36.980 00:00:00.000 UDP 28.104.0.1:58271 -> 198.28.0.2:53 1 64 1 2025-11-24 03:55:36.979 00:00:00.000 UDP 28.104.0.1:33883 -> 198.28.0.2:53 1 64 1 2025-11-24 03:55:36.991 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58271 1 109 1 2025-11-24 03:55:36.990 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33883 1 80 1 2025-11-24 03:51:35.570 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 46 3284 1 2025-11-24 03:54:11.409 00:02:00.404 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-11-24 03:54:11.409 00:02:00.095 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-11-24 03:52:02.936 00:05:08.667 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-24 03:56:37.293 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56191 1 80 1 2025-11-24 03:56:37.293 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56227 1 109 1 2025-11-24 03:56:37.283 00:00:00.000 UDP 28.104.0.1:56191 -> 198.28.0.2:53 1 64 1 2025-11-24 03:56:37.283 00:00:00.000 UDP 28.104.0.1:56227 -> 198.28.0.2:53 1 64 1 2025-11-24 03:57:03.883 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-24 03:52:11.612 00:05:51.275 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-24 03:52:11.410 00:05:51.487 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-24 03:57:37.578 00:00:00.000 UDP 28.104.0.1:51114 -> 198.28.0.2:53 1 64 1 2025-11-24 03:57:37.577 00:00:00.000 UDP 28.104.0.1:54796 -> 198.28.0.2:53 1 64 1 2025-11-24 03:57:37.588 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54796 1 80 1 2025-11-24 03:57:37.589 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51114 1 109 1 2025-11-24 03:57:11.408 00:01:00.404 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-11-24 03:57:11.408 00:01:00.095 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-11-24 03:58:37.883 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49469 1 109 1 2025-11-24 03:58:37.883 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57162 1 80 1 2025-11-24 03:58:37.873 00:00:00.000 UDP 28.104.0.1:57162 -> 198.28.0.2:53 1 64 1 2025-11-24 03:58:37.873 00:00:00.000 UDP 28.104.0.1:49469 -> 198.28.0.2:53 1 64 1 Summary: total flows: 354, total bytes: 97154, total packets: 1431, avg bps: 210, avg pps: 0, avg bpp: 67 Time window: 2025-11-24 02:57:02 - 2025-11-24 03:58:37 Total flows processed: 354, passed: 354, Blocks skipped: 0, Bytes read: 36880 Sys: 0.0032s User: 0.0021s Wall: 0.0037s flows/second: 94983.6 Runtime: 0.0037s