Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-04 00:55:07.436 00:05:08.919 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 00:59:13.280 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33156 1 80 1 2025-12-04 00:59:13.280 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44090 1 109 1 2025-12-04 00:57:16.233 00:02:00.483 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-12-04 00:59:13.270 00:00:00.000 UDP 28.104.0.1:33156 -> 198.28.0.2:53 1 64 1 2025-12-04 00:59:13.270 00:00:00.000 UDP 28.104.0.1:44090 -> 198.28.0.2:53 1 64 1 2025-12-04 01:00:13.567 00:00:00.000 UDP 28.104.0.1:42219 -> 198.28.0.2:53 1 64 1 2025-12-04 01:00:13.567 00:00:00.000 UDP 28.104.0.1:40766 -> 198.28.0.2:53 1 64 1 2025-12-04 01:00:13.579 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42219 1 80 1 2025-12-04 01:00:13.579 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40766 1 109 1 2025-12-04 01:01:14.255 00:00:00.000 UDP 28.104.0.1:41054 -> 198.28.0.2:53 1 64 1 2025-12-04 01:01:14.255 00:00:00.000 UDP 28.104.0.1:41356 -> 198.28.0.2:53 1 64 1 2025-12-04 01:00:16.234 00:01:00.484 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 01:01:14.265 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41054 1 80 1 2025-12-04 01:01:14.265 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41356 1 109 1 2025-12-04 01:01:49.319 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 01:02:14.548 00:00:00.000 UDP 28.104.0.1:45208 -> 198.28.0.2:53 1 64 1 2025-12-04 01:02:14.548 00:00:00.000 UDP 28.104.0.1:48275 -> 198.28.0.2:53 1 64 1 2025-12-04 01:02:14.559 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45208 1 80 1 2025-12-04 01:02:14.559 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48275 1 109 1 2025-12-04 01:03:14.857 00:00:00.000 UDP 28.104.0.1:45026 -> 198.28.0.2:53 1 64 1 2025-12-04 01:03:14.857 00:00:00.000 UDP 28.104.0.1:57941 -> 198.28.0.2:53 1 64 1 2025-12-04 01:03:14.867 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57941 1 80 1 2025-12-04 01:03:14.867 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45026 1 109 1 2025-12-04 00:59:24.845 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2772 1 2025-12-04 01:04:15.172 00:00:00.000 UDP 28.104.0.1:36410 -> 198.28.0.2:53 1 64 1 2025-12-04 01:02:16.233 00:02:00.484 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-12-04 01:04:15.172 00:00:00.000 UDP 28.104.0.1:33035 -> 198.28.0.2:53 1 64 1 2025-12-04 01:00:07.439 00:05:08.808 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 01:04:15.184 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33035 1 109 1 2025-12-04 01:04:15.184 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36410 1 80 1 2025-12-04 01:00:07.487 00:05:08.859 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 01:00:07.447 00:05:08.788 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 01:00:16.233 00:05:00.834 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 01:05:15.484 00:00:00.000 UDP 28.104.0.1:58711 -> 198.28.0.2:53 1 64 1 2025-12-04 01:05:15.485 00:00:00.000 UDP 28.104.0.1:52448 -> 198.28.0.2:53 1 64 1 2025-12-04 01:05:15.496 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52448 1 109 1 2025-12-04 01:05:15.496 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58711 1 80 1 2025-12-04 01:01:07.438 00:05:08.918 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 01:05:16.235 00:01:00.482 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 01:06:15.776 00:00:00.000 UDP 28.104.0.1:57745 -> 198.28.0.2:53 1 64 1 2025-12-04 01:06:15.776 00:00:00.000 UDP 28.104.0.1:39665 -> 198.28.0.2:53 1 64 1 2025-12-04 01:06:15.786 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57745 1 109 1 2025-12-04 01:06:15.788 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39665 1 80 1 2025-12-04 01:06:50.557 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 01:07:16.087 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60784 1 109 1 2025-12-04 01:07:16.088 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51391 1 80 1 2025-12-04 01:07:16.078 00:00:00.000 UDP 28.104.0.1:60784 -> 198.28.0.2:53 1 64 1 2025-12-04 01:07:16.078 00:00:00.000 UDP 28.104.0.1:51391 -> 198.28.0.2:53 1 64 1 2025-12-04 01:08:16.366 00:00:00.000 UDP 28.104.0.1:41073 -> 198.28.0.2:53 1 64 1 2025-12-04 01:08:16.366 00:00:00.000 UDP 28.104.0.1:37233 -> 198.28.0.2:53 1 64 1 2025-12-04 01:08:16.376 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37233 1 109 1 2025-12-04 01:08:16.376 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41073 1 80 1 2025-12-04 01:04:44.853 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 43 3040 1 2025-12-04 01:09:16.677 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59723 1 109 1 2025-12-04 01:09:16.676 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49320 1 80 1 2025-12-04 01:09:16.667 00:00:00.000 UDP 28.104.0.1:49320 -> 198.28.0.2:53 1 64 1 2025-12-04 01:09:16.668 00:00:00.000 UDP 28.104.0.1:59723 -> 198.28.0.2:53 1 64 1 2025-12-04 01:06:07.489 00:05:08.858 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 01:10:16.950 00:00:00.000 UDP 28.104.0.1:34783 -> 198.28.0.2:53 1 64 1 2025-12-04 01:10:16.950 00:00:00.000 UDP 28.104.0.1:56660 -> 198.28.0.2:53 1 64 1 2025-12-04 01:06:07.449 00:05:08.790 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 01:10:16.960 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56660 1 109 1 2025-12-04 01:10:16.960 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34783 1 80 1 2025-12-04 01:06:16.236 00:05:00.834 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 01:06:07.438 00:05:08.810 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 01:07:16.237 00:04:00.483 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-12-04 01:07:07.438 00:05:08.919 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 01:11:17.261 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36205 1 80 1 2025-12-04 01:11:17.261 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49594 1 109 1 2025-12-04 01:11:17.251 00:00:00.000 UDP 28.104.0.1:36205 -> 198.28.0.2:53 1 64 1 2025-12-04 01:11:17.251 00:00:00.000 UDP 28.104.0.1:49594 -> 198.28.0.2:53 1 64 1 2025-12-04 01:11:49.209 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 01:12:17.543 00:00:00.000 UDP 28.104.0.1:55223 -> 198.28.0.2:53 1 64 1 2025-12-04 01:12:17.543 00:00:00.000 UDP 28.104.0.1:35952 -> 198.28.0.2:53 1 64 1 2025-12-04 01:12:17.554 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55223 1 80 1 2025-12-04 01:12:17.552 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35952 1 109 1 2025-12-04 01:13:17.837 00:00:00.000 UDP 28.104.0.1:54724 -> 198.28.0.2:53 1 64 1 2025-12-04 01:13:17.837 00:00:00.000 UDP 28.104.0.1:36387 -> 198.28.0.2:53 1 64 1 2025-12-04 01:13:17.848 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54724 1 80 1 2025-12-04 01:13:17.848 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36387 1 109 1 2025-12-04 01:10:04.857 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2484 1 2025-12-04 01:14:18.110 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59489 1 109 1 2025-12-04 01:14:18.108 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44599 1 80 1 2025-12-04 01:14:18.097 00:00:00.000 UDP 28.104.0.1:44599 -> 198.28.0.2:53 1 64 1 2025-12-04 01:14:18.097 00:00:00.000 UDP 28.104.0.1:59489 -> 198.28.0.2:53 1 64 1 2025-12-04 01:15:18.355 00:00:00.000 UDP 28.104.0.1:40840 -> 198.28.0.2:53 1 64 1 2025-12-04 01:15:18.354 00:00:00.000 UDP 28.104.0.1:57630 -> 198.28.0.2:53 1 64 1 2025-12-04 01:15:18.365 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40840 1 109 1 2025-12-04 01:15:18.364 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57630 1 80 1 2025-12-04 01:12:16.238 00:04:00.481 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-12-04 01:12:07.441 00:05:08.812 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 01:16:18.648 00:00:00.000 UDP 28.104.0.1:37159 -> 198.28.0.2:53 1 64 1 2025-12-04 01:12:07.449 00:05:08.792 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 01:12:16.238 00:05:00.834 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 01:16:18.648 00:00:00.000 UDP 28.104.0.1:57000 -> 198.28.0.2:53 1 64 1 2025-12-04 01:12:07.490 00:05:08.859 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 01:16:18.660 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57000 1 109 1 2025-12-04 01:16:18.660 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37159 1 80 1 2025-12-04 01:16:49.500 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 01:17:18.943 00:00:00.000 UDP 28.104.0.1:50630 -> 198.28.0.2:53 1 64 1 2025-12-04 01:17:18.943 00:00:00.000 UDP 28.104.0.1:52250 -> 198.28.0.2:53 1 64 1 2025-12-04 01:13:07.441 00:05:08.919 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 01:17:18.954 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50630 1 109 1 2025-12-04 01:17:18.954 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52250 1 80 1 2025-12-04 01:18:19.249 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35052 1 109 1 2025-12-04 01:18:19.249 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40497 1 80 1 2025-12-04 01:18:19.238 00:00:00.000 UDP 28.104.0.1:35052 -> 198.28.0.2:53 1 64 1 2025-12-04 01:18:19.238 00:00:00.000 UDP 28.104.0.1:40497 -> 198.28.0.2:53 1 64 1 2025-12-04 01:19:19.532 00:00:00.000 UDP 28.104.0.1:59530 -> 198.28.0.2:53 1 64 1 2025-12-04 01:19:19.532 00:00:00.000 UDP 28.104.0.1:50938 -> 198.28.0.2:53 1 64 1 2025-12-04 01:19:19.543 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59530 1 109 1 2025-12-04 01:19:19.543 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50938 1 80 1 2025-12-04 01:15:24.862 00:05:10.010 OSPF 28.0.2.1:0 -> 224.0.0.5:0 45 3284 1 2025-12-04 01:20:20.496 00:00:00.000 UDP 28.104.0.1:51300 -> 198.28.0.2:53 1 64 1 2025-12-04 01:20:20.496 00:00:00.000 UDP 28.104.0.1:43502 -> 198.28.0.2:53 1 64 1 2025-12-04 01:20:20.506 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43502 1 109 1 2025-12-04 01:20:20.506 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51300 1 80 1 2025-12-04 01:17:16.241 00:04:00.479 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-12-04 01:21:20.804 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33712 1 80 1 2025-12-04 01:21:20.804 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57250 1 109 1 2025-12-04 01:21:20.795 00:00:00.000 UDP 28.104.0.1:57250 -> 198.28.0.2:53 1 64 1 2025-12-04 01:21:20.795 00:00:00.000 UDP 28.104.0.1:33712 -> 198.28.0.2:53 1 64 1 2025-12-04 01:21:49.793 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 01:18:07.491 00:05:08.861 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 01:18:07.450 00:05:08.794 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 01:18:07.441 00:05:08.813 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 01:22:21.099 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34439 1 109 1 2025-12-04 01:22:21.099 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59795 1 80 1 2025-12-04 01:22:21.089 00:00:00.000 UDP 28.104.0.1:34439 -> 198.28.0.2:53 1 64 1 2025-12-04 01:22:21.089 00:00:00.000 UDP 28.104.0.1:59795 -> 198.28.0.2:53 1 64 1 2025-12-04 01:18:16.242 00:05:00.842 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 01:19:07.441 00:05:08.922 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 01:23:21.392 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59506 1 109 1 2025-12-04 01:23:21.392 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59993 1 80 1 2025-12-04 01:23:21.383 00:00:00.000 UDP 28.104.0.1:59993 -> 198.28.0.2:53 1 64 1 2025-12-04 01:23:21.383 00:00:00.000 UDP 28.104.0.1:59506 -> 198.28.0.2:53 1 64 1 2025-12-04 01:24:21.686 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34800 1 109 1 2025-12-04 01:24:21.687 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34417 1 80 1 2025-12-04 01:24:21.677 00:00:00.000 UDP 28.104.0.1:34800 -> 198.28.0.2:53 1 64 1 2025-12-04 01:24:21.677 00:00:00.000 UDP 28.104.0.1:34417 -> 198.28.0.2:53 1 64 1 2025-12-04 01:20:44.872 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 34 2372 1 2025-12-04 01:25:21.971 00:00:00.000 UDP 28.104.0.1:44685 -> 198.28.0.2:53 1 64 1 2025-12-04 01:25:21.971 00:00:00.000 UDP 28.104.0.1:50489 -> 198.28.0.2:53 1 64 1 2025-12-04 01:25:21.983 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50489 1 80 1 2025-12-04 01:25:21.983 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44685 1 109 1 2025-12-04 01:22:16.244 00:04:00.481 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-12-04 01:26:22.278 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45634 1 109 1 2025-12-04 01:26:22.278 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58847 1 80 1 2025-12-04 01:26:22.268 00:00:00.000 UDP 28.104.0.1:58847 -> 198.28.0.2:53 1 64 1 2025-12-04 01:26:22.268 00:00:00.000 UDP 28.104.0.1:45634 -> 198.28.0.2:53 1 64 1 2025-12-04 01:26:49.682 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 01:27:22.568 00:00:00.000 UDP 28.104.0.1:56305 -> 198.28.0.2:53 1 64 1 2025-12-04 01:27:22.568 00:00:00.000 UDP 28.104.0.1:48211 -> 198.28.0.2:53 1 64 1 2025-12-04 01:27:22.579 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48211 1 109 1 2025-12-04 01:27:22.581 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56305 1 80 1 2025-12-04 01:24:07.442 00:05:08.813 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 01:24:07.491 00:05:08.863 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 01:24:07.452 00:05:08.792 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 01:24:16.245 00:05:00.841 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 01:28:22.867 00:00:00.000 UDP 28.104.0.1:38463 -> 198.28.0.2:53 1 64 1 2025-12-04 01:28:22.868 00:00:00.000 UDP 28.104.0.1:37161 -> 198.28.0.2:53 1 64 1 2025-12-04 01:28:22.877 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38463 1 109 1 2025-12-04 01:28:22.877 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37161 1 80 1 2025-12-04 01:25:07.443 00:05:08.922 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 01:29:23.179 00:00:00.000 UDP 28.104.0.1:59654 -> 198.28.0.2:53 1 64 1 2025-12-04 01:29:23.179 00:00:00.000 UDP 28.104.0.1:39949 -> 198.28.0.2:53 1 64 1 2025-12-04 01:29:23.188 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59654 1 109 1 2025-12-04 01:29:23.188 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39949 1 80 1 2025-12-04 01:26:04.877 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2652 1 2025-12-04 01:30:23.484 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44449 1 109 1 2025-12-04 01:30:23.484 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38585 1 80 1 2025-12-04 01:30:23.473 00:00:00.000 UDP 28.104.0.1:44449 -> 198.28.0.2:53 1 64 1 2025-12-04 01:30:23.473 00:00:00.000 UDP 28.104.0.1:38585 -> 198.28.0.2:53 1 64 1 2025-12-04 01:27:16.244 00:04:00.480 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-12-04 01:31:23.738 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44321 1 80 1 2025-12-04 01:31:23.738 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48082 1 109 1 2025-12-04 01:31:23.727 00:00:00.000 UDP 28.104.0.1:48082 -> 198.28.0.2:53 1 64 1 2025-12-04 01:31:23.727 00:00:00.000 UDP 28.104.0.1:44321 -> 198.28.0.2:53 1 64 1 2025-12-04 01:31:49.741 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 01:32:23.985 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43384 1 80 1 2025-12-04 01:32:23.985 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57096 1 109 1 2025-12-04 01:32:23.975 00:00:00.000 UDP 28.104.0.1:43384 -> 198.28.0.2:53 1 64 1 2025-12-04 01:32:23.975 00:00:00.000 UDP 28.104.0.1:57096 -> 198.28.0.2:53 1 64 1 2025-12-04 01:32:16.245 00:01:00.479 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 01:33:24.279 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36217 1 109 1 2025-12-04 01:33:24.279 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46251 1 80 1 2025-12-04 01:33:24.268 00:00:00.000 UDP 28.104.0.1:46251 -> 198.28.0.2:53 1 64 1 2025-12-04 01:33:24.268 00:00:00.000 UDP 28.104.0.1:36217 -> 198.28.0.2:53 1 64 1 2025-12-04 01:30:07.492 00:05:08.863 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 01:30:07.452 00:05:08.793 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 01:30:07.443 00:05:08.814 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 01:30:16.245 00:05:00.841 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 01:34:24.567 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36885 1 109 1 2025-12-04 01:34:24.566 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52888 1 80 1 2025-12-04 01:34:24.556 00:00:00.000 UDP 28.104.0.1:52888 -> 198.28.0.2:53 1 64 1 2025-12-04 01:34:24.556 00:00:00.000 UDP 28.104.0.1:36885 -> 198.28.0.2:53 1 64 1 2025-12-04 01:31:07.443 00:05:08.925 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 01:35:24.860 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40724 1 109 1 2025-12-04 01:35:24.860 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46687 1 80 1 2025-12-04 01:35:24.851 00:00:00.000 UDP 28.104.0.1:46687 -> 198.28.0.2:53 1 64 1 2025-12-04 01:35:24.851 00:00:00.000 UDP 28.104.0.1:40724 -> 198.28.0.2:53 1 64 1 2025-12-04 01:31:24.883 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2856 1 2025-12-04 01:34:16.246 00:02:00.479 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-12-04 01:36:25.272 00:00:00.000 UDP 28.104.0.1:45846 -> 198.28.0.2:53 1 64 1 2025-12-04 01:36:25.272 00:00:00.000 UDP 28.104.0.1:39113 -> 198.28.0.2:53 1 64 1 2025-12-04 01:36:25.282 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39113 1 80 1 2025-12-04 01:36:25.282 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45846 1 109 1 2025-12-04 01:36:49.939 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 01:37:25.573 00:00:00.000 UDP 28.104.0.1:60092 -> 198.28.0.2:53 1 64 1 2025-12-04 01:37:25.573 00:00:00.000 UDP 28.104.0.1:53973 -> 198.28.0.2:53 1 64 1 2025-12-04 01:37:25.585 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60092 1 109 1 2025-12-04 01:37:25.584 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53973 1 80 1 2025-12-04 01:37:16.246 00:01:00.479 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 01:38:25.872 00:00:00.000 UDP 28.104.0.1:49647 -> 198.28.0.2:53 1 64 1 2025-12-04 01:38:25.872 00:00:00.000 UDP 28.104.0.1:53739 -> 198.28.0.2:53 1 64 1 2025-12-04 01:38:25.882 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49647 1 109 1 2025-12-04 01:38:25.882 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53739 1 80 1 2025-12-04 01:39:26.189 00:00:00.000 UDP 28.104.0.1:39236 -> 198.28.0.2:53 1 64 1 2025-12-04 01:39:26.189 00:00:00.000 UDP 28.104.0.1:54640 -> 198.28.0.2:53 1 64 1 2025-12-04 01:39:26.200 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39236 1 109 1 2025-12-04 01:39:26.200 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54640 1 80 1 2025-12-04 01:36:07.445 00:05:08.812 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 01:36:07.496 00:05:08.861 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 01:36:07.456 00:05:08.791 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 01:36:16.247 00:05:00.842 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 01:40:26.487 00:00:00.000 UDP 28.104.0.1:57284 -> 198.28.0.2:53 1 64 1 2025-12-04 01:40:26.487 00:00:00.000 UDP 28.104.0.1:50452 -> 198.28.0.2:53 1 64 1 2025-12-04 01:40:26.497 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50452 1 109 1 2025-12-04 01:40:26.497 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57284 1 80 1 2025-12-04 01:36:44.891 00:05:10.572 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2816 1 2025-12-04 01:37:07.446 00:05:08.922 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 01:41:26.792 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43222 1 109 1 2025-12-04 01:41:26.792 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36616 1 80 1 2025-12-04 01:41:26.782 00:00:00.000 UDP 28.104.0.1:43222 -> 198.28.0.2:53 1 64 1 2025-12-04 01:41:26.783 00:00:00.000 UDP 28.104.0.1:36616 -> 198.28.0.2:53 1 64 1 2025-12-04 01:41:49.965 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 01:42:27.093 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50931 1 80 1 2025-12-04 01:42:27.093 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50021 1 109 1 2025-12-04 01:42:27.083 00:00:00.000 UDP 28.104.0.1:50021 -> 198.28.0.2:53 1 64 1 2025-12-04 01:42:27.083 00:00:00.000 UDP 28.104.0.1:50931 -> 198.28.0.2:53 1 64 1 2025-12-04 01:39:16.247 00:04:00.481 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-12-04 01:43:27.384 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56374 1 80 1 2025-12-04 01:43:27.384 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44041 1 109 1 2025-12-04 01:43:27.374 00:00:00.000 UDP 28.104.0.1:44041 -> 198.28.0.2:53 1 64 1 2025-12-04 01:43:27.374 00:00:00.000 UDP 28.104.0.1:56374 -> 198.28.0.2:53 1 64 1 2025-12-04 01:44:27.631 00:00:00.000 UDP 28.104.0.1:57322 -> 198.28.0.2:53 1 64 1 2025-12-04 01:44:27.631 00:00:00.000 UDP 28.104.0.1:54583 -> 198.28.0.2:53 1 64 1 2025-12-04 01:44:27.640 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57322 1 109 1 2025-12-04 01:44:27.640 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54583 1 80 1 2025-12-04 01:45:27.930 00:00:00.000 UDP 28.104.0.1:46541 -> 198.28.0.2:53 1 64 1 2025-12-04 01:45:27.930 00:00:00.000 UDP 28.104.0.1:52362 -> 198.28.0.2:53 1 64 1 2025-12-04 01:45:27.941 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52362 1 80 1 2025-12-04 01:45:27.941 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46541 1 109 1 2025-12-04 01:42:07.457 00:05:08.791 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 01:42:07.447 00:05:08.811 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 01:42:04.902 00:05:10.009 OSPF 28.0.2.1:0 -> 224.0.0.5:0 43 3060 1 2025-12-04 01:42:07.497 00:05:08.861 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 01:42:16.247 00:05:00.841 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 01:46:28.204 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57338 1 109 1 2025-12-04 01:46:28.204 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44979 1 80 1 2025-12-04 01:46:28.194 00:00:00.000 UDP 28.104.0.1:57338 -> 198.28.0.2:53 1 64 1 2025-12-04 01:46:28.194 00:00:00.000 UDP 28.104.0.1:44979 -> 198.28.0.2:53 1 64 1 2025-12-04 01:46:50.054 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 01:43:07.447 00:05:08.922 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 01:47:28.495 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49644 1 109 1 2025-12-04 01:47:28.495 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49675 1 80 1 2025-12-04 01:47:28.484 00:00:00.000 UDP 28.104.0.1:49644 -> 198.28.0.2:53 1 64 1 2025-12-04 01:47:28.485 00:00:00.000 UDP 28.104.0.1:49675 -> 198.28.0.2:53 1 64 1 2025-12-04 01:44:16.248 00:04:00.481 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-12-04 01:48:28.778 00:00:00.000 UDP 28.104.0.1:58889 -> 198.28.0.2:53 1 64 1 2025-12-04 01:48:28.778 00:00:00.000 UDP 28.104.0.1:60760 -> 198.28.0.2:53 1 64 1 2025-12-04 01:48:28.789 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60760 1 80 1 2025-12-04 01:48:28.789 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58889 1 109 1 2025-12-04 01:49:29.101 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52306 1 109 1 2025-12-04 01:49:29.101 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57007 1 80 1 2025-12-04 01:49:29.092 00:00:00.000 UDP 28.104.0.1:57007 -> 198.28.0.2:53 1 64 1 2025-12-04 01:49:29.092 00:00:00.000 UDP 28.104.0.1:52306 -> 198.28.0.2:53 1 64 1 2025-12-04 01:50:29.404 00:00:00.000 UDP 28.104.0.1:33712 -> 198.28.0.2:53 1 64 1 2025-12-04 01:50:29.404 00:00:00.000 UDP 28.104.0.1:38190 -> 198.28.0.2:53 1 64 1 2025-12-04 01:50:29.414 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33712 1 109 1 2025-12-04 01:50:29.414 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38190 1 80 1 2025-12-04 01:51:29.698 00:00:00.000 UDP 28.104.0.1:53674 -> 198.28.0.2:53 1 64 1 2025-12-04 01:51:29.698 00:00:00.000 UDP 28.104.0.1:56734 -> 198.28.0.2:53 1 64 1 2025-12-04 01:51:29.707 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56734 1 109 1 2025-12-04 01:51:29.707 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53674 1 80 1 2025-12-04 01:47:24.911 00:05:10.012 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2608 1 2025-12-04 01:51:50.191 00:00:00.028 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 01:48:07.451 00:05:08.813 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 01:48:07.460 00:05:08.793 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 01:48:07.500 00:05:08.861 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 01:48:16.248 00:05:00.843 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 01:52:30.009 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47416 1 109 1 2025-12-04 01:52:30.015 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44150 1 80 1 2025-12-04 01:52:29.999 00:00:00.000 UDP 28.104.0.1:44150 -> 198.28.0.2:53 1 64 1 2025-12-04 01:52:29.999 00:00:00.000 UDP 28.104.0.1:47416 -> 198.28.0.2:53 1 64 1 2025-12-04 01:49:16.249 00:04:00.481 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-12-04 01:49:07.451 00:05:08.921 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 01:53:30.310 00:00:00.000 UDP 28.104.0.1:36811 -> 198.28.0.2:53 1 64 1 2025-12-04 01:53:30.310 00:00:00.000 UDP 28.104.0.1:39419 -> 198.28.0.2:53 1 64 1 2025-12-04 01:53:30.321 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39419 1 80 1 2025-12-04 01:53:30.320 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36811 1 109 1 2025-12-04 01:54:30.657 00:00:00.000 UDP 28.104.0.1:41007 -> 198.28.0.2:53 1 64 1 2025-12-04 01:54:30.657 00:00:00.000 UDP 28.104.0.1:45350 -> 198.28.0.2:53 1 64 1 2025-12-04 01:54:30.667 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41007 1 80 1 2025-12-04 01:54:30.667 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45350 1 109 1 2025-12-04 01:55:31.193 00:00:00.000 UDP 28.104.0.1:44980 -> 198.28.0.2:53 1 64 1 2025-12-04 01:55:31.194 00:00:00.000 UDP 28.104.0.1:39989 -> 198.28.0.2:53 1 64 1 2025-12-04 01:55:31.205 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44980 1 80 1 2025-12-04 01:55:31.206 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39989 1 109 1 2025-12-04 01:56:31.451 00:00:00.000 UDP 28.104.0.1:47533 -> 198.28.0.2:53 1 64 1 2025-12-04 01:56:31.451 00:00:00.000 UDP 28.104.0.1:45901 -> 198.28.0.2:53 1 64 1 2025-12-04 01:56:31.462 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47533 1 109 1 2025-12-04 01:56:31.462 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45901 1 80 1 2025-12-04 01:56:50.342 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 01:52:44.922 00:05:10.012 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2384 1 2025-12-04 01:57:31.747 00:00:00.000 UDP 28.104.0.1:42881 -> 198.28.0.2:53 1 64 1 2025-12-04 01:57:31.747 00:00:00.000 UDP 28.104.0.1:37530 -> 198.28.0.2:53 1 64 1 2025-12-04 01:57:31.757 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37530 1 80 1 2025-12-04 01:57:31.757 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42881 1 109 1 2025-12-04 01:54:07.451 00:05:08.813 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 01:54:16.253 00:04:00.477 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-12-04 01:54:07.501 00:05:08.860 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 01:54:07.461 00:05:08.793 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 01:54:16.253 00:05:00.839 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 01:58:32.050 00:00:00.000 UDP 28.104.0.1:34555 -> 198.28.0.2:53 1 64 1 2025-12-04 01:58:32.050 00:00:00.000 UDP 28.104.0.1:46501 -> 198.28.0.2:53 1 64 1 2025-12-04 01:58:32.061 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46501 1 80 1 2025-12-04 01:58:32.061 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34555 1 109 1 Summary: total flows: 329, total bytes: 96898, total packets: 1429, avg bps: 201, avg pps: 0, avg bpp: 67 Time window: 2025-12-04 00:55:07 - 2025-12-04 01:59:17 Total flows processed: 329, passed: 329, Blocks skipped: 0, Bytes read: 34280 Sys: 0.0059s User: 0.0025s Wall: 0.0041s flows/second: 80088.6 Runtime: 0.0041s