Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-26 04:59:03.407 00:00:00.000 UDP 28.104.0.1:58576 -> 198.28.0.2:53 1 64 1 2025-11-26 04:59:03.407 00:00:00.000 UDP 28.104.0.1:50896 -> 198.28.0.2:53 1 64 1 2025-11-26 04:59:03.417 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50896 1 109 1 2025-11-26 04:59:03.417 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58576 1 80 1 2025-11-26 04:54:12.603 00:06:00.272 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-26 05:00:03.704 00:00:00.000 UDP 28.104.0.1:58349 -> 198.28.0.2:53 1 64 1 2025-11-26 05:00:03.704 00:00:00.000 UDP 28.104.0.1:53658 -> 198.28.0.2:53 1 64 1 2025-11-26 05:00:03.714 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53658 1 80 1 2025-11-26 05:00:03.714 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58349 1 109 1 2025-11-26 05:01:03.992 00:00:00.000 UDP 28.104.0.1:34195 -> 198.28.0.2:53 1 64 1 2025-11-26 05:01:03.992 00:00:00.000 UDP 28.104.0.1:34725 -> 198.28.0.2:53 1 64 1 2025-11-26 04:56:12.616 00:05:51.441 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-26 05:01:04.003 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34195 1 109 1 2025-11-26 05:01:04.003 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34725 1 80 1 2025-11-26 04:57:12.607 00:05:00.410 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-26 04:57:12.711 00:05:51.345 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-26 05:02:04.391 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53765 1 80 1 2025-11-26 05:02:04.391 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59458 1 109 1 2025-11-26 05:02:04.382 00:00:00.000 UDP 28.104.0.1:59458 -> 198.28.0.2:53 1 64 1 2025-11-26 04:57:12.701 00:05:51.406 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-26 04:57:12.606 00:05:51.461 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-26 05:02:04.382 00:00:00.000 UDP 28.104.0.1:53765 -> 198.28.0.2:53 1 64 1 2025-11-26 05:03:04.666 00:00:00.000 UDP 28.104.0.1:48634 -> 198.28.0.2:53 1 64 1 2025-11-26 05:03:04.666 00:00:00.000 UDP 28.104.0.1:55722 -> 198.28.0.2:53 1 64 1 2025-11-26 05:03:02.933 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-26 05:03:04.676 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55722 1 80 1 2025-11-26 05:03:04.676 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48634 1 109 1 2025-11-26 05:04:04.957 00:00:00.000 UDP 28.104.0.1:34442 -> 198.28.0.2:53 1 64 1 2025-11-26 05:04:04.956 00:00:00.000 UDP 28.104.0.1:33483 -> 198.28.0.2:53 1 64 1 2025-11-26 04:59:49.706 00:05:10.927 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2840 1 2025-11-26 05:04:04.967 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33483 1 80 1 2025-11-26 05:04:04.967 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34442 1 109 1 2025-11-26 05:05:05.274 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47896 1 80 1 2025-11-26 05:05:05.274 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37260 1 109 1 2025-11-26 05:05:05.263 00:00:00.000 UDP 28.104.0.1:37260 -> 198.28.0.2:53 1 64 1 2025-11-26 05:05:05.263 00:00:00.000 UDP 28.104.0.1:47896 -> 198.28.0.2:53 1 64 1 2025-11-26 05:06:05.566 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60198 1 80 1 2025-11-26 05:06:05.566 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49054 1 109 1 2025-11-26 05:06:05.556 00:00:00.000 UDP 28.104.0.1:49054 -> 198.28.0.2:53 1 64 1 2025-11-26 05:06:05.555 00:00:00.000 UDP 28.104.0.1:60198 -> 198.28.0.2:53 1 64 1 2025-11-26 05:01:12.606 00:06:00.272 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-26 05:07:05.816 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53255 1 109 1 2025-11-26 05:02:12.617 00:05:51.440 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-26 05:07:05.816 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49293 1 80 1 2025-11-26 05:07:05.806 00:00:00.000 UDP 28.104.0.1:53255 -> 198.28.0.2:53 1 64 1 2025-11-26 05:07:05.806 00:00:00.000 UDP 28.104.0.1:49293 -> 198.28.0.2:53 1 64 1 2025-11-26 05:03:12.608 00:05:00.409 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-26 05:03:12.702 00:05:51.406 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-26 05:08:06.079 00:00:00.000 UDP 28.104.0.1:33089 -> 198.28.0.2:53 1 64 1 2025-11-26 05:03:12.607 00:05:51.461 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-26 05:08:06.079 00:00:00.000 UDP 28.104.0.1:54705 -> 198.28.0.2:53 1 64 1 2025-11-26 05:08:03.199 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-26 05:03:12.713 00:05:51.346 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-26 05:08:06.090 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33089 1 80 1 2025-11-26 05:08:06.090 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54705 1 109 1 2025-11-26 05:09:06.369 00:00:00.000 UDP 28.104.0.1:48150 -> 198.28.0.2:53 1 64 1 2025-11-26 05:09:06.369 00:00:00.000 UDP 28.104.0.1:37912 -> 198.28.0.2:53 1 64 1 2025-11-26 05:09:06.380 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48150 1 109 1 2025-11-26 05:09:06.380 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37912 1 80 1 2025-11-26 05:05:09.711 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2620 1 2025-11-26 05:10:06.626 00:00:00.000 UDP 28.104.0.1:53415 -> 198.28.0.2:53 1 64 1 2025-11-26 05:10:06.626 00:00:00.000 UDP 28.104.0.1:51614 -> 198.28.0.2:53 1 64 1 2025-11-26 05:10:06.635 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53415 1 109 1 2025-11-26 05:10:06.635 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51614 1 80 1 2025-11-26 05:11:06.933 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38267 1 80 1 2025-11-26 05:11:06.933 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46193 1 109 1 2025-11-26 05:11:06.922 00:00:00.000 UDP 28.104.0.1:38267 -> 198.28.0.2:53 1 64 1 2025-11-26 05:11:06.922 00:00:00.000 UDP 28.104.0.1:46193 -> 198.28.0.2:53 1 64 1 2025-11-26 05:12:07.245 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43822 1 109 1 2025-11-26 05:12:07.245 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50611 1 80 1 2025-11-26 05:12:07.235 00:00:00.000 UDP 28.104.0.1:43822 -> 198.28.0.2:53 1 64 1 2025-11-26 05:12:07.235 00:00:00.000 UDP 28.104.0.1:50611 -> 198.28.0.2:53 1 64 1 2025-11-26 05:13:02.955 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-26 05:08:12.620 00:05:51.441 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-26 05:13:07.529 00:00:00.000 UDP 28.104.0.1:44039 -> 198.28.0.2:53 1 64 1 2025-11-26 05:13:07.529 00:00:00.000 UDP 28.104.0.1:39247 -> 198.28.0.2:53 1 64 1 2025-11-26 05:13:07.539 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39247 1 109 1 2025-11-26 05:13:07.539 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44039 1 80 1 2025-11-26 05:09:12.609 00:05:00.409 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-26 05:08:12.609 00:06:00.269 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-26 05:09:12.714 00:05:51.348 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-26 05:09:12.703 00:05:51.408 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-26 05:09:12.610 00:05:51.461 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-26 05:14:07.847 00:00:00.000 UDP 28.104.0.1:60509 -> 198.28.0.2:53 1 64 1 2025-11-26 05:14:07.846 00:00:00.000 UDP 28.104.0.1:59805 -> 198.28.0.2:53 1 64 1 2025-11-26 05:14:07.857 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60509 1 109 1 2025-11-26 05:14:07.857 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59805 1 80 1 2025-11-26 05:10:29.716 00:05:10.010 OSPF 28.0.2.1:0 -> 224.0.0.5:0 34 2444 1 2025-11-26 05:15:08.106 00:00:00.000 UDP 28.104.0.1:51547 -> 198.28.0.2:53 1 64 1 2025-11-26 05:15:08.106 00:00:00.000 UDP 28.104.0.1:57453 -> 198.28.0.2:53 1 64 1 2025-11-26 05:15:08.117 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57453 1 80 1 2025-11-26 05:15:08.117 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51547 1 109 1 2025-11-26 05:16:08.413 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53285 1 109 1 2025-11-26 05:16:08.413 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50945 1 80 1 2025-11-26 05:16:08.404 00:00:00.000 UDP 28.104.0.1:50945 -> 198.28.0.2:53 1 64 1 2025-11-26 05:16:08.405 00:00:00.000 UDP 28.104.0.1:53285 -> 198.28.0.2:53 1 64 1 2025-11-26 05:17:08.668 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38358 1 80 1 2025-11-26 05:17:08.669 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54624 1 109 1 2025-11-26 05:17:08.659 00:00:00.000 UDP 28.104.0.1:38358 -> 198.28.0.2:53 1 64 1 2025-11-26 05:17:08.659 00:00:00.000 UDP 28.104.0.1:54624 -> 198.28.0.2:53 1 64 1 2025-11-26 05:18:03.519 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-26 05:18:08.953 00:00:00.000 UDP 28.104.0.1:57384 -> 198.28.0.2:53 1 64 1 2025-11-26 05:18:08.953 00:00:00.000 UDP 28.104.0.1:50967 -> 198.28.0.2:53 1 64 1 2025-11-26 05:18:08.963 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57384 1 80 1 2025-11-26 05:18:08.963 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50967 1 109 1 2025-11-26 05:14:12.621 00:05:51.443 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-26 05:19:09.256 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58156 1 109 1 2025-11-26 05:19:09.256 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54768 1 80 1 2025-11-26 05:19:09.245 00:00:00.000 UDP 28.104.0.1:54768 -> 198.28.0.2:53 1 64 1 2025-11-26 05:19:09.245 00:00:00.000 UDP 28.104.0.1:58156 -> 198.28.0.2:53 1 64 1 2025-11-26 05:15:12.610 00:05:00.410 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-26 05:15:49.724 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2644 1 2025-11-26 05:15:12.724 00:05:51.340 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-26 05:15:12.713 00:05:51.400 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-26 05:15:12.610 00:05:51.463 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-26 05:20:09.542 00:00:00.000 UDP 28.104.0.1:48684 -> 198.28.0.2:53 1 64 1 2025-11-26 05:20:09.542 00:00:00.000 UDP 28.104.0.1:59723 -> 198.28.0.2:53 1 64 1 2025-11-26 05:20:09.552 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48684 1 109 1 2025-11-26 05:20:09.552 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59723 1 80 1 2025-11-26 05:15:12.610 00:06:00.270 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-26 05:21:09.835 00:00:00.000 UDP 28.104.0.1:44697 -> 198.28.0.2:53 1 64 1 2025-11-26 05:21:09.835 00:00:00.000 UDP 28.104.0.1:36333 -> 198.28.0.2:53 1 64 1 2025-11-26 05:21:09.844 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44697 1 80 1 2025-11-26 05:21:09.844 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36333 1 109 1 2025-11-26 05:22:10.124 00:00:00.000 UDP 28.104.0.1:40438 -> 198.28.0.2:53 1 64 1 2025-11-26 05:22:10.123 00:00:00.000 UDP 28.104.0.1:45669 -> 198.28.0.2:53 1 64 1 2025-11-26 05:22:10.136 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40438 1 109 1 2025-11-26 05:22:10.135 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45669 1 80 1 2025-11-26 05:23:10.416 00:00:00.000 UDP 28.104.0.1:35233 -> 198.28.0.2:53 1 64 1 2025-11-26 05:23:10.416 00:00:00.000 UDP 28.104.0.1:35531 -> 198.28.0.2:53 1 64 1 2025-11-26 05:23:03.383 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-26 05:23:10.426 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35531 1 109 1 2025-11-26 05:23:10.427 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35233 1 80 1 2025-11-26 05:24:10.713 00:00:00.000 UDP 28.104.0.1:45491 -> 198.28.0.2:53 1 64 1 2025-11-26 05:24:10.713 00:00:00.000 UDP 28.104.0.1:40146 -> 198.28.0.2:53 1 64 1 2025-11-26 05:24:10.724 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40146 1 80 1 2025-11-26 05:24:10.724 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45491 1 109 1 2025-11-26 05:25:11.042 00:00:00.000 UDP 28.104.0.1:59844 -> 198.28.0.2:53 1 64 1 2025-11-26 05:25:11.043 00:00:00.000 UDP 28.104.0.1:60397 -> 198.28.0.2:53 1 64 1 2025-11-26 05:20:12.624 00:05:51.440 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-26 05:25:11.052 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60397 1 80 1 2025-11-26 05:25:11.052 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59844 1 109 1 2025-11-26 05:21:12.614 00:05:00.408 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-26 05:21:09.728 00:05:10.002 OSPF 28.0.2.1:0 -> 224.0.0.5:0 42 2936 1 2025-11-26 05:21:12.727 00:05:51.338 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-26 05:26:11.352 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40727 1 109 1 2025-11-26 05:26:11.352 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53150 1 80 1 2025-11-26 05:21:12.716 00:05:51.398 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-26 05:21:12.614 00:05:51.460 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-26 05:26:11.341 00:00:00.000 UDP 28.104.0.1:40727 -> 198.28.0.2:53 1 64 1 2025-11-26 05:26:11.341 00:00:00.000 UDP 28.104.0.1:53150 -> 198.28.0.2:53 1 64 1 2025-11-26 05:27:11.643 00:00:00.000 UDP 28.104.0.1:45634 -> 198.28.0.2:53 1 64 1 2025-11-26 05:27:11.644 00:00:00.000 UDP 28.104.0.1:52915 -> 198.28.0.2:53 1 64 1 2025-11-26 05:27:11.654 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52915 1 109 1 2025-11-26 05:27:11.654 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45634 1 80 1 2025-11-26 05:22:12.615 00:06:00.266 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-26 05:28:11.936 00:00:00.000 UDP 28.104.0.1:35447 -> 198.28.0.2:53 1 64 1 2025-11-26 05:28:11.936 00:00:00.000 UDP 28.104.0.1:52019 -> 198.28.0.2:53 1 64 1 2025-11-26 05:28:03.568 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-26 05:28:11.947 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35447 1 80 1 2025-11-26 05:28:11.948 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52019 1 109 1 2025-11-26 05:29:12.233 00:00:00.000 UDP 28.104.0.1:50432 -> 198.28.0.2:53 1 64 1 2025-11-26 05:29:12.233 00:00:00.000 UDP 28.104.0.1:43101 -> 198.28.0.2:53 1 64 1 2025-11-26 05:29:12.241 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43101 1 80 1 2025-11-26 05:29:12.242 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50432 1 109 1 2025-11-26 05:30:12.536 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38968 1 80 1 2025-11-26 05:30:12.536 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37744 1 109 1 2025-11-26 05:30:12.525 00:00:00.000 UDP 28.104.0.1:38968 -> 198.28.0.2:53 1 64 1 2025-11-26 05:30:12.525 00:00:00.000 UDP 28.104.0.1:37744 -> 198.28.0.2:53 1 64 1 2025-11-26 05:26:29.730 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 44 3064 1 2025-11-26 05:26:12.625 00:05:51.440 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-26 05:27:12.617 00:05:00.408 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-26 05:31:12.824 00:00:00.000 UDP 28.104.0.1:43682 -> 198.28.0.2:53 1 64 1 2025-11-26 05:31:12.824 00:00:00.000 UDP 28.104.0.1:53591 -> 198.28.0.2:53 1 64 1 2025-11-26 05:31:12.833 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43682 1 109 1 2025-11-26 05:31:12.832 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53591 1 80 1 2025-11-26 05:27:12.719 00:05:51.396 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-26 05:27:12.615 00:05:51.460 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-26 05:27:12.729 00:05:51.336 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-26 05:32:13.115 00:00:00.000 UDP 28.104.0.1:46997 -> 198.28.0.2:53 1 64 1 2025-11-26 05:32:13.115 00:00:00.000 UDP 28.104.0.1:45287 -> 198.28.0.2:53 1 64 1 2025-11-26 05:32:13.125 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45287 1 109 1 2025-11-26 05:32:13.125 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46997 1 80 1 2025-11-26 05:33:03.864 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-26 05:33:13.418 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45222 1 80 1 2025-11-26 05:33:13.418 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53317 1 109 1 2025-11-26 05:33:13.407 00:00:00.000 UDP 28.104.0.1:45222 -> 198.28.0.2:53 1 64 1 2025-11-26 05:33:13.407 00:00:00.000 UDP 28.104.0.1:53317 -> 198.28.0.2:53 1 64 1 2025-11-26 05:34:13.699 00:00:00.000 UDP 28.104.0.1:35098 -> 198.28.0.2:53 1 64 1 2025-11-26 05:29:12.615 00:06:00.266 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-26 05:34:13.699 00:00:00.000 UDP 28.104.0.1:49116 -> 198.28.0.2:53 1 64 1 2025-11-26 05:34:13.709 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49116 1 80 1 2025-11-26 05:34:13.710 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35098 1 109 1 2025-11-26 05:35:14.111 00:00:00.000 UDP 28.104.0.1:34485 -> 198.28.0.2:53 1 64 1 2025-11-26 05:35:14.111 00:00:00.000 UDP 28.104.0.1:45448 -> 198.28.0.2:53 1 64 1 2025-11-26 05:35:14.121 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34485 1 109 1 2025-11-26 05:35:14.121 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45448 1 80 1 2025-11-26 05:31:49.738 00:05:10.001 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2584 1 2025-11-26 05:36:14.414 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50638 1 109 1 2025-11-26 05:36:14.413 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59521 1 80 1 2025-11-26 05:36:14.404 00:00:00.000 UDP 28.104.0.1:50638 -> 198.28.0.2:53 1 64 1 2025-11-26 05:36:14.404 00:00:00.000 UDP 28.104.0.1:59521 -> 198.28.0.2:53 1 64 1 2025-11-26 05:32:12.627 00:05:51.441 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-26 05:37:14.665 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40092 1 109 1 2025-11-26 05:37:14.665 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46136 1 80 1 2025-11-26 05:37:14.655 00:00:00.000 UDP 28.104.0.1:40092 -> 198.28.0.2:53 1 64 1 2025-11-26 05:37:14.655 00:00:00.000 UDP 28.104.0.1:46136 -> 198.28.0.2:53 1 64 1 2025-11-26 05:33:12.618 00:05:00.408 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-26 05:38:03.657 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-26 05:33:12.731 00:05:51.336 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-26 05:33:12.722 00:05:51.396 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-26 05:33:12.618 00:05:51.460 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-26 05:38:16.090 00:00:00.000 UDP 28.104.0.1:38794 -> 198.28.0.2:53 1 64 1 2025-11-26 05:38:16.090 00:00:00.000 UDP 28.104.0.1:57865 -> 198.28.0.2:53 1 64 1 2025-11-26 05:38:16.101 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57865 1 80 1 2025-11-26 05:38:16.101 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38794 1 109 1 2025-11-26 05:39:16.394 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40066 1 80 1 2025-11-26 05:39:16.394 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60594 1 109 1 2025-11-26 05:39:16.385 00:00:00.000 UDP 28.104.0.1:40066 -> 198.28.0.2:53 1 64 1 2025-11-26 05:39:16.385 00:00:00.000 UDP 28.104.0.1:60594 -> 198.28.0.2:53 1 64 1 2025-11-26 05:40:16.691 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52482 1 80 1 2025-11-26 05:40:16.691 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60105 1 109 1 2025-11-26 05:40:16.680 00:00:00.000 UDP 28.104.0.1:60105 -> 198.28.0.2:53 1 64 1 2025-11-26 05:40:16.680 00:00:00.000 UDP 28.104.0.1:52482 -> 198.28.0.2:53 1 64 1 2025-11-26 05:41:16.975 00:00:00.000 UDP 28.104.0.1:38817 -> 198.28.0.2:53 1 64 1 2025-11-26 05:41:16.975 00:00:00.000 UDP 28.104.0.1:57972 -> 198.28.0.2:53 1 64 1 2025-11-26 05:36:12.618 00:06:00.265 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-26 05:41:16.985 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38817 1 109 1 2025-11-26 05:41:16.985 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57972 1 80 1 2025-11-26 05:37:09.740 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2484 1 2025-11-26 05:42:17.280 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45985 1 109 1 2025-11-26 05:42:17.280 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43580 1 80 1 2025-11-26 05:42:17.271 00:00:00.000 UDP 28.104.0.1:45985 -> 198.28.0.2:53 1 64 1 2025-11-26 05:42:17.271 00:00:00.000 UDP 28.104.0.1:43580 -> 198.28.0.2:53 1 64 1 2025-11-26 05:43:03.806 00:00:00.029 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-26 05:38:12.630 00:05:51.439 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-26 05:43:17.584 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37986 1 109 1 2025-11-26 05:43:17.584 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50542 1 80 1 2025-11-26 05:39:12.619 00:05:00.407 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-26 05:43:17.574 00:00:00.000 UDP 28.104.0.1:50542 -> 198.28.0.2:53 1 64 1 2025-11-26 05:43:17.574 00:00:00.000 UDP 28.104.0.1:37986 -> 198.28.0.2:53 1 64 1 2025-11-26 05:39:12.727 00:05:51.392 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-26 05:39:12.619 00:05:51.460 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-26 05:39:12.738 00:05:51.332 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-26 05:44:17.882 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52258 1 80 1 2025-11-26 05:44:17.882 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58358 1 109 1 2025-11-26 05:44:17.872 00:00:00.000 UDP 28.104.0.1:58358 -> 198.28.0.2:53 1 64 1 2025-11-26 05:44:17.872 00:00:00.000 UDP 28.104.0.1:52258 -> 198.28.0.2:53 1 64 1 2025-11-26 05:45:18.183 00:00:00.000 UDP 28.104.0.1:33751 -> 198.28.0.2:53 1 64 1 2025-11-26 05:45:18.183 00:00:00.000 UDP 28.104.0.1:59393 -> 198.28.0.2:53 1 64 1 2025-11-26 05:45:18.194 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59393 1 80 1 2025-11-26 05:45:18.194 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33751 1 109 1 2025-11-26 05:46:18.488 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33639 1 80 1 2025-11-26 05:46:18.489 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35698 1 109 1 2025-11-26 05:46:18.478 00:00:00.000 UDP 28.104.0.1:33639 -> 198.28.0.2:53 1 64 1 2025-11-26 05:46:18.478 00:00:00.000 UDP 28.104.0.1:35698 -> 198.28.0.2:53 1 64 1 2025-11-26 05:42:29.744 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2588 1 2025-11-26 05:47:18.764 00:00:00.000 UDP 28.104.0.1:56511 -> 198.28.0.2:53 1 64 1 2025-11-26 05:47:18.764 00:00:00.000 UDP 28.104.0.1:58161 -> 198.28.0.2:53 1 64 1 2025-11-26 05:47:18.776 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56511 1 80 1 2025-11-26 05:47:18.776 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58161 1 109 1 2025-11-26 05:48:04.495 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-26 05:43:12.620 00:06:00.269 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-26 05:48:19.066 00:00:00.000 UDP 28.104.0.1:48019 -> 198.28.0.2:53 1 64 1 2025-11-26 05:48:19.065 00:00:00.000 UDP 28.104.0.1:42337 -> 198.28.0.2:53 1 64 1 2025-11-26 05:48:19.075 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42337 1 109 1 2025-11-26 05:48:19.077 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48019 1 80 1 2025-11-26 05:44:12.630 00:05:51.439 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-26 05:45:12.621 00:05:00.407 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-26 05:49:19.369 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41318 1 80 1 2025-11-26 05:49:19.369 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59693 1 109 1 2025-11-26 05:49:19.359 00:00:00.000 UDP 28.104.0.1:41318 -> 198.28.0.2:53 1 64 1 2025-11-26 05:49:19.359 00:00:00.000 UDP 28.104.0.1:59693 -> 198.28.0.2:53 1 64 1 2025-11-26 05:45:12.738 00:05:51.332 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-26 05:45:12.728 00:05:51.392 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-26 05:45:12.621 00:05:51.459 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-26 05:50:19.647 00:00:00.000 UDP 28.104.0.1:60863 -> 198.28.0.2:53 1 64 1 2025-11-26 05:50:19.647 00:00:00.000 UDP 28.104.0.1:42205 -> 198.28.0.2:53 1 64 1 2025-11-26 05:50:19.658 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42205 1 80 1 2025-11-26 05:50:19.658 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60863 1 109 1 2025-11-26 05:51:19.940 00:00:00.000 UDP 28.104.0.1:55814 -> 198.28.0.2:53 1 64 1 2025-11-26 05:51:19.940 00:00:00.000 UDP 28.104.0.1:38503 -> 198.28.0.2:53 1 64 1 2025-11-26 05:51:19.950 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38503 1 109 1 2025-11-26 05:51:19.950 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55814 1 80 1 2025-11-26 05:47:49.753 00:05:10.013 OSPF 28.0.2.1:0 -> 224.0.0.5:0 44 3164 1 2025-11-26 05:52:20.254 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53623 1 109 1 2025-11-26 05:52:20.254 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59721 1 80 1 2025-11-26 05:52:20.243 00:00:00.000 UDP 28.104.0.1:53623 -> 198.28.0.2:53 1 64 1 2025-11-26 05:52:20.243 00:00:00.000 UDP 28.104.0.1:59721 -> 198.28.0.2:53 1 64 1 2025-11-26 05:53:04.151 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-26 05:53:20.543 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58715 1 109 1 2025-11-26 05:53:20.543 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52369 1 80 1 2025-11-26 05:53:20.533 00:00:00.000 UDP 28.104.0.1:58715 -> 198.28.0.2:53 1 64 1 2025-11-26 05:53:20.533 00:00:00.000 UDP 28.104.0.1:52369 -> 198.28.0.2:53 1 64 1 2025-11-26 05:54:20.796 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55960 1 80 1 2025-11-26 05:54:20.797 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53434 1 109 1 2025-11-26 05:54:20.787 00:00:00.000 UDP 28.104.0.1:55960 -> 198.28.0.2:53 1 64 1 2025-11-26 05:54:20.787 00:00:00.000 UDP 28.104.0.1:53434 -> 198.28.0.2:53 1 64 1 2025-11-26 05:50:12.634 00:05:51.437 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-26 05:51:12.624 00:05:00.403 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-26 05:50:12.624 00:06:00.266 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-26 05:55:21.115 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40989 1 109 1 2025-11-26 05:55:21.115 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54794 1 80 1 2025-11-26 05:55:21.105 00:00:00.000 UDP 28.104.0.1:40989 -> 198.28.0.2:53 1 64 1 2025-11-26 05:55:21.106 00:00:00.000 UDP 28.104.0.1:54794 -> 198.28.0.2:53 1 64 1 2025-11-26 05:51:12.738 00:05:51.333 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-26 05:51:12.728 00:05:51.393 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-26 05:51:12.624 00:05:51.457 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-26 05:56:21.393 00:00:00.000 UDP 28.104.0.1:34512 -> 198.28.0.2:53 1 64 1 2025-11-26 05:56:21.393 00:00:00.000 UDP 28.104.0.1:55044 -> 198.28.0.2:53 1 64 1 2025-11-26 05:56:21.403 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34512 1 109 1 2025-11-26 05:56:21.403 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55044 1 80 1 2025-11-26 05:53:09.767 00:05:00.505 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2812 1 2025-11-26 05:57:21.692 00:00:00.000 UDP 28.104.0.1:38804 -> 198.28.0.2:53 1 64 1 2025-11-26 05:57:21.692 00:00:00.000 UDP 28.104.0.1:56922 -> 198.28.0.2:53 1 64 1 2025-11-26 05:57:21.703 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56922 1 80 1 2025-11-26 05:57:21.703 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38804 1 109 1 2025-11-26 05:58:04.091 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-26 05:58:21.981 00:00:00.000 UDP 28.104.0.1:48117 -> 198.28.0.2:53 1 64 1 2025-11-26 05:58:21.980 00:00:00.000 UDP 28.104.0.1:57670 -> 198.28.0.2:53 1 64 1 2025-11-26 05:58:21.990 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57670 1 80 1 2025-11-26 05:58:21.990 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48117 1 109 1 Summary: total flows: 322, total bytes: 96873, total packets: 1429, avg bps: 201, avg pps: 0, avg bpp: 67 Time window: 2025-11-26 04:54:12 - 2025-11-26 05:58:21 Total flows processed: 322, passed: 322, Blocks skipped: 0, Bytes read: 33552 Sys: 0.0063s User: 0.0009s Wall: 0.0039s flows/second: 81620.0 Runtime: 0.0040s