Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-27 02:59:32.471 00:00:00.000 UDP 28.104.0.1:54977 -> 198.28.0.2:53 1 64 1 2025-11-27 02:59:32.471 00:00:00.000 UDP 28.104.0.1:51796 -> 198.28.0.2:53 1 64 1 2025-11-27 02:59:32.481 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54977 1 80 1 2025-11-27 02:59:32.481 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51796 1 109 1 2025-11-27 02:56:04.433 00:05:08.576 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 03:00:33.055 00:00:00.000 UDP 28.104.0.1:40185 -> 198.28.0.2:53 1 64 1 2025-11-27 03:00:33.055 00:00:00.000 UDP 28.104.0.1:48228 -> 198.28.0.2:53 1 64 1 2025-11-27 03:00:33.068 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40185 1 109 1 2025-11-27 03:00:33.068 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48228 1 80 1 2025-11-27 02:57:04.434 00:05:08.735 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 02:57:04.484 00:05:08.675 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 02:57:12.997 00:05:00.588 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-27 03:01:33.372 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43977 1 80 1 2025-11-27 03:01:33.372 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33406 1 109 1 2025-11-27 03:01:33.363 00:00:00.000 UDP 28.104.0.1:43977 -> 198.28.0.2:53 1 64 1 2025-11-27 03:01:33.363 00:00:00.000 UDP 28.104.0.1:33406 -> 198.28.0.2:53 1 64 1 2025-11-27 02:57:12.997 00:05:51.447 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 03:02:33.613 00:00:00.000 UDP 28.104.0.1:50476 -> 198.28.0.2:53 1 64 1 2025-11-27 03:02:33.613 00:00:00.000 UDP 28.104.0.1:36232 -> 198.28.0.2:53 1 64 1 2025-11-27 03:02:33.624 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36232 1 109 1 2025-11-27 03:02:33.625 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50476 1 80 1 2025-11-27 02:59:01.454 00:05:00.912 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2944 1 2025-11-27 03:03:29.508 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 03:03:33.926 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40728 1 80 1 2025-11-27 03:03:33.926 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54634 1 109 1 2025-11-27 03:03:33.917 00:00:00.000 UDP 28.104.0.1:40728 -> 198.28.0.2:53 1 64 1 2025-11-27 03:03:33.917 00:00:00.000 UDP 28.104.0.1:54634 -> 198.28.0.2:53 1 64 1 2025-11-27 03:00:12.997 00:05:00.457 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-27 03:04:34.238 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42336 1 109 1 2025-11-27 03:04:34.238 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42450 1 80 1 2025-11-27 03:04:34.228 00:00:00.000 UDP 28.104.0.1:42450 -> 198.28.0.2:53 1 64 1 2025-11-27 03:04:34.228 00:00:00.000 UDP 28.104.0.1:42336 -> 198.28.0.2:53 1 64 1 2025-11-27 03:05:34.532 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47692 1 80 1 2025-11-27 03:05:34.532 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35097 1 109 1 2025-11-27 03:05:34.522 00:00:00.000 UDP 28.104.0.1:47692 -> 198.28.0.2:53 1 64 1 2025-11-27 03:05:34.522 00:00:00.000 UDP 28.104.0.1:35097 -> 198.28.0.2:53 1 64 1 2025-11-27 03:02:04.433 00:05:08.577 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 03:06:34.814 00:00:00.000 UDP 28.104.0.1:56482 -> 198.28.0.2:53 1 64 1 2025-11-27 03:06:34.814 00:00:00.000 UDP 28.104.0.1:54222 -> 198.28.0.2:53 1 64 1 2025-11-27 03:06:34.824 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56482 1 80 1 2025-11-27 03:06:34.824 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54222 1 109 1 2025-11-27 03:03:04.434 00:05:08.737 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 03:03:04.484 00:05:08.677 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 03:03:12.998 00:05:00.587 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-27 03:03:12.998 00:05:00.002 TCP 28.154.0.1:41239 -> 28.151.0.1:179 11 686 1 2025-11-27 03:07:35.110 00:00:00.000 UDP 28.104.0.1:41313 -> 198.28.0.2:53 1 64 1 2025-11-27 03:07:35.110 00:00:00.000 UDP 28.104.0.1:49684 -> 198.28.0.2:53 1 64 1 2025-11-27 03:07:35.122 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41313 1 109 1 2025-11-27 03:07:35.122 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49684 1 80 1 2025-11-27 03:04:11.459 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 34 2444 1 2025-11-27 03:08:29.558 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 03:08:35.415 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42957 1 109 1 2025-11-27 03:08:35.416 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57289 1 80 1 2025-11-27 03:08:35.405 00:00:00.000 UDP 28.104.0.1:57289 -> 198.28.0.2:53 1 64 1 2025-11-27 03:08:35.405 00:00:00.000 UDP 28.104.0.1:42957 -> 198.28.0.2:53 1 64 1 2025-11-27 03:09:35.722 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55843 1 80 1 2025-11-27 03:09:35.723 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54364 1 109 1 2025-11-27 03:09:35.711 00:00:00.000 UDP 28.104.0.1:55843 -> 198.28.0.2:53 1 64 1 2025-11-27 03:09:35.711 00:00:00.000 UDP 28.104.0.1:54364 -> 198.28.0.2:53 1 64 1 2025-11-27 03:10:36.000 00:00:00.000 UDP 28.104.0.1:34648 -> 198.28.0.2:53 1 64 1 2025-11-27 03:10:36.000 00:00:00.000 UDP 28.104.0.1:38039 -> 198.28.0.2:53 1 64 1 2025-11-27 03:10:36.014 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34648 1 109 1 2025-11-27 03:10:36.010 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38039 1 80 1 2025-11-27 03:06:13.001 00:06:00.456 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-27 03:11:36.305 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60555 1 80 1 2025-11-27 03:11:36.305 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53405 1 109 1 2025-11-27 03:11:36.296 00:00:00.000 UDP 28.104.0.1:53405 -> 198.28.0.2:53 1 64 1 2025-11-27 03:11:36.296 00:00:00.000 UDP 28.104.0.1:60555 -> 198.28.0.2:53 1 64 1 2025-11-27 03:08:04.436 00:05:08.577 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 03:12:36.559 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41371 1 109 1 2025-11-27 03:12:36.559 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52359 1 80 1 2025-11-27 03:12:36.549 00:00:00.000 UDP 28.104.0.1:41371 -> 198.28.0.2:53 1 64 1 2025-11-27 03:12:36.549 00:00:00.000 UDP 28.104.0.1:52359 -> 198.28.0.2:53 1 64 1 2025-11-27 03:09:04.435 00:05:08.737 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 03:09:04.487 00:05:08.676 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 03:09:04.447 00:05:08.557 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 03:13:29.699 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 03:13:36.859 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50626 1 109 1 2025-11-27 03:13:36.859 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40638 1 80 1 2025-11-27 03:13:36.849 00:00:00.000 UDP 28.104.0.1:40638 -> 198.28.0.2:53 1 64 1 2025-11-27 03:13:36.849 00:00:00.000 UDP 28.104.0.1:50626 -> 198.28.0.2:53 1 64 1 2025-11-27 03:09:31.462 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2384 1 2025-11-27 03:09:13.001 00:06:00.585 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-27 03:14:37.120 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36372 1 80 1 2025-11-27 03:14:37.119 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58723 1 109 1 2025-11-27 03:14:37.110 00:00:00.000 UDP 28.104.0.1:36372 -> 198.28.0.2:53 1 64 1 2025-11-27 03:14:37.110 00:00:00.000 UDP 28.104.0.1:58723 -> 198.28.0.2:53 1 64 1 2025-11-27 03:15:37.403 00:00:00.000 UDP 28.104.0.1:33149 -> 198.28.0.2:53 1 64 1 2025-11-27 03:15:37.403 00:00:00.000 UDP 28.104.0.1:41590 -> 198.28.0.2:53 1 64 1 2025-11-27 03:15:37.412 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33149 1 109 1 2025-11-27 03:15:37.413 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41590 1 80 1 2025-11-27 03:16:37.697 00:00:00.000 UDP 28.104.0.1:55245 -> 198.28.0.2:53 1 64 1 2025-11-27 03:16:37.697 00:00:00.000 UDP 28.104.0.1:54040 -> 198.28.0.2:53 1 64 1 2025-11-27 03:16:37.707 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54040 1 80 1 2025-11-27 03:16:37.707 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55245 1 109 1 2025-11-27 03:17:37.959 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32831 1 109 1 2025-11-27 03:17:37.959 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41103 1 80 1 2025-11-27 03:17:37.948 00:00:00.000 UDP 28.104.0.1:41103 -> 198.28.0.2:53 1 64 1 2025-11-27 03:17:37.948 00:00:00.000 UDP 28.104.0.1:32831 -> 198.28.0.2:53 1 64 1 2025-11-27 03:13:13.002 00:06:00.456 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-27 03:14:04.439 00:05:08.576 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 03:18:29.831 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 03:18:38.202 00:00:00.000 UDP 28.104.0.1:50066 -> 198.28.0.2:53 1 64 1 2025-11-27 03:18:38.201 00:00:00.000 UDP 28.104.0.1:35657 -> 198.28.0.2:53 1 64 1 2025-11-27 03:18:38.211 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50066 1 109 1 2025-11-27 03:18:38.211 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35657 1 80 1 2025-11-27 03:14:51.466 00:05:10.002 OSPF 28.0.2.1:0 -> 224.0.0.5:0 43 3100 1 2025-11-27 03:15:04.488 00:05:08.708 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 03:15:04.448 00:05:08.556 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 03:15:04.437 00:05:08.768 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 03:19:38.496 00:00:00.000 UDP 28.104.0.1:38600 -> 198.28.0.2:53 1 64 1 2025-11-27 03:19:38.496 00:00:00.000 UDP 28.104.0.1:37954 -> 198.28.0.2:53 1 64 1 2025-11-27 03:19:38.506 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37954 1 80 1 2025-11-27 03:19:38.506 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38600 1 109 1 2025-11-27 03:20:38.754 00:00:00.000 UDP 28.104.0.1:54153 -> 198.28.0.2:53 1 64 1 2025-11-27 03:20:38.754 00:00:00.000 UDP 28.104.0.1:54456 -> 198.28.0.2:53 1 64 1 2025-11-27 03:20:38.764 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54153 1 109 1 2025-11-27 03:20:38.765 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54456 1 80 1 2025-11-27 03:16:13.004 00:06:00.585 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-27 03:21:39.072 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37553 1 109 1 2025-11-27 03:21:39.068 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39789 1 80 1 2025-11-27 03:21:39.059 00:00:00.000 UDP 28.104.0.1:37553 -> 198.28.0.2:53 1 64 1 2025-11-27 03:21:39.059 00:00:00.000 UDP 28.104.0.1:39789 -> 198.28.0.2:53 1 64 1 2025-11-27 03:22:39.365 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41424 1 80 1 2025-11-27 03:22:39.365 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60252 1 109 1 2025-11-27 03:22:39.355 00:00:00.000 UDP 28.104.0.1:60252 -> 198.28.0.2:53 1 64 1 2025-11-27 03:22:39.355 00:00:00.000 UDP 28.104.0.1:41424 -> 198.28.0.2:53 1 64 1 2025-11-27 03:23:29.860 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 03:23:39.611 00:00:00.000 UDP 28.104.0.1:38009 -> 198.28.0.2:53 1 64 1 2025-11-27 03:23:39.611 00:00:00.000 UDP 28.104.0.1:50090 -> 198.28.0.2:53 1 64 1 2025-11-27 03:23:39.621 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50090 1 109 1 2025-11-27 03:23:39.620 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38009 1 80 1 2025-11-27 03:20:04.439 00:05:08.576 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 03:20:11.468 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2736 1 2025-11-27 03:24:39.891 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37149 1 109 1 2025-11-27 03:24:39.891 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60862 1 80 1 2025-11-27 03:24:39.881 00:00:00.000 UDP 28.104.0.1:37149 -> 198.28.0.2:53 1 64 1 2025-11-27 03:24:39.881 00:00:00.000 UDP 28.104.0.1:60862 -> 198.28.0.2:53 1 64 1 2025-11-27 03:21:04.489 00:05:08.710 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 03:21:04.449 00:05:08.559 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 03:20:13.004 00:06:00.457 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-27 03:21:04.439 00:05:08.769 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 03:25:40.181 00:00:00.000 UDP 28.104.0.1:40357 -> 198.28.0.2:53 1 64 1 2025-11-27 03:25:40.181 00:00:00.000 UDP 28.104.0.1:35372 -> 198.28.0.2:53 1 64 1 2025-11-27 03:25:40.192 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40357 1 109 1 2025-11-27 03:25:40.192 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35372 1 80 1 2025-11-27 03:26:40.472 00:00:00.000 UDP 28.104.0.1:50328 -> 198.28.0.2:53 1 64 1 2025-11-27 03:26:40.472 00:00:00.000 UDP 28.104.0.1:33203 -> 198.28.0.2:53 1 64 1 2025-11-27 03:26:40.482 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50328 1 80 1 2025-11-27 03:26:40.482 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33203 1 109 1 2025-11-27 03:27:40.762 00:00:00.000 UDP 28.104.0.1:47783 -> 198.28.0.2:53 1 64 1 2025-11-27 03:27:40.762 00:00:00.000 UDP 28.104.0.1:47961 -> 198.28.0.2:53 1 64 1 2025-11-27 03:27:40.773 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47783 1 109 1 2025-11-27 03:27:40.773 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47961 1 80 1 2025-11-27 03:23:13.005 00:06:00.585 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-27 03:28:30.013 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 03:28:41.055 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54188 1 109 1 2025-11-27 03:28:41.055 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48620 1 80 1 2025-11-27 03:28:41.044 00:00:00.000 UDP 28.104.0.1:48620 -> 198.28.0.2:53 1 64 1 2025-11-27 03:28:41.044 00:00:00.000 UDP 28.104.0.1:54188 -> 198.28.0.2:53 1 64 1 2025-11-27 03:29:41.353 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55445 1 109 1 2025-11-27 03:25:31.473 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2808 1 2025-11-27 03:29:41.353 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39455 1 80 1 2025-11-27 03:29:41.343 00:00:00.000 UDP 28.104.0.1:39455 -> 198.28.0.2:53 1 64 1 2025-11-27 03:29:41.343 00:00:00.000 UDP 28.104.0.1:55445 -> 198.28.0.2:53 1 64 1 2025-11-27 03:26:04.443 00:05:08.573 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 03:30:41.604 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46156 1 80 1 2025-11-27 03:30:41.604 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47088 1 109 1 2025-11-27 03:30:41.595 00:00:00.000 UDP 28.104.0.1:46156 -> 198.28.0.2:53 1 64 1 2025-11-27 03:30:41.595 00:00:00.000 UDP 28.104.0.1:47088 -> 198.28.0.2:53 1 64 1 2025-11-27 03:27:04.494 00:05:08.708 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 03:27:04.454 00:05:08.552 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 03:27:04.444 00:05:08.767 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 03:31:41.862 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40263 1 80 1 2025-11-27 03:31:41.862 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34306 1 109 1 2025-11-27 03:31:41.852 00:00:00.000 UDP 28.104.0.1:34306 -> 198.28.0.2:53 1 64 1 2025-11-27 03:31:41.852 00:00:00.000 UDP 28.104.0.1:40263 -> 198.28.0.2:53 1 64 1 2025-11-27 03:27:13.005 00:06:00.457 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-27 03:32:42.169 00:00:00.000 UDP 28.104.0.1:45138 -> 198.28.0.2:53 1 64 1 2025-11-27 03:32:42.169 00:00:00.000 UDP 28.104.0.1:53518 -> 198.28.0.2:53 1 64 1 2025-11-27 03:32:42.180 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53518 1 109 1 2025-11-27 03:32:42.180 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45138 1 80 1 2025-11-27 03:33:30.125 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 03:33:42.457 00:00:00.000 UDP 28.104.0.1:47776 -> 198.28.0.2:53 1 64 1 2025-11-27 03:33:42.458 00:00:00.000 UDP 28.104.0.1:33260 -> 198.28.0.2:53 1 64 1 2025-11-27 03:33:42.468 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33260 1 109 1 2025-11-27 03:33:42.466 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47776 1 80 1 2025-11-27 03:34:42.704 00:00:00.000 UDP 28.104.0.1:52661 -> 198.28.0.2:53 1 64 1 2025-11-27 03:34:42.704 00:00:00.000 UDP 28.104.0.1:59723 -> 198.28.0.2:53 1 64 1 2025-11-27 03:34:42.715 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52661 1 109 1 2025-11-27 03:34:42.715 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59723 1 80 1 2025-11-27 03:30:51.481 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2628 1 2025-11-27 03:30:13.006 00:06:00.591 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-27 03:35:43.014 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35162 1 80 1 2025-11-27 03:35:43.013 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56065 1 109 1 2025-11-27 03:35:42.998 00:00:00.000 UDP 28.104.0.1:35162 -> 198.28.0.2:53 1 64 1 2025-11-27 03:35:42.998 00:00:00.000 UDP 28.104.0.1:56065 -> 198.28.0.2:53 1 64 1 2025-11-27 03:32:04.445 00:05:08.571 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 03:36:43.307 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53356 1 109 1 2025-11-27 03:36:43.307 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46651 1 80 1 2025-11-27 03:36:43.297 00:00:00.000 UDP 28.104.0.1:53356 -> 198.28.0.2:53 1 64 1 2025-11-27 03:36:43.297 00:00:00.000 UDP 28.104.0.1:46651 -> 198.28.0.2:53 1 64 1 2025-11-27 03:33:04.445 00:05:08.767 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 03:33:04.496 00:05:08.707 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 03:33:04.456 00:05:08.553 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 03:37:43.601 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50796 1 80 1 2025-11-27 03:37:43.601 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37814 1 109 1 2025-11-27 03:37:43.592 00:00:00.000 UDP 28.104.0.1:50796 -> 198.28.0.2:53 1 64 1 2025-11-27 03:37:43.592 00:00:00.000 UDP 28.104.0.1:37814 -> 198.28.0.2:53 1 64 1 2025-11-27 03:38:30.363 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 03:38:43.891 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45363 1 80 1 2025-11-27 03:38:43.891 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41565 1 109 1 2025-11-27 03:38:43.883 00:00:00.000 UDP 28.104.0.1:45363 -> 198.28.0.2:53 1 64 1 2025-11-27 03:38:43.883 00:00:00.000 UDP 28.104.0.1:41565 -> 198.28.0.2:53 1 64 1 2025-11-27 03:34:13.006 00:06:00.457 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-27 03:39:44.190 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52113 1 80 1 2025-11-27 03:39:44.190 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43462 1 109 1 2025-11-27 03:39:44.181 00:00:00.000 UDP 28.104.0.1:52113 -> 198.28.0.2:53 1 64 1 2025-11-27 03:39:44.181 00:00:00.000 UDP 28.104.0.1:43462 -> 198.28.0.2:53 1 64 1 2025-11-27 03:36:11.484 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 33 2380 1 2025-11-27 03:40:44.496 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49014 1 80 1 2025-11-27 03:40:44.496 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37638 1 109 1 2025-11-27 03:40:44.486 00:00:00.000 UDP 28.104.0.1:49014 -> 198.28.0.2:53 1 64 1 2025-11-27 03:40:44.486 00:00:00.000 UDP 28.104.0.1:37638 -> 198.28.0.2:53 1 64 1 2025-11-27 03:41:44.793 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40263 1 109 1 2025-11-27 03:41:44.793 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47243 1 80 1 2025-11-27 03:41:44.783 00:00:00.000 UDP 28.104.0.1:47243 -> 198.28.0.2:53 1 64 1 2025-11-27 03:41:44.783 00:00:00.000 UDP 28.104.0.1:40263 -> 198.28.0.2:53 1 64 1 2025-11-27 03:38:04.445 00:05:08.574 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 03:37:13.006 00:06:00.591 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-27 03:42:45.098 00:00:00.000 UDP 28.104.0.1:49246 -> 198.28.0.2:53 1 64 1 2025-11-27 03:42:45.098 00:00:00.000 UDP 28.104.0.1:34559 -> 198.28.0.2:53 1 64 1 2025-11-27 03:42:45.110 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49246 1 109 1 2025-11-27 03:42:45.110 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34559 1 80 1 2025-11-27 03:39:04.446 00:05:08.768 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 03:39:04.496 00:05:08.708 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 03:39:04.456 00:05:08.553 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 03:43:30.364 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 03:43:45.395 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37349 1 80 1 2025-11-27 03:43:45.396 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56200 1 109 1 2025-11-27 03:43:45.384 00:00:00.000 UDP 28.104.0.1:37349 -> 198.28.0.2:53 1 64 1 2025-11-27 03:43:45.384 00:00:00.000 UDP 28.104.0.1:56200 -> 198.28.0.2:53 1 64 1 2025-11-27 03:44:45.681 00:00:00.000 UDP 28.104.0.1:42355 -> 198.28.0.2:53 1 64 1 2025-11-27 03:44:45.681 00:00:00.000 UDP 28.104.0.1:54737 -> 198.28.0.2:53 1 64 1 2025-11-27 03:44:45.693 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54737 1 109 1 2025-11-27 03:44:45.692 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42355 1 80 1 2025-11-27 03:45:45.933 00:00:00.000 UDP 28.104.0.1:43507 -> 198.28.0.2:53 1 64 1 2025-11-27 03:45:45.933 00:00:00.000 UDP 28.104.0.1:37329 -> 198.28.0.2:53 1 64 1 2025-11-27 03:41:31.487 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 46 3340 1 2025-11-27 03:45:45.942 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37329 1 80 1 2025-11-27 03:45:45.943 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43507 1 109 1 2025-11-27 03:41:13.009 00:06:00.456 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-27 03:46:46.248 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46190 1 109 1 2025-11-27 03:46:46.248 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60318 1 80 1 2025-11-27 03:46:46.238 00:00:00.000 UDP 28.104.0.1:60318 -> 198.28.0.2:53 1 64 1 2025-11-27 03:46:46.238 00:00:00.000 UDP 28.104.0.1:46190 -> 198.28.0.2:53 1 64 1 2025-11-27 03:47:46.532 00:00:00.000 UDP 28.104.0.1:40215 -> 198.28.0.2:53 1 64 1 2025-11-27 03:47:46.532 00:00:00.000 UDP 28.104.0.1:36069 -> 198.28.0.2:53 1 64 1 2025-11-27 03:47:46.543 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36069 1 109 1 2025-11-27 03:47:46.543 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40215 1 80 1 2025-11-27 03:44:04.451 00:05:08.599 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 03:48:30.251 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 03:48:46.799 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50485 1 109 1 2025-11-27 03:48:46.798 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47436 1 80 1 2025-11-27 03:48:46.790 00:00:00.000 UDP 28.104.0.1:50485 -> 198.28.0.2:53 1 64 1 2025-11-27 03:48:46.789 00:00:00.000 UDP 28.104.0.1:47436 -> 198.28.0.2:53 1 64 1 2025-11-27 03:45:04.502 00:05:08.703 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 03:44:13.009 00:06:00.590 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-27 03:45:04.462 00:05:08.577 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 03:45:04.451 00:05:08.764 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 03:49:47.097 00:00:00.000 UDP 28.104.0.1:57410 -> 198.28.0.2:53 1 64 1 2025-11-27 03:49:47.097 00:00:00.000 UDP 28.104.0.1:48508 -> 198.28.0.2:53 1 64 1 2025-11-27 03:49:47.109 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48508 1 80 1 2025-11-27 03:49:47.109 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57410 1 109 1 2025-11-27 03:50:47.397 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38991 1 109 1 2025-11-27 03:50:47.397 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46956 1 80 1 2025-11-27 03:50:47.388 00:00:00.000 UDP 28.104.0.1:46956 -> 198.28.0.2:53 1 64 1 2025-11-27 03:50:47.388 00:00:00.000 UDP 28.104.0.1:38991 -> 198.28.0.2:53 1 64 1 2025-11-27 03:46:51.492 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2592 1 2025-11-27 03:51:47.691 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53112 1 80 1 2025-11-27 03:51:47.692 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46794 1 109 1 2025-11-27 03:51:47.682 00:00:00.000 UDP 28.104.0.1:46794 -> 198.28.0.2:53 1 64 1 2025-11-27 03:51:47.681 00:00:00.000 UDP 28.104.0.1:53112 -> 198.28.0.2:53 1 64 1 2025-11-27 03:52:47.988 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33221 1 109 1 2025-11-27 03:52:47.988 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38230 1 80 1 2025-11-27 03:52:47.979 00:00:00.000 UDP 28.104.0.1:38230 -> 198.28.0.2:53 1 64 1 2025-11-27 03:52:47.979 00:00:00.000 UDP 28.104.0.1:33221 -> 198.28.0.2:53 1 64 1 2025-11-27 03:48:13.039 00:06:00.427 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-27 03:53:30.404 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 03:53:48.278 00:00:00.000 UDP 28.104.0.1:39662 -> 198.28.0.2:53 1 64 1 2025-11-27 03:53:48.278 00:00:00.000 UDP 28.104.0.1:48912 -> 198.28.0.2:53 1 64 1 2025-11-27 03:53:48.290 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39662 1 109 1 2025-11-27 03:53:48.290 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48912 1 80 1 2025-11-27 03:50:04.460 00:05:08.592 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 03:54:48.589 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52293 1 109 1 2025-11-27 03:54:48.589 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37841 1 80 1 2025-11-27 03:54:48.576 00:00:00.000 UDP 28.104.0.1:37841 -> 198.28.0.2:53 1 64 1 2025-11-27 03:54:48.576 00:00:00.000 UDP 28.104.0.1:52293 -> 198.28.0.2:53 1 64 1 2025-11-27 03:51:04.460 00:05:08.755 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 03:51:04.511 00:05:08.695 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 03:51:04.471 00:05:08.572 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 03:55:48.877 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45771 1 80 1 2025-11-27 03:55:48.877 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54880 1 109 1 2025-11-27 03:55:48.867 00:00:00.000 UDP 28.104.0.1:45771 -> 198.28.0.2:53 1 64 1 2025-11-27 03:55:48.867 00:00:00.000 UDP 28.104.0.1:54880 -> 198.28.0.2:53 1 64 1 2025-11-27 03:51:13.042 00:06:00.559 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-27 03:52:11.495 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2692 1 2025-11-27 03:56:49.192 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58119 1 109 1 2025-11-27 03:56:49.192 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52824 1 80 1 2025-11-27 03:56:49.181 00:00:00.000 UDP 28.104.0.1:58119 -> 198.28.0.2:53 1 64 1 2025-11-27 03:56:49.181 00:00:00.000 UDP 28.104.0.1:52824 -> 198.28.0.2:53 1 64 1 2025-11-27 03:57:49.479 00:00:00.000 UDP 28.104.0.1:35922 -> 198.28.0.2:53 1 64 1 2025-11-27 03:57:49.480 00:00:00.000 UDP 28.104.0.1:60716 -> 198.28.0.2:53 1 64 1 2025-11-27 03:57:49.491 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60716 1 109 1 2025-11-27 03:57:49.490 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35922 1 80 1 2025-11-27 03:58:30.832 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 03:58:49.779 00:00:00.000 UDP 28.104.0.1:42579 -> 198.28.0.2:53 1 64 1 2025-11-27 03:58:49.779 00:00:00.000 UDP 28.104.0.1:50557 -> 198.28.0.2:53 1 64 1 2025-11-27 03:58:49.788 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50557 1 80 1 2025-11-27 03:58:49.788 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42579 1 109 1 Summary: total flows: 320, total bytes: 95828, total packets: 1411, avg bps: 203, avg pps: 0, avg bpp: 67 Time window: 2025-11-27 02:56:04 - 2025-11-27 03:58:49 Total flows processed: 320, passed: 320, Blocks skipped: 0, Bytes read: 33344 Sys: 0.0060s User: 0.0000s Wall: 0.0036s flows/second: 89508.3 Runtime: 0.0036s