Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-24 21:59:37.056 00:00:00.000 UDP 28.104.0.1:42199 -> 198.28.0.2:53 1 64 1 2025-11-24 21:59:37.056 00:00:00.000 UDP 28.104.0.1:37980 -> 198.28.0.2:53 1 64 1 2025-11-24 21:59:37.067 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37980 1 109 1 2025-11-24 21:59:37.067 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42199 1 80 1 2025-11-24 22:00:37.358 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37577 1 80 1 2025-11-24 22:00:37.359 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56723 1 109 1 2025-11-24 22:00:37.348 00:00:00.000 UDP 28.104.0.1:56723 -> 198.28.0.2:53 1 64 1 2025-11-24 22:00:37.348 00:00:00.000 UDP 28.104.0.1:37577 -> 198.28.0.2:53 1 64 1 2025-11-24 21:56:57.039 00:05:01.158 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2868 1 2025-11-24 21:57:03.322 00:05:08.555 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-24 21:57:11.868 00:05:00.442 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-24 21:57:11.868 00:05:00.138 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-24 22:01:37.657 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50531 1 109 1 2025-11-24 22:01:37.657 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51594 1 80 1 2025-11-24 22:01:37.645 00:00:00.000 UDP 28.104.0.1:50531 -> 198.28.0.2:53 1 64 1 2025-11-24 22:01:37.645 00:00:00.000 UDP 28.104.0.1:51594 -> 198.28.0.2:53 1 64 1 2025-11-24 21:57:12.000 00:05:51.373 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-24 21:58:03.323 00:05:08.689 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-24 22:02:25.487 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-24 22:02:37.994 00:00:00.000 UDP 28.104.0.1:42725 -> 198.28.0.2:53 1 64 1 2025-11-24 22:02:37.994 00:00:00.000 UDP 28.104.0.1:42240 -> 198.28.0.2:53 1 64 1 2025-11-24 22:02:38.010 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42725 1 109 1 2025-11-24 22:02:38.006 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42240 1 80 1 2025-11-24 21:58:11.867 00:05:51.467 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-24 22:03:38.274 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36613 1 80 1 2025-11-24 22:03:38.274 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44423 1 109 1 2025-11-24 22:03:38.263 00:00:00.000 UDP 28.104.0.1:36613 -> 198.28.0.2:53 1 64 1 2025-11-24 22:03:38.263 00:00:00.000 UDP 28.104.0.1:44423 -> 198.28.0.2:53 1 64 1 2025-11-24 22:04:38.553 00:00:00.000 UDP 28.104.0.1:57181 -> 198.28.0.2:53 1 64 1 2025-11-24 22:04:38.553 00:00:00.000 UDP 28.104.0.1:33569 -> 198.28.0.2:53 1 64 1 2025-11-24 22:04:38.563 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57181 1 109 1 2025-11-24 22:04:38.563 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33569 1 80 1 2025-11-24 22:05:38.853 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57698 1 80 1 2025-11-24 22:05:38.853 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55345 1 109 1 2025-11-24 22:05:38.844 00:00:00.000 UDP 28.104.0.1:57698 -> 198.28.0.2:53 1 64 1 2025-11-24 22:05:38.844 00:00:00.000 UDP 28.104.0.1:55345 -> 198.28.0.2:53 1 64 1 2025-11-24 22:02:07.205 00:05:10.014 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2792 1 2025-11-24 22:06:39.148 00:00:00.000 UDP 28.104.0.1:56097 -> 198.28.0.2:53 1 64 1 2025-11-24 22:06:39.148 00:00:00.000 UDP 28.104.0.1:54506 -> 198.28.0.2:53 1 64 1 2025-11-24 22:06:39.160 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54506 1 80 1 2025-11-24 22:06:39.160 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56097 1 109 1 2025-11-24 22:03:03.323 00:05:08.555 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-24 22:03:11.868 00:05:00.442 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-24 22:03:11.868 00:05:00.140 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-24 22:07:25.935 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-24 22:07:39.489 00:00:00.000 UDP 28.104.0.1:49184 -> 198.28.0.2:53 1 64 1 2025-11-24 22:07:39.489 00:00:00.000 UDP 28.104.0.1:46575 -> 198.28.0.2:53 1 64 1 2025-11-24 22:07:39.499 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46575 1 109 1 2025-11-24 22:07:39.499 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49184 1 80 1 2025-11-24 22:03:12.001 00:05:51.375 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-24 22:04:03.324 00:05:08.689 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-24 22:08:39.792 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45200 1 109 1 2025-11-24 22:08:39.792 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38737 1 80 1 2025-11-24 22:08:39.781 00:00:00.000 UDP 28.104.0.1:45200 -> 198.28.0.2:53 1 64 1 2025-11-24 22:08:39.781 00:00:00.000 UDP 28.104.0.1:38737 -> 198.28.0.2:53 1 64 1 2025-11-24 22:04:11.869 00:05:51.468 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-24 22:09:40.104 00:00:00.000 UDP 28.104.0.1:36892 -> 198.28.0.2:53 1 64 1 2025-11-24 22:09:40.104 00:00:00.000 UDP 28.104.0.1:38418 -> 198.28.0.2:53 1 64 1 2025-11-24 22:09:40.114 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36892 1 80 1 2025-11-24 22:09:40.114 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38418 1 109 1 2025-11-24 22:10:40.401 00:00:00.000 UDP 28.104.0.1:51191 -> 198.28.0.2:53 1 64 1 2025-11-24 22:10:40.401 00:00:00.000 UDP 28.104.0.1:47515 -> 198.28.0.2:53 1 64 1 2025-11-24 22:10:40.412 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47515 1 80 1 2025-11-24 22:10:40.412 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51191 1 109 1 2025-11-24 22:11:40.707 00:00:00.000 UDP 28.104.0.1:38640 -> 198.28.0.2:53 1 64 1 2025-11-24 22:11:40.707 00:00:00.000 UDP 28.104.0.1:38406 -> 198.28.0.2:53 1 64 1 2025-11-24 22:07:27.218 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2684 1 2025-11-24 22:11:40.717 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38406 1 109 1 2025-11-24 22:11:40.717 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38640 1 80 1 2025-11-24 22:12:25.844 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-24 22:12:40.974 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44490 1 80 1 2025-11-24 22:12:40.974 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46510 1 109 1 2025-11-24 22:12:40.964 00:00:00.000 UDP 28.104.0.1:44490 -> 198.28.0.2:53 1 64 1 2025-11-24 22:12:40.964 00:00:00.000 UDP 28.104.0.1:46510 -> 198.28.0.2:53 1 64 1 2025-11-24 22:09:03.325 00:05:08.554 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-24 22:09:11.870 00:05:00.444 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-24 22:09:11.870 00:05:00.139 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-24 22:13:41.263 00:00:00.000 UDP 28.104.0.1:43472 -> 198.28.0.2:53 1 64 1 2025-11-24 22:13:41.263 00:00:00.000 UDP 28.104.0.1:36649 -> 198.28.0.2:53 1 64 1 2025-11-24 22:13:41.276 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43472 1 80 1 2025-11-24 22:13:41.275 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36649 1 109 1 2025-11-24 22:09:12.002 00:05:51.377 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-24 22:10:03.326 00:05:08.687 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-24 22:14:41.558 00:00:00.000 UDP 28.104.0.1:59425 -> 198.28.0.2:53 1 64 1 2025-11-24 22:14:41.558 00:00:00.000 UDP 28.104.0.1:47342 -> 198.28.0.2:53 1 64 1 2025-11-24 22:14:41.568 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47342 1 80 1 2025-11-24 22:14:41.568 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59425 1 109 1 2025-11-24 22:10:11.869 00:05:51.469 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-24 22:15:41.890 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34657 1 80 1 2025-11-24 22:15:41.887 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49922 1 109 1 2025-11-24 22:15:41.875 00:00:00.000 UDP 28.104.0.1:34657 -> 198.28.0.2:53 1 64 1 2025-11-24 22:15:41.875 00:00:00.000 UDP 28.104.0.1:49922 -> 198.28.0.2:53 1 64 1 2025-11-24 22:16:42.224 00:00:00.000 UDP 28.104.0.1:38935 -> 198.28.0.2:53 1 64 1 2025-11-24 22:16:42.224 00:00:00.000 UDP 28.104.0.1:49509 -> 198.28.0.2:53 1 64 1 2025-11-24 22:16:42.234 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38935 1 109 1 2025-11-24 22:16:42.234 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49509 1 80 1 2025-11-24 22:12:47.227 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 33 2380 1 2025-11-24 22:17:26.256 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-24 22:17:42.518 00:00:00.000 UDP 28.104.0.1:59542 -> 198.28.0.2:53 1 64 1 2025-11-24 22:17:42.518 00:00:00.000 UDP 28.104.0.1:37551 -> 198.28.0.2:53 1 64 1 2025-11-24 22:17:42.530 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37551 1 80 1 2025-11-24 22:17:42.530 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59542 1 109 1 2025-11-24 22:18:42.834 00:00:00.000 UDP 28.104.0.1:54983 -> 198.28.0.2:53 1 64 1 2025-11-24 22:18:42.835 00:00:00.000 UDP 28.104.0.1:53948 -> 198.28.0.2:53 1 64 1 2025-11-24 22:18:42.846 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54983 1 109 1 2025-11-24 22:18:42.846 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53948 1 80 1 2025-11-24 22:15:11.870 00:05:00.445 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-24 22:15:11.870 00:05:00.140 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-24 22:15:03.329 00:05:08.554 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-24 22:19:43.145 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34924 1 80 1 2025-11-24 22:19:43.145 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57672 1 109 1 2025-11-24 22:19:43.136 00:00:00.000 UDP 28.104.0.1:57672 -> 198.28.0.2:53 1 64 1 2025-11-24 22:19:43.136 00:00:00.000 UDP 28.104.0.1:34924 -> 198.28.0.2:53 1 64 1 2025-11-24 22:15:12.004 00:05:51.375 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-24 22:16:03.328 00:05:08.688 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-24 22:20:43.424 00:00:00.000 UDP 28.104.0.1:47107 -> 198.28.0.2:53 1 64 1 2025-11-24 22:20:43.424 00:00:00.000 UDP 28.104.0.1:58631 -> 198.28.0.2:53 1 64 1 2025-11-24 22:20:43.435 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58631 1 109 1 2025-11-24 22:20:43.435 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47107 1 80 1 2025-11-24 22:16:11.870 00:05:51.469 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-24 22:21:43.718 00:00:00.000 UDP 28.104.0.1:40667 -> 198.28.0.2:53 1 64 1 2025-11-24 22:21:43.718 00:00:00.000 UDP 28.104.0.1:42493 -> 198.28.0.2:53 1 64 1 2025-11-24 22:21:43.729 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42493 1 109 1 2025-11-24 22:21:43.729 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40667 1 80 1 2025-11-24 22:18:07.233 00:05:10.009 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2676 1 2025-11-24 22:22:25.995 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-24 22:22:44.039 00:00:00.000 UDP 28.104.0.1:38575 -> 198.28.0.2:53 1 64 1 2025-11-24 22:22:44.039 00:00:00.000 UDP 28.104.0.1:49109 -> 198.28.0.2:53 1 64 1 2025-11-24 22:22:44.051 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38575 1 80 1 2025-11-24 22:22:44.051 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49109 1 109 1 2025-11-24 22:23:44.303 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57258 1 109 1 2025-11-24 22:23:44.303 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55963 1 80 1 2025-11-24 22:23:44.293 00:00:00.000 UDP 28.104.0.1:55963 -> 198.28.0.2:53 1 64 1 2025-11-24 22:23:44.293 00:00:00.000 UDP 28.104.0.1:57258 -> 198.28.0.2:53 1 64 1 2025-11-24 22:24:44.544 00:00:00.000 UDP 28.104.0.1:35676 -> 198.28.0.2:53 1 64 1 2025-11-24 22:24:44.544 00:00:00.000 UDP 28.104.0.1:57942 -> 198.28.0.2:53 1 64 1 2025-11-24 22:24:44.555 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57942 1 109 1 2025-11-24 22:24:44.555 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35676 1 80 1 2025-11-24 22:21:03.330 00:05:08.554 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-24 22:21:11.874 00:05:00.443 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-24 22:21:11.874 00:05:00.138 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-24 22:25:44.846 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58896 1 80 1 2025-11-24 22:25:44.846 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57097 1 109 1 2025-11-24 22:25:44.836 00:00:00.000 UDP 28.104.0.1:57097 -> 198.28.0.2:53 1 64 1 2025-11-24 22:25:44.836 00:00:00.000 UDP 28.104.0.1:58896 -> 198.28.0.2:53 1 64 1 2025-11-24 22:21:12.006 00:05:51.375 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-24 22:22:03.330 00:05:08.687 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-24 22:26:45.138 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55387 1 80 1 2025-11-24 22:26:45.137 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59991 1 109 1 2025-11-24 22:26:45.127 00:00:00.000 UDP 28.104.0.1:59991 -> 198.28.0.2:53 1 64 1 2025-11-24 22:26:45.128 00:00:00.000 UDP 28.104.0.1:55387 -> 198.28.0.2:53 1 64 1 2025-11-24 22:22:11.872 00:05:51.470 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-24 22:27:26.172 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-24 22:23:27.242 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2828 1 2025-11-24 22:27:45.391 00:00:00.000 UDP 28.104.0.1:36000 -> 198.28.0.2:53 1 64 1 2025-11-24 22:27:45.391 00:00:00.000 UDP 28.104.0.1:45786 -> 198.28.0.2:53 1 64 1 2025-11-24 22:27:45.402 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45786 1 109 1 2025-11-24 22:27:45.402 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36000 1 80 1 2025-11-24 22:28:45.680 00:00:00.000 UDP 28.104.0.1:56318 -> 198.28.0.2:53 1 64 1 2025-11-24 22:28:45.680 00:00:00.000 UDP 28.104.0.1:44780 -> 198.28.0.2:53 1 64 1 2025-11-24 22:28:45.690 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44780 1 109 1 2025-11-24 22:28:45.690 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56318 1 80 1 2025-11-24 22:29:45.973 00:00:00.000 UDP 28.104.0.1:60643 -> 198.28.0.2:53 1 64 1 2025-11-24 22:29:45.973 00:00:00.000 UDP 28.104.0.1:57357 -> 198.28.0.2:53 1 64 1 2025-11-24 22:29:45.985 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57357 1 109 1 2025-11-24 22:29:45.985 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60643 1 80 1 2025-11-24 22:30:46.279 00:00:00.000 UDP 28.104.0.1:49266 -> 198.28.0.2:53 1 64 1 2025-11-24 22:30:46.279 00:00:00.000 UDP 28.104.0.1:43134 -> 198.28.0.2:53 1 64 1 2025-11-24 22:30:46.288 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49266 1 80 1 2025-11-24 22:30:46.288 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43134 1 109 1 2025-11-24 22:27:11.874 00:05:00.443 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-24 22:27:11.874 00:05:00.137 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-24 22:27:03.331 00:05:08.554 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-24 22:31:46.538 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53249 1 109 1 2025-11-24 22:31:46.538 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55861 1 80 1 2025-11-24 22:31:46.527 00:00:00.000 UDP 28.104.0.1:53249 -> 198.28.0.2:53 1 64 1 2025-11-24 22:31:46.527 00:00:00.000 UDP 28.104.0.1:55861 -> 198.28.0.2:53 1 64 1 2025-11-24 22:27:12.006 00:05:51.376 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-24 22:28:03.333 00:05:08.687 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-24 22:32:26.102 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-24 22:32:46.793 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37498 1 109 1 2025-11-24 22:32:46.792 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52908 1 80 1 2025-11-24 22:32:46.782 00:00:00.000 UDP 28.104.0.1:52908 -> 198.28.0.2:53 1 64 1 2025-11-24 22:32:46.783 00:00:00.000 UDP 28.104.0.1:37498 -> 198.28.0.2:53 1 64 1 2025-11-24 22:28:47.245 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2876 1 2025-11-24 22:28:11.874 00:05:51.469 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-24 22:33:47.091 00:00:00.000 UDP 28.104.0.1:46387 -> 198.28.0.2:53 1 64 1 2025-11-24 22:33:47.091 00:00:00.000 UDP 28.104.0.1:60132 -> 198.28.0.2:53 1 64 1 2025-11-24 22:33:47.102 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60132 1 109 1 2025-11-24 22:33:47.102 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46387 1 80 1 2025-11-24 22:34:47.385 00:00:00.000 UDP 28.104.0.1:34816 -> 198.28.0.2:53 1 64 1 2025-11-24 22:34:47.386 00:00:00.000 UDP 28.104.0.1:55841 -> 198.28.0.2:53 1 64 1 2025-11-24 22:34:47.394 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55841 1 80 1 2025-11-24 22:34:47.394 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34816 1 109 1 2025-11-24 22:35:47.678 00:00:00.000 UDP 28.104.0.1:58394 -> 198.28.0.2:53 1 64 1 2025-11-24 22:35:47.678 00:00:00.000 UDP 28.104.0.1:47891 -> 198.28.0.2:53 1 64 1 2025-11-24 22:35:47.688 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58394 1 80 1 2025-11-24 22:35:47.689 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47891 1 109 1 2025-11-24 22:36:48.017 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33517 1 80 1 2025-11-24 22:36:48.017 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59260 1 109 1 2025-11-24 22:36:48.006 00:00:00.000 UDP 28.104.0.1:59260 -> 198.28.0.2:53 1 64 1 2025-11-24 22:36:48.007 00:00:00.000 UDP 28.104.0.1:33517 -> 198.28.0.2:53 1 64 1 2025-11-24 22:33:11.875 00:05:00.442 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-24 22:33:11.875 00:05:00.137 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-24 22:33:03.333 00:05:08.554 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-24 22:37:26.435 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-24 22:37:48.305 00:00:00.000 UDP 28.104.0.1:38446 -> 198.28.0.2:53 1 64 1 2025-11-24 22:37:48.305 00:00:00.000 UDP 28.104.0.1:52752 -> 198.28.0.2:53 1 64 1 2025-11-24 22:37:48.315 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52752 1 80 1 2025-11-24 22:37:48.315 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38446 1 109 1 2025-11-24 22:33:12.009 00:05:51.374 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-24 22:34:03.332 00:05:08.688 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-24 22:34:07.252 00:05:10.013 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2956 1 2025-11-24 22:38:48.594 00:00:00.000 UDP 28.104.0.1:48856 -> 198.28.0.2:53 1 64 1 2025-11-24 22:38:48.594 00:00:00.000 UDP 28.104.0.1:52514 -> 198.28.0.2:53 1 64 1 2025-11-24 22:38:48.605 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48856 1 80 1 2025-11-24 22:38:48.605 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52514 1 109 1 2025-11-24 22:34:11.876 00:05:51.467 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-24 22:39:48.884 00:00:00.000 UDP 28.104.0.1:51766 -> 198.28.0.2:53 1 64 1 2025-11-24 22:39:48.884 00:00:00.000 UDP 28.104.0.1:42172 -> 198.28.0.2:53 1 64 1 2025-11-24 22:39:48.896 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51766 1 109 1 2025-11-24 22:39:48.894 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42172 1 80 1 2025-11-24 22:40:49.184 00:00:00.000 UDP 28.104.0.1:56541 -> 198.28.0.2:53 1 64 1 2025-11-24 22:40:49.184 00:00:00.000 UDP 28.104.0.1:45608 -> 198.28.0.2:53 1 64 1 2025-11-24 22:40:49.196 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56541 1 109 1 2025-11-24 22:40:49.196 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45608 1 80 1 2025-11-24 22:41:49.436 00:00:00.000 UDP 28.104.0.1:59691 -> 198.28.0.2:53 1 64 1 2025-11-24 22:41:49.436 00:00:00.000 UDP 28.104.0.1:44633 -> 198.28.0.2:53 1 64 1 2025-11-24 22:41:49.446 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44633 1 109 1 2025-11-24 22:41:49.446 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59691 1 80 1 2025-11-24 22:42:26.321 00:00:00.019 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-24 22:42:49.738 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46499 1 109 1 2025-11-24 22:42:49.738 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43245 1 80 1 2025-11-24 22:42:49.728 00:00:00.000 UDP 28.104.0.1:43245 -> 198.28.0.2:53 1 64 1 2025-11-24 22:42:49.727 00:00:00.000 UDP 28.104.0.1:46499 -> 198.28.0.2:53 1 64 1 2025-11-24 22:39:03.332 00:05:08.555 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-24 22:39:11.877 00:05:00.442 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-24 22:39:11.877 00:05:00.136 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-24 22:39:27.265 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 32 2176 1 2025-11-24 22:43:50.265 00:00:00.000 UDP 28.104.0.1:46600 -> 198.28.0.2:53 1 64 1 2025-11-24 22:43:50.264 00:00:00.000 UDP 28.104.0.1:51056 -> 198.28.0.2:53 1 64 1 2025-11-24 22:43:50.274 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46600 1 80 1 2025-11-24 22:43:50.274 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51056 1 109 1 2025-11-24 22:39:12.011 00:05:51.374 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-24 22:40:03.333 00:05:08.688 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-24 22:44:50.557 00:00:00.000 UDP 28.104.0.1:55702 -> 198.28.0.2:53 1 64 1 2025-11-24 22:44:50.557 00:00:00.000 UDP 28.104.0.1:46016 -> 198.28.0.2:53 1 64 1 2025-11-24 22:44:50.568 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55702 1 80 1 2025-11-24 22:44:50.568 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46016 1 109 1 2025-11-24 22:40:11.876 00:05:51.468 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-24 22:45:50.822 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37965 1 80 1 2025-11-24 22:45:50.823 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57414 1 109 1 2025-11-24 22:45:50.813 00:00:00.000 UDP 28.104.0.1:57414 -> 198.28.0.2:53 1 64 1 2025-11-24 22:45:50.813 00:00:00.000 UDP 28.104.0.1:37965 -> 198.28.0.2:53 1 64 1 2025-11-24 22:46:51.163 00:00:00.000 UDP 28.104.0.1:42656 -> 198.28.0.2:53 1 64 1 2025-11-24 22:46:51.163 00:00:00.000 UDP 28.104.0.1:35879 -> 198.28.0.2:53 1 64 1 2025-11-24 22:46:51.172 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42656 1 80 1 2025-11-24 22:46:51.172 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35879 1 109 1 2025-11-24 22:47:26.518 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-24 22:47:51.475 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43176 1 80 1 2025-11-24 22:47:51.475 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54473 1 109 1 2025-11-24 22:47:51.464 00:00:00.000 UDP 28.104.0.1:54473 -> 198.28.0.2:53 1 64 1 2025-11-24 22:47:51.464 00:00:00.000 UDP 28.104.0.1:43176 -> 198.28.0.2:53 1 64 1 2025-11-24 22:48:51.778 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41819 1 80 1 2025-11-24 22:48:51.778 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41838 1 109 1 2025-11-24 22:48:51.768 00:00:00.000 UDP 28.104.0.1:41838 -> 198.28.0.2:53 1 64 1 2025-11-24 22:48:51.767 00:00:00.000 UDP 28.104.0.1:41819 -> 198.28.0.2:53 1 64 1 2025-11-24 22:44:47.271 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 34 2444 1 2025-11-24 22:45:11.877 00:05:00.442 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-24 22:45:11.877 00:05:00.137 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-24 22:45:03.334 00:05:08.557 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-24 22:49:52.079 00:00:00.000 UDP 28.104.0.1:40227 -> 198.28.0.2:53 1 64 1 2025-11-24 22:49:52.079 00:00:00.000 UDP 28.104.0.1:36827 -> 198.28.0.2:53 1 64 1 2025-11-24 22:49:52.089 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40227 1 109 1 2025-11-24 22:49:52.089 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36827 1 80 1 2025-11-24 22:45:12.012 00:05:51.375 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-24 22:46:03.335 00:05:08.687 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-24 22:50:52.373 00:00:00.000 UDP 28.104.0.1:60723 -> 198.28.0.2:53 1 64 1 2025-11-24 22:50:52.372 00:00:00.000 UDP 28.104.0.1:53152 -> 198.28.0.2:53 1 64 1 2025-11-24 22:50:52.385 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53152 1 109 1 2025-11-24 22:50:52.383 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60723 1 80 1 2025-11-24 22:46:11.878 00:05:51.477 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-24 22:51:52.680 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51892 1 80 1 2025-11-24 22:51:52.680 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60196 1 109 1 2025-11-24 22:51:52.669 00:00:00.000 UDP 28.104.0.1:51892 -> 198.28.0.2:53 1 64 1 2025-11-24 22:51:52.670 00:00:00.000 UDP 28.104.0.1:60196 -> 198.28.0.2:53 1 64 1 2025-11-24 22:52:26.659 00:00:00.031 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-24 22:52:52.963 00:00:00.000 UDP 28.104.0.1:45763 -> 198.28.0.2:53 1 64 1 2025-11-24 22:52:52.964 00:00:00.000 UDP 28.104.0.1:35921 -> 198.28.0.2:53 1 64 1 2025-11-24 22:52:52.974 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35921 1 80 1 2025-11-24 22:52:52.974 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45763 1 109 1 2025-11-24 22:53:53.267 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34887 1 109 1 2025-11-24 22:53:53.267 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54458 1 80 1 2025-11-24 22:53:53.257 00:00:00.000 UDP 28.104.0.1:34887 -> 198.28.0.2:53 1 64 1 2025-11-24 22:53:53.257 00:00:00.000 UDP 28.104.0.1:54458 -> 198.28.0.2:53 1 64 1 2025-11-24 22:50:07.277 00:05:10.009 OSPF 28.0.2.1:0 -> 224.0.0.5:0 42 3020 1 2025-11-24 22:54:53.554 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45673 1 109 1 2025-11-24 22:54:53.556 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46283 1 80 1 2025-11-24 22:54:53.544 00:00:00.000 UDP 28.104.0.1:45673 -> 198.28.0.2:53 1 64 1 2025-11-24 22:54:53.545 00:00:00.000 UDP 28.104.0.1:46283 -> 198.28.0.2:53 1 64 1 2025-11-24 22:51:11.882 00:05:00.439 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-24 22:51:11.882 00:05:00.136 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-24 22:51:03.336 00:05:08.566 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-24 22:55:53.847 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38923 1 109 1 2025-11-24 22:55:53.847 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35496 1 80 1 2025-11-24 22:55:53.838 00:00:00.000 UDP 28.104.0.1:38923 -> 198.28.0.2:53 1 64 1 2025-11-24 22:55:53.838 00:00:00.000 UDP 28.104.0.1:35496 -> 198.28.0.2:53 1 64 1 2025-11-24 22:51:12.012 00:05:51.380 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-24 22:52:03.339 00:05:08.698 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-24 22:56:54.143 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34947 1 80 1 2025-11-24 22:56:54.143 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54448 1 109 1 2025-11-24 22:56:54.134 00:00:00.000 UDP 28.104.0.1:54448 -> 198.28.0.2:53 1 64 1 2025-11-24 22:56:54.133 00:00:00.000 UDP 28.104.0.1:34947 -> 198.28.0.2:53 1 64 1 2025-11-24 22:52:11.882 00:05:51.470 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-24 22:57:26.753 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-24 22:57:54.432 00:00:00.000 UDP 28.104.0.1:51857 -> 198.28.0.2:53 1 64 1 2025-11-24 22:57:54.432 00:00:00.000 UDP 28.104.0.1:34066 -> 198.28.0.2:53 1 64 1 2025-11-24 22:57:54.442 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51857 1 109 1 2025-11-24 22:57:54.442 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34066 1 80 1 Summary: total flows: 319, total bytes: 95707, total packets: 1411, avg bps: 208, avg pps: 0, avg bpp: 67 Time window: 2025-11-24 21:56:57 - 2025-11-24 22:58:03 Total flows processed: 319, passed: 319, Blocks skipped: 0, Bytes read: 33240 Sys: 0.0049s User: 0.0016s Wall: 0.0037s flows/second: 85450.4 Runtime: 0.0038s