Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-02 07:59:01.357 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41167 1 80 1 2025-12-02 07:59:01.356 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60630 1 109 1 2025-12-02 07:59:01.346 00:00:00.000 UDP 28.104.0.1:41167 -> 198.28.0.2:53 1 64 1 2025-12-02 07:59:01.346 00:00:00.000 UDP 28.104.0.1:60630 -> 198.28.0.2:53 1 64 1 2025-12-02 07:55:06.669 00:05:08.745 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-02 07:55:06.720 00:05:08.840 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-02 07:55:06.680 00:05:08.724 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-02 08:00:01.609 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47044 1 109 1 2025-12-02 08:00:01.608 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59267 1 80 1 2025-12-02 08:00:01.599 00:00:00.000 UDP 28.104.0.1:59267 -> 198.28.0.2:53 1 64 1 2025-12-02 08:00:01.599 00:00:00.000 UDP 28.104.0.1:47044 -> 198.28.0.2:53 1 64 1 2025-12-02 07:56:06.670 00:05:08.900 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-02 08:00:59.836 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-02 07:56:51.505 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2580 1 2025-12-02 08:01:01.902 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55018 1 109 1 2025-12-02 08:01:01.902 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34161 1 80 1 2025-12-02 08:01:01.891 00:00:00.000 UDP 28.104.0.1:55018 -> 198.28.0.2:53 1 64 1 2025-12-02 08:01:01.891 00:00:00.000 UDP 28.104.0.1:34161 -> 198.28.0.2:53 1 64 1 2025-12-02 07:56:15.404 00:06:00.470 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-12-02 07:57:15.404 00:05:00.747 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-02 08:02:02.195 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50583 1 109 1 2025-12-02 08:02:02.195 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55959 1 80 1 2025-12-02 08:02:02.185 00:00:00.000 UDP 28.104.0.1:55959 -> 198.28.0.2:53 1 64 1 2025-12-02 08:02:02.185 00:00:00.000 UDP 28.104.0.1:50583 -> 198.28.0.2:53 1 64 1 2025-12-02 08:03:02.453 00:00:00.000 UDP 28.104.0.1:52981 -> 198.28.0.2:53 1 64 1 2025-12-02 08:03:02.453 00:00:00.000 UDP 28.104.0.1:49719 -> 198.28.0.2:53 1 64 1 2025-12-02 08:03:02.463 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52981 1 80 1 2025-12-02 08:03:02.463 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49719 1 109 1 2025-12-02 08:04:02.807 00:00:00.000 UDP 28.104.0.1:54788 -> 198.28.0.2:53 1 64 1 2025-12-02 08:04:02.807 00:00:00.000 UDP 28.104.0.1:57247 -> 198.28.0.2:53 1 64 1 2025-12-02 08:04:02.817 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54788 1 80 1 2025-12-02 08:04:02.818 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57247 1 109 1 2025-12-02 08:05:04.601 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38642 1 80 1 2025-12-02 08:05:04.601 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47808 1 109 1 2025-12-02 08:05:04.591 00:00:00.000 UDP 28.104.0.1:47808 -> 198.28.0.2:53 1 64 1 2025-12-02 08:05:04.591 00:00:00.000 UDP 28.104.0.1:38642 -> 198.28.0.2:53 1 64 1 2025-12-02 08:01:06.720 00:05:08.840 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-02 08:01:06.680 00:05:08.725 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-02 08:01:06.670 00:05:08.745 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-02 08:06:00.211 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-02 08:06:04.897 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51416 1 80 1 2025-12-02 08:06:04.897 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60324 1 109 1 2025-12-02 08:06:04.887 00:00:00.000 UDP 28.104.0.1:60324 -> 198.28.0.2:53 1 64 1 2025-12-02 08:06:04.887 00:00:00.000 UDP 28.104.0.1:51416 -> 198.28.0.2:53 1 64 1 2025-12-02 08:02:06.671 00:05:08.899 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-02 08:02:11.509 00:05:10.010 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2668 1 2025-12-02 08:07:05.200 00:00:00.000 UDP 28.104.0.1:46064 -> 198.28.0.2:53 1 64 1 2025-12-02 08:07:05.199 00:00:00.000 UDP 28.104.0.1:36351 -> 198.28.0.2:53 1 64 1 2025-12-02 08:07:05.210 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36351 1 80 1 2025-12-02 08:07:05.211 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46064 1 109 1 2025-12-02 08:03:15.405 00:05:00.749 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-02 08:08:05.525 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54248 1 80 1 2025-12-02 08:08:05.525 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60166 1 109 1 2025-12-02 08:08:05.515 00:00:00.000 UDP 28.104.0.1:54248 -> 198.28.0.2:53 1 64 1 2025-12-02 08:08:05.515 00:00:00.000 UDP 28.104.0.1:60166 -> 198.28.0.2:53 1 64 1 2025-12-02 08:03:15.405 00:06:00.474 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-12-02 08:09:05.815 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55000 1 109 1 2025-12-02 08:09:05.815 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33405 1 80 1 2025-12-02 08:09:05.805 00:00:00.000 UDP 28.104.0.1:55000 -> 198.28.0.2:53 1 64 1 2025-12-02 08:09:05.806 00:00:00.000 UDP 28.104.0.1:33405 -> 198.28.0.2:53 1 64 1 2025-12-02 08:10:06.103 00:00:00.000 UDP 28.104.0.1:52719 -> 198.28.0.2:53 1 64 1 2025-12-02 08:10:06.103 00:00:00.000 UDP 28.104.0.1:56410 -> 198.28.0.2:53 1 64 1 2025-12-02 08:10:06.113 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56410 1 80 1 2025-12-02 08:10:06.114 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52719 1 109 1 2025-12-02 08:11:00.048 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-02 08:11:06.417 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55504 1 80 1 2025-12-02 08:11:06.417 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44512 1 109 1 2025-12-02 08:11:06.406 00:00:00.000 UDP 28.104.0.1:44512 -> 198.28.0.2:53 1 64 1 2025-12-02 08:11:06.406 00:00:00.000 UDP 28.104.0.1:55504 -> 198.28.0.2:53 1 64 1 2025-12-02 08:07:06.724 00:05:08.837 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-02 08:07:06.684 00:05:08.724 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-02 08:07:06.673 00:05:08.745 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-02 08:07:31.521 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2920 1 2025-12-02 08:12:06.703 00:00:00.000 UDP 28.104.0.1:38780 -> 198.28.0.2:53 1 64 1 2025-12-02 08:12:06.703 00:00:00.000 UDP 28.104.0.1:46575 -> 198.28.0.2:53 1 64 1 2025-12-02 08:12:06.715 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46575 1 109 1 2025-12-02 08:12:06.715 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38780 1 80 1 2025-12-02 08:08:06.675 00:05:08.898 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-02 08:13:06.954 00:00:00.000 UDP 28.104.0.1:57781 -> 198.28.0.2:53 1 64 1 2025-12-02 08:13:06.954 00:00:00.000 UDP 28.104.0.1:51300 -> 198.28.0.2:53 1 64 1 2025-12-02 08:13:06.964 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57781 1 80 1 2025-12-02 08:13:06.964 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51300 1 109 1 2025-12-02 08:09:15.407 00:05:00.750 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-02 08:14:07.255 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48098 1 80 1 2025-12-02 08:14:07.255 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36582 1 109 1 2025-12-02 08:14:07.245 00:00:00.000 UDP 28.104.0.1:36582 -> 198.28.0.2:53 1 64 1 2025-12-02 08:14:07.245 00:00:00.000 UDP 28.104.0.1:48098 -> 198.28.0.2:53 1 64 1 2025-12-02 08:15:07.716 00:00:00.000 UDP 28.104.0.1:34001 -> 198.28.0.2:53 1 64 1 2025-12-02 08:15:07.716 00:00:00.000 UDP 28.104.0.1:38585 -> 198.28.0.2:53 1 64 1 2025-12-02 08:15:07.725 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34001 1 80 1 2025-12-02 08:15:07.725 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38585 1 109 1 2025-12-02 08:10:15.406 00:06:00.475 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-12-02 08:16:00.301 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-02 08:16:08.029 00:00:00.000 UDP 28.104.0.1:45127 -> 198.28.0.2:53 1 64 1 2025-12-02 08:16:08.029 00:00:00.000 UDP 28.104.0.1:58420 -> 198.28.0.2:53 1 64 1 2025-12-02 08:16:08.039 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58420 1 109 1 2025-12-02 08:16:08.039 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45127 1 80 1 2025-12-02 08:12:51.525 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 43 3044 1 2025-12-02 08:17:08.330 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36133 1 80 1 2025-12-02 08:17:08.330 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60368 1 109 1 2025-12-02 08:17:08.320 00:00:00.000 UDP 28.104.0.1:36133 -> 198.28.0.2:53 1 64 1 2025-12-02 08:17:08.320 00:00:00.000 UDP 28.104.0.1:60368 -> 198.28.0.2:53 1 64 1 2025-12-02 08:13:06.676 00:05:08.745 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-02 08:13:06.727 00:05:08.838 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-02 08:13:06.687 00:05:08.725 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-02 08:18:08.628 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48243 1 80 1 2025-12-02 08:18:08.628 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54225 1 109 1 2025-12-02 08:18:08.617 00:00:00.000 UDP 28.104.0.1:54225 -> 198.28.0.2:53 1 64 1 2025-12-02 08:18:08.617 00:00:00.000 UDP 28.104.0.1:48243 -> 198.28.0.2:53 1 64 1 2025-12-02 08:14:06.676 00:05:08.898 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-02 08:19:08.918 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43184 1 80 1 2025-12-02 08:19:08.917 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34730 1 109 1 2025-12-02 08:19:08.907 00:00:00.000 UDP 28.104.0.1:34730 -> 198.28.0.2:53 1 64 1 2025-12-02 08:19:08.907 00:00:00.000 UDP 28.104.0.1:43184 -> 198.28.0.2:53 1 64 1 2025-12-02 08:15:15.409 00:05:00.750 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-02 08:20:09.210 00:00:00.000 UDP 28.104.0.1:46512 -> 198.28.0.2:53 1 64 1 2025-12-02 08:20:09.210 00:00:00.000 UDP 28.104.0.1:42577 -> 198.28.0.2:53 1 64 1 2025-12-02 08:20:09.221 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46512 1 80 1 2025-12-02 08:20:09.222 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42577 1 109 1 2025-12-02 08:21:00.188 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-02 08:21:09.479 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57253 1 80 1 2025-12-02 08:21:09.479 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57280 1 109 1 2025-12-02 08:21:09.468 00:00:00.000 UDP 28.104.0.1:57280 -> 198.28.0.2:53 1 64 1 2025-12-02 08:21:09.468 00:00:00.000 UDP 28.104.0.1:57253 -> 198.28.0.2:53 1 64 1 2025-12-02 08:22:09.732 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37074 1 80 1 2025-12-02 08:22:09.732 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50210 1 109 1 2025-12-02 08:22:09.722 00:00:00.000 UDP 28.104.0.1:50210 -> 198.28.0.2:53 1 64 1 2025-12-02 08:22:09.722 00:00:00.000 UDP 28.104.0.1:37074 -> 198.28.0.2:53 1 64 1 2025-12-02 08:17:15.411 00:06:00.472 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-12-02 08:18:11.532 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2624 1 2025-12-02 08:23:10.050 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38696 1 109 1 2025-12-02 08:23:10.050 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41656 1 80 1 2025-12-02 08:23:10.041 00:00:00.000 UDP 28.104.0.1:41656 -> 198.28.0.2:53 1 64 1 2025-12-02 08:23:10.041 00:00:00.000 UDP 28.104.0.1:38696 -> 198.28.0.2:53 1 64 1 2025-12-02 08:19:06.728 00:05:08.840 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-02 08:19:06.688 00:05:08.723 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-02 08:19:06.677 00:05:08.744 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-02 08:24:10.335 00:00:00.000 UDP 28.104.0.1:55079 -> 198.28.0.2:53 1 64 1 2025-12-02 08:24:10.335 00:00:00.000 UDP 28.104.0.1:50598 -> 198.28.0.2:53 1 64 1 2025-12-02 08:24:10.346 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55079 1 109 1 2025-12-02 08:24:10.346 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50598 1 80 1 2025-12-02 08:20:06.678 00:05:08.901 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-02 08:25:10.637 00:00:00.000 UDP 28.104.0.1:40848 -> 198.28.0.2:53 1 64 1 2025-12-02 08:25:10.637 00:00:00.000 UDP 28.104.0.1:47621 -> 198.28.0.2:53 1 64 1 2025-12-02 08:25:10.647 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47621 1 109 1 2025-12-02 08:25:10.647 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40848 1 80 1 2025-12-02 08:21:15.411 00:05:00.749 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-02 08:26:00.456 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-02 08:26:10.941 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58115 1 80 1 2025-12-02 08:26:10.941 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54810 1 109 1 2025-12-02 08:26:10.931 00:00:00.000 UDP 28.104.0.1:54810 -> 198.28.0.2:53 1 64 1 2025-12-02 08:26:10.931 00:00:00.000 UDP 28.104.0.1:58115 -> 198.28.0.2:53 1 64 1 2025-12-02 08:27:11.229 00:00:00.000 UDP 28.104.0.1:60221 -> 198.28.0.2:53 1 64 1 2025-12-02 08:27:11.229 00:00:00.000 UDP 28.104.0.1:59916 -> 198.28.0.2:53 1 64 1 2025-12-02 08:27:11.241 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60221 1 109 1 2025-12-02 08:27:11.240 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59916 1 80 1 2025-12-02 08:23:31.539 00:05:10.122 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2592 1 2025-12-02 08:28:11.532 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47907 1 109 1 2025-12-02 08:28:11.531 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50218 1 80 1 2025-12-02 08:28:11.522 00:00:00.000 UDP 28.104.0.1:50218 -> 198.28.0.2:53 1 64 1 2025-12-02 08:28:11.522 00:00:00.000 UDP 28.104.0.1:47907 -> 198.28.0.2:53 1 64 1 2025-12-02 08:29:11.882 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49145 1 80 1 2025-12-02 08:29:11.882 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60156 1 109 1 2025-12-02 08:29:11.872 00:00:00.000 UDP 28.104.0.1:60156 -> 198.28.0.2:53 1 64 1 2025-12-02 08:29:11.872 00:00:00.000 UDP 28.104.0.1:49145 -> 198.28.0.2:53 1 64 1 2025-12-02 08:25:06.735 00:05:08.835 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-02 08:24:15.412 00:06:00.476 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-12-02 08:25:06.691 00:05:08.721 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-02 08:25:06.682 00:05:08.741 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-02 08:30:12.175 00:00:00.000 UDP 28.104.0.1:51056 -> 198.28.0.2:53 1 64 1 2025-12-02 08:30:12.176 00:00:00.000 UDP 28.104.0.1:56311 -> 198.28.0.2:53 1 64 1 2025-12-02 08:26:06.681 00:05:08.899 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-02 08:30:12.186 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51056 1 80 1 2025-12-02 08:30:12.187 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56311 1 109 1 2025-12-02 08:31:00.552 00:00:00.010 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-02 08:31:12.467 00:00:00.000 UDP 28.104.0.1:42686 -> 198.28.0.2:53 1 64 1 2025-12-02 08:31:12.467 00:00:00.000 UDP 28.104.0.1:44111 -> 198.28.0.2:53 1 64 1 2025-12-02 08:27:15.411 00:05:00.749 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-02 08:31:12.478 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42686 1 80 1 2025-12-02 08:31:12.478 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44111 1 109 1 2025-12-02 08:32:12.800 00:00:00.000 UDP 28.104.0.1:57004 -> 198.28.0.2:53 1 64 1 2025-12-02 08:32:12.800 00:00:00.000 UDP 28.104.0.1:54338 -> 198.28.0.2:53 1 64 1 2025-12-02 08:32:12.809 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54338 1 109 1 2025-12-02 08:32:12.809 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57004 1 80 1 2025-12-02 08:28:51.541 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 34 2444 1 2025-12-02 08:33:13.106 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43244 1 80 1 2025-12-02 08:33:13.106 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47361 1 109 1 2025-12-02 08:33:13.096 00:00:00.000 UDP 28.104.0.1:43244 -> 198.28.0.2:53 1 64 1 2025-12-02 08:33:13.096 00:00:00.000 UDP 28.104.0.1:47361 -> 198.28.0.2:53 1 64 1 2025-12-02 08:34:13.367 00:00:00.000 UDP 28.104.0.1:41585 -> 198.28.0.2:53 1 64 1 2025-12-02 08:34:13.367 00:00:00.000 UDP 28.104.0.1:40191 -> 198.28.0.2:53 1 64 1 2025-12-02 08:34:13.378 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40191 1 109 1 2025-12-02 08:34:13.378 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41585 1 80 1 2025-12-02 08:31:06.733 00:05:08.838 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-02 08:35:13.663 00:00:00.000 UDP 28.104.0.1:52185 -> 198.28.0.2:53 1 64 1 2025-12-02 08:31:06.693 00:05:08.720 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-02 08:35:13.663 00:00:00.000 UDP 28.104.0.1:39462 -> 198.28.0.2:53 1 64 1 2025-12-02 08:35:13.675 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52185 1 109 1 2025-12-02 08:35:13.675 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39462 1 80 1 2025-12-02 08:31:06.683 00:05:08.741 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-02 08:36:00.542 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-02 08:36:13.958 00:00:00.000 UDP 28.104.0.1:50557 -> 198.28.0.2:53 1 64 1 2025-12-02 08:36:13.957 00:00:00.000 UDP 28.104.0.1:49696 -> 198.28.0.2:53 1 64 1 2025-12-02 08:31:15.412 00:06:00.486 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-12-02 08:32:06.682 00:05:08.899 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-02 08:36:13.968 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50557 1 109 1 2025-12-02 08:36:13.967 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49696 1 80 1 2025-12-02 08:37:14.269 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37447 1 80 1 2025-12-02 08:37:14.262 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45034 1 109 1 2025-12-02 08:37:14.251 00:00:00.000 UDP 28.104.0.1:45034 -> 198.28.0.2:53 1 64 1 2025-12-02 08:37:14.251 00:00:00.000 UDP 28.104.0.1:37447 -> 198.28.0.2:53 1 64 1 2025-12-02 08:33:15.412 00:05:00.753 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-02 08:38:14.554 00:00:00.000 UDP 28.104.0.1:59926 -> 198.28.0.2:53 1 64 1 2025-12-02 08:38:14.554 00:00:00.000 UDP 28.104.0.1:53908 -> 198.28.0.2:53 1 64 1 2025-12-02 08:38:14.563 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53908 1 80 1 2025-12-02 08:38:14.563 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59926 1 109 1 2025-12-02 08:34:11.546 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2888 1 2025-12-02 08:39:14.854 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53158 1 80 1 2025-12-02 08:39:14.854 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38410 1 109 1 2025-12-02 08:39:14.845 00:00:00.000 UDP 28.104.0.1:53158 -> 198.28.0.2:53 1 64 1 2025-12-02 08:39:14.844 00:00:00.000 UDP 28.104.0.1:38410 -> 198.28.0.2:53 1 64 1 2025-12-02 08:40:15.145 00:00:00.000 UDP 28.104.0.1:60771 -> 198.28.0.2:53 1 64 1 2025-12-02 08:40:15.146 00:00:00.000 UDP 28.104.0.1:43696 -> 198.28.0.2:53 1 64 1 2025-12-02 08:40:15.155 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43696 1 80 1 2025-12-02 08:40:15.155 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60771 1 109 1 2025-12-02 08:41:00.734 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-02 08:41:15.468 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34785 1 109 1 2025-12-02 08:41:15.468 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48655 1 80 1 2025-12-02 08:37:06.686 00:05:08.742 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-02 08:37:06.734 00:05:08.837 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-02 08:41:15.456 00:00:00.000 UDP 28.104.0.1:48655 -> 198.28.0.2:53 1 64 1 2025-12-02 08:37:06.694 00:05:08.722 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-02 08:41:15.456 00:00:00.000 UDP 28.104.0.1:34785 -> 198.28.0.2:53 1 64 1 2025-12-02 08:42:15.725 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35133 1 109 1 2025-12-02 08:38:06.686 00:05:08.897 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-02 08:42:15.725 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33013 1 80 1 2025-12-02 08:42:15.715 00:00:00.000 UDP 28.104.0.1:35133 -> 198.28.0.2:53 1 64 1 2025-12-02 08:42:15.715 00:00:00.000 UDP 28.104.0.1:33013 -> 198.28.0.2:53 1 64 1 2025-12-02 08:43:16.032 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38703 1 109 1 2025-12-02 08:43:16.033 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35676 1 80 1 2025-12-02 08:43:16.021 00:00:00.000 UDP 28.104.0.1:35676 -> 198.28.0.2:53 1 64 1 2025-12-02 08:38:15.412 00:06:00.486 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-12-02 08:39:15.413 00:05:00.753 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-02 08:43:16.021 00:00:00.000 UDP 28.104.0.1:38703 -> 198.28.0.2:53 1 64 1 2025-12-02 08:39:31.552 00:05:10.015 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2612 1 2025-12-02 08:44:16.834 00:00:00.000 UDP 28.104.0.1:44996 -> 198.28.0.2:53 1 64 1 2025-12-02 08:44:16.834 00:00:00.000 UDP 28.104.0.1:51492 -> 198.28.0.2:53 1 64 1 2025-12-02 08:44:16.844 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44996 1 80 1 2025-12-02 08:44:16.844 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51492 1 109 1 2025-12-02 08:45:17.100 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36769 1 80 1 2025-12-02 08:45:17.100 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47322 1 109 1 2025-12-02 08:45:17.090 00:00:00.000 UDP 28.104.0.1:47322 -> 198.28.0.2:53 1 64 1 2025-12-02 08:45:17.090 00:00:00.000 UDP 28.104.0.1:36769 -> 198.28.0.2:53 1 64 1 2025-12-02 08:46:00.552 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-02 08:46:17.395 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58432 1 80 1 2025-12-02 08:46:17.395 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38017 1 109 1 2025-12-02 08:46:17.386 00:00:00.000 UDP 28.104.0.1:38017 -> 198.28.0.2:53 1 64 1 2025-12-02 08:46:17.386 00:00:00.000 UDP 28.104.0.1:58432 -> 198.28.0.2:53 1 64 1 2025-12-02 08:43:06.690 00:05:08.739 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-02 08:43:06.699 00:05:08.719 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-02 08:43:06.739 00:05:08.835 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-02 08:47:17.680 00:00:00.000 UDP 28.104.0.1:34680 -> 198.28.0.2:53 1 64 1 2025-12-02 08:47:17.680 00:00:00.000 UDP 28.104.0.1:60393 -> 198.28.0.2:53 1 64 1 2025-12-02 08:47:17.690 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34680 1 80 1 2025-12-02 08:47:17.690 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60393 1 109 1 2025-12-02 08:44:06.690 00:05:08.895 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-02 08:48:19.881 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50918 1 80 1 2025-12-02 08:48:19.881 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49154 1 109 1 2025-12-02 08:48:19.871 00:00:00.000 UDP 28.104.0.1:49154 -> 198.28.0.2:53 1 64 1 2025-12-02 08:48:19.871 00:00:00.000 UDP 28.104.0.1:50918 -> 198.28.0.2:53 1 64 1 2025-12-02 08:44:51.569 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 42 3128 1 2025-12-02 08:49:20.189 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42890 1 109 1 2025-12-02 08:49:20.189 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59919 1 80 1 2025-12-02 08:49:20.179 00:00:00.000 UDP 28.104.0.1:59919 -> 198.28.0.2:53 1 64 1 2025-12-02 08:45:15.418 00:05:00.750 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-02 08:49:20.179 00:00:00.000 UDP 28.104.0.1:42890 -> 198.28.0.2:53 1 64 1 2025-12-02 08:45:15.418 00:06:00.484 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-12-02 08:50:20.480 00:00:00.000 UDP 28.104.0.1:53737 -> 198.28.0.2:53 1 64 1 2025-12-02 08:50:20.481 00:00:00.000 UDP 28.104.0.1:53277 -> 198.28.0.2:53 1 64 1 2025-12-02 08:50:20.490 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53737 1 80 1 2025-12-02 08:50:20.490 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53277 1 109 1 2025-12-02 08:51:00.907 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-02 08:51:20.731 00:00:00.000 UDP 28.104.0.1:52020 -> 198.28.0.2:53 1 64 1 2025-12-02 08:51:20.731 00:00:00.000 UDP 28.104.0.1:41628 -> 198.28.0.2:53 1 64 1 2025-12-02 08:51:20.742 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52020 1 80 1 2025-12-02 08:51:20.742 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41628 1 109 1 2025-12-02 08:52:21.062 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34269 1 109 1 2025-12-02 08:52:21.061 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47300 1 80 1 2025-12-02 08:52:21.052 00:00:00.000 UDP 28.104.0.1:34269 -> 198.28.0.2:53 1 64 1 2025-12-02 08:52:21.051 00:00:00.000 UDP 28.104.0.1:47300 -> 198.28.0.2:53 1 64 1 2025-12-02 08:49:06.694 00:05:08.735 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-02 08:53:21.357 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55583 1 109 1 2025-12-02 08:53:21.357 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33753 1 80 1 2025-12-02 08:49:06.746 00:05:08.833 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-02 08:49:06.706 00:05:08.715 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-02 08:53:21.348 00:00:00.000 UDP 28.104.0.1:55583 -> 198.28.0.2:53 1 64 1 2025-12-02 08:53:21.348 00:00:00.000 UDP 28.104.0.1:33753 -> 198.28.0.2:53 1 64 1 2025-12-02 08:50:06.697 00:05:08.892 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-02 08:50:11.576 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2384 1 2025-12-02 08:54:21.654 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32815 1 80 1 2025-12-02 08:54:21.656 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49564 1 109 1 2025-12-02 08:54:21.643 00:00:00.000 UDP 28.104.0.1:32815 -> 198.28.0.2:53 1 64 1 2025-12-02 08:54:21.644 00:00:00.000 UDP 28.104.0.1:49564 -> 198.28.0.2:53 1 64 1 2025-12-02 08:51:15.421 00:05:00.748 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-02 08:55:21.967 00:00:00.000 UDP 28.104.0.1:37634 -> 198.28.0.2:53 1 64 1 2025-12-02 08:55:21.967 00:00:00.000 UDP 28.104.0.1:55955 -> 198.28.0.2:53 1 64 1 2025-12-02 08:55:21.979 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55955 1 109 1 2025-12-02 08:55:21.979 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37634 1 80 1 2025-12-02 08:56:00.969 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-02 08:56:22.269 00:00:00.000 UDP 28.104.0.1:52691 -> 198.28.0.2:53 1 64 1 2025-12-02 08:56:22.269 00:00:00.000 UDP 28.104.0.1:49097 -> 198.28.0.2:53 1 64 1 2025-12-02 08:56:22.281 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52691 1 80 1 2025-12-02 08:56:22.281 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49097 1 109 1 2025-12-02 08:52:15.420 00:06:00.483 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-12-02 08:57:22.571 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36213 1 80 1 2025-12-02 08:57:22.571 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54051 1 109 1 2025-12-02 08:57:22.561 00:00:00.000 UDP 28.104.0.1:54051 -> 198.28.0.2:53 1 64 1 2025-12-02 08:57:22.561 00:00:00.000 UDP 28.104.0.1:36213 -> 198.28.0.2:53 1 64 1 2025-12-02 08:58:22.905 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54010 1 80 1 2025-12-02 08:58:22.905 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38551 1 109 1 2025-12-02 08:58:22.895 00:00:00.000 UDP 28.104.0.1:38551 -> 198.28.0.2:53 1 64 1 2025-12-02 08:58:22.895 00:00:00.000 UDP 28.104.0.1:54010 -> 198.28.0.2:53 1 64 1 Summary: total flows: 322, total bytes: 96577, total packets: 1424, avg bps: 203, avg pps: 0, avg bpp: 67 Time window: 2025-12-02 07:55:06 - 2025-12-02 08:58:22 Total flows processed: 322, passed: 322, Blocks skipped: 0, Bytes read: 33552 Sys: 0.0059s User: 0.0010s Wall: 0.0036s flows/second: 89720.7 Runtime: 0.0036s