Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-04 07:54:45.514 00:05:10.009 OSPF 28.0.2.1:0 -> 224.0.0.5:0 42 3036 1 2025-12-04 07:55:07.553 00:05:08.924 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 07:59:41.434 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34161 1 80 1 2025-12-04 07:59:41.434 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38309 1 109 1 2025-12-04 07:59:41.423 00:00:00.000 UDP 28.104.0.1:34161 -> 198.28.0.2:53 1 64 1 2025-12-04 07:59:41.423 00:00:00.000 UDP 28.104.0.1:38309 -> 198.28.0.2:53 1 64 1 2025-12-04 07:58:16.345 00:02:00.490 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-12-04 08:00:41.713 00:00:00.000 UDP 28.104.0.1:47604 -> 198.28.0.2:53 1 64 1 2025-12-04 08:00:41.713 00:00:00.000 UDP 28.104.0.1:44502 -> 198.28.0.2:53 1 64 1 2025-12-04 08:00:41.724 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44502 1 80 1 2025-12-04 08:00:41.724 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47604 1 109 1 2025-12-04 08:01:42.047 00:00:00.000 UDP 28.104.0.1:56330 -> 198.28.0.2:53 1 64 1 2025-12-04 08:01:42.048 00:00:00.000 UDP 28.104.0.1:43792 -> 198.28.0.2:53 1 64 1 2025-12-04 08:01:42.057 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56330 1 80 1 2025-12-04 08:01:42.058 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43792 1 109 1 2025-12-04 08:01:57.611 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 08:01:16.344 00:01:00.490 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 08:02:42.504 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33043 1 109 1 2025-12-04 08:02:42.504 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55193 1 80 1 2025-12-04 08:02:42.493 00:00:00.000 UDP 28.104.0.1:33043 -> 198.28.0.2:53 1 64 1 2025-12-04 08:02:42.493 00:00:00.000 UDP 28.104.0.1:55193 -> 198.28.0.2:53 1 64 1 2025-12-04 08:03:42.820 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43953 1 109 1 2025-12-04 08:03:42.820 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58166 1 80 1 2025-12-04 08:03:42.808 00:00:00.000 UDP 28.104.0.1:43953 -> 198.28.0.2:53 1 64 1 2025-12-04 08:03:42.808 00:00:00.000 UDP 28.104.0.1:58166 -> 198.28.0.2:53 1 64 1 2025-12-04 08:00:07.605 00:05:08.863 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 08:00:07.565 00:05:08.783 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 08:00:07.555 00:05:08.804 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 08:00:05.523 00:05:10.001 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2488 1 2025-12-04 08:00:16.345 00:05:00.872 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 08:04:43.155 00:00:00.000 UDP 28.104.0.1:55755 -> 198.28.0.2:53 1 64 1 2025-12-04 08:04:43.155 00:00:00.000 UDP 28.104.0.1:59541 -> 198.28.0.2:53 1 64 1 2025-12-04 08:04:43.164 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55755 1 80 1 2025-12-04 08:04:43.164 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59541 1 109 1 2025-12-04 08:03:16.345 00:02:00.491 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-12-04 08:01:07.556 00:05:08.923 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 08:05:43.417 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56040 1 80 1 2025-12-04 08:05:43.417 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42497 1 109 1 2025-12-04 08:05:43.408 00:00:00.000 UDP 28.104.0.1:42497 -> 198.28.0.2:53 1 64 1 2025-12-04 08:05:43.408 00:00:00.000 UDP 28.104.0.1:56040 -> 198.28.0.2:53 1 64 1 2025-12-04 08:06:43.717 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54869 1 80 1 2025-12-04 08:06:43.717 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51094 1 109 1 2025-12-04 08:06:43.706 00:00:00.000 UDP 28.104.0.1:54869 -> 198.28.0.2:53 1 64 1 2025-12-04 08:06:43.706 00:00:00.000 UDP 28.104.0.1:51094 -> 198.28.0.2:53 1 64 1 2025-12-04 08:06:57.619 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 08:06:16.348 00:01:00.487 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 08:07:44.019 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52336 1 80 1 2025-12-04 08:07:44.013 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49804 1 109 1 2025-12-04 08:07:44.000 00:00:00.000 UDP 28.104.0.1:52336 -> 198.28.0.2:53 1 64 1 2025-12-04 08:07:44.000 00:00:00.000 UDP 28.104.0.1:49804 -> 198.28.0.2:53 1 64 1 2025-12-04 08:08:44.462 00:00:00.000 UDP 28.104.0.1:54150 -> 198.28.0.2:53 1 64 1 2025-12-04 08:08:44.462 00:00:00.000 UDP 28.104.0.1:42867 -> 198.28.0.2:53 1 64 1 2025-12-04 08:08:44.473 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42867 1 109 1 2025-12-04 08:08:44.473 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54150 1 80 1 2025-12-04 08:05:25.525 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2652 1 2025-12-04 08:09:44.725 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44715 1 80 1 2025-12-04 08:09:44.726 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48980 1 109 1 2025-12-04 08:09:44.714 00:00:00.000 UDP 28.104.0.1:44715 -> 198.28.0.2:53 1 64 1 2025-12-04 08:09:44.714 00:00:00.000 UDP 28.104.0.1:48980 -> 198.28.0.2:53 1 64 1 2025-12-04 08:08:16.351 00:02:00.485 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-12-04 08:06:07.556 00:05:08.805 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 08:06:07.605 00:05:08.864 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 08:06:07.565 00:05:08.786 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 08:06:16.348 00:05:00.869 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 08:10:45.021 00:00:00.000 UDP 28.104.0.1:37227 -> 198.28.0.2:53 1 64 1 2025-12-04 08:10:45.021 00:00:00.000 UDP 28.104.0.1:40120 -> 198.28.0.2:53 1 64 1 2025-12-04 08:10:45.032 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40120 1 80 1 2025-12-04 08:10:45.032 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37227 1 109 1 2025-12-04 08:07:07.555 00:05:08.924 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 08:11:45.338 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52467 1 109 1 2025-12-04 08:11:45.339 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47002 1 80 1 2025-12-04 08:11:45.327 00:00:00.000 UDP 28.104.0.1:52467 -> 198.28.0.2:53 1 64 1 2025-12-04 08:11:45.327 00:00:00.000 UDP 28.104.0.1:47002 -> 198.28.0.2:53 1 64 1 2025-12-04 08:11:57.826 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 08:11:16.352 00:01:00.485 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 08:12:45.630 00:00:00.000 UDP 28.104.0.1:41822 -> 198.28.0.2:53 1 64 1 2025-12-04 08:12:45.629 00:00:00.000 UDP 28.104.0.1:56764 -> 198.28.0.2:53 1 64 1 2025-12-04 08:12:45.641 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56764 1 80 1 2025-12-04 08:12:45.641 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41822 1 109 1 2025-12-04 08:13:45.926 00:00:00.000 UDP 28.104.0.1:48352 -> 198.28.0.2:53 1 64 1 2025-12-04 08:13:45.926 00:00:00.000 UDP 28.104.0.1:55535 -> 198.28.0.2:53 1 64 1 2025-12-04 08:13:45.935 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55535 1 80 1 2025-12-04 08:13:45.935 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48352 1 109 1 2025-12-04 08:14:46.196 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40550 1 80 1 2025-12-04 08:14:46.196 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35103 1 109 1 2025-12-04 08:14:46.186 00:00:00.000 UDP 28.104.0.1:35103 -> 198.28.0.2:53 1 64 1 2025-12-04 08:14:46.186 00:00:00.000 UDP 28.104.0.1:40550 -> 198.28.0.2:53 1 64 1 2025-12-04 08:10:45.532 00:05:10.013 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2568 1 2025-12-04 08:13:16.353 00:02:00.485 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-12-04 08:15:46.484 00:00:00.000 UDP 28.104.0.1:37889 -> 198.28.0.2:53 1 64 1 2025-12-04 08:15:46.484 00:00:00.000 UDP 28.104.0.1:51358 -> 198.28.0.2:53 1 64 1 2025-12-04 08:15:46.496 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37889 1 80 1 2025-12-04 08:15:46.496 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51358 1 109 1 2025-12-04 08:12:07.606 00:05:08.865 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 08:12:07.566 00:05:08.788 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 08:12:07.556 00:05:08.809 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 08:12:16.353 00:05:00.867 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 08:16:46.783 00:00:00.000 UDP 28.104.0.1:38701 -> 198.28.0.2:53 1 64 1 2025-12-04 08:16:46.782 00:00:00.000 UDP 28.104.0.1:49393 -> 198.28.0.2:53 1 64 1 2025-12-04 08:16:46.792 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38701 1 80 1 2025-12-04 08:16:46.792 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49393 1 109 1 2025-12-04 08:16:57.945 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 08:16:16.355 00:01:00.483 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 08:13:07.557 00:05:08.924 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 08:17:47.105 00:00:00.000 UDP 28.104.0.1:36813 -> 198.28.0.2:53 1 64 1 2025-12-04 08:17:47.105 00:00:00.000 UDP 28.104.0.1:36524 -> 198.28.0.2:53 1 64 1 2025-12-04 08:17:47.116 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36813 1 109 1 2025-12-04 08:17:47.116 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36524 1 80 1 2025-12-04 08:18:47.407 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44165 1 109 1 2025-12-04 08:18:47.407 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38035 1 80 1 2025-12-04 08:18:47.396 00:00:00.000 UDP 28.104.0.1:38035 -> 198.28.0.2:53 1 64 1 2025-12-04 08:18:47.396 00:00:00.000 UDP 28.104.0.1:44165 -> 198.28.0.2:53 1 64 1 2025-12-04 08:19:47.653 00:00:00.000 UDP 28.104.0.1:49862 -> 198.28.0.2:53 1 64 1 2025-12-04 08:19:47.652 00:00:00.000 UDP 28.104.0.1:44761 -> 198.28.0.2:53 1 64 1 2025-12-04 08:19:47.663 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44761 1 80 1 2025-12-04 08:19:47.663 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49862 1 109 1 2025-12-04 08:16:05.546 00:05:10.013 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2752 1 2025-12-04 08:20:47.952 00:00:00.000 UDP 28.104.0.1:46882 -> 198.28.0.2:53 1 64 1 2025-12-04 08:20:47.952 00:00:00.000 UDP 28.104.0.1:40413 -> 198.28.0.2:53 1 64 1 2025-12-04 08:20:47.962 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40413 1 109 1 2025-12-04 08:20:47.962 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46882 1 80 1 2025-12-04 08:21:48.253 00:00:00.000 UDP 28.104.0.1:48428 -> 198.28.0.2:53 1 64 1 2025-12-04 08:21:48.253 00:00:00.000 UDP 28.104.0.1:43804 -> 198.28.0.2:53 1 64 1 2025-12-04 08:21:48.264 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48428 1 80 1 2025-12-04 08:21:48.264 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43804 1 109 1 2025-12-04 08:21:57.910 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 08:18:07.558 00:05:08.808 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 08:18:16.355 00:04:00.484 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-12-04 08:18:07.568 00:05:08.787 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 08:18:16.355 00:05:00.865 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 08:18:07.608 00:05:08.863 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 08:22:48.514 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47175 1 109 1 2025-12-04 08:22:48.514 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52676 1 80 1 2025-12-04 08:22:48.505 00:00:00.000 UDP 28.104.0.1:47175 -> 198.28.0.2:53 1 64 1 2025-12-04 08:22:48.505 00:00:00.000 UDP 28.104.0.1:52676 -> 198.28.0.2:53 1 64 1 2025-12-04 08:19:07.558 00:05:08.924 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 08:23:48.847 00:00:00.000 UDP 28.104.0.1:59927 -> 198.28.0.2:53 1 64 1 2025-12-04 08:23:48.847 00:00:00.000 UDP 28.104.0.1:56299 -> 198.28.0.2:53 1 64 1 2025-12-04 08:23:48.856 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59927 1 109 1 2025-12-04 08:23:48.857 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56299 1 80 1 2025-12-04 08:24:49.106 00:00:00.000 UDP 28.104.0.1:55545 -> 198.28.0.2:53 1 64 1 2025-12-04 08:24:49.107 00:00:00.000 UDP 28.104.0.1:45961 -> 198.28.0.2:53 1 64 1 2025-12-04 08:24:49.115 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55545 1 80 1 2025-12-04 08:24:49.116 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45961 1 109 1 2025-12-04 08:21:25.559 00:05:10.009 OSPF 28.0.2.1:0 -> 224.0.0.5:0 42 2996 1 2025-12-04 08:25:49.400 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50134 1 109 1 2025-12-04 08:25:49.400 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43214 1 80 1 2025-12-04 08:25:49.391 00:00:00.000 UDP 28.104.0.1:43214 -> 198.28.0.2:53 1 64 1 2025-12-04 08:25:49.391 00:00:00.000 UDP 28.104.0.1:50134 -> 198.28.0.2:53 1 64 1 2025-12-04 08:26:49.684 00:00:00.000 UDP 28.104.0.1:32900 -> 198.28.0.2:53 1 64 1 2025-12-04 08:26:49.684 00:00:00.000 UDP 28.104.0.1:50512 -> 198.28.0.2:53 1 64 1 2025-12-04 08:26:49.694 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32900 1 80 1 2025-12-04 08:26:49.694 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50512 1 109 1 2025-12-04 08:26:58.391 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 08:23:16.356 00:04:00.484 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-12-04 08:27:49.938 00:00:00.000 UDP 28.104.0.1:33172 -> 198.28.0.2:53 1 64 1 2025-12-04 08:27:49.938 00:00:00.000 UDP 28.104.0.1:45450 -> 198.28.0.2:53 1 64 1 2025-12-04 08:27:49.947 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45450 1 109 1 2025-12-04 08:27:49.948 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33172 1 80 1 2025-12-04 08:24:07.608 00:05:08.864 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 08:24:07.568 00:05:08.788 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 08:24:07.558 00:05:08.808 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 08:24:16.354 00:05:00.866 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 08:28:50.243 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52138 1 80 1 2025-12-04 08:28:50.243 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57329 1 109 1 2025-12-04 08:28:50.233 00:00:00.000 UDP 28.104.0.1:52138 -> 198.28.0.2:53 1 64 1 2025-12-04 08:28:50.233 00:00:00.000 UDP 28.104.0.1:57329 -> 198.28.0.2:53 1 64 1 2025-12-04 08:28:16.356 00:01:00.484 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 08:25:07.560 00:05:08.923 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 08:29:50.539 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49096 1 80 1 2025-12-04 08:29:50.539 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54371 1 109 1 2025-12-04 08:29:50.529 00:00:00.000 UDP 28.104.0.1:54371 -> 198.28.0.2:53 1 64 1 2025-12-04 08:29:50.529 00:00:00.000 UDP 28.104.0.1:49096 -> 198.28.0.2:53 1 64 1 2025-12-04 08:30:50.776 00:00:00.000 UDP 28.104.0.1:49517 -> 198.28.0.2:53 1 64 1 2025-12-04 08:30:50.776 00:00:00.000 UDP 28.104.0.1:49687 -> 198.28.0.2:53 1 64 1 2025-12-04 08:30:50.786 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49687 1 80 1 2025-12-04 08:30:50.786 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49517 1 109 1 2025-12-04 08:26:45.568 00:05:10.002 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2816 1 2025-12-04 08:31:51.089 00:00:00.000 UDP 28.104.0.1:47015 -> 198.28.0.2:53 1 64 1 2025-12-04 08:31:51.089 00:00:00.000 UDP 28.104.0.1:44403 -> 198.28.0.2:53 1 64 1 2025-12-04 08:31:51.099 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47015 1 109 1 2025-12-04 08:31:51.099 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44403 1 80 1 2025-12-04 08:31:58.165 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 08:30:16.357 00:02:00.484 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-12-04 08:32:51.343 00:00:00.000 UDP 28.104.0.1:45124 -> 198.28.0.2:53 1 64 1 2025-12-04 08:32:51.343 00:00:00.000 UDP 28.104.0.1:41384 -> 198.28.0.2:53 1 64 1 2025-12-04 08:32:51.352 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41384 1 80 1 2025-12-04 08:32:51.353 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45124 1 109 1 2025-12-04 08:33:51.659 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58817 1 80 1 2025-12-04 08:33:51.659 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41727 1 109 1 2025-12-04 08:33:51.648 00:00:00.000 UDP 28.104.0.1:58817 -> 198.28.0.2:53 1 64 1 2025-12-04 08:33:51.648 00:00:00.000 UDP 28.104.0.1:41727 -> 198.28.0.2:53 1 64 1 2025-12-04 08:33:16.358 00:01:00.483 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 08:30:07.562 00:05:08.807 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 08:30:07.611 00:05:08.862 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 08:30:07.571 00:05:08.786 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 08:30:16.356 00:05:00.866 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 08:34:51.950 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46000 1 80 1 2025-12-04 08:34:51.951 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50368 1 109 1 2025-12-04 08:34:51.940 00:00:00.000 UDP 28.104.0.1:46000 -> 198.28.0.2:53 1 64 1 2025-12-04 08:34:51.940 00:00:00.000 UDP 28.104.0.1:50368 -> 198.28.0.2:53 1 64 1 2025-12-04 08:31:07.562 00:05:08.924 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 08:35:52.211 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47786 1 109 1 2025-12-04 08:35:52.211 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54335 1 80 1 2025-12-04 08:35:52.201 00:00:00.000 UDP 28.104.0.1:54335 -> 198.28.0.2:53 1 64 1 2025-12-04 08:35:52.201 00:00:00.000 UDP 28.104.0.1:47786 -> 198.28.0.2:53 1 64 1 2025-12-04 08:32:05.570 00:05:10.001 OSPF 28.0.2.1:0 -> 224.0.0.5:0 33 2240 1 2025-12-04 08:36:52.508 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37399 1 80 1 2025-12-04 08:36:52.508 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49178 1 109 1 2025-12-04 08:36:52.497 00:00:00.000 UDP 28.104.0.1:49178 -> 198.28.0.2:53 1 64 1 2025-12-04 08:36:52.497 00:00:00.000 UDP 28.104.0.1:37399 -> 198.28.0.2:53 1 64 1 2025-12-04 08:36:58.158 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 08:35:16.357 00:02:00.484 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-12-04 08:37:52.751 00:00:00.000 UDP 28.104.0.1:38186 -> 198.28.0.2:53 1 64 1 2025-12-04 08:37:52.751 00:00:00.000 UDP 28.104.0.1:45043 -> 198.28.0.2:53 1 64 1 2025-12-04 08:37:52.762 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45043 1 80 1 2025-12-04 08:37:52.762 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38186 1 109 1 2025-12-04 08:38:53.066 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58293 1 80 1 2025-12-04 08:38:53.065 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34357 1 109 1 2025-12-04 08:38:53.056 00:00:00.000 UDP 28.104.0.1:58293 -> 198.28.0.2:53 1 64 1 2025-12-04 08:38:53.056 00:00:00.000 UDP 28.104.0.1:34357 -> 198.28.0.2:53 1 64 1 2025-12-04 08:38:16.358 00:01:00.483 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 08:39:53.351 00:00:00.000 UDP 28.104.0.1:49170 -> 198.28.0.2:53 1 64 1 2025-12-04 08:39:53.351 00:00:00.000 UDP 28.104.0.1:60106 -> 198.28.0.2:53 1 64 1 2025-12-04 08:39:53.362 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60106 1 80 1 2025-12-04 08:39:53.363 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49170 1 109 1 2025-12-04 08:36:07.612 00:05:08.862 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 08:36:07.572 00:05:08.787 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 08:36:16.358 00:05:00.866 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 08:36:07.562 00:05:08.807 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 08:40:53.643 00:00:00.000 UDP 28.104.0.1:50718 -> 198.28.0.2:53 1 64 1 2025-12-04 08:40:53.643 00:00:00.000 UDP 28.104.0.1:58594 -> 198.28.0.2:53 1 64 1 2025-12-04 08:40:53.653 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58594 1 80 1 2025-12-04 08:40:53.653 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50718 1 109 1 2025-12-04 08:37:07.564 00:05:08.921 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 08:37:25.572 00:05:10.001 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2836 1 2025-12-04 08:41:53.936 00:00:00.000 UDP 28.104.0.1:35819 -> 198.28.0.2:53 1 64 1 2025-12-04 08:41:53.936 00:00:00.000 UDP 28.104.0.1:59306 -> 198.28.0.2:53 1 64 1 2025-12-04 08:41:53.946 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35819 1 80 1 2025-12-04 08:41:53.946 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59306 1 109 1 2025-12-04 08:41:58.375 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 08:40:16.360 00:02:00.482 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-12-04 08:42:54.235 00:00:00.000 UDP 28.104.0.1:42517 -> 198.28.0.2:53 1 64 1 2025-12-04 08:42:54.235 00:00:00.000 UDP 28.104.0.1:60281 -> 198.28.0.2:53 1 64 1 2025-12-04 08:42:54.245 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42517 1 109 1 2025-12-04 08:42:54.245 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60281 1 80 1 2025-12-04 08:43:54.522 00:00:00.000 UDP 28.104.0.1:53539 -> 198.28.0.2:53 1 64 1 2025-12-04 08:43:54.522 00:00:00.000 UDP 28.104.0.1:37914 -> 198.28.0.2:53 1 64 1 2025-12-04 08:43:54.533 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37914 1 80 1 2025-12-04 08:43:54.533 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53539 1 109 1 2025-12-04 08:43:16.360 00:01:00.482 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 08:44:55.200 00:00:00.000 UDP 28.104.0.1:37696 -> 198.28.0.2:53 1 64 1 2025-12-04 08:44:55.200 00:00:00.000 UDP 28.104.0.1:43446 -> 198.28.0.2:53 1 64 1 2025-12-04 08:44:55.212 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37696 1 109 1 2025-12-04 08:44:55.212 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43446 1 80 1 2025-12-04 08:45:55.454 00:00:00.000 UDP 28.104.0.1:40545 -> 198.28.0.2:53 1 64 1 2025-12-04 08:45:55.455 00:00:00.000 UDP 28.104.0.1:39823 -> 198.28.0.2:53 1 64 1 2025-12-04 08:45:55.464 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39823 1 109 1 2025-12-04 08:45:55.463 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40545 1 80 1 2025-12-04 08:42:07.565 00:05:08.805 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 08:42:07.614 00:05:08.861 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 08:42:07.574 00:05:08.785 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 08:42:16.359 00:05:00.866 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 08:42:45.573 00:05:10.009 OSPF 28.0.2.1:0 -> 224.0.0.5:0 42 2960 1 2025-12-04 08:46:55.769 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41916 1 109 1 2025-12-04 08:46:55.769 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38748 1 80 1 2025-12-04 08:46:55.759 00:00:00.000 UDP 28.104.0.1:41916 -> 198.28.0.2:53 1 64 1 2025-12-04 08:46:55.758 00:00:00.000 UDP 28.104.0.1:38748 -> 198.28.0.2:53 1 64 1 2025-12-04 08:46:58.640 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 08:45:16.359 00:02:00.484 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-12-04 08:43:07.565 00:05:08.921 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 08:47:56.086 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46481 1 109 1 2025-12-04 08:47:56.086 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59825 1 80 1 2025-12-04 08:47:56.076 00:00:00.000 UDP 28.104.0.1:46481 -> 198.28.0.2:53 1 64 1 2025-12-04 08:47:56.076 00:00:00.000 UDP 28.104.0.1:59825 -> 198.28.0.2:53 1 64 1 2025-12-04 08:48:56.370 00:00:00.000 UDP 28.104.0.1:42618 -> 198.28.0.2:53 1 64 1 2025-12-04 08:48:56.370 00:00:00.000 UDP 28.104.0.1:44967 -> 198.28.0.2:53 1 64 1 2025-12-04 08:48:56.380 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42618 1 80 1 2025-12-04 08:48:56.380 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44967 1 109 1 2025-12-04 08:48:16.361 00:01:00.483 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 08:49:56.620 00:00:00.000 UDP 28.104.0.1:40320 -> 198.28.0.2:53 1 64 1 2025-12-04 08:49:56.620 00:00:00.000 UDP 28.104.0.1:52082 -> 198.28.0.2:53 1 64 1 2025-12-04 08:49:56.631 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40320 1 80 1 2025-12-04 08:49:56.631 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52082 1 109 1 2025-12-04 08:50:56.903 00:00:00.000 UDP 28.104.0.1:52331 -> 198.28.0.2:53 1 64 1 2025-12-04 08:50:56.903 00:00:00.000 UDP 28.104.0.1:51789 -> 198.28.0.2:53 1 64 1 2025-12-04 08:50:56.914 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51789 1 109 1 2025-12-04 08:50:56.914 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52331 1 80 1 2025-12-04 08:51:58.700 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 08:51:57.220 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53309 1 109 1 2025-12-04 08:51:57.220 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48681 1 80 1 2025-12-04 08:51:57.210 00:00:00.000 UDP 28.104.0.1:48681 -> 198.28.0.2:53 1 64 1 2025-12-04 08:51:57.210 00:00:00.000 UDP 28.104.0.1:53309 -> 198.28.0.2:53 1 64 1 2025-12-04 08:48:07.568 00:05:08.804 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 08:48:05.584 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2484 1 2025-12-04 08:50:16.361 00:02:00.484 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-12-04 08:48:07.617 00:05:08.862 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 08:48:07.577 00:05:08.785 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 08:48:16.361 00:05:00.865 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 08:52:57.473 00:00:00.000 UDP 28.104.0.1:50145 -> 198.28.0.2:53 1 64 1 2025-12-04 08:52:57.473 00:00:00.000 UDP 28.104.0.1:33980 -> 198.28.0.2:53 1 64 1 2025-12-04 08:52:57.484 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33980 1 80 1 2025-12-04 08:52:57.484 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50145 1 109 1 2025-12-04 08:49:07.566 00:05:08.922 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 08:53:57.775 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38652 1 109 1 2025-12-04 08:53:57.776 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37491 1 80 1 2025-12-04 08:53:57.764 00:00:00.000 UDP 28.104.0.1:38652 -> 198.28.0.2:53 1 64 1 2025-12-04 08:53:57.764 00:00:00.000 UDP 28.104.0.1:37491 -> 198.28.0.2:53 1 64 1 2025-12-04 08:53:16.361 00:01:00.484 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 08:54:58.069 00:00:00.000 UDP 28.104.0.1:49580 -> 198.28.0.2:53 1 64 1 2025-12-04 08:54:58.068 00:00:00.000 UDP 28.104.0.1:45384 -> 198.28.0.2:53 1 64 1 2025-12-04 08:54:58.078 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45384 1 80 1 2025-12-04 08:54:58.078 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49580 1 109 1 2025-12-04 08:55:58.361 00:00:00.000 UDP 28.104.0.1:44277 -> 198.28.0.2:53 1 64 1 2025-12-04 08:55:58.361 00:00:00.000 UDP 28.104.0.1:53469 -> 198.28.0.2:53 1 64 1 2025-12-04 08:55:58.371 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44277 1 80 1 2025-12-04 08:55:58.371 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53469 1 109 1 2025-12-04 08:55:16.362 00:01:00.484 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 08:56:58.762 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 08:56:58.663 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39338 1 80 1 2025-12-04 08:56:58.663 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42413 1 109 1 2025-12-04 08:56:58.653 00:00:00.000 UDP 28.104.0.1:39338 -> 198.28.0.2:53 1 64 1 2025-12-04 08:56:58.653 00:00:00.000 UDP 28.104.0.1:42413 -> 198.28.0.2:53 1 64 1 2025-12-04 08:53:25.587 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 45 3284 1 2025-12-04 08:57:58.955 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52216 1 109 1 2025-12-04 08:57:58.955 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60661 1 80 1 2025-12-04 08:57:58.945 00:00:00.000 UDP 28.104.0.1:52216 -> 198.28.0.2:53 1 64 1 2025-12-04 08:57:58.945 00:00:00.000 UDP 28.104.0.1:60661 -> 198.28.0.2:53 1 64 1 2025-12-04 08:54:07.567 00:05:08.805 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 08:54:07.617 00:05:08.862 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 08:54:07.577 00:05:08.785 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 08:54:16.362 00:05:00.868 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 Summary: total flows: 332, total bytes: 98996, total packets: 1458, avg bps: 204, avg pps: 0, avg bpp: 67 Time window: 2025-12-04 07:54:45 - 2025-12-04 08:59:17 Total flows processed: 332, passed: 332, Blocks skipped: 0, Bytes read: 34592 Sys: 0.0050s User: 0.0030s Wall: 0.0039s flows/second: 85346.2 Runtime: 0.0039s