Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-04 12:59:22.373 00:00:00.000 UDP 28.104.0.1:38778 -> 198.28.0.2:53 1 64 1 2025-12-04 12:59:22.373 00:00:00.000 UDP 28.104.0.1:55838 -> 198.28.0.2:53 1 64 1 2025-12-04 12:55:07.666 00:05:08.904 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 12:59:22.383 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38778 1 109 1 2025-12-04 12:59:22.383 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55838 1 80 1 2025-12-04 12:59:16.441 00:01:00.477 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 13:00:22.671 00:00:00.000 UDP 28.104.0.1:60457 -> 198.28.0.2:53 1 64 1 2025-12-04 13:00:22.671 00:00:00.000 UDP 28.104.0.1:34336 -> 198.28.0.2:53 1 64 1 2025-12-04 13:00:22.682 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60457 1 109 1 2025-12-04 13:00:22.683 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34336 1 80 1 2025-12-04 13:01:22.988 00:00:00.000 UDP 28.104.0.1:42204 -> 198.28.0.2:53 1 64 1 2025-12-04 13:01:22.988 00:00:00.000 UDP 28.104.0.1:34109 -> 198.28.0.2:53 1 64 1 2025-12-04 13:01:22.998 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34109 1 80 1 2025-12-04 13:01:22.998 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42204 1 109 1 2025-12-04 12:57:45.865 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2776 1 2025-12-04 13:02:03.720 00:00:00.020 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 13:02:23.318 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42416 1 109 1 2025-12-04 13:02:23.318 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50997 1 80 1 2025-12-04 13:02:23.309 00:00:00.000 UDP 28.104.0.1:50997 -> 198.28.0.2:53 1 64 1 2025-12-04 13:02:23.309 00:00:00.000 UDP 28.104.0.1:42416 -> 198.28.0.2:53 1 64 1 2025-12-04 13:01:16.442 00:02:00.477 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-12-04 13:03:23.613 00:00:00.000 UDP 28.104.0.1:59492 -> 198.28.0.2:53 1 64 1 2025-12-04 13:03:23.613 00:00:00.000 UDP 28.104.0.1:35223 -> 198.28.0.2:53 1 64 1 2025-12-04 13:03:23.624 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59492 1 109 1 2025-12-04 13:03:23.624 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35223 1 80 1 2025-12-04 13:00:07.716 00:05:08.847 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 13:00:07.676 00:05:08.767 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 13:00:16.442 00:05:00.863 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 13:00:07.666 00:05:08.787 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 13:04:23.908 00:00:00.000 UDP 28.104.0.1:56009 -> 198.28.0.2:53 1 64 1 2025-12-04 13:04:23.908 00:00:00.000 UDP 28.104.0.1:55005 -> 198.28.0.2:53 1 64 1 2025-12-04 13:04:23.917 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56009 1 109 1 2025-12-04 13:04:23.917 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55005 1 80 1 2025-12-04 13:01:07.667 00:05:08.907 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 13:04:16.443 00:01:00.476 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 13:05:24.230 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57302 1 109 1 2025-12-04 13:05:24.230 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55823 1 80 1 2025-12-04 13:05:24.218 00:00:00.000 UDP 28.104.0.1:57302 -> 198.28.0.2:53 1 64 1 2025-12-04 13:05:24.218 00:00:00.000 UDP 28.104.0.1:55823 -> 198.28.0.2:53 1 64 1 2025-12-04 13:06:24.522 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45937 1 80 1 2025-12-04 13:06:24.522 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52616 1 109 1 2025-12-04 13:06:24.511 00:00:00.000 UDP 28.104.0.1:52616 -> 198.28.0.2:53 1 64 1 2025-12-04 13:06:24.511 00:00:00.000 UDP 28.104.0.1:45937 -> 198.28.0.2:53 1 64 1 2025-12-04 13:07:03.759 00:00:00.020 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 13:03:05.870 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2752 1 2025-12-04 13:07:24.811 00:00:00.000 UDP 28.104.0.1:54230 -> 198.28.0.2:53 1 64 1 2025-12-04 13:07:24.811 00:00:00.000 UDP 28.104.0.1:38478 -> 198.28.0.2:53 1 64 1 2025-12-04 13:07:24.820 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38478 1 109 1 2025-12-04 13:07:24.820 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54230 1 80 1 2025-12-04 13:06:16.444 00:02:00.474 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-12-04 13:08:25.088 00:00:00.000 UDP 28.104.0.1:42783 -> 198.28.0.2:53 1 64 1 2025-12-04 13:08:25.089 00:00:00.000 UDP 28.104.0.1:41150 -> 198.28.0.2:53 1 64 1 2025-12-04 13:08:25.098 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41150 1 80 1 2025-12-04 13:08:25.098 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42783 1 109 1 2025-12-04 13:09:25.392 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58214 1 109 1 2025-12-04 13:09:25.392 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41700 1 80 1 2025-12-04 13:09:25.380 00:00:00.000 UDP 28.104.0.1:41700 -> 198.28.0.2:53 1 64 1 2025-12-04 13:09:25.381 00:00:00.000 UDP 28.104.0.1:58214 -> 198.28.0.2:53 1 64 1 2025-12-04 13:09:16.444 00:01:00.475 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 13:06:07.666 00:05:08.788 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 13:06:07.677 00:05:08.768 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 13:06:16.444 00:05:00.862 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 13:06:07.717 00:05:08.848 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 13:10:25.682 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56489 1 80 1 2025-12-04 13:10:25.682 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47802 1 109 1 2025-12-04 13:10:25.671 00:00:00.000 UDP 28.104.0.1:56489 -> 198.28.0.2:53 1 64 1 2025-12-04 13:10:25.672 00:00:00.000 UDP 28.104.0.1:47802 -> 198.28.0.2:53 1 64 1 2025-12-04 13:07:07.668 00:05:08.908 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 13:11:25.970 00:00:00.000 UDP 28.104.0.1:48042 -> 198.28.0.2:53 1 64 1 2025-12-04 13:11:25.970 00:00:00.000 UDP 28.104.0.1:47496 -> 198.28.0.2:53 1 64 1 2025-12-04 13:11:25.981 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48042 1 80 1 2025-12-04 13:11:25.981 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47496 1 109 1 2025-12-04 13:12:03.779 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 13:12:26.310 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47132 1 109 1 2025-12-04 13:12:26.310 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56508 1 80 1 2025-12-04 13:12:26.301 00:00:00.000 UDP 28.104.0.1:47132 -> 198.28.0.2:53 1 64 1 2025-12-04 13:12:26.300 00:00:00.000 UDP 28.104.0.1:56508 -> 198.28.0.2:53 1 64 1 2025-12-04 13:08:25.869 00:05:10.010 OSPF 28.0.2.1:0 -> 224.0.0.5:0 44 3180 1 2025-12-04 13:11:16.445 00:02:00.474 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-12-04 13:13:26.613 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54600 1 80 1 2025-12-04 13:13:26.613 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52618 1 109 1 2025-12-04 13:13:26.602 00:00:00.000 UDP 28.104.0.1:52618 -> 198.28.0.2:53 1 64 1 2025-12-04 13:13:26.602 00:00:00.000 UDP 28.104.0.1:54600 -> 198.28.0.2:53 1 64 1 2025-12-04 13:14:26.869 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50761 1 109 1 2025-12-04 13:14:26.869 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39203 1 80 1 2025-12-04 13:14:26.860 00:00:00.000 UDP 28.104.0.1:39203 -> 198.28.0.2:53 1 64 1 2025-12-04 13:14:26.860 00:00:00.000 UDP 28.104.0.1:50761 -> 198.28.0.2:53 1 64 1 2025-12-04 13:14:16.446 00:01:00.474 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 13:15:27.174 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60005 1 109 1 2025-12-04 13:15:27.174 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37517 1 80 1 2025-12-04 13:15:27.164 00:00:00.000 UDP 28.104.0.1:60005 -> 198.28.0.2:53 1 64 1 2025-12-04 13:15:27.164 00:00:00.000 UDP 28.104.0.1:37517 -> 198.28.0.2:53 1 64 1 2025-12-04 13:12:07.680 00:05:08.769 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 13:12:07.720 00:05:08.858 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 13:12:16.445 00:05:00.862 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 13:12:07.668 00:05:08.789 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 13:16:27.428 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41110 1 80 1 2025-12-04 13:16:27.428 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33824 1 109 1 2025-12-04 13:16:27.417 00:00:00.000 UDP 28.104.0.1:41110 -> 198.28.0.2:53 1 64 1 2025-12-04 13:16:27.417 00:00:00.000 UDP 28.104.0.1:33824 -> 198.28.0.2:53 1 64 1 2025-12-04 13:17:03.886 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 13:16:16.448 00:01:00.473 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 13:13:07.670 00:05:08.918 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 13:17:27.712 00:00:00.000 UDP 28.104.0.1:39918 -> 198.28.0.2:53 1 64 1 2025-12-04 13:17:27.713 00:00:00.000 UDP 28.104.0.1:47729 -> 198.28.0.2:53 1 64 1 2025-12-04 13:17:27.722 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47729 1 109 1 2025-12-04 13:17:27.722 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39918 1 80 1 2025-12-04 13:13:45.880 00:05:10.009 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2488 1 2025-12-04 13:18:16.448 00:00:00.473 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 123 1 2025-12-04 13:18:27.961 00:00:00.000 UDP 28.104.0.1:49412 -> 198.28.0.2:53 1 64 1 2025-12-04 13:18:27.961 00:00:00.000 UDP 28.104.0.1:45041 -> 198.28.0.2:53 1 64 1 2025-12-04 13:18:27.973 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45041 1 80 1 2025-12-04 13:18:27.974 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49412 1 109 1 2025-12-04 13:19:28.279 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43625 1 80 1 2025-12-04 13:19:28.279 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47742 1 109 1 2025-12-04 13:19:28.268 00:00:00.000 UDP 28.104.0.1:43625 -> 198.28.0.2:53 1 64 1 2025-12-04 13:19:28.268 00:00:00.000 UDP 28.104.0.1:47742 -> 198.28.0.2:53 1 64 1 2025-12-04 13:19:16.450 00:01:00.475 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 13:20:28.587 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57057 1 80 1 2025-12-04 13:20:28.588 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55976 1 109 1 2025-12-04 13:20:28.575 00:00:00.000 UDP 28.104.0.1:57057 -> 198.28.0.2:53 1 64 1 2025-12-04 13:20:28.576 00:00:00.000 UDP 28.104.0.1:55976 -> 198.28.0.2:53 1 64 1 2025-12-04 13:21:28.840 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54956 1 80 1 2025-12-04 13:21:28.840 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51370 1 109 1 2025-12-04 13:21:28.830 00:00:00.000 UDP 28.104.0.1:54956 -> 198.28.0.2:53 1 64 1 2025-12-04 13:21:28.831 00:00:00.000 UDP 28.104.0.1:51370 -> 198.28.0.2:53 1 64 1 2025-12-04 13:22:04.135 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 13:21:16.450 00:01:00.477 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 13:18:07.672 00:05:08.789 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 13:18:07.722 00:05:08.867 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 13:18:07.682 00:05:08.769 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 13:18:16.449 00:05:00.863 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 13:22:29.121 00:00:00.000 UDP 28.104.0.1:47120 -> 198.28.0.2:53 1 64 1 2025-12-04 13:22:29.121 00:00:00.000 UDP 28.104.0.1:38876 -> 198.28.0.2:53 1 64 1 2025-12-04 13:22:29.132 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38876 1 109 1 2025-12-04 13:22:29.132 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47120 1 80 1 2025-12-04 13:19:05.890 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 34 2444 1 2025-12-04 13:19:07.670 00:05:08.918 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 13:23:29.375 00:00:00.000 UDP 28.104.0.1:60217 -> 198.28.0.2:53 1 64 1 2025-12-04 13:23:29.376 00:00:00.000 UDP 28.104.0.1:42225 -> 198.28.0.2:53 1 64 1 2025-12-04 13:23:29.385 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42225 1 109 1 2025-12-04 13:23:29.385 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60217 1 80 1 2025-12-04 13:24:30.065 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59804 1 80 1 2025-12-04 13:24:30.065 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47166 1 109 1 2025-12-04 13:24:30.056 00:00:00.000 UDP 28.104.0.1:47166 -> 198.28.0.2:53 1 64 1 2025-12-04 13:24:30.056 00:00:00.000 UDP 28.104.0.1:59804 -> 198.28.0.2:53 1 64 1 2025-12-04 13:23:16.449 00:02:00.478 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-12-04 13:25:30.343 00:00:00.000 UDP 28.104.0.1:44386 -> 198.28.0.2:53 1 64 1 2025-12-04 13:25:30.343 00:00:00.000 UDP 28.104.0.1:37632 -> 198.28.0.2:53 1 64 1 2025-12-04 13:25:30.353 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44386 1 80 1 2025-12-04 13:25:30.353 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37632 1 109 1 2025-12-04 13:26:30.674 00:00:00.000 UDP 28.104.0.1:53857 -> 198.28.0.2:53 1 64 1 2025-12-04 13:26:30.674 00:00:00.000 UDP 28.104.0.1:55879 -> 198.28.0.2:53 1 64 1 2025-12-04 13:26:30.685 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53857 1 109 1 2025-12-04 13:26:30.685 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55879 1 80 1 2025-12-04 13:27:04.290 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 13:26:16.450 00:01:00.478 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 13:27:30.925 00:00:00.000 UDP 28.104.0.1:56786 -> 198.28.0.2:53 1 64 1 2025-12-04 13:27:30.924 00:00:00.000 UDP 28.104.0.1:41302 -> 198.28.0.2:53 1 64 1 2025-12-04 13:27:30.934 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41302 1 80 1 2025-12-04 13:27:30.935 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56786 1 109 1 2025-12-04 13:24:07.681 00:05:08.770 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 13:24:07.722 00:05:08.856 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 13:24:16.450 00:05:00.862 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 13:24:07.672 00:05:08.789 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 13:28:31.230 00:00:00.000 UDP 28.104.0.1:41236 -> 198.28.0.2:53 1 64 1 2025-12-04 13:28:31.230 00:00:00.000 UDP 28.104.0.1:53054 -> 198.28.0.2:53 1 64 1 2025-12-04 13:28:31.243 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53054 1 109 1 2025-12-04 13:28:31.243 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41236 1 80 1 2025-12-04 13:24:25.896 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2632 1 2025-12-04 13:25:07.672 00:05:08.917 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 13:29:31.511 00:00:00.000 UDP 28.104.0.1:50454 -> 198.28.0.2:53 1 64 1 2025-12-04 13:29:31.511 00:00:00.000 UDP 28.104.0.1:36681 -> 198.28.0.2:53 1 64 1 2025-12-04 13:29:31.521 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36681 1 109 1 2025-12-04 13:29:31.520 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50454 1 80 1 2025-12-04 13:28:16.450 00:02:00.480 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-12-04 13:30:31.820 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59426 1 80 1 2025-12-04 13:30:31.820 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34939 1 109 1 2025-12-04 13:30:31.809 00:00:00.000 UDP 28.104.0.1:34939 -> 198.28.0.2:53 1 64 1 2025-12-04 13:30:31.809 00:00:00.000 UDP 28.104.0.1:59426 -> 198.28.0.2:53 1 64 1 2025-12-04 13:31:32.108 00:00:00.000 UDP 28.104.0.1:51756 -> 198.28.0.2:53 1 64 1 2025-12-04 13:31:32.108 00:00:00.000 UDP 28.104.0.1:42984 -> 198.28.0.2:53 1 64 1 2025-12-04 13:31:32.120 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51756 1 80 1 2025-12-04 13:31:32.119 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42984 1 109 1 2025-12-04 13:32:04.527 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 13:31:16.451 00:01:00.481 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 13:32:32.413 00:00:00.000 UDP 28.104.0.1:51928 -> 198.28.0.2:53 1 64 1 2025-12-04 13:32:32.413 00:00:00.000 UDP 28.104.0.1:38585 -> 198.28.0.2:53 1 64 1 2025-12-04 13:32:32.424 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51928 1 109 1 2025-12-04 13:32:32.423 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38585 1 80 1 2025-12-04 13:33:32.732 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58945 1 109 1 2025-12-04 13:33:32.732 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36397 1 80 1 2025-12-04 13:33:32.723 00:00:00.000 UDP 28.104.0.1:36397 -> 198.28.0.2:53 1 64 1 2025-12-04 13:33:32.723 00:00:00.000 UDP 28.104.0.1:58945 -> 198.28.0.2:53 1 64 1 2025-12-04 13:29:45.899 00:05:10.009 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2896 1 2025-12-04 13:30:07.724 00:05:08.855 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 13:30:07.684 00:05:08.767 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 13:30:07.676 00:05:08.787 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 13:30:16.451 00:05:00.864 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 13:34:33.048 00:00:00.000 UDP 28.104.0.1:48091 -> 198.28.0.2:53 1 64 1 2025-12-04 13:34:33.048 00:00:00.000 UDP 28.104.0.1:38266 -> 198.28.0.2:53 1 64 1 2025-12-04 13:34:33.059 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48091 1 80 1 2025-12-04 13:34:33.059 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38266 1 109 1 2025-12-04 13:33:16.452 00:02:00.481 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-12-04 13:31:07.675 00:05:08.915 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 13:35:33.336 00:00:00.000 UDP 28.104.0.1:42642 -> 198.28.0.2:53 1 64 1 2025-12-04 13:35:33.337 00:00:00.000 UDP 28.104.0.1:58112 -> 198.28.0.2:53 1 64 1 2025-12-04 13:35:33.345 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42642 1 80 1 2025-12-04 13:35:33.345 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58112 1 109 1 2025-12-04 13:36:33.735 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43243 1 80 1 2025-12-04 13:36:33.735 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58915 1 109 1 2025-12-04 13:36:33.725 00:00:00.000 UDP 28.104.0.1:58915 -> 198.28.0.2:53 1 64 1 2025-12-04 13:36:33.726 00:00:00.000 UDP 28.104.0.1:43243 -> 198.28.0.2:53 1 64 1 2025-12-04 13:37:04.436 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 13:36:16.452 00:01:00.483 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 13:37:34.044 00:00:00.000 UDP 28.104.0.1:48183 -> 198.28.0.2:53 1 64 1 2025-12-04 13:37:34.044 00:00:00.000 UDP 28.104.0.1:49802 -> 198.28.0.2:53 1 64 1 2025-12-04 13:37:34.054 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48183 1 109 1 2025-12-04 13:37:34.054 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49802 1 80 1 2025-12-04 13:38:34.356 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43810 1 109 1 2025-12-04 13:38:34.356 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45435 1 80 1 2025-12-04 13:38:34.347 00:00:00.000 UDP 28.104.0.1:45435 -> 198.28.0.2:53 1 64 1 2025-12-04 13:38:34.348 00:00:00.000 UDP 28.104.0.1:43810 -> 198.28.0.2:53 1 64 1 2025-12-04 13:35:05.908 00:05:10.496 OSPF 28.0.2.1:0 -> 224.0.0.5:0 43 3080 1 2025-12-04 13:39:34.605 00:00:00.000 UDP 28.104.0.1:35985 -> 198.28.0.2:53 1 64 1 2025-12-04 13:39:34.605 00:00:00.000 UDP 28.104.0.1:55717 -> 198.28.0.2:53 1 64 1 2025-12-04 13:39:34.616 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55717 1 80 1 2025-12-04 13:39:34.615 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35985 1 109 1 2025-12-04 13:38:16.452 00:02:00.482 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-12-04 13:36:07.729 00:05:08.851 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 13:36:07.689 00:05:08.764 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 13:36:16.452 00:05:00.863 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 13:36:07.679 00:05:08.784 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 13:40:34.867 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56039 1 80 1 2025-12-04 13:40:34.867 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42535 1 109 1 2025-12-04 13:40:34.857 00:00:00.000 UDP 28.104.0.1:42535 -> 198.28.0.2:53 1 64 1 2025-12-04 13:40:34.857 00:00:00.000 UDP 28.104.0.1:56039 -> 198.28.0.2:53 1 64 1 2025-12-04 13:37:07.679 00:05:08.911 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 13:41:35.179 00:00:00.000 UDP 28.104.0.1:36831 -> 198.28.0.2:53 1 64 1 2025-12-04 13:41:35.179 00:00:00.000 UDP 28.104.0.1:40555 -> 198.28.0.2:53 1 64 1 2025-12-04 13:41:35.188 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36831 1 109 1 2025-12-04 13:41:35.188 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40555 1 80 1 2025-12-04 13:42:04.372 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 13:41:16.453 00:01:00.482 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 13:42:35.473 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51443 1 109 1 2025-12-04 13:42:35.473 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58232 1 80 1 2025-12-04 13:42:35.463 00:00:00.000 UDP 28.104.0.1:58232 -> 198.28.0.2:53 1 64 1 2025-12-04 13:42:35.462 00:00:00.000 UDP 28.104.0.1:51443 -> 198.28.0.2:53 1 64 1 2025-12-04 13:43:35.765 00:00:00.000 UDP 28.104.0.1:42651 -> 198.28.0.2:53 1 64 1 2025-12-04 13:43:35.764 00:00:00.000 UDP 28.104.0.1:36961 -> 198.28.0.2:53 1 64 1 2025-12-04 13:43:35.775 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36961 1 109 1 2025-12-04 13:43:35.775 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42651 1 80 1 2025-12-04 13:43:16.454 00:01:00.481 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 13:44:36.078 00:00:00.000 UDP 28.104.0.1:53146 -> 198.28.0.2:53 1 64 1 2025-12-04 13:44:36.078 00:00:00.000 UDP 28.104.0.1:37454 -> 198.28.0.2:53 1 64 1 2025-12-04 13:44:36.088 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37454 1 109 1 2025-12-04 13:40:25.916 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2624 1 2025-12-04 13:44:36.088 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53146 1 80 1 2025-12-04 13:45:16.455 00:00:00.481 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 123 1 2025-12-04 13:45:36.379 00:00:00.000 UDP 28.104.0.1:54835 -> 198.28.0.2:53 1 64 1 2025-12-04 13:45:36.379 00:00:00.000 UDP 28.104.0.1:60397 -> 198.28.0.2:53 1 64 1 2025-12-04 13:45:36.389 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60397 1 109 1 2025-12-04 13:45:36.389 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54835 1 80 1 2025-12-04 13:42:07.691 00:05:08.764 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 13:42:07.732 00:05:08.851 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 13:42:07.679 00:05:08.784 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 13:42:16.454 00:05:00.870 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 13:46:36.678 00:00:00.000 UDP 28.104.0.1:56380 -> 198.28.0.2:53 1 64 1 2025-12-04 13:46:36.677 00:00:00.000 UDP 28.104.0.1:52329 -> 198.28.0.2:53 1 64 1 2025-12-04 13:46:36.687 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52329 1 109 1 2025-12-04 13:46:36.689 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56380 1 80 1 2025-12-04 13:47:04.497 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 13:46:16.454 00:01:00.482 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 13:43:07.680 00:05:08.912 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 13:47:36.979 00:00:00.000 UDP 28.104.0.1:53918 -> 198.28.0.2:53 1 64 1 2025-12-04 13:47:36.979 00:00:00.000 UDP 28.104.0.1:44257 -> 198.28.0.2:53 1 64 1 2025-12-04 13:47:36.990 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44257 1 80 1 2025-12-04 13:47:36.990 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53918 1 109 1 2025-12-04 13:48:37.276 00:00:00.000 UDP 28.104.0.1:33534 -> 198.28.0.2:53 1 64 1 2025-12-04 13:48:37.276 00:00:00.000 UDP 28.104.0.1:54113 -> 198.28.0.2:53 1 64 1 2025-12-04 13:48:37.286 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54113 1 109 1 2025-12-04 13:48:37.286 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33534 1 80 1 2025-12-04 13:48:16.455 00:01:00.481 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 13:49:37.627 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39802 1 80 1 2025-12-04 13:49:37.627 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56470 1 109 1 2025-12-04 13:49:37.617 00:00:00.000 UDP 28.104.0.1:39802 -> 198.28.0.2:53 1 64 1 2025-12-04 13:49:37.617 00:00:00.000 UDP 28.104.0.1:56470 -> 198.28.0.2:53 1 64 1 2025-12-04 13:45:45.921 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 34 2304 1 2025-12-04 13:50:16.454 00:00:00.481 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 123 1 2025-12-04 13:50:37.914 00:00:00.000 UDP 28.104.0.1:44966 -> 198.28.0.2:53 1 64 1 2025-12-04 13:50:37.914 00:00:00.000 UDP 28.104.0.1:42867 -> 198.28.0.2:53 1 64 1 2025-12-04 13:50:37.926 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42867 1 109 1 2025-12-04 13:50:37.926 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44966 1 80 1 2025-12-04 13:51:38.225 00:00:00.000 UDP 28.104.0.1:46125 -> 198.28.0.2:53 1 64 1 2025-12-04 13:51:38.225 00:00:00.000 UDP 28.104.0.1:37634 -> 198.28.0.2:53 1 64 1 2025-12-04 13:51:38.236 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46125 1 109 1 2025-12-04 13:51:38.236 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37634 1 80 1 2025-12-04 13:52:04.844 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 13:48:07.683 00:05:08.783 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 13:51:16.454 00:01:00.482 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 13:48:07.733 00:05:08.850 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 13:48:07.693 00:05:08.763 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 13:48:16.454 00:05:00.871 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 13:52:38.521 00:00:00.000 UDP 28.104.0.1:42425 -> 198.28.0.2:53 1 64 1 2025-12-04 13:52:38.521 00:00:00.000 UDP 28.104.0.1:51467 -> 198.28.0.2:53 1 64 1 2025-12-04 13:52:38.533 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51467 1 109 1 2025-12-04 13:52:38.532 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42425 1 80 1 2025-12-04 13:49:07.683 00:05:08.910 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 13:53:38.772 00:00:00.000 UDP 28.104.0.1:58167 -> 198.28.0.2:53 1 64 1 2025-12-04 13:53:38.772 00:00:00.000 UDP 28.104.0.1:43319 -> 198.28.0.2:53 1 64 1 2025-12-04 13:53:38.782 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58167 1 109 1 2025-12-04 13:53:38.782 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43319 1 80 1 2025-12-04 13:53:16.456 00:01:00.481 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 13:54:39.092 00:00:00.000 UDP 28.104.0.1:38562 -> 198.28.0.2:53 1 64 1 2025-12-04 13:54:39.092 00:00:00.000 UDP 28.104.0.1:54045 -> 198.28.0.2:53 1 64 1 2025-12-04 13:54:39.103 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38562 1 80 1 2025-12-04 13:54:39.103 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54045 1 109 1 2025-12-04 13:55:16.456 00:00:00.480 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 123 1 2025-12-04 13:51:05.929 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2916 1 2025-12-04 13:55:39.390 00:00:00.000 UDP 28.104.0.1:54616 -> 198.28.0.2:53 1 64 1 2025-12-04 13:55:39.390 00:00:00.000 UDP 28.104.0.1:33699 -> 198.28.0.2:53 1 64 1 2025-12-04 13:55:39.401 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33699 1 109 1 2025-12-04 13:55:39.401 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54616 1 80 1 2025-12-04 13:56:39.702 00:00:00.000 UDP 28.104.0.1:41698 -> 198.28.0.2:53 1 64 1 2025-12-04 13:56:39.702 00:00:00.000 UDP 28.104.0.1:33294 -> 198.28.0.2:53 1 64 1 2025-12-04 13:56:39.712 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33294 1 80 1 2025-12-04 13:56:39.712 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41698 1 109 1 2025-12-04 13:57:04.817 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 13:56:16.456 00:01:00.481 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 13:57:39.993 00:00:00.000 UDP 28.104.0.1:60894 -> 198.28.0.2:53 1 64 1 2025-12-04 13:57:39.993 00:00:00.000 UDP 28.104.0.1:43917 -> 198.28.0.2:53 1 64 1 2025-12-04 13:57:40.006 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43917 1 80 1 2025-12-04 13:57:40.006 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60894 1 109 1 2025-12-04 13:54:07.734 00:05:08.850 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 13:54:07.694 00:05:08.763 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 13:54:16.456 00:05:00.871 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 13:54:07.683 00:05:08.783 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 13:58:40.324 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58793 1 109 1 2025-12-04 13:58:40.324 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45213 1 80 1 2025-12-04 13:58:40.312 00:00:00.000 UDP 28.104.0.1:45213 -> 198.28.0.2:53 1 64 1 2025-12-04 13:58:40.312 00:00:00.000 UDP 28.104.0.1:58793 -> 198.28.0.2:53 1 64 1 Summary: total flows: 341, total bytes: 96293, total packets: 1420, avg bps: 200, avg pps: 0, avg bpp: 67 Time window: 2025-12-04 12:55:07 - 2025-12-04 13:59:17 Total flows processed: 341, passed: 341, Blocks skipped: 0, Bytes read: 35528 Sys: 0.0065s User: 0.0018s Wall: 0.0038s flows/second: 88665.2 Runtime: 0.0039s