Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-01 05:55:06.305 00:05:08.800 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-01 05:55:06.256 00:05:08.671 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-01 05:59:37.901 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46388 1 109 1 2025-12-01 05:59:37.901 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36457 1 80 1 2025-12-01 05:59:37.890 00:00:00.000 UDP 28.104.0.1:36457 -> 198.28.0.2:53 1 64 1 2025-12-01 05:59:37.890 00:00:00.000 UDP 28.104.0.1:46388 -> 198.28.0.2:53 1 64 1 2025-12-01 05:55:14.916 00:05:51.352 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-01 05:56:06.257 00:05:08.859 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-01 06:00:28.627 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 06:00:38.214 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37632 1 80 1 2025-12-01 06:00:38.214 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34692 1 109 1 2025-12-01 06:00:38.203 00:00:00.000 UDP 28.104.0.1:37632 -> 198.28.0.2:53 1 64 1 2025-12-01 06:00:38.203 00:00:00.000 UDP 28.104.0.1:34692 -> 198.28.0.2:53 1 64 1 2025-12-01 05:57:14.919 00:05:00.493 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-12-01 06:01:38.506 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55574 1 109 1 2025-12-01 06:01:38.506 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39790 1 80 1 2025-12-01 06:01:38.496 00:00:00.000 UDP 28.104.0.1:55574 -> 198.28.0.2:53 1 64 1 2025-12-01 06:01:38.496 00:00:00.000 UDP 28.104.0.1:39790 -> 198.28.0.2:53 1 64 1 2025-12-01 06:02:38.792 00:00:00.000 UDP 28.104.0.1:42697 -> 198.28.0.2:53 1 64 1 2025-12-01 06:02:38.793 00:00:00.000 UDP 28.104.0.1:33397 -> 198.28.0.2:53 1 64 1 2025-12-01 06:02:38.803 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33397 1 109 1 2025-12-01 06:02:38.802 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42697 1 80 1 2025-12-01 06:03:39.107 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33485 1 109 1 2025-12-01 06:03:39.107 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35471 1 80 1 2025-12-01 06:03:39.098 00:00:00.000 UDP 28.104.0.1:35471 -> 198.28.0.2:53 1 64 1 2025-12-01 06:03:39.098 00:00:00.000 UDP 28.104.0.1:33485 -> 198.28.0.2:53 1 64 1 2025-12-01 05:59:39.278 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2988 1 2025-12-01 06:00:14.917 00:05:00.648 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-01 06:04:39.403 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33822 1 109 1 2025-12-01 06:04:39.403 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43314 1 80 1 2025-12-01 06:04:39.394 00:00:00.000 UDP 28.104.0.1:33822 -> 198.28.0.2:53 1 64 1 2025-12-01 06:04:39.394 00:00:00.000 UDP 28.104.0.1:43314 -> 198.28.0.2:53 1 64 1 2025-12-01 06:01:06.258 00:05:08.672 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-01 06:01:06.309 00:05:08.797 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-01 06:05:28.731 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 06:05:39.683 00:00:00.000 UDP 28.104.0.1:41085 -> 198.28.0.2:53 1 64 1 2025-12-01 06:05:39.682 00:00:00.000 UDP 28.104.0.1:56226 -> 198.28.0.2:53 1 64 1 2025-12-01 06:05:39.693 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56226 1 80 1 2025-12-01 06:05:39.693 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41085 1 109 1 2025-12-01 06:01:14.919 00:05:51.350 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-01 06:02:06.259 00:05:08.858 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-01 06:06:40.059 00:00:00.000 UDP 28.104.0.1:36262 -> 198.28.0.2:53 1 64 1 2025-12-01 06:06:40.059 00:00:00.000 UDP 28.104.0.1:43922 -> 198.28.0.2:53 1 64 1 2025-12-01 06:06:40.070 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43922 1 109 1 2025-12-01 06:06:40.070 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36262 1 80 1 2025-12-01 06:03:14.919 00:05:00.495 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-12-01 06:07:40.322 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37148 1 109 1 2025-12-01 06:07:40.322 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51525 1 80 1 2025-12-01 06:07:40.311 00:00:00.000 UDP 28.104.0.1:37148 -> 198.28.0.2:53 1 64 1 2025-12-01 06:07:40.311 00:00:00.000 UDP 28.104.0.1:51525 -> 198.28.0.2:53 1 64 1 2025-12-01 06:08:40.569 00:00:00.000 UDP 28.104.0.1:58433 -> 198.28.0.2:53 1 64 1 2025-12-01 06:08:40.569 00:00:00.000 UDP 28.104.0.1:60796 -> 198.28.0.2:53 1 64 1 2025-12-01 06:08:40.580 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60796 1 109 1 2025-12-01 06:08:40.580 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58433 1 80 1 2025-12-01 06:04:59.286 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2912 1 2025-12-01 06:09:40.874 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53486 1 80 1 2025-12-01 06:09:40.874 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44854 1 109 1 2025-12-01 06:09:40.863 00:00:00.000 UDP 28.104.0.1:44854 -> 198.28.0.2:53 1 64 1 2025-12-01 06:09:40.863 00:00:00.000 UDP 28.104.0.1:53486 -> 198.28.0.2:53 1 64 1 2025-12-01 06:06:14.921 00:05:00.645 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-01 06:10:29.046 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 06:10:41.190 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57199 1 109 1 2025-12-01 06:10:41.190 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60135 1 80 1 2025-12-01 06:10:41.179 00:00:00.000 UDP 28.104.0.1:57199 -> 198.28.0.2:53 1 64 1 2025-12-01 06:10:41.179 00:00:00.000 UDP 28.104.0.1:60135 -> 198.28.0.2:53 1 64 1 2025-12-01 06:07:06.259 00:05:08.672 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-01 06:07:06.308 00:05:08.799 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-01 06:11:41.485 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57786 1 80 1 2025-12-01 06:11:41.485 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33406 1 109 1 2025-12-01 06:11:41.474 00:00:00.000 UDP 28.104.0.1:57786 -> 198.28.0.2:53 1 64 1 2025-12-01 06:11:41.474 00:00:00.000 UDP 28.104.0.1:33406 -> 198.28.0.2:53 1 64 1 2025-12-01 06:07:14.921 00:05:51.349 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-01 06:08:06.260 00:05:08.859 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-01 06:12:41.780 00:00:00.000 UDP 28.104.0.1:50792 -> 198.28.0.2:53 1 64 1 2025-12-01 06:12:41.780 00:00:00.000 UDP 28.104.0.1:49264 -> 198.28.0.2:53 1 64 1 2025-12-01 06:12:41.792 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49264 1 109 1 2025-12-01 06:12:41.791 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50792 1 80 1 2025-12-01 06:09:14.923 00:05:00.494 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-12-01 06:13:42.095 00:00:00.000 UDP 28.104.0.1:45779 -> 198.28.0.2:53 1 64 1 2025-12-01 06:13:42.096 00:00:00.000 UDP 28.104.0.1:35039 -> 198.28.0.2:53 1 64 1 2025-12-01 06:13:42.106 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35039 1 80 1 2025-12-01 06:13:42.108 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45779 1 109 1 2025-12-01 06:10:19.291 00:05:10.009 OSPF 28.0.2.1:0 -> 224.0.0.5:0 32 2176 1 2025-12-01 06:14:42.447 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51447 1 80 1 2025-12-01 06:14:42.447 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48222 1 109 1 2025-12-01 06:14:42.436 00:00:00.000 UDP 28.104.0.1:51447 -> 198.28.0.2:53 1 64 1 2025-12-01 06:14:42.436 00:00:00.000 UDP 28.104.0.1:48222 -> 198.28.0.2:53 1 64 1 2025-12-01 06:15:28.888 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 06:15:42.731 00:00:00.000 UDP 28.104.0.1:51477 -> 198.28.0.2:53 1 64 1 2025-12-01 06:15:42.731 00:00:00.000 UDP 28.104.0.1:45191 -> 198.28.0.2:53 1 64 1 2025-12-01 06:15:42.742 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51477 1 80 1 2025-12-01 06:15:42.742 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45191 1 109 1 2025-12-01 06:12:14.921 00:05:00.647 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-01 06:16:43.048 00:00:00.000 UDP 28.104.0.1:34365 -> 198.28.0.2:53 1 64 1 2025-12-01 06:16:43.048 00:00:00.000 UDP 28.104.0.1:42213 -> 198.28.0.2:53 1 64 1 2025-12-01 06:16:43.059 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42213 1 80 1 2025-12-01 06:16:43.059 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34365 1 109 1 2025-12-01 06:13:06.259 00:05:08.673 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-01 06:13:06.309 00:05:08.803 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-01 06:17:43.354 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48714 1 80 1 2025-12-01 06:17:43.354 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38240 1 109 1 2025-12-01 06:17:43.344 00:00:00.000 UDP 28.104.0.1:48714 -> 198.28.0.2:53 1 64 1 2025-12-01 06:17:43.344 00:00:00.000 UDP 28.104.0.1:38240 -> 198.28.0.2:53 1 64 1 2025-12-01 06:13:14.921 00:05:51.350 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-01 06:14:06.260 00:05:08.863 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-01 06:18:43.650 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40216 1 109 1 2025-12-01 06:18:43.650 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48546 1 80 1 2025-12-01 06:18:43.640 00:00:00.000 UDP 28.104.0.1:48546 -> 198.28.0.2:53 1 64 1 2025-12-01 06:18:43.640 00:00:00.000 UDP 28.104.0.1:40216 -> 198.28.0.2:53 1 64 1 2025-12-01 06:15:14.922 00:05:00.496 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-12-01 06:15:39.301 00:05:00.766 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2780 1 2025-12-01 06:19:43.930 00:00:00.000 UDP 28.104.0.1:49120 -> 198.28.0.2:53 1 64 1 2025-12-01 06:19:43.930 00:00:00.000 UDP 28.104.0.1:56605 -> 198.28.0.2:53 1 64 1 2025-12-01 06:19:43.940 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56605 1 80 1 2025-12-01 06:19:43.940 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49120 1 109 1 2025-12-01 06:20:28.939 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 06:20:44.246 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45483 1 109 1 2025-12-01 06:20:44.246 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40237 1 80 1 2025-12-01 06:20:44.236 00:00:00.000 UDP 28.104.0.1:40237 -> 198.28.0.2:53 1 64 1 2025-12-01 06:20:44.236 00:00:00.000 UDP 28.104.0.1:45483 -> 198.28.0.2:53 1 64 1 2025-12-01 06:21:44.530 00:00:00.000 UDP 28.104.0.1:33064 -> 198.28.0.2:53 1 64 1 2025-12-01 06:21:44.530 00:00:00.000 UDP 28.104.0.1:38329 -> 198.28.0.2:53 1 64 1 2025-12-01 06:21:44.541 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38329 1 109 1 2025-12-01 06:21:44.541 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33064 1 80 1 2025-12-01 06:18:14.923 00:05:00.654 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-01 06:22:44.824 00:00:00.000 UDP 28.104.0.1:56793 -> 198.28.0.2:53 1 64 1 2025-12-01 06:22:44.823 00:00:00.000 UDP 28.104.0.1:53708 -> 198.28.0.2:53 1 64 1 2025-12-01 06:22:44.835 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53708 1 80 1 2025-12-01 06:22:44.835 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56793 1 109 1 2025-12-01 06:19:06.261 00:05:08.673 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-01 06:19:06.312 00:05:08.803 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-01 06:23:45.327 00:00:00.000 UDP 28.104.0.1:51616 -> 198.28.0.2:53 1 64 1 2025-12-01 06:23:45.327 00:00:00.000 UDP 28.104.0.1:33505 -> 198.28.0.2:53 1 64 1 2025-12-01 06:23:45.338 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51616 1 109 1 2025-12-01 06:23:45.338 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33505 1 80 1 2025-12-01 06:19:14.923 00:05:51.348 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-01 06:20:06.261 00:05:08.863 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-01 06:24:45.593 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52295 1 109 1 2025-12-01 06:24:45.592 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51143 1 80 1 2025-12-01 06:24:45.582 00:00:00.000 UDP 28.104.0.1:51143 -> 198.28.0.2:53 1 64 1 2025-12-01 06:24:45.582 00:00:00.000 UDP 28.104.0.1:52295 -> 198.28.0.2:53 1 64 1 2025-12-01 06:20:49.309 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2776 1 2025-12-01 06:21:14.924 00:05:00.496 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-12-01 06:25:29.061 00:00:00.026 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 06:25:45.836 00:00:00.000 UDP 28.104.0.1:41237 -> 198.28.0.2:53 1 64 1 2025-12-01 06:25:45.835 00:00:00.000 UDP 28.104.0.1:43620 -> 198.28.0.2:53 1 64 1 2025-12-01 06:25:45.845 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41237 1 80 1 2025-12-01 06:25:45.845 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43620 1 109 1 2025-12-01 06:26:46.146 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36057 1 80 1 2025-12-01 06:26:46.146 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41463 1 109 1 2025-12-01 06:26:46.136 00:00:00.000 UDP 28.104.0.1:36057 -> 198.28.0.2:53 1 64 1 2025-12-01 06:26:46.136 00:00:00.000 UDP 28.104.0.1:41463 -> 198.28.0.2:53 1 64 1 2025-12-01 06:27:46.394 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40915 1 109 1 2025-12-01 06:27:46.394 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60722 1 80 1 2025-12-01 06:27:46.385 00:00:00.000 UDP 28.104.0.1:40915 -> 198.28.0.2:53 1 64 1 2025-12-01 06:27:46.385 00:00:00.000 UDP 28.104.0.1:60722 -> 198.28.0.2:53 1 64 1 2025-12-01 06:24:14.923 00:05:00.654 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-01 06:28:46.681 00:00:00.000 UDP 28.104.0.1:33467 -> 198.28.0.2:53 1 64 1 2025-12-01 06:28:46.681 00:00:00.000 UDP 28.104.0.1:33279 -> 198.28.0.2:53 1 64 1 2025-12-01 06:28:46.690 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33467 1 80 1 2025-12-01 06:28:46.690 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33279 1 109 1 2025-12-01 06:25:06.312 00:05:08.803 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-01 06:25:06.262 00:05:08.676 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-01 06:29:46.942 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42678 1 80 1 2025-12-01 06:29:46.942 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35426 1 109 1 2025-12-01 06:29:46.930 00:00:00.000 UDP 28.104.0.1:42678 -> 198.28.0.2:53 1 64 1 2025-12-01 06:29:46.931 00:00:00.000 UDP 28.104.0.1:35426 -> 198.28.0.2:53 1 64 1 2025-12-01 06:25:14.924 00:05:51.347 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-01 06:26:06.262 00:05:08.864 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-01 06:26:09.317 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2756 1 2025-12-01 06:30:29.102 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 06:30:47.252 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39188 1 109 1 2025-12-01 06:30:47.253 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60351 1 80 1 2025-12-01 06:30:47.242 00:00:00.000 UDP 28.104.0.1:60351 -> 198.28.0.2:53 1 64 1 2025-12-01 06:30:47.241 00:00:00.000 UDP 28.104.0.1:39188 -> 198.28.0.2:53 1 64 1 2025-12-01 06:27:14.927 00:05:00.496 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-12-01 06:31:47.545 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41648 1 80 1 2025-12-01 06:31:47.545 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33580 1 109 1 2025-12-01 06:31:47.534 00:00:00.000 UDP 28.104.0.1:41648 -> 198.28.0.2:53 1 64 1 2025-12-01 06:31:47.534 00:00:00.000 UDP 28.104.0.1:33580 -> 198.28.0.2:53 1 64 1 2025-12-01 06:32:47.823 00:00:00.000 UDP 28.104.0.1:42002 -> 198.28.0.2:53 1 64 1 2025-12-01 06:32:47.823 00:00:00.000 UDP 28.104.0.1:50318 -> 198.28.0.2:53 1 64 1 2025-12-01 06:32:47.837 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42002 1 80 1 2025-12-01 06:32:47.834 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50318 1 109 1 2025-12-01 06:33:48.126 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52452 1 109 1 2025-12-01 06:33:48.126 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34231 1 80 1 2025-12-01 06:33:48.116 00:00:00.000 UDP 28.104.0.1:52452 -> 198.28.0.2:53 1 64 1 2025-12-01 06:33:48.116 00:00:00.000 UDP 28.104.0.1:34231 -> 198.28.0.2:53 1 64 1 2025-12-01 06:30:14.928 00:05:00.651 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-01 06:34:48.411 00:00:00.000 UDP 28.104.0.1:58140 -> 198.28.0.2:53 1 64 1 2025-12-01 06:34:48.410 00:00:00.000 UDP 28.104.0.1:44377 -> 198.28.0.2:53 1 64 1 2025-12-01 06:34:48.420 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44377 1 109 1 2025-12-01 06:34:48.420 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58140 1 80 1 2025-12-01 06:31:06.262 00:05:08.676 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-01 06:31:06.312 00:05:08.804 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-01 06:35:29.493 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 06:31:29.320 00:05:00.960 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2928 1 2025-12-01 06:35:48.716 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56732 1 109 1 2025-12-01 06:35:48.715 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53455 1 80 1 2025-12-01 06:35:48.706 00:00:00.000 UDP 28.104.0.1:53455 -> 198.28.0.2:53 1 64 1 2025-12-01 06:35:48.706 00:00:00.000 UDP 28.104.0.1:56732 -> 198.28.0.2:53 1 64 1 2025-12-01 06:31:14.928 00:05:51.347 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-01 06:32:06.262 00:05:08.864 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-01 06:36:49.003 00:00:00.000 UDP 28.104.0.1:55224 -> 198.28.0.2:53 1 64 1 2025-12-01 06:36:49.003 00:00:00.000 UDP 28.104.0.1:53903 -> 198.28.0.2:53 1 64 1 2025-12-01 06:36:49.018 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55224 1 109 1 2025-12-01 06:36:49.016 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53903 1 80 1 2025-12-01 06:33:14.928 00:05:00.502 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-12-01 06:37:49.304 00:00:00.000 UDP 28.104.0.1:37607 -> 198.28.0.2:53 1 64 1 2025-12-01 06:37:49.304 00:00:00.000 UDP 28.104.0.1:59486 -> 198.28.0.2:53 1 64 1 2025-12-01 06:37:49.314 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59486 1 109 1 2025-12-01 06:37:49.314 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37607 1 80 1 2025-12-01 06:38:49.614 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52926 1 109 1 2025-12-01 06:38:49.614 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41791 1 80 1 2025-12-01 06:38:49.604 00:00:00.000 UDP 28.104.0.1:52926 -> 198.28.0.2:53 1 64 1 2025-12-01 06:38:49.604 00:00:00.000 UDP 28.104.0.1:41791 -> 198.28.0.2:53 1 64 1 2025-12-01 06:39:49.907 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51767 1 80 1 2025-12-01 06:39:49.907 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57368 1 109 1 2025-12-01 06:39:49.897 00:00:00.000 UDP 28.104.0.1:51767 -> 198.28.0.2:53 1 64 1 2025-12-01 06:39:49.897 00:00:00.000 UDP 28.104.0.1:57368 -> 198.28.0.2:53 1 64 1 2025-12-01 06:36:14.928 00:05:00.651 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-01 06:40:29.403 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 06:36:39.328 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2624 1 2025-12-01 06:40:50.167 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36571 1 80 1 2025-12-01 06:40:50.167 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58666 1 109 1 2025-12-01 06:40:50.157 00:00:00.000 UDP 28.104.0.1:58666 -> 198.28.0.2:53 1 64 1 2025-12-01 06:40:50.157 00:00:00.000 UDP 28.104.0.1:36571 -> 198.28.0.2:53 1 64 1 2025-12-01 06:37:06.264 00:05:08.675 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-01 06:37:06.314 00:05:08.803 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-01 06:41:50.415 00:00:00.000 UDP 28.104.0.1:54098 -> 198.28.0.2:53 1 64 1 2025-12-01 06:41:50.415 00:00:00.000 UDP 28.104.0.1:43884 -> 198.28.0.2:53 1 64 1 2025-12-01 06:41:50.425 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43884 1 80 1 2025-12-01 06:41:50.425 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54098 1 109 1 2025-12-01 06:37:14.928 00:05:51.350 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-01 06:38:06.266 00:05:08.862 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-01 06:42:50.728 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43151 1 80 1 2025-12-01 06:42:50.728 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45904 1 109 1 2025-12-01 06:42:50.718 00:00:00.000 UDP 28.104.0.1:45904 -> 198.28.0.2:53 1 64 1 2025-12-01 06:42:50.718 00:00:00.000 UDP 28.104.0.1:43151 -> 198.28.0.2:53 1 64 1 2025-12-01 06:39:14.929 00:05:00.502 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-12-01 06:43:51.015 00:00:00.000 UDP 28.104.0.1:36271 -> 198.28.0.2:53 1 64 1 2025-12-01 06:43:51.015 00:00:00.000 UDP 28.104.0.1:33729 -> 198.28.0.2:53 1 64 1 2025-12-01 06:43:51.026 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36271 1 109 1 2025-12-01 06:43:51.026 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33729 1 80 1 2025-12-01 06:44:51.530 00:00:00.000 UDP 28.104.0.1:39515 -> 198.28.0.2:53 1 64 1 2025-12-01 06:44:51.530 00:00:00.000 UDP 28.104.0.1:60611 -> 198.28.0.2:53 1 64 1 2025-12-01 06:44:51.540 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39515 1 80 1 2025-12-01 06:44:51.540 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60611 1 109 1 2025-12-01 06:45:29.538 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 06:45:51.836 00:00:00.000 UDP 28.104.0.1:45850 -> 198.28.0.2:53 1 64 1 2025-12-01 06:45:51.836 00:00:00.000 UDP 28.104.0.1:56165 -> 198.28.0.2:53 1 64 1 2025-12-01 06:45:51.846 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56165 1 109 1 2025-12-01 06:45:51.846 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45850 1 80 1 2025-12-01 06:41:59.332 00:05:10.022 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2384 1 2025-12-01 06:42:14.929 00:05:00.654 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-01 06:46:52.127 00:00:00.000 UDP 28.104.0.1:57170 -> 198.28.0.2:53 1 64 1 2025-12-01 06:46:52.127 00:00:00.000 UDP 28.104.0.1:48173 -> 198.28.0.2:53 1 64 1 2025-12-01 06:46:52.137 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48173 1 109 1 2025-12-01 06:46:52.137 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57170 1 80 1 2025-12-01 06:43:06.267 00:05:08.673 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-01 06:43:06.317 00:05:08.802 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-01 06:47:52.416 00:00:00.000 UDP 28.104.0.1:56072 -> 198.28.0.2:53 1 64 1 2025-12-01 06:47:52.416 00:00:00.000 UDP 28.104.0.1:34592 -> 198.28.0.2:53 1 64 1 2025-12-01 06:47:52.427 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34592 1 109 1 2025-12-01 06:47:52.427 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56072 1 80 1 2025-12-01 06:43:14.930 00:05:51.348 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-01 06:44:06.267 00:05:08.863 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-01 06:48:52.720 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52856 1 80 1 2025-12-01 06:48:52.720 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39449 1 109 1 2025-12-01 06:48:52.710 00:00:00.000 UDP 28.104.0.1:52856 -> 198.28.0.2:53 1 64 1 2025-12-01 06:48:52.710 00:00:00.000 UDP 28.104.0.1:39449 -> 198.28.0.2:53 1 64 1 2025-12-01 06:45:14.931 00:05:00.501 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-12-01 06:49:53.005 00:00:00.000 UDP 28.104.0.1:44021 -> 198.28.0.2:53 1 64 1 2025-12-01 06:49:53.005 00:00:00.000 UDP 28.104.0.1:58020 -> 198.28.0.2:53 1 64 1 2025-12-01 06:49:53.016 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58020 1 109 1 2025-12-01 06:49:53.016 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44021 1 80 1 2025-12-01 06:50:29.690 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 06:50:53.264 00:00:00.000 UDP 28.104.0.1:41363 -> 198.28.0.2:53 1 64 1 2025-12-01 06:50:53.264 00:00:00.000 UDP 28.104.0.1:58064 -> 198.28.0.2:53 1 64 1 2025-12-01 06:50:53.274 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41363 1 109 1 2025-12-01 06:50:53.274 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58064 1 80 1 2025-12-01 06:47:19.354 00:05:10.009 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2772 1 2025-12-01 06:51:53.565 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44134 1 109 1 2025-12-01 06:51:53.564 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58056 1 80 1 2025-12-01 06:51:53.554 00:00:00.000 UDP 28.104.0.1:58056 -> 198.28.0.2:53 1 64 1 2025-12-01 06:51:53.554 00:00:00.000 UDP 28.104.0.1:44134 -> 198.28.0.2:53 1 64 1 2025-12-01 06:48:14.932 00:05:00.654 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-01 06:52:53.824 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57768 1 80 1 2025-12-01 06:52:53.825 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46217 1 109 1 2025-12-01 06:52:53.815 00:00:00.000 UDP 28.104.0.1:46217 -> 198.28.0.2:53 1 64 1 2025-12-01 06:52:53.815 00:00:00.000 UDP 28.104.0.1:57768 -> 198.28.0.2:53 1 64 1 2025-12-01 06:49:06.317 00:05:08.805 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-01 06:49:06.267 00:05:08.676 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-01 06:53:54.080 00:00:00.000 UDP 28.104.0.1:43366 -> 198.28.0.2:53 1 64 1 2025-12-01 06:53:54.080 00:00:00.000 UDP 28.104.0.1:56542 -> 198.28.0.2:53 1 64 1 2025-12-01 06:53:54.090 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56542 1 80 1 2025-12-01 06:53:54.089 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43366 1 109 1 2025-12-01 06:49:14.931 00:05:51.349 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-01 06:50:06.267 00:05:08.865 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-01 06:54:54.374 00:00:00.000 UDP 28.104.0.1:44428 -> 198.28.0.2:53 1 64 1 2025-12-01 06:54:54.374 00:00:00.000 UDP 28.104.0.1:58699 -> 198.28.0.2:53 1 64 1 2025-12-01 06:54:54.384 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44428 1 109 1 2025-12-01 06:54:54.384 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58699 1 80 1 2025-12-01 06:51:14.932 00:05:00.503 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-12-01 06:55:29.840 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-01 06:55:54.636 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44422 1 109 1 2025-12-01 06:55:54.636 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50372 1 80 1 2025-12-01 06:55:54.625 00:00:00.000 UDP 28.104.0.1:44422 -> 198.28.0.2:53 1 64 1 2025-12-01 06:55:54.625 00:00:00.000 UDP 28.104.0.1:50372 -> 198.28.0.2:53 1 64 1 2025-12-01 06:52:39.364 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 43 3040 1 2025-12-01 06:56:54.933 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47029 1 80 1 2025-12-01 06:56:54.936 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52000 1 109 1 2025-12-01 06:56:54.922 00:00:00.000 UDP 28.104.0.1:52000 -> 198.28.0.2:53 1 64 1 2025-12-01 06:56:54.921 00:00:00.000 UDP 28.104.0.1:47029 -> 198.28.0.2:53 1 64 1 2025-12-01 06:57:55.245 00:00:00.000 UDP 28.104.0.1:48822 -> 198.28.0.2:53 1 64 1 2025-12-01 06:57:55.245 00:00:00.000 UDP 28.104.0.1:43346 -> 198.28.0.2:53 1 64 1 2025-12-01 06:57:55.255 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48822 1 80 1 2025-12-01 06:57:55.255 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43346 1 109 1 2025-12-01 06:54:14.932 00:05:00.653 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 Summary: total flows: 319, total bytes: 96143, total packets: 1417, avg bps: 199, avg pps: 0, avg bpp: 67 Time window: 2025-12-01 05:55:06 - 2025-12-01 06:59:15 Total flows processed: 319, passed: 319, Blocks skipped: 0, Bytes read: 33240 Sys: 0.0063s User: 0.0011s Wall: 0.0042s flows/second: 76277.5 Runtime: 0.0042s