Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-02 01:59:08.819 00:00:00.000 UDP 28.104.0.1:40472 -> 198.28.0.2:53 1 64 1 2025-12-02 01:59:08.819 00:00:00.000 UDP 28.104.0.1:57349 -> 198.28.0.2:53 1 64 1 2025-12-02 01:59:08.830 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40472 1 80 1 2025-12-02 01:59:08.830 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57349 1 109 1 2025-12-02 01:55:06.625 00:05:08.830 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-02 01:55:06.585 00:05:08.720 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-02 01:55:06.575 00:05:08.740 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-02 01:55:51.005 00:05:10.043 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2936 1 2025-12-02 02:00:09.118 00:00:00.000 UDP 28.104.0.1:33075 -> 198.28.0.2:53 1 64 1 2025-12-02 02:00:09.118 00:00:00.000 UDP 28.104.0.1:54352 -> 198.28.0.2:53 1 64 1 2025-12-02 02:00:09.129 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54352 1 80 1 2025-12-02 02:00:09.129 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33075 1 109 1 2025-12-02 01:56:06.575 00:05:08.890 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-02 02:00:52.817 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-02 02:01:09.459 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48974 1 80 1 2025-12-02 02:01:09.459 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38929 1 109 1 2025-12-02 02:01:09.451 00:00:00.000 UDP 28.104.0.1:48974 -> 198.28.0.2:53 1 64 1 2025-12-02 02:01:09.451 00:00:00.000 UDP 28.104.0.1:38929 -> 198.28.0.2:53 1 64 1 2025-12-02 01:57:15.305 00:05:00.716 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-02 02:02:09.757 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38790 1 80 1 2025-12-02 02:02:09.757 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45240 1 109 1 2025-12-02 02:02:09.747 00:00:00.000 UDP 28.104.0.1:38790 -> 198.28.0.2:53 1 64 1 2025-12-02 02:02:09.748 00:00:00.000 UDP 28.104.0.1:45240 -> 198.28.0.2:53 1 64 1 2025-12-02 02:03:10.088 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52566 1 109 1 2025-12-02 02:03:10.089 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51118 1 80 1 2025-12-02 02:03:10.078 00:00:00.000 UDP 28.104.0.1:51118 -> 198.28.0.2:53 1 64 1 2025-12-02 02:03:10.078 00:00:00.000 UDP 28.104.0.1:52566 -> 198.28.0.2:53 1 64 1 2025-12-02 02:04:10.383 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37622 1 109 1 2025-12-02 02:04:10.383 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56761 1 80 1 2025-12-02 02:04:10.373 00:00:00.000 UDP 28.104.0.1:37622 -> 198.28.0.2:53 1 64 1 2025-12-02 02:04:10.374 00:00:00.000 UDP 28.104.0.1:56761 -> 198.28.0.2:53 1 64 1 2025-12-02 01:59:15.305 00:06:00.463 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-12-02 02:05:10.667 00:00:00.000 UDP 28.104.0.1:39640 -> 198.28.0.2:53 1 64 1 2025-12-02 02:05:10.667 00:00:00.000 UDP 28.104.0.1:46209 -> 198.28.0.2:53 1 64 1 2025-12-02 02:05:10.678 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46209 1 109 1 2025-12-02 02:05:10.678 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39640 1 80 1 2025-12-02 02:01:06.576 00:05:08.739 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-02 02:01:06.627 00:05:08.830 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-02 02:01:06.587 00:05:08.719 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-02 02:01:11.049 00:05:10.012 OSPF 28.0.2.1:0 -> 224.0.0.5:0 42 2980 1 2025-12-02 02:05:52.734 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-02 02:06:10.934 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50806 1 109 1 2025-12-02 02:06:10.935 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41433 1 80 1 2025-12-02 02:06:10.924 00:00:00.000 UDP 28.104.0.1:50806 -> 198.28.0.2:53 1 64 1 2025-12-02 02:06:10.924 00:00:00.000 UDP 28.104.0.1:41433 -> 198.28.0.2:53 1 64 1 2025-12-02 02:02:06.576 00:05:08.891 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-02 02:07:11.260 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49599 1 109 1 2025-12-02 02:07:11.260 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58422 1 80 1 2025-12-02 02:07:11.248 00:00:00.000 UDP 28.104.0.1:58422 -> 198.28.0.2:53 1 64 1 2025-12-02 02:07:11.248 00:00:00.000 UDP 28.104.0.1:49599 -> 198.28.0.2:53 1 64 1 2025-12-02 02:03:15.306 00:05:00.717 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-02 02:08:11.547 00:00:00.000 UDP 28.104.0.1:44458 -> 198.28.0.2:53 1 64 1 2025-12-02 02:08:11.547 00:00:00.000 UDP 28.104.0.1:53240 -> 198.28.0.2:53 1 64 1 2025-12-02 02:08:11.559 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44458 1 109 1 2025-12-02 02:08:11.558 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53240 1 80 1 2025-12-02 02:09:11.840 00:00:00.000 UDP 28.104.0.1:37766 -> 198.28.0.2:53 1 64 1 2025-12-02 02:09:11.840 00:00:00.000 UDP 28.104.0.1:54774 -> 198.28.0.2:53 1 64 1 2025-12-02 02:09:11.851 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54774 1 80 1 2025-12-02 02:09:11.851 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37766 1 109 1 2025-12-02 02:10:12.140 00:00:00.000 UDP 28.104.0.1:40321 -> 198.28.0.2:53 1 64 1 2025-12-02 02:10:12.140 00:00:00.000 UDP 28.104.0.1:33591 -> 198.28.0.2:53 1 64 1 2025-12-02 02:10:12.151 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40321 1 109 1 2025-12-02 02:10:12.151 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33591 1 80 1 2025-12-02 02:06:31.060 00:05:10.013 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2832 1 2025-12-02 02:10:52.826 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-02 02:07:06.627 00:05:08.831 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-02 02:06:15.305 00:06:00.463 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-12-02 02:07:06.587 00:05:08.720 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-02 02:11:12.436 00:00:00.000 UDP 28.104.0.1:48010 -> 198.28.0.2:53 1 64 1 2025-12-02 02:11:12.436 00:00:00.000 UDP 28.104.0.1:47199 -> 198.28.0.2:53 1 64 1 2025-12-02 02:07:06.577 00:05:08.739 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-02 02:11:12.446 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48010 1 80 1 2025-12-02 02:11:12.447 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47199 1 109 1 2025-12-02 02:12:12.746 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59316 1 109 1 2025-12-02 02:08:06.577 00:05:08.891 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-02 02:12:12.745 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57276 1 80 1 2025-12-02 02:12:12.735 00:00:00.000 UDP 28.104.0.1:57276 -> 198.28.0.2:53 1 64 1 2025-12-02 02:12:12.735 00:00:00.000 UDP 28.104.0.1:59316 -> 198.28.0.2:53 1 64 1 2025-12-02 02:09:15.306 00:05:00.717 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-02 02:13:13.055 00:00:00.000 UDP 28.104.0.1:38641 -> 198.28.0.2:53 1 64 1 2025-12-02 02:13:13.055 00:00:00.000 UDP 28.104.0.1:44919 -> 198.28.0.2:53 1 64 1 2025-12-02 02:13:13.065 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38641 1 80 1 2025-12-02 02:13:13.065 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44919 1 109 1 2025-12-02 02:14:13.404 00:00:00.000 UDP 28.104.0.1:42706 -> 198.28.0.2:53 1 64 1 2025-12-02 02:14:13.405 00:00:00.000 UDP 28.104.0.1:45356 -> 198.28.0.2:53 1 64 1 2025-12-02 02:14:13.414 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42706 1 80 1 2025-12-02 02:14:13.416 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45356 1 109 1 2025-12-02 02:15:13.704 00:00:00.000 UDP 28.104.0.1:49277 -> 198.28.0.2:53 1 64 1 2025-12-02 02:15:13.705 00:00:00.000 UDP 28.104.0.1:55434 -> 198.28.0.2:53 1 64 1 2025-12-02 02:15:13.715 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55434 1 109 1 2025-12-02 02:15:13.715 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49277 1 80 1 2025-12-02 02:15:52.899 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-02 02:11:51.073 00:05:10.011 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2528 1 2025-12-02 02:16:13.967 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52901 1 109 1 2025-12-02 02:16:13.970 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48546 1 80 1 2025-12-02 02:16:13.959 00:00:00.000 UDP 28.104.0.1:48546 -> 198.28.0.2:53 1 64 1 2025-12-02 02:16:13.959 00:00:00.000 UDP 28.104.0.1:52901 -> 198.28.0.2:53 1 64 1 2025-12-02 02:13:06.628 00:05:08.831 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-02 02:17:14.257 00:00:00.000 UDP 28.104.0.1:48069 -> 198.28.0.2:53 1 64 1 2025-12-02 02:13:06.588 00:05:08.719 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-02 02:17:14.257 00:00:00.000 UDP 28.104.0.1:41436 -> 198.28.0.2:53 1 64 1 2025-12-02 02:13:06.578 00:05:08.739 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-02 02:17:14.267 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41436 1 109 1 2025-12-02 02:17:14.267 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48069 1 80 1 2025-12-02 02:18:14.505 00:00:00.000 UDP 28.104.0.1:54664 -> 198.28.0.2:53 1 64 1 2025-12-02 02:13:15.307 00:06:00.463 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-12-02 02:18:14.505 00:00:00.000 UDP 28.104.0.1:52501 -> 198.28.0.2:53 1 64 1 2025-12-02 02:14:06.578 00:05:08.890 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-02 02:18:14.514 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54664 1 109 1 2025-12-02 02:18:14.514 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52501 1 80 1 2025-12-02 02:19:14.800 00:00:00.000 UDP 28.104.0.1:40776 -> 198.28.0.2:53 1 64 1 2025-12-02 02:15:15.307 00:05:00.718 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-02 02:19:14.800 00:00:00.000 UDP 28.104.0.1:50956 -> 198.28.0.2:53 1 64 1 2025-12-02 02:19:14.810 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40776 1 109 1 2025-12-02 02:19:14.809 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50956 1 80 1 2025-12-02 02:20:15.108 00:00:00.000 UDP 28.104.0.1:36963 -> 198.28.0.2:53 1 64 1 2025-12-02 02:20:15.107 00:00:00.000 UDP 28.104.0.1:50761 -> 198.28.0.2:53 1 64 1 2025-12-02 02:20:15.119 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50761 1 80 1 2025-12-02 02:20:15.119 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36963 1 109 1 2025-12-02 02:20:52.877 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-02 02:21:15.400 00:00:00.000 UDP 28.104.0.1:59042 -> 198.28.0.2:53 1 64 1 2025-12-02 02:21:15.400 00:00:00.000 UDP 28.104.0.1:53806 -> 198.28.0.2:53 1 64 1 2025-12-02 02:21:15.410 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59042 1 109 1 2025-12-02 02:21:15.410 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53806 1 80 1 2025-12-02 02:17:11.085 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2508 1 2025-12-02 02:22:15.696 00:00:00.000 UDP 28.104.0.1:43862 -> 198.28.0.2:53 1 64 1 2025-12-02 02:22:15.696 00:00:00.000 UDP 28.104.0.1:44235 -> 198.28.0.2:53 1 64 1 2025-12-02 02:22:15.708 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44235 1 80 1 2025-12-02 02:22:15.708 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43862 1 109 1 2025-12-02 02:19:06.579 00:05:08.739 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-02 02:23:16.005 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48253 1 80 1 2025-12-02 02:23:16.005 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34963 1 109 1 2025-12-02 02:19:06.629 00:05:08.831 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-02 02:19:06.589 00:05:08.718 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-02 02:23:15.993 00:00:00.000 UDP 28.104.0.1:34963 -> 198.28.0.2:53 1 64 1 2025-12-02 02:23:15.993 00:00:00.000 UDP 28.104.0.1:48253 -> 198.28.0.2:53 1 64 1 2025-12-02 02:20:06.580 00:05:08.890 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-02 02:24:16.269 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51668 1 109 1 2025-12-02 02:24:16.269 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59538 1 80 1 2025-12-02 02:24:16.260 00:00:00.000 UDP 28.104.0.1:51668 -> 198.28.0.2:53 1 64 1 2025-12-02 02:24:16.260 00:00:00.000 UDP 28.104.0.1:59538 -> 198.28.0.2:53 1 64 1 2025-12-02 02:25:16.562 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60476 1 109 1 2025-12-02 02:25:16.561 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39330 1 80 1 2025-12-02 02:25:16.553 00:00:00.000 UDP 28.104.0.1:60476 -> 198.28.0.2:53 1 64 1 2025-12-02 02:20:15.309 00:06:00.467 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-12-02 02:21:15.309 00:05:00.718 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-02 02:25:16.553 00:00:00.000 UDP 28.104.0.1:39330 -> 198.28.0.2:53 1 64 1 2025-12-02 02:25:53.127 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-02 02:26:16.815 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57978 1 109 1 2025-12-02 02:26:16.815 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60722 1 80 1 2025-12-02 02:26:16.805 00:00:00.000 UDP 28.104.0.1:57978 -> 198.28.0.2:53 1 64 1 2025-12-02 02:26:16.805 00:00:00.000 UDP 28.104.0.1:60722 -> 198.28.0.2:53 1 64 1 2025-12-02 02:22:31.090 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 42 3020 1 2025-12-02 02:27:17.112 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42095 1 109 1 2025-12-02 02:27:17.112 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44129 1 80 1 2025-12-02 02:27:17.103 00:00:00.000 UDP 28.104.0.1:42095 -> 198.28.0.2:53 1 64 1 2025-12-02 02:27:17.103 00:00:00.000 UDP 28.104.0.1:44129 -> 198.28.0.2:53 1 64 1 2025-12-02 02:28:17.403 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60453 1 109 1 2025-12-02 02:28:17.403 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51908 1 80 1 2025-12-02 02:28:17.395 00:00:00.000 UDP 28.104.0.1:51908 -> 198.28.0.2:53 1 64 1 2025-12-02 02:28:17.395 00:00:00.000 UDP 28.104.0.1:60453 -> 198.28.0.2:53 1 64 1 2025-12-02 02:25:06.582 00:05:08.738 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-02 02:25:06.632 00:05:08.829 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-02 02:25:06.592 00:05:08.718 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-02 02:29:17.693 00:00:00.000 UDP 28.104.0.1:38924 -> 198.28.0.2:53 1 64 1 2025-12-02 02:29:17.694 00:00:00.000 UDP 28.104.0.1:49160 -> 198.28.0.2:53 1 64 1 2025-12-02 02:29:17.703 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38924 1 80 1 2025-12-02 02:29:17.704 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49160 1 109 1 2025-12-02 02:26:06.581 00:05:08.890 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-02 02:30:17.986 00:00:00.000 UDP 28.104.0.1:42450 -> 198.28.0.2:53 1 64 1 2025-12-02 02:30:17.986 00:00:00.000 UDP 28.104.0.1:59005 -> 198.28.0.2:53 1 64 1 2025-12-02 02:30:17.996 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42450 1 109 1 2025-12-02 02:30:17.996 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59005 1 80 1 2025-12-02 02:30:53.278 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-02 02:27:15.309 00:05:00.718 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-02 02:31:18.238 00:00:00.000 UDP 28.104.0.1:57667 -> 198.28.0.2:53 1 64 1 2025-12-02 02:31:18.238 00:00:00.000 UDP 28.104.0.1:35440 -> 198.28.0.2:53 1 64 1 2025-12-02 02:31:18.250 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57667 1 80 1 2025-12-02 02:31:18.250 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35440 1 109 1 2025-12-02 02:27:51.093 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2548 1 2025-12-02 02:27:15.309 00:06:00.469 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-12-02 02:32:18.528 00:00:00.000 UDP 28.104.0.1:48935 -> 198.28.0.2:53 1 64 1 2025-12-02 02:32:18.528 00:00:00.000 UDP 28.104.0.1:52650 -> 198.28.0.2:53 1 64 1 2025-12-02 02:32:18.538 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52650 1 80 1 2025-12-02 02:32:18.538 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48935 1 109 1 2025-12-02 02:33:18.829 00:00:00.000 UDP 28.104.0.1:55720 -> 198.28.0.2:53 1 64 1 2025-12-02 02:33:18.829 00:00:00.000 UDP 28.104.0.1:53384 -> 198.28.0.2:53 1 64 1 2025-12-02 02:33:18.840 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53384 1 80 1 2025-12-02 02:33:18.839 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55720 1 109 1 2025-12-02 02:34:19.137 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60012 1 109 1 2025-12-02 02:34:19.137 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55604 1 80 1 2025-12-02 02:34:19.126 00:00:00.000 UDP 28.104.0.1:60012 -> 198.28.0.2:53 1 64 1 2025-12-02 02:34:19.127 00:00:00.000 UDP 28.104.0.1:55604 -> 198.28.0.2:53 1 64 1 2025-12-02 02:31:06.582 00:05:08.740 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-02 02:35:19.440 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37073 1 80 1 2025-12-02 02:35:19.440 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50990 1 109 1 2025-12-02 02:31:06.632 00:05:08.829 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-02 02:31:06.592 00:05:08.719 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-02 02:35:19.429 00:00:00.000 UDP 28.104.0.1:50990 -> 198.28.0.2:53 1 64 1 2025-12-02 02:35:19.429 00:00:00.000 UDP 28.104.0.1:37073 -> 198.28.0.2:53 1 64 1 2025-12-02 02:35:53.367 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-02 02:32:06.583 00:05:08.889 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-02 02:36:19.732 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45956 1 109 1 2025-12-02 02:36:19.732 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42945 1 80 1 2025-12-02 02:36:19.722 00:00:00.000 UDP 28.104.0.1:42945 -> 198.28.0.2:53 1 64 1 2025-12-02 02:36:19.722 00:00:00.000 UDP 28.104.0.1:45956 -> 198.28.0.2:53 1 64 1 2025-12-02 02:33:15.310 00:05:00.716 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-02 02:37:20.045 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51423 1 80 1 2025-12-02 02:37:20.046 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43326 1 109 1 2025-12-02 02:33:11.096 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2972 1 2025-12-02 02:37:20.035 00:00:00.000 UDP 28.104.0.1:51423 -> 198.28.0.2:53 1 64 1 2025-12-02 02:37:20.036 00:00:00.000 UDP 28.104.0.1:43326 -> 198.28.0.2:53 1 64 1 2025-12-02 02:38:20.338 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37899 1 80 1 2025-12-02 02:38:20.338 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34876 1 109 1 2025-12-02 02:38:20.328 00:00:00.000 UDP 28.104.0.1:34876 -> 198.28.0.2:53 1 64 1 2025-12-02 02:38:20.328 00:00:00.000 UDP 28.104.0.1:37899 -> 198.28.0.2:53 1 64 1 2025-12-02 02:34:15.312 00:06:00.469 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-12-02 02:39:20.632 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35327 1 80 1 2025-12-02 02:39:20.632 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32844 1 109 1 2025-12-02 02:39:20.621 00:00:00.000 UDP 28.104.0.1:32844 -> 198.28.0.2:53 1 64 1 2025-12-02 02:39:20.621 00:00:00.000 UDP 28.104.0.1:35327 -> 198.28.0.2:53 1 64 1 2025-12-02 02:40:20.889 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37910 1 109 1 2025-12-02 02:40:20.889 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49131 1 80 1 2025-12-02 02:40:20.875 00:00:00.000 UDP 28.104.0.1:37910 -> 198.28.0.2:53 1 64 1 2025-12-02 02:40:20.875 00:00:00.000 UDP 28.104.0.1:49131 -> 198.28.0.2:53 1 64 1 2025-12-02 02:40:53.448 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-02 02:37:06.636 00:05:08.826 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-02 02:37:06.596 00:05:08.716 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-02 02:37:06.585 00:05:08.737 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-02 02:41:21.188 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38721 1 80 1 2025-12-02 02:41:21.188 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41336 1 109 1 2025-12-02 02:41:21.178 00:00:00.000 UDP 28.104.0.1:38721 -> 198.28.0.2:53 1 64 1 2025-12-02 02:41:21.178 00:00:00.000 UDP 28.104.0.1:41336 -> 198.28.0.2:53 1 64 1 2025-12-02 02:38:06.587 00:05:08.894 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-02 02:42:21.486 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51787 1 109 1 2025-12-02 02:42:21.486 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58775 1 80 1 2025-12-02 02:42:21.476 00:00:00.000 UDP 28.104.0.1:51787 -> 198.28.0.2:53 1 64 1 2025-12-02 02:42:21.476 00:00:00.000 UDP 28.104.0.1:58775 -> 198.28.0.2:53 1 64 1 2025-12-02 02:38:31.099 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2700 1 2025-12-02 02:39:15.311 00:05:00.716 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-02 02:43:21.785 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55009 1 109 1 2025-12-02 02:43:21.785 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47997 1 80 1 2025-12-02 02:43:21.773 00:00:00.000 UDP 28.104.0.1:47997 -> 198.28.0.2:53 1 64 1 2025-12-02 02:43:21.774 00:00:00.000 UDP 28.104.0.1:55009 -> 198.28.0.2:53 1 64 1 2025-12-02 02:44:22.046 00:00:00.000 UDP 28.104.0.1:34351 -> 198.28.0.2:53 1 64 1 2025-12-02 02:44:22.046 00:00:00.000 UDP 28.104.0.1:58847 -> 198.28.0.2:53 1 64 1 2025-12-02 02:44:22.055 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34351 1 109 1 2025-12-02 02:44:22.055 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58847 1 80 1 2025-12-02 02:45:22.349 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37823 1 109 1 2025-12-02 02:45:22.349 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44701 1 80 1 2025-12-02 02:45:22.338 00:00:00.000 UDP 28.104.0.1:37823 -> 198.28.0.2:53 1 64 1 2025-12-02 02:45:22.338 00:00:00.000 UDP 28.104.0.1:44701 -> 198.28.0.2:53 1 64 1 2025-12-02 02:45:53.570 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-02 02:41:15.312 00:06:00.470 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-12-02 02:46:22.643 00:00:00.000 UDP 28.104.0.1:51578 -> 198.28.0.2:53 1 64 1 2025-12-02 02:46:22.643 00:00:00.000 UDP 28.104.0.1:43892 -> 198.28.0.2:53 1 64 1 2025-12-02 02:46:22.654 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43892 1 80 1 2025-12-02 02:46:22.654 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51578 1 109 1 2025-12-02 02:43:06.590 00:05:08.736 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-02 02:43:06.640 00:05:08.825 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-02 02:43:06.600 00:05:08.716 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-02 02:47:22.947 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46791 1 109 1 2025-12-02 02:47:22.947 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55408 1 80 1 2025-12-02 02:47:22.937 00:00:00.000 UDP 28.104.0.1:46791 -> 198.28.0.2:53 1 64 1 2025-12-02 02:47:22.937 00:00:00.000 UDP 28.104.0.1:55408 -> 198.28.0.2:53 1 64 1 2025-12-02 02:43:51.103 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2464 1 2025-12-02 02:44:06.591 00:05:08.885 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-02 02:48:23.243 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37654 1 109 1 2025-12-02 02:48:23.243 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56732 1 80 1 2025-12-02 02:48:23.233 00:00:00.000 UDP 28.104.0.1:56732 -> 198.28.0.2:53 1 64 1 2025-12-02 02:48:23.233 00:00:00.000 UDP 28.104.0.1:37654 -> 198.28.0.2:53 1 64 1 2025-12-02 02:45:15.317 00:05:00.711 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-02 02:49:23.539 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47653 1 80 1 2025-12-02 02:49:23.539 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51398 1 109 1 2025-12-02 02:49:23.529 00:00:00.000 UDP 28.104.0.1:51398 -> 198.28.0.2:53 1 64 1 2025-12-02 02:49:23.529 00:00:00.000 UDP 28.104.0.1:47653 -> 198.28.0.2:53 1 64 1 2025-12-02 02:50:23.827 00:00:00.000 UDP 28.104.0.1:43413 -> 198.28.0.2:53 1 64 1 2025-12-02 02:50:23.827 00:00:00.000 UDP 28.104.0.1:41375 -> 198.28.0.2:53 1 64 1 2025-12-02 02:50:23.838 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41375 1 80 1 2025-12-02 02:50:23.838 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43413 1 109 1 2025-12-02 02:50:53.709 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-02 02:51:24.121 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57428 1 80 1 2025-12-02 02:51:24.121 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49255 1 109 1 2025-12-02 02:51:24.110 00:00:00.000 UDP 28.104.0.1:49255 -> 198.28.0.2:53 1 64 1 2025-12-02 02:51:24.110 00:00:00.000 UDP 28.104.0.1:57428 -> 198.28.0.2:53 1 64 1 2025-12-02 02:52:24.437 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57288 1 80 1 2025-12-02 02:52:24.437 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50575 1 109 1 2025-12-02 02:52:24.428 00:00:00.000 UDP 28.104.0.1:57288 -> 198.28.0.2:53 1 64 1 2025-12-02 02:52:24.428 00:00:00.000 UDP 28.104.0.1:50575 -> 198.28.0.2:53 1 64 1 2025-12-02 02:49:06.591 00:05:08.736 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-02 02:49:11.109 00:05:05.376 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2848 1 2025-12-02 02:49:06.642 00:05:08.827 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-02 02:48:15.317 00:06:00.467 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-12-02 02:49:06.602 00:05:08.715 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-02 02:53:24.720 00:00:00.000 UDP 28.104.0.1:37945 -> 198.28.0.2:53 1 64 1 2025-12-02 02:53:24.720 00:00:00.000 UDP 28.104.0.1:52196 -> 198.28.0.2:53 1 64 1 2025-12-02 02:53:24.730 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52196 1 109 1 2025-12-02 02:53:24.730 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37945 1 80 1 2025-12-02 02:50:06.593 00:05:08.889 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-02 02:54:25.041 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48028 1 109 1 2025-12-02 02:54:25.040 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37276 1 80 1 2025-12-02 02:54:25.032 00:00:00.000 UDP 28.104.0.1:37276 -> 198.28.0.2:53 1 64 1 2025-12-02 02:54:25.033 00:00:00.000 UDP 28.104.0.1:48028 -> 198.28.0.2:53 1 64 1 2025-12-02 02:51:15.316 00:05:00.712 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-02 02:55:25.290 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58046 1 80 1 2025-12-02 02:55:25.290 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50900 1 109 1 2025-12-02 02:55:25.280 00:00:00.000 UDP 28.104.0.1:58046 -> 198.28.0.2:53 1 64 1 2025-12-02 02:55:25.280 00:00:00.000 UDP 28.104.0.1:50900 -> 198.28.0.2:53 1 64 1 2025-12-02 02:55:53.770 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-02 02:56:25.579 00:00:00.000 UDP 28.104.0.1:59338 -> 198.28.0.2:53 1 64 1 2025-12-02 02:56:25.579 00:00:00.000 UDP 28.104.0.1:36325 -> 198.28.0.2:53 1 64 1 2025-12-02 02:56:25.588 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59338 1 80 1 2025-12-02 02:56:25.589 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36325 1 109 1 2025-12-02 02:57:25.882 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53411 1 80 1 2025-12-02 02:57:25.881 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55715 1 109 1 2025-12-02 02:57:25.871 00:00:00.000 UDP 28.104.0.1:53411 -> 198.28.0.2:53 1 64 1 2025-12-02 02:57:25.871 00:00:00.000 UDP 28.104.0.1:55715 -> 198.28.0.2:53 1 64 1 2025-12-02 02:54:16.962 00:05:04.162 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2812 1 2025-12-02 02:58:26.176 00:00:00.000 UDP 28.104.0.1:39999 -> 198.28.0.2:53 1 64 1 2025-12-02 02:58:26.176 00:00:00.000 UDP 28.104.0.1:46897 -> 198.28.0.2:53 1 64 1 2025-12-02 02:58:26.188 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46897 1 80 1 2025-12-02 02:58:26.188 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39999 1 109 1 Summary: total flows: 322, total bytes: 98980, total packets: 1456, avg bps: 205, avg pps: 0, avg bpp: 67 Time window: 2025-12-02 01:55:06 - 2025-12-02 02:59:21 Total flows processed: 322, passed: 322, Blocks skipped: 0, Bytes read: 33552 Sys: 0.0042s User: 0.0033s Wall: 0.0036s flows/second: 89744.6 Runtime: 0.0036s