Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-05 17:58:55.214 00:00:00.000 UDP 28.104.0.1:54205 -> 198.28.0.2:53 1 64 1 2025-12-05 17:58:55.214 00:00:00.000 UDP 28.104.0.1:38049 -> 198.28.0.2:53 1 64 1 2025-12-05 17:58:55.224 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38049 1 80 1 2025-12-05 17:58:55.224 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54205 1 109 1 2025-12-05 17:59:55.512 00:00:00.000 UDP 28.104.0.1:41922 -> 198.28.0.2:53 1 64 1 2025-12-05 17:59:55.512 00:00:00.000 UDP 28.104.0.1:37026 -> 198.28.0.2:53 1 64 1 2025-12-05 17:59:55.523 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41922 1 80 1 2025-12-05 17:59:55.523 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37026 1 109 1 2025-12-05 18:00:55.815 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55296 1 80 1 2025-12-05 18:00:55.815 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37212 1 109 1 2025-12-05 18:00:55.806 00:00:00.000 UDP 28.104.0.1:37212 -> 198.28.0.2:53 1 64 1 2025-12-05 18:00:55.806 00:00:00.000 UDP 28.104.0.1:55296 -> 198.28.0.2:53 1 64 1 2025-12-05 17:56:58.290 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2608 1 2025-12-05 18:01:56.101 00:00:00.000 UDP 28.104.0.1:40801 -> 198.28.0.2:53 1 64 1 2025-12-05 18:01:56.101 00:00:00.000 UDP 28.104.0.1:57216 -> 198.28.0.2:53 1 64 1 2025-12-05 18:01:56.111 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40801 1 80 1 2025-12-05 18:01:56.111 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57216 1 109 1 2025-12-05 17:57:17.036 00:06:00.434 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-12-05 18:02:38.717 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-05 18:02:56.407 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51847 1 80 1 2025-12-05 18:02:56.407 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34770 1 109 1 2025-12-05 18:02:56.399 00:00:00.000 UDP 28.104.0.1:51847 -> 198.28.0.2:53 1 64 1 2025-12-05 18:02:56.398 00:00:00.000 UDP 28.104.0.1:34770 -> 198.28.0.2:53 1 64 1 2025-12-05 17:59:08.275 00:05:08.870 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-05 17:59:08.235 00:05:08.805 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-05 17:59:08.226 00:05:08.825 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-05 18:03:56.688 00:00:00.000 UDP 28.104.0.1:39784 -> 198.28.0.2:53 1 64 1 2025-12-05 18:03:56.688 00:00:00.000 UDP 28.104.0.1:39448 -> 198.28.0.2:53 1 64 1 2025-12-05 18:03:56.699 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39784 1 109 1 2025-12-05 18:03:56.699 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39448 1 80 1 2025-12-05 18:00:08.226 00:05:08.931 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-05 17:59:17.037 00:06:00.827 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-12-05 18:04:56.982 00:00:00.000 UDP 28.104.0.1:37531 -> 198.28.0.2:53 1 64 1 2025-12-05 18:04:56.981 00:00:00.000 UDP 28.104.0.1:37704 -> 198.28.0.2:53 1 64 1 2025-12-05 18:04:56.992 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37531 1 80 1 2025-12-05 18:04:56.992 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37704 1 109 1 2025-12-05 18:05:57.277 00:00:00.000 UDP 28.104.0.1:39900 -> 198.28.0.2:53 1 64 1 2025-12-05 18:05:57.277 00:00:00.000 UDP 28.104.0.1:33427 -> 198.28.0.2:53 1 64 1 2025-12-05 18:05:57.287 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33427 1 109 1 2025-12-05 18:05:57.287 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39900 1 80 1 2025-12-05 18:02:17.133 00:05:01.165 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2724 1 2025-12-05 18:06:57.570 00:00:00.000 UDP 28.104.0.1:52693 -> 198.28.0.2:53 1 64 1 2025-12-05 18:06:57.571 00:00:00.000 UDP 28.104.0.1:38118 -> 198.28.0.2:53 1 64 1 2025-12-05 18:06:57.580 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38118 1 80 1 2025-12-05 18:06:57.580 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52693 1 109 1 2025-12-05 18:07:38.725 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-05 18:07:57.870 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51368 1 109 1 2025-12-05 18:07:57.870 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55961 1 80 1 2025-12-05 18:07:57.860 00:00:00.000 UDP 28.104.0.1:55961 -> 198.28.0.2:53 1 64 1 2025-12-05 18:07:57.860 00:00:00.000 UDP 28.104.0.1:51368 -> 198.28.0.2:53 1 64 1 2025-12-05 18:08:58.190 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35476 1 109 1 2025-12-05 18:08:58.190 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37381 1 80 1 2025-12-05 18:08:58.181 00:00:00.000 UDP 28.104.0.1:37381 -> 198.28.0.2:53 1 64 1 2025-12-05 18:08:58.181 00:00:00.000 UDP 28.104.0.1:35476 -> 198.28.0.2:53 1 64 1 2025-12-05 18:04:17.041 00:06:00.432 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-12-05 18:05:08.237 00:05:08.805 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-05 18:05:08.277 00:05:08.874 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-05 18:05:08.226 00:05:08.826 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-05 18:09:58.473 00:00:00.000 UDP 28.104.0.1:55952 -> 198.28.0.2:53 1 64 1 2025-12-05 18:09:58.473 00:00:00.000 UDP 28.104.0.1:59967 -> 198.28.0.2:53 1 64 1 2025-12-05 18:09:58.485 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59967 1 109 1 2025-12-05 18:09:58.485 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55952 1 80 1 2025-12-05 18:06:08.227 00:05:08.935 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-05 18:10:58.766 00:00:00.000 UDP 28.104.0.1:49220 -> 198.28.0.2:53 1 64 1 2025-12-05 18:10:58.766 00:00:00.000 UDP 28.104.0.1:42262 -> 198.28.0.2:53 1 64 1 2025-12-05 18:10:58.777 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42262 1 109 1 2025-12-05 18:10:58.777 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49220 1 80 1 2025-12-05 18:06:17.042 00:06:00.824 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-12-05 18:07:28.299 00:05:10.007 OSPF 28.0.2.1:0 -> 224.0.0.5:0 38 2608 1 2025-12-05 18:11:59.072 00:00:00.000 UDP 28.104.0.1:56314 -> 198.28.0.2:53 1 64 1 2025-12-05 18:11:59.072 00:00:00.000 UDP 28.104.0.1:36520 -> 198.28.0.2:53 1 64 1 2025-12-05 18:11:59.082 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56314 1 80 1 2025-12-05 18:11:59.082 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36520 1 109 1 2025-12-05 18:12:38.720 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-05 18:12:59.357 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46744 1 109 1 2025-12-05 18:12:59.357 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43565 1 80 1 2025-12-05 18:12:59.347 00:00:00.000 UDP 28.104.0.1:43565 -> 198.28.0.2:53 1 64 1 2025-12-05 18:12:59.347 00:00:00.000 UDP 28.104.0.1:46744 -> 198.28.0.2:53 1 64 1 2025-12-05 18:13:59.647 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42395 1 80 1 2025-12-05 18:13:59.647 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39449 1 109 1 2025-12-05 18:13:59.637 00:00:00.000 UDP 28.104.0.1:42395 -> 198.28.0.2:53 1 64 1 2025-12-05 18:13:59.637 00:00:00.000 UDP 28.104.0.1:39449 -> 198.28.0.2:53 1 64 1 2025-12-05 18:14:59.930 00:00:00.000 UDP 28.104.0.1:42231 -> 198.28.0.2:53 1 64 1 2025-12-05 18:14:59.930 00:00:00.000 UDP 28.104.0.1:46466 -> 198.28.0.2:53 1 64 1 2025-12-05 18:14:59.941 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46466 1 109 1 2025-12-05 18:14:59.941 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42231 1 80 1 2025-12-05 18:11:08.227 00:05:08.830 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-05 18:11:08.277 00:05:08.874 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-05 18:11:08.237 00:05:08.810 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-05 18:16:00.246 00:00:00.000 UDP 28.104.0.1:54348 -> 198.28.0.2:53 1 64 1 2025-12-05 18:16:00.246 00:00:00.000 UDP 28.104.0.1:37616 -> 198.28.0.2:53 1 64 1 2025-12-05 18:16:00.256 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37616 1 80 1 2025-12-05 18:16:00.256 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54348 1 109 1 2025-12-05 18:11:17.043 00:06:00.454 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-12-05 18:12:08.227 00:05:08.935 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-05 18:17:00.536 00:00:00.000 UDP 28.104.0.1:40916 -> 198.28.0.2:53 1 64 1 2025-12-05 18:17:00.536 00:00:00.000 UDP 28.104.0.1:35739 -> 198.28.0.2:53 1 64 1 2025-12-05 18:17:00.546 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40916 1 109 1 2025-12-05 18:12:48.305 00:05:10.005 OSPF 28.0.2.1:0 -> 224.0.0.5:0 43 3156 1 2025-12-05 18:17:00.546 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35739 1 80 1 2025-12-05 18:17:38.924 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-05 18:18:00.786 00:00:00.000 UDP 28.104.0.1:45783 -> 198.28.0.2:53 1 64 1 2025-12-05 18:18:00.786 00:00:00.000 UDP 28.104.0.1:41146 -> 198.28.0.2:53 1 64 1 2025-12-05 18:18:00.797 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45783 1 109 1 2025-12-05 18:18:00.797 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41146 1 80 1 2025-12-05 18:13:17.043 00:06:00.824 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-12-05 18:19:01.096 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53889 1 109 1 2025-12-05 18:19:01.096 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35567 1 80 1 2025-12-05 18:19:01.087 00:00:00.000 UDP 28.104.0.1:35567 -> 198.28.0.2:53 1 64 1 2025-12-05 18:19:01.087 00:00:00.000 UDP 28.104.0.1:53889 -> 198.28.0.2:53 1 64 1 2025-12-05 18:20:01.389 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57071 1 109 1 2025-12-05 18:20:01.389 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39459 1 80 1 2025-12-05 18:20:01.380 00:00:00.000 UDP 28.104.0.1:39459 -> 198.28.0.2:53 1 64 1 2025-12-05 18:20:01.380 00:00:00.000 UDP 28.104.0.1:57071 -> 198.28.0.2:53 1 64 1 2025-12-05 18:21:01.682 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48154 1 80 1 2025-12-05 18:21:01.681 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34371 1 109 1 2025-12-05 18:21:01.674 00:00:00.000 UDP 28.104.0.1:48154 -> 198.28.0.2:53 1 64 1 2025-12-05 18:21:01.673 00:00:00.000 UDP 28.104.0.1:34371 -> 198.28.0.2:53 1 64 1 2025-12-05 18:17:08.278 00:05:08.875 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-05 18:17:08.238 00:05:08.810 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-05 18:17:08.228 00:05:08.829 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-05 18:22:01.975 00:00:00.000 UDP 28.104.0.1:37103 -> 198.28.0.2:53 1 64 1 2025-12-05 18:22:01.975 00:00:00.000 UDP 28.104.0.1:34079 -> 198.28.0.2:53 1 64 1 2025-12-05 18:22:01.986 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37103 1 109 1 2025-12-05 18:22:01.987 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34079 1 80 1 2025-12-05 18:18:08.228 00:05:08.935 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-05 18:18:08.310 00:05:10.013 OSPF 28.0.2.1:0 -> 224.0.0.5:0 36 2488 1 2025-12-05 18:22:38.937 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-05 18:23:02.269 00:00:00.000 UDP 28.104.0.1:51367 -> 198.28.0.2:53 1 64 1 2025-12-05 18:23:02.269 00:00:00.000 UDP 28.104.0.1:40233 -> 198.28.0.2:53 1 64 1 2025-12-05 18:23:02.278 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40233 1 109 1 2025-12-05 18:23:02.278 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51367 1 80 1 2025-12-05 18:18:17.045 00:06:00.434 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-12-05 18:24:02.516 00:00:00.000 UDP 28.104.0.1:36926 -> 198.28.0.2:53 1 64 1 2025-12-05 18:24:02.516 00:00:00.000 UDP 28.104.0.1:60943 -> 198.28.0.2:53 1 64 1 2025-12-05 18:24:02.526 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36926 1 109 1 2025-12-05 18:24:02.526 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60943 1 80 1 2025-12-05 18:25:02.814 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51808 1 80 1 2025-12-05 18:25:02.814 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54494 1 109 1 2025-12-05 18:25:02.804 00:00:00.000 UDP 28.104.0.1:51808 -> 198.28.0.2:53 1 64 1 2025-12-05 18:25:02.804 00:00:00.000 UDP 28.104.0.1:54494 -> 198.28.0.2:53 1 64 1 2025-12-05 18:20:17.047 00:06:00.822 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-12-05 18:26:03.104 00:00:00.000 UDP 28.104.0.1:49868 -> 198.28.0.2:53 1 64 1 2025-12-05 18:26:03.104 00:00:00.000 UDP 28.104.0.1:53972 -> 198.28.0.2:53 1 64 1 2025-12-05 18:26:03.116 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53972 1 109 1 2025-12-05 18:26:03.116 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49868 1 80 1 2025-12-05 18:27:03.398 00:00:00.000 UDP 28.104.0.1:55255 -> 198.28.0.2:53 1 64 1 2025-12-05 18:27:03.398 00:00:00.000 UDP 28.104.0.1:55015 -> 198.28.0.2:53 1 64 1 2025-12-05 18:27:03.410 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55255 1 109 1 2025-12-05 18:27:03.410 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55015 1 80 1 2025-12-05 18:23:08.240 00:05:08.810 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-05 18:23:08.280 00:05:08.874 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-05 18:23:08.229 00:05:08.830 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-05 18:27:39.052 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-05 18:23:28.323 00:05:10.004 OSPF 28.0.2.1:0 -> 224.0.0.5:0 34 2444 1 2025-12-05 18:28:03.693 00:00:00.000 UDP 28.104.0.1:46462 -> 198.28.0.2:53 1 64 1 2025-12-05 18:28:03.693 00:00:00.000 UDP 28.104.0.1:49630 -> 198.28.0.2:53 1 64 1 2025-12-05 18:28:03.704 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49630 1 80 1 2025-12-05 18:28:03.704 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46462 1 109 1 2025-12-05 18:24:08.229 00:05:08.935 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-05 18:29:04.275 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60164 1 80 1 2025-12-05 18:29:04.276 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39017 1 109 1 2025-12-05 18:29:04.265 00:00:00.000 UDP 28.104.0.1:39017 -> 198.28.0.2:53 1 64 1 2025-12-05 18:29:04.265 00:00:00.000 UDP 28.104.0.1:60164 -> 198.28.0.2:53 1 64 1 2025-12-05 18:30:04.560 00:00:00.000 UDP 28.104.0.1:34111 -> 198.28.0.2:53 1 64 1 2025-12-05 18:30:04.560 00:00:00.000 UDP 28.104.0.1:46710 -> 198.28.0.2:53 1 64 1 2025-12-05 18:30:04.570 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34111 1 80 1 2025-12-05 18:30:04.570 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46710 1 109 1 2025-12-05 18:25:17.050 00:06:00.432 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-12-05 18:31:13.102 00:00:00.000 UDP 28.104.0.1:57275 -> 198.28.0.2:53 1 64 1 2025-12-05 18:31:13.103 00:00:00.000 UDP 28.104.0.1:34466 -> 198.28.0.2:53 1 64 1 2025-12-05 18:31:13.112 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34466 1 80 1 2025-12-05 18:31:13.112 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57275 1 109 1 2025-12-05 18:32:13.394 00:00:00.000 UDP 28.104.0.1:43735 -> 198.28.0.2:53 1 64 1 2025-12-05 18:32:13.394 00:00:00.000 UDP 28.104.0.1:59731 -> 198.28.0.2:53 1 64 1 2025-12-05 18:32:13.404 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59731 1 80 1 2025-12-05 18:32:13.403 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43735 1 109 1 2025-12-05 18:27:17.050 00:06:00.821 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-12-05 18:32:39.045 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-05 18:28:48.326 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 42 2920 1 2025-12-05 18:33:13.698 00:00:00.000 UDP 28.104.0.1:57981 -> 198.28.0.2:53 1 64 1 2025-12-05 18:33:13.698 00:00:00.000 UDP 28.104.0.1:55515 -> 198.28.0.2:53 1 64 1 2025-12-05 18:33:13.710 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55515 1 109 1 2025-12-05 18:33:13.711 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57981 1 80 1 2025-12-05 18:29:08.279 00:05:08.875 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-05 18:29:08.239 00:05:08.811 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-05 18:29:08.228 00:05:08.832 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-05 18:34:14.011 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38791 1 80 1 2025-12-05 18:34:14.014 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39323 1 109 1 2025-12-05 18:34:14.000 00:00:00.000 UDP 28.104.0.1:39323 -> 198.28.0.2:53 1 64 1 2025-12-05 18:34:14.000 00:00:00.000 UDP 28.104.0.1:38791 -> 198.28.0.2:53 1 64 1 2025-12-05 18:30:08.229 00:05:08.935 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-05 18:35:14.802 00:00:00.000 UDP 28.104.0.1:50059 -> 198.28.0.2:53 1 64 1 2025-12-05 18:35:14.802 00:00:00.000 UDP 28.104.0.1:40164 -> 198.28.0.2:53 1 64 1 2025-12-05 18:35:14.812 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40164 1 109 1 2025-12-05 18:35:14.813 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50059 1 80 1 2025-12-05 18:36:15.098 00:00:00.000 UDP 28.104.0.1:57685 -> 198.28.0.2:53 1 64 1 2025-12-05 18:36:15.098 00:00:00.000 UDP 28.104.0.1:45255 -> 198.28.0.2:53 1 64 1 2025-12-05 18:36:15.107 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57685 1 80 1 2025-12-05 18:36:15.107 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45255 1 109 1 2025-12-05 18:37:15.362 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38485 1 80 1 2025-12-05 18:37:15.362 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35434 1 109 1 2025-12-05 18:37:15.352 00:00:00.000 UDP 28.104.0.1:35434 -> 198.28.0.2:53 1 64 1 2025-12-05 18:37:15.352 00:00:00.000 UDP 28.104.0.1:38485 -> 198.28.0.2:53 1 64 1 2025-12-05 18:32:17.051 00:06:00.432 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-12-05 18:37:39.745 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-05 18:38:15.643 00:00:00.000 UDP 28.104.0.1:50583 -> 198.28.0.2:53 1 64 1 2025-12-05 18:38:15.643 00:00:00.000 UDP 28.104.0.1:46758 -> 198.28.0.2:53 1 64 1 2025-12-05 18:38:15.653 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46758 1 80 1 2025-12-05 18:38:15.653 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50583 1 109 1 2025-12-05 18:34:08.333 00:05:10.011 OSPF 28.0.2.1:0 -> 224.0.0.5:0 37 2592 1 2025-12-05 18:39:15.945 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41776 1 109 1 2025-12-05 18:39:15.945 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32948 1 80 1 2025-12-05 18:39:15.935 00:00:00.000 UDP 28.104.0.1:32948 -> 198.28.0.2:53 1 64 1 2025-12-05 18:39:15.934 00:00:00.000 UDP 28.104.0.1:41776 -> 198.28.0.2:53 1 64 1 2025-12-05 18:35:08.280 00:05:08.877 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-05 18:35:08.240 00:05:08.812 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-05 18:34:17.051 00:06:00.821 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-12-05 18:35:08.229 00:05:08.832 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-05 18:40:16.250 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34905 1 109 1 2025-12-05 18:40:16.249 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48864 1 80 1 2025-12-05 18:40:16.239 00:00:00.000 UDP 28.104.0.1:34905 -> 198.28.0.2:53 1 64 1 2025-12-05 18:40:16.239 00:00:00.000 UDP 28.104.0.1:48864 -> 198.28.0.2:53 1 64 1 2025-12-05 18:36:08.230 00:05:08.936 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-05 18:41:16.547 00:00:00.000 UDP 28.104.0.1:42341 -> 198.28.0.2:53 1 64 1 2025-12-05 18:41:16.547 00:00:00.000 UDP 28.104.0.1:41839 -> 198.28.0.2:53 1 64 1 2025-12-05 18:41:16.556 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42341 1 80 1 2025-12-05 18:41:16.556 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41839 1 109 1 2025-12-05 18:42:16.846 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41476 1 109 1 2025-12-05 18:42:16.846 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49631 1 80 1 2025-12-05 18:42:16.836 00:00:00.000 UDP 28.104.0.1:49631 -> 198.28.0.2:53 1 64 1 2025-12-05 18:42:16.836 00:00:00.000 UDP 28.104.0.1:41476 -> 198.28.0.2:53 1 64 1 2025-12-05 18:42:39.249 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-05 18:43:17.131 00:00:00.000 UDP 28.104.0.1:58820 -> 198.28.0.2:53 1 64 1 2025-12-05 18:43:17.131 00:00:00.000 UDP 28.104.0.1:57418 -> 198.28.0.2:53 1 64 1 2025-12-05 18:43:17.140 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58820 1 80 1 2025-12-05 18:43:17.140 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57418 1 109 1 2025-12-05 18:39:28.343 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 41 2892 1 2025-12-05 18:44:17.419 00:00:00.000 UDP 28.104.0.1:58765 -> 198.28.0.2:53 1 64 1 2025-12-05 18:39:17.051 00:06:00.434 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-12-05 18:44:17.420 00:00:00.000 UDP 28.104.0.1:50451 -> 198.28.0.2:53 1 64 1 2025-12-05 18:44:17.431 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50451 1 80 1 2025-12-05 18:44:17.430 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58765 1 109 1 2025-12-05 18:41:08.231 00:05:08.832 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-05 18:45:17.722 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42558 1 109 1 2025-12-05 18:45:17.721 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54705 1 80 1 2025-12-05 18:41:08.280 00:05:08.877 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-05 18:41:08.240 00:05:08.813 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-05 18:45:17.710 00:00:00.000 UDP 28.104.0.1:54705 -> 198.28.0.2:53 1 64 1 2025-12-05 18:45:17.711 00:00:00.000 UDP 28.104.0.1:42558 -> 198.28.0.2:53 1 64 1 2025-12-05 18:46:18.038 00:00:00.000 UDP 28.104.0.1:55599 -> 198.28.0.2:53 1 64 1 2025-12-05 18:41:17.052 00:06:00.822 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-12-05 18:46:18.038 00:00:00.000 UDP 28.104.0.1:54232 -> 198.28.0.2:53 1 64 1 2025-12-05 18:46:18.050 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55599 1 109 1 2025-12-05 18:42:08.232 00:05:08.938 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-05 18:46:18.051 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54232 1 80 1 2025-12-05 18:47:18.331 00:00:00.000 UDP 28.104.0.1:41866 -> 198.28.0.2:53 1 64 1 2025-12-05 18:47:18.331 00:00:00.000 UDP 28.104.0.1:43869 -> 198.28.0.2:53 1 64 1 2025-12-05 18:47:18.342 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43869 1 109 1 2025-12-05 18:47:18.342 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41866 1 80 1 2025-12-05 18:47:39.484 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-05 18:48:18.582 00:00:00.000 UDP 28.104.0.1:53176 -> 198.28.0.2:53 1 64 1 2025-12-05 18:48:18.583 00:00:00.000 UDP 28.104.0.1:34645 -> 198.28.0.2:53 1 64 1 2025-12-05 18:48:18.595 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53176 1 80 1 2025-12-05 18:48:18.595 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34645 1 109 1 2025-12-05 18:44:48.348 00:05:10.175 OSPF 28.0.2.1:0 -> 224.0.0.5:0 40 2912 1 2025-12-05 18:49:18.935 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57467 1 80 1 2025-12-05 18:49:18.935 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44630 1 109 1 2025-12-05 18:49:18.925 00:00:00.000 UDP 28.104.0.1:57467 -> 198.28.0.2:53 1 64 1 2025-12-05 18:49:18.925 00:00:00.000 UDP 28.104.0.1:44630 -> 198.28.0.2:53 1 64 1 2025-12-05 18:50:19.210 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33076 1 109 1 2025-12-05 18:50:19.210 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49041 1 80 1 2025-12-05 18:50:19.200 00:00:00.000 UDP 28.104.0.1:49041 -> 198.28.0.2:53 1 64 1 2025-12-05 18:50:19.200 00:00:00.000 UDP 28.104.0.1:33076 -> 198.28.0.2:53 1 64 1 2025-12-05 18:47:08.283 00:05:08.876 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-05 18:51:19.492 00:00:00.000 UDP 28.104.0.1:54169 -> 198.28.0.2:53 1 64 1 2025-12-05 18:46:17.054 00:06:00.438 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-12-05 18:47:08.243 00:05:08.813 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-05 18:51:19.492 00:00:00.000 UDP 28.104.0.1:45059 -> 198.28.0.2:53 1 64 1 2025-12-05 18:47:08.234 00:05:08.832 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-05 18:51:19.503 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45059 1 80 1 2025-12-05 18:51:19.503 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54169 1 109 1 2025-12-05 18:52:19.804 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46040 1 80 1 2025-12-05 18:48:08.233 00:05:08.936 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-05 18:52:19.804 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41287 1 109 1 2025-12-05 18:52:19.794 00:00:00.000 UDP 28.104.0.1:46040 -> 198.28.0.2:53 1 64 1 2025-12-05 18:52:19.794 00:00:00.000 UDP 28.104.0.1:41287 -> 198.28.0.2:53 1 64 1 2025-12-05 18:52:39.571 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-05 18:53:20.089 00:00:00.000 UDP 28.104.0.1:43463 -> 198.28.0.2:53 1 64 1 2025-12-05 18:48:17.055 00:06:00.823 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-12-05 18:53:20.089 00:00:00.000 UDP 28.104.0.1:39379 -> 198.28.0.2:53 1 64 1 2025-12-05 18:53:20.099 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43463 1 109 1 2025-12-05 18:53:20.099 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39379 1 80 1 2025-12-05 18:50:08.357 00:05:10.006 OSPF 28.0.2.1:0 -> 224.0.0.5:0 34 2444 1 2025-12-05 18:54:20.389 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40718 1 80 1 2025-12-05 18:54:20.389 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59228 1 109 1 2025-12-05 18:54:20.381 00:00:00.000 UDP 28.104.0.1:40718 -> 198.28.0.2:53 1 64 1 2025-12-05 18:54:20.381 00:00:00.000 UDP 28.104.0.1:59228 -> 198.28.0.2:53 1 64 1 2025-12-05 18:55:20.687 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47631 1 109 1 2025-12-05 18:55:20.687 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55503 1 80 1 2025-12-05 18:55:20.677 00:00:00.000 UDP 28.104.0.1:47631 -> 198.28.0.2:53 1 64 1 2025-12-05 18:55:20.677 00:00:00.000 UDP 28.104.0.1:55503 -> 198.28.0.2:53 1 64 1 2025-12-05 18:56:20.928 00:00:00.000 UDP 28.104.0.1:56090 -> 198.28.0.2:53 1 64 1 2025-12-05 18:56:20.928 00:00:00.000 UDP 28.104.0.1:57397 -> 198.28.0.2:53 1 64 1 2025-12-05 18:56:20.939 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56090 1 109 1 2025-12-05 18:56:20.939 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57397 1 80 1 2025-12-05 18:57:21.250 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52104 1 80 1 2025-12-05 18:57:21.250 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39494 1 109 1 2025-12-05 18:53:08.233 00:05:08.836 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-12-05 18:53:08.283 00:05:08.877 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-12-05 18:57:21.240 00:00:00.000 UDP 28.104.0.1:39494 -> 198.28.0.2:53 1 64 1 2025-12-05 18:53:08.243 00:05:08.816 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-12-05 18:57:21.240 00:00:00.000 UDP 28.104.0.1:52104 -> 198.28.0.2:53 1 64 1 2025-12-05 18:57:39.541 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-12-05 18:58:21.498 00:00:00.000 UDP 28.104.0.1:50963 -> 198.28.0.2:53 1 64 1 2025-12-05 18:53:17.055 00:06:00.438 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-12-05 18:58:21.498 00:00:00.000 UDP 28.104.0.1:53813 -> 198.28.0.2:53 1 64 1 2025-12-05 18:58:21.509 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50963 1 109 1 2025-12-05 18:54:08.235 00:05:08.936 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-12-05 18:58:21.509 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53813 1 80 1 Summary: total flows: 320, total bytes: 95989, total packets: 1413, avg bps: 205, avg pps: 0, avg bpp: 67 Time window: 2025-12-05 17:56:58 - 2025-12-05 18:59:17 Total flows processed: 320, passed: 320, Blocks skipped: 0, Bytes read: 33344 Sys: 0.0047s User: 0.0024s Wall: 0.0051s flows/second: 62305.1 Runtime: 0.0052s