Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-25 22:59:06.988 00:00:00.000 UDP 28.104.0.1:41700 -> 198.28.0.2:53 1 64 1 2025-11-25 22:59:06.988 00:00:00.000 UDP 28.104.0.1:53710 -> 198.28.0.2:53 1 64 1 2025-11-25 22:59:07.000 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53710 1 109 1 2025-11-25 22:59:07.000 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41700 1 80 1 2025-11-25 23:00:07.255 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48727 1 80 1 2025-11-25 23:00:07.255 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52413 1 109 1 2025-11-25 23:00:07.246 00:00:00.000 UDP 28.104.0.1:48727 -> 198.28.0.2:53 1 64 1 2025-11-25 23:00:07.246 00:00:00.000 UDP 28.104.0.1:52413 -> 198.28.0.2:53 1 64 1 2025-11-25 23:01:07.550 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40899 1 109 1 2025-11-25 23:01:07.550 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42686 1 80 1 2025-11-25 23:01:07.539 00:00:00.000 UDP 28.104.0.1:42686 -> 198.28.0.2:53 1 64 1 2025-11-25 23:01:07.539 00:00:00.000 UDP 28.104.0.1:40899 -> 198.28.0.2:53 1 64 1 2025-11-25 22:57:03.922 00:05:08.575 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-25 22:57:29.252 00:05:10.001 OSPF 28.0.2.1:0 -> 224.0.0.5:0 34 2440 1 2025-11-25 22:57:12.584 00:05:51.387 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-25 23:02:07.851 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60857 1 109 1 2025-11-25 23:02:07.851 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53662 1 80 1 2025-11-25 23:02:07.841 00:00:00.000 UDP 28.104.0.1:53662 -> 198.28.0.2:53 1 64 1 2025-11-25 23:02:07.841 00:00:00.000 UDP 28.104.0.1:60857 -> 198.28.0.2:53 1 64 1 2025-11-25 22:57:12.485 00:06:00.340 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-25 22:58:03.931 00:05:08.555 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-25 22:57:12.485 00:06:00.237 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-25 22:58:03.922 00:05:08.674 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-25 23:02:55.817 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-25 23:03:08.174 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53835 1 109 1 2025-11-25 23:03:08.174 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43192 1 80 1 2025-11-25 23:03:08.164 00:00:00.000 UDP 28.104.0.1:53835 -> 198.28.0.2:53 1 64 1 2025-11-25 23:03:08.164 00:00:00.000 UDP 28.104.0.1:43192 -> 198.28.0.2:53 1 64 1 2025-11-25 23:04:08.465 00:00:00.000 UDP 28.104.0.1:54823 -> 198.28.0.2:53 1 64 1 2025-11-25 23:04:08.465 00:00:00.000 UDP 28.104.0.1:53337 -> 198.28.0.2:53 1 64 1 2025-11-25 23:04:08.476 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53337 1 80 1 2025-11-25 23:04:08.476 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54823 1 109 1 2025-11-25 23:05:08.773 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41535 1 109 1 2025-11-25 23:05:08.773 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60351 1 80 1 2025-11-25 23:05:08.763 00:00:00.000 UDP 28.104.0.1:41535 -> 198.28.0.2:53 1 64 1 2025-11-25 23:05:08.763 00:00:00.000 UDP 28.104.0.1:60351 -> 198.28.0.2:53 1 64 1 2025-11-25 23:06:09.074 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37727 1 109 1 2025-11-25 23:06:09.074 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47699 1 80 1 2025-11-25 23:06:09.062 00:00:00.000 UDP 28.104.0.1:47699 -> 198.28.0.2:53 1 64 1 2025-11-25 23:06:09.062 00:00:00.000 UDP 28.104.0.1:37727 -> 198.28.0.2:53 1 64 1 2025-11-25 23:02:49.256 00:05:10.002 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2588 1 2025-11-25 23:07:09.369 00:00:00.000 UDP 28.104.0.1:45259 -> 198.28.0.2:53 1 64 1 2025-11-25 23:07:09.369 00:00:00.000 UDP 28.104.0.1:45231 -> 198.28.0.2:53 1 64 1 2025-11-25 23:07:09.380 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45231 1 109 1 2025-11-25 23:07:09.379 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45259 1 80 1 2025-11-25 23:03:03.921 00:05:08.576 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-25 23:07:55.831 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-25 23:03:12.586 00:05:51.387 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-25 23:08:09.661 00:00:00.000 UDP 28.104.0.1:33960 -> 198.28.0.2:53 1 64 1 2025-11-25 23:08:09.661 00:00:00.000 UDP 28.104.0.1:49544 -> 198.28.0.2:53 1 64 1 2025-11-25 23:08:09.673 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33960 1 80 1 2025-11-25 23:08:09.673 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49544 1 109 1 2025-11-25 23:04:03.932 00:05:08.556 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-25 23:04:03.921 00:05:08.675 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-25 23:09:09.979 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40467 1 109 1 2025-11-25 23:09:09.980 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34253 1 80 1 2025-11-25 23:09:09.970 00:00:00.000 UDP 28.104.0.1:40467 -> 198.28.0.2:53 1 64 1 2025-11-25 23:09:09.970 00:00:00.000 UDP 28.104.0.1:34253 -> 198.28.0.2:53 1 64 1 2025-11-25 23:04:12.486 00:06:00.342 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-25 23:04:12.486 00:06:00.237 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-25 23:10:10.276 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34773 1 109 1 2025-11-25 23:10:10.276 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52044 1 80 1 2025-11-25 23:10:10.266 00:00:00.000 UDP 28.104.0.1:52044 -> 198.28.0.2:53 1 64 1 2025-11-25 23:10:10.266 00:00:00.000 UDP 28.104.0.1:34773 -> 198.28.0.2:53 1 64 1 2025-11-25 23:11:10.567 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44574 1 80 1 2025-11-25 23:11:10.567 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33767 1 109 1 2025-11-25 23:11:10.559 00:00:00.000 UDP 28.104.0.1:33767 -> 198.28.0.2:53 1 64 1 2025-11-25 23:11:10.559 00:00:00.000 UDP 28.104.0.1:44574 -> 198.28.0.2:53 1 64 1 2025-11-25 23:12:10.853 00:00:00.000 UDP 28.104.0.1:52954 -> 198.28.0.2:53 1 64 1 2025-11-25 23:12:10.852 00:00:00.000 UDP 28.104.0.1:58537 -> 198.28.0.2:53 1 64 1 2025-11-25 23:12:10.863 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52954 1 80 1 2025-11-25 23:12:10.862 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58537 1 109 1 2025-11-25 23:08:09.258 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 43 3100 1 2025-11-25 23:12:55.942 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-25 23:13:11.177 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59507 1 80 1 2025-11-25 23:13:11.177 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55533 1 109 1 2025-11-25 23:13:11.168 00:00:00.000 UDP 28.104.0.1:59507 -> 198.28.0.2:53 1 64 1 2025-11-25 23:13:11.168 00:00:00.000 UDP 28.104.0.1:55533 -> 198.28.0.2:53 1 64 1 2025-11-25 23:09:03.923 00:05:08.576 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-25 23:09:12.586 00:05:51.387 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-25 23:14:11.459 00:00:00.000 UDP 28.104.0.1:53491 -> 198.28.0.2:53 1 64 1 2025-11-25 23:14:11.459 00:00:00.000 UDP 28.104.0.1:33038 -> 198.28.0.2:53 1 64 1 2025-11-25 23:14:11.469 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53491 1 80 1 2025-11-25 23:14:11.470 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33038 1 109 1 2025-11-25 23:10:03.932 00:05:08.556 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-25 23:10:03.923 00:05:08.675 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-25 23:15:11.756 00:00:00.000 UDP 28.104.0.1:50355 -> 198.28.0.2:53 1 64 1 2025-11-25 23:15:11.757 00:00:00.000 UDP 28.104.0.1:42306 -> 198.28.0.2:53 1 64 1 2025-11-25 23:15:11.768 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50355 1 80 1 2025-11-25 23:15:11.769 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42306 1 109 1 2025-11-25 23:16:12.057 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41041 1 109 1 2025-11-25 23:16:12.056 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54422 1 80 1 2025-11-25 23:16:12.047 00:00:00.000 UDP 28.104.0.1:41041 -> 198.28.0.2:53 1 64 1 2025-11-25 23:11:12.488 00:06:00.343 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-25 23:11:12.488 00:06:00.258 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-25 23:16:12.046 00:00:00.000 UDP 28.104.0.1:54422 -> 198.28.0.2:53 1 64 1 2025-11-25 23:17:12.350 00:00:00.000 UDP 28.104.0.1:37174 -> 198.28.0.2:53 1 64 1 2025-11-25 23:17:12.351 00:00:00.000 UDP 28.104.0.1:56861 -> 198.28.0.2:53 1 64 1 2025-11-25 23:17:12.361 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56861 1 109 1 2025-11-25 23:17:12.361 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37174 1 80 1 2025-11-25 23:13:29.263 00:05:10.045 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2856 1 2025-11-25 23:17:55.925 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-25 23:18:12.652 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54600 1 80 1 2025-11-25 23:18:12.655 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36727 1 109 1 2025-11-25 23:18:12.642 00:00:00.000 UDP 28.104.0.1:54600 -> 198.28.0.2:53 1 64 1 2025-11-25 23:18:12.643 00:00:00.000 UDP 28.104.0.1:36727 -> 198.28.0.2:53 1 64 1 2025-11-25 23:15:03.924 00:05:08.577 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-25 23:19:12.915 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33597 1 109 1 2025-11-25 23:19:12.915 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58061 1 80 1 2025-11-25 23:19:12.905 00:00:00.000 UDP 28.104.0.1:58061 -> 198.28.0.2:53 1 64 1 2025-11-25 23:19:12.905 00:00:00.000 UDP 28.104.0.1:33597 -> 198.28.0.2:53 1 64 1 2025-11-25 23:15:12.587 00:05:51.388 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-25 23:16:03.924 00:05:08.676 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-25 23:20:13.214 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57758 1 109 1 2025-11-25 23:20:13.214 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33435 1 80 1 2025-11-25 23:20:13.204 00:00:00.000 UDP 28.104.0.1:57758 -> 198.28.0.2:53 1 64 1 2025-11-25 23:20:13.204 00:00:00.000 UDP 28.104.0.1:33435 -> 198.28.0.2:53 1 64 1 2025-11-25 23:16:03.934 00:05:08.557 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-25 23:21:13.509 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49970 1 109 1 2025-11-25 23:21:13.507 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49319 1 80 1 2025-11-25 23:21:13.497 00:00:00.000 UDP 28.104.0.1:49319 -> 198.28.0.2:53 1 64 1 2025-11-25 23:21:13.497 00:00:00.000 UDP 28.104.0.1:49970 -> 198.28.0.2:53 1 64 1 2025-11-25 23:22:13.812 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40476 1 80 1 2025-11-25 23:22:13.812 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52829 1 109 1 2025-11-25 23:22:13.802 00:00:00.000 UDP 28.104.0.1:40476 -> 198.28.0.2:53 1 64 1 2025-11-25 23:22:13.802 00:00:00.000 UDP 28.104.0.1:52829 -> 198.28.0.2:53 1 64 1 2025-11-25 23:22:56.040 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-25 23:18:49.272 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2608 1 2025-11-25 23:18:12.489 00:06:00.345 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-25 23:23:14.066 00:00:00.000 UDP 28.104.0.1:40921 -> 198.28.0.2:53 1 64 1 2025-11-25 23:18:12.489 00:06:00.237 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-25 23:23:14.066 00:00:00.000 UDP 28.104.0.1:55041 -> 198.28.0.2:53 1 64 1 2025-11-25 23:23:14.078 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55041 1 109 1 2025-11-25 23:23:14.078 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40921 1 80 1 2025-11-25 23:24:14.369 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45509 1 80 1 2025-11-25 23:24:14.369 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44456 1 109 1 2025-11-25 23:24:14.358 00:00:00.000 UDP 28.104.0.1:44456 -> 198.28.0.2:53 1 64 1 2025-11-25 23:24:14.358 00:00:00.000 UDP 28.104.0.1:45509 -> 198.28.0.2:53 1 64 1 2025-11-25 23:21:03.925 00:05:08.577 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-25 23:25:14.668 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50503 1 80 1 2025-11-25 23:25:14.668 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37942 1 109 1 2025-11-25 23:25:14.658 00:00:00.000 UDP 28.104.0.1:50503 -> 198.28.0.2:53 1 64 1 2025-11-25 23:25:14.658 00:00:00.000 UDP 28.104.0.1:37942 -> 198.28.0.2:53 1 64 1 2025-11-25 23:21:12.590 00:05:51.386 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-25 23:26:14.913 00:00:00.000 UDP 28.104.0.1:58251 -> 198.28.0.2:53 1 64 1 2025-11-25 23:22:03.936 00:05:08.556 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-25 23:26:14.913 00:00:00.000 UDP 28.104.0.1:55107 -> 198.28.0.2:53 1 64 1 2025-11-25 23:26:14.924 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58251 1 109 1 2025-11-25 23:22:03.926 00:05:08.676 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-25 23:26:14.924 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55107 1 80 1 2025-11-25 23:27:15.228 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44321 1 109 1 2025-11-25 23:27:15.229 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44144 1 80 1 2025-11-25 23:27:15.220 00:00:00.000 UDP 28.104.0.1:44321 -> 198.28.0.2:53 1 64 1 2025-11-25 23:27:15.219 00:00:00.000 UDP 28.104.0.1:44144 -> 198.28.0.2:53 1 64 1 2025-11-25 23:27:56.370 00:00:00.032 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-25 23:28:15.521 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38396 1 80 1 2025-11-25 23:28:15.521 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35253 1 109 1 2025-11-25 23:28:15.511 00:00:00.000 UDP 28.104.0.1:35253 -> 198.28.0.2:53 1 64 1 2025-11-25 23:28:15.511 00:00:00.000 UDP 28.104.0.1:38396 -> 198.28.0.2:53 1 64 1 2025-11-25 23:24:09.278 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2812 1 2025-11-25 23:29:15.760 00:00:00.000 UDP 28.104.0.1:54252 -> 198.28.0.2:53 1 64 1 2025-11-25 23:29:15.760 00:00:00.000 UDP 28.104.0.1:40491 -> 198.28.0.2:53 1 64 1 2025-11-25 23:29:15.770 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40491 1 109 1 2025-11-25 23:29:15.770 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54252 1 80 1 2025-11-25 23:30:16.079 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39439 1 109 1 2025-11-25 23:30:16.079 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52863 1 80 1 2025-11-25 23:30:16.066 00:00:00.000 UDP 28.104.0.1:52863 -> 198.28.0.2:53 1 64 1 2025-11-25 23:30:16.066 00:00:00.000 UDP 28.104.0.1:39439 -> 198.28.0.2:53 1 64 1 2025-11-25 23:25:12.493 00:06:00.347 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-25 23:25:12.493 00:06:00.236 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-25 23:31:16.505 00:00:00.000 UDP 28.104.0.1:50154 -> 198.28.0.2:53 1 64 1 2025-11-25 23:31:16.505 00:00:00.000 UDP 28.104.0.1:53966 -> 198.28.0.2:53 1 64 1 2025-11-25 23:27:03.925 00:05:08.578 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-25 23:31:16.514 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53966 1 80 1 2025-11-25 23:31:16.515 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50154 1 109 1 2025-11-25 23:27:12.592 00:05:51.386 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-25 23:28:03.926 00:05:08.677 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-25 23:32:16.809 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56561 1 80 1 2025-11-25 23:32:16.809 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40149 1 109 1 2025-11-25 23:32:16.799 00:00:00.000 UDP 28.104.0.1:56561 -> 198.28.0.2:53 1 64 1 2025-11-25 23:32:16.800 00:00:00.000 UDP 28.104.0.1:40149 -> 198.28.0.2:53 1 64 1 2025-11-25 23:28:03.937 00:05:08.557 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-25 23:32:56.468 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-25 23:33:17.109 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33161 1 109 1 2025-11-25 23:33:17.110 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43621 1 80 1 2025-11-25 23:33:17.100 00:00:00.000 UDP 28.104.0.1:43621 -> 198.28.0.2:53 1 64 1 2025-11-25 23:33:17.100 00:00:00.000 UDP 28.104.0.1:33161 -> 198.28.0.2:53 1 64 1 2025-11-25 23:29:29.285 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 33 2380 1 2025-11-25 23:34:17.388 00:00:00.000 UDP 28.104.0.1:49909 -> 198.28.0.2:53 1 64 1 2025-11-25 23:34:17.389 00:00:00.000 UDP 28.104.0.1:43956 -> 198.28.0.2:53 1 64 1 2025-11-25 23:34:17.398 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43956 1 80 1 2025-11-25 23:34:17.398 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49909 1 109 1 2025-11-25 23:35:17.652 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57770 1 80 1 2025-11-25 23:35:17.652 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54421 1 109 1 2025-11-25 23:35:17.640 00:00:00.000 UDP 28.104.0.1:57770 -> 198.28.0.2:53 1 64 1 2025-11-25 23:35:17.641 00:00:00.000 UDP 28.104.0.1:54421 -> 198.28.0.2:53 1 64 1 2025-11-25 23:36:17.965 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60749 1 109 1 2025-11-25 23:36:17.965 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35619 1 80 1 2025-11-25 23:36:17.955 00:00:00.000 UDP 28.104.0.1:60749 -> 198.28.0.2:53 1 64 1 2025-11-25 23:36:17.954 00:00:00.000 UDP 28.104.0.1:35619 -> 198.28.0.2:53 1 64 1 2025-11-25 23:33:03.927 00:05:08.577 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-25 23:37:18.277 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38330 1 109 1 2025-11-25 23:37:18.276 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58778 1 80 1 2025-11-25 23:32:12.494 00:06:00.345 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-25 23:32:12.494 00:06:00.234 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-25 23:37:18.266 00:00:00.000 UDP 28.104.0.1:58778 -> 198.28.0.2:53 1 64 1 2025-11-25 23:37:18.267 00:00:00.000 UDP 28.104.0.1:38330 -> 198.28.0.2:53 1 64 1 2025-11-25 23:37:56.477 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-25 23:33:12.593 00:05:51.386 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-25 23:34:03.937 00:05:08.558 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-25 23:34:03.927 00:05:08.679 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-25 23:38:18.597 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39267 1 80 1 2025-11-25 23:38:18.598 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35904 1 109 1 2025-11-25 23:38:18.588 00:00:00.000 UDP 28.104.0.1:35904 -> 198.28.0.2:53 1 64 1 2025-11-25 23:38:18.588 00:00:00.000 UDP 28.104.0.1:39267 -> 198.28.0.2:53 1 64 1 2025-11-25 23:34:49.292 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 43 3136 1 2025-11-25 23:39:18.858 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55641 1 80 1 2025-11-25 23:39:18.860 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52372 1 109 1 2025-11-25 23:39:18.848 00:00:00.000 UDP 28.104.0.1:52372 -> 198.28.0.2:53 1 64 1 2025-11-25 23:39:18.848 00:00:00.000 UDP 28.104.0.1:55641 -> 198.28.0.2:53 1 64 1 2025-11-25 23:40:19.159 00:00:00.000 UDP 28.104.0.1:53696 -> 198.28.0.2:53 1 64 1 2025-11-25 23:40:19.159 00:00:00.000 UDP 28.104.0.1:53878 -> 198.28.0.2:53 1 64 1 2025-11-25 23:40:19.169 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53696 1 109 1 2025-11-25 23:40:19.169 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53878 1 80 1 2025-11-25 23:41:19.485 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34827 1 80 1 2025-11-25 23:41:19.485 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58533 1 109 1 2025-11-25 23:41:19.476 00:00:00.000 UDP 28.104.0.1:58533 -> 198.28.0.2:53 1 64 1 2025-11-25 23:41:19.476 00:00:00.000 UDP 28.104.0.1:34827 -> 198.28.0.2:53 1 64 1 2025-11-25 23:42:21.951 00:00:00.000 UDP 28.104.0.1:53253 -> 198.28.0.2:53 1 64 1 2025-11-25 23:42:21.950 00:00:00.000 UDP 28.104.0.1:47734 -> 198.28.0.2:53 1 64 1 2025-11-25 23:42:21.961 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53253 1 80 1 2025-11-25 23:42:21.961 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47734 1 109 1 2025-11-25 23:42:56.924 00:00:00.025 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-25 23:39:03.927 00:05:08.579 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-25 23:43:22.240 00:00:00.000 UDP 28.104.0.1:54367 -> 198.28.0.2:53 1 64 1 2025-11-25 23:43:22.240 00:00:00.000 UDP 28.104.0.1:57731 -> 198.28.0.2:53 1 64 1 2025-11-25 23:43:22.250 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57731 1 80 1 2025-11-25 23:43:22.250 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54367 1 109 1 2025-11-25 23:39:12.597 00:05:51.383 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-25 23:40:03.928 00:05:08.689 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-25 23:39:12.495 00:06:00.345 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-25 23:40:03.938 00:05:08.559 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-25 23:39:12.495 00:06:00.249 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-25 23:40:09.300 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2816 1 2025-11-25 23:44:22.544 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39723 1 80 1 2025-11-25 23:44:22.545 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48924 1 109 1 2025-11-25 23:44:22.535 00:00:00.000 UDP 28.104.0.1:48924 -> 198.28.0.2:53 1 64 1 2025-11-25 23:44:22.535 00:00:00.000 UDP 28.104.0.1:39723 -> 198.28.0.2:53 1 64 1 2025-11-25 23:45:22.822 00:00:00.000 UDP 28.104.0.1:48748 -> 198.28.0.2:53 1 64 1 2025-11-25 23:45:22.823 00:00:00.000 UDP 28.104.0.1:34071 -> 198.28.0.2:53 1 64 1 2025-11-25 23:45:22.833 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48748 1 109 1 2025-11-25 23:45:22.833 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34071 1 80 1 2025-11-25 23:46:27.362 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43403 1 109 1 2025-11-25 23:46:27.362 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44097 1 80 1 2025-11-25 23:46:27.351 00:00:00.000 UDP 28.104.0.1:43403 -> 198.28.0.2:53 1 64 1 2025-11-25 23:46:27.351 00:00:00.000 UDP 28.104.0.1:44097 -> 198.28.0.2:53 1 64 1 2025-11-25 23:47:27.618 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57821 1 80 1 2025-11-25 23:47:27.618 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50720 1 109 1 2025-11-25 23:47:27.609 00:00:00.000 UDP 28.104.0.1:50720 -> 198.28.0.2:53 1 64 1 2025-11-25 23:47:27.609 00:00:00.000 UDP 28.104.0.1:57821 -> 198.28.0.2:53 1 64 1 2025-11-25 23:47:56.493 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-25 23:48:27.872 00:00:00.000 UDP 28.104.0.1:37926 -> 198.28.0.2:53 1 64 1 2025-11-25 23:48:27.872 00:00:00.000 UDP 28.104.0.1:50787 -> 198.28.0.2:53 1 64 1 2025-11-25 23:48:27.881 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37926 1 80 1 2025-11-25 23:48:27.882 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50787 1 109 1 2025-11-25 23:45:03.930 00:05:08.583 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-25 23:49:28.184 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45291 1 109 1 2025-11-25 23:49:28.184 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49514 1 80 1 2025-11-25 23:49:28.173 00:00:00.000 UDP 28.104.0.1:45291 -> 198.28.0.2:53 1 64 1 2025-11-25 23:49:28.174 00:00:00.000 UDP 28.104.0.1:49514 -> 198.28.0.2:53 1 64 1 2025-11-25 23:45:29.307 00:05:10.012 OSPF 28.0.2.1:0 -> 224.0.0.5:0 42 2936 1 2025-11-25 23:45:12.606 00:05:51.378 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-25 23:46:03.930 00:05:08.680 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-25 23:46:03.939 00:05:08.563 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-25 23:50:28.469 00:00:00.000 UDP 28.104.0.1:56830 -> 198.28.0.2:53 1 64 1 2025-11-25 23:50:28.469 00:00:00.000 UDP 28.104.0.1:39132 -> 198.28.0.2:53 1 64 1 2025-11-25 23:50:28.479 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39132 1 109 1 2025-11-25 23:50:28.479 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56830 1 80 1 2025-11-25 23:46:12.497 00:06:00.345 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-25 23:46:12.497 00:06:00.249 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-25 23:51:28.781 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44031 1 109 1 2025-11-25 23:51:28.781 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43152 1 80 1 2025-11-25 23:51:28.770 00:00:00.000 UDP 28.104.0.1:44031 -> 198.28.0.2:53 1 64 1 2025-11-25 23:51:28.770 00:00:00.000 UDP 28.104.0.1:43152 -> 198.28.0.2:53 1 64 1 2025-11-25 23:52:29.126 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33374 1 109 1 2025-11-25 23:52:29.126 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60455 1 80 1 2025-11-25 23:52:29.116 00:00:00.000 UDP 28.104.0.1:60455 -> 198.28.0.2:53 1 64 1 2025-11-25 23:52:29.116 00:00:00.000 UDP 28.104.0.1:33374 -> 198.28.0.2:53 1 64 1 2025-11-25 23:52:56.674 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-25 23:53:29.411 00:00:00.000 UDP 28.104.0.1:56383 -> 198.28.0.2:53 1 64 1 2025-11-25 23:53:29.411 00:00:00.000 UDP 28.104.0.1:52958 -> 198.28.0.2:53 1 64 1 2025-11-25 23:53:29.422 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56383 1 109 1 2025-11-25 23:53:29.422 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52958 1 80 1 2025-11-25 23:54:29.717 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41728 1 109 1 2025-11-25 23:54:29.717 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50125 1 80 1 2025-11-25 23:54:29.706 00:00:00.000 UDP 28.104.0.1:50125 -> 198.28.0.2:53 1 64 1 2025-11-25 23:54:29.706 00:00:00.000 UDP 28.104.0.1:41728 -> 198.28.0.2:53 1 64 1 2025-11-25 23:50:49.319 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2812 1 2025-11-25 23:51:03.935 00:05:08.578 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-25 23:55:29.968 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43124 1 80 1 2025-11-25 23:55:29.968 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49417 1 109 1 2025-11-25 23:55:29.957 00:00:00.000 UDP 28.104.0.1:49417 -> 198.28.0.2:53 1 64 1 2025-11-25 23:55:29.957 00:00:00.000 UDP 28.104.0.1:43124 -> 198.28.0.2:53 1 64 1 2025-11-25 23:51:12.600 00:05:51.387 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-25 23:52:03.945 00:05:08.559 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-25 23:52:03.935 00:05:08.676 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-25 23:56:30.269 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59455 1 109 1 2025-11-25 23:56:30.268 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37606 1 80 1 2025-11-25 23:56:30.258 00:00:00.000 UDP 28.104.0.1:37606 -> 198.28.0.2:53 1 64 1 2025-11-25 23:56:30.258 00:00:00.000 UDP 28.104.0.1:59455 -> 198.28.0.2:53 1 64 1 2025-11-25 23:57:30.604 00:00:00.000 UDP 28.104.0.1:57171 -> 198.28.0.2:53 1 64 1 2025-11-25 23:57:30.604 00:00:00.000 UDP 28.104.0.1:40554 -> 198.28.0.2:53 1 64 1 2025-11-25 23:57:30.615 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40554 1 109 1 2025-11-25 23:57:30.614 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57171 1 80 1 2025-11-25 23:57:56.876 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-25 23:53:12.503 00:06:00.345 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-25 23:53:12.503 00:06:00.247 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-25 23:58:30.905 00:00:00.000 UDP 28.104.0.1:53016 -> 198.28.0.2:53 1 64 1 2025-11-25 23:58:30.905 00:00:00.000 UDP 28.104.0.1:43539 -> 198.28.0.2:53 1 64 1 2025-11-25 23:58:30.915 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53016 1 109 1 2025-11-25 23:58:30.915 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43539 1 80 1 Summary: total flows: 321, total bytes: 97546, total packets: 1437, avg bps: 209, avg pps: 0, avg bpp: 67 Time window: 2025-11-25 22:57:03 - 2025-11-25 23:59:12 Total flows processed: 321, passed: 321, Blocks skipped: 0, Bytes read: 33448 Sys: 0.0048s User: 0.0024s Wall: 0.0041s flows/second: 78027.9 Runtime: 0.0041s