Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-30 01:59:11.405 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51561 1 109 1 2025-11-30 01:59:11.405 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60646 1 80 1 2025-11-30 01:59:11.394 00:00:00.000 UDP 28.104.0.1:60646 -> 198.28.0.2:53 1 64 1 2025-11-30 01:59:11.394 00:00:00.000 UDP 28.104.0.1:51561 -> 198.28.0.2:53 1 64 1 2025-11-30 01:55:05.742 00:05:08.673 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-30 01:59:55.020 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-30 02:00:11.692 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44488 1 109 1 2025-11-30 02:00:11.692 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56570 1 80 1 2025-11-30 02:00:11.683 00:00:00.000 UDP 28.104.0.1:44488 -> 198.28.0.2:53 1 64 1 2025-11-30 02:00:11.683 00:00:00.000 UDP 28.104.0.1:56570 -> 198.28.0.2:53 1 64 1 2025-11-30 01:56:05.794 00:05:08.766 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-30 01:56:05.754 00:05:08.653 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-30 01:56:14.567 00:05:51.176 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-30 02:01:11.996 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36827 1 80 1 2025-11-30 02:01:11.996 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36750 1 109 1 2025-11-30 02:01:11.987 00:00:00.000 UDP 28.104.0.1:36827 -> 198.28.0.2:53 1 64 1 2025-11-30 02:01:11.987 00:00:00.000 UDP 28.104.0.1:36750 -> 198.28.0.2:53 1 64 1 2025-11-30 01:56:14.405 00:06:00.521 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-30 01:56:14.405 00:06:00.554 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-30 02:02:12.299 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47515 1 109 1 2025-11-30 02:02:12.299 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41886 1 80 1 2025-11-30 02:02:12.290 00:00:00.000 UDP 28.104.0.1:41886 -> 198.28.0.2:53 1 64 1 2025-11-30 02:02:12.289 00:00:00.000 UDP 28.104.0.1:47515 -> 198.28.0.2:53 1 64 1 2025-11-30 02:03:12.633 00:00:00.000 UDP 28.104.0.1:38435 -> 198.28.0.2:53 1 64 1 2025-11-30 02:03:12.633 00:00:00.000 UDP 28.104.0.1:56868 -> 198.28.0.2:53 1 64 1 2025-11-30 02:03:12.645 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56868 1 80 1 2025-11-30 02:03:12.645 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38435 1 109 1 2025-11-30 01:59:27.182 00:05:10.014 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2792 1 2025-11-30 02:04:12.939 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41881 1 109 1 2025-11-30 02:04:12.939 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38453 1 80 1 2025-11-30 02:04:12.930 00:00:00.000 UDP 28.104.0.1:38453 -> 198.28.0.2:53 1 64 1 2025-11-30 02:04:12.930 00:00:00.000 UDP 28.104.0.1:41881 -> 198.28.0.2:53 1 64 1 2025-11-30 02:04:54.983 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-30 02:05:13.232 00:00:00.000 UDP 28.104.0.1:47580 -> 198.28.0.2:53 1 64 1 2025-11-30 02:05:13.232 00:00:00.000 UDP 28.104.0.1:37687 -> 198.28.0.2:53 1 64 1 2025-11-30 02:05:13.242 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47580 1 80 1 2025-11-30 02:01:05.743 00:05:08.673 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-30 02:05:13.242 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37687 1 109 1 2025-11-30 02:06:13.557 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51032 1 109 1 2025-11-30 02:06:13.557 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41895 1 80 1 2025-11-30 02:02:05.793 00:05:08.768 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-30 02:02:05.753 00:05:08.653 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-30 02:06:13.547 00:00:00.000 UDP 28.104.0.1:51032 -> 198.28.0.2:53 1 64 1 2025-11-30 02:06:13.547 00:00:00.000 UDP 28.104.0.1:41895 -> 198.28.0.2:53 1 64 1 2025-11-30 02:02:14.571 00:05:51.177 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-30 02:07:13.815 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43980 1 80 1 2025-11-30 02:07:13.821 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45231 1 109 1 2025-11-30 02:07:13.805 00:00:00.000 UDP 28.104.0.1:45231 -> 198.28.0.2:53 1 64 1 2025-11-30 02:07:13.805 00:00:00.000 UDP 28.104.0.1:43980 -> 198.28.0.2:53 1 64 1 2025-11-30 02:08:14.117 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53325 1 109 1 2025-11-30 02:08:14.117 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60644 1 80 1 2025-11-30 02:08:14.107 00:00:00.000 UDP 28.104.0.1:53325 -> 198.28.0.2:53 1 64 1 2025-11-30 02:03:14.406 00:06:00.521 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-30 02:03:14.406 00:06:00.555 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-30 02:08:14.107 00:00:00.000 UDP 28.104.0.1:60644 -> 198.28.0.2:53 1 64 1 2025-11-30 02:04:47.196 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 34 2360 1 2025-11-30 02:09:14.398 00:00:00.000 UDP 28.104.0.1:44366 -> 198.28.0.2:53 1 64 1 2025-11-30 02:09:14.398 00:00:00.000 UDP 28.104.0.1:51731 -> 198.28.0.2:53 1 64 1 2025-11-30 02:09:14.408 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51731 1 80 1 2025-11-30 02:09:14.408 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44366 1 109 1 2025-11-30 02:09:54.909 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-30 02:10:14.694 00:00:00.000 UDP 28.104.0.1:48158 -> 198.28.0.2:53 1 64 1 2025-11-30 02:10:14.694 00:00:00.000 UDP 28.104.0.1:58893 -> 198.28.0.2:53 1 64 1 2025-11-30 02:10:14.705 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58893 1 109 1 2025-11-30 02:10:14.705 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48158 1 80 1 2025-11-30 02:07:05.746 00:05:08.670 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-30 02:11:15.000 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43880 1 80 1 2025-11-30 02:11:15.001 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48029 1 109 1 2025-11-30 02:11:14.990 00:00:00.000 UDP 28.104.0.1:43880 -> 198.28.0.2:53 1 64 1 2025-11-30 02:11:14.990 00:00:00.000 UDP 28.104.0.1:48029 -> 198.28.0.2:53 1 64 1 2025-11-30 02:12:15.292 00:00:00.000 UDP 28.104.0.1:47220 -> 198.28.0.2:53 1 64 1 2025-11-30 02:08:05.796 00:05:08.768 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-30 02:08:05.756 00:05:08.651 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-30 02:12:15.292 00:00:00.000 UDP 28.104.0.1:60698 -> 198.28.0.2:53 1 64 1 2025-11-30 02:12:15.303 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47220 1 109 1 2025-11-30 02:12:15.303 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60698 1 80 1 2025-11-30 02:08:14.570 00:05:51.178 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-30 02:13:15.593 00:00:00.000 UDP 28.104.0.1:36837 -> 198.28.0.2:53 1 64 1 2025-11-30 02:13:15.594 00:00:00.000 UDP 28.104.0.1:38756 -> 198.28.0.2:53 1 64 1 2025-11-30 02:13:15.605 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38756 1 109 1 2025-11-30 02:13:15.605 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36837 1 80 1 2025-11-30 02:14:15.861 00:00:00.000 UDP 28.104.0.1:49311 -> 198.28.0.2:53 1 64 1 2025-11-30 02:14:15.861 00:00:00.000 UDP 28.104.0.1:49926 -> 198.28.0.2:53 1 64 1 2025-11-30 02:14:15.872 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49926 1 109 1 2025-11-30 02:14:15.872 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49311 1 80 1 2025-11-30 02:10:07.205 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2784 1 2025-11-30 02:14:55.164 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-30 02:15:16.188 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34169 1 80 1 2025-11-30 02:15:16.188 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33141 1 109 1 2025-11-30 02:15:16.179 00:00:00.000 UDP 28.104.0.1:33141 -> 198.28.0.2:53 1 64 1 2025-11-30 02:10:14.408 00:06:00.521 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-30 02:10:14.408 00:06:00.557 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-30 02:15:16.179 00:00:00.000 UDP 28.104.0.1:34169 -> 198.28.0.2:53 1 64 1 2025-11-30 02:16:16.425 00:00:00.000 UDP 28.104.0.1:55620 -> 198.28.0.2:53 1 64 1 2025-11-30 02:16:16.426 00:00:00.000 UDP 28.104.0.1:41896 -> 198.28.0.2:53 1 64 1 2025-11-30 02:16:16.436 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55620 1 109 1 2025-11-30 02:16:16.436 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41896 1 80 1 2025-11-30 02:13:05.747 00:05:08.670 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-30 02:17:16.741 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36000 1 109 1 2025-11-30 02:17:16.741 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33582 1 80 1 2025-11-30 02:17:16.731 00:00:00.000 UDP 28.104.0.1:33582 -> 198.28.0.2:53 1 64 1 2025-11-30 02:17:16.731 00:00:00.000 UDP 28.104.0.1:36000 -> 198.28.0.2:53 1 64 1 2025-11-30 02:14:05.799 00:05:08.768 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-30 02:14:05.759 00:05:08.649 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-30 02:18:17.730 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32817 1 80 1 2025-11-30 02:18:17.730 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34611 1 109 1 2025-11-30 02:18:17.720 00:00:00.000 UDP 28.104.0.1:32817 -> 198.28.0.2:53 1 64 1 2025-11-30 02:18:17.720 00:00:00.000 UDP 28.104.0.1:34611 -> 198.28.0.2:53 1 64 1 2025-11-30 02:14:14.575 00:05:51.173 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-30 02:19:17.982 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37582 1 109 1 2025-11-30 02:19:17.983 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45233 1 80 1 2025-11-30 02:19:17.972 00:00:00.000 UDP 28.104.0.1:45233 -> 198.28.0.2:53 1 64 1 2025-11-30 02:19:17.971 00:00:00.000 UDP 28.104.0.1:37582 -> 198.28.0.2:53 1 64 1 2025-11-30 02:15:27.209 00:05:10.010 OSPF 28.0.2.1:0 -> 224.0.0.5:0 42 2984 1 2025-11-30 02:19:55.495 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-30 02:20:18.238 00:00:00.000 UDP 28.104.0.1:49428 -> 198.28.0.2:53 1 64 1 2025-11-30 02:20:18.238 00:00:00.000 UDP 28.104.0.1:37141 -> 198.28.0.2:53 1 64 1 2025-11-30 02:20:18.250 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49428 1 80 1 2025-11-30 02:20:18.251 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37141 1 109 1 2025-11-30 02:21:18.539 00:00:00.000 UDP 28.104.0.1:32815 -> 198.28.0.2:53 1 64 1 2025-11-30 02:21:18.539 00:00:00.000 UDP 28.104.0.1:54096 -> 198.28.0.2:53 1 64 1 2025-11-30 02:21:18.549 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54096 1 80 1 2025-11-30 02:21:18.549 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32815 1 109 1 2025-11-30 02:17:14.407 00:06:00.523 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-30 02:17:14.407 00:06:00.557 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-30 02:22:18.848 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33189 1 80 1 2025-11-30 02:22:18.845 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35396 1 109 1 2025-11-30 02:22:18.835 00:00:00.000 UDP 28.104.0.1:35396 -> 198.28.0.2:53 1 64 1 2025-11-30 02:22:18.835 00:00:00.000 UDP 28.104.0.1:33189 -> 198.28.0.2:53 1 64 1 2025-11-30 02:23:19.125 00:00:00.000 UDP 28.104.0.1:34144 -> 198.28.0.2:53 1 64 1 2025-11-30 02:23:19.125 00:00:00.000 UDP 28.104.0.1:52933 -> 198.28.0.2:53 1 64 1 2025-11-30 02:19:05.749 00:05:08.670 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-30 02:23:19.136 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52933 1 109 1 2025-11-30 02:23:19.136 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34144 1 80 1 2025-11-30 02:20:05.799 00:05:08.771 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-30 02:20:05.759 00:05:08.650 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-30 02:24:19.375 00:00:00.000 UDP 28.104.0.1:40810 -> 198.28.0.2:53 1 64 1 2025-11-30 02:24:19.375 00:00:00.000 UDP 28.104.0.1:58439 -> 198.28.0.2:53 1 64 1 2025-11-30 02:24:19.385 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58439 1 80 1 2025-11-30 02:24:19.385 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40810 1 109 1 2025-11-30 02:24:55.524 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-30 02:20:47.218 00:05:10.016 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2916 1 2025-11-30 02:20:14.577 00:05:51.173 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-30 02:25:19.673 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36997 1 80 1 2025-11-30 02:25:19.673 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35070 1 109 1 2025-11-30 02:25:19.662 00:00:00.000 UDP 28.104.0.1:35070 -> 198.28.0.2:53 1 64 1 2025-11-30 02:25:19.662 00:00:00.000 UDP 28.104.0.1:36997 -> 198.28.0.2:53 1 64 1 2025-11-30 02:26:19.957 00:00:00.000 UDP 28.104.0.1:45667 -> 198.28.0.2:53 1 64 1 2025-11-30 02:26:19.957 00:00:00.000 UDP 28.104.0.1:36345 -> 198.28.0.2:53 1 64 1 2025-11-30 02:26:19.969 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45667 1 109 1 2025-11-30 02:26:19.969 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36345 1 80 1 2025-11-30 02:27:20.280 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41106 1 80 1 2025-11-30 02:27:20.280 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60934 1 109 1 2025-11-30 02:27:20.270 00:00:00.000 UDP 28.104.0.1:41106 -> 198.28.0.2:53 1 64 1 2025-11-30 02:27:20.270 00:00:00.000 UDP 28.104.0.1:60934 -> 198.28.0.2:53 1 64 1 2025-11-30 02:28:20.808 00:00:00.000 UDP 28.104.0.1:57548 -> 198.28.0.2:53 1 64 1 2025-11-30 02:28:20.808 00:00:00.000 UDP 28.104.0.1:51363 -> 198.28.0.2:53 1 64 1 2025-11-30 02:28:20.819 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51363 1 109 1 2025-11-30 02:28:20.818 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57548 1 80 1 2025-11-30 02:24:14.408 00:06:00.523 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-30 02:24:14.408 00:06:00.557 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-30 02:25:05.750 00:05:08.672 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-30 02:29:21.101 00:00:00.000 UDP 28.104.0.1:38694 -> 198.28.0.2:53 1 64 1 2025-11-30 02:29:21.101 00:00:00.000 UDP 28.104.0.1:50131 -> 198.28.0.2:53 1 64 1 2025-11-30 02:29:21.112 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38694 1 109 1 2025-11-30 02:29:21.112 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50131 1 80 1 2025-11-30 02:29:55.588 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-30 02:26:05.800 00:05:08.776 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-30 02:26:05.760 00:05:08.653 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-30 02:30:21.901 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53578 1 109 1 2025-11-30 02:30:21.901 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52491 1 80 1 2025-11-30 02:26:07.234 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 42 2936 1 2025-11-30 02:30:21.891 00:00:00.000 UDP 28.104.0.1:52491 -> 198.28.0.2:53 1 64 1 2025-11-30 02:30:21.892 00:00:00.000 UDP 28.104.0.1:53578 -> 198.28.0.2:53 1 64 1 2025-11-30 02:26:14.582 00:05:51.179 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-30 02:31:22.204 00:00:00.000 UDP 28.104.0.1:34091 -> 198.28.0.2:53 1 64 1 2025-11-30 02:31:22.204 00:00:00.000 UDP 28.104.0.1:36877 -> 198.28.0.2:53 1 64 1 2025-11-30 02:31:22.214 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34091 1 80 1 2025-11-30 02:31:22.214 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36877 1 109 1 2025-11-30 02:32:23.213 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49001 1 109 1 2025-11-30 02:32:23.195 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43604 1 80 1 2025-11-30 02:32:23.184 00:00:00.000 UDP 28.104.0.1:43604 -> 198.28.0.2:53 1 64 1 2025-11-30 02:32:23.184 00:00:00.000 UDP 28.104.0.1:49001 -> 198.28.0.2:53 1 64 1 2025-11-30 02:33:23.505 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54097 1 109 1 2025-11-30 02:33:23.506 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58809 1 80 1 2025-11-30 02:33:23.496 00:00:00.000 UDP 28.104.0.1:58809 -> 198.28.0.2:53 1 64 1 2025-11-30 02:33:23.496 00:00:00.000 UDP 28.104.0.1:54097 -> 198.28.0.2:53 1 64 1 2025-11-30 02:34:24.390 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58520 1 109 1 2025-11-30 02:34:24.390 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35591 1 80 1 2025-11-30 02:34:24.381 00:00:00.000 UDP 28.104.0.1:35591 -> 198.28.0.2:53 1 64 1 2025-11-30 02:34:24.381 00:00:00.000 UDP 28.104.0.1:58520 -> 198.28.0.2:53 1 64 1 2025-11-30 02:34:56.044 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-30 02:31:05.759 00:05:08.665 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-30 02:35:24.685 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50587 1 80 1 2025-11-30 02:35:24.685 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41633 1 109 1 2025-11-30 02:35:24.674 00:00:00.000 UDP 28.104.0.1:41633 -> 198.28.0.2:53 1 64 1 2025-11-30 02:35:24.674 00:00:00.000 UDP 28.104.0.1:50587 -> 198.28.0.2:53 1 64 1 2025-11-30 02:31:27.242 00:05:10.009 OSPF 28.0.2.1:0 -> 224.0.0.5:0 34 2360 1 2025-11-30 02:32:05.816 00:05:08.761 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-30 02:31:14.413 00:06:00.522 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-30 02:32:05.776 00:05:08.639 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-30 02:31:14.413 00:06:00.563 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-30 02:36:25.005 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48201 1 109 1 2025-11-30 02:36:25.005 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52254 1 80 1 2025-11-30 02:36:24.995 00:00:00.000 UDP 28.104.0.1:52254 -> 198.28.0.2:53 1 64 1 2025-11-30 02:36:24.995 00:00:00.000 UDP 28.104.0.1:48201 -> 198.28.0.2:53 1 64 1 2025-11-30 02:32:14.586 00:05:51.174 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-30 02:37:25.299 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57888 1 109 1 2025-11-30 02:37:25.299 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42811 1 80 1 2025-11-30 02:37:25.287 00:00:00.000 UDP 28.104.0.1:57888 -> 198.28.0.2:53 1 64 1 2025-11-30 02:37:25.288 00:00:00.000 UDP 28.104.0.1:42811 -> 198.28.0.2:53 1 64 1 2025-11-30 02:38:25.545 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43720 1 80 1 2025-11-30 02:38:25.545 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40826 1 109 1 2025-11-30 02:38:25.534 00:00:00.000 UDP 28.104.0.1:43720 -> 198.28.0.2:53 1 64 1 2025-11-30 02:38:25.535 00:00:00.000 UDP 28.104.0.1:40826 -> 198.28.0.2:53 1 64 1 2025-11-30 02:39:25.822 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49831 1 80 1 2025-11-30 02:39:25.821 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38384 1 109 1 2025-11-30 02:39:25.809 00:00:00.000 UDP 28.104.0.1:49831 -> 198.28.0.2:53 1 64 1 2025-11-30 02:39:25.809 00:00:00.000 UDP 28.104.0.1:38384 -> 198.28.0.2:53 1 64 1 2025-11-30 02:39:55.926 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-30 02:40:26.106 00:00:00.000 UDP 28.104.0.1:50433 -> 198.28.0.2:53 1 64 1 2025-11-30 02:40:26.107 00:00:00.000 UDP 28.104.0.1:54789 -> 198.28.0.2:53 1 64 1 2025-11-30 02:40:26.118 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50433 1 80 1 2025-11-30 02:40:26.118 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54789 1 109 1 2025-11-30 02:36:47.252 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2928 1 2025-11-30 02:37:05.762 00:05:08.664 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-30 02:41:26.369 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39639 1 109 1 2025-11-30 02:41:26.368 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37773 1 80 1 2025-11-30 02:41:26.360 00:00:00.000 UDP 28.104.0.1:39639 -> 198.28.0.2:53 1 64 1 2025-11-30 02:41:26.359 00:00:00.000 UDP 28.104.0.1:37773 -> 198.28.0.2:53 1 64 1 2025-11-30 02:38:05.813 00:05:08.768 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-30 02:38:05.773 00:05:08.644 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-30 02:42:26.656 00:00:00.000 UDP 28.104.0.1:34775 -> 198.28.0.2:53 1 64 1 2025-11-30 02:42:26.656 00:00:00.000 UDP 28.104.0.1:44896 -> 198.28.0.2:53 1 64 1 2025-11-30 02:42:26.667 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34775 1 109 1 2025-11-30 02:42:26.667 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44896 1 80 1 2025-11-30 02:38:14.587 00:05:51.180 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-30 02:38:14.414 00:06:00.521 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-30 02:38:14.414 00:06:00.562 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-30 02:43:26.968 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34120 1 80 1 2025-11-30 02:43:26.968 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39386 1 109 1 2025-11-30 02:43:26.958 00:00:00.000 UDP 28.104.0.1:39386 -> 198.28.0.2:53 1 64 1 2025-11-30 02:43:26.958 00:00:00.000 UDP 28.104.0.1:34120 -> 198.28.0.2:53 1 64 1 2025-11-30 02:44:27.272 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48649 1 109 1 2025-11-30 02:44:27.272 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53896 1 80 1 2025-11-30 02:44:27.262 00:00:00.000 UDP 28.104.0.1:53896 -> 198.28.0.2:53 1 64 1 2025-11-30 02:44:27.262 00:00:00.000 UDP 28.104.0.1:48649 -> 198.28.0.2:53 1 64 1 2025-11-30 02:44:55.724 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-30 02:45:27.557 00:00:00.000 UDP 28.104.0.1:53611 -> 198.28.0.2:53 1 64 1 2025-11-30 02:45:27.554 00:00:00.000 UDP 28.104.0.1:47088 -> 198.28.0.2:53 1 64 1 2025-11-30 02:45:27.564 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47088 1 109 1 2025-11-30 02:45:27.567 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53611 1 80 1 2025-11-30 02:42:07.256 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2592 1 2025-11-30 02:46:27.872 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34933 1 109 1 2025-11-30 02:46:27.872 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51817 1 80 1 2025-11-30 02:46:27.861 00:00:00.000 UDP 28.104.0.1:51817 -> 198.28.0.2:53 1 64 1 2025-11-30 02:46:27.861 00:00:00.000 UDP 28.104.0.1:34933 -> 198.28.0.2:53 1 64 1 2025-11-30 02:43:05.767 00:05:08.661 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-30 02:47:28.181 00:00:00.000 UDP 28.104.0.1:34082 -> 198.28.0.2:53 1 64 1 2025-11-30 02:47:28.181 00:00:00.000 UDP 28.104.0.1:50278 -> 198.28.0.2:53 1 64 1 2025-11-30 02:47:28.192 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50278 1 80 1 2025-11-30 02:47:28.193 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34082 1 109 1 2025-11-30 02:44:05.818 00:05:08.763 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-30 02:44:05.778 00:05:08.640 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-30 02:48:28.431 00:00:00.000 UDP 28.104.0.1:42208 -> 198.28.0.2:53 1 64 1 2025-11-30 02:48:28.431 00:00:00.000 UDP 28.104.0.1:43041 -> 198.28.0.2:53 1 64 1 2025-11-30 02:48:28.442 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43041 1 80 1 2025-11-30 02:48:28.442 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42208 1 109 1 2025-11-30 02:44:14.589 00:05:51.179 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-30 02:49:28.738 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56454 1 109 1 2025-11-30 02:49:28.737 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57406 1 80 1 2025-11-30 02:49:28.727 00:00:00.000 UDP 28.104.0.1:57406 -> 198.28.0.2:53 1 64 1 2025-11-30 02:49:28.727 00:00:00.000 UDP 28.104.0.1:56454 -> 198.28.0.2:53 1 64 1 2025-11-30 02:49:55.913 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-30 02:45:14.416 00:06:00.521 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-30 02:45:14.416 00:06:00.563 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-30 02:50:29.051 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49067 1 109 1 2025-11-30 02:50:29.051 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52783 1 80 1 2025-11-30 02:50:29.040 00:00:00.000 UDP 28.104.0.1:52783 -> 198.28.0.2:53 1 64 1 2025-11-30 02:50:29.040 00:00:00.000 UDP 28.104.0.1:49067 -> 198.28.0.2:53 1 64 1 2025-11-30 02:51:29.344 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36273 1 80 1 2025-11-30 02:47:27.261 00:05:00.921 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2888 1 2025-11-30 02:51:29.344 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50942 1 109 1 2025-11-30 02:51:29.334 00:00:00.000 UDP 28.104.0.1:36273 -> 198.28.0.2:53 1 64 1 2025-11-30 02:51:29.334 00:00:00.000 UDP 28.104.0.1:50942 -> 198.28.0.2:53 1 64 1 2025-11-30 02:52:29.644 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37571 1 80 1 2025-11-30 02:52:29.644 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34279 1 109 1 2025-11-30 02:52:29.634 00:00:00.000 UDP 28.104.0.1:34279 -> 198.28.0.2:53 1 64 1 2025-11-30 02:52:29.634 00:00:00.000 UDP 28.104.0.1:37571 -> 198.28.0.2:53 1 64 1 2025-11-30 02:49:05.769 00:05:08.660 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-11-30 02:53:29.938 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58836 1 109 1 2025-11-30 02:53:29.938 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54239 1 80 1 2025-11-30 02:53:29.927 00:00:00.000 UDP 28.104.0.1:54239 -> 198.28.0.2:53 1 64 1 2025-11-30 02:53:29.927 00:00:00.000 UDP 28.104.0.1:58836 -> 198.28.0.2:53 1 64 1 2025-11-30 02:50:05.819 00:05:08.762 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-11-30 02:50:05.779 00:05:08.640 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-11-30 02:54:30.243 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41401 1 80 1 2025-11-30 02:54:30.243 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43603 1 109 1 2025-11-30 02:54:30.234 00:00:00.000 UDP 28.104.0.1:41401 -> 198.28.0.2:53 1 64 1 2025-11-30 02:54:30.234 00:00:00.000 UDP 28.104.0.1:43603 -> 198.28.0.2:53 1 64 1 2025-11-30 02:54:55.986 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-11-30 02:50:14.591 00:05:51.179 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-11-30 02:55:30.531 00:00:00.000 UDP 28.104.0.1:32901 -> 198.28.0.2:53 1 64 1 2025-11-30 02:55:30.531 00:00:00.000 UDP 28.104.0.1:53741 -> 198.28.0.2:53 1 64 1 2025-11-30 02:55:30.542 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53741 1 109 1 2025-11-30 02:55:30.542 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32901 1 80 1 2025-11-30 02:56:30.821 00:00:00.000 UDP 28.104.0.1:40782 -> 198.28.0.2:53 1 64 1 2025-11-30 02:56:30.821 00:00:00.000 UDP 28.104.0.1:46688 -> 198.28.0.2:53 1 64 1 2025-11-30 02:56:30.832 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46688 1 109 1 2025-11-30 02:56:30.832 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40782 1 80 1 2025-11-30 02:52:37.265 00:05:11.001 OSPF 28.0.2.1:0 -> 224.0.0.5:0 43 3000 1 2025-11-30 02:52:14.418 00:06:00.520 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-11-30 02:52:14.418 00:06:00.562 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-11-30 02:57:31.123 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49994 1 80 1 2025-11-30 02:57:31.123 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33187 1 109 1 2025-11-30 02:57:31.113 00:00:00.000 UDP 28.104.0.1:49994 -> 198.28.0.2:53 1 64 1 2025-11-30 02:57:31.113 00:00:00.000 UDP 28.104.0.1:33187 -> 198.28.0.2:53 1 64 1 2025-11-30 02:58:31.417 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56129 1 80 1 2025-11-30 02:58:31.416 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60160 1 109 1 2025-11-30 02:58:31.407 00:00:00.000 UDP 28.104.0.1:56129 -> 198.28.0.2:53 1 64 1 2025-11-30 02:58:31.406 00:00:00.000 UDP 28.104.0.1:60160 -> 198.28.0.2:53 1 64 1 Summary: total flows: 321, total bytes: 97602, total packets: 1439, avg bps: 205, avg pps: 0, avg bpp: 67 Time window: 2025-11-30 01:55:05 - 2025-11-30 02:58:31 Total flows processed: 321, passed: 321, Blocks skipped: 0, Bytes read: 33448 Sys: 0.0054s User: 0.0018s Wall: 0.0027s flows/second: 120222.5 Runtime: 0.0027s