Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-04 15:59:23.743 00:00:00.000 UDP 28.104.0.1:46482 -> 198.28.0.2:53 1 64 1 2025-12-04 15:59:23.743 00:00:00.000 UDP 28.104.0.1:53798 -> 198.28.0.2:53 1 64 1 2025-12-04 15:55:07.731 00:05:08.914 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 15:59:23.754 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46482 1 80 1 2025-12-04 15:59:23.754 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53798 1 109 1 2025-12-04 15:59:16.489 00:01:00.484 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 16:00:24.004 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52795 1 80 1 2025-12-04 16:00:24.004 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51626 1 109 1 2025-12-04 16:00:23.992 00:00:00.000 UDP 28.104.0.1:51626 -> 198.28.0.2:53 1 64 1 2025-12-04 16:00:23.992 00:00:00.000 UDP 28.104.0.1:52795 -> 198.28.0.2:53 1 64 1 2025-12-04 16:01:24.288 00:00:00.000 UDP 28.104.0.1:40773 -> 198.28.0.2:53 1 64 1 2025-12-04 16:01:24.288 00:00:00.000 UDP 28.104.0.1:53616 -> 198.28.0.2:53 1 64 1 2025-12-04 16:01:24.297 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53616 1 109 1 2025-12-04 16:01:24.297 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40773 1 80 1 2025-12-04 16:02:07.228 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 16:01:16.489 00:01:00.484 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 16:02:24.613 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41223 1 80 1 2025-12-04 15:58:16.161 00:05:10.291 OSPF 28.0.2.1:0 -> 224.0.0.5:0 44 3124 1 2025-12-04 16:02:24.612 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40093 1 109 1 2025-12-04 16:02:24.602 00:00:00.000 UDP 28.104.0.1:40093 -> 198.28.0.2:53 1 64 1 2025-12-04 16:02:24.602 00:00:00.000 UDP 28.104.0.1:41223 -> 198.28.0.2:53 1 64 1 2025-12-04 16:03:16.491 00:00:00.484 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 123 1 2025-12-04 16:03:24.914 00:00:00.000 UDP 28.104.0.1:42076 -> 198.28.0.2:53 1 64 1 2025-12-04 16:03:24.915 00:00:00.000 UDP 28.104.0.1:54169 -> 198.28.0.2:53 1 64 1 2025-12-04 16:03:24.926 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42076 1 80 1 2025-12-04 16:03:24.926 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54169 1 109 1 2025-12-04 16:00:07.782 00:05:08.856 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 16:00:07.742 00:05:08.747 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 16:00:07.732 00:05:08.767 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 16:00:16.490 00:05:00.876 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 16:04:25.219 00:00:00.000 UDP 28.104.0.1:49619 -> 198.28.0.2:53 1 64 1 2025-12-04 16:04:25.219 00:00:00.000 UDP 28.104.0.1:51678 -> 198.28.0.2:53 1 64 1 2025-12-04 16:04:25.229 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49619 1 80 1 2025-12-04 16:04:25.230 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51678 1 109 1 2025-12-04 16:04:16.490 00:01:00.486 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 16:01:07.732 00:05:08.916 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 16:05:25.486 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59094 1 109 1 2025-12-04 16:05:25.486 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50803 1 80 1 2025-12-04 16:05:25.476 00:00:00.000 UDP 28.104.0.1:59094 -> 198.28.0.2:53 1 64 1 2025-12-04 16:05:25.476 00:00:00.000 UDP 28.104.0.1:50803 -> 198.28.0.2:53 1 64 1 2025-12-04 16:06:25.779 00:00:00.000 UDP 28.104.0.1:38230 -> 198.28.0.2:53 1 64 1 2025-12-04 16:06:25.779 00:00:00.000 UDP 28.104.0.1:34248 -> 198.28.0.2:53 1 64 1 2025-12-04 16:06:25.788 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34248 1 80 1 2025-12-04 16:06:25.788 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38230 1 109 1 2025-12-04 16:07:07.427 00:00:00.020 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 16:06:16.490 00:01:00.487 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 16:07:26.095 00:00:00.000 UDP 28.104.0.1:50300 -> 198.28.0.2:53 1 64 1 2025-12-04 16:07:26.095 00:00:00.000 UDP 28.104.0.1:58538 -> 198.28.0.2:53 1 64 1 2025-12-04 16:07:26.105 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50300 1 80 1 2025-12-04 16:07:26.105 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58538 1 109 1 2025-12-04 16:03:36.167 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2948 1 2025-12-04 16:08:16.490 00:00:00.488 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 123 1 2025-12-04 16:08:26.414 00:00:00.000 UDP 28.104.0.1:58432 -> 198.28.0.2:53 1 64 1 2025-12-04 16:08:26.414 00:00:00.000 UDP 28.104.0.1:39154 -> 198.28.0.2:53 1 64 1 2025-12-04 16:08:26.425 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58432 1 109 1 2025-12-04 16:08:26.424 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39154 1 80 1 2025-12-04 16:09:26.706 00:00:00.000 UDP 28.104.0.1:57966 -> 198.28.0.2:53 1 64 1 2025-12-04 16:09:26.706 00:00:00.000 UDP 28.104.0.1:44577 -> 198.28.0.2:53 1 64 1 2025-12-04 16:09:26.716 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44577 1 80 1 2025-12-04 16:09:26.716 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57966 1 109 1 2025-12-04 16:06:07.733 00:05:08.767 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 16:09:16.490 00:01:00.488 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 16:06:07.782 00:05:08.857 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 16:06:07.742 00:05:08.748 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 16:06:16.489 00:05:00.879 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 16:10:27.031 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59111 1 109 1 2025-12-04 16:10:27.032 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34052 1 80 1 2025-12-04 16:10:27.020 00:00:00.000 UDP 28.104.0.1:59111 -> 198.28.0.2:53 1 64 1 2025-12-04 16:10:27.021 00:00:00.000 UDP 28.104.0.1:34052 -> 198.28.0.2:53 1 64 1 2025-12-04 16:07:07.734 00:05:08.916 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 16:11:27.332 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55247 1 109 1 2025-12-04 16:11:27.332 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60694 1 80 1 2025-12-04 16:11:27.321 00:00:00.000 UDP 28.104.0.1:60694 -> 198.28.0.2:53 1 64 1 2025-12-04 16:11:27.321 00:00:00.000 UDP 28.104.0.1:55247 -> 198.28.0.2:53 1 64 1 2025-12-04 16:12:07.626 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 16:11:16.490 00:01:00.488 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 16:12:27.612 00:00:00.000 UDP 28.104.0.1:49645 -> 198.28.0.2:53 1 64 1 2025-12-04 16:12:27.612 00:00:00.000 UDP 28.104.0.1:41039 -> 198.28.0.2:53 1 64 1 2025-12-04 16:12:27.623 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49645 1 80 1 2025-12-04 16:12:27.623 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41039 1 109 1 2025-12-04 16:08:56.174 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 34 2444 1 2025-12-04 16:13:27.917 00:00:00.000 UDP 28.104.0.1:42280 -> 198.28.0.2:53 1 64 1 2025-12-04 16:13:27.917 00:00:00.000 UDP 28.104.0.1:41182 -> 198.28.0.2:53 1 64 1 2025-12-04 16:13:27.927 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42280 1 80 1 2025-12-04 16:13:27.927 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41182 1 109 1 2025-12-04 16:14:28.229 00:00:00.000 UDP 28.104.0.1:34715 -> 198.28.0.2:53 1 64 1 2025-12-04 16:14:28.228 00:00:00.000 UDP 28.104.0.1:46665 -> 198.28.0.2:53 1 64 1 2025-12-04 16:14:28.241 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46665 1 109 1 2025-12-04 16:14:28.241 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34715 1 80 1 2025-12-04 16:13:16.490 00:02:00.488 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-12-04 16:15:28.538 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48836 1 109 1 2025-12-04 16:15:28.539 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38969 1 80 1 2025-12-04 16:15:28.529 00:00:00.000 UDP 28.104.0.1:38969 -> 198.28.0.2:53 1 64 1 2025-12-04 16:15:28.529 00:00:00.000 UDP 28.104.0.1:48836 -> 198.28.0.2:53 1 64 1 2025-12-04 16:12:07.744 00:05:08.749 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 16:12:07.784 00:05:08.857 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 16:12:07.733 00:05:08.770 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 16:12:16.490 00:05:00.880 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 16:16:28.828 00:00:00.000 UDP 28.104.0.1:45221 -> 198.28.0.2:53 1 64 1 2025-12-04 16:16:28.828 00:00:00.000 UDP 28.104.0.1:49636 -> 198.28.0.2:53 1 64 1 2025-12-04 16:16:28.838 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49636 1 109 1 2025-12-04 16:16:28.838 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45221 1 80 1 2025-12-04 16:17:07.325 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 16:16:16.493 00:01:00.486 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 16:13:07.733 00:05:08.917 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 16:17:29.146 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52413 1 80 1 2025-12-04 16:17:29.146 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54876 1 109 1 2025-12-04 16:17:29.136 00:00:00.000 UDP 28.104.0.1:54876 -> 198.28.0.2:53 1 64 1 2025-12-04 16:17:29.135 00:00:00.000 UDP 28.104.0.1:52413 -> 198.28.0.2:53 1 64 1 2025-12-04 16:14:16.180 00:05:10.011 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2632 1 2025-12-04 16:18:29.450 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56286 1 80 1 2025-12-04 16:18:29.450 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48021 1 109 1 2025-12-04 16:18:29.440 00:00:00.000 UDP 28.104.0.1:48021 -> 198.28.0.2:53 1 64 1 2025-12-04 16:18:29.440 00:00:00.000 UDP 28.104.0.1:56286 -> 198.28.0.2:53 1 64 1 2025-12-04 16:19:29.785 00:00:00.000 UDP 28.104.0.1:36703 -> 198.28.0.2:53 1 64 1 2025-12-04 16:19:29.785 00:00:00.000 UDP 28.104.0.1:55261 -> 198.28.0.2:53 1 64 1 2025-12-04 16:19:29.795 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55261 1 109 1 2025-12-04 16:19:29.795 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36703 1 80 1 2025-12-04 16:18:16.494 00:02:00.487 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-12-04 16:20:30.101 00:00:00.000 UDP 28.104.0.1:47891 -> 198.28.0.2:53 1 64 1 2025-12-04 16:20:30.101 00:00:00.000 UDP 28.104.0.1:36394 -> 198.28.0.2:53 1 64 1 2025-12-04 16:20:30.111 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47891 1 80 1 2025-12-04 16:20:30.111 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36394 1 109 1 2025-12-04 16:21:30.398 00:00:00.000 UDP 28.104.0.1:35526 -> 198.28.0.2:53 1 64 1 2025-12-04 16:21:30.398 00:00:00.000 UDP 28.104.0.1:53507 -> 198.28.0.2:53 1 64 1 2025-12-04 16:21:30.408 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53507 1 109 1 2025-12-04 16:21:30.408 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35526 1 80 1 2025-12-04 16:22:07.709 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 16:18:07.734 00:05:08.772 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 16:21:16.498 00:01:00.482 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 16:18:07.744 00:05:08.752 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 16:18:16.493 00:05:00.880 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 16:18:07.784 00:05:08.857 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 16:22:30.692 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41074 1 109 1 2025-12-04 16:22:30.692 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34166 1 80 1 2025-12-04 16:22:30.682 00:00:00.000 UDP 28.104.0.1:41074 -> 198.28.0.2:53 1 64 1 2025-12-04 16:22:30.682 00:00:00.000 UDP 28.104.0.1:34166 -> 198.28.0.2:53 1 64 1 2025-12-04 16:19:07.734 00:05:08.917 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 16:23:30.933 00:00:00.000 UDP 28.104.0.1:35477 -> 198.28.0.2:53 1 64 1 2025-12-04 16:23:30.933 00:00:00.000 UDP 28.104.0.1:54860 -> 198.28.0.2:53 1 64 1 2025-12-04 16:23:30.944 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54860 1 80 1 2025-12-04 16:23:30.946 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35477 1 109 1 2025-12-04 16:19:36.192 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2672 1 2025-12-04 16:24:31.236 00:00:00.000 UDP 28.104.0.1:40351 -> 198.28.0.2:53 1 64 1 2025-12-04 16:24:31.236 00:00:00.000 UDP 28.104.0.1:50895 -> 198.28.0.2:53 1 64 1 2025-12-04 16:24:31.246 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50895 1 80 1 2025-12-04 16:24:31.246 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40351 1 109 1 2025-12-04 16:23:16.497 00:02:00.490 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-12-04 16:25:31.538 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48566 1 80 1 2025-12-04 16:25:31.538 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36652 1 109 1 2025-12-04 16:25:31.527 00:00:00.000 UDP 28.104.0.1:48566 -> 198.28.0.2:53 1 64 1 2025-12-04 16:25:31.527 00:00:00.000 UDP 28.104.0.1:36652 -> 198.28.0.2:53 1 64 1 2025-12-04 16:26:31.821 00:00:00.000 UDP 28.104.0.1:39557 -> 198.28.0.2:53 1 64 1 2025-12-04 16:26:31.820 00:00:00.000 UDP 28.104.0.1:38339 -> 198.28.0.2:53 1 64 1 2025-12-04 16:26:31.830 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38339 1 80 1 2025-12-04 16:26:31.831 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39557 1 109 1 2025-12-04 16:27:07.666 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 16:26:16.498 00:01:00.489 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 16:27:32.126 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40807 1 109 1 2025-12-04 16:27:32.126 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55499 1 80 1 2025-12-04 16:27:32.116 00:00:00.000 UDP 28.104.0.1:55499 -> 198.28.0.2:53 1 64 1 2025-12-04 16:27:32.116 00:00:00.000 UDP 28.104.0.1:40807 -> 198.28.0.2:53 1 64 1 2025-12-04 16:24:07.745 00:05:08.754 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 16:24:07.785 00:05:08.859 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 16:24:16.497 00:05:00.877 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 16:24:07.736 00:05:08.774 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 16:28:32.412 00:00:00.000 UDP 28.104.0.1:38287 -> 198.28.0.2:53 1 64 1 2025-12-04 16:28:32.413 00:00:00.000 UDP 28.104.0.1:52035 -> 198.28.0.2:53 1 64 1 2025-12-04 16:28:32.423 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52035 1 109 1 2025-12-04 16:28:32.423 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38287 1 80 1 2025-12-04 16:24:56.196 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2752 1 2025-12-04 16:28:16.500 00:01:00.488 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 16:25:07.736 00:05:08.919 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 16:29:32.707 00:00:00.000 UDP 28.104.0.1:57970 -> 198.28.0.2:53 1 64 1 2025-12-04 16:29:32.706 00:00:00.000 UDP 28.104.0.1:33008 -> 198.28.0.2:53 1 64 1 2025-12-04 16:29:32.718 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57970 1 109 1 2025-12-04 16:29:32.717 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33008 1 80 1 2025-12-04 16:30:16.499 00:00:00.488 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 123 1 2025-12-04 16:30:33.050 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33311 1 109 1 2025-12-04 16:30:33.050 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35470 1 80 1 2025-12-04 16:30:33.039 00:00:00.000 UDP 28.104.0.1:35470 -> 198.28.0.2:53 1 64 1 2025-12-04 16:30:33.039 00:00:00.000 UDP 28.104.0.1:33311 -> 198.28.0.2:53 1 64 1 2025-12-04 16:31:33.331 00:00:00.000 UDP 28.104.0.1:56099 -> 198.28.0.2:53 1 64 1 2025-12-04 16:31:33.331 00:00:00.000 UDP 28.104.0.1:50799 -> 198.28.0.2:53 1 64 1 2025-12-04 16:31:33.341 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56099 1 80 1 2025-12-04 16:31:33.341 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50799 1 109 1 2025-12-04 16:32:08.235 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 16:31:16.500 00:01:00.490 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 16:32:33.615 00:00:00.000 UDP 28.104.0.1:41469 -> 198.28.0.2:53 1 64 1 2025-12-04 16:32:33.616 00:00:00.000 UDP 28.104.0.1:51905 -> 198.28.0.2:53 1 64 1 2025-12-04 16:32:33.626 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51905 1 80 1 2025-12-04 16:32:33.626 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41469 1 109 1 2025-12-04 16:33:33.872 00:00:00.000 UDP 28.104.0.1:43607 -> 198.28.0.2:53 1 64 1 2025-12-04 16:33:33.872 00:00:00.000 UDP 28.104.0.1:57545 -> 198.28.0.2:53 1 64 1 2025-12-04 16:33:33.882 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57545 1 80 1 2025-12-04 16:33:33.882 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43607 1 109 1 2025-12-04 16:33:16.500 00:01:00.490 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 16:30:07.737 00:05:08.775 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 16:30:07.786 00:05:08.860 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 16:30:07.746 00:05:08.755 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 16:30:16.500 00:05:00.879 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 16:30:16.202 00:05:10.011 OSPF 28.0.2.1:0 -> 224.0.0.5:0 45 3284 1 2025-12-04 16:34:34.189 00:00:00.000 UDP 28.104.0.1:37901 -> 198.28.0.2:53 1 64 1 2025-12-04 16:34:34.189 00:00:00.000 UDP 28.104.0.1:52674 -> 198.28.0.2:53 1 64 1 2025-12-04 16:34:34.198 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52674 1 80 1 2025-12-04 16:34:34.198 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37901 1 109 1 2025-12-04 16:35:16.500 00:00:00.489 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 123 1 2025-12-04 16:31:07.736 00:05:08.919 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 16:35:34.479 00:00:00.000 UDP 28.104.0.1:51598 -> 198.28.0.2:53 1 64 1 2025-12-04 16:35:34.478 00:00:00.000 UDP 28.104.0.1:46049 -> 198.28.0.2:53 1 64 1 2025-12-04 16:35:34.490 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46049 1 109 1 2025-12-04 16:35:34.490 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51598 1 80 1 2025-12-04 16:36:34.785 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47901 1 80 1 2025-12-04 16:36:34.785 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35330 1 109 1 2025-12-04 16:36:34.774 00:00:00.000 UDP 28.104.0.1:35330 -> 198.28.0.2:53 1 64 1 2025-12-04 16:36:34.774 00:00:00.000 UDP 28.104.0.1:47901 -> 198.28.0.2:53 1 64 1 2025-12-04 16:37:08.000 00:00:00.025 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 16:36:16.501 00:01:00.489 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 16:37:35.086 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51278 1 109 1 2025-12-04 16:37:35.086 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53667 1 80 1 2025-12-04 16:37:35.075 00:00:00.000 UDP 28.104.0.1:51278 -> 198.28.0.2:53 1 64 1 2025-12-04 16:37:35.075 00:00:00.000 UDP 28.104.0.1:53667 -> 198.28.0.2:53 1 64 1 2025-12-04 16:38:35.337 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59847 1 109 1 2025-12-04 16:38:35.337 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57896 1 80 1 2025-12-04 16:38:35.327 00:00:00.000 UDP 28.104.0.1:57896 -> 198.28.0.2:53 1 64 1 2025-12-04 16:38:35.326 00:00:00.000 UDP 28.104.0.1:59847 -> 198.28.0.2:53 1 64 1 2025-12-04 16:38:16.502 00:01:00.489 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 16:39:35.586 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49575 1 109 1 2025-12-04 16:39:35.586 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36477 1 80 1 2025-12-04 16:39:35.576 00:00:00.000 UDP 28.104.0.1:36477 -> 198.28.0.2:53 1 64 1 2025-12-04 16:39:35.576 00:00:00.000 UDP 28.104.0.1:49575 -> 198.28.0.2:53 1 64 1 2025-12-04 16:35:36.213 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 34 2304 1 2025-12-04 16:40:16.503 00:00:00.487 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 123 1 2025-12-04 16:36:07.787 00:05:08.859 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 16:36:07.747 00:05:08.755 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 16:36:16.500 00:05:00.880 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 16:36:07.737 00:05:08.776 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 16:40:35.870 00:00:00.000 UDP 28.104.0.1:58434 -> 198.28.0.2:53 1 64 1 2025-12-04 16:40:35.870 00:00:00.000 UDP 28.104.0.1:52606 -> 198.28.0.2:53 1 64 1 2025-12-04 16:40:35.880 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58434 1 80 1 2025-12-04 16:40:35.880 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52606 1 109 1 2025-12-04 16:37:07.738 00:05:08.919 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 16:41:36.185 00:00:00.000 UDP 28.104.0.1:58985 -> 198.28.0.2:53 1 64 1 2025-12-04 16:41:36.185 00:00:00.000 UDP 28.104.0.1:42699 -> 198.28.0.2:53 1 64 1 2025-12-04 16:41:36.196 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42699 1 109 1 2025-12-04 16:41:36.196 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58985 1 80 1 2025-12-04 16:42:08.045 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 16:41:16.503 00:01:00.487 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 16:42:36.440 00:00:00.000 UDP 28.104.0.1:43317 -> 198.28.0.2:53 1 64 1 2025-12-04 16:42:36.440 00:00:00.000 UDP 28.104.0.1:40144 -> 198.28.0.2:53 1 64 1 2025-12-04 16:42:36.450 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40144 1 80 1 2025-12-04 16:42:36.449 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43317 1 109 1 2025-12-04 16:43:36.703 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38382 1 80 1 2025-12-04 16:43:36.703 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55090 1 109 1 2025-12-04 16:43:36.692 00:00:00.000 UDP 28.104.0.1:55090 -> 198.28.0.2:53 1 64 1 2025-12-04 16:43:36.692 00:00:00.000 UDP 28.104.0.1:38382 -> 198.28.0.2:53 1 64 1 2025-12-04 16:43:16.503 00:01:00.487 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 16:44:38.233 00:00:00.000 UDP 28.104.0.1:35496 -> 198.28.0.2:53 1 64 1 2025-12-04 16:44:38.233 00:00:00.000 UDP 28.104.0.1:37610 -> 198.28.0.2:53 1 64 1 2025-12-04 16:44:38.244 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35496 1 80 1 2025-12-04 16:44:38.244 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37610 1 109 1 2025-12-04 16:40:56.215 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2652 1 2025-12-04 16:45:38.545 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45969 1 80 1 2025-12-04 16:45:38.545 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39468 1 109 1 2025-12-04 16:45:38.535 00:00:00.000 UDP 28.104.0.1:39468 -> 198.28.0.2:53 1 64 1 2025-12-04 16:45:38.535 00:00:00.000 UDP 28.104.0.1:45969 -> 198.28.0.2:53 1 64 1 2025-12-04 16:42:07.738 00:05:08.776 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 16:42:07.788 00:05:08.859 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 16:42:07.748 00:05:08.756 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 16:42:16.505 00:05:00.880 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 16:46:38.846 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55690 1 80 1 2025-12-04 16:46:38.846 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49020 1 109 1 2025-12-04 16:46:38.836 00:00:00.000 UDP 28.104.0.1:55690 -> 198.28.0.2:53 1 64 1 2025-12-04 16:46:38.836 00:00:00.000 UDP 28.104.0.1:49020 -> 198.28.0.2:53 1 64 1 2025-12-04 16:47:08.055 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 16:43:07.738 00:05:08.920 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 16:45:16.504 00:02:00.488 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-12-04 16:47:39.138 00:00:00.000 UDP 28.104.0.1:59707 -> 198.28.0.2:53 1 64 1 2025-12-04 16:47:39.138 00:00:00.000 UDP 28.104.0.1:39923 -> 198.28.0.2:53 1 64 1 2025-12-04 16:47:39.148 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59707 1 109 1 2025-12-04 16:47:39.148 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39923 1 80 1 2025-12-04 16:48:39.443 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46567 1 109 1 2025-12-04 16:48:39.443 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40287 1 80 1 2025-12-04 16:48:39.433 00:00:00.000 UDP 28.104.0.1:40287 -> 198.28.0.2:53 1 64 1 2025-12-04 16:48:39.433 00:00:00.000 UDP 28.104.0.1:46567 -> 198.28.0.2:53 1 64 1 2025-12-04 16:48:16.504 00:01:00.487 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 16:49:39.778 00:00:00.000 UDP 28.104.0.1:53041 -> 198.28.0.2:53 1 64 1 2025-12-04 16:49:39.778 00:00:00.000 UDP 28.104.0.1:58065 -> 198.28.0.2:53 1 64 1 2025-12-04 16:49:39.790 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58065 1 109 1 2025-12-04 16:49:39.790 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53041 1 80 1 2025-12-04 16:46:16.220 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2712 1 2025-12-04 16:50:40.090 00:00:00.000 UDP 28.104.0.1:53012 -> 198.28.0.2:53 1 64 1 2025-12-04 16:50:40.091 00:00:00.000 UDP 28.104.0.1:49886 -> 198.28.0.2:53 1 64 1 2025-12-04 16:50:40.101 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49886 1 80 1 2025-12-04 16:50:40.101 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53012 1 109 1 2025-12-04 16:51:40.360 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57277 1 109 1 2025-12-04 16:51:40.360 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60104 1 80 1 2025-12-04 16:51:40.349 00:00:00.000 UDP 28.104.0.1:60104 -> 198.28.0.2:53 1 64 1 2025-12-04 16:51:40.349 00:00:00.000 UDP 28.104.0.1:57277 -> 198.28.0.2:53 1 64 1 2025-12-04 16:52:08.769 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 16:50:16.505 00:02:00.487 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-12-04 16:48:07.789 00:05:08.859 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 16:48:07.749 00:05:08.756 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 16:48:16.504 00:05:00.882 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 16:48:07.739 00:05:08.777 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 16:52:40.647 00:00:00.000 UDP 28.104.0.1:57183 -> 198.28.0.2:53 1 64 1 2025-12-04 16:52:40.647 00:00:00.000 UDP 28.104.0.1:38410 -> 198.28.0.2:53 1 64 1 2025-12-04 16:52:40.656 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38410 1 80 1 2025-12-04 16:52:40.656 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57183 1 109 1 2025-12-04 16:49:07.739 00:05:08.919 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-04 16:53:40.946 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39810 1 80 1 2025-12-04 16:53:40.946 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42114 1 109 1 2025-12-04 16:53:40.937 00:00:00.000 UDP 28.104.0.1:39810 -> 198.28.0.2:53 1 64 1 2025-12-04 16:53:40.937 00:00:00.000 UDP 28.104.0.1:42114 -> 198.28.0.2:53 1 64 1 2025-12-04 16:53:16.505 00:01:00.490 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 16:54:41.232 00:00:00.000 UDP 28.104.0.1:40877 -> 198.28.0.2:53 1 64 1 2025-12-04 16:54:41.232 00:00:00.000 UDP 28.104.0.1:43453 -> 198.28.0.2:53 1 64 1 2025-12-04 16:54:41.241 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43453 1 80 1 2025-12-04 16:54:41.242 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40877 1 109 1 2025-12-04 16:55:41.532 00:00:00.000 UDP 28.104.0.1:39422 -> 198.28.0.2:53 1 64 1 2025-12-04 16:55:41.532 00:00:00.000 UDP 28.104.0.1:43009 -> 198.28.0.2:53 1 64 1 2025-12-04 16:55:41.542 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43009 1 109 1 2025-12-04 16:55:41.542 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39422 1 80 1 2025-12-04 16:51:36.227 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2752 1 2025-12-04 16:55:16.507 00:01:00.489 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-12-04 16:56:41.833 00:00:00.000 UDP 28.104.0.1:41861 -> 198.28.0.2:53 1 64 1 2025-12-04 16:56:41.832 00:00:00.000 UDP 28.104.0.1:47233 -> 198.28.0.2:53 1 64 1 2025-12-04 16:56:41.843 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47233 1 109 1 2025-12-04 16:56:41.843 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41861 1 80 1 2025-12-04 16:57:08.322 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-04 16:57:16.507 00:00:00.489 TCP 28.154.0.1:179 -> 28.157.0.1:37077 2 123 1 2025-12-04 16:57:42.134 00:00:00.000 UDP 28.104.0.1:56666 -> 198.28.0.2:53 1 64 1 2025-12-04 16:57:42.134 00:00:00.000 UDP 28.104.0.1:53968 -> 198.28.0.2:53 1 64 1 2025-12-04 16:57:42.144 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56666 1 80 1 2025-12-04 16:57:42.144 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53968 1 109 1 2025-12-04 16:54:07.790 00:05:08.860 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-04 16:54:07.749 00:05:08.758 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-04 16:54:07.740 00:05:08.778 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-04 16:54:16.507 00:05:00.882 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-04 16:58:42.436 00:00:00.000 UDP 28.104.0.1:49649 -> 198.28.0.2:53 1 64 1 2025-12-04 16:58:42.435 00:00:00.000 UDP 28.104.0.1:55286 -> 198.28.0.2:53 1 64 1 2025-12-04 16:58:42.456 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55286 1 80 1 2025-12-04 16:58:42.456 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49649 1 109 1 Summary: total flows: 343, total bytes: 96477, total packets: 1423, avg bps: 200, avg pps: 0, avg bpp: 67 Time window: 2025-12-04 15:55:07 - 2025-12-04 16:59:17 Total flows processed: 343, passed: 343, Blocks skipped: 0, Bytes read: 35736 Sys: 0.0055s User: 0.0022s Wall: 0.0042s flows/second: 82609.6 Runtime: 0.0042s