Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-04 02:59:08.190 00:00:00.000 UDP 28.104.0.1:36781 -> 198.28.0.2:53 1 64 1 2025-12-04 02:59:08.190 00:00:00.000 UDP 28.104.0.1:46198 -> 198.28.0.2:53 1 64 1 2025-12-04 02:59:08.200 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46198 1 80 1 2025-12-04 02:59:08.200 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36781 1 109 1 2025-12-04 02:55:07.469 00:05:08.921 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 03:00:08.485 00:00:00.000 UDP 28.104.0.1:56535 -> 198.28.0.2:53 1 64 1 2025-12-04 03:00:08.485 00:00:00.000 UDP 28.104.0.1:58145 -> 198.28.0.2:53 1 64 1 2025-12-04 03:00:08.497 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58145 1 80 1 2025-12-04 03:00:08.497 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56535 1 109 1 2025-12-04 02:56:35.056 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2568 1 2025-12-04 03:01:08.780 00:00:00.000 UDP 28.104.0.1:37659 -> 198.28.0.2:53 1 64 1 2025-12-04 03:01:08.780 00:00:00.000 UDP 28.104.0.1:49926 -> 198.28.0.2:53 1 64 1 2025-12-04 03:01:08.790 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49926 1 109 1 2025-12-04 03:01:08.790 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37659 1 80 1 2025-12-04 03:01:51.981 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 03:02:09.085 00:00:00.000 UDP 28.104.0.1:33840 -> 198.28.0.2:53 1 64 1 2025-12-04 03:02:09.084 00:00:00.000 UDP 28.104.0.1:40670 -> 198.28.0.2:53 1 64 1 2025-12-04 03:02:09.095 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40670 1 80 1 2025-12-04 03:02:09.095 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33840 1 109 1 2025-12-04 02:58:16.266 00:04:00.497 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-12-04 03:03:09.338 00:00:00.000 UDP 28.104.0.1:33802 -> 198.28.0.2:53 1 64 1 2025-12-04 03:03:09.338 00:00:00.000 UDP 28.104.0.1:60262 -> 198.28.0.2:53 1 64 1 2025-12-04 03:03:09.349 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60262 1 80 1 2025-12-04 03:03:09.349 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33802 1 109 1 2025-12-04 03:04:09.642 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32923 1 80 1 2025-12-04 03:04:09.642 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46380 1 109 1 2025-12-04 03:04:09.633 00:00:00.000 UDP 28.104.0.1:46380 -> 198.28.0.2:53 1 64 1 2025-12-04 03:04:09.633 00:00:00.000 UDP 28.104.0.1:32923 -> 198.28.0.2:53 1 64 1 2025-12-04 03:03:16.267 00:01:00.496 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 03:00:07.469 00:05:08.808 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 03:00:07.520 00:05:08.861 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 03:00:07.480 00:05:08.787 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 03:00:16.267 00:05:00.846 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 03:05:10.159 00:00:00.000 UDP 28.104.0.1:53823 -> 198.28.0.2:53 1 64 1 2025-12-04 03:05:10.159 00:00:00.000 UDP 28.104.0.1:53751 -> 198.28.0.2:53 1 64 1 2025-12-04 03:05:10.169 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53751 1 80 1 2025-12-04 03:05:10.169 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53823 1 109 1 2025-12-04 03:01:07.469 00:05:08.921 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 03:01:55.062 00:05:10.015 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2816 1 2025-12-04 03:06:10.463 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50868 1 109 1 2025-12-04 03:06:10.463 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58794 1 80 1 2025-12-04 03:06:10.455 00:00:00.000 UDP 28.104.0.1:50868 -> 198.28.0.2:53 1 64 1 2025-12-04 03:06:10.454 00:00:00.000 UDP 28.104.0.1:58794 -> 198.28.0.2:53 1 64 1 2025-12-04 03:06:51.751 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 03:07:10.768 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51806 1 80 1 2025-12-04 03:07:10.769 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51390 1 109 1 2025-12-04 03:07:10.759 00:00:00.000 UDP 28.104.0.1:51806 -> 198.28.0.2:53 1 64 1 2025-12-04 03:07:10.759 00:00:00.000 UDP 28.104.0.1:51390 -> 198.28.0.2:53 1 64 1 2025-12-04 03:05:16.267 00:02:00.496 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-12-04 03:08:11.014 00:00:00.000 UDP 28.104.0.1:41823 -> 198.28.0.2:53 1 64 1 2025-12-04 03:08:11.016 00:00:00.000 UDP 28.104.0.1:42266 -> 198.28.0.2:53 1 64 1 2025-12-04 03:08:11.025 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41823 1 109 1 2025-12-04 03:08:11.029 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42266 1 80 1 2025-12-04 03:09:11.830 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50685 1 80 1 2025-12-04 03:09:11.830 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50974 1 109 1 2025-12-04 03:09:11.819 00:00:00.000 UDP 28.104.0.1:50974 -> 198.28.0.2:53 1 64 1 2025-12-04 03:09:11.819 00:00:00.000 UDP 28.104.0.1:50685 -> 198.28.0.2:53 1 64 1 2025-12-04 03:08:16.266 00:01:00.496 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 03:10:12.087 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54675 1 109 1 2025-12-04 03:10:12.087 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53222 1 80 1 2025-12-04 03:06:07.522 00:05:08.861 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 03:10:12.076 00:00:00.000 UDP 28.104.0.1:53222 -> 198.28.0.2:53 1 64 1 2025-12-04 03:10:12.076 00:00:00.000 UDP 28.104.0.1:54675 -> 198.28.0.2:53 1 64 1 2025-12-04 03:06:07.482 00:05:08.786 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 03:06:16.266 00:05:00.848 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 03:06:07.473 00:05:08.806 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 03:11:12.369 00:00:00.000 UDP 28.104.0.1:55173 -> 198.28.0.2:53 1 64 1 2025-12-04 03:11:12.369 00:00:00.000 UDP 28.104.0.1:47829 -> 198.28.0.2:53 1 64 1 2025-12-04 03:11:12.379 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47829 1 80 1 2025-12-04 03:11:12.379 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55173 1 109 1 2025-12-04 03:07:07.472 00:05:08.922 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 03:07:15.078 00:05:10.009 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2968 1 2025-12-04 03:11:51.772 00:00:00.029 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 03:12:12.671 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35530 1 109 1 2025-12-04 03:12:12.671 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36944 1 80 1 2025-12-04 03:12:12.663 00:00:00.000 UDP 28.104.0.1:35530 -> 198.28.0.2:53 1 64 1 2025-12-04 03:12:12.663 00:00:00.000 UDP 28.104.0.1:36944 -> 198.28.0.2:53 1 64 1 2025-12-04 03:10:16.270 00:02:00.495 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-12-04 03:13:12.955 00:00:00.000 UDP 28.104.0.1:38945 -> 198.28.0.2:53 1 64 1 2025-12-04 03:13:12.955 00:00:00.000 UDP 28.104.0.1:40532 -> 198.28.0.2:53 1 64 1 2025-12-04 03:13:12.966 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38945 1 109 1 2025-12-04 03:13:12.965 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40532 1 80 1 2025-12-04 03:14:13.227 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55721 1 80 1 2025-12-04 03:14:13.226 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52721 1 109 1 2025-12-04 03:14:13.215 00:00:00.000 UDP 28.104.0.1:55721 -> 198.28.0.2:53 1 64 1 2025-12-04 03:14:13.215 00:00:00.000 UDP 28.104.0.1:52721 -> 198.28.0.2:53 1 64 1 2025-12-04 03:13:16.269 00:01:00.494 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 03:15:13.508 00:00:00.000 UDP 28.104.0.1:59194 -> 198.28.0.2:53 1 64 1 2025-12-04 03:15:13.508 00:00:00.000 UDP 28.104.0.1:53458 -> 198.28.0.2:53 1 64 1 2025-12-04 03:15:13.519 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59194 1 109 1 2025-12-04 03:15:13.518 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53458 1 80 1 2025-12-04 03:16:13.804 00:00:00.000 UDP 28.104.0.1:51623 -> 198.28.0.2:53 1 64 1 2025-12-04 03:12:07.522 00:05:08.862 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 03:12:07.482 00:05:08.787 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 03:16:13.804 00:00:00.000 UDP 28.104.0.1:57197 -> 198.28.0.2:53 1 64 1 2025-12-04 03:12:07.473 00:05:08.807 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 03:16:13.816 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57197 1 109 1 2025-12-04 03:16:13.816 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51623 1 80 1 2025-12-04 03:12:16.270 00:05:00.846 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 03:12:35.086 00:05:10.009 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2816 1 2025-12-04 03:16:51.715 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 03:17:14.112 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34775 1 80 1 2025-12-04 03:13:07.473 00:05:08.922 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 03:17:14.112 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55818 1 109 1 2025-12-04 03:17:14.101 00:00:00.000 UDP 28.104.0.1:55818 -> 198.28.0.2:53 1 64 1 2025-12-04 03:17:14.101 00:00:00.000 UDP 28.104.0.1:34775 -> 198.28.0.2:53 1 64 1 2025-12-04 03:15:16.269 00:02:00.494 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-12-04 03:18:14.357 00:00:00.000 UDP 28.104.0.1:48996 -> 198.28.0.2:53 1 64 1 2025-12-04 03:18:14.357 00:00:00.000 UDP 28.104.0.1:41314 -> 198.28.0.2:53 1 64 1 2025-12-04 03:18:14.369 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41314 1 80 1 2025-12-04 03:18:14.369 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48996 1 109 1 2025-12-04 03:19:14.657 00:00:00.000 UDP 28.104.0.1:55756 -> 198.28.0.2:53 1 64 1 2025-12-04 03:18:16.270 00:01:00.494 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 03:19:14.656 00:00:00.000 UDP 28.104.0.1:39827 -> 198.28.0.2:53 1 64 1 2025-12-04 03:19:14.668 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55756 1 80 1 2025-12-04 03:19:14.668 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39827 1 109 1 2025-12-04 03:20:14.953 00:00:00.000 UDP 28.104.0.1:36996 -> 198.28.0.2:53 1 64 1 2025-12-04 03:20:14.953 00:00:00.000 UDP 28.104.0.1:54388 -> 198.28.0.2:53 1 64 1 2025-12-04 03:20:14.963 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54388 1 80 1 2025-12-04 03:20:14.963 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36996 1 109 1 2025-12-04 03:21:15.262 00:00:00.000 UDP 28.104.0.1:39622 -> 198.28.0.2:53 1 64 1 2025-12-04 03:21:15.262 00:00:00.000 UDP 28.104.0.1:42965 -> 198.28.0.2:53 1 64 1 2025-12-04 03:21:15.273 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42965 1 109 1 2025-12-04 03:21:15.273 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39622 1 80 1 2025-12-04 03:21:51.781 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 03:17:55.095 00:05:10.009 OSPF 28.0.2.1:0 -> 224.0.0.5:0 33 2240 1 2025-12-04 03:22:15.558 00:00:00.000 UDP 28.104.0.1:39756 -> 198.28.0.2:53 1 64 1 2025-12-04 03:22:15.557 00:00:00.000 UDP 28.104.0.1:42010 -> 198.28.0.2:53 1 64 1 2025-12-04 03:18:07.484 00:05:08.786 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 03:22:15.572 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42010 1 80 1 2025-12-04 03:18:07.475 00:05:08.806 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 03:22:15.571 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39756 1 109 1 2025-12-04 03:18:07.524 00:05:08.861 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 03:18:16.269 00:05:00.849 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 03:23:15.878 00:00:00.000 UDP 28.104.0.1:41527 -> 198.28.0.2:53 1 64 1 2025-12-04 03:23:15.878 00:00:00.000 UDP 28.104.0.1:54925 -> 198.28.0.2:53 1 64 1 2025-12-04 03:23:15.888 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54925 1 80 1 2025-12-04 03:23:15.888 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41527 1 109 1 2025-12-04 03:19:07.474 00:05:08.922 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 03:24:16.154 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59066 1 80 1 2025-12-04 03:24:16.154 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49993 1 109 1 2025-12-04 03:20:16.269 00:04:00.495 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-12-04 03:24:16.142 00:00:00.000 UDP 28.104.0.1:59066 -> 198.28.0.2:53 1 64 1 2025-12-04 03:24:16.142 00:00:00.000 UDP 28.104.0.1:49993 -> 198.28.0.2:53 1 64 1 2025-12-04 03:25:16.435 00:00:00.000 UDP 28.104.0.1:50734 -> 198.28.0.2:53 1 64 1 2025-12-04 03:25:16.435 00:00:00.000 UDP 28.104.0.1:59090 -> 198.28.0.2:53 1 64 1 2025-12-04 03:25:16.445 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59090 1 109 1 2025-12-04 03:25:16.445 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50734 1 80 1 2025-12-04 03:26:16.734 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37313 1 109 1 2025-12-04 03:26:16.734 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33933 1 80 1 2025-12-04 03:26:16.724 00:00:00.000 UDP 28.104.0.1:37313 -> 198.28.0.2:53 1 64 1 2025-12-04 03:26:16.724 00:00:00.000 UDP 28.104.0.1:33933 -> 198.28.0.2:53 1 64 1 2025-12-04 03:26:52.309 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 03:27:17.030 00:00:00.000 UDP 28.104.0.1:56549 -> 198.28.0.2:53 1 64 1 2025-12-04 03:27:17.030 00:00:00.000 UDP 28.104.0.1:57290 -> 198.28.0.2:53 1 64 1 2025-12-04 03:27:17.040 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57290 1 80 1 2025-12-04 03:27:17.040 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56549 1 109 1 2025-12-04 03:23:15.104 00:05:10.010 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2836 1 2025-12-04 03:24:07.525 00:05:08.862 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 03:24:07.485 00:05:08.787 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 03:24:07.474 00:05:08.808 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 03:28:17.333 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37323 1 80 1 2025-12-04 03:28:17.334 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36718 1 109 1 2025-12-04 03:28:17.322 00:00:00.000 UDP 28.104.0.1:37323 -> 198.28.0.2:53 1 64 1 2025-12-04 03:28:17.323 00:00:00.000 UDP 28.104.0.1:36718 -> 198.28.0.2:53 1 64 1 2025-12-04 03:24:16.270 00:05:00.847 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 03:25:07.476 00:05:08.921 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 03:25:16.271 00:04:00.494 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-12-04 03:29:17.624 00:00:00.000 UDP 28.104.0.1:59887 -> 198.28.0.2:53 1 64 1 2025-12-04 03:29:17.624 00:00:00.000 UDP 28.104.0.1:44868 -> 198.28.0.2:53 1 64 1 2025-12-04 03:29:17.635 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59887 1 80 1 2025-12-04 03:29:17.634 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44868 1 109 1 2025-12-04 03:30:17.882 00:00:00.000 UDP 28.104.0.1:55778 -> 198.28.0.2:53 1 64 1 2025-12-04 03:30:17.882 00:00:00.000 UDP 28.104.0.1:37206 -> 198.28.0.2:53 1 64 1 2025-12-04 03:30:17.892 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37206 1 80 1 2025-12-04 03:30:17.892 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55778 1 109 1 2025-12-04 03:31:18.178 00:00:00.000 UDP 28.104.0.1:49433 -> 198.28.0.2:53 1 64 1 2025-12-04 03:31:18.178 00:00:00.000 UDP 28.104.0.1:51074 -> 198.28.0.2:53 1 64 1 2025-12-04 03:31:18.188 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49433 1 80 1 2025-12-04 03:31:18.188 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51074 1 109 1 2025-12-04 03:31:52.255 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 03:32:18.470 00:00:00.000 UDP 28.104.0.1:51745 -> 198.28.0.2:53 1 64 1 2025-12-04 03:32:18.470 00:00:00.000 UDP 28.104.0.1:46103 -> 198.28.0.2:53 1 64 1 2025-12-04 03:32:18.483 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51745 1 80 1 2025-12-04 03:32:18.483 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46103 1 109 1 2025-12-04 03:28:35.114 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2896 1 2025-12-04 03:33:18.776 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43597 1 109 1 2025-12-04 03:33:18.775 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54819 1 80 1 2025-12-04 03:33:18.766 00:00:00.000 UDP 28.104.0.1:43597 -> 198.28.0.2:53 1 64 1 2025-12-04 03:33:18.765 00:00:00.000 UDP 28.104.0.1:54819 -> 198.28.0.2:53 1 64 1 2025-12-04 03:30:16.272 00:04:00.497 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-12-04 03:30:07.476 00:05:08.806 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 03:34:19.129 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40175 1 80 1 2025-12-04 03:34:19.129 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41135 1 109 1 2025-12-04 03:30:07.527 00:05:08.861 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 03:34:19.119 00:00:00.000 UDP 28.104.0.1:40175 -> 198.28.0.2:53 1 64 1 2025-12-04 03:34:19.119 00:00:00.000 UDP 28.104.0.1:41135 -> 198.28.0.2:53 1 64 1 2025-12-04 03:30:07.487 00:05:08.786 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 03:30:16.272 00:05:00.847 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 03:31:07.477 00:05:08.921 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 03:35:19.421 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43143 1 80 1 2025-12-04 03:35:19.421 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49983 1 109 1 2025-12-04 03:35:19.412 00:00:00.000 UDP 28.104.0.1:43143 -> 198.28.0.2:53 1 64 1 2025-12-04 03:35:19.412 00:00:00.000 UDP 28.104.0.1:49983 -> 198.28.0.2:53 1 64 1 2025-12-04 03:36:19.664 00:00:00.000 UDP 28.104.0.1:46980 -> 198.28.0.2:53 1 64 1 2025-12-04 03:36:19.665 00:00:00.000 UDP 28.104.0.1:60203 -> 198.28.0.2:53 1 64 1 2025-12-04 03:36:19.676 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60203 1 109 1 2025-12-04 03:36:19.675 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46980 1 80 1 2025-12-04 03:36:52.401 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 03:37:19.969 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58414 1 80 1 2025-12-04 03:37:19.969 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53128 1 109 1 2025-12-04 03:37:19.959 00:00:00.000 UDP 28.104.0.1:53128 -> 198.28.0.2:53 1 64 1 2025-12-04 03:37:19.959 00:00:00.000 UDP 28.104.0.1:58414 -> 198.28.0.2:53 1 64 1 2025-12-04 03:33:55.119 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2528 1 2025-12-04 03:38:20.255 00:00:00.000 UDP 28.104.0.1:48507 -> 198.28.0.2:53 1 64 1 2025-12-04 03:38:20.255 00:00:00.000 UDP 28.104.0.1:56416 -> 198.28.0.2:53 1 64 1 2025-12-04 03:38:20.266 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48507 1 80 1 2025-12-04 03:38:20.266 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56416 1 109 1 2025-12-04 03:35:16.273 00:04:00.496 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-12-04 03:39:20.560 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44194 1 80 1 2025-12-04 03:39:20.560 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46693 1 109 1 2025-12-04 03:39:20.550 00:00:00.000 UDP 28.104.0.1:44194 -> 198.28.0.2:53 1 64 1 2025-12-04 03:39:20.550 00:00:00.000 UDP 28.104.0.1:46693 -> 198.28.0.2:53 1 64 1 2025-12-04 03:36:07.528 00:05:08.861 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 03:36:07.488 00:05:08.786 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 03:36:07.479 00:05:08.806 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 03:40:20.858 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44094 1 109 1 2025-12-04 03:40:20.858 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47322 1 80 1 2025-12-04 03:40:20.847 00:00:00.000 UDP 28.104.0.1:44094 -> 198.28.0.2:53 1 64 1 2025-12-04 03:36:16.273 00:05:00.848 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 03:40:20.847 00:00:00.000 UDP 28.104.0.1:47322 -> 198.28.0.2:53 1 64 1 2025-12-04 03:40:16.274 00:01:00.496 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 03:41:21.145 00:00:00.000 UDP 28.104.0.1:54498 -> 198.28.0.2:53 1 64 1 2025-12-04 03:41:21.145 00:00:00.000 UDP 28.104.0.1:40047 -> 198.28.0.2:53 1 64 1 2025-12-04 03:37:07.478 00:05:08.921 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 03:41:21.156 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54498 1 80 1 2025-12-04 03:41:21.156 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40047 1 109 1 2025-12-04 03:41:52.554 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 03:42:21.455 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46100 1 109 1 2025-12-04 03:42:21.456 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57909 1 80 1 2025-12-04 03:42:21.445 00:00:00.000 UDP 28.104.0.1:46100 -> 198.28.0.2:53 1 64 1 2025-12-04 03:42:21.445 00:00:00.000 UDP 28.104.0.1:57909 -> 198.28.0.2:53 1 64 1 2025-12-04 03:43:21.710 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43198 1 80 1 2025-12-04 03:43:21.710 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42414 1 109 1 2025-12-04 03:43:21.701 00:00:00.000 UDP 28.104.0.1:43198 -> 198.28.0.2:53 1 64 1 2025-12-04 03:43:21.700 00:00:00.000 UDP 28.104.0.1:42414 -> 198.28.0.2:53 1 64 1 2025-12-04 03:39:15.125 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 45 3304 1 2025-12-04 03:42:16.274 00:02:00.496 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-12-04 03:44:21.968 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59967 1 80 1 2025-12-04 03:44:21.968 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54192 1 109 1 2025-12-04 03:44:21.957 00:00:00.000 UDP 28.104.0.1:54192 -> 198.28.0.2:53 1 64 1 2025-12-04 03:44:21.957 00:00:00.000 UDP 28.104.0.1:59967 -> 198.28.0.2:53 1 64 1 2025-12-04 03:45:22.259 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58425 1 109 1 2025-12-04 03:45:22.259 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60627 1 80 1 2025-12-04 03:45:22.250 00:00:00.000 UDP 28.104.0.1:60627 -> 198.28.0.2:53 1 64 1 2025-12-04 03:45:22.250 00:00:00.000 UDP 28.104.0.1:58425 -> 198.28.0.2:53 1 64 1 2025-12-04 03:45:16.274 00:01:00.497 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 03:42:07.480 00:05:08.805 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 03:42:07.530 00:05:08.860 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 03:42:07.489 00:05:08.786 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 03:42:16.274 00:05:00.847 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 03:46:22.541 00:00:00.000 UDP 28.104.0.1:33951 -> 198.28.0.2:53 1 64 1 2025-12-04 03:46:22.541 00:00:00.000 UDP 28.104.0.1:42901 -> 198.28.0.2:53 1 64 1 2025-12-04 03:46:22.552 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33951 1 109 1 2025-12-04 03:46:22.552 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42901 1 80 1 2025-12-04 03:46:52.525 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 03:43:07.479 00:05:08.920 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 03:47:22.837 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45249 1 80 1 2025-12-04 03:47:22.837 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36165 1 109 1 2025-12-04 03:47:22.829 00:00:00.000 UDP 28.104.0.1:45249 -> 198.28.0.2:53 1 64 1 2025-12-04 03:47:22.829 00:00:00.000 UDP 28.104.0.1:36165 -> 198.28.0.2:53 1 64 1 2025-12-04 03:48:23.136 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44431 1 80 1 2025-12-04 03:48:23.136 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60335 1 109 1 2025-12-04 03:48:23.126 00:00:00.000 UDP 28.104.0.1:60335 -> 198.28.0.2:53 1 64 1 2025-12-04 03:48:23.126 00:00:00.000 UDP 28.104.0.1:44431 -> 198.28.0.2:53 1 64 1 2025-12-04 03:44:35.131 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 34 2304 1 2025-12-04 03:47:16.275 00:02:00.496 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-12-04 03:49:23.413 00:00:00.000 UDP 28.104.0.1:41347 -> 198.28.0.2:53 1 64 1 2025-12-04 03:49:23.413 00:00:00.000 UDP 28.104.0.1:48469 -> 198.28.0.2:53 1 64 1 2025-12-04 03:49:23.423 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41347 1 80 1 2025-12-04 03:49:23.423 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48469 1 109 1 2025-12-04 03:50:23.705 00:00:00.000 UDP 28.104.0.1:36066 -> 198.28.0.2:53 1 64 1 2025-12-04 03:50:23.705 00:00:00.000 UDP 28.104.0.1:48098 -> 198.28.0.2:53 1 64 1 2025-12-04 03:50:23.715 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36066 1 109 1 2025-12-04 03:50:23.715 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48098 1 80 1 2025-12-04 03:50:16.275 00:01:00.496 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 03:51:23.997 00:00:00.000 UDP 28.104.0.1:46308 -> 198.28.0.2:53 1 64 1 2025-12-04 03:51:23.996 00:00:00.000 UDP 28.104.0.1:34986 -> 198.28.0.2:53 1 64 1 2025-12-04 03:51:24.007 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34986 1 109 1 2025-12-04 03:51:24.007 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46308 1 80 1 2025-12-04 03:51:52.462 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 03:48:07.535 00:05:08.858 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 03:48:07.495 00:05:08.781 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 03:48:16.275 00:05:00.848 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 03:48:07.484 00:05:08.802 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 03:52:24.300 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33981 1 109 1 2025-12-04 03:52:24.300 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55316 1 80 1 2025-12-04 03:52:24.290 00:00:00.000 UDP 28.104.0.1:33981 -> 198.28.0.2:53 1 64 1 2025-12-04 03:52:24.290 00:00:00.000 UDP 28.104.0.1:55316 -> 198.28.0.2:53 1 64 1 2025-12-04 03:49:07.486 00:05:08.915 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 03:53:24.542 00:00:00.000 UDP 28.104.0.1:50882 -> 198.28.0.2:53 1 64 1 2025-12-04 03:53:24.542 00:00:00.000 UDP 28.104.0.1:45614 -> 198.28.0.2:53 1 64 1 2025-12-04 03:53:24.552 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45614 1 80 1 2025-12-04 03:53:24.552 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50882 1 109 1 2025-12-04 03:49:55.138 00:05:10.009 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2588 1 2025-12-04 03:54:24.850 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40909 1 109 1 2025-12-04 03:54:24.850 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47627 1 80 1 2025-12-04 03:54:24.840 00:00:00.000 UDP 28.104.0.1:47627 -> 198.28.0.2:53 1 64 1 2025-12-04 03:54:24.840 00:00:00.000 UDP 28.104.0.1:40909 -> 198.28.0.2:53 1 64 1 2025-12-04 03:55:25.131 00:00:00.000 UDP 28.104.0.1:39499 -> 198.28.0.2:53 1 64 1 2025-12-04 03:55:25.131 00:00:00.000 UDP 28.104.0.1:37057 -> 198.28.0.2:53 1 64 1 2025-12-04 03:55:25.140 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37057 1 80 1 2025-12-04 03:55:25.141 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39499 1 109 1 2025-12-04 03:52:16.275 00:04:00.497 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-12-04 03:56:25.426 00:00:00.000 UDP 28.104.0.1:52808 -> 198.28.0.2:53 1 64 1 2025-12-04 03:56:25.426 00:00:00.000 UDP 28.104.0.1:51602 -> 198.28.0.2:53 1 64 1 2025-12-04 03:56:25.436 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51602 1 109 1 2025-12-04 03:56:25.437 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52808 1 80 1 2025-12-04 03:56:52.722 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 03:57:25.684 00:00:00.000 UDP 28.104.0.1:46491 -> 198.28.0.2:53 1 64 1 2025-12-04 03:57:25.684 00:00:00.000 UDP 28.104.0.1:43372 -> 198.28.0.2:53 1 64 1 2025-12-04 03:57:25.694 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46491 1 80 1 2025-12-04 03:57:25.694 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43372 1 109 1 2025-12-04 03:54:07.537 00:05:08.860 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 03:54:07.497 00:05:08.779 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 03:54:07.486 00:05:08.800 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 03:54:16.275 00:05:00.849 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 03:58:25.936 00:00:00.000 UDP 28.104.0.1:53018 -> 198.28.0.2:53 1 64 1 2025-12-04 03:58:25.936 00:00:00.000 UDP 28.104.0.1:55627 -> 198.28.0.2:53 1 64 1 2025-12-04 03:58:25.947 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55627 1 109 1 2025-12-04 03:58:25.947 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53018 1 80 1 Summary: total flows: 331, total bytes: 96065, total packets: 1417, avg bps: 199, avg pps: 0, avg bpp: 67 Time window: 2025-12-04 02:55:07 - 2025-12-04 03:59:17 Total flows processed: 331, passed: 331, Blocks skipped: 0, Bytes read: 34488 Sys: 0.0028s User: 0.0038s Wall: 0.0038s flows/second: 86081.0 Runtime: 0.0039s