Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-27 10:59:14.289 00:00:00.000 UDP 28.104.0.1:59486 -> 198.28.0.2:53 1 64 1 2025-11-27 10:59:14.290 00:00:00.000 UDP 28.104.0.1:34495 -> 198.28.0.2:53 1 64 1 2025-11-27 10:59:14.299 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59486 1 109 1 2025-11-27 10:59:14.299 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34495 1 80 1 2025-11-27 11:00:14.588 00:00:00.000 UDP 28.104.0.1:55977 -> 198.28.0.2:53 1 64 1 2025-11-27 10:55:13.172 00:06:00.453 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-27 11:00:14.588 00:00:00.000 UDP 28.104.0.1:50744 -> 198.28.0.2:53 1 64 1 2025-11-27 10:56:04.626 00:05:08.557 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 11:00:14.598 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50744 1 80 1 2025-11-27 11:00:14.598 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55977 1 109 1 2025-11-27 10:56:22.067 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2528 1 2025-11-27 10:57:04.626 00:05:08.735 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 11:01:14.849 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50682 1 109 1 2025-11-27 11:01:14.849 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49008 1 80 1 2025-11-27 11:01:14.838 00:00:00.000 UDP 28.104.0.1:49008 -> 198.28.0.2:53 1 64 1 2025-11-27 10:57:04.676 00:05:08.675 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 10:57:04.635 00:05:08.537 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 11:01:14.838 00:00:00.000 UDP 28.104.0.1:50682 -> 198.28.0.2:53 1 64 1 2025-11-27 11:02:15.102 00:00:00.000 UDP 28.104.0.1:51701 -> 198.28.0.2:53 1 64 1 2025-11-27 11:02:15.102 00:00:00.000 UDP 28.104.0.1:36916 -> 198.28.0.2:53 1 64 1 2025-11-27 11:02:15.113 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36916 1 80 1 2025-11-27 11:02:15.113 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51701 1 109 1 2025-11-27 11:03:15.418 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54111 1 109 1 2025-11-27 11:03:15.418 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51922 1 80 1 2025-11-27 11:03:15.408 00:00:00.000 UDP 28.104.0.1:54111 -> 198.28.0.2:53 1 64 1 2025-11-27 10:58:13.172 00:06:00.580 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-27 11:03:15.408 00:00:00.000 UDP 28.104.0.1:51922 -> 198.28.0.2:53 1 64 1 2025-11-27 11:03:39.275 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 11:04:15.771 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59630 1 80 1 2025-11-27 11:04:15.771 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44831 1 109 1 2025-11-27 11:04:15.761 00:00:00.000 UDP 28.104.0.1:59630 -> 198.28.0.2:53 1 64 1 2025-11-27 11:04:15.761 00:00:00.000 UDP 28.104.0.1:44831 -> 198.28.0.2:53 1 64 1 2025-11-27 11:05:16.072 00:00:00.000 UDP 28.104.0.1:58176 -> 198.28.0.2:53 1 64 1 2025-11-27 11:05:16.071 00:00:00.000 UDP 28.104.0.1:45191 -> 198.28.0.2:53 1 64 1 2025-11-27 11:05:16.082 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58176 1 109 1 2025-11-27 11:05:16.082 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45191 1 80 1 2025-11-27 11:01:42.071 00:05:01.058 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2852 1 2025-11-27 11:02:04.627 00:05:08.559 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 11:06:16.378 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60842 1 80 1 2025-11-27 11:06:16.378 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33684 1 109 1 2025-11-27 11:06:16.368 00:00:00.000 UDP 28.104.0.1:60842 -> 198.28.0.2:53 1 64 1 2025-11-27 11:06:16.368 00:00:00.000 UDP 28.104.0.1:33684 -> 198.28.0.2:53 1 64 1 2025-11-27 11:03:04.678 00:05:08.676 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 11:07:16.672 00:00:00.000 UDP 28.104.0.1:59351 -> 198.28.0.2:53 1 64 1 2025-11-27 11:03:04.638 00:05:08.539 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 11:02:13.173 00:06:00.458 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-27 11:07:16.671 00:00:00.000 UDP 28.104.0.1:35438 -> 198.28.0.2:53 1 64 1 2025-11-27 11:03:04.627 00:05:08.737 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 11:07:16.681 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35438 1 109 1 2025-11-27 11:07:16.681 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59351 1 80 1 2025-11-27 11:08:16.967 00:00:00.000 UDP 28.104.0.1:34033 -> 198.28.0.2:53 1 64 1 2025-11-27 11:08:16.967 00:00:00.000 UDP 28.104.0.1:58819 -> 198.28.0.2:53 1 64 1 2025-11-27 11:08:16.978 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58819 1 80 1 2025-11-27 11:08:16.978 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34033 1 109 1 2025-11-27 11:08:39.424 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 11:09:17.288 00:00:00.000 UDP 28.104.0.1:52261 -> 198.28.0.2:53 1 64 1 2025-11-27 11:09:17.288 00:00:00.000 UDP 28.104.0.1:48322 -> 198.28.0.2:53 1 64 1 2025-11-27 11:09:17.300 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52261 1 109 1 2025-11-27 11:09:17.299 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48322 1 80 1 2025-11-27 11:05:13.173 00:06:00.579 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-27 11:10:17.583 00:00:00.000 UDP 28.104.0.1:57034 -> 198.28.0.2:53 1 64 1 2025-11-27 11:10:17.583 00:00:00.000 UDP 28.104.0.1:41933 -> 198.28.0.2:53 1 64 1 2025-11-27 11:10:17.593 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57034 1 109 1 2025-11-27 11:10:17.593 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41933 1 80 1 2025-11-27 11:06:52.081 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2892 1 2025-11-27 11:11:17.885 00:00:00.000 UDP 28.104.0.1:35587 -> 198.28.0.2:53 1 64 1 2025-11-27 11:11:17.886 00:00:00.000 UDP 28.104.0.1:41487 -> 198.28.0.2:53 1 64 1 2025-11-27 11:11:17.896 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41487 1 80 1 2025-11-27 11:11:17.896 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35587 1 109 1 2025-11-27 11:08:04.628 00:05:08.559 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 11:12:18.216 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51022 1 80 1 2025-11-27 11:12:18.216 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60779 1 109 1 2025-11-27 11:12:18.207 00:00:00.000 UDP 28.104.0.1:51022 -> 198.28.0.2:53 1 64 1 2025-11-27 11:12:18.207 00:00:00.000 UDP 28.104.0.1:60779 -> 198.28.0.2:53 1 64 1 2025-11-27 11:09:04.639 00:05:08.539 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 11:09:04.679 00:05:08.677 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 11:13:18.507 00:00:00.000 UDP 28.104.0.1:56058 -> 198.28.0.2:53 1 64 1 2025-11-27 11:13:18.507 00:00:00.000 UDP 28.104.0.1:36270 -> 198.28.0.2:53 1 64 1 2025-11-27 11:09:04.628 00:05:08.736 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 11:13:18.517 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36270 1 80 1 2025-11-27 11:13:18.517 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56058 1 109 1 2025-11-27 11:13:39.285 00:00:00.026 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 11:09:13.176 00:06:00.457 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-27 11:14:18.817 00:00:00.000 UDP 28.104.0.1:37741 -> 198.28.0.2:53 1 64 1 2025-11-27 11:14:18.817 00:00:00.000 UDP 28.104.0.1:47497 -> 198.28.0.2:53 1 64 1 2025-11-27 11:14:18.827 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37741 1 109 1 2025-11-27 11:14:18.827 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47497 1 80 1 2025-11-27 11:15:19.077 00:00:00.000 UDP 28.104.0.1:52791 -> 198.28.0.2:53 1 64 1 2025-11-27 11:15:19.077 00:00:00.000 UDP 28.104.0.1:42455 -> 198.28.0.2:53 1 64 1 2025-11-27 11:15:19.087 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42455 1 109 1 2025-11-27 11:15:19.087 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52791 1 80 1 2025-11-27 11:16:19.375 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36557 1 109 1 2025-11-27 11:16:19.375 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33356 1 80 1 2025-11-27 11:16:19.365 00:00:00.000 UDP 28.104.0.1:33356 -> 198.28.0.2:53 1 64 1 2025-11-27 11:16:19.365 00:00:00.000 UDP 28.104.0.1:36557 -> 198.28.0.2:53 1 64 1 2025-11-27 11:12:12.085 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 33 2380 1 2025-11-27 11:12:13.178 00:06:00.581 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-27 11:17:19.664 00:00:00.000 UDP 28.104.0.1:48435 -> 198.28.0.2:53 1 64 1 2025-11-27 11:17:19.664 00:00:00.000 UDP 28.104.0.1:51261 -> 198.28.0.2:53 1 64 1 2025-11-27 11:17:19.674 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48435 1 80 1 2025-11-27 11:17:19.674 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51261 1 109 1 2025-11-27 11:14:04.629 00:05:08.559 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 11:18:19.960 00:00:00.000 UDP 28.104.0.1:53787 -> 198.28.0.2:53 1 64 1 2025-11-27 11:18:19.960 00:00:00.000 UDP 28.104.0.1:33718 -> 198.28.0.2:53 1 64 1 2025-11-27 11:18:19.972 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33718 1 80 1 2025-11-27 11:18:19.970 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53787 1 109 1 2025-11-27 11:18:39.498 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 11:15:04.629 00:05:08.737 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 11:15:04.680 00:05:08.676 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 11:15:04.640 00:05:08.538 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 11:19:20.265 00:00:00.000 UDP 28.104.0.1:51037 -> 198.28.0.2:53 1 64 1 2025-11-27 11:19:20.264 00:00:00.000 UDP 28.104.0.1:59599 -> 198.28.0.2:53 1 64 1 2025-11-27 11:19:20.274 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59599 1 109 1 2025-11-27 11:19:20.277 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51037 1 80 1 2025-11-27 11:20:26.301 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56173 1 109 1 2025-11-27 11:20:26.301 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52067 1 80 1 2025-11-27 11:20:26.291 00:00:00.000 UDP 28.104.0.1:56173 -> 198.28.0.2:53 1 64 1 2025-11-27 11:20:26.291 00:00:00.000 UDP 28.104.0.1:52067 -> 198.28.0.2:53 1 64 1 2025-11-27 11:16:13.177 00:06:00.457 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-27 11:21:26.603 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52084 1 80 1 2025-11-27 11:21:26.603 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58907 1 109 1 2025-11-27 11:21:26.592 00:00:00.000 UDP 28.104.0.1:58907 -> 198.28.0.2:53 1 64 1 2025-11-27 11:21:26.593 00:00:00.000 UDP 28.104.0.1:52084 -> 198.28.0.2:53 1 64 1 2025-11-27 11:17:32.094 00:05:01.195 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2656 1 2025-11-27 11:22:26.903 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49948 1 109 1 2025-11-27 11:22:26.903 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54073 1 80 1 2025-11-27 11:22:26.893 00:00:00.000 UDP 28.104.0.1:49948 -> 198.28.0.2:53 1 64 1 2025-11-27 11:22:26.893 00:00:00.000 UDP 28.104.0.1:54073 -> 198.28.0.2:53 1 64 1 2025-11-27 11:23:27.168 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58033 1 109 1 2025-11-27 11:23:27.168 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35785 1 80 1 2025-11-27 11:23:27.159 00:00:00.000 UDP 28.104.0.1:35785 -> 198.28.0.2:53 1 64 1 2025-11-27 11:23:27.159 00:00:00.000 UDP 28.104.0.1:58033 -> 198.28.0.2:53 1 64 1 2025-11-27 11:23:40.076 00:00:00.045 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 11:20:04.631 00:05:08.558 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 11:19:13.177 00:06:00.581 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-27 11:24:27.415 00:00:00.000 UDP 28.104.0.1:41453 -> 198.28.0.2:53 1 64 1 2025-11-27 11:24:27.415 00:00:00.000 UDP 28.104.0.1:37724 -> 198.28.0.2:53 1 64 1 2025-11-27 11:24:27.426 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37724 1 80 1 2025-11-27 11:24:27.426 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41453 1 109 1 2025-11-27 11:21:04.631 00:05:08.737 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 11:21:04.684 00:05:08.674 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 11:21:04.641 00:05:08.538 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 11:25:27.723 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43757 1 80 1 2025-11-27 11:25:27.723 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54398 1 109 1 2025-11-27 11:25:27.714 00:00:00.000 UDP 28.104.0.1:54398 -> 198.28.0.2:53 1 64 1 2025-11-27 11:25:27.715 00:00:00.000 UDP 28.104.0.1:43757 -> 198.28.0.2:53 1 64 1 2025-11-27 11:26:28.019 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45301 1 109 1 2025-11-27 11:26:28.018 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55743 1 80 1 2025-11-27 11:26:28.008 00:00:00.000 UDP 28.104.0.1:45301 -> 198.28.0.2:53 1 64 1 2025-11-27 11:26:28.008 00:00:00.000 UDP 28.104.0.1:55743 -> 198.28.0.2:53 1 64 1 2025-11-27 11:22:42.096 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 43 3064 1 2025-11-27 11:27:28.318 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40326 1 80 1 2025-11-27 11:27:28.318 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40105 1 109 1 2025-11-27 11:27:28.307 00:00:00.000 UDP 28.104.0.1:40326 -> 198.28.0.2:53 1 64 1 2025-11-27 11:27:28.307 00:00:00.000 UDP 28.104.0.1:40105 -> 198.28.0.2:53 1 64 1 2025-11-27 11:23:13.178 00:06:00.457 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-27 11:28:28.615 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60156 1 80 1 2025-11-27 11:28:28.616 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55893 1 109 1 2025-11-27 11:28:28.605 00:00:00.000 UDP 28.104.0.1:55893 -> 198.28.0.2:53 1 64 1 2025-11-27 11:28:28.605 00:00:00.000 UDP 28.104.0.1:60156 -> 198.28.0.2:53 1 64 1 2025-11-27 11:28:39.779 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 11:29:28.905 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38788 1 80 1 2025-11-27 11:29:28.905 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56849 1 109 1 2025-11-27 11:29:28.896 00:00:00.000 UDP 28.104.0.1:38788 -> 198.28.0.2:53 1 64 1 2025-11-27 11:29:28.896 00:00:00.000 UDP 28.104.0.1:56849 -> 198.28.0.2:53 1 64 1 2025-11-27 11:26:04.631 00:05:08.562 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 11:30:29.162 00:00:00.000 UDP 28.104.0.1:54484 -> 198.28.0.2:53 1 64 1 2025-11-27 11:30:29.163 00:00:00.000 UDP 28.104.0.1:43982 -> 198.28.0.2:53 1 64 1 2025-11-27 11:30:29.172 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54484 1 80 1 2025-11-27 11:30:29.173 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43982 1 109 1 2025-11-27 11:27:04.682 00:05:08.677 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 11:26:13.178 00:06:00.581 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-27 11:27:04.642 00:05:08.541 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 11:27:04.633 00:05:08.738 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 11:31:29.457 00:00:00.000 UDP 28.104.0.1:36366 -> 198.28.0.2:53 1 64 1 2025-11-27 11:31:29.456 00:00:00.000 UDP 28.104.0.1:35413 -> 198.28.0.2:53 1 64 1 2025-11-27 11:31:29.467 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36366 1 80 1 2025-11-27 11:31:29.466 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35413 1 109 1 2025-11-27 11:28:02.102 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2816 1 2025-11-27 11:32:29.760 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39029 1 80 1 2025-11-27 11:32:29.760 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54632 1 109 1 2025-11-27 11:32:29.751 00:00:00.000 UDP 28.104.0.1:39029 -> 198.28.0.2:53 1 64 1 2025-11-27 11:32:29.751 00:00:00.000 UDP 28.104.0.1:54632 -> 198.28.0.2:53 1 64 1 2025-11-27 11:33:30.057 00:00:00.000 UDP 28.104.0.1:60728 -> 198.28.0.2:53 1 64 1 2025-11-27 11:33:30.057 00:00:00.000 UDP 28.104.0.1:34509 -> 198.28.0.2:53 1 64 1 2025-11-27 11:33:30.066 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60728 1 80 1 2025-11-27 11:33:30.066 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34509 1 109 1 2025-11-27 11:33:39.776 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 11:34:30.364 00:00:00.000 UDP 28.104.0.1:50705 -> 198.28.0.2:53 1 64 1 2025-11-27 11:34:30.364 00:00:00.000 UDP 28.104.0.1:56236 -> 198.28.0.2:53 1 64 1 2025-11-27 11:34:30.374 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50705 1 109 1 2025-11-27 11:34:30.374 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56236 1 80 1 2025-11-27 11:30:13.179 00:06:00.458 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-27 11:35:30.654 00:00:00.000 UDP 28.104.0.1:44786 -> 198.28.0.2:53 1 64 1 2025-11-27 11:35:30.654 00:00:00.000 UDP 28.104.0.1:55648 -> 198.28.0.2:53 1 64 1 2025-11-27 11:35:30.666 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44786 1 80 1 2025-11-27 11:35:30.665 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55648 1 109 1 2025-11-27 11:32:04.633 00:05:08.561 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 11:36:30.948 00:00:00.000 UDP 28.104.0.1:55547 -> 198.28.0.2:53 1 64 1 2025-11-27 11:36:30.949 00:00:00.000 UDP 28.104.0.1:43106 -> 198.28.0.2:53 1 64 1 2025-11-27 11:36:30.960 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43106 1 109 1 2025-11-27 11:36:30.959 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55547 1 80 1 2025-11-27 11:33:04.634 00:05:08.737 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 11:33:04.683 00:05:08.677 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 11:33:04.643 00:05:08.541 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 11:37:31.246 00:00:00.000 UDP 28.104.0.1:53800 -> 198.28.0.2:53 1 64 1 2025-11-27 11:37:31.246 00:00:00.000 UDP 28.104.0.1:40172 -> 198.28.0.2:53 1 64 1 2025-11-27 11:37:31.257 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40172 1 109 1 2025-11-27 11:37:31.258 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53800 1 80 1 2025-11-27 11:33:22.106 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 42 3076 1 2025-11-27 11:33:13.184 00:06:00.578 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-27 11:38:31.553 00:00:00.000 UDP 28.104.0.1:48828 -> 198.28.0.2:53 1 64 1 2025-11-27 11:38:31.553 00:00:00.000 UDP 28.104.0.1:53105 -> 198.28.0.2:53 1 64 1 2025-11-27 11:38:31.563 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48828 1 80 1 2025-11-27 11:38:31.564 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53105 1 109 1 2025-11-27 11:38:39.778 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 11:39:31.860 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57780 1 109 1 2025-11-27 11:39:31.859 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59774 1 80 1 2025-11-27 11:39:31.849 00:00:00.000 UDP 28.104.0.1:57780 -> 198.28.0.2:53 1 64 1 2025-11-27 11:39:31.849 00:00:00.000 UDP 28.104.0.1:59774 -> 198.28.0.2:53 1 64 1 2025-11-27 11:40:32.140 00:00:00.000 UDP 28.104.0.1:50776 -> 198.28.0.2:53 1 64 1 2025-11-27 11:40:32.139 00:00:00.000 UDP 28.104.0.1:44666 -> 198.28.0.2:53 1 64 1 2025-11-27 11:40:32.148 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44666 1 109 1 2025-11-27 11:40:32.148 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50776 1 80 1 2025-11-27 11:41:32.430 00:00:00.000 UDP 28.104.0.1:44057 -> 198.28.0.2:53 1 64 1 2025-11-27 11:41:32.430 00:00:00.000 UDP 28.104.0.1:50110 -> 198.28.0.2:53 1 64 1 2025-11-27 11:41:32.440 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44057 1 80 1 2025-11-27 11:41:32.440 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50110 1 109 1 2025-11-27 11:37:13.184 00:06:00.454 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-27 11:38:04.635 00:05:08.561 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 11:42:32.726 00:00:00.000 UDP 28.104.0.1:45027 -> 198.28.0.2:53 1 64 1 2025-11-27 11:42:32.726 00:00:00.000 UDP 28.104.0.1:54071 -> 198.28.0.2:53 1 64 1 2025-11-27 11:42:32.737 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45027 1 109 1 2025-11-27 11:42:32.737 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54071 1 80 1 2025-11-27 11:38:42.110 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 33 2240 1 2025-11-27 11:39:04.635 00:05:08.736 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 11:39:04.686 00:05:08.677 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 11:39:04.646 00:05:08.540 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 11:43:33.053 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37751 1 80 1 2025-11-27 11:43:33.054 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38088 1 109 1 2025-11-27 11:43:33.043 00:00:00.000 UDP 28.104.0.1:37751 -> 198.28.0.2:53 1 64 1 2025-11-27 11:43:33.043 00:00:00.000 UDP 28.104.0.1:38088 -> 198.28.0.2:53 1 64 1 2025-11-27 11:43:39.918 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 11:44:33.333 00:00:00.000 UDP 28.104.0.1:38075 -> 198.28.0.2:53 1 64 1 2025-11-27 11:44:33.333 00:00:00.000 UDP 28.104.0.1:59184 -> 198.28.0.2:53 1 64 1 2025-11-27 11:44:33.343 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38075 1 80 1 2025-11-27 11:44:33.343 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59184 1 109 1 2025-11-27 11:40:13.183 00:06:00.579 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-27 11:45:33.632 00:00:00.000 UDP 28.104.0.1:33720 -> 198.28.0.2:53 1 64 1 2025-11-27 11:45:33.631 00:00:00.000 UDP 28.104.0.1:48539 -> 198.28.0.2:53 1 64 1 2025-11-27 11:45:33.642 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33720 1 80 1 2025-11-27 11:45:33.641 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48539 1 109 1 2025-11-27 11:46:33.957 00:00:00.000 UDP 28.104.0.1:35654 -> 198.28.0.2:53 1 64 1 2025-11-27 11:46:33.957 00:00:00.000 UDP 28.104.0.1:42106 -> 198.28.0.2:53 1 64 1 2025-11-27 11:46:33.967 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42106 1 80 1 2025-11-27 11:46:33.967 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35654 1 109 1 2025-11-27 11:47:34.705 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43149 1 109 1 2025-11-27 11:47:34.705 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53742 1 80 1 2025-11-27 11:47:34.695 00:00:00.000 UDP 28.104.0.1:53742 -> 198.28.0.2:53 1 64 1 2025-11-27 11:47:34.695 00:00:00.000 UDP 28.104.0.1:43149 -> 198.28.0.2:53 1 64 1 2025-11-27 11:44:04.636 00:05:08.561 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 11:44:02.113 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2588 1 2025-11-27 11:48:35.004 00:00:00.000 UDP 28.104.0.1:57735 -> 198.28.0.2:53 1 64 1 2025-11-27 11:48:35.004 00:00:00.000 UDP 28.104.0.1:39710 -> 198.28.0.2:53 1 64 1 2025-11-27 11:48:35.016 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57735 1 109 1 2025-11-27 11:48:35.021 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39710 1 80 1 2025-11-27 11:48:40.584 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 11:44:13.187 00:06:00.453 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-27 11:45:04.687 00:05:08.675 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 11:45:04.647 00:05:08.541 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 11:45:04.636 00:05:08.735 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 11:49:35.513 00:00:00.000 UDP 28.104.0.1:48534 -> 198.28.0.2:53 1 64 1 2025-11-27 11:49:35.514 00:00:00.000 UDP 28.104.0.1:45488 -> 198.28.0.2:53 1 64 1 2025-11-27 11:49:35.525 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45488 1 109 1 2025-11-27 11:49:35.524 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48534 1 80 1 2025-11-27 11:50:35.814 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46796 1 80 1 2025-11-27 11:50:35.814 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40286 1 109 1 2025-11-27 11:50:35.804 00:00:00.000 UDP 28.104.0.1:40286 -> 198.28.0.2:53 1 64 1 2025-11-27 11:50:35.804 00:00:00.000 UDP 28.104.0.1:46796 -> 198.28.0.2:53 1 64 1 2025-11-27 11:51:36.108 00:00:00.000 UDP 28.104.0.1:48524 -> 198.28.0.2:53 1 64 1 2025-11-27 11:51:36.108 00:00:00.000 UDP 28.104.0.1:34210 -> 198.28.0.2:53 1 64 1 2025-11-27 11:51:36.117 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34210 1 80 1 2025-11-27 11:51:36.117 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48524 1 109 1 2025-11-27 11:47:13.188 00:06:00.577 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-27 11:52:36.420 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59064 1 80 1 2025-11-27 11:52:36.420 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50687 1 109 1 2025-11-27 11:52:36.410 00:00:00.000 UDP 28.104.0.1:59064 -> 198.28.0.2:53 1 64 1 2025-11-27 11:52:36.411 00:00:00.000 UDP 28.104.0.1:50687 -> 198.28.0.2:53 1 64 1 2025-11-27 11:53:36.995 00:00:00.000 UDP 28.104.0.1:36241 -> 198.28.0.2:53 1 64 1 2025-11-27 11:53:36.994 00:00:00.000 UDP 28.104.0.1:53921 -> 198.28.0.2:53 1 64 1 2025-11-27 11:49:22.116 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 44 3144 1 2025-11-27 11:53:40.178 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 11:53:37.007 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36241 1 109 1 2025-11-27 11:53:37.006 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53921 1 80 1 2025-11-27 11:50:04.641 00:05:08.557 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-27 11:54:37.313 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39663 1 109 1 2025-11-27 11:54:37.313 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55568 1 80 1 2025-11-27 11:54:37.302 00:00:00.000 UDP 28.104.0.1:39663 -> 198.28.0.2:53 1 64 1 2025-11-27 11:54:37.302 00:00:00.000 UDP 28.104.0.1:55568 -> 198.28.0.2:53 1 64 1 2025-11-27 11:51:04.692 00:05:08.673 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-27 11:51:04.652 00:05:08.537 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-27 11:51:04.642 00:05:08.733 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-27 11:55:37.602 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44887 1 80 1 2025-11-27 11:55:37.603 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37992 1 109 1 2025-11-27 11:55:37.591 00:00:00.000 UDP 28.104.0.1:37992 -> 198.28.0.2:53 1 64 1 2025-11-27 11:55:37.591 00:00:00.000 UDP 28.104.0.1:44887 -> 198.28.0.2:53 1 64 1 2025-11-27 11:51:13.188 00:06:00.454 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-27 11:56:37.879 00:00:00.000 UDP 28.104.0.1:45006 -> 198.28.0.2:53 1 64 1 2025-11-27 11:56:37.879 00:00:00.000 UDP 28.104.0.1:46226 -> 198.28.0.2:53 1 64 1 2025-11-27 11:56:37.888 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45006 1 80 1 2025-11-27 11:56:37.888 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46226 1 109 1 2025-11-27 11:57:38.191 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45377 1 109 1 2025-11-27 11:57:38.191 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44630 1 80 1 2025-11-27 11:57:38.180 00:00:00.000 UDP 28.104.0.1:44630 -> 198.28.0.2:53 1 64 1 2025-11-27 11:57:38.179 00:00:00.000 UDP 28.104.0.1:45377 -> 198.28.0.2:53 1 64 1 2025-11-27 11:58:38.482 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46909 1 80 1 2025-11-27 11:58:40.176 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-27 11:58:38.482 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38894 1 109 1 2025-11-27 11:58:38.471 00:00:00.000 UDP 28.104.0.1:46909 -> 198.28.0.2:53 1 64 1 2025-11-27 11:58:38.471 00:00:00.000 UDP 28.104.0.1:38894 -> 198.28.0.2:53 1 64 1 Summary: total flows: 320, total bytes: 96437, total packets: 1422, avg bps: 202, avg pps: 0, avg bpp: 67 Time window: 2025-11-27 10:55:13 - 2025-11-27 11:58:40 Total flows processed: 320, passed: 320, Blocks skipped: 0, Bytes read: 33344 Sys: 0.0044s User: 0.0033s Wall: 0.0039s flows/second: 81113.0 Runtime: 0.0040s