Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-03 21:55:16.180 00:04:00.465 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-12-03 21:55:16.180 00:04:00.801 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-12-03 21:59:14.057 00:00:00.000 UDP 28.104.0.1:48238 -> 198.28.0.2:53 1 64 1 2025-12-03 21:59:14.056 00:00:00.000 UDP 28.104.0.1:37262 -> 198.28.0.2:53 1 64 1 2025-12-03 21:55:07.375 00:05:08.941 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-03 21:59:14.067 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37262 1 80 1 2025-12-03 21:59:14.067 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48238 1 109 1 2025-12-03 22:00:14.359 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49435 1 80 1 2025-12-03 22:00:14.359 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57104 1 109 1 2025-12-03 22:00:14.350 00:00:00.000 UDP 28.104.0.1:49435 -> 198.28.0.2:53 1 64 1 2025-12-03 22:00:14.350 00:00:00.000 UDP 28.104.0.1:57104 -> 198.28.0.2:53 1 64 1 2025-12-03 22:01:14.639 00:00:00.000 UDP 28.104.0.1:60768 -> 198.28.0.2:53 1 64 1 2025-12-03 22:01:14.639 00:00:00.000 UDP 28.104.0.1:46387 -> 198.28.0.2:53 1 64 1 2025-12-03 22:01:14.650 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60768 1 109 1 2025-12-03 22:01:14.650 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46387 1 80 1 2025-12-03 22:01:45.416 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-03 22:02:14.946 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54159 1 80 1 2025-12-03 22:02:14.947 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42666 1 109 1 2025-12-03 22:02:14.936 00:00:00.000 UDP 28.104.0.1:42666 -> 198.28.0.2:53 1 64 1 2025-12-03 22:02:14.936 00:00:00.000 UDP 28.104.0.1:54159 -> 198.28.0.2:53 1 64 1 2025-12-03 21:58:44.585 00:05:10.009 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2740 1 2025-12-03 22:03:15.246 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36555 1 80 1 2025-12-03 22:03:15.246 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33438 1 109 1 2025-12-03 22:03:15.237 00:00:00.000 UDP 28.104.0.1:36555 -> 198.28.0.2:53 1 64 1 2025-12-03 22:03:15.237 00:00:00.000 UDP 28.104.0.1:33438 -> 198.28.0.2:53 1 64 1 2025-12-03 22:04:15.530 00:00:00.000 UDP 28.104.0.1:44500 -> 198.28.0.2:53 1 64 1 2025-12-03 22:00:16.180 00:04:00.466 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-12-03 22:00:16.180 00:04:00.801 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-12-03 22:04:15.530 00:00:00.000 UDP 28.104.0.1:58751 -> 198.28.0.2:53 1 64 1 2025-12-03 22:00:07.377 00:05:08.813 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-03 22:04:15.541 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58751 1 109 1 2025-12-03 22:04:15.540 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44500 1 80 1 2025-12-03 22:00:07.386 00:05:08.794 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-03 22:00:07.426 00:05:08.879 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-03 22:05:15.826 00:00:00.000 UDP 28.104.0.1:54065 -> 198.28.0.2:53 1 64 1 2025-12-03 22:05:15.826 00:00:00.000 UDP 28.104.0.1:59619 -> 198.28.0.2:53 1 64 1 2025-12-03 22:05:15.837 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59619 1 80 1 2025-12-03 22:05:15.837 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54065 1 109 1 2025-12-03 22:01:07.376 00:05:08.939 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-03 22:06:16.122 00:00:00.000 UDP 28.104.0.1:60260 -> 198.28.0.2:53 1 64 1 2025-12-03 22:06:16.122 00:00:00.000 UDP 28.104.0.1:57837 -> 198.28.0.2:53 1 64 1 2025-12-03 22:06:16.133 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60260 1 109 1 2025-12-03 22:06:16.133 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57837 1 80 1 2025-12-03 22:06:45.630 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-03 22:07:16.409 00:00:00.000 UDP 28.104.0.1:36008 -> 198.28.0.2:53 1 64 1 2025-12-03 22:07:16.409 00:00:00.000 UDP 28.104.0.1:59087 -> 198.28.0.2:53 1 64 1 2025-12-03 22:07:16.419 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59087 1 80 1 2025-12-03 22:07:16.418 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36008 1 109 1 2025-12-03 22:04:04.593 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2384 1 2025-12-03 22:08:16.670 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52289 1 80 1 2025-12-03 22:08:16.670 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48276 1 109 1 2025-12-03 22:08:16.660 00:00:00.000 UDP 28.104.0.1:48276 -> 198.28.0.2:53 1 64 1 2025-12-03 22:08:16.660 00:00:00.000 UDP 28.104.0.1:52289 -> 198.28.0.2:53 1 64 1 2025-12-03 22:09:16.924 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37242 1 109 1 2025-12-03 22:09:16.924 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35361 1 80 1 2025-12-03 22:05:16.180 00:04:00.467 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-12-03 22:05:16.180 00:04:00.801 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-12-03 22:09:16.913 00:00:00.000 UDP 28.104.0.1:35361 -> 198.28.0.2:53 1 64 1 2025-12-03 22:09:16.913 00:00:00.000 UDP 28.104.0.1:37242 -> 198.28.0.2:53 1 64 1 2025-12-03 22:06:07.429 00:05:08.877 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-03 22:06:07.389 00:05:08.792 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-03 22:10:17.204 00:00:00.000 UDP 28.104.0.1:42105 -> 198.28.0.2:53 1 64 1 2025-12-03 22:10:17.205 00:00:00.000 UDP 28.104.0.1:58698 -> 198.28.0.2:53 1 64 1 2025-12-03 22:10:17.214 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58698 1 109 1 2025-12-03 22:06:07.378 00:05:08.813 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-03 22:10:17.214 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42105 1 80 1 2025-12-03 22:07:07.378 00:05:08.938 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-03 22:11:17.507 00:00:00.000 UDP 28.104.0.1:55138 -> 198.28.0.2:53 1 64 1 2025-12-03 22:11:17.507 00:00:00.000 UDP 28.104.0.1:55273 -> 198.28.0.2:53 1 64 1 2025-12-03 22:11:17.518 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55273 1 109 1 2025-12-03 22:11:17.518 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55138 1 80 1 2025-12-03 22:11:45.857 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-03 22:12:17.814 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55158 1 109 1 2025-12-03 22:12:17.814 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32826 1 80 1 2025-12-03 22:12:17.804 00:00:00.000 UDP 28.104.0.1:32826 -> 198.28.0.2:53 1 64 1 2025-12-03 22:12:17.804 00:00:00.000 UDP 28.104.0.1:55158 -> 198.28.0.2:53 1 64 1 2025-12-03 22:13:18.109 00:00:00.000 UDP 28.104.0.1:51081 -> 198.28.0.2:53 1 64 1 2025-12-03 22:13:18.109 00:00:00.000 UDP 28.104.0.1:46014 -> 198.28.0.2:53 1 64 1 2025-12-03 22:13:18.121 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46014 1 80 1 2025-12-03 22:13:18.121 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51081 1 109 1 2025-12-03 22:09:24.600 00:05:10.010 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2628 1 2025-12-03 22:10:16.182 00:04:00.467 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-12-03 22:10:16.182 00:04:00.800 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-12-03 22:14:18.371 00:00:00.000 UDP 28.104.0.1:50717 -> 198.28.0.2:53 1 64 1 2025-12-03 22:14:18.371 00:00:00.000 UDP 28.104.0.1:38189 -> 198.28.0.2:53 1 64 1 2025-12-03 22:14:18.381 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50717 1 109 1 2025-12-03 22:14:18.381 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38189 1 80 1 2025-12-03 22:15:19.682 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50897 1 80 1 2025-12-03 22:15:19.682 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36998 1 109 1 2025-12-03 22:15:19.672 00:00:00.000 UDP 28.104.0.1:36998 -> 198.28.0.2:53 1 64 1 2025-12-03 22:15:19.672 00:00:00.000 UDP 28.104.0.1:50897 -> 198.28.0.2:53 1 64 1 2025-12-03 22:12:07.387 00:05:08.806 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-03 22:12:07.436 00:05:08.871 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-03 22:15:16.183 00:01:00.466 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-03 22:15:16.183 00:01:00.802 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-12-03 22:16:19.977 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49346 1 109 1 2025-12-03 22:16:19.977 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49760 1 80 1 2025-12-03 22:12:07.396 00:05:08.786 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-03 22:16:19.965 00:00:00.000 UDP 28.104.0.1:49346 -> 198.28.0.2:53 1 64 1 2025-12-03 22:16:19.966 00:00:00.000 UDP 28.104.0.1:49760 -> 198.28.0.2:53 1 64 1 2025-12-03 22:16:46.368 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-03 22:13:07.387 00:05:08.931 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-03 22:17:20.274 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53067 1 80 1 2025-12-03 22:17:20.274 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43752 1 109 1 2025-12-03 22:17:20.262 00:00:00.000 UDP 28.104.0.1:43752 -> 198.28.0.2:53 1 64 1 2025-12-03 22:17:20.262 00:00:00.000 UDP 28.104.0.1:53067 -> 198.28.0.2:53 1 64 1 2025-12-03 22:18:20.564 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60939 1 109 1 2025-12-03 22:18:20.564 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48632 1 80 1 2025-12-03 22:18:20.552 00:00:00.000 UDP 28.104.0.1:60939 -> 198.28.0.2:53 1 64 1 2025-12-03 22:18:20.552 00:00:00.000 UDP 28.104.0.1:48632 -> 198.28.0.2:53 1 64 1 2025-12-03 22:14:44.608 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 44 3088 1 2025-12-03 22:19:20.838 00:00:00.000 UDP 28.104.0.1:47196 -> 198.28.0.2:53 1 64 1 2025-12-03 22:19:20.838 00:00:00.000 UDP 28.104.0.1:53268 -> 198.28.0.2:53 1 64 1 2025-12-03 22:19:20.849 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47196 1 109 1 2025-12-03 22:19:20.849 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53268 1 80 1 2025-12-03 22:20:21.104 00:00:00.000 UDP 28.104.0.1:56948 -> 198.28.0.2:53 1 64 1 2025-12-03 22:20:21.104 00:00:00.000 UDP 28.104.0.1:57505 -> 198.28.0.2:53 1 64 1 2025-12-03 22:20:21.113 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56948 1 80 1 2025-12-03 22:20:21.114 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57505 1 109 1 2025-12-03 22:17:16.183 00:04:00.467 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-12-03 22:17:16.183 00:04:00.803 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-12-03 22:21:21.411 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38132 1 109 1 2025-12-03 22:21:21.411 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55778 1 80 1 2025-12-03 22:21:21.400 00:00:00.000 UDP 28.104.0.1:38132 -> 198.28.0.2:53 1 64 1 2025-12-03 22:21:21.400 00:00:00.000 UDP 28.104.0.1:55778 -> 198.28.0.2:53 1 64 1 2025-12-03 22:21:46.077 00:00:00.045 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-03 22:18:07.437 00:05:08.871 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-03 22:18:07.397 00:05:08.788 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-03 22:18:07.386 00:05:08.808 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-03 22:22:21.704 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48126 1 80 1 2025-12-03 22:22:21.704 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42613 1 109 1 2025-12-03 22:22:21.694 00:00:00.000 UDP 28.104.0.1:48126 -> 198.28.0.2:53 1 64 1 2025-12-03 22:22:21.694 00:00:00.000 UDP 28.104.0.1:42613 -> 198.28.0.2:53 1 64 1 2025-12-03 22:19:07.388 00:05:08.930 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-03 22:23:21.993 00:00:00.000 UDP 28.104.0.1:56490 -> 198.28.0.2:53 1 64 1 2025-12-03 22:23:21.993 00:00:00.000 UDP 28.104.0.1:49172 -> 198.28.0.2:53 1 64 1 2025-12-03 22:23:22.004 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56490 1 80 1 2025-12-03 22:23:22.004 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49172 1 109 1 2025-12-03 22:20:04.614 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2708 1 2025-12-03 22:24:22.394 00:00:00.000 UDP 28.104.0.1:44601 -> 198.28.0.2:53 1 64 1 2025-12-03 22:24:22.394 00:00:00.000 UDP 28.104.0.1:35838 -> 198.28.0.2:53 1 64 1 2025-12-03 22:24:22.406 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35838 1 80 1 2025-12-03 22:24:22.406 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44601 1 109 1 2025-12-03 22:25:22.696 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56360 1 109 1 2025-12-03 22:25:22.696 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56331 1 80 1 2025-12-03 22:25:22.685 00:00:00.000 UDP 28.104.0.1:56331 -> 198.28.0.2:53 1 64 1 2025-12-03 22:25:22.685 00:00:00.000 UDP 28.104.0.1:56360 -> 198.28.0.2:53 1 64 1 2025-12-03 22:22:16.184 00:04:00.468 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-12-03 22:22:16.184 00:04:00.803 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-12-03 22:26:22.980 00:00:00.000 UDP 28.104.0.1:33747 -> 198.28.0.2:53 1 64 1 2025-12-03 22:26:22.980 00:00:00.000 UDP 28.104.0.1:50139 -> 198.28.0.2:53 1 64 1 2025-12-03 22:26:22.990 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33747 1 80 1 2025-12-03 22:26:22.990 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50139 1 109 1 2025-12-03 22:26:46.178 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-03 22:27:23.237 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36858 1 80 1 2025-12-03 22:27:23.237 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54811 1 109 1 2025-12-03 22:27:23.226 00:00:00.000 UDP 28.104.0.1:36858 -> 198.28.0.2:53 1 64 1 2025-12-03 22:27:23.226 00:00:00.000 UDP 28.104.0.1:54811 -> 198.28.0.2:53 1 64 1 2025-12-03 22:24:07.388 00:05:08.807 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-03 22:24:07.400 00:05:08.787 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-03 22:24:07.440 00:05:08.870 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-03 22:28:23.530 00:00:00.000 UDP 28.104.0.1:56678 -> 198.28.0.2:53 1 64 1 2025-12-03 22:28:23.530 00:00:00.000 UDP 28.104.0.1:41464 -> 198.28.0.2:53 1 64 1 2025-12-03 22:28:23.541 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56678 1 109 1 2025-12-03 22:28:23.541 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41464 1 80 1 2025-12-03 22:25:07.389 00:05:08.929 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-03 22:29:23.785 00:00:00.000 UDP 28.104.0.1:41889 -> 198.28.0.2:53 1 64 1 2025-12-03 22:29:23.785 00:00:00.000 UDP 28.104.0.1:56591 -> 198.28.0.2:53 1 64 1 2025-12-03 22:29:23.796 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56591 1 109 1 2025-12-03 22:29:23.796 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41889 1 80 1 2025-12-03 22:25:24.622 00:05:10.011 OSPF 28.0.2.1:0 -> 224.0.0.5:0 43 3060 1 2025-12-03 22:30:24.097 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43120 1 109 1 2025-12-03 22:30:24.098 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60360 1 80 1 2025-12-03 22:30:24.088 00:00:00.000 UDP 28.104.0.1:43120 -> 198.28.0.2:53 1 64 1 2025-12-03 22:30:24.088 00:00:00.000 UDP 28.104.0.1:60360 -> 198.28.0.2:53 1 64 1 2025-12-03 22:27:16.185 00:04:00.467 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-12-03 22:27:16.185 00:04:00.807 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-12-03 22:31:24.393 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45124 1 109 1 2025-12-03 22:31:24.393 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39520 1 80 1 2025-12-03 22:31:24.384 00:00:00.000 UDP 28.104.0.1:45124 -> 198.28.0.2:53 1 64 1 2025-12-03 22:31:24.384 00:00:00.000 UDP 28.104.0.1:39520 -> 198.28.0.2:53 1 64 1 2025-12-03 22:31:46.272 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-03 22:32:24.678 00:00:00.000 UDP 28.104.0.1:42264 -> 198.28.0.2:53 1 64 1 2025-12-03 22:32:24.678 00:00:00.000 UDP 28.104.0.1:37264 -> 198.28.0.2:53 1 64 1 2025-12-03 22:32:24.687 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42264 1 109 1 2025-12-03 22:32:24.687 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37264 1 80 1 2025-12-03 22:33:24.984 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58713 1 80 1 2025-12-03 22:33:24.985 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58024 1 109 1 2025-12-03 22:33:24.974 00:00:00.000 UDP 28.104.0.1:58713 -> 198.28.0.2:53 1 64 1 2025-12-03 22:33:24.974 00:00:00.000 UDP 28.104.0.1:58024 -> 198.28.0.2:53 1 64 1 2025-12-03 22:30:07.401 00:05:08.786 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-03 22:30:07.390 00:05:08.806 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-03 22:30:07.440 00:05:08.869 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-03 22:34:25.268 00:00:00.000 UDP 28.104.0.1:36074 -> 198.28.0.2:53 1 64 1 2025-12-03 22:34:25.268 00:00:00.000 UDP 28.104.0.1:32867 -> 198.28.0.2:53 1 64 1 2025-12-03 22:34:25.278 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36074 1 80 1 2025-12-03 22:34:25.278 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32867 1 109 1 2025-12-03 22:30:44.634 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 34 2304 1 2025-12-03 22:35:25.560 00:00:00.000 UDP 28.104.0.1:41363 -> 198.28.0.2:53 1 64 1 2025-12-03 22:35:25.560 00:00:00.000 UDP 28.104.0.1:60708 -> 198.28.0.2:53 1 64 1 2025-12-03 22:31:07.390 00:05:08.929 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-03 22:35:25.572 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60708 1 80 1 2025-12-03 22:35:25.570 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41363 1 109 1 2025-12-03 22:32:16.187 00:04:00.467 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-12-03 22:32:16.187 00:04:00.806 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-12-03 22:36:25.862 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41865 1 109 1 2025-12-03 22:36:25.862 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48094 1 80 1 2025-12-03 22:36:25.851 00:00:00.000 UDP 28.104.0.1:41865 -> 198.28.0.2:53 1 64 1 2025-12-03 22:36:25.851 00:00:00.000 UDP 28.104.0.1:48094 -> 198.28.0.2:53 1 64 1 2025-12-03 22:36:46.349 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-03 22:37:26.166 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39105 1 109 1 2025-12-03 22:37:26.166 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38926 1 80 1 2025-12-03 22:37:26.156 00:00:00.000 UDP 28.104.0.1:39105 -> 198.28.0.2:53 1 64 1 2025-12-03 22:37:26.156 00:00:00.000 UDP 28.104.0.1:38926 -> 198.28.0.2:53 1 64 1 2025-12-03 22:38:26.409 00:00:00.000 UDP 28.104.0.1:40032 -> 198.28.0.2:53 1 64 1 2025-12-03 22:38:26.409 00:00:00.000 UDP 28.104.0.1:42672 -> 198.28.0.2:53 1 64 1 2025-12-03 22:38:26.419 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40032 1 80 1 2025-12-03 22:38:26.419 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42672 1 109 1 2025-12-03 22:39:26.670 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56889 1 80 1 2025-12-03 22:39:26.670 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34268 1 109 1 2025-12-03 22:39:26.660 00:00:00.000 UDP 28.104.0.1:56889 -> 198.28.0.2:53 1 64 1 2025-12-03 22:39:26.660 00:00:00.000 UDP 28.104.0.1:34268 -> 198.28.0.2:53 1 64 1 2025-12-03 22:36:07.443 00:05:08.868 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-03 22:36:07.403 00:05:08.785 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-03 22:36:07.393 00:05:08.805 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-03 22:36:04.640 00:05:10.012 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2772 1 2025-12-03 22:40:26.964 00:00:00.000 UDP 28.104.0.1:36798 -> 198.28.0.2:53 1 64 1 2025-12-03 22:40:26.964 00:00:00.000 UDP 28.104.0.1:42043 -> 198.28.0.2:53 1 64 1 2025-12-03 22:40:26.974 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42043 1 80 1 2025-12-03 22:40:26.974 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36798 1 109 1 2025-12-03 22:37:07.393 00:05:08.928 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-03 22:37:16.187 00:04:00.469 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-12-03 22:37:16.187 00:04:00.807 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-12-03 22:41:30.560 00:00:00.000 UDP 28.104.0.1:56296 -> 198.28.0.2:53 1 64 1 2025-12-03 22:41:30.560 00:00:00.000 UDP 28.104.0.1:52345 -> 198.28.0.2:53 1 64 1 2025-12-03 22:41:30.570 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52345 1 80 1 2025-12-03 22:41:30.570 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56296 1 109 1 2025-12-03 22:41:46.414 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-03 22:42:30.864 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43282 1 80 1 2025-12-03 22:42:30.864 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33857 1 109 1 2025-12-03 22:42:30.854 00:00:00.000 UDP 28.104.0.1:33857 -> 198.28.0.2:53 1 64 1 2025-12-03 22:42:30.854 00:00:00.000 UDP 28.104.0.1:43282 -> 198.28.0.2:53 1 64 1 2025-12-03 22:43:31.191 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47249 1 80 1 2025-12-03 22:43:31.191 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42302 1 109 1 2025-12-03 22:43:31.181 00:00:00.000 UDP 28.104.0.1:47249 -> 198.28.0.2:53 1 64 1 2025-12-03 22:43:31.181 00:00:00.000 UDP 28.104.0.1:42302 -> 198.28.0.2:53 1 64 1 2025-12-03 22:44:31.447 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56715 1 80 1 2025-12-03 22:44:31.447 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41328 1 109 1 2025-12-03 22:44:31.437 00:00:00.000 UDP 28.104.0.1:41328 -> 198.28.0.2:53 1 64 1 2025-12-03 22:44:31.438 00:00:00.000 UDP 28.104.0.1:56715 -> 198.28.0.2:53 1 64 1 2025-12-03 22:41:24.651 00:05:00.586 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2668 1 2025-12-03 22:45:31.704 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37627 1 80 1 2025-12-03 22:45:31.704 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47261 1 109 1 2025-12-03 22:45:31.693 00:00:00.000 UDP 28.104.0.1:37627 -> 198.28.0.2:53 1 64 1 2025-12-03 22:45:31.693 00:00:00.000 UDP 28.104.0.1:47261 -> 198.28.0.2:53 1 64 1 2025-12-03 22:42:16.188 00:04:00.470 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-12-03 22:42:16.188 00:04:00.807 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-12-03 22:42:07.394 00:05:08.804 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-03 22:42:07.444 00:05:08.868 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-03 22:42:07.404 00:05:08.784 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-03 22:46:31.986 00:00:00.000 UDP 28.104.0.1:47194 -> 198.28.0.2:53 1 64 1 2025-12-03 22:46:31.985 00:00:00.000 UDP 28.104.0.1:36948 -> 198.28.0.2:53 1 64 1 2025-12-03 22:46:31.997 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47194 1 109 1 2025-12-03 22:46:31.996 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36948 1 80 1 2025-12-03 22:46:46.624 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-03 22:43:07.395 00:05:08.928 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-03 22:47:32.287 00:00:00.000 UDP 28.104.0.1:60667 -> 198.28.0.2:53 1 64 1 2025-12-03 22:47:32.286 00:00:00.000 UDP 28.104.0.1:37725 -> 198.28.0.2:53 1 64 1 2025-12-03 22:47:32.297 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37725 1 109 1 2025-12-03 22:47:32.297 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60667 1 80 1 2025-12-03 22:47:16.189 00:01:00.475 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-03 22:47:16.189 00:01:00.807 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-12-03 22:48:32.536 00:00:00.000 UDP 28.104.0.1:58559 -> 198.28.0.2:53 1 64 1 2025-12-03 22:48:32.536 00:00:00.000 UDP 28.104.0.1:44714 -> 198.28.0.2:53 1 64 1 2025-12-03 22:48:32.546 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44714 1 109 1 2025-12-03 22:48:32.546 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58559 1 80 1 2025-12-03 22:49:32.790 00:00:00.000 UDP 28.104.0.1:40508 -> 198.28.0.2:53 1 64 1 2025-12-03 22:49:32.790 00:00:00.000 UDP 28.104.0.1:45507 -> 198.28.0.2:53 1 64 1 2025-12-03 22:49:32.800 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45507 1 109 1 2025-12-03 22:49:32.800 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40508 1 80 1 2025-12-03 22:50:33.110 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41675 1 109 1 2025-12-03 22:50:33.111 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44117 1 80 1 2025-12-03 22:50:33.100 00:00:00.000 UDP 28.104.0.1:44117 -> 198.28.0.2:53 1 64 1 2025-12-03 22:50:33.100 00:00:00.000 UDP 28.104.0.1:41675 -> 198.28.0.2:53 1 64 1 2025-12-03 22:46:34.655 00:05:10.010 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2724 1 2025-12-03 22:51:33.404 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33019 1 109 1 2025-12-03 22:51:33.404 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48361 1 80 1 2025-12-03 22:51:33.394 00:00:00.000 UDP 28.104.0.1:33019 -> 198.28.0.2:53 1 64 1 2025-12-03 22:51:33.394 00:00:00.000 UDP 28.104.0.1:48361 -> 198.28.0.2:53 1 64 1 2025-12-03 22:51:46.647 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-03 22:48:07.406 00:05:08.784 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-03 22:48:07.446 00:05:08.868 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-03 22:48:07.396 00:05:08.805 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-03 22:52:33.691 00:00:00.000 UDP 28.104.0.1:53138 -> 198.28.0.2:53 1 64 1 2025-12-03 22:52:33.691 00:00:00.000 UDP 28.104.0.1:56430 -> 198.28.0.2:53 1 64 1 2025-12-03 22:52:33.701 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53138 1 109 1 2025-12-03 22:52:33.701 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56430 1 80 1 2025-12-03 22:49:16.190 00:04:00.476 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-12-03 22:49:16.190 00:04:00.808 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-12-03 22:49:07.395 00:05:08.928 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-03 22:53:33.940 00:00:00.000 UDP 28.104.0.1:53595 -> 198.28.0.2:53 1 64 1 2025-12-03 22:53:33.940 00:00:00.000 UDP 28.104.0.1:47480 -> 198.28.0.2:53 1 64 1 2025-12-03 22:53:33.952 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53595 1 80 1 2025-12-03 22:53:33.952 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47480 1 109 1 2025-12-03 22:54:34.248 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50417 1 80 1 2025-12-03 22:54:34.248 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40468 1 109 1 2025-12-03 22:54:34.238 00:00:00.000 UDP 28.104.0.1:50417 -> 198.28.0.2:53 1 64 1 2025-12-03 22:54:34.238 00:00:00.000 UDP 28.104.0.1:40468 -> 198.28.0.2:53 1 64 1 2025-12-03 22:55:34.545 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58158 1 80 1 2025-12-03 22:55:34.545 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51994 1 109 1 2025-12-03 22:55:34.536 00:00:00.000 UDP 28.104.0.1:58158 -> 198.28.0.2:53 1 64 1 2025-12-03 22:55:34.537 00:00:00.000 UDP 28.104.0.1:51994 -> 198.28.0.2:53 1 64 1 2025-12-03 22:51:54.666 00:05:00.669 OSPF 28.0.2.1:0 -> 224.0.0.5:0 43 3152 1 2025-12-03 22:56:35.893 00:00:00.000 UDP 28.104.0.1:34824 -> 198.28.0.2:53 1 64 1 2025-12-03 22:56:35.893 00:00:00.000 UDP 28.104.0.1:35264 -> 198.28.0.2:53 1 64 1 2025-12-03 22:56:35.902 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35264 1 109 1 2025-12-03 22:56:35.902 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34824 1 80 1 2025-12-03 22:56:46.948 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-03 22:57:36.209 00:00:00.000 UDP 28.104.0.1:58175 -> 198.28.0.2:53 1 64 1 2025-12-03 22:57:36.208 00:00:00.000 UDP 28.104.0.1:43573 -> 198.28.0.2:53 1 64 1 2025-12-03 22:57:36.218 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43573 1 109 1 2025-12-03 22:57:36.218 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58175 1 80 1 2025-12-03 22:54:16.190 00:04:00.478 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-12-03 22:54:07.398 00:05:08.808 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-03 22:54:07.446 00:05:08.867 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-03 22:54:07.406 00:05:08.789 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-03 22:54:16.190 00:05:00.812 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-03 22:58:36.501 00:00:00.000 UDP 28.104.0.1:37351 -> 198.28.0.2:53 1 64 1 2025-12-03 22:58:36.501 00:00:00.000 UDP 28.104.0.1:56547 -> 198.28.0.2:53 1 64 1 2025-12-03 22:58:36.512 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37351 1 109 1 2025-12-03 22:58:36.512 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56547 1 80 1 Summary: total flows: 331, total bytes: 97659, total packets: 1440, avg bps: 202, avg pps: 0, avg bpp: 67 Time window: 2025-12-03 21:55:07 - 2025-12-03 22:59:17 Total flows processed: 331, passed: 331, Blocks skipped: 0, Bytes read: 34488 Sys: 0.0036s User: 0.0036s Wall: 0.0042s flows/second: 79413.9 Runtime: 0.0042s