Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-06 03:59:02.247 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-06 03:59:38.093 00:00:00.000 UDP 28.104.0.1:49154 -> 198.28.0.2:53 1 64 1 2025-07-06 03:59:38.093 00:00:00.000 UDP 28.104.0.1:38271 -> 198.28.0.2:53 1 64 1 2025-07-06 03:59:38.105 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49154 1 109 1 2025-07-06 03:59:38.105 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38271 1 80 1 2025-07-06 03:54:52.229 00:06:00.533 TCP 28.156.0.1:179 -> 28.151.0.1:39145 14 861 1 2025-07-06 04:00:38.402 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50765 1 80 1 2025-07-06 04:00:38.402 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59247 1 109 1 2025-07-06 04:00:38.391 00:00:00.000 UDP 28.104.0.1:59247 -> 198.28.0.2:53 1 64 1 2025-07-06 04:00:38.391 00:00:00.000 UDP 28.104.0.1:50765 -> 198.28.0.2:53 1 64 1 2025-07-06 03:55:52.950 00:06:00.028 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-07-06 04:01:38.682 00:00:00.000 UDP 28.104.0.1:49683 -> 198.28.0.2:53 1 64 1 2025-07-06 04:01:38.682 00:00:00.000 UDP 28.104.0.1:48103 -> 198.28.0.2:53 1 64 1 2025-07-06 04:01:38.692 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48103 1 109 1 2025-07-06 04:01:38.692 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49683 1 80 1 2025-07-06 03:59:53.344 00:02:00.176 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-07-06 03:56:52.178 00:06:00.786 TCP 28.151.0.1:179 -> 28.154.0.1:41239 14 861 1 2025-07-06 04:02:38.980 00:00:00.000 UDP 28.104.0.1:53710 -> 198.28.0.2:53 1 64 1 2025-07-06 04:02:38.980 00:00:00.000 UDP 28.104.0.1:60104 -> 198.28.0.2:53 1 64 1 2025-07-06 04:02:38.990 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53710 1 80 1 2025-07-06 04:02:38.990 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60104 1 109 1 2025-07-06 03:57:52.181 00:06:00.593 TCP 28.151.0.1:39145 -> 28.156.0.1:179 14 861 1 2025-07-06 03:59:01.987 00:05:10.003 OSPF 28.0.2.2:0 -> 224.0.0.5:0 42 2968 1 2025-07-06 04:03:39.271 00:00:00.000 UDP 28.104.0.1:34444 -> 198.28.0.2:53 1 64 1 2025-07-06 04:03:39.271 00:00:00.000 UDP 28.104.0.1:58987 -> 198.28.0.2:53 1 64 1 2025-07-06 04:03:39.282 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58987 1 109 1 2025-07-06 04:03:39.282 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34444 1 80 1 2025-07-06 04:02:53.344 00:01:00.176 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-07-06 04:04:02.298 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-06 04:04:39.576 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49351 1 109 1 2025-07-06 04:04:39.576 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47058 1 80 1 2025-07-06 04:04:39.566 00:00:00.000 UDP 28.104.0.1:47058 -> 198.28.0.2:53 1 64 1 2025-07-06 04:04:39.566 00:00:00.000 UDP 28.104.0.1:49351 -> 198.28.0.2:53 1 64 1 2025-07-06 03:59:52.189 00:06:00.765 TCP 28.154.0.1:41239 -> 28.151.0.1:179 14 861 1 2025-07-06 04:05:39.870 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60810 1 109 1 2025-07-06 04:05:39.870 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39112 1 80 1 2025-07-06 04:05:39.860 00:00:00.000 UDP 28.104.0.1:39112 -> 198.28.0.2:53 1 64 1 2025-07-06 04:05:39.860 00:00:00.000 UDP 28.104.0.1:60810 -> 198.28.0.2:53 1 64 1 2025-07-06 04:06:40.192 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35852 1 109 1 2025-07-06 04:06:40.192 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42113 1 80 1 2025-07-06 04:06:40.181 00:00:00.000 UDP 28.104.0.1:42113 -> 198.28.0.2:53 1 64 1 2025-07-06 04:06:40.181 00:00:00.000 UDP 28.104.0.1:35852 -> 198.28.0.2:53 1 64 1 2025-07-06 04:01:52.230 00:06:00.533 TCP 28.156.0.1:179 -> 28.151.0.1:39145 14 861 1 2025-07-06 04:04:53.344 00:02:00.179 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-07-06 04:07:40.454 00:00:00.000 UDP 28.104.0.1:39683 -> 198.28.0.2:53 1 64 1 2025-07-06 04:07:40.454 00:00:00.000 UDP 28.104.0.1:39804 -> 198.28.0.2:53 1 64 1 2025-07-06 04:07:40.465 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39804 1 80 1 2025-07-06 04:07:40.463 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39683 1 109 1 2025-07-06 04:02:52.954 00:06:00.029 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-07-06 04:04:21.991 00:05:00.011 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2488 1 2025-07-06 04:08:40.747 00:00:00.000 UDP 28.104.0.1:47511 -> 198.28.0.2:53 1 64 1 2025-07-06 04:08:40.747 00:00:00.000 UDP 28.104.0.1:44339 -> 198.28.0.2:53 1 64 1 2025-07-06 04:08:40.758 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47511 1 109 1 2025-07-06 04:08:40.758 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44339 1 80 1 2025-07-06 04:07:53.345 00:01:00.176 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-07-06 04:03:52.181 00:06:00.786 TCP 28.151.0.1:179 -> 28.154.0.1:41239 14 861 1 2025-07-06 04:09:02.430 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-06 04:09:40.993 00:00:00.000 UDP 28.104.0.1:51319 -> 198.28.0.2:53 1 64 1 2025-07-06 04:09:40.993 00:00:00.000 UDP 28.104.0.1:53954 -> 198.28.0.2:53 1 64 1 2025-07-06 04:09:41.004 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51319 1 109 1 2025-07-06 04:09:41.004 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53954 1 80 1 2025-07-06 04:04:52.181 00:06:00.594 TCP 28.151.0.1:39145 -> 28.156.0.1:179 14 861 1 2025-07-06 04:10:41.296 00:00:00.000 UDP 28.104.0.1:51233 -> 198.28.0.2:53 1 64 1 2025-07-06 04:10:41.295 00:00:00.000 UDP 28.104.0.1:36834 -> 198.28.0.2:53 1 64 1 2025-07-06 04:10:41.307 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51233 1 109 1 2025-07-06 04:10:41.307 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36834 1 80 1 2025-07-06 04:11:41.605 00:00:00.000 UDP 28.104.0.1:32950 -> 198.28.0.2:53 1 64 1 2025-07-06 04:11:41.605 00:00:00.000 UDP 28.104.0.1:33679 -> 198.28.0.2:53 1 64 1 2025-07-06 04:11:41.616 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33679 1 80 1 2025-07-06 04:11:41.616 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32950 1 109 1 2025-07-06 04:09:53.345 00:02:00.178 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-07-06 04:06:52.192 00:06:00.765 TCP 28.154.0.1:41239 -> 28.151.0.1:179 14 861 1 2025-07-06 04:12:41.907 00:00:00.000 UDP 28.104.0.1:34869 -> 198.28.0.2:53 1 64 1 2025-07-06 04:12:41.907 00:00:00.000 UDP 28.104.0.1:40448 -> 198.28.0.2:53 1 64 1 2025-07-06 04:12:41.919 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34869 1 80 1 2025-07-06 04:12:41.919 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40448 1 109 1 2025-07-06 04:13:42.213 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42429 1 109 1 2025-07-06 04:13:42.213 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34540 1 80 1 2025-07-06 04:13:42.203 00:00:00.000 UDP 28.104.0.1:42429 -> 198.28.0.2:53 1 64 1 2025-07-06 04:09:32.001 00:05:10.041 OSPF 28.0.2.2:0 -> 224.0.0.5:0 32 2176 1 2025-07-06 04:13:42.203 00:00:00.000 UDP 28.104.0.1:34540 -> 198.28.0.2:53 1 64 1 2025-07-06 04:12:53.347 00:01:00.177 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-07-06 04:08:52.232 00:06:00.536 TCP 28.156.0.1:179 -> 28.151.0.1:39145 14 861 1 2025-07-06 04:14:02.209 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-06 04:14:42.500 00:00:00.000 UDP 28.104.0.1:46946 -> 198.28.0.2:53 1 64 1 2025-07-06 04:14:42.500 00:00:00.000 UDP 28.104.0.1:35146 -> 198.28.0.2:53 1 64 1 2025-07-06 04:14:42.508 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35146 1 80 1 2025-07-06 04:14:42.508 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46946 1 109 1 2025-07-06 04:09:52.956 00:06:00.031 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-07-06 04:15:42.794 00:00:00.000 UDP 28.104.0.1:46540 -> 198.28.0.2:53 1 64 1 2025-07-06 04:15:42.795 00:00:00.000 UDP 28.104.0.1:58817 -> 198.28.0.2:53 1 64 1 2025-07-06 04:15:42.804 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58817 1 80 1 2025-07-06 04:15:42.804 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46540 1 109 1 2025-07-06 04:10:52.183 00:06:00.786 TCP 28.151.0.1:179 -> 28.154.0.1:41239 14 861 1 2025-07-06 04:16:43.098 00:00:00.000 UDP 28.104.0.1:50964 -> 198.28.0.2:53 1 64 1 2025-07-06 04:16:43.098 00:00:00.000 UDP 28.104.0.1:41844 -> 198.28.0.2:53 1 64 1 2025-07-06 04:16:43.108 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50964 1 109 1 2025-07-06 04:16:43.108 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41844 1 80 1 2025-07-06 04:11:52.183 00:06:00.597 TCP 28.151.0.1:39145 -> 28.156.0.1:179 14 861 1 2025-07-06 04:17:43.392 00:00:00.000 UDP 28.104.0.1:44965 -> 198.28.0.2:53 1 64 1 2025-07-06 04:17:43.392 00:00:00.000 UDP 28.104.0.1:40345 -> 198.28.0.2:53 1 64 1 2025-07-06 04:17:43.404 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40345 1 109 1 2025-07-06 04:17:43.404 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44965 1 80 1 2025-07-06 04:18:43.661 00:00:00.000 UDP 28.104.0.1:39380 -> 198.28.0.2:53 1 64 1 2025-07-06 04:18:43.660 00:00:00.000 UDP 28.104.0.1:44645 -> 198.28.0.2:53 1 64 1 2025-07-06 04:18:43.670 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44645 1 80 1 2025-07-06 04:18:43.671 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39380 1 109 1 2025-07-06 04:14:53.347 00:04:00.177 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-07-06 04:13:52.193 00:06:00.766 TCP 28.154.0.1:41239 -> 28.151.0.1:179 14 861 1 2025-07-06 04:19:02.830 00:00:00.031 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-06 04:14:52.043 00:05:10.022 OSPF 28.0.2.2:0 -> 224.0.0.5:0 33 2320 1 2025-07-06 04:19:43.944 00:00:00.000 UDP 28.104.0.1:55128 -> 198.28.0.2:53 1 64 1 2025-07-06 04:19:43.944 00:00:00.000 UDP 28.104.0.1:46785 -> 198.28.0.2:53 1 64 1 2025-07-06 04:19:43.955 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46785 1 80 1 2025-07-06 04:19:43.955 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55128 1 109 1 2025-07-06 04:20:44.224 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51326 1 80 1 2025-07-06 04:20:44.224 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43499 1 109 1 2025-07-06 04:20:44.214 00:00:00.000 UDP 28.104.0.1:43499 -> 198.28.0.2:53 1 64 1 2025-07-06 04:20:44.213 00:00:00.000 UDP 28.104.0.1:51326 -> 198.28.0.2:53 1 64 1 2025-07-06 04:15:52.235 00:06:00.535 TCP 28.156.0.1:179 -> 28.151.0.1:39145 14 861 1 2025-07-06 04:21:44.515 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42676 1 80 1 2025-07-06 04:21:44.515 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56828 1 109 1 2025-07-06 04:21:44.505 00:00:00.000 UDP 28.104.0.1:56828 -> 198.28.0.2:53 1 64 1 2025-07-06 04:21:44.505 00:00:00.000 UDP 28.104.0.1:42676 -> 198.28.0.2:53 1 64 1 2025-07-06 04:16:52.960 00:06:00.030 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-07-06 04:22:44.807 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35006 1 109 1 2025-07-06 04:22:44.807 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37622 1 80 1 2025-07-06 04:22:44.796 00:00:00.000 UDP 28.104.0.1:37622 -> 198.28.0.2:53 1 64 1 2025-07-06 04:22:44.796 00:00:00.000 UDP 28.104.0.1:35006 -> 198.28.0.2:53 1 64 1 2025-07-06 04:17:52.184 00:06:00.786 TCP 28.151.0.1:179 -> 28.154.0.1:41239 14 861 1 2025-07-06 04:23:45.063 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54637 1 109 1 2025-07-06 04:23:45.063 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33886 1 80 1 2025-07-06 04:23:45.052 00:00:00.000 UDP 28.104.0.1:54637 -> 198.28.0.2:53 1 64 1 2025-07-06 04:23:45.052 00:00:00.000 UDP 28.104.0.1:33886 -> 198.28.0.2:53 1 64 1 2025-07-06 04:18:52.183 00:06:00.597 TCP 28.151.0.1:39145 -> 28.156.0.1:179 14 861 1 2025-07-06 04:19:53.347 00:04:00.177 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-07-06 04:24:02.853 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-06 04:20:05.502 00:05:06.572 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2624 1 2025-07-06 04:24:45.354 00:00:00.000 UDP 28.104.0.1:57737 -> 198.28.0.2:53 1 64 1 2025-07-06 04:24:45.354 00:00:00.000 UDP 28.104.0.1:46020 -> 198.28.0.2:53 1 64 1 2025-07-06 04:24:45.364 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46020 1 109 1 2025-07-06 04:24:45.364 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57737 1 80 1 2025-07-06 04:25:45.645 00:00:00.000 UDP 28.104.0.1:37342 -> 198.28.0.2:53 1 64 1 2025-07-06 04:25:45.644 00:00:00.000 UDP 28.104.0.1:60031 -> 198.28.0.2:53 1 64 1 2025-07-06 04:25:45.656 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37342 1 80 1 2025-07-06 04:25:45.655 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60031 1 109 1 2025-07-06 04:20:52.194 00:06:00.768 TCP 28.154.0.1:41239 -> 28.151.0.1:179 14 861 1 2025-07-06 04:26:45.949 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47793 1 109 1 2025-07-06 04:26:45.949 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60655 1 80 1 2025-07-06 04:26:45.940 00:00:00.000 UDP 28.104.0.1:60655 -> 198.28.0.2:53 1 64 1 2025-07-06 04:26:45.940 00:00:00.000 UDP 28.104.0.1:47793 -> 198.28.0.2:53 1 64 1 2025-07-06 04:27:46.240 00:00:00.000 UDP 28.104.0.1:59550 -> 198.28.0.2:53 1 64 1 2025-07-06 04:27:46.240 00:00:00.000 UDP 28.104.0.1:47578 -> 198.28.0.2:53 1 64 1 2025-07-06 04:27:46.250 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47578 1 80 1 2025-07-06 04:27:46.251 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59550 1 109 1 2025-07-06 04:22:52.235 00:06:00.536 TCP 28.156.0.1:179 -> 28.151.0.1:39145 14 861 1 2025-07-06 04:28:46.551 00:00:00.000 UDP 28.104.0.1:57500 -> 198.28.0.2:53 1 64 1 2025-07-06 04:28:46.551 00:00:00.000 UDP 28.104.0.1:39742 -> 198.28.0.2:53 1 64 1 2025-07-06 04:28:46.561 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39742 1 80 1 2025-07-06 04:28:46.561 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57500 1 109 1 2025-07-06 04:24:53.348 00:04:00.176 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-07-06 04:23:52.959 00:06:00.031 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-07-06 04:29:02.857 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-06 04:25:17.116 00:05:01.385 OSPF 28.0.2.2:0 -> 224.0.0.5:0 40 2968 1 2025-07-06 04:29:46.863 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34868 1 80 1 2025-07-06 04:29:46.863 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51962 1 109 1 2025-07-06 04:29:46.853 00:00:00.000 UDP 28.104.0.1:34868 -> 198.28.0.2:53 1 64 1 2025-07-06 04:29:46.853 00:00:00.000 UDP 28.104.0.1:51962 -> 198.28.0.2:53 1 64 1 2025-07-06 04:24:52.187 00:06:00.786 TCP 28.151.0.1:179 -> 28.154.0.1:41239 14 861 1 2025-07-06 04:30:47.177 00:00:00.000 UDP 28.104.0.1:56403 -> 198.28.0.2:53 1 64 1 2025-07-06 04:30:47.177 00:00:00.000 UDP 28.104.0.1:40444 -> 198.28.0.2:53 1 64 1 2025-07-06 04:30:47.189 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56403 1 109 1 2025-07-06 04:30:47.191 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40444 1 80 1 2025-07-06 04:25:52.186 00:06:00.595 TCP 28.151.0.1:39145 -> 28.156.0.1:179 14 861 1 2025-07-06 04:29:53.351 00:01:00.175 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-07-06 04:31:47.474 00:00:00.000 UDP 28.104.0.1:48602 -> 198.28.0.2:53 1 64 1 2025-07-06 04:31:47.474 00:00:00.000 UDP 28.104.0.1:54060 -> 198.28.0.2:53 1 64 1 2025-07-06 04:31:47.484 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48602 1 80 1 2025-07-06 04:31:47.484 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54060 1 109 1 2025-07-06 04:32:47.783 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56395 1 80 1 2025-07-06 04:32:47.783 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38856 1 109 1 2025-07-06 04:32:47.775 00:00:00.000 UDP 28.104.0.1:38856 -> 198.28.0.2:53 1 64 1 2025-07-06 04:32:47.775 00:00:00.000 UDP 28.104.0.1:56395 -> 198.28.0.2:53 1 64 1 2025-07-06 04:27:52.196 00:06:00.767 TCP 28.154.0.1:41239 -> 28.151.0.1:179 14 861 1 2025-07-06 04:33:48.113 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58735 1 109 1 2025-07-06 04:33:48.113 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34034 1 80 1 2025-07-06 04:33:48.103 00:00:00.000 UDP 28.104.0.1:34034 -> 198.28.0.2:53 1 64 1 2025-07-06 04:33:48.104 00:00:00.000 UDP 28.104.0.1:58735 -> 198.28.0.2:53 1 64 1 2025-07-06 04:31:53.351 00:02:00.174 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-07-06 04:34:02.967 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-06 04:30:22.089 00:05:10.009 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2716 1 2025-07-06 04:34:48.408 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47835 1 109 1 2025-07-06 04:34:48.408 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48691 1 80 1 2025-07-06 04:34:48.397 00:00:00.000 UDP 28.104.0.1:48691 -> 198.28.0.2:53 1 64 1 2025-07-06 04:34:48.397 00:00:00.000 UDP 28.104.0.1:47835 -> 198.28.0.2:53 1 64 1 2025-07-06 04:29:52.237 00:06:00.538 TCP 28.156.0.1:179 -> 28.151.0.1:39145 14 861 1 2025-07-06 04:35:48.699 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52671 1 109 1 2025-07-06 04:35:48.699 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57379 1 80 1 2025-07-06 04:35:48.689 00:00:00.000 UDP 28.104.0.1:57379 -> 198.28.0.2:53 1 64 1 2025-07-06 04:35:48.689 00:00:00.000 UDP 28.104.0.1:52671 -> 198.28.0.2:53 1 64 1 2025-07-06 04:34:53.352 00:01:00.174 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-07-06 04:30:52.963 00:06:00.030 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-07-06 04:36:48.939 00:00:00.000 UDP 28.104.0.1:54627 -> 198.28.0.2:53 1 64 1 2025-07-06 04:36:48.939 00:00:00.000 UDP 28.104.0.1:49395 -> 198.28.0.2:53 1 64 1 2025-07-06 04:36:48.949 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54627 1 109 1 2025-07-06 04:36:48.949 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49395 1 80 1 2025-07-06 04:31:52.187 00:06:00.788 TCP 28.151.0.1:179 -> 28.154.0.1:41239 14 861 1 2025-07-06 04:37:49.239 00:00:00.000 UDP 28.104.0.1:58147 -> 198.28.0.2:53 1 64 1 2025-07-06 04:37:49.239 00:00:00.000 UDP 28.104.0.1:44939 -> 198.28.0.2:53 1 64 1 2025-07-06 04:32:52.188 00:06:00.597 TCP 28.151.0.1:39145 -> 28.156.0.1:179 14 861 1 2025-07-06 04:37:49.249 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58147 1 80 1 2025-07-06 04:37:49.249 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44939 1 109 1 2025-07-06 04:38:49.527 00:00:00.000 UDP 28.104.0.1:57155 -> 198.28.0.2:53 1 64 1 2025-07-06 04:36:53.354 00:02:00.173 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-07-06 04:38:49.527 00:00:00.000 UDP 28.104.0.1:37199 -> 198.28.0.2:53 1 64 1 2025-07-06 04:38:49.538 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37199 1 80 1 2025-07-06 04:38:49.538 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57155 1 109 1 2025-07-06 04:39:03.079 00:00:00.039 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-06 04:39:49.831 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45685 1 80 1 2025-07-06 04:39:49.831 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40485 1 109 1 2025-07-06 04:39:49.820 00:00:00.000 UDP 28.104.0.1:45685 -> 198.28.0.2:53 1 64 1 2025-07-06 04:34:52.198 00:06:00.767 TCP 28.154.0.1:41239 -> 28.151.0.1:179 14 861 1 2025-07-06 04:39:49.820 00:00:00.000 UDP 28.104.0.1:40485 -> 198.28.0.2:53 1 64 1 2025-07-06 04:35:42.098 00:05:10.025 OSPF 28.0.2.2:0 -> 224.0.0.5:0 33 2256 1 2025-07-06 04:40:50.111 00:00:00.000 UDP 28.104.0.1:43102 -> 198.28.0.2:53 1 64 1 2025-07-06 04:39:53.356 00:01:00.173 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-07-06 04:40:50.111 00:00:00.000 UDP 28.104.0.1:53443 -> 198.28.0.2:53 1 64 1 2025-07-06 04:40:50.121 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53443 1 109 1 2025-07-06 04:40:50.121 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43102 1 80 1 2025-07-06 04:41:50.402 00:00:00.000 UDP 28.104.0.1:54374 -> 198.28.0.2:53 1 64 1 2025-07-06 04:41:50.402 00:00:00.000 UDP 28.104.0.1:60195 -> 198.28.0.2:53 1 64 1 2025-07-06 04:36:52.238 00:06:00.538 TCP 28.156.0.1:179 -> 28.151.0.1:39145 14 861 1 2025-07-06 04:41:50.412 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60195 1 109 1 2025-07-06 04:41:50.412 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54374 1 80 1 2025-07-06 04:42:50.687 00:00:00.000 UDP 28.104.0.1:49131 -> 198.28.0.2:53 1 64 1 2025-07-06 04:42:50.687 00:00:00.000 UDP 28.104.0.1:42656 -> 198.28.0.2:53 1 64 1 2025-07-06 04:37:52.964 00:06:00.031 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-07-06 04:42:50.699 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42656 1 80 1 2025-07-06 04:42:50.699 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49131 1 109 1 2025-07-06 04:38:52.189 00:06:00.788 TCP 28.151.0.1:179 -> 28.154.0.1:41239 14 861 1 2025-07-06 04:43:50.989 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50114 1 109 1 2025-07-06 04:43:50.990 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54029 1 80 1 2025-07-06 04:41:53.354 00:02:00.173 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-07-06 04:43:50.979 00:00:00.000 UDP 28.104.0.1:50114 -> 198.28.0.2:53 1 64 1 2025-07-06 04:43:50.979 00:00:00.000 UDP 28.104.0.1:54029 -> 198.28.0.2:53 1 64 1 2025-07-06 04:44:03.259 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-06 04:44:51.243 00:00:00.000 UDP 28.104.0.1:35427 -> 198.28.0.2:53 1 64 1 2025-07-06 04:44:51.243 00:00:00.000 UDP 28.104.0.1:42916 -> 198.28.0.2:53 1 64 1 2025-07-06 04:44:51.253 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35427 1 109 1 2025-07-06 04:39:52.189 00:06:00.598 TCP 28.151.0.1:39145 -> 28.156.0.1:179 14 861 1 2025-07-06 04:44:51.253 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42916 1 80 1 2025-07-06 04:41:02.123 00:05:10.008 OSPF 28.0.2.2:0 -> 224.0.0.5:0 32 2176 1 2025-07-06 04:45:51.545 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41913 1 109 1 2025-07-06 04:45:51.545 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53632 1 80 1 2025-07-06 04:44:53.355 00:01:00.172 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-07-06 04:45:51.534 00:00:00.000 UDP 28.104.0.1:41913 -> 198.28.0.2:53 1 64 1 2025-07-06 04:45:51.534 00:00:00.000 UDP 28.104.0.1:53632 -> 198.28.0.2:53 1 64 1 2025-07-06 04:46:51.834 00:00:00.000 UDP 28.104.0.1:44080 -> 198.28.0.2:53 1 64 1 2025-07-06 04:41:52.200 00:06:00.767 TCP 28.154.0.1:41239 -> 28.151.0.1:179 14 861 1 2025-07-06 04:46:51.834 00:00:00.000 UDP 28.104.0.1:38975 -> 198.28.0.2:53 1 64 1 2025-07-06 04:46:51.845 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44080 1 109 1 2025-07-06 04:46:51.845 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38975 1 80 1 2025-07-06 04:47:52.141 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35587 1 80 1 2025-07-06 04:47:52.140 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50274 1 109 1 2025-07-06 04:47:52.129 00:00:00.000 UDP 28.104.0.1:35587 -> 198.28.0.2:53 1 64 1 2025-07-06 04:47:52.128 00:00:00.000 UDP 28.104.0.1:50274 -> 198.28.0.2:53 1 64 1 2025-07-06 04:48:52.443 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58290 1 109 1 2025-07-06 04:48:52.444 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46457 1 80 1 2025-07-06 04:46:53.373 00:02:00.157 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-07-06 04:48:52.433 00:00:00.000 UDP 28.104.0.1:58290 -> 198.28.0.2:53 1 64 1 2025-07-06 04:43:52.241 00:06:00.537 TCP 28.156.0.1:179 -> 28.151.0.1:39145 14 861 1 2025-07-06 04:44:52.967 00:05:00.034 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-07-06 04:48:52.433 00:00:00.000 UDP 28.104.0.1:46457 -> 198.28.0.2:53 1 64 1 2025-07-06 04:49:03.349 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-06 04:49:52.728 00:00:00.000 UDP 28.104.0.1:39886 -> 198.28.0.2:53 1 64 1 2025-07-06 04:49:52.728 00:00:00.000 UDP 28.104.0.1:54806 -> 198.28.0.2:53 1 64 1 2025-07-06 04:49:52.738 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39886 1 109 1 2025-07-06 04:49:52.738 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54806 1 80 1 2025-07-06 04:46:22.131 00:05:10.063 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2612 1 2025-07-06 04:50:53.006 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35520 1 109 1 2025-07-06 04:50:53.007 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58157 1 80 1 2025-07-06 04:45:52.190 00:06:00.787 TCP 28.151.0.1:179 -> 28.154.0.1:41239 14 861 1 2025-07-06 04:50:52.996 00:00:00.000 UDP 28.104.0.1:58157 -> 198.28.0.2:53 1 64 1 2025-07-06 04:50:52.996 00:00:00.000 UDP 28.104.0.1:35520 -> 198.28.0.2:53 1 64 1 2025-07-06 04:49:53.356 00:01:00.176 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-07-06 04:51:53.299 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39529 1 109 1 2025-07-06 04:51:53.299 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41077 1 80 1 2025-07-06 04:46:52.191 00:06:00.605 TCP 28.151.0.1:39145 -> 28.156.0.1:179 14 861 1 2025-07-06 04:51:53.289 00:00:00.000 UDP 28.104.0.1:39529 -> 198.28.0.2:53 1 64 1 2025-07-06 04:51:53.289 00:00:00.000 UDP 28.104.0.1:41077 -> 198.28.0.2:53 1 64 1 2025-07-06 04:52:53.581 00:00:00.000 UDP 28.104.0.1:51416 -> 198.28.0.2:53 1 64 1 2025-07-06 04:52:53.581 00:00:00.000 UDP 28.104.0.1:48672 -> 198.28.0.2:53 1 64 1 2025-07-06 04:52:53.590 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48672 1 109 1 2025-07-06 04:52:53.590 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51416 1 80 1 2025-07-06 04:53:53.884 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52630 1 109 1 2025-07-06 04:53:53.884 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39400 1 80 1 2025-07-06 04:48:52.202 00:06:00.767 TCP 28.154.0.1:41239 -> 28.151.0.1:179 14 861 1 2025-07-06 04:53:53.874 00:00:00.000 UDP 28.104.0.1:39400 -> 198.28.0.2:53 1 64 1 2025-07-06 04:53:53.874 00:00:00.000 UDP 28.104.0.1:52630 -> 198.28.0.2:53 1 64 1 2025-07-06 04:54:03.438 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-06 04:50:52.969 00:05:00.035 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-07-06 04:54:54.196 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44851 1 109 1 2025-07-06 04:54:54.196 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39173 1 80 1 2025-07-06 04:54:54.186 00:00:00.000 UDP 28.104.0.1:39173 -> 198.28.0.2:53 1 64 1 2025-07-06 04:54:54.187 00:00:00.000 UDP 28.104.0.1:44851 -> 198.28.0.2:53 1 64 1 2025-07-06 04:50:52.242 00:06:00.544 TCP 28.156.0.1:179 -> 28.151.0.1:39145 14 861 1 2025-07-06 04:51:42.138 00:05:10.739 OSPF 28.0.2.2:0 -> 224.0.0.5:0 39 2784 1 2025-07-06 04:51:53.357 00:04:00.175 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-07-06 04:55:54.436 00:00:00.000 UDP 28.104.0.1:51057 -> 198.28.0.2:53 1 64 1 2025-07-06 04:55:54.436 00:00:00.000 UDP 28.104.0.1:37423 -> 198.28.0.2:53 1 64 1 2025-07-06 04:55:54.445 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37423 1 109 1 2025-07-06 04:55:54.445 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51057 1 80 1 2025-07-06 04:56:54.744 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51721 1 109 1 2025-07-06 04:56:54.743 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55959 1 80 1 2025-07-06 04:56:54.733 00:00:00.000 UDP 28.104.0.1:51721 -> 198.28.0.2:53 1 64 1 2025-07-06 04:56:54.732 00:00:00.000 UDP 28.104.0.1:55959 -> 198.28.0.2:53 1 64 1 2025-07-06 04:56:53.356 00:01:00.176 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-07-06 04:57:55.055 00:00:00.000 UDP 28.104.0.1:33771 -> 198.28.0.2:53 1 64 1 2025-07-06 04:57:55.055 00:00:00.000 UDP 28.104.0.1:42829 -> 198.28.0.2:53 1 64 1 2025-07-06 04:52:52.195 00:06:00.784 TCP 28.151.0.1:179 -> 28.154.0.1:41239 14 861 1 2025-07-06 04:57:55.067 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42829 1 109 1 2025-07-06 04:57:55.066 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33771 1 80 1 2025-07-06 04:53:52.194 00:06:00.602 TCP 28.151.0.1:39145 -> 28.156.0.1:179 14 861 1 Summary: total flows: 323, total bytes: 94710, total packets: 1397, avg bps: 194, avg pps: 0, avg bpp: 67 Time window: 2025-07-06 03:54:52 - 2025-07-06 04:59:52 Total flows processed: 323, passed: 323, Blocks skipped: 0, Bytes read: 33656 Sys: 0.0010s User: 0.0030s Wall: 0.0022s flows/second: 143680.2 Runtime: 0.0023s