Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-05 01:55:07.888 00:05:08.932 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-05 01:59:31.491 00:00:00.000 UDP 28.104.0.1:45705 -> 198.28.0.2:53 1 64 1 2025-12-05 01:59:31.491 00:00:00.000 UDP 28.104.0.1:56635 -> 198.28.0.2:53 1 64 1 2025-12-05 01:59:31.500 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45705 1 80 1 2025-12-05 01:59:31.500 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56635 1 109 1 2025-12-05 02:00:31.808 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47308 1 80 1 2025-12-05 02:00:31.808 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60766 1 109 1 2025-12-05 02:00:31.796 00:00:00.000 UDP 28.104.0.1:47308 -> 198.28.0.2:53 1 64 1 2025-12-05 02:00:31.797 00:00:00.000 UDP 28.104.0.1:60766 -> 198.28.0.2:53 1 64 1 2025-12-05 02:01:32.096 00:00:00.000 UDP 28.104.0.1:44847 -> 198.28.0.2:53 1 64 1 2025-12-05 02:01:32.096 00:00:00.000 UDP 28.104.0.1:41647 -> 198.28.0.2:53 1 64 1 2025-12-05 02:01:32.106 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41647 1 80 1 2025-12-05 02:01:32.106 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44847 1 109 1 2025-12-05 01:58:16.677 00:05:00.518 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-12-05 02:02:19.139 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-05 02:02:32.361 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60964 1 80 1 2025-12-05 02:02:32.361 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56558 1 109 1 2025-12-05 02:02:32.349 00:00:00.000 UDP 28.104.0.1:60964 -> 198.28.0.2:53 1 64 1 2025-12-05 02:02:32.349 00:00:00.000 UDP 28.104.0.1:56558 -> 198.28.0.2:53 1 64 1 2025-12-05 01:58:56.997 00:05:00.038 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2848 1 2025-12-05 02:03:32.664 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35960 1 80 1 2025-12-05 02:03:32.663 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54891 1 109 1 2025-12-05 02:03:32.652 00:00:00.000 UDP 28.104.0.1:35960 -> 198.28.0.2:53 1 64 1 2025-12-05 02:03:32.652 00:00:00.000 UDP 28.104.0.1:54891 -> 198.28.0.2:53 1 64 1 2025-12-05 02:00:07.888 00:05:08.800 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-05 02:00:07.938 00:05:08.873 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-05 02:00:07.898 00:05:08.779 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-05 02:00:16.677 00:05:00.891 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-05 02:04:32.954 00:00:00.000 UDP 28.104.0.1:51029 -> 198.28.0.2:53 1 64 1 2025-12-05 02:04:32.955 00:00:00.000 UDP 28.104.0.1:35311 -> 198.28.0.2:53 1 64 1 2025-12-05 02:04:32.965 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51029 1 109 1 2025-12-05 02:04:32.966 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35311 1 80 1 2025-12-05 02:01:07.888 00:05:08.933 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-05 02:05:33.262 00:00:00.000 UDP 28.104.0.1:45526 -> 198.28.0.2:53 1 64 1 2025-12-05 02:05:33.262 00:00:00.000 UDP 28.104.0.1:36505 -> 198.28.0.2:53 1 64 1 2025-12-05 02:05:33.272 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36505 1 109 1 2025-12-05 02:05:33.272 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45526 1 80 1 2025-12-05 02:06:33.570 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44371 1 109 1 2025-12-05 02:06:33.570 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48319 1 80 1 2025-12-05 02:06:33.560 00:00:00.000 UDP 28.104.0.1:48319 -> 198.28.0.2:53 1 64 1 2025-12-05 02:06:33.560 00:00:00.000 UDP 28.104.0.1:44371 -> 198.28.0.2:53 1 64 1 2025-12-05 02:07:19.475 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-05 02:07:33.862 00:00:00.000 UDP 28.104.0.1:46430 -> 198.28.0.2:53 1 64 1 2025-12-05 02:07:33.862 00:00:00.000 UDP 28.104.0.1:40502 -> 198.28.0.2:53 1 64 1 2025-12-05 02:07:33.873 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46430 1 109 1 2025-12-05 02:07:33.873 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40502 1 80 1 2025-12-05 02:04:16.677 00:05:00.519 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-12-05 02:04:07.039 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 39 2768 1 2025-12-05 02:08:34.190 00:00:00.000 UDP 28.104.0.1:36454 -> 198.28.0.2:53 1 64 1 2025-12-05 02:08:34.190 00:00:00.000 UDP 28.104.0.1:45257 -> 198.28.0.2:53 1 64 1 2025-12-05 02:08:34.201 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45257 1 109 1 2025-12-05 02:08:34.201 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36454 1 80 1 2025-12-05 02:09:34.516 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52739 1 109 1 2025-12-05 02:09:34.515 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40139 1 80 1 2025-12-05 02:09:34.505 00:00:00.000 UDP 28.104.0.1:40139 -> 198.28.0.2:53 1 64 1 2025-12-05 02:09:34.506 00:00:00.000 UDP 28.104.0.1:52739 -> 198.28.0.2:53 1 64 1 2025-12-05 02:06:07.890 00:05:08.799 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-05 02:06:07.939 00:05:08.873 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-05 02:06:07.899 00:05:08.779 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-05 02:06:16.677 00:05:00.892 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-05 02:10:34.797 00:00:00.000 UDP 28.104.0.1:57782 -> 198.28.0.2:53 1 64 1 2025-12-05 02:10:34.797 00:00:00.000 UDP 28.104.0.1:45492 -> 198.28.0.2:53 1 64 1 2025-12-05 02:10:34.807 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57782 1 80 1 2025-12-05 02:10:34.807 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45492 1 109 1 2025-12-05 02:07:07.889 00:05:08.933 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-05 02:11:35.105 00:00:00.000 UDP 28.104.0.1:34414 -> 198.28.0.2:53 1 64 1 2025-12-05 02:11:35.105 00:00:00.000 UDP 28.104.0.1:51493 -> 198.28.0.2:53 1 64 1 2025-12-05 02:11:35.117 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34414 1 80 1 2025-12-05 02:11:35.117 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51493 1 109 1 2025-12-05 02:12:19.437 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-05 02:12:35.395 00:00:00.000 UDP 28.104.0.1:53301 -> 198.28.0.2:53 1 64 1 2025-12-05 02:12:35.395 00:00:00.000 UDP 28.104.0.1:36973 -> 198.28.0.2:53 1 64 1 2025-12-05 02:12:35.407 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53301 1 80 1 2025-12-05 02:12:35.406 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36973 1 109 1 2025-12-05 02:13:35.696 00:00:00.000 UDP 28.104.0.1:34660 -> 198.28.0.2:53 1 64 1 2025-12-05 02:13:35.696 00:00:00.000 UDP 28.104.0.1:36099 -> 198.28.0.2:53 1 64 1 2025-12-05 02:13:35.707 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36099 1 109 1 2025-12-05 02:13:35.707 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34660 1 80 1 2025-12-05 02:09:27.043 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2508 1 2025-12-05 02:10:16.678 00:05:00.518 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-12-05 02:14:35.964 00:00:00.000 UDP 28.104.0.1:51973 -> 198.28.0.2:53 1 64 1 2025-12-05 02:14:35.964 00:00:00.000 UDP 28.104.0.1:44240 -> 198.28.0.2:53 1 64 1 2025-12-05 02:14:35.976 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44240 1 80 1 2025-12-05 02:14:35.975 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51973 1 109 1 2025-12-05 02:15:36.255 00:00:00.000 UDP 28.104.0.1:42222 -> 198.28.0.2:53 1 64 1 2025-12-05 02:15:36.255 00:00:00.000 UDP 28.104.0.1:44760 -> 198.28.0.2:53 1 64 1 2025-12-05 02:15:36.264 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42222 1 109 1 2025-12-05 02:15:36.264 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44760 1 80 1 2025-12-05 02:12:07.894 00:05:08.800 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-05 02:12:07.944 00:05:08.875 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-05 02:12:07.904 00:05:08.781 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-05 02:12:16.678 00:05:00.892 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-05 02:16:36.541 00:00:00.000 UDP 28.104.0.1:53681 -> 198.28.0.2:53 1 64 1 2025-12-05 02:16:36.541 00:00:00.000 UDP 28.104.0.1:44930 -> 198.28.0.2:53 1 64 1 2025-12-05 02:16:36.552 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53681 1 109 1 2025-12-05 02:16:36.552 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44930 1 80 1 2025-12-05 02:17:19.752 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-05 02:13:07.894 00:05:08.935 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-05 02:17:36.833 00:00:00.000 UDP 28.104.0.1:44573 -> 198.28.0.2:53 1 64 1 2025-12-05 02:17:36.833 00:00:00.000 UDP 28.104.0.1:34491 -> 198.28.0.2:53 1 64 1 2025-12-05 02:17:36.843 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34491 1 80 1 2025-12-05 02:17:36.844 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44573 1 109 1 2025-12-05 02:18:37.944 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43576 1 109 1 2025-12-05 02:18:37.943 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37085 1 80 1 2025-12-05 02:18:37.933 00:00:00.000 UDP 28.104.0.1:43576 -> 198.28.0.2:53 1 64 1 2025-12-05 02:18:37.934 00:00:00.000 UDP 28.104.0.1:37085 -> 198.28.0.2:53 1 64 1 2025-12-05 02:14:47.048 00:05:10.010 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2632 1 2025-12-05 02:19:38.245 00:00:00.000 UDP 28.104.0.1:47651 -> 198.28.0.2:53 1 64 1 2025-12-05 02:19:38.244 00:00:00.000 UDP 28.104.0.1:45719 -> 198.28.0.2:53 1 64 1 2025-12-05 02:19:38.255 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47651 1 80 1 2025-12-05 02:19:38.255 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45719 1 109 1 2025-12-05 02:16:16.686 00:05:00.513 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-12-05 02:20:38.497 00:00:00.000 UDP 28.104.0.1:46760 -> 198.28.0.2:53 1 64 1 2025-12-05 02:20:38.497 00:00:00.000 UDP 28.104.0.1:43693 -> 198.28.0.2:53 1 64 1 2025-12-05 02:20:38.507 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46760 1 109 1 2025-12-05 02:20:38.507 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43693 1 80 1 2025-12-05 02:21:38.798 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44781 1 109 1 2025-12-05 02:21:38.798 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44184 1 80 1 2025-12-05 02:21:38.788 00:00:00.000 UDP 28.104.0.1:44781 -> 198.28.0.2:53 1 64 1 2025-12-05 02:21:38.788 00:00:00.000 UDP 28.104.0.1:44184 -> 198.28.0.2:53 1 64 1 2025-12-05 02:18:07.905 00:05:08.780 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-05 02:18:07.945 00:05:08.874 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-05 02:18:16.685 00:05:00.885 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-05 02:22:20.621 00:00:00.028 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-05 02:18:07.896 00:05:08.800 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-05 02:22:43.644 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35810 1 109 1 2025-12-05 02:22:43.642 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37415 1 80 1 2025-12-05 02:22:43.632 00:00:00.000 UDP 28.104.0.1:35810 -> 198.28.0.2:53 1 64 1 2025-12-05 02:22:43.633 00:00:00.000 UDP 28.104.0.1:37415 -> 198.28.0.2:53 1 64 1 2025-12-05 02:19:07.896 00:05:08.934 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-05 02:23:43.934 00:00:00.000 UDP 28.104.0.1:41073 -> 198.28.0.2:53 1 64 1 2025-12-05 02:23:43.934 00:00:00.000 UDP 28.104.0.1:55771 -> 198.28.0.2:53 1 64 1 2025-12-05 02:23:43.945 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41073 1 109 1 2025-12-05 02:23:43.945 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55771 1 80 1 2025-12-05 02:20:07.059 00:05:10.008 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2672 1 2025-12-05 02:24:44.248 00:00:00.000 UDP 28.104.0.1:33736 -> 198.28.0.2:53 1 64 1 2025-12-05 02:24:44.248 00:00:00.000 UDP 28.104.0.1:45839 -> 198.28.0.2:53 1 64 1 2025-12-05 02:24:44.259 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45839 1 109 1 2025-12-05 02:24:44.259 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33736 1 80 1 2025-12-05 02:25:50.447 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41054 1 109 1 2025-12-05 02:25:50.447 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40611 1 80 1 2025-12-05 02:25:50.435 00:00:00.000 UDP 28.104.0.1:40611 -> 198.28.0.2:53 1 64 1 2025-12-05 02:25:50.435 00:00:00.000 UDP 28.104.0.1:41054 -> 198.28.0.2:53 1 64 1 2025-12-05 02:22:16.686 00:05:00.513 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-12-05 02:26:50.732 00:00:00.000 UDP 28.104.0.1:46820 -> 198.28.0.2:53 1 64 1 2025-12-05 02:26:50.731 00:00:00.000 UDP 28.104.0.1:38835 -> 198.28.0.2:53 1 64 1 2025-12-05 02:26:50.742 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38835 1 80 1 2025-12-05 02:26:50.742 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46820 1 109 1 2025-12-05 02:27:19.733 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-05 02:27:51.619 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50160 1 80 1 2025-12-05 02:27:51.619 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48330 1 109 1 2025-12-05 02:27:51.609 00:00:00.000 UDP 28.104.0.1:50160 -> 198.28.0.2:53 1 64 1 2025-12-05 02:27:51.609 00:00:00.000 UDP 28.104.0.1:48330 -> 198.28.0.2:53 1 64 1 2025-12-05 02:24:07.898 00:05:08.800 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-05 02:24:07.908 00:05:08.780 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-05 02:24:16.686 00:05:00.890 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-05 02:24:07.948 00:05:08.873 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-05 02:28:51.916 00:00:00.000 UDP 28.104.0.1:53072 -> 198.28.0.2:53 1 64 1 2025-12-05 02:28:51.916 00:00:00.000 UDP 28.104.0.1:56064 -> 198.28.0.2:53 1 64 1 2025-12-05 02:28:51.927 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56064 1 109 1 2025-12-05 02:28:51.927 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53072 1 80 1 2025-12-05 02:25:07.898 00:05:08.934 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-05 02:25:27.067 00:05:10.580 OSPF 28.0.2.1:0 -> 224.0.0.5:0 44 3024 1 2025-12-05 02:29:52.188 00:00:00.000 UDP 28.104.0.1:56149 -> 198.28.0.2:53 1 64 1 2025-12-05 02:29:52.188 00:00:00.000 UDP 28.104.0.1:51605 -> 198.28.0.2:53 1 64 1 2025-12-05 02:29:52.198 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51605 1 80 1 2025-12-05 02:29:52.198 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56149 1 109 1 2025-12-05 02:30:52.492 00:00:00.000 UDP 28.104.0.1:47409 -> 198.28.0.2:53 1 64 1 2025-12-05 02:30:52.493 00:00:00.000 UDP 28.104.0.1:51729 -> 198.28.0.2:53 1 64 1 2025-12-05 02:30:52.502 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47409 1 80 1 2025-12-05 02:30:52.502 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51729 1 109 1 2025-12-05 02:31:52.754 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44390 1 109 1 2025-12-05 02:31:52.754 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49515 1 80 1 2025-12-05 02:31:52.744 00:00:00.000 UDP 28.104.0.1:49515 -> 198.28.0.2:53 1 64 1 2025-12-05 02:31:52.745 00:00:00.000 UDP 28.104.0.1:44390 -> 198.28.0.2:53 1 64 1 2025-12-05 02:28:16.688 00:05:00.511 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-12-05 02:32:19.859 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-05 02:32:53.058 00:00:00.000 UDP 28.104.0.1:58890 -> 198.28.0.2:53 1 64 1 2025-12-05 02:32:53.058 00:00:00.000 UDP 28.104.0.1:56318 -> 198.28.0.2:53 1 64 1 2025-12-05 02:32:53.068 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56318 1 80 1 2025-12-05 02:32:53.068 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58890 1 109 1 2025-12-05 02:33:53.313 00:00:00.000 UDP 28.104.0.1:50032 -> 198.28.0.2:53 1 64 1 2025-12-05 02:33:53.313 00:00:00.000 UDP 28.104.0.1:52274 -> 198.28.0.2:53 1 64 1 2025-12-05 02:33:53.324 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50032 1 80 1 2025-12-05 02:33:53.324 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52274 1 109 1 2025-12-05 02:30:07.912 00:05:08.782 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-05 02:30:07.952 00:05:08.873 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-05 02:30:16.689 00:05:00.887 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-05 02:30:07.903 00:05:08.803 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-05 02:34:53.572 00:00:00.000 UDP 28.104.0.1:40523 -> 198.28.0.2:53 1 64 1 2025-12-05 02:34:53.572 00:00:00.000 UDP 28.104.0.1:41184 -> 198.28.0.2:53 1 64 1 2025-12-05 02:34:53.583 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40523 1 109 1 2025-12-05 02:34:53.583 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41184 1 80 1 2025-12-05 02:30:47.081 00:05:10.010 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 3012 1 2025-12-05 02:31:07.902 00:05:08.933 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-05 02:35:53.848 00:00:00.000 UDP 28.104.0.1:60162 -> 198.28.0.2:53 1 64 1 2025-12-05 02:35:53.848 00:00:00.000 UDP 28.104.0.1:55638 -> 198.28.0.2:53 1 64 1 2025-12-05 02:35:53.857 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55638 1 80 1 2025-12-05 02:35:53.857 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60162 1 109 1 2025-12-05 02:36:54.151 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41489 1 80 1 2025-12-05 02:36:54.151 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39796 1 109 1 2025-12-05 02:36:54.140 00:00:00.000 UDP 28.104.0.1:41489 -> 198.28.0.2:53 1 64 1 2025-12-05 02:36:54.140 00:00:00.000 UDP 28.104.0.1:39796 -> 198.28.0.2:53 1 64 1 2025-12-05 02:37:19.947 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-05 02:37:54.446 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47258 1 109 1 2025-12-05 02:37:54.447 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38685 1 80 1 2025-12-05 02:37:54.438 00:00:00.000 UDP 28.104.0.1:47258 -> 198.28.0.2:53 1 64 1 2025-12-05 02:37:54.438 00:00:00.000 UDP 28.104.0.1:38685 -> 198.28.0.2:53 1 64 1 2025-12-05 02:34:16.694 00:05:00.506 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-12-05 02:38:54.736 00:00:00.000 UDP 28.104.0.1:54394 -> 198.28.0.2:53 1 64 1 2025-12-05 02:38:54.735 00:00:00.000 UDP 28.104.0.1:58988 -> 198.28.0.2:53 1 64 1 2025-12-05 02:38:54.747 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54394 1 80 1 2025-12-05 02:38:54.747 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58988 1 109 1 2025-12-05 02:39:55.004 00:00:00.000 UDP 28.104.0.1:42762 -> 198.28.0.2:53 1 64 1 2025-12-05 02:39:55.004 00:00:00.000 UDP 28.104.0.1:43098 -> 198.28.0.2:53 1 64 1 2025-12-05 02:39:55.016 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42762 1 109 1 2025-12-05 02:39:55.018 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43098 1 80 1 2025-12-05 02:36:07.903 00:05:08.804 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-05 02:36:07.953 00:05:08.874 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-05 02:36:07.913 00:05:08.785 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-05 02:36:16.695 00:05:00.884 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-05 02:36:07.091 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 35 2384 1 2025-12-05 02:40:55.302 00:00:00.000 UDP 28.104.0.1:55592 -> 198.28.0.2:53 1 64 1 2025-12-05 02:40:55.302 00:00:00.000 UDP 28.104.0.1:33836 -> 198.28.0.2:53 1 64 1 2025-12-05 02:40:55.312 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33836 1 109 1 2025-12-05 02:40:55.312 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55592 1 80 1 2025-12-05 02:37:07.905 00:05:08.933 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-05 02:41:55.603 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39362 1 80 1 2025-12-05 02:41:55.604 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43474 1 109 1 2025-12-05 02:41:55.594 00:00:00.000 UDP 28.104.0.1:43474 -> 198.28.0.2:53 1 64 1 2025-12-05 02:41:55.594 00:00:00.000 UDP 28.104.0.1:39362 -> 198.28.0.2:53 1 64 1 2025-12-05 02:42:20.065 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-05 02:42:55.893 00:00:00.000 UDP 28.104.0.1:49989 -> 198.28.0.2:53 1 64 1 2025-12-05 02:42:55.892 00:00:00.000 UDP 28.104.0.1:49726 -> 198.28.0.2:53 1 64 1 2025-12-05 02:42:55.901 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49726 1 80 1 2025-12-05 02:42:55.902 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49989 1 109 1 2025-12-05 02:43:56.221 00:00:00.000 UDP 28.104.0.1:36962 -> 198.28.0.2:53 1 64 1 2025-12-05 02:43:56.220 00:00:00.000 UDP 28.104.0.1:44944 -> 198.28.0.2:53 1 64 1 2025-12-05 02:43:56.231 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44944 1 109 1 2025-12-05 02:43:56.232 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36962 1 80 1 2025-12-05 02:40:16.696 00:05:00.505 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-12-05 02:44:56.522 00:00:00.000 UDP 28.104.0.1:56671 -> 198.28.0.2:53 1 64 1 2025-12-05 02:44:56.522 00:00:00.000 UDP 28.104.0.1:54421 -> 198.28.0.2:53 1 64 1 2025-12-05 02:44:56.533 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54421 1 80 1 2025-12-05 02:44:56.533 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56671 1 109 1 2025-12-05 02:41:27.094 00:05:10.003 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2652 1 2025-12-05 02:45:56.773 00:00:00.000 UDP 28.104.0.1:55267 -> 198.28.0.2:53 1 64 1 2025-12-05 02:45:56.773 00:00:00.000 UDP 28.104.0.1:51628 -> 198.28.0.2:53 1 64 1 2025-12-05 02:45:56.783 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51628 1 80 1 2025-12-05 02:45:56.783 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55267 1 109 1 2025-12-05 02:42:07.917 00:05:08.782 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-05 02:42:16.697 00:05:00.883 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-05 02:42:07.957 00:05:08.871 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-05 02:42:07.906 00:05:08.802 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-05 02:46:57.095 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42591 1 109 1 2025-12-05 02:46:57.095 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42773 1 80 1 2025-12-05 02:46:57.083 00:00:00.000 UDP 28.104.0.1:42773 -> 198.28.0.2:53 1 64 1 2025-12-05 02:46:57.083 00:00:00.000 UDP 28.104.0.1:42591 -> 198.28.0.2:53 1 64 1 2025-12-05 02:47:19.996 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-05 02:43:07.906 00:05:08.932 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-05 02:47:57.349 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35990 1 109 1 2025-12-05 02:47:57.349 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44767 1 80 1 2025-12-05 02:47:57.339 00:00:00.000 UDP 28.104.0.1:44767 -> 198.28.0.2:53 1 64 1 2025-12-05 02:47:57.339 00:00:00.000 UDP 28.104.0.1:35990 -> 198.28.0.2:53 1 64 1 2025-12-05 02:48:57.630 00:00:00.000 UDP 28.104.0.1:58879 -> 198.28.0.2:53 1 64 1 2025-12-05 02:48:57.630 00:00:00.000 UDP 28.104.0.1:59921 -> 198.28.0.2:53 1 64 1 2025-12-05 02:48:57.641 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59921 1 109 1 2025-12-05 02:48:57.641 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58879 1 80 1 2025-12-05 02:49:57.924 00:00:00.000 UDP 28.104.0.1:43356 -> 198.28.0.2:53 1 64 1 2025-12-05 02:49:57.924 00:00:00.000 UDP 28.104.0.1:57724 -> 198.28.0.2:53 1 64 1 2025-12-05 02:49:57.934 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43356 1 109 1 2025-12-05 02:49:57.934 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57724 1 80 1 2025-12-05 02:46:16.698 00:05:00.504 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-12-05 02:46:45.140 00:05:01.965 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2644 1 2025-12-05 02:50:58.270 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47783 1 109 1 2025-12-05 02:50:58.270 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59358 1 80 1 2025-12-05 02:50:58.261 00:00:00.000 UDP 28.104.0.1:59358 -> 198.28.0.2:53 1 64 1 2025-12-05 02:50:58.261 00:00:00.000 UDP 28.104.0.1:47783 -> 198.28.0.2:53 1 64 1 2025-12-05 02:51:58.603 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60080 1 80 1 2025-12-05 02:51:58.604 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42601 1 109 1 2025-12-05 02:51:58.593 00:00:00.000 UDP 28.104.0.1:60080 -> 198.28.0.2:53 1 64 1 2025-12-05 02:51:58.593 00:00:00.000 UDP 28.104.0.1:42601 -> 198.28.0.2:53 1 64 1 2025-12-05 02:48:07.907 00:05:08.801 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-05 02:48:07.958 00:05:08.870 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-05 02:48:07.918 00:05:08.781 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-05 02:48:16.698 00:05:00.883 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-05 02:52:20.270 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-05 02:52:58.896 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56849 1 109 1 2025-12-05 02:52:58.896 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44369 1 80 1 2025-12-05 02:52:58.887 00:00:00.000 UDP 28.104.0.1:56849 -> 198.28.0.2:53 1 64 1 2025-12-05 02:52:58.887 00:00:00.000 UDP 28.104.0.1:44369 -> 198.28.0.2:53 1 64 1 2025-12-05 02:49:07.908 00:05:08.931 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-05 02:53:59.156 00:00:00.000 UDP 28.104.0.1:42365 -> 198.28.0.2:53 1 64 1 2025-12-05 02:53:59.156 00:00:00.000 UDP 28.104.0.1:49345 -> 198.28.0.2:53 1 64 1 2025-12-05 02:53:59.166 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42365 1 80 1 2025-12-05 02:53:59.166 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49345 1 109 1 2025-12-05 02:54:59.447 00:00:00.000 UDP 28.104.0.1:37800 -> 198.28.0.2:53 1 64 1 2025-12-05 02:54:59.447 00:00:00.000 UDP 28.104.0.1:47064 -> 198.28.0.2:53 1 64 1 2025-12-05 02:54:59.457 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47064 1 80 1 2025-12-05 02:54:59.456 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37800 1 109 1 2025-12-05 02:55:59.745 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47941 1 80 1 2025-12-05 02:55:59.745 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46726 1 109 1 2025-12-05 02:55:59.735 00:00:00.000 UDP 28.104.0.1:46726 -> 198.28.0.2:53 1 64 1 2025-12-05 02:55:59.735 00:00:00.000 UDP 28.104.0.1:47941 -> 198.28.0.2:53 1 64 1 2025-12-05 02:51:57.105 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2752 1 2025-12-05 02:52:16.699 00:05:00.504 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-12-05 02:57:00.063 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56356 1 109 1 2025-12-05 02:57:00.063 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37465 1 80 1 2025-12-05 02:57:00.053 00:00:00.000 UDP 28.104.0.1:56356 -> 198.28.0.2:53 1 64 1 2025-12-05 02:57:00.053 00:00:00.000 UDP 28.104.0.1:37465 -> 198.28.0.2:53 1 64 1 2025-12-05 02:57:20.574 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-05 02:58:00.351 00:00:00.000 UDP 28.104.0.1:45502 -> 198.28.0.2:53 1 64 1 2025-12-05 02:58:00.351 00:00:00.000 UDP 28.104.0.1:48136 -> 198.28.0.2:53 1 64 1 2025-12-05 02:58:00.361 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45502 1 80 1 2025-12-05 02:58:00.361 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48136 1 109 1 2025-12-05 02:54:07.961 00:05:08.868 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-05 02:54:07.921 00:05:08.780 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-05 02:54:16.700 00:05:00.885 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-12-05 02:54:07.910 00:05:08.801 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 Summary: total flows: 319, total bytes: 95903, total packets: 1416, avg bps: 199, avg pps: 0, avg bpp: 67 Time window: 2025-12-05 01:55:07 - 2025-12-05 02:59:17 Total flows processed: 319, passed: 319, Blocks skipped: 0, Bytes read: 33240 Sys: 0.0042s User: 0.0025s Wall: 0.0030s flows/second: 106400.2 Runtime: 0.0030s