Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-04 04:55:07.510 00:05:08.914 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 04:59:47.468 00:00:00.000 UDP 28.104.0.1:42605 -> 198.28.0.2:53 1 64 1 2025-12-04 04:59:47.468 00:00:00.000 UDP 28.104.0.1:45902 -> 198.28.0.2:53 1 64 1 2025-12-04 04:59:47.478 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42605 1 80 1 2025-12-04 04:59:47.478 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45902 1 109 1 2025-12-04 04:56:16.295 00:04:00.491 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-12-04 05:00:48.243 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55734 1 80 1 2025-12-04 05:00:48.243 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46155 1 109 1 2025-12-04 05:00:48.234 00:00:00.000 UDP 28.104.0.1:46155 -> 198.28.0.2:53 1 64 1 2025-12-04 05:00:48.233 00:00:00.000 UDP 28.104.0.1:55734 -> 198.28.0.2:53 1 64 1 2025-12-04 05:01:48.525 00:00:00.000 UDP 28.104.0.1:54960 -> 198.28.0.2:53 1 64 1 2025-12-04 05:01:48.525 00:00:00.000 UDP 28.104.0.1:36867 -> 198.28.0.2:53 1 64 1 2025-12-04 05:01:48.536 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36867 1 80 1 2025-12-04 05:01:48.536 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54960 1 109 1 2025-12-04 05:01:54.298 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 05:02:49.374 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55163 1 80 1 2025-12-04 05:02:49.374 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39617 1 109 1 2025-12-04 05:02:49.366 00:00:00.000 UDP 28.104.0.1:39617 -> 198.28.0.2:53 1 64 1 2025-12-04 05:02:49.365 00:00:00.000 UDP 28.104.0.1:55163 -> 198.28.0.2:53 1 64 1 2025-12-04 04:59:15.237 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2528 1 2025-12-04 05:03:49.884 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58263 1 109 1 2025-12-04 05:03:49.884 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60591 1 80 1 2025-12-04 05:03:49.874 00:00:00.000 UDP 28.104.0.1:60591 -> 198.28.0.2:53 1 64 1 2025-12-04 05:03:49.874 00:00:00.000 UDP 28.104.0.1:58263 -> 198.28.0.2:53 1 64 1 2025-12-04 05:00:07.520 00:05:08.777 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 05:00:07.560 00:05:08.853 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 05:00:07.510 00:05:08.797 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 05:00:16.295 00:05:00.847 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 05:04:50.137 00:00:00.000 UDP 28.104.0.1:44177 -> 198.28.0.2:53 1 64 1 2025-12-04 05:04:50.137 00:00:00.000 UDP 28.104.0.1:58804 -> 198.28.0.2:53 1 64 1 2025-12-04 05:04:50.148 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44177 1 80 1 2025-12-04 05:04:50.148 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58804 1 109 1 2025-12-04 05:01:16.295 00:04:00.493 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-12-04 05:01:07.510 00:05:08.913 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 05:05:50.449 00:00:00.000 UDP 28.104.0.1:40954 -> 198.28.0.2:53 1 64 1 2025-12-04 05:05:50.449 00:00:00.000 UDP 28.104.0.1:48372 -> 198.28.0.2:53 1 64 1 2025-12-04 05:05:50.459 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40954 1 80 1 2025-12-04 05:05:50.459 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48372 1 109 1 2025-12-04 05:06:50.746 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42409 1 109 1 2025-12-04 05:06:50.746 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46456 1 80 1 2025-12-04 05:06:50.735 00:00:00.000 UDP 28.104.0.1:42409 -> 198.28.0.2:53 1 64 1 2025-12-04 05:06:50.735 00:00:00.000 UDP 28.104.0.1:46456 -> 198.28.0.2:53 1 64 1 2025-12-04 05:06:54.411 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 05:07:51.049 00:00:00.000 UDP 28.104.0.1:55946 -> 198.28.0.2:53 1 64 1 2025-12-04 05:07:51.049 00:00:00.000 UDP 28.104.0.1:41552 -> 198.28.0.2:53 1 64 1 2025-12-04 05:07:51.059 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41552 1 80 1 2025-12-04 05:07:51.059 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55946 1 109 1 2025-12-04 05:04:35.240 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 44 3240 1 2025-12-04 05:08:51.303 00:00:00.000 UDP 28.104.0.1:51773 -> 198.28.0.2:53 1 64 1 2025-12-04 05:08:51.303 00:00:00.000 UDP 28.104.0.1:36154 -> 198.28.0.2:53 1 64 1 2025-12-04 05:08:51.313 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36154 1 80 1 2025-12-04 05:08:51.313 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51773 1 109 1 2025-12-04 05:09:51.599 00:00:00.000 UDP 28.104.0.1:33140 -> 198.28.0.2:53 1 64 1 2025-12-04 05:09:51.599 00:00:00.000 UDP 28.104.0.1:34926 -> 198.28.0.2:53 1 64 1 2025-12-04 05:09:51.609 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33140 1 109 1 2025-12-04 05:09:51.609 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34926 1 80 1 2025-12-04 05:06:16.297 00:04:00.492 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-12-04 05:06:07.513 00:05:08.796 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 05:06:07.562 00:05:08.853 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 05:06:07.522 00:05:08.776 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 05:06:16.297 00:05:00.850 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 05:10:51.891 00:00:00.000 UDP 28.104.0.1:38493 -> 198.28.0.2:53 1 64 1 2025-12-04 05:10:51.891 00:00:00.000 UDP 28.104.0.1:44790 -> 198.28.0.2:53 1 64 1 2025-12-04 05:10:51.902 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44790 1 80 1 2025-12-04 05:10:51.902 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38493 1 109 1 2025-12-04 05:07:07.511 00:05:08.913 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 05:11:54.134 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 05:11:52.207 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45788 1 109 1 2025-12-04 05:11:52.207 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50162 1 80 1 2025-12-04 05:11:52.197 00:00:00.000 UDP 28.104.0.1:45788 -> 198.28.0.2:53 1 64 1 2025-12-04 05:11:52.197 00:00:00.000 UDP 28.104.0.1:50162 -> 198.28.0.2:53 1 64 1 2025-12-04 05:11:16.298 00:01:00.491 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 05:12:52.462 00:00:00.000 UDP 28.104.0.1:60450 -> 198.28.0.2:53 1 64 1 2025-12-04 05:12:52.462 00:00:00.000 UDP 28.104.0.1:33567 -> 198.28.0.2:53 1 64 1 2025-12-04 05:12:52.472 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60450 1 80 1 2025-12-04 05:12:52.472 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33567 1 109 1 2025-12-04 05:13:52.753 00:00:00.000 UDP 28.104.0.1:50879 -> 198.28.0.2:53 1 64 1 2025-12-04 05:13:52.753 00:00:00.000 UDP 28.104.0.1:54811 -> 198.28.0.2:53 1 64 1 2025-12-04 05:13:52.762 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50879 1 80 1 2025-12-04 05:13:52.762 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54811 1 109 1 2025-12-04 05:09:55.245 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 33 2240 1 2025-12-04 05:14:53.055 00:00:00.000 UDP 28.104.0.1:34314 -> 198.28.0.2:53 1 64 1 2025-12-04 05:14:53.055 00:00:00.000 UDP 28.104.0.1:53605 -> 198.28.0.2:53 1 64 1 2025-12-04 05:14:53.064 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53605 1 80 1 2025-12-04 05:14:53.064 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34314 1 109 1 2025-12-04 05:13:16.300 00:02:00.490 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-12-04 05:15:53.309 00:00:00.000 UDP 28.104.0.1:52088 -> 198.28.0.2:53 1 64 1 2025-12-04 05:15:53.309 00:00:00.000 UDP 28.104.0.1:58755 -> 198.28.0.2:53 1 64 1 2025-12-04 05:15:53.318 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58755 1 80 1 2025-12-04 05:15:53.318 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52088 1 109 1 2025-12-04 05:12:07.562 00:05:08.855 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 05:12:07.522 00:05:08.779 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 05:12:16.298 00:05:00.851 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 05:12:07.511 00:05:08.799 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 05:16:53.608 00:00:00.000 UDP 28.104.0.1:44036 -> 198.28.0.2:53 1 64 1 2025-12-04 05:16:53.608 00:00:00.000 UDP 28.104.0.1:56917 -> 198.28.0.2:53 1 64 1 2025-12-04 05:16:54.525 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 05:16:53.617 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56917 1 80 1 2025-12-04 05:16:53.617 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44036 1 109 1 2025-12-04 05:16:16.300 00:01:00.491 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 05:13:07.512 00:05:08.914 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 05:17:53.903 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58604 1 109 1 2025-12-04 05:17:53.903 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36864 1 80 1 2025-12-04 05:17:53.893 00:00:00.000 UDP 28.104.0.1:36864 -> 198.28.0.2:53 1 64 1 2025-12-04 05:17:53.893 00:00:00.000 UDP 28.104.0.1:58604 -> 198.28.0.2:53 1 64 1 2025-12-04 05:18:54.207 00:00:00.000 UDP 28.104.0.1:43727 -> 198.28.0.2:53 1 64 1 2025-12-04 05:18:54.207 00:00:00.000 UDP 28.104.0.1:44637 -> 198.28.0.2:53 1 64 1 2025-12-04 05:18:54.217 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44637 1 109 1 2025-12-04 05:18:54.217 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43727 1 80 1 2025-12-04 05:15:15.253 00:05:10.012 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2652 1 2025-12-04 05:19:54.503 00:00:00.000 UDP 28.104.0.1:41510 -> 198.28.0.2:53 1 64 1 2025-12-04 05:19:54.503 00:00:00.000 UDP 28.104.0.1:54628 -> 198.28.0.2:53 1 64 1 2025-12-04 05:19:54.514 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54628 1 109 1 2025-12-04 05:19:54.514 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41510 1 80 1 2025-12-04 05:18:16.301 00:02:00.494 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-12-04 05:20:54.800 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32971 1 80 1 2025-12-04 05:20:54.800 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55898 1 109 1 2025-12-04 05:20:54.789 00:00:00.000 UDP 28.104.0.1:32971 -> 198.28.0.2:53 1 64 1 2025-12-04 05:20:54.789 00:00:00.000 UDP 28.104.0.1:55898 -> 198.28.0.2:53 1 64 1 2025-12-04 05:21:55.093 00:00:00.000 UDP 28.104.0.1:45048 -> 198.28.0.2:53 1 64 1 2025-12-04 05:21:55.093 00:00:00.000 UDP 28.104.0.1:50718 -> 198.28.0.2:53 1 64 1 2025-12-04 05:21:54.545 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 05:21:55.105 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45048 1 109 1 2025-12-04 05:21:55.105 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50718 1 80 1 2025-12-04 05:18:07.515 00:05:08.802 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 05:21:16.308 00:01:00.484 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 05:18:07.525 00:05:08.782 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 05:18:16.300 00:05:00.850 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 05:18:07.565 00:05:08.855 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 05:22:55.386 00:00:00.000 UDP 28.104.0.1:51117 -> 198.28.0.2:53 1 64 1 2025-12-04 05:22:55.386 00:00:00.000 UDP 28.104.0.1:45055 -> 198.28.0.2:53 1 64 1 2025-12-04 05:22:55.396 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51117 1 109 1 2025-12-04 05:22:55.396 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45055 1 80 1 2025-12-04 05:19:07.516 00:05:08.915 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 05:23:55.688 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60531 1 80 1 2025-12-04 05:23:55.688 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56123 1 109 1 2025-12-04 05:23:55.678 00:00:00.000 UDP 28.104.0.1:56123 -> 198.28.0.2:53 1 64 1 2025-12-04 05:23:55.678 00:00:00.000 UDP 28.104.0.1:60531 -> 198.28.0.2:53 1 64 1 2025-12-04 05:20:35.265 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2920 1 2025-12-04 05:24:55.969 00:00:00.000 UDP 28.104.0.1:58584 -> 198.28.0.2:53 1 64 1 2025-12-04 05:24:55.969 00:00:00.000 UDP 28.104.0.1:36858 -> 198.28.0.2:53 1 64 1 2025-12-04 05:24:55.980 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36858 1 80 1 2025-12-04 05:24:55.980 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58584 1 109 1 2025-12-04 05:23:16.308 00:02:00.485 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-12-04 05:25:56.335 00:00:00.000 UDP 28.104.0.1:51019 -> 198.28.0.2:53 1 64 1 2025-12-04 05:25:56.335 00:00:00.000 UDP 28.104.0.1:35467 -> 198.28.0.2:53 1 64 1 2025-12-04 05:25:56.347 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51019 1 80 1 2025-12-04 05:25:56.347 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35467 1 109 1 2025-12-04 05:26:54.600 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 05:26:56.639 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39515 1 109 1 2025-12-04 05:26:56.639 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37901 1 80 1 2025-12-04 05:26:56.629 00:00:00.000 UDP 28.104.0.1:37901 -> 198.28.0.2:53 1 64 1 2025-12-04 05:26:56.629 00:00:00.000 UDP 28.104.0.1:39515 -> 198.28.0.2:53 1 64 1 2025-12-04 05:26:16.308 00:01:00.485 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 05:27:56.929 00:00:00.000 UDP 28.104.0.1:48091 -> 198.28.0.2:53 1 64 1 2025-12-04 05:27:56.929 00:00:00.000 UDP 28.104.0.1:44911 -> 198.28.0.2:53 1 64 1 2025-12-04 05:27:56.939 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48091 1 80 1 2025-12-04 05:27:56.938 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44911 1 109 1 2025-12-04 05:24:07.566 00:05:08.855 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 05:24:07.526 00:05:08.783 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 05:24:16.308 00:05:00.842 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 05:24:07.515 00:05:08.803 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 05:28:57.287 00:00:00.000 UDP 28.104.0.1:33333 -> 198.28.0.2:53 1 64 1 2025-12-04 05:28:57.287 00:00:00.000 UDP 28.104.0.1:35157 -> 198.28.0.2:53 1 64 1 2025-12-04 05:28:57.297 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35157 1 80 1 2025-12-04 05:28:57.297 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33333 1 109 1 2025-12-04 05:25:07.516 00:05:08.916 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 05:29:57.558 00:00:00.000 UDP 28.104.0.1:40042 -> 198.28.0.2:53 1 64 1 2025-12-04 05:29:57.558 00:00:00.000 UDP 28.104.0.1:45638 -> 198.28.0.2:53 1 64 1 2025-12-04 05:29:57.569 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40042 1 109 1 2025-12-04 05:29:57.572 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45638 1 80 1 2025-12-04 05:25:55.272 00:05:10.018 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2672 1 2025-12-04 05:28:16.309 00:02:00.485 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-12-04 05:30:57.851 00:00:00.000 UDP 28.104.0.1:54104 -> 198.28.0.2:53 1 64 1 2025-12-04 05:30:57.851 00:00:00.000 UDP 28.104.0.1:32912 -> 198.28.0.2:53 1 64 1 2025-12-04 05:30:57.863 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32912 1 109 1 2025-12-04 05:30:57.863 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54104 1 80 1 2025-12-04 05:31:58.128 00:00:00.000 UDP 28.104.0.1:57024 -> 198.28.0.2:53 1 64 1 2025-12-04 05:31:58.128 00:00:00.000 UDP 28.104.0.1:43881 -> 198.28.0.2:53 1 64 1 2025-12-04 05:31:54.807 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 05:31:58.138 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57024 1 109 1 2025-12-04 05:31:58.138 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43881 1 80 1 2025-12-04 05:31:16.308 00:01:00.485 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 05:32:58.424 00:00:00.000 UDP 28.104.0.1:35829 -> 198.28.0.2:53 1 64 1 2025-12-04 05:32:58.424 00:00:00.000 UDP 28.104.0.1:51165 -> 198.28.0.2:53 1 64 1 2025-12-04 05:32:58.435 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51165 1 80 1 2025-12-04 05:32:58.435 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35829 1 109 1 2025-12-04 05:33:58.730 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57858 1 109 1 2025-12-04 05:33:58.730 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39319 1 80 1 2025-12-04 05:33:58.720 00:00:00.000 UDP 28.104.0.1:39319 -> 198.28.0.2:53 1 64 1 2025-12-04 05:33:58.720 00:00:00.000 UDP 28.104.0.1:57858 -> 198.28.0.2:53 1 64 1 2025-12-04 05:30:07.519 00:05:08.801 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 05:30:07.569 00:05:08.854 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 05:30:07.529 00:05:08.781 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 05:30:16.310 00:05:00.842 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 05:34:59.021 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53706 1 109 1 2025-12-04 05:34:59.020 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59552 1 80 1 2025-12-04 05:34:59.010 00:00:00.000 UDP 28.104.0.1:53706 -> 198.28.0.2:53 1 64 1 2025-12-04 05:34:59.010 00:00:00.000 UDP 28.104.0.1:59552 -> 198.28.0.2:53 1 64 1 2025-12-04 05:31:07.518 00:05:08.914 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 05:31:15.290 00:05:10.009 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2952 1 2025-12-04 05:35:59.352 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44728 1 80 1 2025-12-04 05:35:59.352 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41237 1 109 1 2025-12-04 05:35:59.342 00:00:00.000 UDP 28.104.0.1:44728 -> 198.28.0.2:53 1 64 1 2025-12-04 05:35:59.342 00:00:00.000 UDP 28.104.0.1:41237 -> 198.28.0.2:53 1 64 1 2025-12-04 05:36:54.660 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 05:36:59.643 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38750 1 109 1 2025-12-04 05:36:59.643 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35799 1 80 1 2025-12-04 05:36:59.634 00:00:00.000 UDP 28.104.0.1:38750 -> 198.28.0.2:53 1 64 1 2025-12-04 05:36:59.634 00:00:00.000 UDP 28.104.0.1:35799 -> 198.28.0.2:53 1 64 1 2025-12-04 05:33:16.309 00:04:00.486 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-12-04 05:37:59.880 00:00:00.000 UDP 28.104.0.1:60151 -> 198.28.0.2:53 1 64 1 2025-12-04 05:37:59.880 00:00:00.000 UDP 28.104.0.1:36660 -> 198.28.0.2:53 1 64 1 2025-12-04 05:37:59.890 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36660 1 109 1 2025-12-04 05:37:59.890 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60151 1 80 1 2025-12-04 05:39:00.178 00:00:00.000 UDP 28.104.0.1:53193 -> 198.28.0.2:53 1 64 1 2025-12-04 05:39:00.178 00:00:00.000 UDP 28.104.0.1:37742 -> 198.28.0.2:53 1 64 1 2025-12-04 05:39:00.189 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37742 1 109 1 2025-12-04 05:39:00.189 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53193 1 80 1 2025-12-04 05:40:00.481 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45761 1 80 1 2025-12-04 05:40:00.481 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36146 1 109 1 2025-12-04 05:40:00.472 00:00:00.000 UDP 28.104.0.1:45761 -> 198.28.0.2:53 1 64 1 2025-12-04 05:40:00.472 00:00:00.000 UDP 28.104.0.1:36146 -> 198.28.0.2:53 1 64 1 2025-12-04 05:36:07.518 00:05:08.802 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 05:36:07.529 00:05:08.781 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 05:36:16.311 00:05:00.842 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 05:36:07.570 00:05:08.856 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 05:36:35.299 00:05:10.015 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2672 1 2025-12-04 05:41:00.811 00:00:00.000 UDP 28.104.0.1:48020 -> 198.28.0.2:53 1 64 1 2025-12-04 05:41:00.811 00:00:00.000 UDP 28.104.0.1:42711 -> 198.28.0.2:53 1 64 1 2025-12-04 05:41:00.822 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48020 1 80 1 2025-12-04 05:41:00.822 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42711 1 109 1 2025-12-04 05:37:07.519 00:05:08.915 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 05:41:54.711 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 05:42:01.132 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48791 1 80 1 2025-12-04 05:42:01.132 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45255 1 109 1 2025-12-04 05:42:01.121 00:00:00.000 UDP 28.104.0.1:45255 -> 198.28.0.2:53 1 64 1 2025-12-04 05:42:01.122 00:00:00.000 UDP 28.104.0.1:48791 -> 198.28.0.2:53 1 64 1 2025-12-04 05:38:16.310 00:04:00.487 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-12-04 05:43:01.385 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33445 1 80 1 2025-12-04 05:43:01.385 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35331 1 109 1 2025-12-04 05:43:01.376 00:00:00.000 UDP 28.104.0.1:35331 -> 198.28.0.2:53 1 64 1 2025-12-04 05:43:01.376 00:00:00.000 UDP 28.104.0.1:33445 -> 198.28.0.2:53 1 64 1 2025-12-04 05:44:01.682 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43063 1 109 1 2025-12-04 05:44:01.682 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41025 1 80 1 2025-12-04 05:44:01.665 00:00:00.000 UDP 28.104.0.1:41025 -> 198.28.0.2:53 1 64 1 2025-12-04 05:44:01.665 00:00:00.000 UDP 28.104.0.1:43063 -> 198.28.0.2:53 1 64 1 2025-12-04 05:45:01.978 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38637 1 109 1 2025-12-04 05:45:01.978 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46009 1 80 1 2025-12-04 05:45:01.968 00:00:00.000 UDP 28.104.0.1:38637 -> 198.28.0.2:53 1 64 1 2025-12-04 05:45:01.968 00:00:00.000 UDP 28.104.0.1:46009 -> 198.28.0.2:53 1 64 1 2025-12-04 05:46:02.264 00:00:00.000 UDP 28.104.0.1:47396 -> 198.28.0.2:53 1 64 1 2025-12-04 05:46:02.264 00:00:00.000 UDP 28.104.0.1:53369 -> 198.28.0.2:53 1 64 1 2025-12-04 05:41:55.315 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2384 1 2025-12-04 05:46:02.274 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47396 1 109 1 2025-12-04 05:46:02.274 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53369 1 80 1 2025-12-04 05:42:07.520 00:05:08.801 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 05:42:07.570 00:05:08.857 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 05:42:07.530 00:05:08.781 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 05:42:16.311 00:05:00.845 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 05:46:55.397 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 05:47:02.549 00:00:00.000 UDP 28.104.0.1:58365 -> 198.28.0.2:53 1 64 1 2025-12-04 05:47:02.549 00:00:00.000 UDP 28.104.0.1:52934 -> 198.28.0.2:53 1 64 1 2025-12-04 05:47:02.560 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52934 1 80 1 2025-12-04 05:47:02.560 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58365 1 109 1 2025-12-04 05:43:16.311 00:04:00.492 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-12-04 05:43:07.521 00:05:08.914 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 05:48:02.803 00:00:00.000 UDP 28.104.0.1:40587 -> 198.28.0.2:53 1 64 1 2025-12-04 05:48:02.803 00:00:00.000 UDP 28.104.0.1:33210 -> 198.28.0.2:53 1 64 1 2025-12-04 05:48:02.815 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40587 1 80 1 2025-12-04 05:48:02.815 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33210 1 109 1 2025-12-04 05:49:03.102 00:00:00.000 UDP 28.104.0.1:54160 -> 198.28.0.2:53 1 64 1 2025-12-04 05:49:03.101 00:00:00.000 UDP 28.104.0.1:54829 -> 198.28.0.2:53 1 64 1 2025-12-04 05:49:03.112 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54829 1 109 1 2025-12-04 05:49:03.112 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54160 1 80 1 2025-12-04 05:48:16.311 00:01:00.492 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 05:50:03.398 00:00:00.000 UDP 28.104.0.1:59913 -> 198.28.0.2:53 1 64 1 2025-12-04 05:50:03.398 00:00:00.000 UDP 28.104.0.1:60495 -> 198.28.0.2:53 1 64 1 2025-12-04 05:50:03.409 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60495 1 109 1 2025-12-04 05:50:03.409 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59913 1 80 1 2025-12-04 05:51:03.690 00:00:00.000 UDP 28.104.0.1:43628 -> 198.28.0.2:53 1 64 1 2025-12-04 05:51:03.690 00:00:00.000 UDP 28.104.0.1:38682 -> 198.28.0.2:53 1 64 1 2025-12-04 05:51:03.699 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38682 1 109 1 2025-12-04 05:51:03.699 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43628 1 80 1 2025-12-04 05:47:15.319 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2772 1 2025-12-04 05:51:55.035 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 05:52:03.992 00:00:00.000 UDP 28.104.0.1:32942 -> 198.28.0.2:53 1 64 1 2025-12-04 05:52:03.992 00:00:00.000 UDP 28.104.0.1:48401 -> 198.28.0.2:53 1 64 1 2025-12-04 05:52:04.006 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32942 1 80 1 2025-12-04 05:52:04.006 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48401 1 109 1 2025-12-04 05:50:16.312 00:02:00.492 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-12-04 05:48:07.524 00:05:08.798 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 05:48:07.576 00:05:08.851 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 05:48:07.535 00:05:08.778 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 05:48:16.312 00:05:00.849 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 05:53:04.304 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53634 1 109 1 2025-12-04 05:53:04.304 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47115 1 80 1 2025-12-04 05:53:04.295 00:00:00.000 UDP 28.104.0.1:53634 -> 198.28.0.2:53 1 64 1 2025-12-04 05:53:04.294 00:00:00.000 UDP 28.104.0.1:47115 -> 198.28.0.2:53 1 64 1 2025-12-04 05:49:07.527 00:05:08.911 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 05:54:04.581 00:00:00.000 UDP 28.104.0.1:33911 -> 198.28.0.2:53 1 64 1 2025-12-04 05:54:04.580 00:00:00.000 UDP 28.104.0.1:35707 -> 198.28.0.2:53 1 64 1 2025-12-04 05:54:04.591 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33911 1 109 1 2025-12-04 05:54:04.591 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35707 1 80 1 2025-12-04 05:53:16.312 00:01:00.492 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 05:55:04.875 00:00:00.000 UDP 28.104.0.1:37534 -> 198.28.0.2:53 1 64 1 2025-12-04 05:55:04.875 00:00:00.000 UDP 28.104.0.1:50979 -> 198.28.0.2:53 1 64 1 2025-12-04 05:55:04.885 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37534 1 80 1 2025-12-04 05:55:04.885 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50979 1 109 1 2025-12-04 05:56:05.193 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45443 1 80 1 2025-12-04 05:56:05.193 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50432 1 109 1 2025-12-04 05:56:05.183 00:00:00.000 UDP 28.104.0.1:50432 -> 198.28.0.2:53 1 64 1 2025-12-04 05:56:05.183 00:00:00.000 UDP 28.104.0.1:45443 -> 198.28.0.2:53 1 64 1 2025-12-04 05:52:35.323 00:05:10.010 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2896 1 2025-12-04 05:56:55.125 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 05:57:05.477 00:00:00.000 UDP 28.104.0.1:55690 -> 198.28.0.2:53 1 64 1 2025-12-04 05:57:05.477 00:00:00.000 UDP 28.104.0.1:50575 -> 198.28.0.2:53 1 64 1 2025-12-04 05:57:05.486 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55690 1 80 1 2025-12-04 05:57:05.486 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50575 1 109 1 2025-12-04 05:55:16.313 00:02:00.493 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-12-04 05:58:05.777 00:00:00.000 UDP 28.104.0.1:56666 -> 198.28.0.2:53 1 64 1 2025-12-04 05:58:05.777 00:00:00.000 UDP 28.104.0.1:41954 -> 198.28.0.2:53 1 64 1 2025-12-04 05:58:05.786 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41954 1 80 1 2025-12-04 05:58:05.786 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56666 1 109 1 2025-12-04 05:54:07.577 00:05:08.851 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 05:54:07.537 00:05:08.776 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 05:54:16.313 00:05:00.849 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 05:54:07.526 00:05:08.796 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 Summary: total flows: 328, total bytes: 96181, total packets: 1420, avg bps: 199, avg pps: 0, avg bpp: 67 Time window: 2025-12-04 04:55:07 - 2025-12-04 05:59:17 Total flows processed: 328, passed: 328, Blocks skipped: 0, Bytes read: 34176 Sys: 0.0036s User: 0.0045s Wall: 0.0040s flows/second: 81752.5 Runtime: 0.0040s