Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-12 01:54:55.121 00:05:01.230 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-07-12 01:59:12.449 00:00:00.000 UDP 28.104.0.1:51940 -> 198.28.0.2:53 1 64 1 2025-07-12 01:59:12.449 00:00:00.000 UDP 28.104.0.1:39085 -> 198.28.0.2:53 1 64 1 2025-07-12 01:59:12.459 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51940 1 80 1 2025-07-12 01:59:12.459 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39085 1 109 1 2025-07-12 01:54:56.200 00:06:00.142 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-07-12 02:00:12.742 00:00:00.000 UDP 28.104.0.1:48117 -> 198.28.0.2:53 1 64 1 2025-07-12 02:00:12.742 00:00:00.000 UDP 28.104.0.1:58023 -> 198.28.0.2:53 1 64 1 2025-07-12 02:00:12.753 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48117 1 109 1 2025-07-12 02:00:12.753 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58023 1 80 1 2025-07-12 02:01:13.078 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55186 1 109 1 2025-07-12 02:01:13.077 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33069 1 80 1 2025-07-12 02:01:13.066 00:00:00.000 UDP 28.104.0.1:33069 -> 198.28.0.2:53 1 64 1 2025-07-12 02:01:13.066 00:00:00.000 UDP 28.104.0.1:55186 -> 198.28.0.2:53 1 64 1 2025-07-12 01:57:34.727 00:05:10.008 OSPF 28.0.2.2:0 -> 224.0.0.5:0 39 2760 1 2025-07-12 02:01:53.312 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-12 01:56:56.122 00:06:00.219 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-07-12 01:57:55.131 00:05:01.210 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-07-12 02:02:13.354 00:00:00.000 UDP 28.104.0.1:55376 -> 198.28.0.2:53 1 64 1 2025-07-12 02:02:13.357 00:00:00.000 UDP 28.104.0.1:49208 -> 198.28.0.2:53 1 64 1 2025-07-12 02:02:13.365 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55376 1 80 1 2025-07-12 02:02:13.368 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49208 1 109 1 2025-07-12 02:03:13.665 00:00:00.000 UDP 28.104.0.1:52310 -> 198.28.0.2:53 1 64 1 2025-07-12 02:03:13.666 00:00:00.000 UDP 28.104.0.1:44029 -> 198.28.0.2:53 1 64 1 2025-07-12 02:03:13.677 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44029 1 109 1 2025-07-12 02:03:13.677 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52310 1 80 1 2025-07-12 01:59:55.124 00:05:00.880 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-07-12 01:58:55.171 00:06:00.820 TCP 28.156.0.1:179 -> 28.151.0.1:39145 14 861 1 2025-07-12 02:04:13.977 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41712 1 80 1 2025-07-12 02:04:13.977 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60892 1 109 1 2025-07-12 02:04:13.969 00:00:00.000 UDP 28.104.0.1:60892 -> 198.28.0.2:53 1 64 1 2025-07-12 02:04:13.969 00:00:00.000 UDP 28.104.0.1:41712 -> 198.28.0.2:53 1 64 1 2025-07-12 02:00:55.123 00:05:01.230 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-07-12 02:05:14.272 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53358 1 80 1 2025-07-12 02:05:14.272 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54927 1 109 1 2025-07-12 02:05:14.261 00:00:00.000 UDP 28.104.0.1:53358 -> 198.28.0.2:53 1 64 1 2025-07-12 02:05:14.261 00:00:00.000 UDP 28.104.0.1:54927 -> 198.28.0.2:53 1 64 1 2025-07-12 02:06:14.565 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60877 1 80 1 2025-07-12 02:06:14.565 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45827 1 109 1 2025-07-12 02:06:14.555 00:00:00.000 UDP 28.104.0.1:60877 -> 198.28.0.2:53 1 64 1 2025-07-12 02:06:14.555 00:00:00.000 UDP 28.104.0.1:45827 -> 198.28.0.2:53 1 64 1 2025-07-12 02:06:53.309 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-12 02:01:56.201 00:06:00.142 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-07-12 02:02:54.735 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2516 1 2025-07-12 02:07:14.855 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37389 1 80 1 2025-07-12 02:07:14.855 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35387 1 109 1 2025-07-12 02:07:14.845 00:00:00.000 UDP 28.104.0.1:35387 -> 198.28.0.2:53 1 64 1 2025-07-12 02:07:14.845 00:00:00.000 UDP 28.104.0.1:37389 -> 198.28.0.2:53 1 64 1 2025-07-12 02:03:55.134 00:05:01.209 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-07-12 02:08:15.137 00:00:00.000 UDP 28.104.0.1:39082 -> 198.28.0.2:53 1 64 1 2025-07-12 02:08:15.137 00:00:00.000 UDP 28.104.0.1:40197 -> 198.28.0.2:53 1 64 1 2025-07-12 02:08:15.146 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40197 1 109 1 2025-07-12 02:08:15.146 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39082 1 80 1 2025-07-12 02:03:56.124 00:06:00.219 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-07-12 02:09:15.495 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49218 1 109 1 2025-07-12 02:09:15.495 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43850 1 80 1 2025-07-12 02:09:15.485 00:00:00.000 UDP 28.104.0.1:49218 -> 198.28.0.2:53 1 64 1 2025-07-12 02:09:15.485 00:00:00.000 UDP 28.104.0.1:43850 -> 198.28.0.2:53 1 64 1 2025-07-12 02:05:55.127 00:05:00.876 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-07-12 02:10:15.782 00:00:00.000 UDP 28.104.0.1:56940 -> 198.28.0.2:53 1 64 1 2025-07-12 02:10:15.782 00:00:00.000 UDP 28.104.0.1:50845 -> 198.28.0.2:53 1 64 1 2025-07-12 02:10:15.793 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56940 1 109 1 2025-07-12 02:10:15.793 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50845 1 80 1 2025-07-12 02:05:55.177 00:06:00.816 TCP 28.156.0.1:179 -> 28.151.0.1:39145 14 861 1 2025-07-12 02:06:55.127 00:05:01.226 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-07-12 02:11:16.057 00:00:00.000 UDP 28.104.0.1:42921 -> 198.28.0.2:53 1 64 1 2025-07-12 02:11:16.057 00:00:00.000 UDP 28.104.0.1:44627 -> 198.28.0.2:53 1 64 1 2025-07-12 02:11:16.067 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42921 1 109 1 2025-07-12 02:11:16.067 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44627 1 80 1 2025-07-12 02:11:53.522 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-12 02:12:16.309 00:00:00.000 UDP 28.104.0.1:60890 -> 198.28.0.2:53 1 64 1 2025-07-12 02:12:16.309 00:00:00.000 UDP 28.104.0.1:37303 -> 198.28.0.2:53 1 64 1 2025-07-12 02:12:16.320 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60890 1 80 1 2025-07-12 02:12:16.320 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37303 1 109 1 2025-07-12 02:08:14.740 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2372 1 2025-07-12 02:13:16.601 00:00:00.000 UDP 28.104.0.1:58126 -> 198.28.0.2:53 1 64 1 2025-07-12 02:13:16.600 00:00:00.000 UDP 28.104.0.1:57918 -> 198.28.0.2:53 1 64 1 2025-07-12 02:13:16.612 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58126 1 109 1 2025-07-12 02:13:16.611 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57918 1 80 1 2025-07-12 02:09:55.138 00:05:01.205 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-07-12 02:08:56.202 00:06:00.141 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-07-12 02:14:16.917 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58815 1 80 1 2025-07-12 02:14:16.916 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49856 1 109 1 2025-07-12 02:14:16.905 00:00:00.000 UDP 28.104.0.1:49856 -> 198.28.0.2:53 1 64 1 2025-07-12 02:14:16.905 00:00:00.000 UDP 28.104.0.1:58815 -> 198.28.0.2:53 1 64 1 2025-07-12 02:15:17.210 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42317 1 80 1 2025-07-12 02:15:17.210 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57169 1 109 1 2025-07-12 02:15:17.201 00:00:00.000 UDP 28.104.0.1:57169 -> 198.28.0.2:53 1 64 1 2025-07-12 02:15:17.201 00:00:00.000 UDP 28.104.0.1:42317 -> 198.28.0.2:53 1 64 1 2025-07-12 02:10:56.127 00:06:00.218 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-07-12 02:11:55.129 00:05:00.883 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-07-12 02:16:17.510 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43298 1 80 1 2025-07-12 02:16:17.510 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40281 1 109 1 2025-07-12 02:16:17.497 00:00:00.000 UDP 28.104.0.1:40281 -> 198.28.0.2:53 1 64 1 2025-07-12 02:16:17.497 00:00:00.000 UDP 28.104.0.1:43298 -> 198.28.0.2:53 1 64 1 2025-07-12 02:16:53.574 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-12 02:12:55.128 00:05:01.226 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-07-12 02:17:17.801 00:00:00.000 UDP 28.104.0.1:41318 -> 198.28.0.2:53 1 64 1 2025-07-12 02:17:17.801 00:00:00.000 UDP 28.104.0.1:48160 -> 198.28.0.2:53 1 64 1 2025-07-12 02:17:17.812 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41318 1 109 1 2025-07-12 02:17:17.812 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48160 1 80 1 2025-07-12 02:13:34.746 00:05:10.007 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2384 1 2025-07-12 02:12:55.180 00:06:00.818 TCP 28.156.0.1:179 -> 28.151.0.1:39145 14 861 1 2025-07-12 02:18:18.117 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42777 1 109 1 2025-07-12 02:18:18.117 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58932 1 80 1 2025-07-12 02:18:18.108 00:00:00.000 UDP 28.104.0.1:58932 -> 198.28.0.2:53 1 64 1 2025-07-12 02:18:18.108 00:00:00.000 UDP 28.104.0.1:42777 -> 198.28.0.2:53 1 64 1 2025-07-12 02:19:18.445 00:00:00.000 UDP 28.104.0.1:50842 -> 198.28.0.2:53 1 64 1 2025-07-12 02:19:18.444 00:00:00.000 UDP 28.104.0.1:33355 -> 198.28.0.2:53 1 64 1 2025-07-12 02:19:18.455 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33355 1 109 1 2025-07-12 02:19:18.454 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50842 1 80 1 2025-07-12 02:15:55.140 00:05:01.206 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-07-12 02:20:18.734 00:00:00.000 UDP 28.104.0.1:45913 -> 198.28.0.2:53 1 64 1 2025-07-12 02:20:18.734 00:00:00.000 UDP 28.104.0.1:56245 -> 198.28.0.2:53 1 64 1 2025-07-12 02:20:18.744 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45913 1 80 1 2025-07-12 02:20:18.744 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56245 1 109 1 2025-07-12 02:15:56.205 00:06:00.141 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-07-12 02:21:19.057 00:00:00.000 UDP 28.104.0.1:39830 -> 198.28.0.2:53 1 64 1 2025-07-12 02:21:19.057 00:00:00.000 UDP 28.104.0.1:41810 -> 198.28.0.2:53 1 64 1 2025-07-12 02:21:19.067 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39830 1 80 1 2025-07-12 02:21:19.067 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41810 1 109 1 2025-07-12 02:21:53.694 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-12 02:17:55.130 00:05:00.882 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-07-12 02:22:19.351 00:00:00.000 UDP 28.104.0.1:49690 -> 198.28.0.2:53 1 64 1 2025-07-12 02:22:19.351 00:00:00.000 UDP 28.104.0.1:53689 -> 198.28.0.2:53 1 64 1 2025-07-12 02:22:19.361 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53689 1 109 1 2025-07-12 02:22:19.361 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49690 1 80 1 2025-07-12 02:17:56.130 00:06:00.217 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-07-12 02:18:55.129 00:05:01.227 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-07-12 02:18:54.752 00:05:10.002 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2464 1 2025-07-12 02:23:19.668 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57611 1 80 1 2025-07-12 02:23:19.669 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46755 1 109 1 2025-07-12 02:23:19.659 00:00:00.000 UDP 28.104.0.1:46755 -> 198.28.0.2:53 1 64 1 2025-07-12 02:23:19.658 00:00:00.000 UDP 28.104.0.1:57611 -> 198.28.0.2:53 1 64 1 2025-07-12 02:19:55.181 00:05:00.821 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-07-12 02:24:19.925 00:00:00.000 UDP 28.104.0.1:50170 -> 198.28.0.2:53 1 64 1 2025-07-12 02:24:19.925 00:00:00.000 UDP 28.104.0.1:33341 -> 198.28.0.2:53 1 64 1 2025-07-12 02:24:19.935 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33341 1 109 1 2025-07-12 02:24:19.935 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50170 1 80 1 2025-07-12 02:25:20.234 00:00:00.000 UDP 28.104.0.1:56231 -> 198.28.0.2:53 1 64 1 2025-07-12 02:25:20.234 00:00:00.000 UDP 28.104.0.1:38021 -> 198.28.0.2:53 1 64 1 2025-07-12 02:25:20.244 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56231 1 109 1 2025-07-12 02:25:20.244 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38021 1 80 1 2025-07-12 02:21:55.141 00:05:01.206 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-07-12 02:26:20.502 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53113 1 80 1 2025-07-12 02:26:20.502 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33577 1 109 1 2025-07-12 02:26:20.491 00:00:00.000 UDP 28.104.0.1:33577 -> 198.28.0.2:53 1 64 1 2025-07-12 02:26:20.491 00:00:00.000 UDP 28.104.0.1:53113 -> 198.28.0.2:53 1 64 1 2025-07-12 02:26:53.537 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-12 02:27:20.796 00:00:00.000 UDP 28.104.0.1:35719 -> 198.28.0.2:53 1 64 1 2025-07-12 02:27:20.796 00:00:00.000 UDP 28.104.0.1:35702 -> 198.28.0.2:53 1 64 1 2025-07-12 02:27:20.806 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35702 1 80 1 2025-07-12 02:27:20.806 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35719 1 109 1 2025-07-12 02:22:56.206 00:06:00.140 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-07-12 02:23:55.131 00:05:00.882 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-07-12 02:28:21.100 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37050 1 80 1 2025-07-12 02:28:21.100 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40143 1 109 1 2025-07-12 02:28:21.090 00:00:00.000 UDP 28.104.0.1:40143 -> 198.28.0.2:53 1 64 1 2025-07-12 02:28:21.090 00:00:00.000 UDP 28.104.0.1:37050 -> 198.28.0.2:53 1 64 1 2025-07-12 02:24:14.754 00:05:10.011 OSPF 28.0.2.2:0 -> 224.0.0.5:0 42 3104 1 2025-07-12 02:24:55.130 00:05:01.227 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-07-12 02:29:21.411 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41872 1 80 1 2025-07-12 02:29:21.411 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39003 1 109 1 2025-07-12 02:29:21.402 00:00:00.000 UDP 28.104.0.1:41872 -> 198.28.0.2:53 1 64 1 2025-07-12 02:29:21.402 00:00:00.000 UDP 28.104.0.1:39003 -> 198.28.0.2:53 1 64 1 2025-07-12 02:24:56.131 00:06:00.217 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-07-12 02:25:55.182 00:05:00.821 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-07-12 02:30:21.701 00:00:00.000 UDP 28.104.0.1:45672 -> 198.28.0.2:53 1 64 1 2025-07-12 02:30:21.701 00:00:00.000 UDP 28.104.0.1:52187 -> 198.28.0.2:53 1 64 1 2025-07-12 02:30:21.711 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45672 1 80 1 2025-07-12 02:30:21.711 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52187 1 109 1 2025-07-12 02:31:22.002 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42802 1 109 1 2025-07-12 02:31:22.002 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50468 1 80 1 2025-07-12 02:31:21.990 00:00:00.000 UDP 28.104.0.1:50468 -> 198.28.0.2:53 1 64 1 2025-07-12 02:31:21.990 00:00:00.000 UDP 28.104.0.1:42802 -> 198.28.0.2:53 1 64 1 2025-07-12 02:31:53.922 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-12 02:27:55.141 00:05:01.207 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-07-12 02:32:22.286 00:00:00.000 UDP 28.104.0.1:49486 -> 198.28.0.2:53 1 64 1 2025-07-12 02:32:22.286 00:00:00.000 UDP 28.104.0.1:42536 -> 198.28.0.2:53 1 64 1 2025-07-12 02:32:22.296 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42536 1 80 1 2025-07-12 02:32:22.296 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49486 1 109 1 2025-07-12 02:33:22.554 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37229 1 109 1 2025-07-12 02:33:22.554 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47030 1 80 1 2025-07-12 02:33:22.544 00:00:00.000 UDP 28.104.0.1:37229 -> 198.28.0.2:53 1 64 1 2025-07-12 02:33:22.544 00:00:00.000 UDP 28.104.0.1:47030 -> 198.28.0.2:53 1 64 1 2025-07-12 02:29:34.765 00:05:06.887 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2608 1 2025-07-12 02:29:55.131 00:05:00.884 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-07-12 02:34:22.844 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37209 1 109 1 2025-07-12 02:34:22.844 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35020 1 80 1 2025-07-12 02:34:22.834 00:00:00.000 UDP 28.104.0.1:37209 -> 198.28.0.2:53 1 64 1 2025-07-12 02:34:22.834 00:00:00.000 UDP 28.104.0.1:35020 -> 198.28.0.2:53 1 64 1 2025-07-12 02:29:56.209 00:06:00.140 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-07-12 02:30:55.131 00:05:01.227 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-07-12 02:35:23.138 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39950 1 109 1 2025-07-12 02:35:23.137 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59042 1 80 1 2025-07-12 02:35:23.127 00:00:00.000 UDP 28.104.0.1:39950 -> 198.28.0.2:53 1 64 1 2025-07-12 02:35:23.127 00:00:00.000 UDP 28.104.0.1:59042 -> 198.28.0.2:53 1 64 1 2025-07-12 02:31:55.183 00:05:00.833 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-07-12 02:36:23.425 00:00:00.000 UDP 28.104.0.1:57706 -> 198.28.0.2:53 1 64 1 2025-07-12 02:36:23.426 00:00:00.000 UDP 28.104.0.1:60032 -> 198.28.0.2:53 1 64 1 2025-07-12 02:36:23.437 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57706 1 80 1 2025-07-12 02:36:23.437 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60032 1 109 1 2025-07-12 02:31:56.131 00:06:00.219 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-07-12 02:36:54.249 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-12 02:37:23.729 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34916 1 80 1 2025-07-12 02:37:23.729 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40101 1 109 1 2025-07-12 02:37:23.720 00:00:00.000 UDP 28.104.0.1:34916 -> 198.28.0.2:53 1 64 1 2025-07-12 02:37:23.720 00:00:00.000 UDP 28.104.0.1:40101 -> 198.28.0.2:53 1 64 1 2025-07-12 02:33:55.143 00:05:01.207 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-07-12 02:38:24.050 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48881 1 109 1 2025-07-12 02:38:24.050 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56023 1 80 1 2025-07-12 02:38:24.040 00:00:00.000 UDP 28.104.0.1:48881 -> 198.28.0.2:53 1 64 1 2025-07-12 02:38:24.040 00:00:00.000 UDP 28.104.0.1:56023 -> 198.28.0.2:53 1 64 1 2025-07-12 02:34:44.776 00:05:10.007 OSPF 28.0.2.2:0 -> 224.0.0.5:0 33 2240 1 2025-07-12 02:39:24.349 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37333 1 80 1 2025-07-12 02:39:24.349 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42409 1 109 1 2025-07-12 02:39:24.340 00:00:00.000 UDP 28.104.0.1:42409 -> 198.28.0.2:53 1 64 1 2025-07-12 02:39:24.340 00:00:00.000 UDP 28.104.0.1:37333 -> 198.28.0.2:53 1 64 1 2025-07-12 02:35:55.135 00:05:00.893 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-07-12 02:40:24.634 00:00:00.000 UDP 28.104.0.1:48789 -> 198.28.0.2:53 1 64 1 2025-07-12 02:40:24.634 00:00:00.000 UDP 28.104.0.1:37963 -> 198.28.0.2:53 1 64 1 2025-07-12 02:40:24.643 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48789 1 80 1 2025-07-12 02:40:24.643 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37963 1 109 1 2025-07-12 02:36:55.133 00:05:01.226 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-07-12 02:41:24.933 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55871 1 109 1 2025-07-12 02:41:24.933 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39759 1 80 1 2025-07-12 02:41:24.923 00:00:00.000 UDP 28.104.0.1:55871 -> 198.28.0.2:53 1 64 1 2025-07-12 02:41:24.923 00:00:00.000 UDP 28.104.0.1:39759 -> 198.28.0.2:53 1 64 1 2025-07-12 02:41:53.992 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-12 02:37:55.184 00:05:00.839 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-07-12 02:36:56.211 00:06:00.140 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-07-12 02:42:25.247 00:00:00.000 UDP 28.104.0.1:33472 -> 198.28.0.2:53 1 64 1 2025-07-12 02:42:25.247 00:00:00.000 UDP 28.104.0.1:58425 -> 198.28.0.2:53 1 64 1 2025-07-12 02:42:25.257 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58425 1 109 1 2025-07-12 02:42:25.257 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33472 1 80 1 2025-07-12 02:43:25.534 00:00:00.000 UDP 28.104.0.1:40929 -> 198.28.0.2:53 1 64 1 2025-07-12 02:43:25.534 00:00:00.000 UDP 28.104.0.1:48382 -> 198.28.0.2:53 1 64 1 2025-07-12 02:43:25.544 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48382 1 80 1 2025-07-12 02:43:25.544 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40929 1 109 1 2025-07-12 02:38:56.132 00:06:00.219 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-07-12 02:39:55.146 00:05:01.205 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-07-12 02:40:04.783 00:05:10.019 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2452 1 2025-07-12 02:44:25.843 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43581 1 109 1 2025-07-12 02:44:25.843 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45002 1 80 1 2025-07-12 02:44:25.834 00:00:00.000 UDP 28.104.0.1:43581 -> 198.28.0.2:53 1 64 1 2025-07-12 02:44:25.834 00:00:00.000 UDP 28.104.0.1:45002 -> 198.28.0.2:53 1 64 1 2025-07-12 02:45:26.131 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33119 1 109 1 2025-07-12 02:45:26.131 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39236 1 80 1 2025-07-12 02:45:26.122 00:00:00.000 UDP 28.104.0.1:33119 -> 198.28.0.2:53 1 64 1 2025-07-12 02:45:26.121 00:00:00.000 UDP 28.104.0.1:39236 -> 198.28.0.2:53 1 64 1 2025-07-12 02:41:55.137 00:05:00.891 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-07-12 02:46:26.409 00:00:00.000 UDP 28.104.0.1:52895 -> 198.28.0.2:53 1 64 1 2025-07-12 02:46:26.409 00:00:00.000 UDP 28.104.0.1:53229 -> 198.28.0.2:53 1 64 1 2025-07-12 02:46:26.420 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52895 1 109 1 2025-07-12 02:46:26.421 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53229 1 80 1 2025-07-12 02:46:54.242 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-12 02:42:55.137 00:05:01.229 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-07-12 02:47:26.699 00:00:00.000 UDP 28.104.0.1:32824 -> 198.28.0.2:53 1 64 1 2025-07-12 02:47:26.699 00:00:00.000 UDP 28.104.0.1:60541 -> 198.28.0.2:53 1 64 1 2025-07-12 02:47:26.710 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60541 1 109 1 2025-07-12 02:47:26.710 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32824 1 80 1 2025-07-12 02:43:55.188 00:05:00.835 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-07-12 02:48:27.003 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44061 1 109 1 2025-07-12 02:48:27.003 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33333 1 80 1 2025-07-12 02:48:26.991 00:00:00.000 UDP 28.104.0.1:33333 -> 198.28.0.2:53 1 64 1 2025-07-12 02:48:26.991 00:00:00.000 UDP 28.104.0.1:44061 -> 198.28.0.2:53 1 64 1 2025-07-12 02:43:56.212 00:06:00.145 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-07-12 02:49:27.258 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58886 1 109 1 2025-07-12 02:49:27.258 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52336 1 80 1 2025-07-12 02:45:24.792 00:05:00.361 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2396 1 2025-07-12 02:49:27.249 00:00:00.000 UDP 28.104.0.1:52336 -> 198.28.0.2:53 1 64 1 2025-07-12 02:49:27.249 00:00:00.000 UDP 28.104.0.1:58886 -> 198.28.0.2:53 1 64 1 2025-07-12 02:45:55.149 00:05:01.208 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-07-12 02:50:27.546 00:00:00.000 UDP 28.104.0.1:42773 -> 198.28.0.2:53 1 64 1 2025-07-12 02:50:27.546 00:00:00.000 UDP 28.104.0.1:43474 -> 198.28.0.2:53 1 64 1 2025-07-12 02:50:27.556 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42773 1 80 1 2025-07-12 02:50:27.556 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43474 1 109 1 2025-07-12 02:45:56.135 00:06:00.222 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-07-12 02:51:27.813 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37385 1 80 1 2025-07-12 02:51:27.813 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39945 1 109 1 2025-07-12 02:51:27.802 00:00:00.000 UDP 28.104.0.1:37385 -> 198.28.0.2:53 1 64 1 2025-07-12 02:51:27.802 00:00:00.000 UDP 28.104.0.1:39945 -> 198.28.0.2:53 1 64 1 2025-07-12 02:51:54.176 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-12 02:47:55.138 00:05:00.894 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-07-12 02:52:28.094 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57574 1 80 1 2025-07-12 02:52:28.094 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35346 1 109 1 2025-07-12 02:52:28.083 00:00:00.000 UDP 28.104.0.1:35346 -> 198.28.0.2:53 1 64 1 2025-07-12 02:52:28.083 00:00:00.000 UDP 28.104.0.1:57574 -> 198.28.0.2:53 1 64 1 2025-07-12 02:48:55.138 00:05:01.230 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-07-12 02:53:28.391 00:00:00.000 UDP 28.104.0.1:53200 -> 198.28.0.2:53 1 64 1 2025-07-12 02:53:28.391 00:00:00.000 UDP 28.104.0.1:47990 -> 198.28.0.2:53 1 64 1 2025-07-12 02:53:28.401 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53200 1 80 1 2025-07-12 02:53:28.401 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47990 1 109 1 2025-07-12 02:49:55.190 00:05:00.834 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-07-12 02:54:28.695 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58454 1 80 1 2025-07-12 02:54:28.696 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57261 1 109 1 2025-07-12 02:54:28.684 00:00:00.000 UDP 28.104.0.1:58454 -> 198.28.0.2:53 1 64 1 2025-07-12 02:54:28.686 00:00:00.000 UDP 28.104.0.1:57261 -> 198.28.0.2:53 1 64 1 2025-07-12 02:50:34.802 00:05:10.014 OSPF 28.0.2.2:0 -> 224.0.0.5:0 39 2840 1 2025-07-12 02:55:28.991 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53270 1 80 1 2025-07-12 02:55:28.991 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34615 1 109 1 2025-07-12 02:55:28.980 00:00:00.000 UDP 28.104.0.1:53270 -> 198.28.0.2:53 1 64 1 2025-07-12 02:55:28.981 00:00:00.000 UDP 28.104.0.1:34615 -> 198.28.0.2:53 1 64 1 2025-07-12 02:51:55.150 00:05:01.208 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-07-12 02:50:56.213 00:06:00.145 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-07-12 02:56:29.278 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33202 1 80 1 2025-07-12 02:56:29.278 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53231 1 109 1 2025-07-12 02:56:29.269 00:00:00.000 UDP 28.104.0.1:33202 -> 198.28.0.2:53 1 64 1 2025-07-12 02:56:29.269 00:00:00.000 UDP 28.104.0.1:53231 -> 198.28.0.2:53 1 64 1 2025-07-12 02:56:54.488 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-07-12 02:57:29.571 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32894 1 80 1 2025-07-12 02:57:29.571 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44103 1 109 1 2025-07-12 02:57:29.561 00:00:00.000 UDP 28.104.0.1:32894 -> 198.28.0.2:53 1 64 1 2025-07-12 02:57:29.561 00:00:00.000 UDP 28.104.0.1:44103 -> 198.28.0.2:53 1 64 1 2025-07-12 02:53:55.140 00:05:00.894 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-07-12 02:52:56.140 00:06:00.220 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-07-12 02:58:29.854 00:00:00.000 UDP 28.104.0.1:38983 -> 198.28.0.2:53 1 64 1 2025-07-12 02:58:29.853 00:00:00.000 UDP 28.104.0.1:53062 -> 198.28.0.2:53 1 64 1 2025-07-12 02:58:29.863 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53062 1 109 1 2025-07-12 02:58:29.863 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38983 1 80 1 Summary: total flows: 320, total bytes: 94829, total packets: 1399, avg bps: 197, avg pps: 0, avg bpp: 67 Time window: 2025-07-12 01:54:55 - 2025-07-12 02:58:56 Total flows processed: 320, passed: 320, Blocks skipped: 0, Bytes read: 33344 Sys: 0.0019s User: 0.0019s Wall: 0.0025s flows/second: 129867.2 Runtime: 0.0025s