Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-03 07:54:15.853 00:05:51.284 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-03 07:54:15.863 00:05:51.264 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-03 07:59:14.281 00:00:00.000 UDP 28.104.0.1:57095 -> 198.28.0.2:53 1 64 1 2025-12-03 07:59:14.281 00:00:00.000 UDP 28.104.0.1:50134 -> 198.28.0.2:53 1 64 1 2025-12-03 07:55:07.127 00:05:08.947 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-03 07:59:14.290 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57095 1 80 1 2025-12-03 07:59:14.290 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50134 1 109 1 2025-12-03 08:00:14.598 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56823 1 80 1 2025-12-03 08:00:14.598 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47517 1 109 1 2025-12-03 08:00:14.588 00:00:00.000 UDP 28.104.0.1:56823 -> 198.28.0.2:53 1 64 1 2025-12-03 08:00:14.588 00:00:00.000 UDP 28.104.0.1:47517 -> 198.28.0.2:53 1 64 1 2025-12-03 07:56:15.853 00:05:00.528 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-12-03 08:01:14.897 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44036 1 109 1 2025-12-03 08:01:14.897 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44545 1 80 1 2025-12-03 08:01:14.887 00:00:00.000 UDP 28.104.0.1:44036 -> 198.28.0.2:53 1 64 1 2025-12-03 08:01:14.887 00:00:00.000 UDP 28.104.0.1:44545 -> 198.28.0.2:53 1 64 1 2025-12-03 07:57:15.853 00:05:00.854 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-03 08:01:28.613 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-03 08:02:15.199 00:00:00.000 UDP 28.104.0.1:50727 -> 198.28.0.2:53 1 64 1 2025-12-03 08:02:15.198 00:00:00.000 UDP 28.104.0.1:34938 -> 198.28.0.2:53 1 64 1 2025-12-03 08:02:15.210 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34938 1 109 1 2025-12-03 08:02:15.210 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50727 1 80 1 2025-12-03 07:58:33.446 00:05:00.855 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2888 1 2025-12-03 08:03:15.499 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56927 1 109 1 2025-12-03 08:03:15.499 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56008 1 80 1 2025-12-03 08:03:15.488 00:00:00.000 UDP 28.104.0.1:56927 -> 198.28.0.2:53 1 64 1 2025-12-03 08:03:15.488 00:00:00.000 UDP 28.104.0.1:56008 -> 198.28.0.2:53 1 64 1 2025-12-03 08:04:15.787 00:00:00.000 UDP 28.104.0.1:46693 -> 198.28.0.2:53 1 64 1 2025-12-03 08:04:15.787 00:00:00.000 UDP 28.104.0.1:46358 -> 198.28.0.2:53 1 64 1 2025-12-03 08:00:07.178 00:05:08.885 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-03 08:04:15.797 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46358 1 109 1 2025-12-03 08:04:15.797 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46693 1 80 1 2025-12-03 08:00:15.854 00:05:51.286 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-03 08:05:16.534 00:00:00.000 UDP 28.104.0.1:57177 -> 198.28.0.2:53 1 64 1 2025-12-03 08:05:16.534 00:00:00.000 UDP 28.104.0.1:42943 -> 198.28.0.2:53 1 64 1 2025-12-03 08:00:15.865 00:05:51.266 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-03 08:01:07.131 00:05:08.943 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-03 08:05:16.546 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57177 1 109 1 2025-12-03 08:05:16.549 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42943 1 80 1 2025-12-03 08:06:16.793 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35961 1 109 1 2025-12-03 08:06:16.793 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52462 1 80 1 2025-12-03 08:02:15.855 00:05:00.528 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-12-03 08:06:16.783 00:00:00.000 UDP 28.104.0.1:52462 -> 198.28.0.2:53 1 64 1 2025-12-03 08:06:16.783 00:00:00.000 UDP 28.104.0.1:35961 -> 198.28.0.2:53 1 64 1 2025-12-03 08:06:28.760 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-03 08:07:17.053 00:00:00.000 UDP 28.104.0.1:59993 -> 198.28.0.2:53 1 64 1 2025-12-03 08:03:15.855 00:05:00.861 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-03 08:07:17.053 00:00:00.000 UDP 28.104.0.1:34886 -> 198.28.0.2:53 1 64 1 2025-12-03 08:07:17.063 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34886 1 80 1 2025-12-03 08:07:17.064 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59993 1 109 1 2025-12-03 08:03:43.458 00:05:00.927 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2668 1 2025-12-03 08:08:17.358 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35098 1 109 1 2025-12-03 08:08:17.358 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60019 1 80 1 2025-12-03 08:08:17.347 00:00:00.000 UDP 28.104.0.1:35098 -> 198.28.0.2:53 1 64 1 2025-12-03 08:08:17.347 00:00:00.000 UDP 28.104.0.1:60019 -> 198.28.0.2:53 1 64 1 2025-12-03 08:09:17.698 00:00:00.000 UDP 28.104.0.1:50383 -> 198.28.0.2:53 1 64 1 2025-12-03 08:09:17.698 00:00:00.000 UDP 28.104.0.1:48516 -> 198.28.0.2:53 1 64 1 2025-12-03 08:09:17.709 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50383 1 109 1 2025-12-03 08:09:17.708 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48516 1 80 1 2025-12-03 08:06:07.181 00:05:08.886 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-03 08:10:18.001 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43154 1 80 1 2025-12-03 08:10:18.001 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57940 1 109 1 2025-12-03 08:10:17.989 00:00:00.000 UDP 28.104.0.1:43154 -> 198.28.0.2:53 1 64 1 2025-12-03 08:10:17.989 00:00:00.000 UDP 28.104.0.1:57940 -> 198.28.0.2:53 1 64 1 2025-12-03 08:06:15.866 00:05:51.265 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-03 08:06:15.856 00:05:51.286 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-03 08:07:07.131 00:05:08.946 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-03 08:11:18.302 00:00:00.000 UDP 28.104.0.1:53555 -> 198.28.0.2:53 1 64 1 2025-12-03 08:11:18.296 00:00:00.000 UDP 28.104.0.1:36232 -> 198.28.0.2:53 1 64 1 2025-12-03 08:11:18.314 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53555 1 80 1 2025-12-03 08:11:18.308 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36232 1 109 1 2025-12-03 08:11:29.420 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-03 08:12:18.606 00:00:00.000 UDP 28.104.0.1:60262 -> 198.28.0.2:53 1 64 1 2025-12-03 08:08:15.856 00:05:00.527 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-12-03 08:12:18.606 00:00:00.000 UDP 28.104.0.1:47779 -> 198.28.0.2:53 1 64 1 2025-12-03 08:12:18.617 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47779 1 109 1 2025-12-03 08:12:18.617 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60262 1 80 1 2025-12-03 08:08:53.478 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2832 1 2025-12-03 08:13:18.911 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45389 1 80 1 2025-12-03 08:13:18.911 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41915 1 109 1 2025-12-03 08:13:18.900 00:00:00.000 UDP 28.104.0.1:45389 -> 198.28.0.2:53 1 64 1 2025-12-03 08:09:15.857 00:05:00.859 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-03 08:13:18.900 00:00:00.000 UDP 28.104.0.1:41915 -> 198.28.0.2:53 1 64 1 2025-12-03 08:14:19.216 00:00:00.000 UDP 28.104.0.1:45153 -> 198.28.0.2:53 1 64 1 2025-12-03 08:14:19.216 00:00:00.000 UDP 28.104.0.1:54953 -> 198.28.0.2:53 1 64 1 2025-12-03 08:14:19.227 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45153 1 109 1 2025-12-03 08:14:19.226 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54953 1 80 1 2025-12-03 08:15:19.506 00:00:00.000 UDP 28.104.0.1:41063 -> 198.28.0.2:53 1 64 1 2025-12-03 08:15:19.506 00:00:00.000 UDP 28.104.0.1:47549 -> 198.28.0.2:53 1 64 1 2025-12-03 08:15:19.516 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47549 1 80 1 2025-12-03 08:15:19.516 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41063 1 109 1 2025-12-03 08:12:07.181 00:05:08.887 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-03 08:16:19.814 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48439 1 80 1 2025-12-03 08:16:19.814 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58602 1 109 1 2025-12-03 08:16:19.805 00:00:00.000 UDP 28.104.0.1:48439 -> 198.28.0.2:53 1 64 1 2025-12-03 08:16:19.805 00:00:00.000 UDP 28.104.0.1:58602 -> 198.28.0.2:53 1 64 1 2025-12-03 08:16:28.985 00:00:00.025 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-03 08:12:15.869 00:05:51.264 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-03 08:12:15.859 00:05:51.284 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-03 08:13:07.132 00:05:08.947 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-03 08:17:20.102 00:00:00.000 UDP 28.104.0.1:44345 -> 198.28.0.2:53 1 64 1 2025-12-03 08:17:20.102 00:00:00.000 UDP 28.104.0.1:51612 -> 198.28.0.2:53 1 64 1 2025-12-03 08:17:20.113 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44345 1 109 1 2025-12-03 08:17:20.112 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51612 1 80 1 2025-12-03 08:14:15.859 00:05:00.525 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-12-03 08:18:20.404 00:00:00.000 UDP 28.104.0.1:58273 -> 198.28.0.2:53 1 64 1 2025-12-03 08:18:20.404 00:00:00.000 UDP 28.104.0.1:43293 -> 198.28.0.2:53 1 64 1 2025-12-03 08:18:20.414 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58273 1 80 1 2025-12-03 08:18:20.414 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43293 1 109 1 2025-12-03 08:14:13.481 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2384 1 2025-12-03 08:15:15.865 00:05:00.855 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-03 08:19:20.710 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47381 1 80 1 2025-12-03 08:19:20.710 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48892 1 109 1 2025-12-03 08:19:20.700 00:00:00.000 UDP 28.104.0.1:48892 -> 198.28.0.2:53 1 64 1 2025-12-03 08:19:20.700 00:00:00.000 UDP 28.104.0.1:47381 -> 198.28.0.2:53 1 64 1 2025-12-03 08:20:21.380 00:00:00.000 UDP 28.104.0.1:36936 -> 198.28.0.2:53 1 64 1 2025-12-03 08:20:21.380 00:00:00.000 UDP 28.104.0.1:37310 -> 198.28.0.2:53 1 64 1 2025-12-03 08:20:21.391 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36936 1 109 1 2025-12-03 08:20:21.392 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37310 1 80 1 2025-12-03 08:21:21.687 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59515 1 109 1 2025-12-03 08:21:21.688 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53103 1 80 1 2025-12-03 08:21:21.678 00:00:00.000 UDP 28.104.0.1:53103 -> 198.28.0.2:53 1 64 1 2025-12-03 08:21:21.677 00:00:00.000 UDP 28.104.0.1:59515 -> 198.28.0.2:53 1 64 1 2025-12-03 08:21:29.165 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-03 08:18:07.183 00:05:08.886 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-03 08:22:21.982 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44612 1 80 1 2025-12-03 08:22:21.982 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36319 1 109 1 2025-12-03 08:22:21.972 00:00:00.000 UDP 28.104.0.1:44612 -> 198.28.0.2:53 1 64 1 2025-12-03 08:22:21.972 00:00:00.000 UDP 28.104.0.1:36319 -> 198.28.0.2:53 1 64 1 2025-12-03 08:18:15.877 00:05:51.258 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-03 08:18:15.867 00:05:51.278 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-03 08:19:07.133 00:05:08.946 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-03 08:23:22.276 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38069 1 109 1 2025-12-03 08:23:22.276 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41428 1 80 1 2025-12-03 08:23:22.265 00:00:00.000 UDP 28.104.0.1:38069 -> 198.28.0.2:53 1 64 1 2025-12-03 08:23:22.265 00:00:00.000 UDP 28.104.0.1:41428 -> 198.28.0.2:53 1 64 1 2025-12-03 08:19:33.483 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2628 1 2025-12-03 08:20:15.867 00:05:00.517 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-12-03 08:24:22.616 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47739 1 80 1 2025-12-03 08:24:22.615 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50262 1 109 1 2025-12-03 08:24:22.607 00:00:00.000 UDP 28.104.0.1:50262 -> 198.28.0.2:53 1 64 1 2025-12-03 08:24:22.607 00:00:00.000 UDP 28.104.0.1:47739 -> 198.28.0.2:53 1 64 1 2025-12-03 08:25:23.429 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59614 1 80 1 2025-12-03 08:25:23.429 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49008 1 109 1 2025-12-03 08:21:15.867 00:05:00.855 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-03 08:25:23.418 00:00:00.000 UDP 28.104.0.1:49008 -> 198.28.0.2:53 1 64 1 2025-12-03 08:25:23.418 00:00:00.000 UDP 28.104.0.1:59614 -> 198.28.0.2:53 1 64 1 2025-12-03 08:26:23.718 00:00:00.000 UDP 28.104.0.1:50742 -> 198.28.0.2:53 1 64 1 2025-12-03 08:26:23.719 00:00:00.000 UDP 28.104.0.1:53330 -> 198.28.0.2:53 1 64 1 2025-12-03 08:26:23.730 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53330 1 109 1 2025-12-03 08:26:23.730 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50742 1 80 1 2025-12-03 08:26:29.049 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-03 08:27:24.053 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41001 1 80 1 2025-12-03 08:27:24.053 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41870 1 109 1 2025-12-03 08:27:24.043 00:00:00.000 UDP 28.104.0.1:41001 -> 198.28.0.2:53 1 64 1 2025-12-03 08:27:24.043 00:00:00.000 UDP 28.104.0.1:41870 -> 198.28.0.2:53 1 64 1 2025-12-03 08:24:07.185 00:05:08.885 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-03 08:28:24.350 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60543 1 109 1 2025-12-03 08:28:24.350 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49754 1 80 1 2025-12-03 08:28:24.339 00:00:00.000 UDP 28.104.0.1:49754 -> 198.28.0.2:53 1 64 1 2025-12-03 08:28:24.339 00:00:00.000 UDP 28.104.0.1:60543 -> 198.28.0.2:53 1 64 1 2025-12-03 08:24:53.491 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2836 1 2025-12-03 08:24:15.867 00:05:51.282 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-03 08:24:15.878 00:05:51.262 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-03 08:25:07.137 00:05:08.944 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-03 08:29:24.685 00:00:00.000 UDP 28.104.0.1:60314 -> 198.28.0.2:53 1 64 1 2025-12-03 08:29:24.685 00:00:00.000 UDP 28.104.0.1:37297 -> 198.28.0.2:53 1 64 1 2025-12-03 08:29:24.695 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37297 1 80 1 2025-12-03 08:29:24.695 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60314 1 109 1 2025-12-03 08:26:15.867 00:05:00.523 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-12-03 08:30:26.057 00:00:00.000 UDP 28.104.0.1:58038 -> 198.28.0.2:53 1 64 1 2025-12-03 08:30:26.057 00:00:00.000 UDP 28.104.0.1:34969 -> 198.28.0.2:53 1 64 1 2025-12-03 08:30:26.068 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58038 1 109 1 2025-12-03 08:30:26.068 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34969 1 80 1 2025-12-03 08:27:15.870 00:05:00.859 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-03 08:31:26.350 00:00:00.000 UDP 28.104.0.1:33408 -> 198.28.0.2:53 1 64 1 2025-12-03 08:31:26.350 00:00:00.000 UDP 28.104.0.1:58425 -> 198.28.0.2:53 1 64 1 2025-12-03 08:31:26.362 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58425 1 80 1 2025-12-03 08:31:26.362 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33408 1 109 1 2025-12-03 08:31:29.407 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-03 08:32:26.645 00:00:00.000 UDP 28.104.0.1:49517 -> 198.28.0.2:53 1 64 1 2025-12-03 08:32:26.645 00:00:00.000 UDP 28.104.0.1:57778 -> 198.28.0.2:53 1 64 1 2025-12-03 08:32:26.655 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49517 1 109 1 2025-12-03 08:32:26.656 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57778 1 80 1 2025-12-03 08:33:26.947 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43759 1 109 1 2025-12-03 08:33:26.946 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38819 1 80 1 2025-12-03 08:33:26.936 00:00:00.000 UDP 28.104.0.1:38819 -> 198.28.0.2:53 1 64 1 2025-12-03 08:33:26.936 00:00:00.000 UDP 28.104.0.1:43759 -> 198.28.0.2:53 1 64 1 2025-12-03 08:30:07.189 00:05:08.885 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-03 08:34:27.194 00:00:00.000 UDP 28.104.0.1:36540 -> 198.28.0.2:53 1 64 1 2025-12-03 08:34:27.195 00:00:00.000 UDP 28.104.0.1:35778 -> 198.28.0.2:53 1 64 1 2025-12-03 08:30:13.499 00:05:10.002 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2916 1 2025-12-03 08:34:27.206 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36540 1 80 1 2025-12-03 08:34:27.207 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35778 1 109 1 2025-12-03 08:30:15.868 00:05:51.281 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-03 08:30:15.878 00:05:51.261 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-03 08:31:07.140 00:05:08.945 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-03 08:35:27.499 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45080 1 80 1 2025-12-03 08:35:27.499 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40357 1 109 1 2025-12-03 08:35:27.489 00:00:00.000 UDP 28.104.0.1:40357 -> 198.28.0.2:53 1 64 1 2025-12-03 08:35:27.489 00:00:00.000 UDP 28.104.0.1:45080 -> 198.28.0.2:53 1 64 1 2025-12-03 08:32:15.870 00:05:00.522 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-12-03 08:36:27.790 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54014 1 109 1 2025-12-03 08:36:29.419 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-03 08:36:27.790 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42639 1 80 1 2025-12-03 08:36:27.780 00:00:00.000 UDP 28.104.0.1:42639 -> 198.28.0.2:53 1 64 1 2025-12-03 08:36:27.780 00:00:00.000 UDP 28.104.0.1:54014 -> 198.28.0.2:53 1 64 1 2025-12-03 08:33:15.870 00:05:00.857 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-03 08:37:28.102 00:00:00.000 UDP 28.104.0.1:37862 -> 198.28.0.2:53 1 64 1 2025-12-03 08:37:28.102 00:00:00.000 UDP 28.104.0.1:48323 -> 198.28.0.2:53 1 64 1 2025-12-03 08:37:28.113 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37862 1 80 1 2025-12-03 08:37:28.113 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48323 1 109 1 2025-12-03 08:38:28.410 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42681 1 80 1 2025-12-03 08:38:28.409 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40718 1 109 1 2025-12-03 08:38:28.399 00:00:00.000 UDP 28.104.0.1:40718 -> 198.28.0.2:53 1 64 1 2025-12-03 08:38:28.400 00:00:00.000 UDP 28.104.0.1:42681 -> 198.28.0.2:53 1 64 1 2025-12-03 08:39:28.763 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52185 1 109 1 2025-12-03 08:39:28.763 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34313 1 80 1 2025-12-03 08:39:28.752 00:00:00.000 UDP 28.104.0.1:52185 -> 198.28.0.2:53 1 64 1 2025-12-03 08:39:28.752 00:00:00.000 UDP 28.104.0.1:34313 -> 198.28.0.2:53 1 64 1 2025-12-03 08:35:33.500 00:05:10.013 OSPF 28.0.2.1:0 -> 224.0.0.5:0 43 3040 1 2025-12-03 08:36:07.191 00:05:08.885 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-03 08:40:29.066 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36137 1 109 1 2025-12-03 08:40:29.066 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40035 1 80 1 2025-12-03 08:40:29.055 00:00:00.000 UDP 28.104.0.1:36137 -> 198.28.0.2:53 1 64 1 2025-12-03 08:40:29.055 00:00:00.000 UDP 28.104.0.1:40035 -> 198.28.0.2:53 1 64 1 2025-12-03 08:36:15.879 00:05:51.261 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-03 08:36:15.869 00:05:51.281 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-03 08:37:07.140 00:05:08.945 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-03 08:41:29.353 00:00:00.000 UDP 28.104.0.1:60877 -> 198.28.0.2:53 1 64 1 2025-12-03 08:41:29.353 00:00:00.000 UDP 28.104.0.1:57779 -> 198.28.0.2:53 1 64 1 2025-12-03 08:41:29.640 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-03 08:41:29.364 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57779 1 80 1 2025-12-03 08:41:29.365 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60877 1 109 1 2025-12-03 08:38:15.869 00:05:00.522 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-12-03 08:42:29.609 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49855 1 109 1 2025-12-03 08:42:29.609 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56151 1 80 1 2025-12-03 08:42:29.599 00:00:00.000 UDP 28.104.0.1:49855 -> 198.28.0.2:53 1 64 1 2025-12-03 08:42:29.599 00:00:00.000 UDP 28.104.0.1:56151 -> 198.28.0.2:53 1 64 1 2025-12-03 08:39:15.870 00:05:00.858 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-03 08:43:29.903 00:00:00.000 UDP 28.104.0.1:59475 -> 198.28.0.2:53 1 64 1 2025-12-03 08:43:29.903 00:00:00.000 UDP 28.104.0.1:54613 -> 198.28.0.2:53 1 64 1 2025-12-03 08:43:29.914 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54613 1 80 1 2025-12-03 08:43:29.914 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59475 1 109 1 2025-12-03 08:44:30.226 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51745 1 80 1 2025-12-03 08:44:30.226 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39923 1 109 1 2025-12-03 08:44:30.214 00:00:00.000 UDP 28.104.0.1:51745 -> 198.28.0.2:53 1 64 1 2025-12-03 08:44:30.214 00:00:00.000 UDP 28.104.0.1:39923 -> 198.28.0.2:53 1 64 1 2025-12-03 08:40:53.514 00:05:10.394 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2436 1 2025-12-03 08:45:30.522 00:00:00.000 UDP 28.104.0.1:51380 -> 198.28.0.2:53 1 64 1 2025-12-03 08:45:30.522 00:00:00.000 UDP 28.104.0.1:56986 -> 198.28.0.2:53 1 64 1 2025-12-03 08:45:30.533 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51380 1 80 1 2025-12-03 08:45:30.533 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56986 1 109 1 2025-12-03 08:42:07.190 00:05:08.886 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-03 08:46:30.832 00:00:00.000 UDP 28.104.0.1:40182 -> 198.28.0.2:53 1 64 1 2025-12-03 08:46:30.832 00:00:00.000 UDP 28.104.0.1:42820 -> 198.28.0.2:53 1 64 1 2025-12-03 08:46:29.987 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-03 08:46:30.842 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40182 1 80 1 2025-12-03 08:46:30.842 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42820 1 109 1 2025-12-03 08:42:15.871 00:05:51.281 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-03 08:42:15.881 00:05:51.261 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-03 08:43:07.141 00:05:08.946 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-03 08:47:31.133 00:00:00.000 UDP 28.104.0.1:56185 -> 198.28.0.2:53 1 64 1 2025-12-03 08:47:31.134 00:00:00.000 UDP 28.104.0.1:60224 -> 198.28.0.2:53 1 64 1 2025-12-03 08:47:31.144 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60224 1 80 1 2025-12-03 08:47:31.144 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56185 1 109 1 2025-12-03 08:44:15.870 00:05:00.525 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-12-03 08:48:31.432 00:00:00.000 UDP 28.104.0.1:56908 -> 198.28.0.2:53 1 64 1 2025-12-03 08:48:31.432 00:00:00.000 UDP 28.104.0.1:44968 -> 198.28.0.2:53 1 64 1 2025-12-03 08:48:31.443 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44968 1 80 1 2025-12-03 08:48:31.443 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56908 1 109 1 2025-12-03 08:45:15.871 00:05:00.857 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-03 08:49:31.745 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43222 1 109 1 2025-12-03 08:49:31.745 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56559 1 80 1 2025-12-03 08:49:31.736 00:00:00.000 UDP 28.104.0.1:43222 -> 198.28.0.2:53 1 64 1 2025-12-03 08:49:31.736 00:00:00.000 UDP 28.104.0.1:56559 -> 198.28.0.2:53 1 64 1 2025-12-03 08:46:13.520 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2384 1 2025-12-03 08:50:33.065 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42021 1 80 1 2025-12-03 08:50:33.066 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44823 1 109 1 2025-12-03 08:50:33.055 00:00:00.000 UDP 28.104.0.1:44823 -> 198.28.0.2:53 1 64 1 2025-12-03 08:50:33.054 00:00:00.000 UDP 28.104.0.1:42021 -> 198.28.0.2:53 1 64 1 2025-12-03 08:51:33.349 00:00:00.000 UDP 28.104.0.1:59682 -> 198.28.0.2:53 1 64 1 2025-12-03 08:51:33.350 00:00:00.000 UDP 28.104.0.1:39864 -> 198.28.0.2:53 1 64 1 2025-12-03 08:51:29.754 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-03 08:51:33.362 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59682 1 109 1 2025-12-03 08:51:33.362 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39864 1 80 1 2025-12-03 08:48:07.192 00:05:08.886 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-03 08:52:33.651 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35801 1 80 1 2025-12-03 08:52:33.651 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52756 1 109 1 2025-12-03 08:52:33.639 00:00:00.000 UDP 28.104.0.1:35801 -> 198.28.0.2:53 1 64 1 2025-12-03 08:52:33.639 00:00:00.000 UDP 28.104.0.1:52756 -> 198.28.0.2:53 1 64 1 2025-12-03 08:48:15.874 00:05:51.282 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-03 08:48:15.884 00:05:51.262 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-03 08:49:07.142 00:05:08.947 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-03 08:53:33.931 00:00:00.000 UDP 28.104.0.1:46508 -> 198.28.0.2:53 1 64 1 2025-12-03 08:53:33.931 00:00:00.000 UDP 28.104.0.1:38369 -> 198.28.0.2:53 1 64 1 2025-12-03 08:53:33.942 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38369 1 109 1 2025-12-03 08:53:33.942 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46508 1 80 1 2025-12-03 08:50:15.875 00:05:00.523 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-12-03 08:54:34.247 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34613 1 109 1 2025-12-03 08:54:34.247 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46524 1 80 1 2025-12-03 08:54:34.237 00:00:00.000 UDP 28.104.0.1:46524 -> 198.28.0.2:53 1 64 1 2025-12-03 08:54:34.237 00:00:00.000 UDP 28.104.0.1:34613 -> 198.28.0.2:53 1 64 1 2025-12-03 08:51:15.875 00:05:00.856 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-03 08:55:34.535 00:00:00.000 UDP 28.104.0.1:41670 -> 198.28.0.2:53 1 64 1 2025-12-03 08:55:34.535 00:00:00.000 UDP 28.104.0.1:49717 -> 198.28.0.2:53 1 64 1 2025-12-03 08:55:34.546 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49717 1 109 1 2025-12-03 08:51:33.525 00:05:00.570 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2784 1 2025-12-03 08:55:34.546 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41670 1 80 1 2025-12-03 08:56:29.909 00:00:00.025 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-03 08:56:34.841 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52660 1 109 1 2025-12-03 08:56:34.842 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38347 1 80 1 2025-12-03 08:56:34.832 00:00:00.000 UDP 28.104.0.1:52660 -> 198.28.0.2:53 1 64 1 2025-12-03 08:56:34.831 00:00:00.000 UDP 28.104.0.1:38347 -> 198.28.0.2:53 1 64 1 2025-12-03 08:57:35.131 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43237 1 80 1 2025-12-03 08:57:35.131 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45492 1 109 1 2025-12-03 08:57:35.120 00:00:00.000 UDP 28.104.0.1:43237 -> 198.28.0.2:53 1 64 1 2025-12-03 08:57:35.120 00:00:00.000 UDP 28.104.0.1:45492 -> 198.28.0.2:53 1 64 1 2025-12-03 08:54:07.196 00:05:08.886 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-03 08:58:35.420 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34890 1 109 1 2025-12-03 08:58:35.420 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49956 1 80 1 2025-12-03 08:58:35.410 00:00:00.000 UDP 28.104.0.1:49956 -> 198.28.0.2:53 1 64 1 2025-12-03 08:58:35.410 00:00:00.000 UDP 28.104.0.1:34890 -> 198.28.0.2:53 1 64 1 Summary: total flows: 323, total bytes: 96120, total packets: 1417, avg bps: 197, avg pps: 0, avg bpp: 67 Time window: 2025-12-03 07:54:15 - 2025-12-03 08:59:16 Total flows processed: 323, passed: 323, Blocks skipped: 0, Bytes read: 33656 Sys: 0.0030s User: 0.0040s Wall: 0.0043s flows/second: 74392.4 Runtime: 0.0044s