Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-29 01:59:20.857 00:00:00.000 UDP 28.104.0.1:59748 -> 198.28.0.2:53 1 64 1 2025-11-29 01:59:20.857 00:00:00.000 UDP 28.104.0.1:35717 -> 198.28.0.2:53 1 64 1 2025-11-29 01:59:20.868 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35717 1 80 1 2025-11-29 01:59:20.867 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59748 1 109 1 2025-11-29 01:59:26.007 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-29 01:55:13.970 00:05:51.342 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-29 01:56:05.362 00:05:08.785 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-29 02:00:21.447 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33664 1 80 1 2025-11-29 02:00:21.447 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37214 1 109 1 2025-11-29 02:00:21.436 00:00:00.000 UDP 28.104.0.1:33664 -> 198.28.0.2:53 1 64 1 2025-11-29 02:00:21.436 00:00:00.000 UDP 28.104.0.1:37214 -> 198.28.0.2:53 1 64 1 2025-11-29 01:56:13.960 00:05:51.362 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-29 01:56:14.156 00:05:51.156 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-29 02:01:21.739 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33325 1 80 1 2025-11-29 02:01:21.739 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53896 1 109 1 2025-11-29 01:57:13.962 00:05:00.523 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-29 01:57:13.962 00:05:00.487 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-29 02:01:21.730 00:00:00.000 UDP 28.104.0.1:33325 -> 198.28.0.2:53 1 64 1 2025-11-29 02:01:21.730 00:00:00.000 UDP 28.104.0.1:53896 -> 198.28.0.2:53 1 64 1 2025-11-29 01:57:55.073 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2840 1 2025-11-29 02:02:21.989 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34456 1 80 1 2025-11-29 02:02:21.989 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52516 1 109 1 2025-11-29 02:02:21.980 00:00:00.000 UDP 28.104.0.1:34456 -> 198.28.0.2:53 1 64 1 2025-11-29 02:02:21.980 00:00:00.000 UDP 28.104.0.1:52516 -> 198.28.0.2:53 1 64 1 2025-11-29 02:03:22.258 00:00:00.000 UDP 28.104.0.1:56256 -> 198.28.0.2:53 1 64 1 2025-11-29 02:03:22.258 00:00:00.000 UDP 28.104.0.1:33185 -> 198.28.0.2:53 1 64 1 2025-11-29 02:03:22.269 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33185 1 80 1 2025-11-29 02:03:22.269 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56256 1 109 1 2025-11-29 02:04:22.557 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36706 1 109 1 2025-11-29 02:04:26.239 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-29 02:04:22.558 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60007 1 80 1 2025-11-29 02:04:22.546 00:00:00.000 UDP 28.104.0.1:36706 -> 198.28.0.2:53 1 64 1 2025-11-29 02:04:22.546 00:00:00.000 UDP 28.104.0.1:60007 -> 198.28.0.2:53 1 64 1 2025-11-29 02:05:22.799 00:00:00.000 UDP 28.104.0.1:45595 -> 198.28.0.2:53 1 64 1 2025-11-29 02:05:22.799 00:00:00.000 UDP 28.104.0.1:40188 -> 198.28.0.2:53 1 64 1 2025-11-29 02:05:22.809 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40188 1 109 1 2025-11-29 02:05:22.809 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45595 1 80 1 2025-11-29 02:01:13.972 00:05:51.341 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-29 02:02:05.362 00:05:08.787 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-29 02:06:23.095 00:00:00.000 UDP 28.104.0.1:60553 -> 198.28.0.2:53 1 64 1 2025-11-29 02:06:23.095 00:00:00.000 UDP 28.104.0.1:59096 -> 198.28.0.2:53 1 64 1 2025-11-29 02:06:23.105 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59096 1 80 1 2025-11-29 02:06:23.105 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60553 1 109 1 2025-11-29 02:02:14.157 00:05:51.155 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-29 02:02:13.961 00:05:51.362 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-29 02:03:13.962 00:05:00.522 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-29 02:03:13.962 00:05:00.487 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-29 02:07:23.399 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33848 1 80 1 2025-11-29 02:03:15.077 00:05:10.012 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2916 1 2025-11-29 02:07:23.400 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56356 1 109 1 2025-11-29 02:07:23.389 00:00:00.000 UDP 28.104.0.1:33848 -> 198.28.0.2:53 1 64 1 2025-11-29 02:07:23.389 00:00:00.000 UDP 28.104.0.1:56356 -> 198.28.0.2:53 1 64 1 2025-11-29 02:08:23.651 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37764 1 109 1 2025-11-29 02:08:23.653 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56204 1 80 1 2025-11-29 02:08:23.642 00:00:00.000 UDP 28.104.0.1:37764 -> 198.28.0.2:53 1 64 1 2025-11-29 02:08:23.642 00:00:00.000 UDP 28.104.0.1:56204 -> 198.28.0.2:53 1 64 1 2025-11-29 02:09:26.383 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-29 02:09:23.946 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53225 1 80 1 2025-11-29 02:09:23.947 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53579 1 109 1 2025-11-29 02:09:23.936 00:00:00.000 UDP 28.104.0.1:53579 -> 198.28.0.2:53 1 64 1 2025-11-29 02:09:23.935 00:00:00.000 UDP 28.104.0.1:53225 -> 198.28.0.2:53 1 64 1 2025-11-29 02:10:24.237 00:00:00.000 UDP 28.104.0.1:34614 -> 198.28.0.2:53 1 64 1 2025-11-29 02:10:24.237 00:00:00.000 UDP 28.104.0.1:44587 -> 198.28.0.2:53 1 64 1 2025-11-29 02:10:24.247 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44587 1 80 1 2025-11-29 02:10:24.247 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34614 1 109 1 2025-11-29 02:11:24.495 00:00:00.000 UDP 28.104.0.1:60419 -> 198.28.0.2:53 1 64 1 2025-11-29 02:11:24.495 00:00:00.000 UDP 28.104.0.1:45236 -> 198.28.0.2:53 1 64 1 2025-11-29 02:11:24.505 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60419 1 109 1 2025-11-29 02:11:24.505 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45236 1 80 1 2025-11-29 02:07:13.975 00:05:51.339 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-29 02:08:05.363 00:05:08.787 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-29 02:12:24.795 00:00:00.000 UDP 28.104.0.1:38035 -> 198.28.0.2:53 1 64 1 2025-11-29 02:12:24.795 00:00:00.000 UDP 28.104.0.1:55005 -> 198.28.0.2:53 1 64 1 2025-11-29 02:12:24.806 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38035 1 109 1 2025-11-29 02:12:24.806 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55005 1 80 1 2025-11-29 02:08:35.086 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2748 1 2025-11-29 02:08:14.159 00:05:51.155 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-29 02:08:13.966 00:05:51.359 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-29 02:09:13.966 00:05:00.520 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-29 02:09:13.966 00:05:00.484 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-29 02:13:25.101 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50852 1 80 1 2025-11-29 02:13:25.101 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46951 1 109 1 2025-11-29 02:13:25.092 00:00:00.000 UDP 28.104.0.1:46951 -> 198.28.0.2:53 1 64 1 2025-11-29 02:13:25.092 00:00:00.000 UDP 28.104.0.1:50852 -> 198.28.0.2:53 1 64 1 2025-11-29 02:14:25.397 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60262 1 109 1 2025-11-29 02:14:26.174 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-29 02:14:25.397 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57297 1 80 1 2025-11-29 02:14:25.387 00:00:00.000 UDP 28.104.0.1:60262 -> 198.28.0.2:53 1 64 1 2025-11-29 02:14:25.387 00:00:00.000 UDP 28.104.0.1:57297 -> 198.28.0.2:53 1 64 1 2025-11-29 02:15:25.634 00:00:00.000 UDP 28.104.0.1:55548 -> 198.28.0.2:53 1 64 1 2025-11-29 02:15:25.633 00:00:00.000 UDP 28.104.0.1:33193 -> 198.28.0.2:53 1 64 1 2025-11-29 02:15:25.645 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33193 1 109 1 2025-11-29 02:15:25.646 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55548 1 80 1 2025-11-29 02:16:25.901 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43853 1 80 1 2025-11-29 02:16:25.901 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59160 1 109 1 2025-11-29 02:16:25.890 00:00:00.000 UDP 28.104.0.1:43853 -> 198.28.0.2:53 1 64 1 2025-11-29 02:16:25.890 00:00:00.000 UDP 28.104.0.1:59160 -> 198.28.0.2:53 1 64 1 2025-11-29 02:17:26.201 00:00:00.000 UDP 28.104.0.1:59856 -> 198.28.0.2:53 1 64 1 2025-11-29 02:17:26.201 00:00:00.000 UDP 28.104.0.1:51226 -> 198.28.0.2:53 1 64 1 2025-11-29 02:17:26.211 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59856 1 109 1 2025-11-29 02:17:26.211 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51226 1 80 1 2025-11-29 02:13:13.976 00:05:51.338 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-29 02:13:55.088 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2564 1 2025-11-29 02:14:05.364 00:05:08.787 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-29 02:18:26.450 00:00:00.000 UDP 28.104.0.1:39035 -> 198.28.0.2:53 1 64 1 2025-11-29 02:18:26.450 00:00:00.000 UDP 28.104.0.1:54227 -> 198.28.0.2:53 1 64 1 2025-11-29 02:18:26.460 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39035 1 80 1 2025-11-29 02:18:26.460 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54227 1 109 1 2025-11-29 02:14:14.161 00:05:51.154 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-29 02:14:13.967 00:05:51.359 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-29 02:15:13.967 00:05:00.521 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-29 02:15:13.967 00:05:00.487 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-29 02:19:26.736 00:00:00.000 UDP 28.104.0.1:58299 -> 198.28.0.2:53 1 64 1 2025-11-29 02:19:26.736 00:00:00.000 UDP 28.104.0.1:43540 -> 198.28.0.2:53 1 64 1 2025-11-29 02:19:26.239 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-29 02:19:26.746 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43540 1 80 1 2025-11-29 02:19:26.746 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58299 1 109 1 2025-11-29 02:20:27.065 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35486 1 80 1 2025-11-29 02:20:27.065 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55175 1 109 1 2025-11-29 02:20:27.054 00:00:00.000 UDP 28.104.0.1:55175 -> 198.28.0.2:53 1 64 1 2025-11-29 02:20:27.054 00:00:00.000 UDP 28.104.0.1:35486 -> 198.28.0.2:53 1 64 1 2025-11-29 02:21:27.349 00:00:00.000 UDP 28.104.0.1:55028 -> 198.28.0.2:53 1 64 1 2025-11-29 02:21:27.349 00:00:00.000 UDP 28.104.0.1:34848 -> 198.28.0.2:53 1 64 1 2025-11-29 02:21:27.359 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55028 1 109 1 2025-11-29 02:21:27.358 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34848 1 80 1 2025-11-29 02:22:30.710 00:00:00.000 UDP 28.104.0.1:36344 -> 198.28.0.2:53 1 64 1 2025-11-29 02:22:30.710 00:00:00.000 UDP 28.104.0.1:49956 -> 198.28.0.2:53 1 64 1 2025-11-29 02:22:30.720 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49956 1 80 1 2025-11-29 02:22:30.721 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36344 1 109 1 2025-11-29 02:19:15.092 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 34 2304 1 2025-11-29 02:23:30.977 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35091 1 80 1 2025-11-29 02:23:30.978 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55111 1 109 1 2025-11-29 02:23:30.967 00:00:00.000 UDP 28.104.0.1:55111 -> 198.28.0.2:53 1 64 1 2025-11-29 02:23:30.965 00:00:00.000 UDP 28.104.0.1:35091 -> 198.28.0.2:53 1 64 1 2025-11-29 02:19:13.979 00:05:51.337 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-29 02:20:05.366 00:05:08.787 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-29 02:24:26.458 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-29 02:24:31.269 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45596 1 109 1 2025-11-29 02:24:31.269 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51108 1 80 1 2025-11-29 02:24:31.259 00:00:00.000 UDP 28.104.0.1:45596 -> 198.28.0.2:53 1 64 1 2025-11-29 02:24:31.259 00:00:00.000 UDP 28.104.0.1:51108 -> 198.28.0.2:53 1 64 1 2025-11-29 02:20:13.969 00:05:51.358 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-29 02:20:14.162 00:05:51.156 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-29 02:21:13.971 00:05:00.517 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-29 02:21:13.971 00:05:00.483 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-29 02:25:31.571 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37157 1 80 1 2025-11-29 02:25:31.571 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32947 1 109 1 2025-11-29 02:25:31.561 00:00:00.000 UDP 28.104.0.1:37157 -> 198.28.0.2:53 1 64 1 2025-11-29 02:25:31.561 00:00:00.000 UDP 28.104.0.1:32947 -> 198.28.0.2:53 1 64 1 2025-11-29 02:26:31.860 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55021 1 80 1 2025-11-29 02:26:31.860 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34820 1 109 1 2025-11-29 02:26:31.850 00:00:00.000 UDP 28.104.0.1:55021 -> 198.28.0.2:53 1 64 1 2025-11-29 02:26:31.850 00:00:00.000 UDP 28.104.0.1:34820 -> 198.28.0.2:53 1 64 1 2025-11-29 02:27:32.159 00:00:00.000 UDP 28.104.0.1:40692 -> 198.28.0.2:53 1 64 1 2025-11-29 02:27:32.159 00:00:00.000 UDP 28.104.0.1:58278 -> 198.28.0.2:53 1 64 1 2025-11-29 02:27:32.170 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40692 1 80 1 2025-11-29 02:27:32.170 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58278 1 109 1 2025-11-29 02:28:32.464 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39861 1 109 1 2025-11-29 02:28:32.464 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46931 1 80 1 2025-11-29 02:28:32.453 00:00:00.000 UDP 28.104.0.1:46931 -> 198.28.0.2:53 1 64 1 2025-11-29 02:28:32.453 00:00:00.000 UDP 28.104.0.1:39861 -> 198.28.0.2:53 1 64 1 2025-11-29 02:24:35.098 00:05:10.002 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2772 1 2025-11-29 02:29:26.720 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-29 02:29:32.758 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57567 1 109 1 2025-11-29 02:29:32.758 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52250 1 80 1 2025-11-29 02:29:32.748 00:00:00.000 UDP 28.104.0.1:57567 -> 198.28.0.2:53 1 64 1 2025-11-29 02:29:32.748 00:00:00.000 UDP 28.104.0.1:52250 -> 198.28.0.2:53 1 64 1 2025-11-29 02:25:13.985 00:05:51.336 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-29 02:26:05.367 00:05:08.787 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-29 02:30:33.066 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43957 1 109 1 2025-11-29 02:30:33.067 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33988 1 80 1 2025-11-29 02:30:33.057 00:00:00.000 UDP 28.104.0.1:33988 -> 198.28.0.2:53 1 64 1 2025-11-29 02:30:33.056 00:00:00.000 UDP 28.104.0.1:43957 -> 198.28.0.2:53 1 64 1 2025-11-29 02:26:13.973 00:05:51.356 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-29 02:26:14.164 00:05:51.156 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-29 02:27:13.976 00:05:00.517 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-29 02:27:13.976 00:05:00.481 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-29 02:31:33.363 00:00:00.000 UDP 28.104.0.1:55802 -> 198.28.0.2:53 1 64 1 2025-11-29 02:31:33.363 00:00:00.000 UDP 28.104.0.1:48634 -> 198.28.0.2:53 1 64 1 2025-11-29 02:31:33.374 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48634 1 109 1 2025-11-29 02:31:33.374 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55802 1 80 1 2025-11-29 02:32:33.676 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43937 1 80 1 2025-11-29 02:32:33.677 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60317 1 109 1 2025-11-29 02:32:33.666 00:00:00.000 UDP 28.104.0.1:43937 -> 198.28.0.2:53 1 64 1 2025-11-29 02:32:33.667 00:00:00.000 UDP 28.104.0.1:60317 -> 198.28.0.2:53 1 64 1 2025-11-29 02:33:33.978 00:00:00.000 UDP 28.104.0.1:50123 -> 198.28.0.2:53 1 64 1 2025-11-29 02:33:33.978 00:00:00.000 UDP 28.104.0.1:57651 -> 198.28.0.2:53 1 64 1 2025-11-29 02:33:33.989 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50123 1 109 1 2025-11-29 02:33:33.989 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57651 1 80 1 2025-11-29 02:29:55.101 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2760 1 2025-11-29 02:34:26.699 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-29 02:34:34.278 00:00:00.000 UDP 28.104.0.1:35643 -> 198.28.0.2:53 1 64 1 2025-11-29 02:34:34.278 00:00:00.000 UDP 28.104.0.1:58342 -> 198.28.0.2:53 1 64 1 2025-11-29 02:34:34.289 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58342 1 109 1 2025-11-29 02:34:34.289 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35643 1 80 1 2025-11-29 02:35:34.580 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47259 1 109 1 2025-11-29 02:35:34.580 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47680 1 80 1 2025-11-29 02:35:34.570 00:00:00.000 UDP 28.104.0.1:47259 -> 198.28.0.2:53 1 64 1 2025-11-29 02:35:34.570 00:00:00.000 UDP 28.104.0.1:47680 -> 198.28.0.2:53 1 64 1 2025-11-29 02:31:13.985 00:05:51.336 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-29 02:32:05.370 00:05:08.787 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-29 02:36:34.875 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47036 1 109 1 2025-11-29 02:36:34.873 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47588 1 80 1 2025-11-29 02:36:34.863 00:00:00.000 UDP 28.104.0.1:47588 -> 198.28.0.2:53 1 64 1 2025-11-29 02:36:34.864 00:00:00.000 UDP 28.104.0.1:47036 -> 198.28.0.2:53 1 64 1 2025-11-29 02:32:14.166 00:05:51.155 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-29 02:32:13.976 00:05:51.355 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-29 02:33:13.977 00:05:00.518 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-29 02:33:13.977 00:05:00.480 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-29 02:37:35.177 00:00:00.000 UDP 28.104.0.1:57937 -> 198.28.0.2:53 1 64 1 2025-11-29 02:37:35.177 00:00:00.000 UDP 28.104.0.1:33637 -> 198.28.0.2:53 1 64 1 2025-11-29 02:37:35.187 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33637 1 80 1 2025-11-29 02:37:35.187 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57937 1 109 1 2025-11-29 02:38:35.476 00:00:00.000 UDP 28.104.0.1:37805 -> 198.28.0.2:53 1 64 1 2025-11-29 02:38:35.476 00:00:00.000 UDP 28.104.0.1:59775 -> 198.28.0.2:53 1 64 1 2025-11-29 02:38:35.487 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37805 1 109 1 2025-11-29 02:38:35.487 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59775 1 80 1 2025-11-29 02:39:26.847 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-29 02:35:15.105 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 45 3260 1 2025-11-29 02:39:35.776 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53098 1 109 1 2025-11-29 02:39:35.776 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60118 1 80 1 2025-11-29 02:39:35.767 00:00:00.000 UDP 28.104.0.1:53098 -> 198.28.0.2:53 1 64 1 2025-11-29 02:39:35.767 00:00:00.000 UDP 28.104.0.1:60118 -> 198.28.0.2:53 1 64 1 2025-11-29 02:40:36.064 00:00:00.000 UDP 28.104.0.1:56147 -> 198.28.0.2:53 1 64 1 2025-11-29 02:40:36.064 00:00:00.000 UDP 28.104.0.1:49933 -> 198.28.0.2:53 1 64 1 2025-11-29 02:40:36.073 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56147 1 109 1 2025-11-29 02:40:36.073 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49933 1 80 1 2025-11-29 02:41:36.328 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37392 1 80 1 2025-11-29 02:41:36.328 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37882 1 109 1 2025-11-29 02:41:36.317 00:00:00.000 UDP 28.104.0.1:37882 -> 198.28.0.2:53 1 64 1 2025-11-29 02:41:36.317 00:00:00.000 UDP 28.104.0.1:37392 -> 198.28.0.2:53 1 64 1 2025-11-29 02:37:13.987 00:05:51.334 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-29 02:38:05.371 00:05:08.786 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-29 02:42:36.627 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34961 1 80 1 2025-11-29 02:42:36.627 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44568 1 109 1 2025-11-29 02:42:36.617 00:00:00.000 UDP 28.104.0.1:34961 -> 198.28.0.2:53 1 64 1 2025-11-29 02:42:36.617 00:00:00.000 UDP 28.104.0.1:44568 -> 198.28.0.2:53 1 64 1 2025-11-29 02:38:14.167 00:05:51.155 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-29 02:38:13.977 00:05:51.355 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-29 02:39:13.978 00:05:00.520 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-29 02:39:13.978 00:05:00.481 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-29 02:43:36.938 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46354 1 109 1 2025-11-29 02:43:36.939 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53728 1 80 1 2025-11-29 02:43:36.928 00:00:00.000 UDP 28.104.0.1:46354 -> 198.28.0.2:53 1 64 1 2025-11-29 02:43:36.928 00:00:00.000 UDP 28.104.0.1:53728 -> 198.28.0.2:53 1 64 1 2025-11-29 02:44:26.917 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-29 02:44:37.248 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36900 1 80 1 2025-11-29 02:44:37.249 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51815 1 109 1 2025-11-29 02:44:37.239 00:00:00.000 UDP 28.104.0.1:51815 -> 198.28.0.2:53 1 64 1 2025-11-29 02:44:37.238 00:00:00.000 UDP 28.104.0.1:36900 -> 198.28.0.2:53 1 64 1 2025-11-29 02:40:35.113 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2504 1 2025-11-29 02:45:37.499 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45154 1 80 1 2025-11-29 02:45:37.500 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53869 1 109 1 2025-11-29 02:45:37.489 00:00:00.000 UDP 28.104.0.1:53869 -> 198.28.0.2:53 1 64 1 2025-11-29 02:45:37.489 00:00:00.000 UDP 28.104.0.1:45154 -> 198.28.0.2:53 1 64 1 2025-11-29 02:46:37.789 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47912 1 80 1 2025-11-29 02:46:37.789 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58950 1 109 1 2025-11-29 02:46:37.778 00:00:00.000 UDP 28.104.0.1:58950 -> 198.28.0.2:53 1 64 1 2025-11-29 02:46:37.779 00:00:00.000 UDP 28.104.0.1:47912 -> 198.28.0.2:53 1 64 1 2025-11-29 02:47:38.057 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46325 1 109 1 2025-11-29 02:47:38.057 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45933 1 80 1 2025-11-29 02:47:38.046 00:00:00.000 UDP 28.104.0.1:45933 -> 198.28.0.2:53 1 64 1 2025-11-29 02:47:38.046 00:00:00.000 UDP 28.104.0.1:46325 -> 198.28.0.2:53 1 64 1 2025-11-29 02:43:13.991 00:05:51.331 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-29 02:44:05.373 00:05:08.787 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-29 02:48:38.349 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35494 1 80 1 2025-11-29 02:48:38.349 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55559 1 109 1 2025-11-29 02:48:38.340 00:00:00.000 UDP 28.104.0.1:55559 -> 198.28.0.2:53 1 64 1 2025-11-29 02:48:38.340 00:00:00.000 UDP 28.104.0.1:35494 -> 198.28.0.2:53 1 64 1 2025-11-29 02:44:13.980 00:05:51.355 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-29 02:44:14.167 00:05:51.158 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-29 02:45:13.982 00:05:00.518 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-29 02:45:13.982 00:05:00.478 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-29 02:49:27.210 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-29 02:49:38.636 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35782 1 109 1 2025-11-29 02:49:38.636 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40097 1 80 1 2025-11-29 02:49:38.627 00:00:00.000 UDP 28.104.0.1:40097 -> 198.28.0.2:53 1 64 1 2025-11-29 02:49:38.628 00:00:00.000 UDP 28.104.0.1:35782 -> 198.28.0.2:53 1 64 1 2025-11-29 02:45:55.118 00:05:10.022 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2508 1 2025-11-29 02:50:38.916 00:00:00.000 UDP 28.104.0.1:47660 -> 198.28.0.2:53 1 64 1 2025-11-29 02:50:38.916 00:00:00.000 UDP 28.104.0.1:42266 -> 198.28.0.2:53 1 64 1 2025-11-29 02:50:38.927 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47660 1 80 1 2025-11-29 02:50:38.925 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42266 1 109 1 2025-11-29 02:51:39.246 00:00:00.000 UDP 28.104.0.1:55398 -> 198.28.0.2:53 1 64 1 2025-11-29 02:51:39.246 00:00:00.000 UDP 28.104.0.1:41504 -> 198.28.0.2:53 1 64 1 2025-11-29 02:51:39.258 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41504 1 109 1 2025-11-29 02:51:39.257 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55398 1 80 1 2025-11-29 02:52:39.616 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51563 1 109 1 2025-11-29 02:52:39.616 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58864 1 80 1 2025-11-29 02:52:39.605 00:00:00.000 UDP 28.104.0.1:58864 -> 198.28.0.2:53 1 64 1 2025-11-29 02:52:39.606 00:00:00.000 UDP 28.104.0.1:51563 -> 198.28.0.2:53 1 64 1 2025-11-29 02:53:39.910 00:00:00.000 UDP 28.104.0.1:56081 -> 198.28.0.2:53 1 64 1 2025-11-29 02:53:39.910 00:00:00.000 UDP 28.104.0.1:33716 -> 198.28.0.2:53 1 64 1 2025-11-29 02:53:39.921 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56081 1 80 1 2025-11-29 02:53:39.921 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33716 1 109 1 2025-11-29 02:49:13.990 00:05:51.335 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-29 02:50:05.375 00:05:08.787 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-29 02:54:27.128 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-29 02:54:40.231 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48519 1 109 1 2025-11-29 02:54:40.231 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42683 1 80 1 2025-11-29 02:54:40.221 00:00:00.000 UDP 28.104.0.1:42683 -> 198.28.0.2:53 1 64 1 2025-11-29 02:54:40.221 00:00:00.000 UDP 28.104.0.1:48519 -> 198.28.0.2:53 1 64 1 2025-11-29 02:50:13.981 00:05:51.355 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-29 02:50:14.171 00:05:51.155 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-29 02:51:13.980 00:05:00.520 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-11-29 02:51:13.980 00:05:00.485 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-11-29 02:51:15.140 00:05:10.010 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2692 1 2025-11-29 02:55:40.538 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47609 1 109 1 2025-11-29 02:55:40.538 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60660 1 80 1 2025-11-29 02:55:40.528 00:00:00.000 UDP 28.104.0.1:47609 -> 198.28.0.2:53 1 64 1 2025-11-29 02:55:40.528 00:00:00.000 UDP 28.104.0.1:60660 -> 198.28.0.2:53 1 64 1 2025-11-29 02:56:40.835 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44589 1 80 1 2025-11-29 02:56:40.835 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55123 1 109 1 2025-11-29 02:56:40.826 00:00:00.000 UDP 28.104.0.1:55123 -> 198.28.0.2:53 1 64 1 2025-11-29 02:56:40.826 00:00:00.000 UDP 28.104.0.1:44589 -> 198.28.0.2:53 1 64 1 2025-11-29 02:57:41.395 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36843 1 80 1 2025-11-29 02:57:41.395 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44993 1 109 1 2025-11-29 02:57:41.385 00:00:00.000 UDP 28.104.0.1:44993 -> 198.28.0.2:53 1 64 1 2025-11-29 02:57:41.385 00:00:00.000 UDP 28.104.0.1:36843 -> 198.28.0.2:53 1 64 1 2025-11-29 02:58:41.697 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59710 1 80 1 2025-11-29 02:58:41.697 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32813 1 109 1 2025-11-29 02:58:41.687 00:00:00.000 UDP 28.104.0.1:59710 -> 198.28.0.2:53 1 64 1 2025-11-29 02:58:41.687 00:00:00.000 UDP 28.104.0.1:32813 -> 198.28.0.2:53 1 64 1 Summary: total flows: 323, total bytes: 96192, total packets: 1419, avg bps: 202, avg pps: 0, avg bpp: 67 Time window: 2025-11-29 01:55:13 - 2025-11-29 02:58:41 Total flows processed: 323, passed: 323, Blocks skipped: 0, Bytes read: 33656 Sys: 0.0059s User: 0.0010s Wall: 0.0037s flows/second: 86899.3 Runtime: 0.0037s