Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-04 09:55:07.596 00:05:08.921 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 09:59:23.993 00:00:00.000 UDP 28.104.0.1:33535 -> 198.28.0.2:53 1 64 1 2025-12-04 09:59:23.993 00:00:00.000 UDP 28.104.0.1:43992 -> 198.28.0.2:53 1 64 1 2025-12-04 09:59:24.005 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33535 1 80 1 2025-12-04 09:59:24.006 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43992 1 109 1 2025-12-04 09:59:16.384 00:01:00.487 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 10:00:24.303 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49442 1 109 1 2025-12-04 10:00:24.303 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40435 1 80 1 2025-12-04 10:00:24.293 00:00:00.000 UDP 28.104.0.1:49442 -> 198.28.0.2:53 1 64 1 2025-12-04 10:00:24.293 00:00:00.000 UDP 28.104.0.1:40435 -> 198.28.0.2:53 1 64 1 2025-12-04 09:57:05.667 00:05:10.010 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2436 1 2025-12-04 10:01:24.587 00:00:00.000 UDP 28.104.0.1:36095 -> 198.28.0.2:53 1 64 1 2025-12-04 10:01:24.587 00:00:00.000 UDP 28.104.0.1:40529 -> 198.28.0.2:53 1 64 1 2025-12-04 10:01:24.597 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36095 1 109 1 2025-12-04 10:01:24.597 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40529 1 80 1 2025-12-04 10:01:59.892 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 10:02:24.905 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35080 1 80 1 2025-12-04 10:02:24.905 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57539 1 109 1 2025-12-04 10:02:24.895 00:00:00.000 UDP 28.104.0.1:57539 -> 198.28.0.2:53 1 64 1 2025-12-04 10:02:24.895 00:00:00.000 UDP 28.104.0.1:35080 -> 198.28.0.2:53 1 64 1 2025-12-04 10:01:16.385 00:02:00.489 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-12-04 10:03:25.204 00:00:00.000 UDP 28.104.0.1:42073 -> 198.28.0.2:53 1 64 1 2025-12-04 10:03:25.204 00:00:00.000 UDP 28.104.0.1:43216 -> 198.28.0.2:53 1 64 1 2025-12-04 10:03:25.213 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43216 1 109 1 2025-12-04 10:03:25.213 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42073 1 80 1 2025-12-04 10:00:07.647 00:05:08.864 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 10:00:07.607 00:05:08.777 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 10:00:16.384 00:05:00.869 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 10:04:25.502 00:00:00.000 UDP 28.104.0.1:37011 -> 198.28.0.2:53 1 64 1 2025-12-04 10:04:25.502 00:00:00.000 UDP 28.104.0.1:60174 -> 198.28.0.2:53 1 64 1 2025-12-04 10:00:07.597 00:05:08.798 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 10:04:25.513 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60174 1 80 1 2025-12-04 10:04:25.513 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37011 1 109 1 2025-12-04 10:01:07.600 00:05:08.922 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 10:04:16.384 00:01:00.489 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 10:05:25.807 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54376 1 80 1 2025-12-04 10:05:25.808 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59171 1 109 1 2025-12-04 10:05:25.797 00:00:00.000 UDP 28.104.0.1:54376 -> 198.28.0.2:53 1 64 1 2025-12-04 10:05:25.797 00:00:00.000 UDP 28.104.0.1:59171 -> 198.28.0.2:53 1 64 1 2025-12-04 10:06:26.119 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36596 1 80 1 2025-12-04 10:06:26.119 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39840 1 109 1 2025-12-04 10:06:26.109 00:00:00.000 UDP 28.104.0.1:36596 -> 198.28.0.2:53 1 64 1 2025-12-04 10:06:26.110 00:00:00.000 UDP 28.104.0.1:39840 -> 198.28.0.2:53 1 64 1 2025-12-04 10:02:25.678 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2652 1 2025-12-04 10:07:00.154 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 10:07:26.418 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52778 1 109 1 2025-12-04 10:07:26.417 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57478 1 80 1 2025-12-04 10:07:26.406 00:00:00.000 UDP 28.104.0.1:57478 -> 198.28.0.2:53 1 64 1 2025-12-04 10:07:26.406 00:00:00.000 UDP 28.104.0.1:52778 -> 198.28.0.2:53 1 64 1 2025-12-04 10:06:16.385 00:02:00.490 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-12-04 10:08:26.726 00:00:00.000 UDP 28.104.0.1:47222 -> 198.28.0.2:53 1 64 1 2025-12-04 10:08:26.726 00:00:00.000 UDP 28.104.0.1:57421 -> 198.28.0.2:53 1 64 1 2025-12-04 10:08:26.737 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57421 1 109 1 2025-12-04 10:08:26.736 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47222 1 80 1 2025-12-04 10:09:27.061 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49010 1 109 1 2025-12-04 10:09:27.061 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51367 1 80 1 2025-12-04 10:09:27.050 00:00:00.000 UDP 28.104.0.1:49010 -> 198.28.0.2:53 1 64 1 2025-12-04 10:09:27.050 00:00:00.000 UDP 28.104.0.1:51367 -> 198.28.0.2:53 1 64 1 2025-12-04 10:06:07.598 00:05:08.798 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 10:09:16.385 00:01:00.489 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 10:06:07.647 00:05:08.866 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 10:06:07.607 00:05:08.778 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 10:06:16.384 00:05:00.871 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 10:10:27.345 00:00:00.000 UDP 28.104.0.1:47999 -> 198.28.0.2:53 1 64 1 2025-12-04 10:10:27.345 00:00:00.000 UDP 28.104.0.1:34394 -> 198.28.0.2:53 1 64 1 2025-12-04 10:10:27.355 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47999 1 80 1 2025-12-04 10:10:27.355 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34394 1 109 1 2025-12-04 10:07:07.597 00:05:08.926 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 10:11:27.644 00:00:00.000 UDP 28.104.0.1:35562 -> 198.28.0.2:53 1 64 1 2025-12-04 10:11:27.642 00:00:00.000 UDP 28.104.0.1:53939 -> 198.28.0.2:53 1 64 1 2025-12-04 10:11:27.651 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53939 1 80 1 2025-12-04 10:11:27.653 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35562 1 109 1 2025-12-04 10:07:43.242 00:05:02.444 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2788 1 2025-12-04 10:12:00.437 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 10:12:27.948 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44075 1 80 1 2025-12-04 10:12:27.948 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60289 1 109 1 2025-12-04 10:12:27.938 00:00:00.000 UDP 28.104.0.1:44075 -> 198.28.0.2:53 1 64 1 2025-12-04 10:12:27.938 00:00:00.000 UDP 28.104.0.1:60289 -> 198.28.0.2:53 1 64 1 2025-12-04 10:11:16.384 00:02:00.490 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-12-04 10:13:28.236 00:00:00.000 UDP 28.104.0.1:33477 -> 198.28.0.2:53 1 64 1 2025-12-04 10:13:28.236 00:00:00.000 UDP 28.104.0.1:49302 -> 198.28.0.2:53 1 64 1 2025-12-04 10:13:28.245 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33477 1 80 1 2025-12-04 10:13:28.246 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49302 1 109 1 2025-12-04 10:14:28.532 00:00:00.000 UDP 28.104.0.1:53513 -> 198.28.0.2:53 1 64 1 2025-12-04 10:14:28.532 00:00:00.000 UDP 28.104.0.1:56139 -> 198.28.0.2:53 1 64 1 2025-12-04 10:14:28.542 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56139 1 109 1 2025-12-04 10:14:28.542 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53513 1 80 1 2025-12-04 10:14:16.387 00:01:00.489 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 10:15:28.795 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35830 1 109 1 2025-12-04 10:15:28.795 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53392 1 80 1 2025-12-04 10:15:28.785 00:00:00.000 UDP 28.104.0.1:53392 -> 198.28.0.2:53 1 64 1 2025-12-04 10:15:28.785 00:00:00.000 UDP 28.104.0.1:35830 -> 198.28.0.2:53 1 64 1 2025-12-04 10:12:07.609 00:05:08.777 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 10:12:07.598 00:05:08.798 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 10:12:07.649 00:05:08.869 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 10:12:16.386 00:05:00.872 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 10:16:29.085 00:00:00.000 UDP 28.104.0.1:33443 -> 198.28.0.2:53 1 64 1 2025-12-04 10:16:29.085 00:00:00.000 UDP 28.104.0.1:48942 -> 198.28.0.2:53 1 64 1 2025-12-04 10:16:29.096 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48942 1 109 1 2025-12-04 10:16:29.096 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33443 1 80 1 2025-12-04 10:17:00.291 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 10:12:55.685 00:05:10.015 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2816 1 2025-12-04 10:13:07.598 00:05:08.927 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 10:17:29.344 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57290 1 109 1 2025-12-04 10:17:29.344 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59688 1 80 1 2025-12-04 10:17:29.334 00:00:00.000 UDP 28.104.0.1:59688 -> 198.28.0.2:53 1 64 1 2025-12-04 10:17:29.335 00:00:00.000 UDP 28.104.0.1:57290 -> 198.28.0.2:53 1 64 1 2025-12-04 10:16:16.386 00:02:00.490 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-12-04 10:18:29.625 00:00:00.000 UDP 28.104.0.1:37267 -> 198.28.0.2:53 1 64 1 2025-12-04 10:18:29.625 00:00:00.000 UDP 28.104.0.1:58099 -> 198.28.0.2:53 1 64 1 2025-12-04 10:18:29.636 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58099 1 109 1 2025-12-04 10:18:29.636 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37267 1 80 1 2025-12-04 10:19:29.927 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48332 1 80 1 2025-12-04 10:19:29.928 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42319 1 109 1 2025-12-04 10:19:29.918 00:00:00.000 UDP 28.104.0.1:42319 -> 198.28.0.2:53 1 64 1 2025-12-04 10:19:29.918 00:00:00.000 UDP 28.104.0.1:48332 -> 198.28.0.2:53 1 64 1 2025-12-04 10:19:16.387 00:01:00.490 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 10:20:30.255 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43392 1 109 1 2025-12-04 10:20:30.255 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57774 1 80 1 2025-12-04 10:20:30.243 00:00:00.000 UDP 28.104.0.1:43392 -> 198.28.0.2:53 1 64 1 2025-12-04 10:20:30.243 00:00:00.000 UDP 28.104.0.1:57774 -> 198.28.0.2:53 1 64 1 2025-12-04 10:21:30.532 00:00:00.000 UDP 28.104.0.1:52228 -> 198.28.0.2:53 1 64 1 2025-12-04 10:21:30.532 00:00:00.000 UDP 28.104.0.1:48380 -> 198.28.0.2:53 1 64 1 2025-12-04 10:21:30.544 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48380 1 109 1 2025-12-04 10:21:30.544 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52228 1 80 1 2025-12-04 10:22:00.401 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 10:18:07.600 00:05:08.797 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 10:18:07.651 00:05:08.871 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 10:18:07.611 00:05:08.777 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 10:18:16.387 00:05:00.872 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 10:18:15.700 00:05:10.905 OSPF 28.0.2.1:0 -> 224.0.0.5:0 42 3128 1 2025-12-04 10:22:30.830 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49201 1 109 1 2025-12-04 10:22:30.830 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42763 1 80 1 2025-12-04 10:22:30.820 00:00:00.000 UDP 28.104.0.1:42763 -> 198.28.0.2:53 1 64 1 2025-12-04 10:22:30.820 00:00:00.000 UDP 28.104.0.1:49201 -> 198.28.0.2:53 1 64 1 2025-12-04 10:19:07.603 00:05:08.930 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 10:21:16.389 00:02:00.490 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-12-04 10:23:31.075 00:00:00.000 UDP 28.104.0.1:53572 -> 198.28.0.2:53 1 64 1 2025-12-04 10:23:31.075 00:00:00.000 UDP 28.104.0.1:34692 -> 198.28.0.2:53 1 64 1 2025-12-04 10:23:31.087 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53572 1 80 1 2025-12-04 10:23:31.086 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34692 1 109 1 2025-12-04 10:24:31.342 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42757 1 109 1 2025-12-04 10:24:31.342 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54416 1 80 1 2025-12-04 10:24:31.331 00:00:00.000 UDP 28.104.0.1:42757 -> 198.28.0.2:53 1 64 1 2025-12-04 10:24:31.331 00:00:00.000 UDP 28.104.0.1:54416 -> 198.28.0.2:53 1 64 1 2025-12-04 10:24:16.388 00:01:00.492 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 10:25:32.063 00:00:00.000 UDP 28.104.0.1:60117 -> 198.28.0.2:53 1 64 1 2025-12-04 10:25:32.063 00:00:00.000 UDP 28.104.0.1:44472 -> 198.28.0.2:53 1 64 1 2025-12-04 10:25:32.074 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60117 1 109 1 2025-12-04 10:25:32.074 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44472 1 80 1 2025-12-04 10:26:32.360 00:00:00.000 UDP 28.104.0.1:59014 -> 198.28.0.2:53 1 64 1 2025-12-04 10:26:32.360 00:00:00.000 UDP 28.104.0.1:57316 -> 198.28.0.2:53 1 64 1 2025-12-04 10:26:32.370 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57316 1 109 1 2025-12-04 10:26:32.370 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59014 1 80 1 2025-12-04 10:27:00.451 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 10:27:32.658 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54455 1 109 1 2025-12-04 10:27:32.658 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38064 1 80 1 2025-12-04 10:27:32.648 00:00:00.000 UDP 28.104.0.1:54455 -> 198.28.0.2:53 1 64 1 2025-12-04 10:27:32.648 00:00:00.000 UDP 28.104.0.1:38064 -> 198.28.0.2:53 1 64 1 2025-12-04 10:23:35.705 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 33 2240 1 2025-12-04 10:26:16.389 00:02:00.491 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-12-04 10:24:07.654 00:05:08.871 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 10:24:07.613 00:05:08.776 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 10:24:16.389 00:05:00.871 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 10:24:07.602 00:05:08.796 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 10:28:32.944 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36182 1 80 1 2025-12-04 10:28:32.944 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41358 1 109 1 2025-12-04 10:28:32.934 00:00:00.000 UDP 28.104.0.1:36182 -> 198.28.0.2:53 1 64 1 2025-12-04 10:28:32.934 00:00:00.000 UDP 28.104.0.1:41358 -> 198.28.0.2:53 1 64 1 2025-12-04 10:25:07.602 00:05:08.932 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 10:29:33.235 00:00:00.000 UDP 28.104.0.1:53392 -> 198.28.0.2:53 1 64 1 2025-12-04 10:29:33.235 00:00:00.000 UDP 28.104.0.1:58706 -> 198.28.0.2:53 1 64 1 2025-12-04 10:29:33.246 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58706 1 109 1 2025-12-04 10:29:33.246 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53392 1 80 1 2025-12-04 10:29:16.390 00:01:00.492 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 10:30:33.525 00:00:00.000 UDP 28.104.0.1:32996 -> 198.28.0.2:53 1 64 1 2025-12-04 10:30:33.525 00:00:00.000 UDP 28.104.0.1:57792 -> 198.28.0.2:53 1 64 1 2025-12-04 10:30:33.535 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57792 1 109 1 2025-12-04 10:30:33.535 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32996 1 80 1 2025-12-04 10:31:33.791 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51859 1 80 1 2025-12-04 10:31:33.791 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37792 1 109 1 2025-12-04 10:31:33.780 00:00:00.000 UDP 28.104.0.1:51859 -> 198.28.0.2:53 1 64 1 2025-12-04 10:31:33.780 00:00:00.000 UDP 28.104.0.1:37792 -> 198.28.0.2:53 1 64 1 2025-12-04 10:32:00.608 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 10:32:34.071 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50869 1 109 1 2025-12-04 10:32:34.071 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58375 1 80 1 2025-12-04 10:32:34.060 00:00:00.000 UDP 28.104.0.1:50869 -> 198.28.0.2:53 1 64 1 2025-12-04 10:32:34.060 00:00:00.000 UDP 28.104.0.1:58375 -> 198.28.0.2:53 1 64 1 2025-12-04 10:28:55.711 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2652 1 2025-12-04 10:33:34.358 00:00:00.000 UDP 28.104.0.1:39991 -> 198.28.0.2:53 1 64 1 2025-12-04 10:33:34.357 00:00:00.000 UDP 28.104.0.1:43494 -> 198.28.0.2:53 1 64 1 2025-12-04 10:33:34.368 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39991 1 80 1 2025-12-04 10:33:34.368 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43494 1 109 1 2025-12-04 10:30:07.614 00:05:08.776 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 10:30:07.654 00:05:08.871 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 10:30:07.605 00:05:08.796 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 10:30:16.389 00:05:00.871 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 10:34:34.660 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59864 1 109 1 2025-12-04 10:34:34.659 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54430 1 80 1 2025-12-04 10:34:34.649 00:00:00.000 UDP 28.104.0.1:59864 -> 198.28.0.2:53 1 64 1 2025-12-04 10:34:34.648 00:00:00.000 UDP 28.104.0.1:54430 -> 198.28.0.2:53 1 64 1 2025-12-04 10:31:16.389 00:04:00.492 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-12-04 10:31:07.605 00:05:08.932 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 10:35:34.908 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43568 1 109 1 2025-12-04 10:35:34.908 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46646 1 80 1 2025-12-04 10:35:34.899 00:00:00.000 UDP 28.104.0.1:43568 -> 198.28.0.2:53 1 64 1 2025-12-04 10:35:34.899 00:00:00.000 UDP 28.104.0.1:46646 -> 198.28.0.2:53 1 64 1 2025-12-04 10:36:35.217 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50221 1 109 1 2025-12-04 10:36:35.217 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42200 1 80 1 2025-12-04 10:36:35.206 00:00:00.000 UDP 28.104.0.1:42200 -> 198.28.0.2:53 1 64 1 2025-12-04 10:36:35.206 00:00:00.000 UDP 28.104.0.1:50221 -> 198.28.0.2:53 1 64 1 2025-12-04 10:37:00.853 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 10:36:16.391 00:01:00.490 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 10:37:35.527 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43574 1 109 1 2025-12-04 10:37:35.527 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38225 1 80 1 2025-12-04 10:37:35.517 00:00:00.000 UDP 28.104.0.1:38225 -> 198.28.0.2:53 1 64 1 2025-12-04 10:37:35.517 00:00:00.000 UDP 28.104.0.1:43574 -> 198.28.0.2:53 1 64 1 2025-12-04 10:34:15.714 00:05:10.101 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2856 1 2025-12-04 10:38:35.771 00:00:00.000 UDP 28.104.0.1:38445 -> 198.28.0.2:53 1 64 1 2025-12-04 10:38:35.770 00:00:00.000 UDP 28.104.0.1:42202 -> 198.28.0.2:53 1 64 1 2025-12-04 10:38:35.781 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42202 1 109 1 2025-12-04 10:38:35.781 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38445 1 80 1 2025-12-04 10:39:36.093 00:00:00.000 UDP 28.104.0.1:48998 -> 198.28.0.2:53 1 64 1 2025-12-04 10:39:36.093 00:00:00.000 UDP 28.104.0.1:34329 -> 198.28.0.2:53 1 64 1 2025-12-04 10:39:36.103 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34329 1 109 1 2025-12-04 10:39:36.103 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48998 1 80 1 2025-12-04 10:38:16.393 00:02:00.490 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-12-04 10:36:07.607 00:05:08.798 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 10:36:07.655 00:05:08.871 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 10:36:07.615 00:05:08.778 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 10:36:16.391 00:05:00.871 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 10:40:36.397 00:00:00.000 UDP 28.104.0.1:47250 -> 198.28.0.2:53 1 64 1 2025-12-04 10:40:36.398 00:00:00.000 UDP 28.104.0.1:57251 -> 198.28.0.2:53 1 64 1 2025-12-04 10:40:36.408 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47250 1 80 1 2025-12-04 10:40:36.409 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57251 1 109 1 2025-12-04 10:37:07.606 00:05:08.931 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 10:41:36.718 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60207 1 109 1 2025-12-04 10:41:36.718 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42303 1 80 1 2025-12-04 10:41:36.708 00:00:00.000 UDP 28.104.0.1:60207 -> 198.28.0.2:53 1 64 1 2025-12-04 10:41:36.708 00:00:00.000 UDP 28.104.0.1:42303 -> 198.28.0.2:53 1 64 1 2025-12-04 10:42:00.916 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 10:41:16.393 00:01:00.489 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 10:42:36.978 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35421 1 80 1 2025-12-04 10:42:36.978 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53698 1 109 1 2025-12-04 10:42:36.968 00:00:00.000 UDP 28.104.0.1:35421 -> 198.28.0.2:53 1 64 1 2025-12-04 10:42:36.967 00:00:00.000 UDP 28.104.0.1:53698 -> 198.28.0.2:53 1 64 1 2025-12-04 10:43:37.923 00:00:00.000 UDP 28.104.0.1:59737 -> 198.28.0.2:53 1 64 1 2025-12-04 10:43:37.922 00:00:00.000 UDP 28.104.0.1:57102 -> 198.28.0.2:53 1 64 1 2025-12-04 10:43:37.931 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57102 1 80 1 2025-12-04 10:43:37.932 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59737 1 109 1 2025-12-04 10:39:35.719 00:05:10.010 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2816 1 2025-12-04 10:44:38.223 00:00:00.000 UDP 28.104.0.1:45878 -> 198.28.0.2:53 1 64 1 2025-12-04 10:44:38.223 00:00:00.000 UDP 28.104.0.1:36928 -> 198.28.0.2:53 1 64 1 2025-12-04 10:44:38.234 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36928 1 80 1 2025-12-04 10:44:38.233 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45878 1 109 1 2025-12-04 10:43:16.394 00:02:00.489 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-12-04 10:45:38.523 00:00:00.000 UDP 28.104.0.1:40528 -> 198.28.0.2:53 1 64 1 2025-12-04 10:45:38.523 00:00:00.000 UDP 28.104.0.1:59861 -> 198.28.0.2:53 1 64 1 2025-12-04 10:45:38.533 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40528 1 109 1 2025-12-04 10:45:38.533 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59861 1 80 1 2025-12-04 10:42:07.657 00:05:08.872 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 10:42:07.617 00:05:08.780 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 10:42:16.393 00:05:00.878 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 10:42:07.606 00:05:08.801 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 10:46:38.785 00:00:00.000 UDP 28.104.0.1:46855 -> 198.28.0.2:53 1 64 1 2025-12-04 10:46:38.785 00:00:00.000 UDP 28.104.0.1:58174 -> 198.28.0.2:53 1 64 1 2025-12-04 10:46:38.796 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46855 1 80 1 2025-12-04 10:46:38.796 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58174 1 109 1 2025-12-04 10:47:00.808 00:00:00.020 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 10:43:07.607 00:05:08.932 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 10:46:16.396 00:01:00.487 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 10:47:39.056 00:00:00.000 UDP 28.104.0.1:53353 -> 198.28.0.2:53 1 64 1 2025-12-04 10:47:39.056 00:00:00.000 UDP 28.104.0.1:58632 -> 198.28.0.2:53 1 64 1 2025-12-04 10:47:39.067 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53353 1 109 1 2025-12-04 10:47:39.066 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58632 1 80 1 2025-12-04 10:48:39.349 00:00:00.000 UDP 28.104.0.1:43527 -> 198.28.0.2:53 1 64 1 2025-12-04 10:48:39.349 00:00:00.000 UDP 28.104.0.1:46034 -> 198.28.0.2:53 1 64 1 2025-12-04 10:48:39.360 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43527 1 80 1 2025-12-04 10:48:39.360 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46034 1 109 1 2025-12-04 10:44:55.729 00:05:10.238 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2968 1 2025-12-04 10:49:39.652 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56103 1 109 1 2025-12-04 10:49:39.651 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46035 1 80 1 2025-12-04 10:49:39.642 00:00:00.000 UDP 28.104.0.1:46035 -> 198.28.0.2:53 1 64 1 2025-12-04 10:49:39.642 00:00:00.000 UDP 28.104.0.1:56103 -> 198.28.0.2:53 1 64 1 2025-12-04 10:48:16.399 00:02:00.485 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-12-04 10:50:39.930 00:00:00.000 UDP 28.104.0.1:38231 -> 198.28.0.2:53 1 64 1 2025-12-04 10:50:39.930 00:00:00.000 UDP 28.104.0.1:47523 -> 198.28.0.2:53 1 64 1 2025-12-04 10:50:39.940 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47523 1 109 1 2025-12-04 10:50:39.940 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38231 1 80 1 2025-12-04 10:51:40.242 00:00:00.000 UDP 28.104.0.1:57310 -> 198.28.0.2:53 1 64 1 2025-12-04 10:51:40.242 00:00:00.000 UDP 28.104.0.1:50695 -> 198.28.0.2:53 1 64 1 2025-12-04 10:51:40.253 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50695 1 80 1 2025-12-04 10:51:40.253 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57310 1 109 1 2025-12-04 10:52:01.041 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 10:48:07.633 00:05:08.776 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 10:51:16.400 00:01:00.484 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 10:48:07.683 00:05:08.846 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 10:48:07.643 00:05:08.756 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 10:48:16.398 00:05:00.872 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 10:52:40.550 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58238 1 109 1 2025-12-04 10:52:40.550 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48920 1 80 1 2025-12-04 10:52:40.539 00:00:00.000 UDP 28.104.0.1:48920 -> 198.28.0.2:53 1 64 1 2025-12-04 10:52:40.539 00:00:00.000 UDP 28.104.0.1:58238 -> 198.28.0.2:53 1 64 1 2025-12-04 10:49:07.634 00:05:08.906 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 10:53:40.832 00:00:00.000 UDP 28.104.0.1:59365 -> 198.28.0.2:53 1 64 1 2025-12-04 10:53:40.832 00:00:00.000 UDP 28.104.0.1:57678 -> 198.28.0.2:53 1 64 1 2025-12-04 10:53:40.843 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59365 1 80 1 2025-12-04 10:53:40.843 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57678 1 109 1 2025-12-04 10:50:15.729 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2672 1 2025-12-04 10:54:41.846 00:00:00.000 UDP 28.104.0.1:34824 -> 198.28.0.2:53 1 64 1 2025-12-04 10:54:41.846 00:00:00.000 UDP 28.104.0.1:43467 -> 198.28.0.2:53 1 64 1 2025-12-04 10:54:41.855 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43467 1 80 1 2025-12-04 10:54:41.854 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34824 1 109 1 2025-12-04 10:53:16.399 00:02:00.485 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-12-04 10:55:42.143 00:00:00.000 UDP 28.104.0.1:49563 -> 198.28.0.2:53 1 64 1 2025-12-04 10:55:42.143 00:00:00.000 UDP 28.104.0.1:56475 -> 198.28.0.2:53 1 64 1 2025-12-04 10:55:42.152 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56475 1 109 1 2025-12-04 10:55:42.152 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49563 1 80 1 2025-12-04 10:56:42.451 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56295 1 109 1 2025-12-04 10:56:42.451 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38071 1 80 1 2025-12-04 10:56:42.440 00:00:00.000 UDP 28.104.0.1:56295 -> 198.28.0.2:53 1 64 1 2025-12-04 10:56:42.440 00:00:00.000 UDP 28.104.0.1:38071 -> 198.28.0.2:53 1 64 1 2025-12-04 10:57:01.300 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 10:56:16.400 00:01:00.484 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 10:57:42.693 00:00:00.000 UDP 28.104.0.1:48936 -> 198.28.0.2:53 1 64 1 2025-12-04 10:57:42.693 00:00:00.000 UDP 28.104.0.1:46052 -> 198.28.0.2:53 1 64 1 2025-12-04 10:57:42.703 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48936 1 80 1 2025-12-04 10:57:42.703 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46052 1 109 1 2025-12-04 10:54:07.684 00:05:08.846 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 10:54:07.644 00:05:08.757 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 10:54:16.400 00:05:00.872 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 10:54:07.634 00:05:08.777 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 10:58:42.985 00:00:00.000 UDP 28.104.0.1:34854 -> 198.28.0.2:53 1 64 1 2025-12-04 10:58:42.985 00:00:00.000 UDP 28.104.0.1:44678 -> 198.28.0.2:53 1 64 1 2025-12-04 10:58:42.996 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44678 1 80 1 2025-12-04 10:58:42.996 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34854 1 109 1 Summary: total flows: 336, total bytes: 96225, total packets: 1418, avg bps: 199, avg pps: 0, avg bpp: 67 Time window: 2025-12-04 09:55:07 - 2025-12-04 10:59:17 Total flows processed: 336, passed: 336, Blocks skipped: 0, Bytes read: 35008 Sys: 0.0059s User: 0.0025s Wall: 0.0042s flows/second: 79151.1 Runtime: 0.0043s