Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-04 11:59:03.754 00:00:00.000 UDP 28.104.0.1:47320 -> 198.28.0.2:53 1 64 1 2025-12-04 11:59:03.754 00:00:00.000 UDP 28.104.0.1:47478 -> 198.28.0.2:53 1 64 1 2025-12-04 11:59:03.765 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47320 1 80 1 2025-12-04 11:59:03.765 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47478 1 109 1 2025-12-04 11:57:16.421 00:02:00.479 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-12-04 11:55:07.653 00:05:08.901 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 12:00:04.835 00:00:00.000 UDP 28.104.0.1:34217 -> 198.28.0.2:53 1 64 1 2025-12-04 12:00:04.835 00:00:00.000 UDP 28.104.0.1:51631 -> 198.28.0.2:53 1 64 1 2025-12-04 12:00:04.845 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34217 1 109 1 2025-12-04 12:00:04.845 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51631 1 80 1 2025-12-04 12:01:05.136 00:00:00.000 UDP 28.104.0.1:59984 -> 198.28.0.2:53 1 64 1 2025-12-04 12:01:05.136 00:00:00.000 UDP 28.104.0.1:47387 -> 198.28.0.2:53 1 64 1 2025-12-04 12:01:05.146 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59984 1 80 1 2025-12-04 12:01:05.146 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47387 1 109 1 2025-12-04 12:00:16.423 00:01:00.478 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 12:02:02.445 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 12:02:05.441 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35015 1 109 1 2025-12-04 12:02:05.441 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50385 1 80 1 2025-12-04 12:02:05.430 00:00:00.000 UDP 28.104.0.1:50385 -> 198.28.0.2:53 1 64 1 2025-12-04 12:02:05.431 00:00:00.000 UDP 28.104.0.1:35015 -> 198.28.0.2:53 1 64 1 2025-12-04 12:03:05.718 00:00:00.000 UDP 28.104.0.1:34240 -> 198.28.0.2:53 1 64 1 2025-12-04 12:03:05.718 00:00:00.000 UDP 28.104.0.1:49503 -> 198.28.0.2:53 1 64 1 2025-12-04 12:03:05.728 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34240 1 80 1 2025-12-04 12:03:05.728 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49503 1 109 1 2025-12-04 11:59:25.806 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2856 1 2025-12-04 12:04:05.981 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55335 1 109 1 2025-12-04 12:04:05.981 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38158 1 80 1 2025-12-04 12:04:05.971 00:00:00.000 UDP 28.104.0.1:38158 -> 198.28.0.2:53 1 64 1 2025-12-04 12:04:05.971 00:00:00.000 UDP 28.104.0.1:55335 -> 198.28.0.2:53 1 64 1 2025-12-04 12:02:16.423 00:02:00.477 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-12-04 12:00:07.654 00:05:08.781 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 12:00:07.666 00:05:08.760 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 12:00:16.422 00:05:00.873 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 12:00:07.706 00:05:08.840 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 12:05:06.279 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49120 1 80 1 2025-12-04 12:05:06.279 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43804 1 109 1 2025-12-04 12:05:06.267 00:00:00.000 UDP 28.104.0.1:49120 -> 198.28.0.2:53 1 64 1 2025-12-04 12:05:06.267 00:00:00.000 UDP 28.104.0.1:43804 -> 198.28.0.2:53 1 64 1 2025-12-04 12:01:07.656 00:05:08.900 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 12:06:06.565 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50793 1 80 1 2025-12-04 12:06:06.566 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32890 1 109 1 2025-12-04 12:06:06.555 00:00:00.000 UDP 28.104.0.1:50793 -> 198.28.0.2:53 1 64 1 2025-12-04 12:06:06.555 00:00:00.000 UDP 28.104.0.1:32890 -> 198.28.0.2:53 1 64 1 2025-12-04 12:05:16.427 00:01:00.476 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 12:07:02.627 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 12:07:06.861 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35696 1 109 1 2025-12-04 12:07:06.858 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51458 1 80 1 2025-12-04 12:07:06.852 00:00:00.000 UDP 28.104.0.1:35696 -> 198.28.0.2:53 1 64 1 2025-12-04 12:07:06.850 00:00:00.000 UDP 28.104.0.1:51458 -> 198.28.0.2:53 1 64 1 2025-12-04 12:08:07.125 00:00:00.000 UDP 28.104.0.1:52322 -> 198.28.0.2:53 1 64 1 2025-12-04 12:08:07.125 00:00:00.000 UDP 28.104.0.1:54687 -> 198.28.0.2:53 1 64 1 2025-12-04 12:08:07.136 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52322 1 80 1 2025-12-04 12:08:07.136 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54687 1 109 1 2025-12-04 12:07:16.427 00:01:00.476 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 12:04:45.809 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2832 1 2025-12-04 12:09:07.374 00:00:00.000 UDP 28.104.0.1:33919 -> 198.28.0.2:53 1 64 1 2025-12-04 12:09:07.374 00:00:00.000 UDP 28.104.0.1:39398 -> 198.28.0.2:53 1 64 1 2025-12-04 12:09:07.384 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39398 1 80 1 2025-12-04 12:09:07.384 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33919 1 109 1 2025-12-04 12:09:16.427 00:00:00.476 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 123 1 2025-12-04 12:10:07.633 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45788 1 80 1 2025-12-04 12:10:07.633 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51760 1 109 1 2025-12-04 12:10:07.623 00:00:00.000 UDP 28.104.0.1:51760 -> 198.28.0.2:53 1 64 1 2025-12-04 12:10:07.624 00:00:00.000 UDP 28.104.0.1:45788 -> 198.28.0.2:53 1 64 1 2025-12-04 12:06:07.706 00:05:08.844 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 12:06:07.666 00:05:08.762 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 12:06:16.426 00:05:00.869 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 12:06:07.656 00:05:08.782 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 12:11:07.916 00:00:00.000 UDP 28.104.0.1:48921 -> 198.28.0.2:53 1 64 1 2025-12-04 12:11:07.916 00:00:00.000 UDP 28.104.0.1:46863 -> 198.28.0.2:53 1 64 1 2025-12-04 12:11:07.926 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48921 1 80 1 2025-12-04 12:11:07.926 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46863 1 109 1 2025-12-04 12:07:07.656 00:05:08.902 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 12:10:16.428 00:01:00.476 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 12:12:02.726 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 12:12:08.191 00:00:00.000 UDP 28.104.0.1:55052 -> 198.28.0.2:53 1 64 1 2025-12-04 12:12:08.191 00:00:00.000 UDP 28.104.0.1:44491 -> 198.28.0.2:53 1 64 1 2025-12-04 12:12:08.201 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55052 1 80 1 2025-12-04 12:12:08.201 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44491 1 109 1 2025-12-04 12:13:08.481 00:00:00.000 UDP 28.104.0.1:55582 -> 198.28.0.2:53 1 64 1 2025-12-04 12:13:08.481 00:00:00.000 UDP 28.104.0.1:39170 -> 198.28.0.2:53 1 64 1 2025-12-04 12:13:08.490 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39170 1 109 1 2025-12-04 12:13:08.491 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55582 1 80 1 2025-12-04 12:12:16.428 00:01:00.475 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 12:14:08.951 00:00:00.000 UDP 28.104.0.1:35067 -> 198.28.0.2:53 1 64 1 2025-12-04 12:14:08.951 00:00:00.000 UDP 28.104.0.1:48692 -> 198.28.0.2:53 1 64 1 2025-12-04 12:14:08.961 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48692 1 80 1 2025-12-04 12:14:08.961 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35067 1 109 1 2025-12-04 12:14:16.431 00:00:00.473 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 123 1 2025-12-04 12:10:05.815 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 42 3016 1 2025-12-04 12:15:09.234 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44718 1 80 1 2025-12-04 12:15:09.234 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52955 1 109 1 2025-12-04 12:15:09.224 00:00:00.000 UDP 28.104.0.1:52955 -> 198.28.0.2:53 1 64 1 2025-12-04 12:15:09.224 00:00:00.000 UDP 28.104.0.1:44718 -> 198.28.0.2:53 1 64 1 2025-12-04 12:16:09.528 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57887 1 109 1 2025-12-04 12:16:09.528 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35285 1 80 1 2025-12-04 12:12:07.658 00:05:08.782 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 12:16:09.517 00:00:00.000 UDP 28.104.0.1:35285 -> 198.28.0.2:53 1 64 1 2025-12-04 12:16:09.517 00:00:00.000 UDP 28.104.0.1:57887 -> 198.28.0.2:53 1 64 1 2025-12-04 12:15:16.430 00:01:00.474 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 12:12:07.667 00:05:08.763 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 12:12:16.428 00:05:00.869 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 12:12:07.707 00:05:08.841 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 12:17:02.667 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 12:17:09.819 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38031 1 80 1 2025-12-04 12:17:09.819 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41793 1 109 1 2025-12-04 12:17:09.808 00:00:00.000 UDP 28.104.0.1:41793 -> 198.28.0.2:53 1 64 1 2025-12-04 12:17:09.808 00:00:00.000 UDP 28.104.0.1:38031 -> 198.28.0.2:53 1 64 1 2025-12-04 12:13:07.657 00:05:08.902 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 12:18:10.109 00:00:00.000 UDP 28.104.0.1:53943 -> 198.28.0.2:53 1 64 1 2025-12-04 12:18:10.109 00:00:00.000 UDP 28.104.0.1:42212 -> 198.28.0.2:53 1 64 1 2025-12-04 12:18:10.118 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53943 1 109 1 2025-12-04 12:18:10.118 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42212 1 80 1 2025-12-04 12:17:16.432 00:01:00.474 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 12:19:10.365 00:00:00.000 UDP 28.104.0.1:41166 -> 198.28.0.2:53 1 64 1 2025-12-04 12:19:10.365 00:00:00.000 UDP 28.104.0.1:54083 -> 198.28.0.2:53 1 64 1 2025-12-04 12:19:10.377 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41166 1 80 1 2025-12-04 12:19:10.377 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54083 1 109 1 2025-12-04 12:15:16.193 00:05:09.628 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2540 1 2025-12-04 12:20:10.629 00:00:00.000 UDP 28.104.0.1:37190 -> 198.28.0.2:53 1 64 1 2025-12-04 12:20:10.629 00:00:00.000 UDP 28.104.0.1:46553 -> 198.28.0.2:53 1 64 1 2025-12-04 12:20:10.639 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46553 1 109 1 2025-12-04 12:20:10.640 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37190 1 80 1 2025-12-04 12:21:10.940 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58391 1 80 1 2025-12-04 12:21:10.940 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35035 1 109 1 2025-12-04 12:21:10.929 00:00:00.000 UDP 28.104.0.1:58391 -> 198.28.0.2:53 1 64 1 2025-12-04 12:21:10.929 00:00:00.000 UDP 28.104.0.1:35035 -> 198.28.0.2:53 1 64 1 2025-12-04 12:19:16.432 00:02:00.474 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-12-04 12:22:02.853 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 12:22:11.249 00:00:00.000 UDP 28.104.0.1:44147 -> 198.28.0.2:53 1 64 1 2025-12-04 12:22:11.249 00:00:00.000 UDP 28.104.0.1:34075 -> 198.28.0.2:53 1 64 1 2025-12-04 12:22:11.259 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44147 1 80 1 2025-12-04 12:22:11.261 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34075 1 109 1 2025-12-04 12:18:07.708 00:05:08.841 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 12:18:07.668 00:05:08.763 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 12:18:16.431 00:05:00.868 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 12:18:07.659 00:05:08.782 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 12:23:11.585 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51827 1 109 1 2025-12-04 12:23:11.585 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40152 1 80 1 2025-12-04 12:19:07.659 00:05:08.902 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 12:23:11.574 00:00:00.000 UDP 28.104.0.1:40152 -> 198.28.0.2:53 1 64 1 2025-12-04 12:23:11.574 00:00:00.000 UDP 28.104.0.1:51827 -> 198.28.0.2:53 1 64 1 2025-12-04 12:22:16.431 00:01:00.474 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 12:24:11.878 00:00:00.000 UDP 28.104.0.1:57882 -> 198.28.0.2:53 1 64 1 2025-12-04 12:24:11.878 00:00:00.000 UDP 28.104.0.1:52846 -> 198.28.0.2:53 1 64 1 2025-12-04 12:24:11.889 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52846 1 80 1 2025-12-04 12:24:11.889 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57882 1 109 1 2025-12-04 12:20:35.822 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 34 2304 1 2025-12-04 12:25:12.147 00:00:00.000 UDP 28.104.0.1:51844 -> 198.28.0.2:53 1 64 1 2025-12-04 12:25:12.148 00:00:00.000 UDP 28.104.0.1:48764 -> 198.28.0.2:53 1 64 1 2025-12-04 12:25:12.158 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48764 1 80 1 2025-12-04 12:25:12.158 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51844 1 109 1 2025-12-04 12:26:12.440 00:00:00.000 UDP 28.104.0.1:35336 -> 198.28.0.2:53 1 64 1 2025-12-04 12:24:16.431 00:02:00.474 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-12-04 12:26:12.440 00:00:00.000 UDP 28.104.0.1:40581 -> 198.28.0.2:53 1 64 1 2025-12-04 12:26:12.451 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40581 1 109 1 2025-12-04 12:26:12.451 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35336 1 80 1 2025-12-04 12:27:02.972 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 12:27:12.761 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35869 1 109 1 2025-12-04 12:27:12.761 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51224 1 80 1 2025-12-04 12:27:12.750 00:00:00.000 UDP 28.104.0.1:51224 -> 198.28.0.2:53 1 64 1 2025-12-04 12:27:12.750 00:00:00.000 UDP 28.104.0.1:35869 -> 198.28.0.2:53 1 64 1 2025-12-04 12:28:13.052 00:00:00.000 UDP 28.104.0.1:37659 -> 198.28.0.2:53 1 64 1 2025-12-04 12:27:16.431 00:01:00.476 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 12:28:13.052 00:00:00.000 UDP 28.104.0.1:55163 -> 198.28.0.2:53 1 64 1 2025-12-04 12:28:13.063 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55163 1 80 1 2025-12-04 12:24:07.659 00:05:08.784 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 12:28:13.063 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37659 1 109 1 2025-12-04 12:24:07.709 00:05:08.843 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 12:24:07.669 00:05:08.764 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 12:24:16.431 00:05:00.868 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 12:29:13.356 00:00:00.000 UDP 28.104.0.1:51783 -> 198.28.0.2:53 1 64 1 2025-12-04 12:29:13.357 00:00:00.000 UDP 28.104.0.1:49125 -> 198.28.0.2:53 1 64 1 2025-12-04 12:29:13.368 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49125 1 80 1 2025-12-04 12:29:13.368 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51783 1 109 1 2025-12-04 12:25:07.659 00:05:08.903 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 12:25:55.828 00:05:10.002 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2836 1 2025-12-04 12:30:13.675 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51277 1 80 1 2025-12-04 12:30:13.676 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44558 1 109 1 2025-12-04 12:30:13.666 00:00:00.000 UDP 28.104.0.1:44558 -> 198.28.0.2:53 1 64 1 2025-12-04 12:30:13.665 00:00:00.000 UDP 28.104.0.1:51277 -> 198.28.0.2:53 1 64 1 2025-12-04 12:31:13.966 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58946 1 109 1 2025-12-04 12:31:13.966 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42557 1 80 1 2025-12-04 12:29:16.433 00:02:00.474 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-12-04 12:31:13.956 00:00:00.000 UDP 28.104.0.1:42557 -> 198.28.0.2:53 1 64 1 2025-12-04 12:31:13.956 00:00:00.000 UDP 28.104.0.1:58946 -> 198.28.0.2:53 1 64 1 2025-12-04 12:32:03.014 00:00:00.027 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 12:32:14.251 00:00:00.000 UDP 28.104.0.1:49394 -> 198.28.0.2:53 1 64 1 2025-12-04 12:32:14.250 00:00:00.000 UDP 28.104.0.1:59336 -> 198.28.0.2:53 1 64 1 2025-12-04 12:32:14.264 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59336 1 80 1 2025-12-04 12:32:14.263 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49394 1 109 1 2025-12-04 12:33:14.507 00:00:00.000 UDP 28.104.0.1:44789 -> 198.28.0.2:53 1 64 1 2025-12-04 12:32:16.434 00:01:00.474 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 12:33:14.507 00:00:00.000 UDP 28.104.0.1:34307 -> 198.28.0.2:53 1 64 1 2025-12-04 12:33:14.516 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34307 1 109 1 2025-12-04 12:33:14.516 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44789 1 80 1 2025-12-04 12:34:14.765 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34263 1 80 1 2025-12-04 12:34:14.765 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35142 1 109 1 2025-12-04 12:30:07.670 00:05:08.764 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 12:34:14.755 00:00:00.000 UDP 28.104.0.1:34263 -> 198.28.0.2:53 1 64 1 2025-12-04 12:30:07.711 00:05:08.842 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 12:34:14.755 00:00:00.000 UDP 28.104.0.1:35142 -> 198.28.0.2:53 1 64 1 2025-12-04 12:30:16.434 00:05:00.866 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 12:30:07.660 00:05:08.783 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 12:35:15.059 00:00:00.000 UDP 28.104.0.1:43016 -> 198.28.0.2:53 1 64 1 2025-12-04 12:35:15.059 00:00:00.000 UDP 28.104.0.1:57827 -> 198.28.0.2:53 1 64 1 2025-12-04 12:31:15.830 00:05:00.641 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2684 1 2025-12-04 12:35:15.071 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43016 1 80 1 2025-12-04 12:35:15.071 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57827 1 109 1 2025-12-04 12:31:07.661 00:05:08.902 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 12:36:15.364 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52255 1 80 1 2025-12-04 12:36:15.364 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45995 1 109 1 2025-12-04 12:34:16.437 00:02:00.472 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-12-04 12:36:15.354 00:00:00.000 UDP 28.104.0.1:45995 -> 198.28.0.2:53 1 64 1 2025-12-04 12:36:15.354 00:00:00.000 UDP 28.104.0.1:52255 -> 198.28.0.2:53 1 64 1 2025-12-04 12:37:03.490 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 12:37:15.653 00:00:00.000 UDP 28.104.0.1:60582 -> 198.28.0.2:53 1 64 1 2025-12-04 12:37:15.653 00:00:00.000 UDP 28.104.0.1:45720 -> 198.28.0.2:53 1 64 1 2025-12-04 12:37:15.663 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60582 1 80 1 2025-12-04 12:37:15.663 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45720 1 109 1 2025-12-04 12:38:15.912 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40454 1 109 1 2025-12-04 12:38:15.912 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42127 1 80 1 2025-12-04 12:38:15.902 00:00:00.000 UDP 28.104.0.1:42127 -> 198.28.0.2:53 1 64 1 2025-12-04 12:38:15.902 00:00:00.000 UDP 28.104.0.1:40454 -> 198.28.0.2:53 1 64 1 2025-12-04 12:37:16.435 00:01:00.474 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 12:39:16.218 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42366 1 109 1 2025-12-04 12:39:16.218 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53878 1 80 1 2025-12-04 12:39:16.208 00:00:00.000 UDP 28.104.0.1:53878 -> 198.28.0.2:53 1 64 1 2025-12-04 12:39:16.208 00:00:00.000 UDP 28.104.0.1:42366 -> 198.28.0.2:53 1 64 1 2025-12-04 12:36:07.662 00:05:08.785 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 12:40:16.512 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54472 1 109 1 2025-12-04 12:40:16.511 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51548 1 80 1 2025-12-04 12:39:16.436 00:01:00.473 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 12:40:16.501 00:00:00.000 UDP 28.104.0.1:54472 -> 198.28.0.2:53 1 64 1 2025-12-04 12:40:16.501 00:00:00.000 UDP 28.104.0.1:51548 -> 198.28.0.2:53 1 64 1 2025-12-04 12:36:07.672 00:05:08.765 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 12:36:16.434 00:05:00.867 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 12:36:07.714 00:05:08.839 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 12:36:25.837 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2672 1 2025-12-04 12:41:16.790 00:00:00.000 UDP 28.104.0.1:53125 -> 198.28.0.2:53 1 64 1 2025-12-04 12:41:16.436 00:00:00.473 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 123 1 2025-12-04 12:41:16.790 00:00:00.000 UDP 28.104.0.1:50744 -> 198.28.0.2:53 1 64 1 2025-12-04 12:41:16.800 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53125 1 109 1 2025-12-04 12:41:16.800 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50744 1 80 1 2025-12-04 12:37:07.662 00:05:08.901 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 12:42:03.261 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 12:42:17.097 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35798 1 80 1 2025-12-04 12:42:17.098 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43977 1 109 1 2025-12-04 12:42:17.088 00:00:00.000 UDP 28.104.0.1:43977 -> 198.28.0.2:53 1 64 1 2025-12-04 12:42:17.087 00:00:00.000 UDP 28.104.0.1:35798 -> 198.28.0.2:53 1 64 1 2025-12-04 12:42:16.437 00:01:00.473 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 12:43:17.392 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34589 1 80 1 2025-12-04 12:43:17.392 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50803 1 109 1 2025-12-04 12:43:17.382 00:00:00.000 UDP 28.104.0.1:34589 -> 198.28.0.2:53 1 64 1 2025-12-04 12:43:17.382 00:00:00.000 UDP 28.104.0.1:50803 -> 198.28.0.2:53 1 64 1 2025-12-04 12:44:17.675 00:00:00.000 UDP 28.104.0.1:38873 -> 198.28.0.2:53 1 64 1 2025-12-04 12:44:17.674 00:00:00.000 UDP 28.104.0.1:49625 -> 198.28.0.2:53 1 64 1 2025-12-04 12:44:17.685 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49625 1 109 1 2025-12-04 12:44:17.685 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38873 1 80 1 2025-12-04 12:44:16.437 00:01:00.475 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 12:45:17.968 00:00:00.000 UDP 28.104.0.1:52646 -> 198.28.0.2:53 1 64 1 2025-12-04 12:45:17.968 00:00:00.000 UDP 28.104.0.1:47781 -> 198.28.0.2:53 1 64 1 2025-12-04 12:45:17.979 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52646 1 80 1 2025-12-04 12:45:17.979 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47781 1 109 1 2025-12-04 12:41:45.843 00:05:10.010 OSPF 28.0.2.1:0 -> 224.0.0.5:0 45 3284 1 2025-12-04 12:42:07.664 00:05:08.784 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 12:46:18.271 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39737 1 109 1 2025-12-04 12:46:18.271 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56955 1 80 1 2025-12-04 12:46:16.437 00:00:00.475 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 123 1 2025-12-04 12:46:18.261 00:00:00.000 UDP 28.104.0.1:39737 -> 198.28.0.2:53 1 64 1 2025-12-04 12:46:18.261 00:00:00.000 UDP 28.104.0.1:56955 -> 198.28.0.2:53 1 64 1 2025-12-04 12:42:07.714 00:05:08.841 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 12:42:07.674 00:05:08.764 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 12:42:16.437 00:05:00.865 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 12:47:03.300 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 12:43:07.664 00:05:08.901 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 12:47:18.567 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34574 1 109 1 2025-12-04 12:47:18.567 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42922 1 80 1 2025-12-04 12:47:18.558 00:00:00.000 UDP 28.104.0.1:42922 -> 198.28.0.2:53 1 64 1 2025-12-04 12:47:18.558 00:00:00.000 UDP 28.104.0.1:34574 -> 198.28.0.2:53 1 64 1 2025-12-04 12:47:16.438 00:01:00.476 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 12:48:18.860 00:00:00.000 UDP 28.104.0.1:57135 -> 198.28.0.2:53 1 64 1 2025-12-04 12:48:18.860 00:00:00.000 UDP 28.104.0.1:33294 -> 198.28.0.2:53 1 64 1 2025-12-04 12:48:18.871 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57135 1 109 1 2025-12-04 12:48:18.871 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33294 1 80 1 2025-12-04 12:49:19.188 00:00:00.000 UDP 28.104.0.1:59038 -> 198.28.0.2:53 1 64 1 2025-12-04 12:49:19.189 00:00:00.000 UDP 28.104.0.1:53149 -> 198.28.0.2:53 1 64 1 2025-12-04 12:49:19.199 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59038 1 109 1 2025-12-04 12:49:19.199 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53149 1 80 1 2025-12-04 12:49:16.438 00:01:00.477 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 12:50:19.499 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55598 1 80 1 2025-12-04 12:50:19.498 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60191 1 109 1 2025-12-04 12:50:19.488 00:00:00.000 UDP 28.104.0.1:60191 -> 198.28.0.2:53 1 64 1 2025-12-04 12:50:19.489 00:00:00.000 UDP 28.104.0.1:55598 -> 198.28.0.2:53 1 64 1 2025-12-04 12:47:05.854 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 34 2304 1 2025-12-04 12:51:19.791 00:00:00.000 UDP 28.104.0.1:58899 -> 198.28.0.2:53 1 64 1 2025-12-04 12:51:19.791 00:00:00.000 UDP 28.104.0.1:37723 -> 198.28.0.2:53 1 64 1 2025-12-04 12:51:19.803 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37723 1 80 1 2025-12-04 12:51:19.803 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58899 1 109 1 2025-12-04 12:52:03.436 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 12:48:07.664 00:05:08.785 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 12:48:07.715 00:05:08.843 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 12:48:07.675 00:05:08.764 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 12:48:16.437 00:05:00.865 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 12:52:20.091 00:00:00.000 UDP 28.104.0.1:52324 -> 198.28.0.2:53 1 64 1 2025-12-04 12:52:20.091 00:00:00.000 UDP 28.104.0.1:51768 -> 198.28.0.2:53 1 64 1 2025-12-04 12:52:20.103 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52324 1 109 1 2025-12-04 12:52:20.103 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51768 1 80 1 2025-12-04 12:49:07.666 00:05:08.902 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 12:51:16.439 00:02:00.477 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-12-04 12:53:20.404 00:00:00.000 UDP 28.104.0.1:42761 -> 198.28.0.2:53 1 64 1 2025-12-04 12:53:20.404 00:00:00.000 UDP 28.104.0.1:43989 -> 198.28.0.2:53 1 64 1 2025-12-04 12:53:20.419 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42761 1 109 1 2025-12-04 12:53:20.415 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43989 1 80 1 2025-12-04 12:54:20.716 00:00:00.000 UDP 28.104.0.1:44200 -> 198.28.0.2:53 1 64 1 2025-12-04 12:54:20.716 00:00:00.000 UDP 28.104.0.1:39008 -> 198.28.0.2:53 1 64 1 2025-12-04 12:54:20.725 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44200 1 80 1 2025-12-04 12:54:20.725 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39008 1 109 1 2025-12-04 12:54:16.439 00:01:00.477 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 12:55:21.192 00:00:00.000 UDP 28.104.0.1:39725 -> 198.28.0.2:53 1 64 1 2025-12-04 12:55:21.192 00:00:00.000 UDP 28.104.0.1:59222 -> 198.28.0.2:53 1 64 1 2025-12-04 12:55:21.201 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59222 1 109 1 2025-12-04 12:55:21.201 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39725 1 80 1 2025-12-04 12:56:21.486 00:00:00.000 UDP 28.104.0.1:55024 -> 198.28.0.2:53 1 64 1 2025-12-04 12:56:21.486 00:00:00.000 UDP 28.104.0.1:46998 -> 198.28.0.2:53 1 64 1 2025-12-04 12:56:21.496 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46998 1 80 1 2025-12-04 12:56:21.496 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55024 1 109 1 2025-12-04 12:52:25.862 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2588 1 2025-12-04 12:57:03.606 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 12:57:21.781 00:00:00.000 UDP 28.104.0.1:57992 -> 198.28.0.2:53 1 64 1 2025-12-04 12:57:21.780 00:00:00.000 UDP 28.104.0.1:58616 -> 198.28.0.2:53 1 64 1 2025-12-04 12:57:21.792 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57992 1 109 1 2025-12-04 12:57:21.792 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58616 1 80 1 2025-12-04 12:56:16.440 00:02:00.477 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-12-04 12:54:07.666 00:05:08.785 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 12:54:07.715 00:05:08.844 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 12:54:07.675 00:05:08.765 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 12:54:16.439 00:05:00.866 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 12:58:22.080 00:00:00.000 UDP 28.104.0.1:35443 -> 198.28.0.2:53 1 64 1 2025-12-04 12:58:22.080 00:00:00.000 UDP 28.104.0.1:60788 -> 198.28.0.2:53 1 64 1 2025-12-04 12:58:22.091 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35443 1 80 1 2025-12-04 12:58:22.091 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60788 1 109 1 Summary: total flows: 342, total bytes: 96486, total packets: 1424, avg bps: 200, avg pps: 0, avg bpp: 67 Time window: 2025-12-04 11:55:07 - 2025-12-04 12:59:17 Total flows processed: 342, passed: 342, Blocks skipped: 0, Bytes read: 35632 Sys: 0.0046s User: 0.0028s Wall: 0.0040s flows/second: 85135.7 Runtime: 0.0040s