Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-01 03:58:59.564 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41087 1 80 1 2025-12-01 03:58:59.564 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40912 1 109 1 2025-12-01 03:58:59.554 00:00:00.000 UDP 28.104.0.1:40912 -> 198.28.0.2:53 1 64 1 2025-12-01 03:58:59.554 00:00:00.000 UDP 28.104.0.1:41087 -> 198.28.0.2:53 1 64 1 2025-12-01 03:55:06.219 00:05:08.681 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-01 03:55:06.271 00:05:08.803 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-01 03:59:59.817 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45498 1 109 1 2025-12-01 03:59:59.817 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44375 1 80 1 2025-12-01 03:59:59.807 00:00:00.000 UDP 28.104.0.1:44375 -> 198.28.0.2:53 1 64 1 2025-12-01 03:59:59.807 00:00:00.000 UDP 28.104.0.1:45498 -> 198.28.0.2:53 1 64 1 2025-12-01 03:55:14.889 00:05:51.342 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-01 03:56:06.220 00:05:08.863 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-01 04:00:26.130 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 04:01:00.116 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43175 1 80 1 2025-12-01 04:01:00.116 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59538 1 109 1 2025-12-01 04:01:00.105 00:00:00.000 UDP 28.104.0.1:43175 -> 198.28.0.2:53 1 64 1 2025-12-01 04:01:00.105 00:00:00.000 UDP 28.104.0.1:59538 -> 198.28.0.2:53 1 64 1 2025-12-01 03:57:14.889 00:05:00.499 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-12-01 03:57:09.129 00:05:10.001 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2568 1 2025-12-01 04:02:00.352 00:00:00.000 UDP 28.104.0.1:41787 -> 198.28.0.2:53 1 64 1 2025-12-01 04:02:00.352 00:00:00.000 UDP 28.104.0.1:46658 -> 198.28.0.2:53 1 64 1 2025-12-01 04:02:00.364 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41787 1 80 1 2025-12-01 04:02:00.364 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46658 1 109 1 2025-12-01 04:03:00.643 00:00:00.000 UDP 28.104.0.1:48976 -> 198.28.0.2:53 1 64 1 2025-12-01 04:03:00.643 00:00:00.000 UDP 28.104.0.1:40750 -> 198.28.0.2:53 1 64 1 2025-12-01 04:03:00.654 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48976 1 80 1 2025-12-01 04:03:00.654 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40750 1 109 1 2025-12-01 04:04:00.940 00:00:00.000 UDP 28.104.0.1:54259 -> 198.28.0.2:53 1 64 1 2025-12-01 04:04:00.940 00:00:00.000 UDP 28.104.0.1:59535 -> 198.28.0.2:53 1 64 1 2025-12-01 04:04:00.950 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54259 1 109 1 2025-12-01 04:04:00.950 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59535 1 80 1 2025-12-01 04:00:14.892 00:05:00.640 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-01 04:05:01.258 00:00:00.000 UDP 28.104.0.1:56143 -> 198.28.0.2:53 1 64 1 2025-12-01 04:05:01.257 00:00:00.000 UDP 28.104.0.1:39080 -> 198.28.0.2:53 1 64 1 2025-12-01 04:05:01.267 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39080 1 109 1 2025-12-01 04:05:01.267 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56143 1 80 1 2025-12-01 04:01:06.221 00:05:08.681 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-01 04:01:06.271 00:05:08.805 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-01 04:05:26.232 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 04:06:01.570 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58070 1 80 1 2025-12-01 04:06:01.570 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57967 1 109 1 2025-12-01 04:06:01.560 00:00:00.000 UDP 28.104.0.1:57967 -> 198.28.0.2:53 1 64 1 2025-12-01 04:06:01.560 00:00:00.000 UDP 28.104.0.1:58070 -> 198.28.0.2:53 1 64 1 2025-12-01 04:01:14.891 00:05:51.342 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-01 04:02:06.221 00:05:08.868 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-01 04:02:29.131 00:05:10.010 OSPF 28.0.2.1:0 -> 224.0.0.5:0 42 2964 1 2025-12-01 04:07:01.851 00:00:00.000 UDP 28.104.0.1:58267 -> 198.28.0.2:53 1 64 1 2025-12-01 04:07:01.851 00:00:00.000 UDP 28.104.0.1:50404 -> 198.28.0.2:53 1 64 1 2025-12-01 04:07:01.862 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58267 1 80 1 2025-12-01 04:07:01.862 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50404 1 109 1 2025-12-01 04:03:14.891 00:05:00.503 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-12-01 04:08:02.177 00:00:00.000 UDP 28.104.0.1:34976 -> 198.28.0.2:53 1 64 1 2025-12-01 04:08:02.177 00:00:00.000 UDP 28.104.0.1:44740 -> 198.28.0.2:53 1 64 1 2025-12-01 04:08:02.186 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34976 1 80 1 2025-12-01 04:08:02.186 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44740 1 109 1 2025-12-01 04:09:02.483 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57810 1 80 1 2025-12-01 04:09:02.483 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50120 1 109 1 2025-12-01 04:09:02.472 00:00:00.000 UDP 28.104.0.1:50120 -> 198.28.0.2:53 1 64 1 2025-12-01 04:09:02.472 00:00:00.000 UDP 28.104.0.1:57810 -> 198.28.0.2:53 1 64 1 2025-12-01 04:10:02.774 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37450 1 109 1 2025-12-01 04:10:02.774 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60863 1 80 1 2025-12-01 04:10:02.764 00:00:00.000 UDP 28.104.0.1:60863 -> 198.28.0.2:53 1 64 1 2025-12-01 04:10:02.764 00:00:00.000 UDP 28.104.0.1:37450 -> 198.28.0.2:53 1 64 1 2025-12-01 04:06:14.892 00:05:00.640 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-01 04:10:26.320 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 04:11:03.069 00:00:00.000 UDP 28.104.0.1:58225 -> 198.28.0.2:53 1 64 1 2025-12-01 04:11:03.069 00:00:00.000 UDP 28.104.0.1:47755 -> 198.28.0.2:53 1 64 1 2025-12-01 04:11:03.079 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47755 1 80 1 2025-12-01 04:11:03.079 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58225 1 109 1 2025-12-01 04:07:06.223 00:05:08.681 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-01 04:07:06.274 00:05:08.805 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-01 04:07:49.141 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2852 1 2025-12-01 04:12:03.376 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45849 1 80 1 2025-12-01 04:12:03.376 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45594 1 109 1 2025-12-01 04:12:03.366 00:00:00.000 UDP 28.104.0.1:45594 -> 198.28.0.2:53 1 64 1 2025-12-01 04:07:14.891 00:05:51.342 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-01 04:12:03.366 00:00:00.000 UDP 28.104.0.1:45849 -> 198.28.0.2:53 1 64 1 2025-12-01 04:08:06.223 00:05:08.864 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-01 04:13:03.631 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41112 1 80 1 2025-12-01 04:13:03.631 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59197 1 109 1 2025-12-01 04:13:03.620 00:00:00.000 UDP 28.104.0.1:59197 -> 198.28.0.2:53 1 64 1 2025-12-01 04:13:03.620 00:00:00.000 UDP 28.104.0.1:41112 -> 198.28.0.2:53 1 64 1 2025-12-01 04:09:14.903 00:05:00.489 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-12-01 04:14:03.929 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44742 1 80 1 2025-12-01 04:14:03.929 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45333 1 109 1 2025-12-01 04:14:03.920 00:00:00.000 UDP 28.104.0.1:45333 -> 198.28.0.2:53 1 64 1 2025-12-01 04:14:03.919 00:00:00.000 UDP 28.104.0.1:44742 -> 198.28.0.2:53 1 64 1 2025-12-01 04:15:04.241 00:00:00.000 UDP 28.104.0.1:35530 -> 198.28.0.2:53 1 64 1 2025-12-01 04:15:04.241 00:00:00.000 UDP 28.104.0.1:57225 -> 198.28.0.2:53 1 64 1 2025-12-01 04:15:04.251 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57225 1 80 1 2025-12-01 04:15:04.253 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35530 1 109 1 2025-12-01 04:15:26.849 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 04:16:04.520 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46231 1 80 1 2025-12-01 04:16:04.520 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58534 1 109 1 2025-12-01 04:16:04.511 00:00:00.000 UDP 28.104.0.1:46231 -> 198.28.0.2:53 1 64 1 2025-12-01 04:16:04.511 00:00:00.000 UDP 28.104.0.1:58534 -> 198.28.0.2:53 1 64 1 2025-12-01 04:12:14.893 00:05:00.640 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-01 04:17:04.813 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44384 1 80 1 2025-12-01 04:17:04.813 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34912 1 109 1 2025-12-01 04:17:04.804 00:00:00.000 UDP 28.104.0.1:34912 -> 198.28.0.2:53 1 64 1 2025-12-01 04:17:04.803 00:00:00.000 UDP 28.104.0.1:44384 -> 198.28.0.2:53 1 64 1 2025-12-01 04:13:06.274 00:05:08.805 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-01 04:13:06.224 00:05:08.682 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-01 04:13:09.147 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2832 1 2025-12-01 04:18:05.098 00:00:00.000 UDP 28.104.0.1:41817 -> 198.28.0.2:53 1 64 1 2025-12-01 04:18:05.098 00:00:00.000 UDP 28.104.0.1:33983 -> 198.28.0.2:53 1 64 1 2025-12-01 04:13:14.892 00:05:51.342 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-01 04:18:05.109 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41817 1 80 1 2025-12-01 04:18:05.110 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33983 1 109 1 2025-12-01 04:14:06.225 00:05:08.865 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-01 04:19:06.196 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52128 1 80 1 2025-12-01 04:19:06.197 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40883 1 109 1 2025-12-01 04:19:06.186 00:00:00.000 UDP 28.104.0.1:52128 -> 198.28.0.2:53 1 64 1 2025-12-01 04:19:06.186 00:00:00.000 UDP 28.104.0.1:40883 -> 198.28.0.2:53 1 64 1 2025-12-01 04:15:14.894 00:05:00.498 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-12-01 04:20:06.487 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49934 1 109 1 2025-12-01 04:20:06.487 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52959 1 80 1 2025-12-01 04:20:06.478 00:00:00.000 UDP 28.104.0.1:49934 -> 198.28.0.2:53 1 64 1 2025-12-01 04:20:06.478 00:00:00.000 UDP 28.104.0.1:52959 -> 198.28.0.2:53 1 64 1 2025-12-01 04:20:26.540 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 04:21:06.781 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44782 1 80 1 2025-12-01 04:21:06.781 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38030 1 109 1 2025-12-01 04:21:06.770 00:00:00.000 UDP 28.104.0.1:38030 -> 198.28.0.2:53 1 64 1 2025-12-01 04:21:06.770 00:00:00.000 UDP 28.104.0.1:44782 -> 198.28.0.2:53 1 64 1 2025-12-01 04:22:07.080 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52631 1 109 1 2025-12-01 04:22:07.080 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35937 1 80 1 2025-12-01 04:22:07.071 00:00:00.000 UDP 28.104.0.1:35937 -> 198.28.0.2:53 1 64 1 2025-12-01 04:22:07.071 00:00:00.000 UDP 28.104.0.1:52631 -> 198.28.0.2:53 1 64 1 2025-12-01 04:18:14.897 00:05:00.638 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-01 04:18:29.152 00:05:10.011 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2516 1 2025-12-01 04:23:07.373 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42784 1 80 1 2025-12-01 04:23:07.373 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50765 1 109 1 2025-12-01 04:23:07.362 00:00:00.000 UDP 28.104.0.1:42784 -> 198.28.0.2:53 1 64 1 2025-12-01 04:23:07.362 00:00:00.000 UDP 28.104.0.1:50765 -> 198.28.0.2:53 1 64 1 2025-12-01 04:19:06.275 00:05:08.804 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-01 04:19:06.225 00:05:08.681 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-01 04:19:14.896 00:05:51.340 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-01 04:24:08.317 00:00:00.000 UDP 28.104.0.1:57458 -> 198.28.0.2:53 1 64 1 2025-12-01 04:24:08.317 00:00:00.000 UDP 28.104.0.1:43437 -> 198.28.0.2:53 1 64 1 2025-12-01 04:24:08.327 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57458 1 80 1 2025-12-01 04:24:08.328 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43437 1 109 1 2025-12-01 04:20:06.225 00:05:08.865 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-01 04:25:08.626 00:00:00.000 UDP 28.104.0.1:54587 -> 198.28.0.2:53 1 64 1 2025-12-01 04:25:08.626 00:00:00.000 UDP 28.104.0.1:57727 -> 198.28.0.2:53 1 64 1 2025-12-01 04:25:08.636 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54587 1 80 1 2025-12-01 04:25:08.635 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57727 1 109 1 2025-12-01 04:21:14.896 00:05:00.497 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-12-01 04:25:26.833 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 04:26:08.925 00:00:00.000 UDP 28.104.0.1:57200 -> 198.28.0.2:53 1 64 1 2025-12-01 04:26:08.925 00:00:00.000 UDP 28.104.0.1:60040 -> 198.28.0.2:53 1 64 1 2025-12-01 04:26:08.937 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57200 1 109 1 2025-12-01 04:26:08.937 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60040 1 80 1 2025-12-01 04:27:09.249 00:00:00.000 UDP 28.104.0.1:47716 -> 198.28.0.2:53 1 64 1 2025-12-01 04:27:09.249 00:00:00.000 UDP 28.104.0.1:33991 -> 198.28.0.2:53 1 64 1 2025-12-01 04:27:09.260 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33991 1 80 1 2025-12-01 04:27:09.260 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47716 1 109 1 2025-12-01 04:23:49.163 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2588 1 2025-12-01 04:28:09.557 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45265 1 80 1 2025-12-01 04:28:09.556 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49389 1 109 1 2025-12-01 04:28:09.545 00:00:00.000 UDP 28.104.0.1:45265 -> 198.28.0.2:53 1 64 1 2025-12-01 04:28:09.545 00:00:00.000 UDP 28.104.0.1:49389 -> 198.28.0.2:53 1 64 1 2025-12-01 04:24:14.896 00:05:00.648 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-01 04:29:09.835 00:00:00.000 UDP 28.104.0.1:49657 -> 198.28.0.2:53 1 64 1 2025-12-01 04:29:09.835 00:00:00.000 UDP 28.104.0.1:34449 -> 198.28.0.2:53 1 64 1 2025-12-01 04:25:06.276 00:05:08.809 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-01 04:29:09.843 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34449 1 80 1 2025-12-01 04:29:09.843 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49657 1 109 1 2025-12-01 04:25:06.225 00:05:08.682 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-01 04:30:10.131 00:00:00.000 UDP 28.104.0.1:36328 -> 198.28.0.2:53 1 64 1 2025-12-01 04:30:10.131 00:00:00.000 UDP 28.104.0.1:37393 -> 198.28.0.2:53 1 64 1 2025-12-01 04:25:14.896 00:05:51.345 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-01 04:30:10.143 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36328 1 80 1 2025-12-01 04:30:10.143 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37393 1 109 1 2025-12-01 04:26:06.226 00:05:08.866 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-01 04:30:26.976 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 04:31:10.441 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43266 1 80 1 2025-12-01 04:31:10.441 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33994 1 109 1 2025-12-01 04:31:10.431 00:00:00.000 UDP 28.104.0.1:43266 -> 198.28.0.2:53 1 64 1 2025-12-01 04:31:10.431 00:00:00.000 UDP 28.104.0.1:33994 -> 198.28.0.2:53 1 64 1 2025-12-01 04:27:14.897 00:05:00.498 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-12-01 04:32:10.739 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59506 1 80 1 2025-12-01 04:32:10.739 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53781 1 109 1 2025-12-01 04:32:10.729 00:00:00.000 UDP 28.104.0.1:53781 -> 198.28.0.2:53 1 64 1 2025-12-01 04:32:10.729 00:00:00.000 UDP 28.104.0.1:59506 -> 198.28.0.2:53 1 64 1 2025-12-01 04:33:11.276 00:00:00.000 UDP 28.104.0.1:40533 -> 198.28.0.2:53 1 64 1 2025-12-01 04:33:11.276 00:00:00.000 UDP 28.104.0.1:37582 -> 198.28.0.2:53 1 64 1 2025-12-01 04:33:11.285 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37582 1 80 1 2025-12-01 04:33:11.285 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40533 1 109 1 2025-12-01 04:29:09.166 00:05:10.410 OSPF 28.0.2.1:0 -> 224.0.0.5:0 44 3184 1 2025-12-01 04:34:11.568 00:00:00.000 UDP 28.104.0.1:34572 -> 198.28.0.2:53 1 64 1 2025-12-01 04:34:11.569 00:00:00.000 UDP 28.104.0.1:46887 -> 198.28.0.2:53 1 64 1 2025-12-01 04:34:11.579 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46887 1 80 1 2025-12-01 04:34:11.579 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34572 1 109 1 2025-12-01 04:30:14.898 00:05:00.639 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-01 04:31:06.232 00:05:08.677 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-01 04:35:12.403 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48425 1 80 1 2025-12-01 04:35:12.403 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33968 1 109 1 2025-12-01 04:31:06.281 00:05:08.802 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-01 04:35:12.392 00:00:00.000 UDP 28.104.0.1:33968 -> 198.28.0.2:53 1 64 1 2025-12-01 04:35:12.392 00:00:00.000 UDP 28.104.0.1:48425 -> 198.28.0.2:53 1 64 1 2025-12-01 04:35:27.056 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 04:31:14.898 00:05:51.345 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-01 04:32:06.232 00:05:08.861 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-01 04:36:12.697 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52231 1 80 1 2025-12-01 04:36:12.696 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41695 1 109 1 2025-12-01 04:36:12.686 00:00:00.000 UDP 28.104.0.1:52231 -> 198.28.0.2:53 1 64 1 2025-12-01 04:36:12.686 00:00:00.000 UDP 28.104.0.1:41695 -> 198.28.0.2:53 1 64 1 2025-12-01 04:37:12.990 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51590 1 109 1 2025-12-01 04:37:12.990 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47507 1 80 1 2025-12-01 04:37:12.981 00:00:00.000 UDP 28.104.0.1:51590 -> 198.28.0.2:53 1 64 1 2025-12-01 04:37:12.980 00:00:00.000 UDP 28.104.0.1:47507 -> 198.28.0.2:53 1 64 1 2025-12-01 04:33:14.899 00:05:00.496 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-12-01 04:38:13.310 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45181 1 109 1 2025-12-01 04:38:13.310 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42346 1 80 1 2025-12-01 04:38:13.300 00:00:00.000 UDP 28.104.0.1:45181 -> 198.28.0.2:53 1 64 1 2025-12-01 04:38:13.300 00:00:00.000 UDP 28.104.0.1:42346 -> 198.28.0.2:53 1 64 1 2025-12-01 04:34:29.172 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2772 1 2025-12-01 04:39:13.594 00:00:00.000 UDP 28.104.0.1:36380 -> 198.28.0.2:53 1 64 1 2025-12-01 04:39:13.594 00:00:00.000 UDP 28.104.0.1:35233 -> 198.28.0.2:53 1 64 1 2025-12-01 04:39:13.604 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35233 1 80 1 2025-12-01 04:39:13.604 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36380 1 109 1 2025-12-01 04:40:13.894 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52822 1 80 1 2025-12-01 04:40:13.894 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39363 1 109 1 2025-12-01 04:40:13.884 00:00:00.000 UDP 28.104.0.1:52822 -> 198.28.0.2:53 1 64 1 2025-12-01 04:36:14.898 00:05:00.641 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-01 04:40:13.884 00:00:00.000 UDP 28.104.0.1:39363 -> 198.28.0.2:53 1 64 1 2025-12-01 04:40:27.061 00:00:00.039 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 04:41:14.168 00:00:00.000 UDP 28.104.0.1:37640 -> 198.28.0.2:53 1 64 1 2025-12-01 04:41:14.168 00:00:00.000 UDP 28.104.0.1:45725 -> 198.28.0.2:53 1 64 1 2025-12-01 04:37:06.284 00:05:08.801 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-01 04:37:06.233 00:05:08.676 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-01 04:41:14.177 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45725 1 109 1 2025-12-01 04:41:14.179 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37640 1 80 1 2025-12-01 04:37:14.899 00:05:51.346 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-01 04:42:14.463 00:00:00.000 UDP 28.104.0.1:47066 -> 198.28.0.2:53 1 64 1 2025-12-01 04:42:14.463 00:00:00.000 UDP 28.104.0.1:39555 -> 198.28.0.2:53 1 64 1 2025-12-01 04:38:06.234 00:05:08.861 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-01 04:42:14.473 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39555 1 109 1 2025-12-01 04:42:14.473 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47066 1 80 1 2025-12-01 04:43:14.726 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39575 1 109 1 2025-12-01 04:43:14.725 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54160 1 80 1 2025-12-01 04:43:14.716 00:00:00.000 UDP 28.104.0.1:54160 -> 198.28.0.2:53 1 64 1 2025-12-01 04:39:14.901 00:05:00.497 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-12-01 04:43:14.717 00:00:00.000 UDP 28.104.0.1:39575 -> 198.28.0.2:53 1 64 1 2025-12-01 04:39:49.175 00:05:10.009 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2868 1 2025-12-01 04:44:15.004 00:00:00.000 UDP 28.104.0.1:40900 -> 198.28.0.2:53 1 64 1 2025-12-01 04:44:15.004 00:00:00.000 UDP 28.104.0.1:40722 -> 198.28.0.2:53 1 64 1 2025-12-01 04:44:15.016 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40722 1 109 1 2025-12-01 04:44:15.015 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40900 1 80 1 2025-12-01 04:45:15.319 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43451 1 80 1 2025-12-01 04:45:15.318 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57846 1 109 1 2025-12-01 04:45:15.307 00:00:00.000 UDP 28.104.0.1:43451 -> 198.28.0.2:53 1 64 1 2025-12-01 04:45:15.307 00:00:00.000 UDP 28.104.0.1:57846 -> 198.28.0.2:53 1 64 1 2025-12-01 04:45:27.278 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 04:46:15.613 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40788 1 109 1 2025-12-01 04:46:15.613 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51104 1 80 1 2025-12-01 04:46:15.603 00:00:00.000 UDP 28.104.0.1:51104 -> 198.28.0.2:53 1 64 1 2025-12-01 04:46:15.604 00:00:00.000 UDP 28.104.0.1:40788 -> 198.28.0.2:53 1 64 1 2025-12-01 04:42:14.900 00:05:00.641 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-01 04:47:15.907 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55528 1 109 1 2025-12-01 04:43:06.234 00:05:08.677 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-01 04:47:15.905 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59574 1 80 1 2025-12-01 04:47:15.896 00:00:00.000 UDP 28.104.0.1:55528 -> 198.28.0.2:53 1 64 1 2025-12-01 04:43:06.284 00:05:08.801 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-01 04:47:15.895 00:00:00.000 UDP 28.104.0.1:59574 -> 198.28.0.2:53 1 64 1 2025-12-01 04:43:14.900 00:05:51.349 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-01 04:48:16.199 00:00:00.000 UDP 28.104.0.1:54036 -> 198.28.0.2:53 1 64 1 2025-12-01 04:48:16.199 00:00:00.000 UDP 28.104.0.1:57017 -> 198.28.0.2:53 1 64 1 2025-12-01 04:44:06.234 00:05:08.862 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-01 04:48:16.211 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57017 1 80 1 2025-12-01 04:48:16.211 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54036 1 109 1 2025-12-01 04:45:09.186 00:05:05.641 OSPF 28.0.2.1:0 -> 224.0.0.5:0 33 2252 1 2025-12-01 04:49:16.462 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43220 1 80 1 2025-12-01 04:49:16.462 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38566 1 109 1 2025-12-01 04:49:16.450 00:00:00.000 UDP 28.104.0.1:43220 -> 198.28.0.2:53 1 64 1 2025-12-01 04:49:16.450 00:00:00.000 UDP 28.104.0.1:38566 -> 198.28.0.2:53 1 64 1 2025-12-01 04:45:14.900 00:05:00.497 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-12-01 04:50:16.744 00:00:00.000 UDP 28.104.0.1:50559 -> 198.28.0.2:53 1 64 1 2025-12-01 04:50:16.744 00:00:00.000 UDP 28.104.0.1:48872 -> 198.28.0.2:53 1 64 1 2025-12-01 04:50:16.754 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50559 1 80 1 2025-12-01 04:50:16.754 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48872 1 109 1 2025-12-01 04:50:27.067 00:00:00.037 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 04:51:17.064 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34245 1 109 1 2025-12-01 04:51:17.063 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57439 1 80 1 2025-12-01 04:51:17.053 00:00:00.000 UDP 28.104.0.1:34245 -> 198.28.0.2:53 1 64 1 2025-12-01 04:51:17.053 00:00:00.000 UDP 28.104.0.1:57439 -> 198.28.0.2:53 1 64 1 2025-12-01 04:48:14.901 00:05:00.642 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-01 04:52:17.347 00:00:00.000 UDP 28.104.0.1:41316 -> 198.28.0.2:53 1 64 1 2025-12-01 04:52:17.347 00:00:00.000 UDP 28.104.0.1:48860 -> 198.28.0.2:53 1 64 1 2025-12-01 04:52:17.358 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48860 1 109 1 2025-12-01 04:52:17.358 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41316 1 80 1 2025-12-01 04:49:06.238 00:05:08.675 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-01 04:49:06.288 00:05:08.801 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-01 04:53:17.648 00:00:00.000 UDP 28.104.0.1:52332 -> 198.28.0.2:53 1 64 1 2025-12-01 04:53:17.648 00:00:00.000 UDP 28.104.0.1:35767 -> 198.28.0.2:53 1 64 1 2025-12-01 04:53:17.658 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52332 1 109 1 2025-12-01 04:53:17.658 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35767 1 80 1 2025-12-01 04:49:14.901 00:05:51.348 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-01 04:50:06.238 00:05:08.861 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-01 04:54:17.954 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43316 1 80 1 2025-12-01 04:54:17.954 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49887 1 109 1 2025-12-01 04:54:17.944 00:00:00.000 UDP 28.104.0.1:43316 -> 198.28.0.2:53 1 64 1 2025-12-01 04:54:17.944 00:00:00.000 UDP 28.104.0.1:49887 -> 198.28.0.2:53 1 64 1 2025-12-01 04:50:19.190 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2784 1 2025-12-01 04:51:14.902 00:05:00.496 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-12-01 04:55:18.235 00:00:00.000 UDP 28.104.0.1:50921 -> 198.28.0.2:53 1 64 1 2025-12-01 04:55:18.235 00:00:00.000 UDP 28.104.0.1:42617 -> 198.28.0.2:53 1 64 1 2025-12-01 04:55:18.247 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50921 1 109 1 2025-12-01 04:55:18.246 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42617 1 80 1 2025-12-01 04:55:27.238 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 04:56:18.544 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60821 1 109 1 2025-12-01 04:56:18.544 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42983 1 80 1 2025-12-01 04:56:18.535 00:00:00.000 UDP 28.104.0.1:42983 -> 198.28.0.2:53 1 64 1 2025-12-01 04:56:18.535 00:00:00.000 UDP 28.104.0.1:60821 -> 198.28.0.2:53 1 64 1 2025-12-01 04:57:18.799 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47737 1 80 1 2025-12-01 04:57:18.799 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55978 1 109 1 2025-12-01 04:57:18.790 00:00:00.000 UDP 28.104.0.1:47737 -> 198.28.0.2:53 1 64 1 2025-12-01 04:57:18.790 00:00:00.000 UDP 28.104.0.1:55978 -> 198.28.0.2:53 1 64 1 2025-12-01 04:54:14.902 00:05:00.644 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-01 04:58:19.068 00:00:00.000 UDP 28.104.0.1:50257 -> 198.28.0.2:53 1 64 1 2025-12-01 04:58:19.067 00:00:00.000 UDP 28.104.0.1:60730 -> 198.28.0.2:53 1 64 1 2025-12-01 04:58:19.077 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60730 1 80 1 2025-12-01 04:58:19.077 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50257 1 109 1 Summary: total flows: 323, total bytes: 96504, total packets: 1421, avg bps: 200, avg pps: 0, avg bpp: 67 Time window: 2025-12-01 03:55:06 - 2025-12-01 04:59:15 Total flows processed: 323, passed: 323, Blocks skipped: 0, Bytes read: 33656 Sys: 0.0057s User: 0.0016s Wall: 0.0049s flows/second: 66461.9 Runtime: 0.0049s