Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-03 04:54:15.808 00:05:51.278 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-03 04:54:15.976 00:05:51.160 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-03 04:54:15.798 00:05:51.298 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-03 04:55:07.083 00:05:08.905 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-03 04:59:18.331 00:00:00.000 UDP 28.104.0.1:55071 -> 198.28.0.2:53 1 64 1 2025-12-03 04:59:18.333 00:00:00.000 UDP 28.104.0.1:43084 -> 198.28.0.2:53 1 64 1 2025-12-03 04:59:18.343 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43084 1 109 1 2025-12-03 04:59:18.341 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55071 1 80 1 2025-12-03 04:56:15.799 00:05:00.499 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-12-03 05:00:18.632 00:00:00.000 UDP 28.104.0.1:36008 -> 198.28.0.2:53 1 64 1 2025-12-03 05:00:18.632 00:00:00.000 UDP 28.104.0.1:49076 -> 198.28.0.2:53 1 64 1 2025-12-03 05:00:18.641 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49076 1 109 1 2025-12-03 05:00:18.641 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36008 1 80 1 2025-12-03 05:01:18.934 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53649 1 109 1 2025-12-03 05:01:18.934 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33473 1 80 1 2025-12-03 05:01:18.923 00:00:00.000 UDP 28.104.0.1:53649 -> 198.28.0.2:53 1 64 1 2025-12-03 04:57:15.799 00:05:00.833 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-03 05:01:18.923 00:00:00.000 UDP 28.104.0.1:33473 -> 198.28.0.2:53 1 64 1 2025-12-03 05:01:25.272 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-03 04:57:23.218 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2448 1 2025-12-03 05:02:19.236 00:00:00.000 UDP 28.104.0.1:43756 -> 198.28.0.2:53 1 64 1 2025-12-03 05:02:19.236 00:00:00.000 UDP 28.104.0.1:52066 -> 198.28.0.2:53 1 64 1 2025-12-03 05:02:19.248 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52066 1 80 1 2025-12-03 05:02:19.248 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43756 1 109 1 2025-12-03 05:03:19.539 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41932 1 80 1 2025-12-03 05:03:19.539 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49601 1 109 1 2025-12-03 05:03:19.528 00:00:00.000 UDP 28.104.0.1:41932 -> 198.28.0.2:53 1 64 1 2025-12-03 05:03:19.529 00:00:00.000 UDP 28.104.0.1:49601 -> 198.28.0.2:53 1 64 1 2025-12-03 05:04:19.868 00:00:00.000 UDP 28.104.0.1:35118 -> 198.28.0.2:53 1 64 1 2025-12-03 05:04:19.868 00:00:00.000 UDP 28.104.0.1:38238 -> 198.28.0.2:53 1 64 1 2025-12-03 05:04:19.880 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35118 1 109 1 2025-12-03 05:04:19.880 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38238 1 80 1 2025-12-03 05:00:15.809 00:05:51.279 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-03 05:00:15.978 00:05:51.161 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-03 05:00:15.799 00:05:51.300 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-03 05:01:07.088 00:05:08.901 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-03 05:05:20.192 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56057 1 109 1 2025-12-03 05:05:20.192 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57346 1 80 1 2025-12-03 05:05:20.182 00:00:00.000 UDP 28.104.0.1:57346 -> 198.28.0.2:53 1 64 1 2025-12-03 05:05:20.182 00:00:00.000 UDP 28.104.0.1:56057 -> 198.28.0.2:53 1 64 1 2025-12-03 05:02:15.799 00:05:00.501 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-12-03 05:06:20.487 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60862 1 109 1 2025-12-03 05:06:20.487 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41210 1 80 1 2025-12-03 05:06:20.477 00:00:00.000 UDP 28.104.0.1:60862 -> 198.28.0.2:53 1 64 1 2025-12-03 05:06:20.477 00:00:00.000 UDP 28.104.0.1:41210 -> 198.28.0.2:53 1 64 1 2025-12-03 05:06:25.527 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-03 05:02:43.223 00:05:10.014 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2788 1 2025-12-03 05:03:15.799 00:05:00.833 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-03 05:07:20.785 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45987 1 109 1 2025-12-03 05:07:20.785 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34430 1 80 1 2025-12-03 05:07:20.776 00:00:00.000 UDP 28.104.0.1:34430 -> 198.28.0.2:53 1 64 1 2025-12-03 05:07:20.776 00:00:00.000 UDP 28.104.0.1:45987 -> 198.28.0.2:53 1 64 1 2025-12-03 05:08:21.080 00:00:00.000 UDP 28.104.0.1:54484 -> 198.28.0.2:53 1 64 1 2025-12-03 05:08:21.080 00:00:00.000 UDP 28.104.0.1:52842 -> 198.28.0.2:53 1 64 1 2025-12-03 05:08:21.090 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52842 1 80 1 2025-12-03 05:08:21.091 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54484 1 109 1 2025-12-03 05:09:21.382 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50368 1 80 1 2025-12-03 05:09:21.386 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51785 1 109 1 2025-12-03 05:09:21.372 00:00:00.000 UDP 28.104.0.1:50368 -> 198.28.0.2:53 1 64 1 2025-12-03 05:09:21.376 00:00:00.000 UDP 28.104.0.1:51785 -> 198.28.0.2:53 1 64 1 2025-12-03 05:10:21.680 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40887 1 109 1 2025-12-03 05:10:21.679 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50974 1 80 1 2025-12-03 05:10:21.669 00:00:00.000 UDP 28.104.0.1:40887 -> 198.28.0.2:53 1 64 1 2025-12-03 05:10:21.669 00:00:00.000 UDP 28.104.0.1:50974 -> 198.28.0.2:53 1 64 1 2025-12-03 05:06:15.979 00:05:51.161 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-03 05:06:15.800 00:05:51.300 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-03 05:06:15.810 00:05:51.280 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-03 05:07:07.089 00:05:08.901 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-03 05:11:21.961 00:00:00.000 UDP 28.104.0.1:53162 -> 198.28.0.2:53 1 64 1 2025-12-03 05:11:21.961 00:00:00.000 UDP 28.104.0.1:60056 -> 198.28.0.2:53 1 64 1 2025-12-03 05:11:21.971 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53162 1 109 1 2025-12-03 05:11:21.972 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60056 1 80 1 2025-12-03 05:11:25.601 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-03 05:08:15.802 00:05:00.500 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-12-03 05:08:03.236 00:05:10.594 OSPF 28.0.2.1:0 -> 224.0.0.5:0 46 3352 1 2025-12-03 05:12:22.257 00:00:00.000 UDP 28.104.0.1:55298 -> 198.28.0.2:53 1 64 1 2025-12-03 05:12:22.257 00:00:00.000 UDP 28.104.0.1:58888 -> 198.28.0.2:53 1 64 1 2025-12-03 05:12:22.267 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58888 1 109 1 2025-12-03 05:12:22.267 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55298 1 80 1 2025-12-03 05:09:15.804 00:05:00.831 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-03 05:13:22.564 00:00:00.000 UDP 28.104.0.1:45163 -> 198.28.0.2:53 1 64 1 2025-12-03 05:13:22.564 00:00:00.000 UDP 28.104.0.1:57677 -> 198.28.0.2:53 1 64 1 2025-12-03 05:13:22.573 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45163 1 80 1 2025-12-03 05:13:22.573 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57677 1 109 1 2025-12-03 05:14:22.857 00:00:00.000 UDP 28.104.0.1:58758 -> 198.28.0.2:53 1 64 1 2025-12-03 05:14:22.857 00:00:00.000 UDP 28.104.0.1:52885 -> 198.28.0.2:53 1 64 1 2025-12-03 05:14:22.867 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52885 1 109 1 2025-12-03 05:14:22.867 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58758 1 80 1 2025-12-03 05:15:23.137 00:00:00.000 UDP 28.104.0.1:51135 -> 198.28.0.2:53 1 64 1 2025-12-03 05:15:23.137 00:00:00.000 UDP 28.104.0.1:55875 -> 198.28.0.2:53 1 64 1 2025-12-03 05:15:23.148 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51135 1 80 1 2025-12-03 05:15:23.148 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55875 1 109 1 2025-12-03 05:16:23.400 00:00:00.000 UDP 28.104.0.1:38697 -> 198.28.0.2:53 1 64 1 2025-12-03 05:16:23.400 00:00:00.000 UDP 28.104.0.1:46805 -> 198.28.0.2:53 1 64 1 2025-12-03 05:16:25.521 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-03 05:16:23.410 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38697 1 80 1 2025-12-03 05:16:23.410 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46805 1 109 1 2025-12-03 05:12:15.980 00:05:51.162 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-03 05:12:15.804 00:05:51.298 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-03 05:12:15.813 00:05:51.278 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-03 05:13:07.091 00:05:08.901 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-03 05:17:23.700 00:00:00.000 UDP 28.104.0.1:57731 -> 198.28.0.2:53 1 64 1 2025-12-03 05:17:23.700 00:00:00.000 UDP 28.104.0.1:58911 -> 198.28.0.2:53 1 64 1 2025-12-03 05:17:23.711 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57731 1 80 1 2025-12-03 05:17:23.711 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58911 1 109 1 2025-12-03 05:13:23.245 00:05:10.015 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2672 1 2025-12-03 05:14:15.805 00:05:00.499 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-12-03 05:18:23.950 00:00:00.000 UDP 28.104.0.1:33632 -> 198.28.0.2:53 1 64 1 2025-12-03 05:18:23.951 00:00:00.000 UDP 28.104.0.1:44426 -> 198.28.0.2:53 1 64 1 2025-12-03 05:18:23.961 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44426 1 80 1 2025-12-03 05:18:23.961 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33632 1 109 1 2025-12-03 05:15:15.805 00:05:00.830 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-03 05:19:24.260 00:00:00.000 UDP 28.104.0.1:55447 -> 198.28.0.2:53 1 64 1 2025-12-03 05:19:24.259 00:00:00.000 UDP 28.104.0.1:42840 -> 198.28.0.2:53 1 64 1 2025-12-03 05:19:24.270 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55447 1 80 1 2025-12-03 05:19:24.270 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42840 1 109 1 2025-12-03 05:20:24.560 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59718 1 80 1 2025-12-03 05:20:24.560 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34099 1 109 1 2025-12-03 05:20:24.550 00:00:00.000 UDP 28.104.0.1:59718 -> 198.28.0.2:53 1 64 1 2025-12-03 05:20:24.551 00:00:00.000 UDP 28.104.0.1:34099 -> 198.28.0.2:53 1 64 1 2025-12-03 05:21:24.854 00:00:00.000 UDP 28.104.0.1:43587 -> 198.28.0.2:53 1 64 1 2025-12-03 05:21:24.855 00:00:00.000 UDP 28.104.0.1:49066 -> 198.28.0.2:53 1 64 1 2025-12-03 05:21:25.588 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-03 05:21:24.864 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43587 1 109 1 2025-12-03 05:21:24.864 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49066 1 80 1 2025-12-03 05:22:25.188 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55195 1 109 1 2025-12-03 05:22:25.188 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34126 1 80 1 2025-12-03 05:22:25.180 00:00:00.000 UDP 28.104.0.1:34126 -> 198.28.0.2:53 1 64 1 2025-12-03 05:22:25.180 00:00:00.000 UDP 28.104.0.1:55195 -> 198.28.0.2:53 1 64 1 2025-12-03 05:18:43.259 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2608 1 2025-12-03 05:18:15.819 00:05:51.273 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-03 05:18:15.981 00:05:51.161 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-03 05:18:15.808 00:05:51.294 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-03 05:19:07.092 00:05:08.901 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-03 05:23:25.473 00:00:00.000 UDP 28.104.0.1:39954 -> 198.28.0.2:53 1 64 1 2025-12-03 05:23:25.472 00:00:00.000 UDP 28.104.0.1:46594 -> 198.28.0.2:53 1 64 1 2025-12-03 05:23:25.482 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46594 1 80 1 2025-12-03 05:23:25.482 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39954 1 109 1 2025-12-03 05:20:15.812 00:05:00.494 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-12-03 05:24:25.775 00:00:00.000 UDP 28.104.0.1:54886 -> 198.28.0.2:53 1 64 1 2025-12-03 05:24:25.775 00:00:00.000 UDP 28.104.0.1:59919 -> 198.28.0.2:53 1 64 1 2025-12-03 05:24:25.787 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59919 1 109 1 2025-12-03 05:24:25.787 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54886 1 80 1 2025-12-03 05:21:15.812 00:05:00.824 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-03 05:25:26.090 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49852 1 109 1 2025-12-03 05:25:26.090 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40520 1 80 1 2025-12-03 05:25:26.080 00:00:00.000 UDP 28.104.0.1:40520 -> 198.28.0.2:53 1 64 1 2025-12-03 05:25:26.080 00:00:00.000 UDP 28.104.0.1:49852 -> 198.28.0.2:53 1 64 1 2025-12-03 05:26:25.602 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-03 05:26:26.343 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51738 1 109 1 2025-12-03 05:26:26.343 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47573 1 80 1 2025-12-03 05:26:26.335 00:00:00.000 UDP 28.104.0.1:51738 -> 198.28.0.2:53 1 64 1 2025-12-03 05:26:26.335 00:00:00.000 UDP 28.104.0.1:47573 -> 198.28.0.2:53 1 64 1 2025-12-03 05:27:26.634 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44071 1 80 1 2025-12-03 05:27:26.634 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33661 1 109 1 2025-12-03 05:27:26.624 00:00:00.000 UDP 28.104.0.1:44071 -> 198.28.0.2:53 1 64 1 2025-12-03 05:27:26.624 00:00:00.000 UDP 28.104.0.1:33661 -> 198.28.0.2:53 1 64 1 2025-12-03 05:24:03.262 00:05:10.011 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2464 1 2025-12-03 05:28:26.915 00:00:00.000 UDP 28.104.0.1:60181 -> 198.28.0.2:53 1 64 1 2025-12-03 05:28:26.915 00:00:00.000 UDP 28.104.0.1:38385 -> 198.28.0.2:53 1 64 1 2025-12-03 05:28:26.926 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60181 1 109 1 2025-12-03 05:28:26.926 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38385 1 80 1 2025-12-03 05:24:15.823 00:05:51.270 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-03 05:24:15.983 00:05:51.160 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-03 05:24:15.813 00:05:51.290 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-03 05:25:07.092 00:05:08.902 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-03 05:29:27.235 00:00:00.000 UDP 28.104.0.1:42130 -> 198.28.0.2:53 1 64 1 2025-12-03 05:29:27.235 00:00:00.000 UDP 28.104.0.1:39783 -> 198.28.0.2:53 1 64 1 2025-12-03 05:29:27.245 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42130 1 109 1 2025-12-03 05:29:27.245 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39783 1 80 1 2025-12-03 05:26:15.813 00:05:00.493 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-12-03 05:30:27.956 00:00:00.000 UDP 28.104.0.1:45666 -> 198.28.0.2:53 1 64 1 2025-12-03 05:30:27.956 00:00:00.000 UDP 28.104.0.1:56262 -> 198.28.0.2:53 1 64 1 2025-12-03 05:30:27.968 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45666 1 80 1 2025-12-03 05:30:27.968 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56262 1 109 1 2025-12-03 05:27:15.812 00:05:00.824 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-03 05:31:28.267 00:00:00.000 UDP 28.104.0.1:52298 -> 198.28.0.2:53 1 64 1 2025-12-03 05:31:28.267 00:00:00.000 UDP 28.104.0.1:53930 -> 198.28.0.2:53 1 64 1 2025-12-03 05:31:25.617 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-03 05:31:28.278 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52298 1 80 1 2025-12-03 05:31:28.278 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53930 1 109 1 2025-12-03 05:32:28.555 00:00:00.000 UDP 28.104.0.1:50952 -> 198.28.0.2:53 1 64 1 2025-12-03 05:32:28.556 00:00:00.000 UDP 28.104.0.1:57637 -> 198.28.0.2:53 1 64 1 2025-12-03 05:32:28.566 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50952 1 109 1 2025-12-03 05:32:28.567 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57637 1 80 1 2025-12-03 05:33:28.858 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50688 1 109 1 2025-12-03 05:33:28.858 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40225 1 80 1 2025-12-03 05:33:28.849 00:00:00.000 UDP 28.104.0.1:50688 -> 198.28.0.2:53 1 64 1 2025-12-03 05:33:28.849 00:00:00.000 UDP 28.104.0.1:40225 -> 198.28.0.2:53 1 64 1 2025-12-03 05:29:23.273 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2708 1 2025-12-03 05:34:29.170 00:00:00.000 UDP 28.104.0.1:44573 -> 198.28.0.2:53 1 64 1 2025-12-03 05:34:29.170 00:00:00.000 UDP 28.104.0.1:41731 -> 198.28.0.2:53 1 64 1 2025-12-03 05:34:29.180 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41731 1 80 1 2025-12-03 05:34:29.180 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44573 1 109 1 2025-12-03 05:30:15.824 00:05:51.269 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-03 05:30:15.983 00:05:51.160 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-03 05:30:15.813 00:05:51.289 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-03 05:31:07.092 00:05:08.903 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-03 05:35:29.422 00:00:00.000 UDP 28.104.0.1:53265 -> 198.28.0.2:53 1 64 1 2025-12-03 05:35:29.421 00:00:00.000 UDP 28.104.0.1:52669 -> 198.28.0.2:53 1 64 1 2025-12-03 05:35:29.431 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52669 1 109 1 2025-12-03 05:35:29.432 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53265 1 80 1 2025-12-03 05:32:15.813 00:05:00.493 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-12-03 05:36:25.803 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-03 05:36:29.725 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51013 1 80 1 2025-12-03 05:36:29.726 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44438 1 109 1 2025-12-03 05:36:29.715 00:00:00.000 UDP 28.104.0.1:44438 -> 198.28.0.2:53 1 64 1 2025-12-03 05:36:29.715 00:00:00.000 UDP 28.104.0.1:51013 -> 198.28.0.2:53 1 64 1 2025-12-03 05:33:15.814 00:05:00.824 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-03 05:37:29.968 00:00:00.000 UDP 28.104.0.1:56919 -> 198.28.0.2:53 1 64 1 2025-12-03 05:37:29.967 00:00:00.000 UDP 28.104.0.1:51693 -> 198.28.0.2:53 1 64 1 2025-12-03 05:37:29.978 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56919 1 80 1 2025-12-03 05:37:29.978 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51693 1 109 1 2025-12-03 05:38:30.285 00:00:00.000 UDP 28.104.0.1:47833 -> 198.28.0.2:53 1 64 1 2025-12-03 05:38:30.285 00:00:00.000 UDP 28.104.0.1:50701 -> 198.28.0.2:53 1 64 1 2025-12-03 05:38:30.294 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50701 1 80 1 2025-12-03 05:38:30.294 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47833 1 109 1 2025-12-03 05:34:43.281 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2772 1 2025-12-03 05:39:30.547 00:00:00.000 UDP 28.104.0.1:60513 -> 198.28.0.2:53 1 64 1 2025-12-03 05:39:30.547 00:00:00.000 UDP 28.104.0.1:33347 -> 198.28.0.2:53 1 64 1 2025-12-03 05:39:30.558 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60513 1 109 1 2025-12-03 05:39:30.558 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33347 1 80 1 2025-12-03 05:40:30.850 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56118 1 109 1 2025-12-03 05:40:30.850 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43636 1 80 1 2025-12-03 05:40:30.840 00:00:00.000 UDP 28.104.0.1:43636 -> 198.28.0.2:53 1 64 1 2025-12-03 05:40:30.840 00:00:00.000 UDP 28.104.0.1:56118 -> 198.28.0.2:53 1 64 1 2025-12-03 05:36:15.984 00:05:51.160 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-03 05:36:15.814 00:05:51.290 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-03 05:36:15.824 00:05:51.270 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-03 05:37:07.093 00:05:08.908 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-03 05:41:25.720 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-03 05:41:31.102 00:00:00.000 UDP 28.104.0.1:35967 -> 198.28.0.2:53 1 64 1 2025-12-03 05:41:31.102 00:00:00.000 UDP 28.104.0.1:56930 -> 198.28.0.2:53 1 64 1 2025-12-03 05:41:31.124 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56930 1 80 1 2025-12-03 05:41:31.124 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35967 1 109 1 2025-12-03 05:38:15.818 00:05:00.515 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-12-03 05:42:31.428 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51404 1 109 1 2025-12-03 05:42:31.427 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34769 1 80 1 2025-12-03 05:42:31.418 00:00:00.000 UDP 28.104.0.1:51404 -> 198.28.0.2:53 1 64 1 2025-12-03 05:42:31.417 00:00:00.000 UDP 28.104.0.1:34769 -> 198.28.0.2:53 1 64 1 2025-12-03 05:39:15.816 00:05:00.826 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-03 05:43:31.730 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43411 1 109 1 2025-12-03 05:43:31.729 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50489 1 80 1 2025-12-03 05:43:31.718 00:00:00.000 UDP 28.104.0.1:43411 -> 198.28.0.2:53 1 64 1 2025-12-03 05:43:31.718 00:00:00.000 UDP 28.104.0.1:50489 -> 198.28.0.2:53 1 64 1 2025-12-03 05:40:03.284 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2772 1 2025-12-03 05:44:32.057 00:00:00.000 UDP 28.104.0.1:56039 -> 198.28.0.2:53 1 64 1 2025-12-03 05:44:32.056 00:00:00.000 UDP 28.104.0.1:58436 -> 198.28.0.2:53 1 64 1 2025-12-03 05:44:32.067 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58436 1 80 1 2025-12-03 05:44:32.068 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56039 1 109 1 2025-12-03 05:45:32.312 00:00:00.000 UDP 28.104.0.1:57085 -> 198.28.0.2:53 1 64 1 2025-12-03 05:45:32.312 00:00:00.000 UDP 28.104.0.1:41069 -> 198.28.0.2:53 1 64 1 2025-12-03 05:45:32.322 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41069 1 80 1 2025-12-03 05:45:32.321 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57085 1 109 1 2025-12-03 05:46:26.152 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-03 05:46:32.930 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52492 1 109 1 2025-12-03 05:46:32.930 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43886 1 80 1 2025-12-03 05:46:32.919 00:00:00.000 UDP 28.104.0.1:52492 -> 198.28.0.2:53 1 64 1 2025-12-03 05:46:32.919 00:00:00.000 UDP 28.104.0.1:43886 -> 198.28.0.2:53 1 64 1 2025-12-03 05:42:15.826 00:05:51.269 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-03 05:42:15.816 00:05:51.290 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-03 05:42:15.990 00:05:51.156 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-03 05:43:07.095 00:05:08.906 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-03 05:47:33.250 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33112 1 109 1 2025-12-03 05:47:33.250 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42281 1 80 1 2025-12-03 05:47:33.241 00:00:00.000 UDP 28.104.0.1:33112 -> 198.28.0.2:53 1 64 1 2025-12-03 05:47:33.241 00:00:00.000 UDP 28.104.0.1:42281 -> 198.28.0.2:53 1 64 1 2025-12-03 05:44:15.817 00:05:00.518 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-12-03 05:48:33.541 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60492 1 109 1 2025-12-03 05:48:33.541 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46887 1 80 1 2025-12-03 05:48:33.531 00:00:00.000 UDP 28.104.0.1:46887 -> 198.28.0.2:53 1 64 1 2025-12-03 05:48:33.531 00:00:00.000 UDP 28.104.0.1:60492 -> 198.28.0.2:53 1 64 1 2025-12-03 05:45:15.817 00:05:00.826 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-03 05:49:33.794 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48126 1 109 1 2025-12-03 05:49:33.794 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49814 1 80 1 2025-12-03 05:45:23.291 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 43 3040 1 2025-12-03 05:49:33.784 00:00:00.000 UDP 28.104.0.1:48126 -> 198.28.0.2:53 1 64 1 2025-12-03 05:49:33.784 00:00:00.000 UDP 28.104.0.1:49814 -> 198.28.0.2:53 1 64 1 2025-12-03 05:50:34.056 00:00:00.000 UDP 28.104.0.1:37825 -> 198.28.0.2:53 1 64 1 2025-12-03 05:50:34.056 00:00:00.000 UDP 28.104.0.1:59799 -> 198.28.0.2:53 1 64 1 2025-12-03 05:50:34.066 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59799 1 80 1 2025-12-03 05:50:34.066 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37825 1 109 1 2025-12-03 05:51:26.130 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-03 05:51:34.332 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36410 1 80 1 2025-12-03 05:51:34.332 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38411 1 109 1 2025-12-03 05:51:34.323 00:00:00.000 UDP 28.104.0.1:36410 -> 198.28.0.2:53 1 64 1 2025-12-03 05:51:34.322 00:00:00.000 UDP 28.104.0.1:38411 -> 198.28.0.2:53 1 64 1 2025-12-03 05:52:34.623 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47299 1 109 1 2025-12-03 05:52:34.623 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38065 1 80 1 2025-12-03 05:52:34.613 00:00:00.000 UDP 28.104.0.1:38065 -> 198.28.0.2:53 1 64 1 2025-12-03 05:52:34.613 00:00:00.000 UDP 28.104.0.1:47299 -> 198.28.0.2:53 1 64 1 2025-12-03 05:48:15.990 00:05:51.156 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-03 05:48:15.820 00:05:51.286 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-03 05:48:15.830 00:05:51.266 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-03 05:49:07.095 00:05:08.909 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-03 05:53:34.919 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40101 1 109 1 2025-12-03 05:53:34.919 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36217 1 80 1 2025-12-03 05:53:34.909 00:00:00.000 UDP 28.104.0.1:40101 -> 198.28.0.2:53 1 64 1 2025-12-03 05:53:34.909 00:00:00.000 UDP 28.104.0.1:36217 -> 198.28.0.2:53 1 64 1 2025-12-03 05:50:15.820 00:05:00.517 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-12-03 05:54:35.223 00:00:00.000 UDP 28.104.0.1:56445 -> 198.28.0.2:53 1 64 1 2025-12-03 05:54:35.222 00:00:00.000 UDP 28.104.0.1:45149 -> 198.28.0.2:53 1 64 1 2025-12-03 05:54:35.235 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56445 1 109 1 2025-12-03 05:54:35.232 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45149 1 80 1 2025-12-03 05:50:43.300 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 34 2320 1 2025-12-03 05:51:15.820 00:05:00.829 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-03 05:55:35.515 00:00:00.000 UDP 28.104.0.1:46417 -> 198.28.0.2:53 1 64 1 2025-12-03 05:55:35.515 00:00:00.000 UDP 28.104.0.1:56507 -> 198.28.0.2:53 1 64 1 2025-12-03 05:55:35.525 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46417 1 80 1 2025-12-03 05:55:35.525 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56507 1 109 1 2025-12-03 05:56:26.174 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-03 05:56:35.821 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41647 1 80 1 2025-12-03 05:56:35.821 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56603 1 109 1 2025-12-03 05:56:35.811 00:00:00.000 UDP 28.104.0.1:56603 -> 198.28.0.2:53 1 64 1 2025-12-03 05:56:35.811 00:00:00.000 UDP 28.104.0.1:41647 -> 198.28.0.2:53 1 64 1 2025-12-03 05:57:36.123 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33201 1 109 1 2025-12-03 05:57:36.123 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46995 1 80 1 2025-12-03 05:57:36.113 00:00:00.000 UDP 28.104.0.1:46995 -> 198.28.0.2:53 1 64 1 2025-12-03 05:57:36.113 00:00:00.000 UDP 28.104.0.1:33201 -> 198.28.0.2:53 1 64 1 2025-12-03 05:58:36.422 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58111 1 109 1 2025-12-03 05:58:36.422 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43618 1 80 1 2025-12-03 05:58:36.412 00:00:00.000 UDP 28.104.0.1:58111 -> 198.28.0.2:53 1 64 1 2025-12-03 05:58:36.412 00:00:00.000 UDP 28.104.0.1:43618 -> 198.28.0.2:53 1 64 1 Summary: total flows: 323, total bytes: 96268, total packets: 1420, avg bps: 199, avg pps: 0, avg bpp: 67 Time window: 2025-12-03 04:54:15 - 2025-12-03 05:58:36 Total flows processed: 323, passed: 323, Blocks skipped: 0, Bytes read: 33656 Sys: 0.0050s User: 0.0030s Wall: 0.0036s flows/second: 89701.4 Runtime: 0.0036s