Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-27 01:59:08.549 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52710 1 80 1 2025-11-27 01:55:01.361 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 45 3088 1 2025-11-27 01:59:08.549 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38496 1 109 1 2025-11-27 01:59:08.540 00:00:00.000 UDP 28.104.0.1:38496 -> 198.28.0.2:53 1 64 1 2025-11-27 01:59:08.540 00:00:00.000 UDP 28.104.0.1:52710 -> 198.28.0.2:53 1 64 1 2025-11-27 02:00:14.733 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41703 1 80 1 2025-11-27 02:00:14.733 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49249 1 109 1 2025-11-27 02:00:14.722 00:00:00.000 UDP 28.104.0.1:41703 -> 198.28.0.2:53 1 64 1 2025-11-27 02:00:14.722 00:00:00.000 UDP 28.104.0.1:49249 -> 198.28.0.2:53 1 64 1 2025-11-27 01:56:12.993 00:05:51.417 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 01:57:04.410 00:05:08.743 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 02:01:15.053 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48851 1 80 1 2025-11-27 02:01:15.052 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44197 1 109 1 2025-11-27 02:01:15.043 00:00:00.000 UDP 28.104.0.1:48851 -> 198.28.0.2:53 1 64 1 2025-11-27 02:01:15.043 00:00:00.000 UDP 28.104.0.1:44197 -> 198.28.0.2:53 1 64 1 2025-11-27 01:57:04.460 00:05:08.684 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 01:57:12.985 00:05:00.578 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-27 01:57:12.984 00:05:51.437 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 02:02:15.358 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50590 1 109 1 2025-11-27 02:02:15.358 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33241 1 80 1 2025-11-27 02:02:15.348 00:00:00.000 UDP 28.104.0.1:50590 -> 198.28.0.2:53 1 64 1 2025-11-27 02:02:15.348 00:00:00.000 UDP 28.104.0.1:33241 -> 198.28.0.2:53 1 64 1 2025-11-27 02:03:15.649 00:00:00.000 UDP 28.104.0.1:49874 -> 198.28.0.2:53 1 64 1 2025-11-27 02:03:15.649 00:00:00.000 UDP 28.104.0.1:52446 -> 198.28.0.2:53 1 64 1 2025-11-27 02:03:15.659 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52446 1 80 1 2025-11-27 02:03:15.659 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49874 1 109 1 2025-11-27 02:03:28.378 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 02:04:15.953 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48409 1 109 1 2025-11-27 02:04:15.953 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43621 1 80 1 2025-11-27 02:04:15.942 00:00:00.000 UDP 28.104.0.1:43621 -> 198.28.0.2:53 1 64 1 2025-11-27 02:00:12.983 00:05:00.449 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-27 02:04:15.942 00:00:00.000 UDP 28.104.0.1:48409 -> 198.28.0.2:53 1 64 1 2025-11-27 02:00:21.368 00:05:10.011 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2644 1 2025-11-27 02:05:16.209 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41099 1 80 1 2025-11-27 02:05:16.209 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48203 1 109 1 2025-11-27 02:05:16.198 00:00:00.000 UDP 28.104.0.1:48203 -> 198.28.0.2:53 1 64 1 2025-11-27 02:05:16.198 00:00:00.000 UDP 28.104.0.1:41099 -> 198.28.0.2:53 1 64 1 2025-11-27 02:06:16.510 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38081 1 80 1 2025-11-27 02:06:16.510 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34236 1 109 1 2025-11-27 02:06:16.498 00:00:00.000 UDP 28.104.0.1:34236 -> 198.28.0.2:53 1 64 1 2025-11-27 02:06:16.498 00:00:00.000 UDP 28.104.0.1:38081 -> 198.28.0.2:53 1 64 1 2025-11-27 02:02:12.994 00:05:51.418 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 02:03:04.410 00:05:08.744 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 02:07:16.808 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41960 1 80 1 2025-11-27 02:07:16.808 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33083 1 109 1 2025-11-27 02:07:16.797 00:00:00.000 UDP 28.104.0.1:33083 -> 198.28.0.2:53 1 64 1 2025-11-27 02:03:04.460 00:05:08.684 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 02:03:12.983 00:05:00.580 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-27 02:07:16.797 00:00:00.000 UDP 28.104.0.1:41960 -> 198.28.0.2:53 1 64 1 2025-11-27 02:03:12.983 00:05:51.439 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 02:08:17.107 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45908 1 109 1 2025-11-27 02:08:17.107 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58407 1 80 1 2025-11-27 02:08:17.096 00:00:00.000 UDP 28.104.0.1:58407 -> 198.28.0.2:53 1 64 1 2025-11-27 02:08:17.096 00:00:00.000 UDP 28.104.0.1:45908 -> 198.28.0.2:53 1 64 1 2025-11-27 02:08:28.332 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 02:09:17.396 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40226 1 109 1 2025-11-27 02:09:17.397 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43501 1 80 1 2025-11-27 02:09:17.386 00:00:00.000 UDP 28.104.0.1:40226 -> 198.28.0.2:53 1 64 1 2025-11-27 02:09:17.386 00:00:00.000 UDP 28.104.0.1:43501 -> 198.28.0.2:53 1 64 1 2025-11-27 02:05:41.379 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2564 1 2025-11-27 02:06:12.986 00:05:00.448 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-27 02:10:17.635 00:00:00.000 UDP 28.104.0.1:49255 -> 198.28.0.2:53 1 64 1 2025-11-27 02:10:17.635 00:00:00.000 UDP 28.104.0.1:38772 -> 198.28.0.2:53 1 64 1 2025-11-27 02:10:17.645 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38772 1 80 1 2025-11-27 02:10:17.645 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49255 1 109 1 2025-11-27 02:11:17.947 00:00:00.000 UDP 28.104.0.1:48765 -> 198.28.0.2:53 1 64 1 2025-11-27 02:11:17.947 00:00:00.000 UDP 28.104.0.1:33172 -> 198.28.0.2:53 1 64 1 2025-11-27 02:11:17.959 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33172 1 109 1 2025-11-27 02:11:17.958 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48765 1 80 1 2025-11-27 02:12:18.301 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39930 1 80 1 2025-11-27 02:12:18.301 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56929 1 109 1 2025-11-27 02:12:18.292 00:00:00.000 UDP 28.104.0.1:39930 -> 198.28.0.2:53 1 64 1 2025-11-27 02:12:18.291 00:00:00.000 UDP 28.104.0.1:56929 -> 198.28.0.2:53 1 64 1 2025-11-27 02:08:12.996 00:05:51.417 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 02:09:04.412 00:05:08.743 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 02:13:19.197 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34253 1 109 1 2025-11-27 02:13:19.197 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48141 1 80 1 2025-11-27 02:09:04.462 00:05:08.684 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 02:09:12.987 00:05:00.583 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-27 02:13:19.186 00:00:00.000 UDP 28.104.0.1:48141 -> 198.28.0.2:53 1 64 1 2025-11-27 02:13:19.186 00:00:00.000 UDP 28.104.0.1:34253 -> 198.28.0.2:53 1 64 1 2025-11-27 02:13:28.593 00:00:00.015 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 02:09:12.987 00:05:51.436 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 02:14:19.482 00:00:00.000 UDP 28.104.0.1:33208 -> 198.28.0.2:53 1 64 1 2025-11-27 02:14:19.482 00:00:00.000 UDP 28.104.0.1:38021 -> 198.28.0.2:53 1 64 1 2025-11-27 02:14:19.492 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33208 1 109 1 2025-11-27 02:14:19.492 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38021 1 80 1 2025-11-27 02:11:01.384 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 33 2380 1 2025-11-27 02:15:19.785 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39864 1 80 1 2025-11-27 02:15:19.785 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55680 1 109 1 2025-11-27 02:15:19.776 00:00:00.000 UDP 28.104.0.1:55680 -> 198.28.0.2:53 1 64 1 2025-11-27 02:15:19.776 00:00:00.000 UDP 28.104.0.1:39864 -> 198.28.0.2:53 1 64 1 2025-11-27 02:12:12.988 00:05:00.451 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-27 02:16:20.075 00:00:00.000 UDP 28.104.0.1:52691 -> 198.28.0.2:53 1 64 1 2025-11-27 02:16:20.075 00:00:00.000 UDP 28.104.0.1:52752 -> 198.28.0.2:53 1 64 1 2025-11-27 02:16:20.085 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52691 1 80 1 2025-11-27 02:16:20.085 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52752 1 109 1 2025-11-27 02:17:20.383 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45791 1 80 1 2025-11-27 02:17:20.383 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48559 1 109 1 2025-11-27 02:17:20.373 00:00:00.000 UDP 28.104.0.1:48559 -> 198.28.0.2:53 1 64 1 2025-11-27 02:17:20.373 00:00:00.000 UDP 28.104.0.1:45791 -> 198.28.0.2:53 1 64 1 2025-11-27 02:14:12.997 00:05:00.002 TCP 28.151.0.1:179 -> 28.154.0.1:41239 11 667 1 2025-11-27 02:18:20.666 00:00:00.000 UDP 28.104.0.1:38090 -> 198.28.0.2:53 1 64 1 2025-11-27 02:18:20.666 00:00:00.000 UDP 28.104.0.1:50695 -> 198.28.0.2:53 1 64 1 2025-11-27 02:18:20.676 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50695 1 109 1 2025-11-27 02:18:20.676 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38090 1 80 1 2025-11-27 02:18:28.694 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 02:15:04.463 00:05:08.684 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 02:15:12.988 00:05:00.586 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-27 02:15:04.414 00:05:08.744 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 02:19:20.917 00:00:00.000 UDP 28.104.0.1:39064 -> 198.28.0.2:53 1 64 1 2025-11-27 02:19:20.917 00:00:00.000 UDP 28.104.0.1:33694 -> 198.28.0.2:53 1 64 1 2025-11-27 02:19:20.925 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33694 1 109 1 2025-11-27 02:19:20.925 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39064 1 80 1 2025-11-27 02:15:12.989 00:05:51.438 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 02:20:21.242 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55687 1 109 1 2025-11-27 02:20:21.242 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40814 1 80 1 2025-11-27 02:20:21.232 00:00:00.000 UDP 28.104.0.1:55687 -> 198.28.0.2:53 1 64 1 2025-11-27 02:20:21.232 00:00:00.000 UDP 28.104.0.1:40814 -> 198.28.0.2:53 1 64 1 2025-11-27 02:16:21.391 00:05:10.010 OSPF 28.0.2.1:0 -> 224.0.0.5:0 44 3164 1 2025-11-27 02:21:21.501 00:00:00.000 UDP 28.104.0.1:43035 -> 198.28.0.2:53 1 64 1 2025-11-27 02:21:21.501 00:00:00.000 UDP 28.104.0.1:33273 -> 198.28.0.2:53 1 64 1 2025-11-27 02:21:21.512 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33273 1 109 1 2025-11-27 02:21:21.512 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43035 1 80 1 2025-11-27 02:18:12.988 00:05:00.453 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-27 02:22:21.817 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33834 1 109 1 2025-11-27 02:22:21.817 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43383 1 80 1 2025-11-27 02:22:21.807 00:00:00.000 UDP 28.104.0.1:43383 -> 198.28.0.2:53 1 64 1 2025-11-27 02:22:21.807 00:00:00.000 UDP 28.104.0.1:33834 -> 198.28.0.2:53 1 64 1 2025-11-27 02:23:22.082 00:00:00.000 UDP 28.104.0.1:33028 -> 198.28.0.2:53 1 64 1 2025-11-27 02:23:22.082 00:00:00.000 UDP 28.104.0.1:60903 -> 198.28.0.2:53 1 64 1 2025-11-27 02:23:22.093 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60903 1 109 1 2025-11-27 02:23:22.094 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33028 1 80 1 2025-11-27 02:23:29.265 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 02:20:04.415 00:05:08.586 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 02:24:22.349 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44243 1 109 1 2025-11-27 02:24:22.348 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33784 1 80 1 2025-11-27 02:24:22.338 00:00:00.000 UDP 28.104.0.1:33784 -> 198.28.0.2:53 1 64 1 2025-11-27 02:24:22.339 00:00:00.000 UDP 28.104.0.1:44243 -> 198.28.0.2:53 1 64 1 2025-11-27 02:21:04.415 00:05:08.742 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 02:21:12.990 00:05:00.585 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-27 02:21:04.467 00:05:08.681 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 02:25:22.589 00:00:00.000 UDP 28.104.0.1:49689 -> 198.28.0.2:53 1 64 1 2025-11-27 02:25:22.589 00:00:00.000 UDP 28.104.0.1:42855 -> 198.28.0.2:53 1 64 1 2025-11-27 02:25:22.600 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42855 1 109 1 2025-11-27 02:25:22.600 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49689 1 80 1 2025-11-27 02:21:41.402 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2592 1 2025-11-27 02:21:12.989 00:05:51.438 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 02:26:22.894 00:00:00.000 UDP 28.104.0.1:41358 -> 198.28.0.2:53 1 64 1 2025-11-27 02:26:22.894 00:00:00.000 UDP 28.104.0.1:37126 -> 198.28.0.2:53 1 64 1 2025-11-27 02:26:22.904 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37126 1 109 1 2025-11-27 02:26:22.904 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41358 1 80 1 2025-11-27 02:27:23.284 00:00:00.000 UDP 28.104.0.1:43940 -> 198.28.0.2:53 1 64 1 2025-11-27 02:27:23.284 00:00:00.000 UDP 28.104.0.1:50267 -> 198.28.0.2:53 1 64 1 2025-11-27 02:27:23.294 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43940 1 80 1 2025-11-27 02:27:23.294 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50267 1 109 1 2025-11-27 02:24:12.992 00:05:00.454 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-27 02:28:23.585 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45935 1 109 1 2025-11-27 02:28:23.586 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58256 1 80 1 2025-11-27 02:28:23.574 00:00:00.000 UDP 28.104.0.1:58256 -> 198.28.0.2:53 1 64 1 2025-11-27 02:28:23.574 00:00:00.000 UDP 28.104.0.1:45935 -> 198.28.0.2:53 1 64 1 2025-11-27 02:28:28.723 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 02:29:23.856 00:00:00.000 UDP 28.104.0.1:50555 -> 198.28.0.2:53 1 64 1 2025-11-27 02:29:23.857 00:00:00.000 UDP 28.104.0.1:35687 -> 198.28.0.2:53 1 64 1 2025-11-27 02:29:23.866 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50555 1 80 1 2025-11-27 02:29:23.867 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35687 1 109 1 2025-11-27 02:26:04.416 00:05:08.585 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 02:30:24.150 00:00:00.000 UDP 28.104.0.1:49467 -> 198.28.0.2:53 1 64 1 2025-11-27 02:30:24.150 00:00:00.000 UDP 28.104.0.1:59499 -> 198.28.0.2:53 1 64 1 2025-11-27 02:30:24.161 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59499 1 80 1 2025-11-27 02:30:24.161 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49467 1 109 1 2025-11-27 02:27:01.407 00:05:10.009 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2748 1 2025-11-27 02:27:04.417 00:05:08.742 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 02:27:04.466 00:05:08.682 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 02:27:12.990 00:05:00.585 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-27 02:31:24.457 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50505 1 80 1 2025-11-27 02:31:24.457 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48744 1 109 1 2025-11-27 02:31:24.447 00:00:00.000 UDP 28.104.0.1:48744 -> 198.28.0.2:53 1 64 1 2025-11-27 02:31:24.447 00:00:00.000 UDP 28.104.0.1:50505 -> 198.28.0.2:53 1 64 1 2025-11-27 02:27:12.991 00:05:51.444 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 02:32:24.710 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59982 1 80 1 2025-11-27 02:32:24.710 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53531 1 109 1 2025-11-27 02:32:24.701 00:00:00.000 UDP 28.104.0.1:53531 -> 198.28.0.2:53 1 64 1 2025-11-27 02:32:24.701 00:00:00.000 UDP 28.104.0.1:59982 -> 198.28.0.2:53 1 64 1 2025-11-27 02:33:25.003 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51109 1 80 1 2025-11-27 02:33:25.004 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35909 1 109 1 2025-11-27 02:33:24.992 00:00:00.000 UDP 28.104.0.1:51109 -> 198.28.0.2:53 1 64 1 2025-11-27 02:33:24.992 00:00:00.000 UDP 28.104.0.1:35909 -> 198.28.0.2:53 1 64 1 2025-11-27 02:33:28.993 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 02:30:12.990 00:05:00.455 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-27 02:34:25.269 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35597 1 80 1 2025-11-27 02:34:25.269 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53099 1 109 1 2025-11-27 02:34:25.258 00:00:00.000 UDP 28.104.0.1:53099 -> 198.28.0.2:53 1 64 1 2025-11-27 02:34:25.258 00:00:00.000 UDP 28.104.0.1:35597 -> 198.28.0.2:53 1 64 1 2025-11-27 02:35:25.556 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44102 1 80 1 2025-11-27 02:35:25.556 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49847 1 109 1 2025-11-27 02:35:25.546 00:00:00.000 UDP 28.104.0.1:44102 -> 198.28.0.2:53 1 64 1 2025-11-27 02:35:25.546 00:00:00.000 UDP 28.104.0.1:49847 -> 198.28.0.2:53 1 64 1 2025-11-27 02:32:04.424 00:05:08.579 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 02:36:25.850 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32776 1 109 1 2025-11-27 02:36:25.849 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41023 1 80 1 2025-11-27 02:36:25.839 00:00:00.000 UDP 28.104.0.1:32776 -> 198.28.0.2:53 1 64 1 2025-11-27 02:36:25.839 00:00:00.000 UDP 28.104.0.1:41023 -> 198.28.0.2:53 1 64 1 2025-11-27 02:32:21.415 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2956 1 2025-11-27 02:33:04.424 00:05:08.735 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 02:33:04.474 00:05:08.675 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 02:33:12.991 00:05:00.586 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-27 02:37:26.151 00:00:00.000 UDP 28.104.0.1:38699 -> 198.28.0.2:53 1 64 1 2025-11-27 02:37:26.151 00:00:00.000 UDP 28.104.0.1:57378 -> 198.28.0.2:53 1 64 1 2025-11-27 02:37:26.161 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38699 1 80 1 2025-11-27 02:37:26.161 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57378 1 109 1 2025-11-27 02:33:12.992 00:05:51.447 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 02:38:26.414 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43674 1 109 1 2025-11-27 02:38:26.414 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38426 1 80 1 2025-11-27 02:38:26.403 00:00:00.000 UDP 28.104.0.1:38426 -> 198.28.0.2:53 1 64 1 2025-11-27 02:38:26.403 00:00:00.000 UDP 28.104.0.1:43674 -> 198.28.0.2:53 1 64 1 2025-11-27 02:38:29.175 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 02:39:26.712 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52269 1 80 1 2025-11-27 02:39:26.712 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41926 1 109 1 2025-11-27 02:39:26.702 00:00:00.000 UDP 28.104.0.1:41926 -> 198.28.0.2:53 1 64 1 2025-11-27 02:39:26.702 00:00:00.000 UDP 28.104.0.1:52269 -> 198.28.0.2:53 1 64 1 2025-11-27 02:36:12.991 00:05:00.455 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-27 02:40:26.949 00:00:00.000 UDP 28.104.0.1:50991 -> 198.28.0.2:53 1 64 1 2025-11-27 02:40:26.949 00:00:00.000 UDP 28.104.0.1:50414 -> 198.28.0.2:53 1 64 1 2025-11-27 02:40:26.959 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50414 1 80 1 2025-11-27 02:40:26.959 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50991 1 109 1 2025-11-27 02:41:27.259 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42805 1 109 1 2025-11-27 02:41:27.258 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37022 1 80 1 2025-11-27 02:41:27.249 00:00:00.000 UDP 28.104.0.1:42805 -> 198.28.0.2:53 1 64 1 2025-11-27 02:41:27.249 00:00:00.000 UDP 28.104.0.1:37022 -> 198.28.0.2:53 1 64 1 2025-11-27 02:37:41.421 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 33 2380 1 2025-11-27 02:38:04.429 00:05:08.577 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 02:42:27.554 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33932 1 109 1 2025-11-27 02:42:27.554 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38849 1 80 1 2025-11-27 02:42:27.545 00:00:00.000 UDP 28.104.0.1:33932 -> 198.28.0.2:53 1 64 1 2025-11-27 02:42:27.545 00:00:00.000 UDP 28.104.0.1:38849 -> 198.28.0.2:53 1 64 1 2025-11-27 02:39:12.993 00:05:00.590 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-27 02:39:04.480 00:05:08.672 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 02:39:04.429 00:05:08.733 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 02:43:27.850 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48521 1 80 1 2025-11-27 02:43:28.911 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 02:43:27.850 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50116 1 109 1 2025-11-27 02:43:27.840 00:00:00.000 UDP 28.104.0.1:50116 -> 198.28.0.2:53 1 64 1 2025-11-27 02:43:27.840 00:00:00.000 UDP 28.104.0.1:48521 -> 198.28.0.2:53 1 64 1 2025-11-27 02:39:12.991 00:05:51.449 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 02:44:28.128 00:00:00.000 UDP 28.104.0.1:51774 -> 198.28.0.2:53 1 64 1 2025-11-27 02:44:28.128 00:00:00.000 UDP 28.104.0.1:58011 -> 198.28.0.2:53 1 64 1 2025-11-27 02:44:28.138 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51774 1 80 1 2025-11-27 02:44:28.138 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58011 1 109 1 2025-11-27 02:45:28.393 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49893 1 80 1 2025-11-27 02:45:28.394 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57070 1 109 1 2025-11-27 02:45:28.385 00:00:00.000 UDP 28.104.0.1:49893 -> 198.28.0.2:53 1 64 1 2025-11-27 02:45:28.385 00:00:00.000 UDP 28.104.0.1:57070 -> 198.28.0.2:53 1 64 1 2025-11-27 02:42:12.994 00:05:00.454 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-27 02:46:28.666 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59599 1 109 1 2025-11-27 02:46:28.666 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44283 1 80 1 2025-11-27 02:46:28.655 00:00:00.000 UDP 28.104.0.1:59599 -> 198.28.0.2:53 1 64 1 2025-11-27 02:46:28.655 00:00:00.000 UDP 28.104.0.1:44283 -> 198.28.0.2:53 1 64 1 2025-11-27 02:43:01.426 00:05:10.731 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2592 1 2025-11-27 02:47:28.957 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55457 1 109 1 2025-11-27 02:47:28.957 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38354 1 80 1 2025-11-27 02:47:28.946 00:00:00.000 UDP 28.104.0.1:55457 -> 198.28.0.2:53 1 64 1 2025-11-27 02:47:28.945 00:00:00.000 UDP 28.104.0.1:38354 -> 198.28.0.2:53 1 64 1 2025-11-27 02:44:04.431 00:05:08.576 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 02:48:29.171 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 02:48:29.214 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54061 1 109 1 2025-11-27 02:48:29.214 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54396 1 80 1 2025-11-27 02:48:29.203 00:00:00.000 UDP 28.104.0.1:54396 -> 198.28.0.2:53 1 64 1 2025-11-27 02:48:29.203 00:00:00.000 UDP 28.104.0.1:54061 -> 198.28.0.2:53 1 64 1 2025-11-27 02:45:04.430 00:05:08.733 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 02:45:04.480 00:05:08.673 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 02:45:12.995 00:05:00.586 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-27 02:49:29.510 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60963 1 80 1 2025-11-27 02:49:29.510 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44192 1 109 1 2025-11-27 02:49:29.500 00:00:00.000 UDP 28.104.0.1:60963 -> 198.28.0.2:53 1 64 1 2025-11-27 02:49:29.500 00:00:00.000 UDP 28.104.0.1:44192 -> 198.28.0.2:53 1 64 1 2025-11-27 02:45:12.995 00:05:51.447 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 02:50:29.761 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50248 1 109 1 2025-11-27 02:50:29.761 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57585 1 80 1 2025-11-27 02:50:29.749 00:00:00.000 UDP 28.104.0.1:50248 -> 198.28.0.2:53 1 64 1 2025-11-27 02:50:29.749 00:00:00.000 UDP 28.104.0.1:57585 -> 198.28.0.2:53 1 64 1 2025-11-27 02:51:30.020 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58626 1 80 1 2025-11-27 02:51:30.017 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54820 1 109 1 2025-11-27 02:51:30.004 00:00:00.000 UDP 28.104.0.1:54820 -> 198.28.0.2:53 1 64 1 2025-11-27 02:51:30.004 00:00:00.000 UDP 28.104.0.1:58626 -> 198.28.0.2:53 1 64 1 2025-11-27 02:48:12.996 00:05:00.453 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-27 02:48:21.434 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2940 1 2025-11-27 02:52:30.363 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56431 1 109 1 2025-11-27 02:52:30.364 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44421 1 80 1 2025-11-27 02:52:30.353 00:00:00.000 UDP 28.104.0.1:44421 -> 198.28.0.2:53 1 64 1 2025-11-27 02:52:30.353 00:00:00.000 UDP 28.104.0.1:56431 -> 198.28.0.2:53 1 64 1 2025-11-27 02:53:30.665 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45522 1 109 1 2025-11-27 02:53:30.665 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37580 1 80 1 2025-11-27 02:53:29.588 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 02:53:30.655 00:00:00.000 UDP 28.104.0.1:45522 -> 198.28.0.2:53 1 64 1 2025-11-27 02:53:30.655 00:00:00.000 UDP 28.104.0.1:37580 -> 198.28.0.2:53 1 64 1 2025-11-27 02:50:04.433 00:05:08.575 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 02:54:30.948 00:00:00.000 UDP 28.104.0.1:34660 -> 198.28.0.2:53 1 64 1 2025-11-27 02:54:30.948 00:00:00.000 UDP 28.104.0.1:46555 -> 198.28.0.2:53 1 64 1 2025-11-27 02:54:30.959 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46555 1 109 1 2025-11-27 02:54:30.959 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34660 1 80 1 2025-11-27 02:51:04.432 00:05:08.734 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 02:51:04.482 00:05:08.673 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 02:51:12.995 00:05:00.586 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-27 02:55:31.265 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35706 1 80 1 2025-11-27 02:55:31.278 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55673 1 109 1 2025-11-27 02:55:31.254 00:00:00.000 UDP 28.104.0.1:55673 -> 198.28.0.2:53 1 64 1 2025-11-27 02:55:31.254 00:00:00.000 UDP 28.104.0.1:35706 -> 198.28.0.2:53 1 64 1 2025-11-27 02:51:12.997 00:05:51.448 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 02:56:31.581 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38778 1 109 1 2025-11-27 02:56:31.581 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43557 1 80 1 2025-11-27 02:56:31.571 00:00:00.000 UDP 28.104.0.1:38778 -> 198.28.0.2:53 1 64 1 2025-11-27 02:56:31.571 00:00:00.000 UDP 28.104.0.1:43557 -> 198.28.0.2:53 1 64 1 2025-11-27 02:57:31.861 00:00:00.000 UDP 28.104.0.1:39946 -> 198.28.0.2:53 1 64 1 2025-11-27 02:57:31.861 00:00:00.000 UDP 28.104.0.1:58869 -> 198.28.0.2:53 1 64 1 2025-11-27 02:57:31.872 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58869 1 80 1 2025-11-27 02:57:31.872 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39946 1 109 1 2025-11-27 02:53:41.441 00:05:10.013 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2816 1 2025-11-27 02:54:12.995 00:05:00.455 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-27 02:58:29.792 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 02:58:32.176 00:00:00.000 UDP 28.104.0.1:44704 -> 198.28.0.2:53 1 64 1 2025-11-27 02:58:32.176 00:00:00.000 UDP 28.104.0.1:49591 -> 198.28.0.2:53 1 64 1 2025-11-27 02:58:32.187 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49591 1 109 1 2025-11-27 02:58:32.187 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44704 1 80 1 Summary: total flows: 324, total bytes: 99117, total packets: 1461, avg bps: 205, avg pps: 0, avg bpp: 67 Time window: 2025-11-27 01:55:01 - 2025-11-27 02:59:13 Total flows processed: 324, passed: 324, Blocks skipped: 0, Bytes read: 33760 Sys: 0.0040s User: 0.0040s Wall: 0.0039s flows/second: 83917.2 Runtime: 0.0039s