Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-04 01:55:07.451 00:05:08.921 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 01:59:33.418 00:00:00.000 UDP 28.104.0.1:57702 -> 198.28.0.2:53 1 64 1 2025-12-04 01:59:33.417 00:00:00.000 UDP 28.104.0.1:37497 -> 198.28.0.2:53 1 64 1 2025-12-04 01:59:33.429 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57702 1 109 1 2025-12-04 01:59:33.428 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37497 1 80 1 2025-12-04 01:59:16.254 00:01:00.477 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 02:00:34.313 00:00:00.000 UDP 28.104.0.1:44297 -> 198.28.0.2:53 1 64 1 2025-12-04 02:00:34.313 00:00:00.000 UDP 28.104.0.1:38181 -> 198.28.0.2:53 1 64 1 2025-12-04 02:00:34.324 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38181 1 109 1 2025-12-04 02:00:34.324 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44297 1 80 1 2025-12-04 02:01:34.598 00:00:00.000 UDP 28.104.0.1:41181 -> 198.28.0.2:53 1 64 1 2025-12-04 02:01:34.598 00:00:00.000 UDP 28.104.0.1:40006 -> 198.28.0.2:53 1 64 1 2025-12-04 02:01:34.608 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40006 1 80 1 2025-12-04 02:01:34.608 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41181 1 109 1 2025-12-04 02:01:50.360 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 01:58:04.933 00:05:10.013 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2692 1 2025-12-04 02:02:35.660 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60514 1 80 1 2025-12-04 02:02:35.660 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43231 1 109 1 2025-12-04 02:02:35.651 00:00:00.000 UDP 28.104.0.1:60514 -> 198.28.0.2:53 1 64 1 2025-12-04 02:02:35.651 00:00:00.000 UDP 28.104.0.1:43231 -> 198.28.0.2:53 1 64 1 2025-12-04 02:01:16.254 00:02:00.478 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-12-04 02:03:35.936 00:00:00.000 UDP 28.104.0.1:55924 -> 198.28.0.2:53 1 64 1 2025-12-04 02:03:35.936 00:00:00.000 UDP 28.104.0.1:34849 -> 198.28.0.2:53 1 64 1 2025-12-04 02:03:35.945 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34849 1 80 1 2025-12-04 02:03:35.946 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55924 1 109 1 2025-12-04 02:00:07.503 00:05:08.860 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 02:00:07.463 00:05:08.791 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 02:00:16.254 00:05:00.839 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 02:00:07.453 00:05:08.812 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 02:04:36.240 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57664 1 109 1 2025-12-04 02:04:36.240 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56320 1 80 1 2025-12-04 02:04:36.230 00:00:00.000 UDP 28.104.0.1:56320 -> 198.28.0.2:53 1 64 1 2025-12-04 02:04:36.231 00:00:00.000 UDP 28.104.0.1:57664 -> 198.28.0.2:53 1 64 1 2025-12-04 02:04:16.255 00:01:00.478 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 02:01:07.454 00:05:08.921 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 02:05:36.527 00:00:00.000 UDP 28.104.0.1:48914 -> 198.28.0.2:53 1 64 1 2025-12-04 02:05:36.527 00:00:00.000 UDP 28.104.0.1:48725 -> 198.28.0.2:53 1 64 1 2025-12-04 02:05:36.538 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48914 1 80 1 2025-12-04 02:05:36.538 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48725 1 109 1 2025-12-04 02:06:36.838 00:00:00.000 UDP 28.104.0.1:43353 -> 198.28.0.2:53 1 64 1 2025-12-04 02:06:36.838 00:00:00.000 UDP 28.104.0.1:33540 -> 198.28.0.2:53 1 64 1 2025-12-04 02:06:36.849 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33540 1 80 1 2025-12-04 02:06:36.849 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43353 1 109 1 2025-12-04 02:06:50.562 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 02:03:24.949 00:05:10.010 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2896 1 2025-12-04 02:07:37.142 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56878 1 80 1 2025-12-04 02:07:37.141 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54098 1 109 1 2025-12-04 02:07:37.131 00:00:00.000 UDP 28.104.0.1:54098 -> 198.28.0.2:53 1 64 1 2025-12-04 02:07:37.131 00:00:00.000 UDP 28.104.0.1:56878 -> 198.28.0.2:53 1 64 1 2025-12-04 02:06:16.255 00:02:00.479 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-12-04 02:08:37.452 00:00:00.000 UDP 28.104.0.1:53157 -> 198.28.0.2:53 1 64 1 2025-12-04 02:08:37.453 00:00:00.000 UDP 28.104.0.1:35775 -> 198.28.0.2:53 1 64 1 2025-12-04 02:08:37.463 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53157 1 80 1 2025-12-04 02:08:37.463 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35775 1 109 1 2025-12-04 02:09:37.719 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50174 1 80 1 2025-12-04 02:09:37.718 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34033 1 109 1 2025-12-04 02:09:37.709 00:00:00.000 UDP 28.104.0.1:34033 -> 198.28.0.2:53 1 64 1 2025-12-04 02:09:37.709 00:00:00.000 UDP 28.104.0.1:50174 -> 198.28.0.2:53 1 64 1 2025-12-04 02:09:16.255 00:01:00.480 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 02:06:07.454 00:05:08.811 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 02:06:07.506 00:05:08.859 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 02:06:07.466 00:05:08.790 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 02:06:16.255 00:05:00.842 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 02:10:38.006 00:00:00.000 UDP 28.104.0.1:51051 -> 198.28.0.2:53 1 64 1 2025-12-04 02:10:38.006 00:00:00.000 UDP 28.104.0.1:41989 -> 198.28.0.2:53 1 64 1 2025-12-04 02:10:38.018 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51051 1 80 1 2025-12-04 02:10:38.019 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41989 1 109 1 2025-12-04 02:07:07.455 00:05:08.921 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 02:11:38.280 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34474 1 109 1 2025-12-04 02:11:38.281 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35118 1 80 1 2025-12-04 02:11:38.271 00:00:00.000 UDP 28.104.0.1:35118 -> 198.28.0.2:53 1 64 1 2025-12-04 02:11:38.271 00:00:00.000 UDP 28.104.0.1:34474 -> 198.28.0.2:53 1 64 1 2025-12-04 02:11:50.560 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 02:12:38.578 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55918 1 109 1 2025-12-04 02:12:38.578 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48452 1 80 1 2025-12-04 02:12:38.567 00:00:00.000 UDP 28.104.0.1:55918 -> 198.28.0.2:53 1 64 1 2025-12-04 02:12:38.567 00:00:00.000 UDP 28.104.0.1:48452 -> 198.28.0.2:53 1 64 1 2025-12-04 02:08:44.959 00:05:10.948 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2852 1 2025-12-04 02:13:38.859 00:00:00.000 UDP 28.104.0.1:51074 -> 198.28.0.2:53 1 64 1 2025-12-04 02:13:38.859 00:00:00.000 UDP 28.104.0.1:47698 -> 198.28.0.2:53 1 64 1 2025-12-04 02:13:38.870 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51074 1 80 1 2025-12-04 02:13:38.870 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47698 1 109 1 2025-12-04 02:14:39.178 00:00:00.000 UDP 28.104.0.1:40880 -> 198.28.0.2:53 1 64 1 2025-12-04 02:14:39.178 00:00:00.000 UDP 28.104.0.1:38099 -> 198.28.0.2:53 1 64 1 2025-12-04 02:14:39.189 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40880 1 80 1 2025-12-04 02:14:39.189 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38099 1 109 1 2025-12-04 02:11:16.255 00:04:00.487 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-12-04 02:15:39.471 00:00:00.000 UDP 28.104.0.1:59828 -> 198.28.0.2:53 1 64 1 2025-12-04 02:15:39.471 00:00:00.000 UDP 28.104.0.1:35829 -> 198.28.0.2:53 1 64 1 2025-12-04 02:15:39.482 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59828 1 80 1 2025-12-04 02:15:39.481 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35829 1 109 1 2025-12-04 02:12:07.508 00:05:08.859 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 02:12:07.468 00:05:08.790 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 02:12:07.457 00:05:08.811 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 02:12:16.255 00:05:00.845 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 02:16:39.772 00:00:00.000 UDP 28.104.0.1:55386 -> 198.28.0.2:53 1 64 1 2025-12-04 02:16:39.772 00:00:00.000 UDP 28.104.0.1:48963 -> 198.28.0.2:53 1 64 1 2025-12-04 02:16:39.782 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48963 1 109 1 2025-12-04 02:16:39.782 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55386 1 80 1 2025-12-04 02:16:50.935 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 02:13:07.459 00:05:08.919 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 02:17:40.100 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42663 1 80 1 2025-12-04 02:17:40.100 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59626 1 109 1 2025-12-04 02:17:40.090 00:00:00.000 UDP 28.104.0.1:59626 -> 198.28.0.2:53 1 64 1 2025-12-04 02:17:40.090 00:00:00.000 UDP 28.104.0.1:42663 -> 198.28.0.2:53 1 64 1 2025-12-04 02:14:04.966 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2896 1 2025-12-04 02:18:43.196 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56888 1 80 1 2025-12-04 02:18:43.196 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57775 1 109 1 2025-12-04 02:18:43.187 00:00:00.000 UDP 28.104.0.1:56888 -> 198.28.0.2:53 1 64 1 2025-12-04 02:18:43.187 00:00:00.000 UDP 28.104.0.1:57775 -> 198.28.0.2:53 1 64 1 2025-12-04 02:19:43.487 00:00:00.000 UDP 28.104.0.1:58581 -> 198.28.0.2:53 1 64 1 2025-12-04 02:19:43.487 00:00:00.000 UDP 28.104.0.1:37053 -> 198.28.0.2:53 1 64 1 2025-12-04 02:19:43.498 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37053 1 80 1 2025-12-04 02:19:43.498 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58581 1 109 1 2025-12-04 02:16:16.257 00:04:00.487 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-12-04 02:20:43.783 00:00:00.000 UDP 28.104.0.1:60387 -> 198.28.0.2:53 1 64 1 2025-12-04 02:20:43.783 00:00:00.000 UDP 28.104.0.1:46818 -> 198.28.0.2:53 1 64 1 2025-12-04 02:20:43.793 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60387 1 80 1 2025-12-04 02:20:43.793 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46818 1 109 1 2025-12-04 02:21:44.079 00:00:00.000 UDP 28.104.0.1:43485 -> 198.28.0.2:53 1 64 1 2025-12-04 02:21:44.079 00:00:00.000 UDP 28.104.0.1:41514 -> 198.28.0.2:53 1 64 1 2025-12-04 02:21:44.089 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43485 1 109 1 2025-12-04 02:21:44.089 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41514 1 80 1 2025-12-04 02:21:50.847 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 02:18:07.458 00:05:08.810 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 02:18:07.509 00:05:08.861 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 02:18:07.469 00:05:08.789 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 02:18:16.258 00:05:00.844 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 02:22:44.331 00:00:00.000 UDP 28.104.0.1:43677 -> 198.28.0.2:53 1 64 1 2025-12-04 02:22:44.331 00:00:00.000 UDP 28.104.0.1:34826 -> 198.28.0.2:53 1 64 1 2025-12-04 02:22:44.343 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43677 1 80 1 2025-12-04 02:22:44.343 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34826 1 109 1 2025-12-04 02:19:07.459 00:05:08.922 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 02:19:24.973 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2384 1 2025-12-04 02:23:47.907 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57603 1 80 1 2025-12-04 02:23:47.908 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52081 1 109 1 2025-12-04 02:23:47.898 00:00:00.000 UDP 28.104.0.1:52081 -> 198.28.0.2:53 1 64 1 2025-12-04 02:23:47.897 00:00:00.000 UDP 28.104.0.1:57603 -> 198.28.0.2:53 1 64 1 2025-12-04 02:24:48.216 00:00:00.000 UDP 28.104.0.1:59260 -> 198.28.0.2:53 1 64 1 2025-12-04 02:24:48.216 00:00:00.000 UDP 28.104.0.1:33637 -> 198.28.0.2:53 1 64 1 2025-12-04 02:24:48.227 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59260 1 109 1 2025-12-04 02:24:48.227 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33637 1 80 1 2025-12-04 02:21:16.258 00:04:00.490 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-12-04 02:25:48.520 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48692 1 109 1 2025-12-04 02:25:48.520 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42338 1 80 1 2025-12-04 02:25:48.509 00:00:00.000 UDP 28.104.0.1:42338 -> 198.28.0.2:53 1 64 1 2025-12-04 02:25:48.509 00:00:00.000 UDP 28.104.0.1:48692 -> 198.28.0.2:53 1 64 1 2025-12-04 02:26:48.802 00:00:00.000 UDP 28.104.0.1:51979 -> 198.28.0.2:53 1 64 1 2025-12-04 02:26:48.802 00:00:00.000 UDP 28.104.0.1:56725 -> 198.28.0.2:53 1 64 1 2025-12-04 02:26:48.813 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56725 1 109 1 2025-12-04 02:26:50.991 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 02:26:48.813 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51979 1 80 1 2025-12-04 02:27:49.110 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45819 1 109 1 2025-12-04 02:27:49.110 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45892 1 80 1 2025-12-04 02:27:49.099 00:00:00.000 UDP 28.104.0.1:45819 -> 198.28.0.2:53 1 64 1 2025-12-04 02:27:49.099 00:00:00.000 UDP 28.104.0.1:45892 -> 198.28.0.2:53 1 64 1 2025-12-04 02:24:07.471 00:05:08.790 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 02:24:07.459 00:05:08.810 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 02:24:07.511 00:05:08.861 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 02:24:16.259 00:05:00.846 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 02:24:44.984 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2772 1 2025-12-04 02:28:58.314 00:00:00.000 UDP 28.104.0.1:33838 -> 198.28.0.2:53 1 64 1 2025-12-04 02:28:58.314 00:00:00.000 UDP 28.104.0.1:51168 -> 198.28.0.2:53 1 64 1 2025-12-04 02:28:58.324 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33838 1 80 1 2025-12-04 02:28:58.324 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51168 1 109 1 2025-12-04 02:25:07.460 00:05:08.921 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 02:29:58.616 00:00:00.000 UDP 28.104.0.1:51638 -> 198.28.0.2:53 1 64 1 2025-12-04 02:29:58.616 00:00:00.000 UDP 28.104.0.1:52453 -> 198.28.0.2:53 1 64 1 2025-12-04 02:29:58.626 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51638 1 80 1 2025-12-04 02:29:58.626 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52453 1 109 1 2025-12-04 02:26:16.259 00:04:00.490 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-12-04 02:30:58.912 00:00:00.000 UDP 28.104.0.1:46583 -> 198.28.0.2:53 1 64 1 2025-12-04 02:30:58.911 00:00:00.000 UDP 28.104.0.1:46935 -> 198.28.0.2:53 1 64 1 2025-12-04 02:30:58.923 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46583 1 109 1 2025-12-04 02:30:58.922 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46935 1 80 1 2025-12-04 02:31:50.847 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 02:31:59.223 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41594 1 80 1 2025-12-04 02:31:59.223 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43199 1 109 1 2025-12-04 02:31:59.212 00:00:00.000 UDP 28.104.0.1:41594 -> 198.28.0.2:53 1 64 1 2025-12-04 02:31:59.212 00:00:00.000 UDP 28.104.0.1:43199 -> 198.28.0.2:53 1 64 1 2025-12-04 02:31:16.260 00:01:00.490 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 02:32:59.477 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39115 1 109 1 2025-12-04 02:32:59.478 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49096 1 80 1 2025-12-04 02:32:59.467 00:00:00.000 UDP 28.104.0.1:49096 -> 198.28.0.2:53 1 64 1 2025-12-04 02:32:59.467 00:00:00.000 UDP 28.104.0.1:39115 -> 198.28.0.2:53 1 64 1 2025-12-04 02:33:59.719 00:00:00.000 UDP 28.104.0.1:38536 -> 198.28.0.2:53 1 64 1 2025-12-04 02:33:59.719 00:00:00.000 UDP 28.104.0.1:53222 -> 198.28.0.2:53 1 64 1 2025-12-04 02:33:59.730 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38536 1 80 1 2025-12-04 02:33:59.729 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53222 1 109 1 2025-12-04 02:30:07.471 00:05:08.790 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 02:30:07.512 00:05:08.863 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 02:30:07.460 00:05:08.810 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 02:30:04.990 00:05:10.169 OSPF 28.0.2.1:0 -> 224.0.0.5:0 42 2960 1 2025-12-04 02:30:16.261 00:05:00.844 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 02:35:00.044 00:00:00.000 UDP 28.104.0.1:36326 -> 198.28.0.2:53 1 64 1 2025-12-04 02:35:00.044 00:00:00.000 UDP 28.104.0.1:55709 -> 198.28.0.2:53 1 64 1 2025-12-04 02:35:00.054 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36326 1 109 1 2025-12-04 02:35:00.054 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55709 1 80 1 2025-12-04 02:33:16.260 00:02:00.491 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-12-04 02:31:07.462 00:05:08.922 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 02:36:00.334 00:00:00.000 UDP 28.104.0.1:39977 -> 198.28.0.2:53 1 64 1 2025-12-04 02:36:00.334 00:00:00.000 UDP 28.104.0.1:60875 -> 198.28.0.2:53 1 64 1 2025-12-04 02:36:00.345 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60875 1 80 1 2025-12-04 02:36:00.345 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39977 1 109 1 2025-12-04 02:36:51.161 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 02:37:00.639 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47831 1 109 1 2025-12-04 02:37:00.639 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39706 1 80 1 2025-12-04 02:37:00.627 00:00:00.000 UDP 28.104.0.1:47831 -> 198.28.0.2:53 1 64 1 2025-12-04 02:37:00.627 00:00:00.000 UDP 28.104.0.1:39706 -> 198.28.0.2:53 1 64 1 2025-12-04 02:36:16.261 00:01:00.496 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 02:38:00.923 00:00:00.000 UDP 28.104.0.1:39666 -> 198.28.0.2:53 1 64 1 2025-12-04 02:38:00.923 00:00:00.000 UDP 28.104.0.1:34181 -> 198.28.0.2:53 1 64 1 2025-12-04 02:38:00.934 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39666 1 80 1 2025-12-04 02:38:00.934 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34181 1 109 1 2025-12-04 02:39:01.237 00:00:00.000 UDP 28.104.0.1:39045 -> 198.28.0.2:53 1 64 1 2025-12-04 02:39:01.237 00:00:00.000 UDP 28.104.0.1:55359 -> 198.28.0.2:53 1 64 1 2025-12-04 02:39:01.248 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39045 1 109 1 2025-12-04 02:39:01.248 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55359 1 80 1 2025-12-04 02:35:24.996 00:05:00.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2540 1 2025-12-04 02:40:01.505 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44597 1 80 1 2025-12-04 02:40:01.505 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52430 1 109 1 2025-12-04 02:40:01.495 00:00:00.000 UDP 28.104.0.1:44597 -> 198.28.0.2:53 1 64 1 2025-12-04 02:40:01.495 00:00:00.000 UDP 28.104.0.1:52430 -> 198.28.0.2:53 1 64 1 2025-12-04 02:36:07.461 00:05:08.812 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 02:38:16.262 00:02:00.494 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-12-04 02:36:07.512 00:05:08.865 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 02:36:07.472 00:05:08.791 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 02:36:16.261 00:05:00.844 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 02:41:01.796 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46323 1 109 1 2025-12-04 02:41:01.796 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45504 1 80 1 2025-12-04 02:41:01.786 00:00:00.000 UDP 28.104.0.1:46323 -> 198.28.0.2:53 1 64 1 2025-12-04 02:41:01.786 00:00:00.000 UDP 28.104.0.1:45504 -> 198.28.0.2:53 1 64 1 2025-12-04 02:37:07.462 00:05:08.925 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 02:41:51.444 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 02:42:02.098 00:00:00.000 UDP 28.104.0.1:35240 -> 198.28.0.2:53 1 64 1 2025-12-04 02:42:02.098 00:00:00.000 UDP 28.104.0.1:43381 -> 198.28.0.2:53 1 64 1 2025-12-04 02:42:02.108 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35240 1 109 1 2025-12-04 02:42:02.108 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43381 1 80 1 2025-12-04 02:41:16.263 00:01:00.494 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 02:43:02.393 00:00:00.000 UDP 28.104.0.1:34587 -> 198.28.0.2:53 1 64 1 2025-12-04 02:43:02.393 00:00:00.000 UDP 28.104.0.1:40598 -> 198.28.0.2:53 1 64 1 2025-12-04 02:43:02.403 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34587 1 80 1 2025-12-04 02:43:02.403 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40598 1 109 1 2025-12-04 02:44:02.746 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57103 1 80 1 2025-12-04 02:44:02.747 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44091 1 109 1 2025-12-04 02:44:02.735 00:00:00.000 UDP 28.104.0.1:57103 -> 198.28.0.2:53 1 64 1 2025-12-04 02:44:02.736 00:00:00.000 UDP 28.104.0.1:44091 -> 198.28.0.2:53 1 64 1 2025-12-04 02:40:35.001 00:05:10.037 OSPF 28.0.2.1:0 -> 224.0.0.5:0 45 3284 1 2025-12-04 02:45:03.060 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56733 1 109 1 2025-12-04 02:45:03.060 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42623 1 80 1 2025-12-04 02:45:03.049 00:00:00.000 UDP 28.104.0.1:56733 -> 198.28.0.2:53 1 64 1 2025-12-04 02:45:03.049 00:00:00.000 UDP 28.104.0.1:42623 -> 198.28.0.2:53 1 64 1 2025-12-04 02:46:03.347 00:00:00.000 UDP 28.104.0.1:50330 -> 198.28.0.2:53 1 64 1 2025-12-04 02:46:03.347 00:00:00.000 UDP 28.104.0.1:49283 -> 198.28.0.2:53 1 64 1 2025-12-04 02:46:03.357 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49283 1 80 1 2025-12-04 02:46:03.358 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50330 1 109 1 2025-12-04 02:42:07.512 00:05:08.865 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 02:42:07.472 00:05:08.792 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 02:42:16.263 00:05:00.843 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 02:42:07.462 00:05:08.811 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 02:46:51.362 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 02:47:03.651 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43525 1 80 1 2025-12-04 02:47:03.651 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38861 1 109 1 2025-12-04 02:47:03.642 00:00:00.000 UDP 28.104.0.1:43525 -> 198.28.0.2:53 1 64 1 2025-12-04 02:47:03.642 00:00:00.000 UDP 28.104.0.1:38861 -> 198.28.0.2:53 1 64 1 2025-12-04 02:43:16.265 00:04:00.495 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-12-04 02:43:07.463 00:05:08.925 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 02:48:03.943 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55756 1 80 1 2025-12-04 02:48:03.943 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58595 1 109 1 2025-12-04 02:48:03.931 00:00:00.000 UDP 28.104.0.1:55756 -> 198.28.0.2:53 1 64 1 2025-12-04 02:48:03.931 00:00:00.000 UDP 28.104.0.1:58595 -> 198.28.0.2:53 1 64 1 2025-12-04 02:49:04.245 00:00:00.000 UDP 28.104.0.1:53333 -> 198.28.0.2:53 1 64 1 2025-12-04 02:49:04.245 00:00:00.000 UDP 28.104.0.1:59912 -> 198.28.0.2:53 1 64 1 2025-12-04 02:49:04.254 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53333 1 109 1 2025-12-04 02:49:04.257 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59912 1 80 1 2025-12-04 02:50:04.552 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60158 1 80 1 2025-12-04 02:45:55.042 00:05:10.009 OSPF 28.0.2.1:0 -> 224.0.0.5:0 34 2304 1 2025-12-04 02:50:04.552 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53782 1 109 1 2025-12-04 02:50:04.540 00:00:00.000 UDP 28.104.0.1:53782 -> 198.28.0.2:53 1 64 1 2025-12-04 02:50:04.540 00:00:00.000 UDP 28.104.0.1:60158 -> 198.28.0.2:53 1 64 1 2025-12-04 02:51:04.855 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35598 1 80 1 2025-12-04 02:51:04.855 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32838 1 109 1 2025-12-04 02:51:04.845 00:00:00.000 UDP 28.104.0.1:35598 -> 198.28.0.2:53 1 64 1 2025-12-04 02:51:04.845 00:00:00.000 UDP 28.104.0.1:32838 -> 198.28.0.2:53 1 64 1 2025-12-04 02:51:51.317 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 02:52:05.151 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33095 1 109 1 2025-12-04 02:52:05.141 00:00:00.000 UDP 28.104.0.1:33095 -> 198.28.0.2:53 1 64 1 2025-12-04 02:48:07.467 00:05:08.808 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 02:48:16.264 00:04:00.495 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-12-04 02:48:07.517 00:05:08.862 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 02:48:07.477 00:05:08.788 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 02:48:16.265 00:05:00.844 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 02:52:05.142 00:01:00.362 UDP 28.104.0.1:44147 -> 198.28.0.2:53 2 128 1 2025-12-04 02:53:05.504 00:00:00.000 UDP 28.104.0.1:55069 -> 198.28.0.2:53 1 64 1 2025-12-04 02:52:05.152 00:01:00.362 UDP 198.28.0.2:53 -> 28.104.0.1:44147 2 189 1 2025-12-04 02:53:05.515 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55069 1 80 1 2025-12-04 02:49:07.467 00:05:08.921 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 02:54:05.803 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56572 1 80 1 2025-12-04 02:54:05.803 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45847 1 109 1 2025-12-04 02:54:05.794 00:00:00.000 UDP 28.104.0.1:45847 -> 198.28.0.2:53 1 64 1 2025-12-04 02:54:05.794 00:00:00.000 UDP 28.104.0.1:56572 -> 198.28.0.2:53 1 64 1 2025-12-04 02:55:07.087 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53339 1 80 1 2025-12-04 02:55:07.087 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38201 1 109 1 2025-12-04 02:55:07.076 00:00:00.000 UDP 28.104.0.1:38201 -> 198.28.0.2:53 1 64 1 2025-12-04 02:55:07.076 00:00:00.000 UDP 28.104.0.1:53339 -> 198.28.0.2:53 1 64 1 2025-12-04 02:51:15.050 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2652 1 2025-12-04 02:56:07.375 00:00:00.000 UDP 28.104.0.1:48306 -> 198.28.0.2:53 1 64 1 2025-12-04 02:56:07.374 00:00:00.000 UDP 28.104.0.1:41724 -> 198.28.0.2:53 1 64 1 2025-12-04 02:56:07.384 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41724 1 109 1 2025-12-04 02:56:07.385 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48306 1 80 1 2025-12-04 02:56:51.526 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 02:57:07.639 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35845 1 80 1 2025-12-04 02:57:07.639 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59824 1 109 1 2025-12-04 02:57:07.629 00:00:00.000 UDP 28.104.0.1:35845 -> 198.28.0.2:53 1 64 1 2025-12-04 02:57:07.629 00:00:00.000 UDP 28.104.0.1:59824 -> 198.28.0.2:53 1 64 1 2025-12-04 02:53:16.265 00:04:00.496 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-12-04 02:58:07.893 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59948 1 109 1 2025-12-04 02:58:07.893 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54483 1 80 1 2025-12-04 02:54:07.469 00:05:08.807 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 02:58:07.882 00:00:00.000 UDP 28.104.0.1:59948 -> 198.28.0.2:53 1 64 1 2025-12-04 02:58:07.882 00:00:00.000 UDP 28.104.0.1:54483 -> 198.28.0.2:53 1 64 1 2025-12-04 02:54:07.518 00:05:08.861 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 02:54:07.478 00:05:08.788 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 02:54:16.265 00:05:00.847 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 Summary: total flows: 324, total bytes: 96116, total packets: 1417, avg bps: 199, avg pps: 0, avg bpp: 67 Time window: 2025-12-04 01:55:07 - 2025-12-04 02:59:17 Total flows processed: 324, passed: 324, Blocks skipped: 0, Bytes read: 33760 Sys: 0.0019s User: 0.0038s Wall: 0.0030s flows/second: 108360.9 Runtime: 0.0030s