Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-05 01:59:01.242 00:00:00.000 UDP 28.104.0.1:58987 -> 198.28.0.2:53 1 64 1 2025-07-05 01:59:01.242 00:00:00.000 UDP 28.104.0.1:60926 -> 198.28.0.2:53 1 64 1 2025-07-05 01:59:01.252 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60926 1 80 1 2025-07-05 01:59:01.252 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58987 1 109 1 2025-07-05 01:54:52.396 00:06:00.017 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-07-05 02:00:01.538 00:00:00.000 UDP 28.104.0.1:47020 -> 198.28.0.2:53 1 64 1 2025-07-05 02:00:01.538 00:00:00.000 UDP 28.104.0.1:49538 -> 198.28.0.2:53 1 64 1 2025-07-05 02:00:01.549 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49538 1 80 1 2025-07-05 02:00:01.549 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47020 1 109 1 2025-07-05 01:56:51.805 00:05:00.593 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-07-05 02:01:01.785 00:00:00.000 UDP 28.104.0.1:53831 -> 198.28.0.2:53 1 64 1 2025-07-05 02:01:01.786 00:00:00.000 UDP 28.104.0.1:56685 -> 198.28.0.2:53 1 64 1 2025-07-05 02:01:01.796 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53831 1 80 1 2025-07-05 02:01:01.797 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56685 1 109 1 2025-07-05 01:57:51.843 00:05:00.394 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-07-05 02:02:02.093 00:00:00.000 UDP 28.104.0.1:38462 -> 198.28.0.2:53 1 64 1 2025-07-05 02:02:02.094 00:00:00.000 UDP 28.104.0.1:50307 -> 198.28.0.2:53 1 64 1 2025-07-05 02:02:02.104 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50307 1 80 1 2025-07-05 02:02:02.104 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38462 1 109 1 2025-07-05 01:58:09.284 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 32 2176 1 2025-07-05 01:57:52.786 00:06:00.133 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-07-05 01:58:51.794 00:05:00.613 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-07-05 02:03:02.398 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52447 1 109 1 2025-07-05 02:03:02.399 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46630 1 80 1 2025-07-05 02:03:02.388 00:00:00.000 UDP 28.104.0.1:46630 -> 198.28.0.2:53 1 64 1 2025-07-05 02:03:02.388 00:00:00.000 UDP 28.104.0.1:52447 -> 198.28.0.2:53 1 64 1 2025-07-05 02:03:30.824 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-05 01:59:51.793 00:05:00.454 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-07-05 02:04:02.683 00:00:00.000 UDP 28.104.0.1:57537 -> 198.28.0.2:53 1 64 1 2025-07-05 02:04:02.683 00:00:00.000 UDP 28.104.0.1:33062 -> 198.28.0.2:53 1 64 1 2025-07-05 02:04:02.694 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33062 1 80 1 2025-07-05 02:04:02.695 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57537 1 109 1 2025-07-05 02:05:02.993 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55022 1 80 1 2025-07-05 02:05:02.993 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37599 1 109 1 2025-07-05 02:05:02.984 00:00:00.000 UDP 28.104.0.1:37599 -> 198.28.0.2:53 1 64 1 2025-07-05 02:05:02.984 00:00:00.000 UDP 28.104.0.1:55022 -> 198.28.0.2:53 1 64 1 2025-07-05 02:06:03.287 00:00:00.000 UDP 28.104.0.1:54397 -> 198.28.0.2:53 1 64 1 2025-07-05 02:06:03.287 00:00:00.000 UDP 28.104.0.1:57365 -> 198.28.0.2:53 1 64 1 2025-07-05 02:06:03.297 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57365 1 80 1 2025-07-05 02:06:03.298 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54397 1 109 1 2025-07-05 02:01:52.396 00:06:00.018 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-07-05 02:02:51.803 00:05:00.595 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-07-05 02:07:03.579 00:00:00.000 UDP 28.104.0.1:45392 -> 198.28.0.2:53 1 64 1 2025-07-05 02:07:03.579 00:00:00.000 UDP 28.104.0.1:42212 -> 198.28.0.2:53 1 64 1 2025-07-05 02:07:03.591 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42212 1 80 1 2025-07-05 02:07:03.591 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45392 1 109 1 2025-07-05 02:03:29.289 00:05:10.011 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2400 1 2025-07-05 02:03:51.845 00:05:00.398 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-07-05 02:08:03.869 00:00:00.000 UDP 28.104.0.1:37277 -> 198.28.0.2:53 1 64 1 2025-07-05 02:08:03.869 00:00:00.000 UDP 28.104.0.1:39330 -> 198.28.0.2:53 1 64 1 2025-07-05 02:08:03.880 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37277 1 80 1 2025-07-05 02:08:03.880 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39330 1 109 1 2025-07-05 02:08:31.260 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-05 02:04:51.794 00:05:00.615 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-07-05 02:09:04.192 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38362 1 80 1 2025-07-05 02:09:04.192 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43232 1 109 1 2025-07-05 02:09:04.182 00:00:00.000 UDP 28.104.0.1:43232 -> 198.28.0.2:53 1 64 1 2025-07-05 02:09:04.182 00:00:00.000 UDP 28.104.0.1:38362 -> 198.28.0.2:53 1 64 1 2025-07-05 02:05:51.795 00:05:00.459 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-07-05 02:04:52.787 00:06:00.132 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-07-05 02:10:04.484 00:00:00.000 UDP 28.104.0.1:37836 -> 198.28.0.2:53 1 64 1 2025-07-05 02:10:04.484 00:00:00.000 UDP 28.104.0.1:50983 -> 198.28.0.2:53 1 64 1 2025-07-05 02:10:04.495 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37836 1 109 1 2025-07-05 02:10:04.495 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50983 1 80 1 2025-07-05 02:11:04.786 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41058 1 109 1 2025-07-05 02:11:04.786 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53074 1 80 1 2025-07-05 02:11:04.775 00:00:00.000 UDP 28.104.0.1:53074 -> 198.28.0.2:53 1 64 1 2025-07-05 02:11:04.776 00:00:00.000 UDP 28.104.0.1:41058 -> 198.28.0.2:53 1 64 1 2025-07-05 02:12:05.081 00:00:00.000 UDP 28.104.0.1:35731 -> 198.28.0.2:53 1 64 1 2025-07-05 02:12:05.081 00:00:00.000 UDP 28.104.0.1:42647 -> 198.28.0.2:53 1 64 1 2025-07-05 02:12:05.091 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42647 1 109 1 2025-07-05 02:12:05.091 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35731 1 80 1 2025-07-05 02:08:51.805 00:05:00.595 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-07-05 02:08:49.301 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 38 2772 1 2025-07-05 02:13:05.336 00:00:00.000 UDP 28.104.0.1:57433 -> 198.28.0.2:53 1 64 1 2025-07-05 02:13:05.336 00:00:00.000 UDP 28.104.0.1:55246 -> 198.28.0.2:53 1 64 1 2025-07-05 02:13:05.348 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55246 1 109 1 2025-07-05 02:13:05.348 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57433 1 80 1 2025-07-05 02:13:31.271 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-05 02:09:51.845 00:05:00.399 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-07-05 02:08:52.399 00:06:00.017 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-07-05 02:14:05.692 00:00:00.000 UDP 28.104.0.1:35734 -> 198.28.0.2:53 1 64 1 2025-07-05 02:14:05.692 00:00:00.000 UDP 28.104.0.1:49887 -> 198.28.0.2:53 1 64 1 2025-07-05 02:14:05.702 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35734 1 80 1 2025-07-05 02:14:05.702 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49887 1 109 1 2025-07-05 02:10:51.795 00:05:00.616 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-07-05 02:15:05.990 00:00:00.000 UDP 28.104.0.1:45268 -> 198.28.0.2:53 1 64 1 2025-07-05 02:15:05.990 00:00:00.000 UDP 28.104.0.1:58172 -> 198.28.0.2:53 1 64 1 2025-07-05 02:15:06.001 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45268 1 109 1 2025-07-05 02:15:06.001 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58172 1 80 1 2025-07-05 02:11:51.795 00:05:00.459 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-07-05 02:16:06.291 00:00:00.000 UDP 28.104.0.1:36243 -> 198.28.0.2:53 1 64 1 2025-07-05 02:16:06.291 00:00:00.000 UDP 28.104.0.1:51464 -> 198.28.0.2:53 1 64 1 2025-07-05 02:16:06.301 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51464 1 109 1 2025-07-05 02:16:06.302 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36243 1 80 1 2025-07-05 02:11:52.789 00:06:00.133 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-07-05 02:17:06.553 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49090 1 80 1 2025-07-05 02:17:06.553 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41638 1 109 1 2025-07-05 02:17:06.543 00:00:00.000 UDP 28.104.0.1:49090 -> 198.28.0.2:53 1 64 1 2025-07-05 02:17:06.543 00:00:00.000 UDP 28.104.0.1:41638 -> 198.28.0.2:53 1 64 1 2025-07-05 02:18:06.837 00:00:00.000 UDP 28.104.0.1:36499 -> 198.28.0.2:53 1 64 1 2025-07-05 02:18:06.837 00:00:00.000 UDP 28.104.0.1:54750 -> 198.28.0.2:53 1 64 1 2025-07-05 02:18:06.847 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36499 1 80 1 2025-07-05 02:18:06.847 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54750 1 109 1 2025-07-05 02:14:09.307 00:05:10.037 OSPF 28.0.2.2:0 -> 224.0.0.5:0 41 2920 1 2025-07-05 02:18:31.385 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-05 02:14:51.807 00:05:00.594 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-07-05 02:19:07.097 00:00:00.000 UDP 28.104.0.1:60227 -> 198.28.0.2:53 1 64 1 2025-07-05 02:19:07.097 00:00:00.000 UDP 28.104.0.1:59821 -> 198.28.0.2:53 1 64 1 2025-07-05 02:19:07.107 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60227 1 109 1 2025-07-05 02:19:07.107 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59821 1 80 1 2025-07-05 02:15:51.849 00:05:00.396 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-07-05 02:20:07.391 00:00:00.000 UDP 28.104.0.1:58489 -> 198.28.0.2:53 1 64 1 2025-07-05 02:20:07.391 00:00:00.000 UDP 28.104.0.1:36538 -> 198.28.0.2:53 1 64 1 2025-07-05 02:20:07.402 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58489 1 80 1 2025-07-05 02:20:07.402 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36538 1 109 1 2025-07-05 02:15:52.401 00:06:00.019 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-07-05 02:16:51.798 00:05:00.614 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-07-05 02:21:07.694 00:00:00.000 UDP 28.104.0.1:43118 -> 198.28.0.2:53 1 64 1 2025-07-05 02:21:07.694 00:00:00.000 UDP 28.104.0.1:47906 -> 198.28.0.2:53 1 64 1 2025-07-05 02:21:07.704 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47906 1 109 1 2025-07-05 02:21:07.704 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43118 1 80 1 2025-07-05 02:17:51.798 00:05:00.457 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-07-05 02:22:07.993 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43746 1 109 1 2025-07-05 02:22:07.993 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54158 1 80 1 2025-07-05 02:22:07.982 00:00:00.000 UDP 28.104.0.1:54158 -> 198.28.0.2:53 1 64 1 2025-07-05 02:22:07.982 00:00:00.000 UDP 28.104.0.1:43746 -> 198.28.0.2:53 1 64 1 2025-07-05 02:23:08.289 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47054 1 109 1 2025-07-05 02:23:08.289 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34183 1 80 1 2025-07-05 02:23:08.279 00:00:00.000 UDP 28.104.0.1:47054 -> 198.28.0.2:53 1 64 1 2025-07-05 02:23:08.279 00:00:00.000 UDP 28.104.0.1:34183 -> 198.28.0.2:53 1 64 1 2025-07-05 02:23:31.539 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-05 02:19:29.344 00:05:10.009 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2596 1 2025-07-05 02:18:52.791 00:06:00.131 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-07-05 02:24:08.574 00:00:00.000 UDP 28.104.0.1:53151 -> 198.28.0.2:53 1 64 1 2025-07-05 02:24:08.574 00:00:00.000 UDP 28.104.0.1:51492 -> 198.28.0.2:53 1 64 1 2025-07-05 02:24:08.585 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51492 1 80 1 2025-07-05 02:24:08.585 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53151 1 109 1 2025-07-05 02:20:51.808 00:05:00.596 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-07-05 02:25:08.879 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51217 1 109 1 2025-07-05 02:25:08.879 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39348 1 80 1 2025-07-05 02:25:08.868 00:00:00.000 UDP 28.104.0.1:39348 -> 198.28.0.2:53 1 64 1 2025-07-05 02:25:08.868 00:00:00.000 UDP 28.104.0.1:51217 -> 198.28.0.2:53 1 64 1 2025-07-05 02:21:51.850 00:05:00.397 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-07-05 02:26:09.187 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56117 1 80 1 2025-07-05 02:26:09.187 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49564 1 109 1 2025-07-05 02:26:09.177 00:00:00.000 UDP 28.104.0.1:56117 -> 198.28.0.2:53 1 64 1 2025-07-05 02:26:09.177 00:00:00.000 UDP 28.104.0.1:49564 -> 198.28.0.2:53 1 64 1 2025-07-05 02:22:51.799 00:05:00.618 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-07-05 02:27:09.477 00:00:00.000 UDP 28.104.0.1:50696 -> 198.28.0.2:53 1 64 1 2025-07-05 02:27:09.477 00:00:00.000 UDP 28.104.0.1:36769 -> 198.28.0.2:53 1 64 1 2025-07-05 02:27:09.489 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36769 1 109 1 2025-07-05 02:27:09.489 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50696 1 80 1 2025-07-05 02:23:51.799 00:05:00.457 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-07-05 02:22:52.402 00:06:00.019 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-07-05 02:28:09.772 00:00:00.000 UDP 28.104.0.1:38798 -> 198.28.0.2:53 1 64 1 2025-07-05 02:28:09.772 00:00:00.000 UDP 28.104.0.1:44801 -> 198.28.0.2:53 1 64 1 2025-07-05 02:28:09.783 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38798 1 109 1 2025-07-05 02:28:09.783 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44801 1 80 1 2025-07-05 02:28:31.708 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-05 02:24:49.355 00:05:10.007 OSPF 28.0.2.2:0 -> 224.0.0.5:0 33 2256 1 2025-07-05 02:29:10.072 00:00:00.000 UDP 28.104.0.1:51336 -> 198.28.0.2:53 1 64 1 2025-07-05 02:29:10.072 00:00:00.000 UDP 28.104.0.1:46206 -> 198.28.0.2:53 1 64 1 2025-07-05 02:29:10.084 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46206 1 109 1 2025-07-05 02:29:10.084 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51336 1 80 1 2025-07-05 02:30:10.353 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55021 1 80 1 2025-07-05 02:30:10.355 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53356 1 109 1 2025-07-05 02:30:10.342 00:00:00.000 UDP 28.104.0.1:55021 -> 198.28.0.2:53 1 64 1 2025-07-05 02:30:10.343 00:00:00.000 UDP 28.104.0.1:53356 -> 198.28.0.2:53 1 64 1 2025-07-05 02:25:52.791 00:06:00.134 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-07-05 02:26:51.810 00:05:00.598 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-07-05 02:31:10.647 00:00:00.000 UDP 28.104.0.1:50098 -> 198.28.0.2:53 1 64 1 2025-07-05 02:31:10.647 00:00:00.000 UDP 28.104.0.1:48691 -> 198.28.0.2:53 1 64 1 2025-07-05 02:31:10.658 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50098 1 109 1 2025-07-05 02:31:10.658 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48691 1 80 1 2025-07-05 02:27:51.851 00:05:00.395 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-07-05 02:32:10.935 00:00:00.000 UDP 28.104.0.1:48488 -> 198.28.0.2:53 1 64 1 2025-07-05 02:32:10.935 00:00:00.000 UDP 28.104.0.1:40305 -> 198.28.0.2:53 1 64 1 2025-07-05 02:32:10.947 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48488 1 109 1 2025-07-05 02:32:10.947 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40305 1 80 1 2025-07-05 02:28:51.801 00:05:00.618 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-07-05 02:33:11.246 00:00:00.000 UDP 28.104.0.1:47430 -> 198.28.0.2:53 1 64 1 2025-07-05 02:33:11.246 00:00:00.000 UDP 28.104.0.1:44213 -> 198.28.0.2:53 1 64 1 2025-07-05 02:33:11.256 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44213 1 80 1 2025-07-05 02:33:11.256 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47430 1 109 1 2025-07-05 02:33:31.596 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-05 02:29:51.802 00:05:00.456 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-07-05 02:34:11.552 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43611 1 80 1 2025-07-05 02:34:11.552 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40685 1 109 1 2025-07-05 02:34:11.541 00:00:00.000 UDP 28.104.0.1:40685 -> 198.28.0.2:53 1 64 1 2025-07-05 02:34:11.541 00:00:00.000 UDP 28.104.0.1:43611 -> 198.28.0.2:53 1 64 1 2025-07-05 02:30:09.361 00:05:10.012 OSPF 28.0.2.2:0 -> 224.0.0.5:0 32 2176 1 2025-07-05 02:29:52.407 00:06:00.015 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-07-05 02:35:11.839 00:00:00.000 UDP 28.104.0.1:46791 -> 198.28.0.2:53 1 64 1 2025-07-05 02:35:11.839 00:00:00.000 UDP 28.104.0.1:48181 -> 198.28.0.2:53 1 64 1 2025-07-05 02:35:11.850 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48181 1 109 1 2025-07-05 02:35:11.850 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46791 1 80 1 2025-07-05 02:36:12.142 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34236 1 109 1 2025-07-05 02:36:12.142 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50434 1 80 1 2025-07-05 02:36:12.131 00:00:00.000 UDP 28.104.0.1:50434 -> 198.28.0.2:53 1 64 1 2025-07-05 02:36:12.131 00:00:00.000 UDP 28.104.0.1:34236 -> 198.28.0.2:53 1 64 1 2025-07-05 02:32:51.813 00:05:00.598 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-07-05 02:37:12.387 00:00:00.000 UDP 28.104.0.1:50611 -> 198.28.0.2:53 1 64 1 2025-07-05 02:37:12.386 00:00:00.000 UDP 28.104.0.1:51696 -> 198.28.0.2:53 1 64 1 2025-07-05 02:37:12.396 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51696 1 80 1 2025-07-05 02:37:12.398 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50611 1 109 1 2025-07-05 02:33:51.857 00:05:00.391 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-07-05 02:32:52.793 00:06:00.137 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-07-05 02:38:12.677 00:00:00.000 UDP 28.104.0.1:42292 -> 198.28.0.2:53 1 64 1 2025-07-05 02:38:12.676 00:00:00.000 UDP 28.104.0.1:60269 -> 198.28.0.2:53 1 64 1 2025-07-05 02:38:12.688 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60269 1 109 1 2025-07-05 02:38:12.690 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42292 1 80 1 2025-07-05 02:38:31.640 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-05 02:34:51.805 00:05:00.615 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-07-05 02:39:12.985 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58209 1 80 1 2025-07-05 02:39:12.985 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41205 1 109 1 2025-07-05 02:39:12.974 00:00:00.000 UDP 28.104.0.1:41205 -> 198.28.0.2:53 1 64 1 2025-07-05 02:39:12.974 00:00:00.000 UDP 28.104.0.1:58209 -> 198.28.0.2:53 1 64 1 2025-07-05 02:35:29.372 00:05:03.415 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2544 1 2025-07-05 02:35:51.807 00:05:00.452 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-07-05 02:40:13.275 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34245 1 109 1 2025-07-05 02:40:13.276 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49050 1 80 1 2025-07-05 02:40:13.264 00:00:00.000 UDP 28.104.0.1:49050 -> 198.28.0.2:53 1 64 1 2025-07-05 02:40:13.264 00:00:00.000 UDP 28.104.0.1:34245 -> 198.28.0.2:53 1 64 1 2025-07-05 02:41:13.565 00:00:00.000 UDP 28.104.0.1:57957 -> 198.28.0.2:53 1 64 1 2025-07-05 02:41:13.565 00:00:00.000 UDP 28.104.0.1:53673 -> 198.28.0.2:53 1 64 1 2025-07-05 02:41:13.577 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57957 1 109 1 2025-07-05 02:41:13.577 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53673 1 80 1 2025-07-05 02:36:52.408 00:06:00.015 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-07-05 02:42:13.860 00:00:00.000 UDP 28.104.0.1:49690 -> 198.28.0.2:53 1 64 1 2025-07-05 02:42:13.860 00:00:00.000 UDP 28.104.0.1:58859 -> 198.28.0.2:53 1 64 1 2025-07-05 02:42:13.872 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49690 1 80 1 2025-07-05 02:42:13.872 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58859 1 109 1 2025-07-05 02:38:51.817 00:05:00.595 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-07-05 02:43:14.180 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41538 1 109 1 2025-07-05 02:43:14.180 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36014 1 80 1 2025-07-05 02:43:14.170 00:00:00.000 UDP 28.104.0.1:41538 -> 198.28.0.2:53 1 64 1 2025-07-05 02:43:14.170 00:00:00.000 UDP 28.104.0.1:36014 -> 198.28.0.2:53 1 64 1 2025-07-05 02:43:32.121 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-05 02:39:51.857 00:05:00.391 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-07-05 02:44:14.464 00:00:00.000 UDP 28.104.0.1:60778 -> 198.28.0.2:53 1 64 1 2025-07-05 02:44:14.463 00:00:00.000 UDP 28.104.0.1:44358 -> 198.28.0.2:53 1 64 1 2025-07-05 02:44:14.473 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44358 1 80 1 2025-07-05 02:44:14.476 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60778 1 109 1 2025-07-05 02:39:52.793 00:06:00.137 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-07-05 02:40:39.381 00:05:10.011 OSPF 28.0.2.2:0 -> 224.0.0.5:0 44 3248 1 2025-07-05 02:40:51.808 00:05:00.615 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-07-05 02:45:14.767 00:00:00.000 UDP 28.104.0.1:37577 -> 198.28.0.2:53 1 64 1 2025-07-05 02:45:14.767 00:00:00.000 UDP 28.104.0.1:55543 -> 198.28.0.2:53 1 64 1 2025-07-05 02:45:14.778 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55543 1 109 1 2025-07-05 02:45:14.778 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37577 1 80 1 2025-07-05 02:41:51.808 00:05:00.452 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-07-05 02:46:15.075 00:00:00.000 UDP 28.104.0.1:60664 -> 198.28.0.2:53 1 64 1 2025-07-05 02:46:15.075 00:00:00.000 UDP 28.104.0.1:36970 -> 198.28.0.2:53 1 64 1 2025-07-05 02:46:15.086 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60664 1 80 1 2025-07-05 02:46:15.087 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36970 1 109 1 2025-07-05 02:47:15.380 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52926 1 109 1 2025-07-05 02:47:15.380 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58789 1 80 1 2025-07-05 02:47:15.369 00:00:00.000 UDP 28.104.0.1:58789 -> 198.28.0.2:53 1 64 1 2025-07-05 02:47:15.369 00:00:00.000 UDP 28.104.0.1:52926 -> 198.28.0.2:53 1 64 1 2025-07-05 02:48:15.683 00:00:00.000 UDP 28.104.0.1:54376 -> 198.28.0.2:53 1 64 1 2025-07-05 02:48:15.683 00:00:00.000 UDP 28.104.0.1:60902 -> 198.28.0.2:53 1 64 1 2025-07-05 02:48:15.693 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54376 1 109 1 2025-07-05 02:48:15.693 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60902 1 80 1 2025-07-05 02:48:32.058 00:00:00.048 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-05 02:44:51.818 00:05:00.594 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-07-05 02:43:52.411 00:06:00.013 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-07-05 02:49:15.987 00:00:00.000 UDP 28.104.0.1:43205 -> 198.28.0.2:53 1 64 1 2025-07-05 02:49:15.987 00:00:00.000 UDP 28.104.0.1:55500 -> 198.28.0.2:53 1 64 1 2025-07-05 02:49:15.997 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55500 1 80 1 2025-07-05 02:49:15.998 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43205 1 109 1 2025-07-05 02:45:51.860 00:05:00.391 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-07-05 02:45:59.392 00:05:10.008 OSPF 28.0.2.2:0 -> 224.0.0.5:0 38 2708 1 2025-07-05 02:50:16.287 00:00:00.000 UDP 28.104.0.1:34681 -> 198.28.0.2:53 1 64 1 2025-07-05 02:50:16.287 00:00:00.000 UDP 28.104.0.1:42776 -> 198.28.0.2:53 1 64 1 2025-07-05 02:50:16.299 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42776 1 80 1 2025-07-05 02:50:16.299 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34681 1 109 1 2025-07-05 02:46:51.809 00:05:00.615 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-07-05 02:51:16.601 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39082 1 80 1 2025-07-05 02:51:16.600 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33846 1 109 1 2025-07-05 02:51:16.590 00:00:00.000 UDP 28.104.0.1:33846 -> 198.28.0.2:53 1 64 1 2025-07-05 02:51:16.590 00:00:00.000 UDP 28.104.0.1:39082 -> 198.28.0.2:53 1 64 1 2025-07-05 02:47:51.810 00:05:00.451 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-07-05 02:46:52.795 00:06:00.137 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-07-05 02:52:16.856 00:00:00.000 UDP 28.104.0.1:39613 -> 198.28.0.2:53 1 64 1 2025-07-05 02:52:16.856 00:00:00.000 UDP 28.104.0.1:40461 -> 198.28.0.2:53 1 64 1 2025-07-05 02:52:16.866 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40461 1 109 1 2025-07-05 02:52:16.866 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39613 1 80 1 2025-07-05 02:53:17.184 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49548 1 80 1 2025-07-05 02:53:17.184 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59522 1 109 1 2025-07-05 02:53:17.174 00:00:00.000 UDP 28.104.0.1:59522 -> 198.28.0.2:53 1 64 1 2025-07-05 02:53:17.174 00:00:00.000 UDP 28.104.0.1:49548 -> 198.28.0.2:53 1 64 1 2025-07-05 02:53:32.024 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-05 02:54:17.479 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33980 1 109 1 2025-07-05 02:54:17.479 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36684 1 80 1 2025-07-05 02:54:17.468 00:00:00.000 UDP 28.104.0.1:36684 -> 198.28.0.2:53 1 64 1 2025-07-05 02:54:17.468 00:00:00.000 UDP 28.104.0.1:33980 -> 198.28.0.2:53 1 64 1 2025-07-05 02:50:51.819 00:05:00.594 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-07-05 02:55:17.773 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39132 1 109 1 2025-07-05 02:55:17.773 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33652 1 80 1 2025-07-05 02:55:17.763 00:00:00.000 UDP 28.104.0.1:39132 -> 198.28.0.2:53 1 64 1 2025-07-05 02:55:17.763 00:00:00.000 UDP 28.104.0.1:33652 -> 198.28.0.2:53 1 64 1 2025-07-05 02:51:19.400 00:05:10.007 OSPF 28.0.2.2:0 -> 224.0.0.5:0 33 2256 1 2025-07-05 02:51:51.859 00:05:00.391 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-07-05 02:50:52.413 00:06:00.012 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-07-05 02:56:18.076 00:00:00.000 UDP 28.104.0.1:35962 -> 198.28.0.2:53 1 64 1 2025-07-05 02:56:18.076 00:00:00.000 UDP 28.104.0.1:38359 -> 198.28.0.2:53 1 64 1 2025-07-05 02:56:18.086 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35962 1 109 1 2025-07-05 02:56:18.086 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38359 1 80 1 2025-07-05 02:52:51.809 00:05:00.616 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-07-05 02:57:18.378 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60911 1 109 1 2025-07-05 02:57:18.378 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52931 1 80 1 2025-07-05 02:57:18.368 00:00:00.000 UDP 28.104.0.1:52931 -> 198.28.0.2:53 1 64 1 2025-07-05 02:57:18.368 00:00:00.000 UDP 28.104.0.1:60911 -> 198.28.0.2:53 1 64 1 2025-07-05 02:53:51.810 00:05:00.452 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-07-05 02:58:18.669 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40382 1 80 1 2025-07-05 02:58:18.669 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47824 1 109 1 2025-07-05 02:58:18.658 00:00:00.000 UDP 28.104.0.1:40382 -> 198.28.0.2:53 1 64 1 2025-07-05 02:58:18.658 00:00:00.000 UDP 28.104.0.1:47824 -> 198.28.0.2:53 1 64 1 2025-07-05 02:58:32.217 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-05 02:53:52.796 00:06:00.154 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 Summary: total flows: 321, total bytes: 95114, total packets: 1404, avg bps: 195, avg pps: 0, avg bpp: 67 Time window: 2025-07-05 01:54:52 - 2025-07-05 02:59:52 Total flows processed: 321, passed: 321, Blocks skipped: 0, Bytes read: 33448 Sys: 0.0021s User: 0.0031s Wall: 0.0042s flows/second: 75728.2 Runtime: 0.0043s