Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-13 08:59:09.609 00:00:00.000 UDP 28.104.0.1:58684 -> 198.28.0.2:53 1 64 1 2025-08-13 08:55:11.641 00:05:01.544 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-08-13 08:59:09.610 00:00:00.000 UDP 28.104.0.1:36183 -> 198.28.0.2:53 1 64 1 2025-08-13 08:59:09.620 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58684 1 80 1 2025-08-13 08:59:09.622 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36183 1 109 1 2025-08-13 08:56:13.207 00:04:00.089 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-08-13 09:00:09.903 00:00:00.000 UDP 28.104.0.1:43428 -> 198.28.0.2:53 1 64 1 2025-08-13 08:56:13.294 00:04:00.013 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-08-13 09:00:09.903 00:00:00.000 UDP 28.104.0.1:39635 -> 198.28.0.2:53 1 64 1 2025-08-13 09:00:09.913 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39635 1 80 1 2025-08-13 09:00:09.913 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43428 1 109 1 2025-08-13 08:56:11.590 00:05:01.606 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-08-13 09:01:10.165 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39544 1 80 1 2025-08-13 09:01:10.165 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52237 1 109 1 2025-08-13 09:01:10.155 00:00:00.000 UDP 28.104.0.1:52237 -> 198.28.0.2:53 1 64 1 2025-08-13 09:01:10.156 00:00:00.000 UDP 28.104.0.1:39544 -> 198.28.0.2:53 1 64 1 2025-08-13 09:02:10.471 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53012 1 80 1 2025-08-13 09:02:10.471 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41715 1 109 1 2025-08-13 08:58:11.603 00:05:01.696 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-08-13 09:02:10.460 00:00:00.000 UDP 28.104.0.1:53012 -> 198.28.0.2:53 1 64 1 2025-08-13 09:02:10.460 00:00:00.000 UDP 28.104.0.1:41715 -> 198.28.0.2:53 1 64 1 2025-08-13 09:02:25.871 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-13 09:03:10.723 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44751 1 109 1 2025-08-13 09:03:10.723 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51598 1 80 1 2025-08-13 09:03:10.712 00:00:00.000 UDP 28.104.0.1:51598 -> 198.28.0.2:53 1 64 1 2025-08-13 09:03:10.712 00:00:00.000 UDP 28.104.0.1:44751 -> 198.28.0.2:53 1 64 1 2025-08-13 08:59:50.475 00:05:10.012 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2712 1 2025-08-13 09:04:11.054 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50283 1 80 1 2025-08-13 09:04:11.054 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51074 1 109 1 2025-08-13 09:00:11.592 00:05:01.716 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-08-13 09:04:11.044 00:00:00.000 UDP 28.104.0.1:51074 -> 198.28.0.2:53 1 64 1 2025-08-13 09:04:11.044 00:00:00.000 UDP 28.104.0.1:50283 -> 198.28.0.2:53 1 64 1 2025-08-13 09:01:13.209 00:04:00.090 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-08-13 09:05:11.357 00:00:00.000 UDP 28.104.0.1:34366 -> 198.28.0.2:53 1 64 1 2025-08-13 09:01:11.643 00:05:01.546 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-08-13 09:05:11.357 00:00:00.000 UDP 28.104.0.1:50903 -> 198.28.0.2:53 1 64 1 2025-08-13 09:01:13.297 00:04:00.012 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-08-13 09:05:11.367 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34366 1 80 1 2025-08-13 09:05:11.368 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50903 1 109 1 2025-08-13 09:06:11.809 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47587 1 80 1 2025-08-13 09:06:11.809 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60542 1 109 1 2025-08-13 09:02:11.592 00:05:01.609 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-08-13 09:06:11.800 00:00:00.000 UDP 28.104.0.1:47587 -> 198.28.0.2:53 1 64 1 2025-08-13 09:06:11.800 00:00:00.000 UDP 28.104.0.1:60542 -> 198.28.0.2:53 1 64 1 2025-08-13 09:07:12.132 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58306 1 80 1 2025-08-13 09:07:12.132 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48698 1 109 1 2025-08-13 09:06:13.210 00:01:00.091 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-08-13 09:07:12.123 00:00:00.000 UDP 28.104.0.1:48698 -> 198.28.0.2:53 1 64 1 2025-08-13 09:07:12.123 00:00:00.000 UDP 28.104.0.1:58306 -> 198.28.0.2:53 1 64 1 2025-08-13 09:06:13.301 00:01:00.009 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-08-13 09:07:26.003 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-13 09:04:11.602 00:05:01.698 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-08-13 09:08:12.411 00:00:00.000 UDP 28.104.0.1:60948 -> 198.28.0.2:53 1 64 1 2025-08-13 09:08:12.411 00:00:00.000 UDP 28.104.0.1:56856 -> 198.28.0.2:53 1 64 1 2025-08-13 09:08:12.422 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60948 1 80 1 2025-08-13 09:08:12.422 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56856 1 109 1 2025-08-13 09:09:12.704 00:00:00.000 UDP 28.104.0.1:40620 -> 198.28.0.2:53 1 64 1 2025-08-13 09:09:12.704 00:00:00.000 UDP 28.104.0.1:50984 -> 198.28.0.2:53 1 64 1 2025-08-13 09:09:12.716 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40620 1 109 1 2025-08-13 09:09:12.717 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50984 1 80 1 2025-08-13 09:05:10.488 00:05:10.004 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2304 1 2025-08-13 09:10:13.022 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60625 1 80 1 2025-08-13 09:10:13.017 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33081 1 109 1 2025-08-13 09:06:11.594 00:05:01.717 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-08-13 09:08:13.300 00:02:00.009 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-08-13 09:10:13.006 00:00:00.000 UDP 28.104.0.1:60625 -> 198.28.0.2:53 1 64 1 2025-08-13 09:10:13.006 00:00:00.000 UDP 28.104.0.1:33081 -> 198.28.0.2:53 1 64 1 2025-08-13 09:11:13.275 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45101 1 109 1 2025-08-13 09:11:13.275 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46525 1 80 1 2025-08-13 09:07:11.643 00:05:01.548 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-08-13 09:11:13.265 00:00:00.000 UDP 28.104.0.1:45101 -> 198.28.0.2:53 1 64 1 2025-08-13 09:11:13.265 00:00:00.000 UDP 28.104.0.1:46525 -> 198.28.0.2:53 1 64 1 2025-08-13 09:08:13.211 00:04:00.090 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-08-13 09:12:13.561 00:00:00.000 UDP 28.104.0.1:35610 -> 198.28.0.2:53 1 64 1 2025-08-13 09:12:13.561 00:00:00.000 UDP 28.104.0.1:44451 -> 198.28.0.2:53 1 64 1 2025-08-13 09:11:13.300 00:01:00.009 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-08-13 09:12:13.573 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44451 1 80 1 2025-08-13 09:12:13.573 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35610 1 109 1 2025-08-13 09:08:11.595 00:05:01.608 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-08-13 09:12:26.370 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-13 09:13:13.881 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58088 1 80 1 2025-08-13 09:13:13.881 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50029 1 109 1 2025-08-13 09:13:13.872 00:00:00.000 UDP 28.104.0.1:58088 -> 198.28.0.2:53 1 64 1 2025-08-13 09:13:13.872 00:00:00.000 UDP 28.104.0.1:50029 -> 198.28.0.2:53 1 64 1 2025-08-13 09:10:11.604 00:05:01.703 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-08-13 09:14:14.186 00:00:00.000 UDP 28.104.0.1:47408 -> 198.28.0.2:53 1 64 1 2025-08-13 09:14:14.186 00:00:00.000 UDP 28.104.0.1:56742 -> 198.28.0.2:53 1 64 1 2025-08-13 09:14:14.197 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47408 1 80 1 2025-08-13 09:14:14.197 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56742 1 109 1 2025-08-13 09:10:30.492 00:05:10.004 OSPF 28.0.2.2:0 -> 224.0.0.5:0 39 2904 1 2025-08-13 09:13:13.302 00:02:00.009 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-08-13 09:15:14.499 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49178 1 80 1 2025-08-13 09:15:14.499 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50915 1 109 1 2025-08-13 09:15:14.489 00:00:00.000 UDP 28.104.0.1:49178 -> 198.28.0.2:53 1 64 1 2025-08-13 09:15:14.489 00:00:00.000 UDP 28.104.0.1:50915 -> 198.28.0.2:53 1 64 1 2025-08-13 09:12:11.594 00:05:01.723 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-08-13 09:16:14.797 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53464 1 109 1 2025-08-13 09:16:14.797 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57403 1 80 1 2025-08-13 09:16:14.787 00:00:00.000 UDP 28.104.0.1:53464 -> 198.28.0.2:53 1 64 1 2025-08-13 09:16:14.787 00:00:00.000 UDP 28.104.0.1:57403 -> 198.28.0.2:53 1 64 1 2025-08-13 09:13:13.214 00:04:00.095 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-08-13 09:16:13.309 00:01:00.004 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-08-13 09:17:15.370 00:00:00.000 UDP 28.104.0.1:50909 -> 198.28.0.2:53 1 64 1 2025-08-13 09:13:11.644 00:05:01.548 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-08-13 09:17:15.370 00:00:00.000 UDP 28.104.0.1:42607 -> 198.28.0.2:53 1 64 1 2025-08-13 09:17:15.381 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50909 1 109 1 2025-08-13 09:17:15.381 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42607 1 80 1 2025-08-13 09:17:25.961 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-13 09:14:11.596 00:05:01.607 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-08-13 09:18:15.670 00:00:00.000 UDP 28.104.0.1:55417 -> 198.28.0.2:53 1 64 1 2025-08-13 09:18:15.670 00:00:00.000 UDP 28.104.0.1:50311 -> 198.28.0.2:53 1 64 1 2025-08-13 09:18:15.680 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50311 1 80 1 2025-08-13 09:18:15.681 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55417 1 109 1 2025-08-13 09:19:15.969 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38199 1 109 1 2025-08-13 09:19:15.969 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47654 1 80 1 2025-08-13 09:19:15.960 00:00:00.000 UDP 28.104.0.1:47654 -> 198.28.0.2:53 1 64 1 2025-08-13 09:19:15.960 00:00:00.000 UDP 28.104.0.1:38199 -> 198.28.0.2:53 1 64 1 2025-08-13 09:15:50.496 00:05:10.009 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2536 1 2025-08-13 09:18:13.310 00:02:00.005 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-08-13 09:16:11.605 00:05:01.705 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-08-13 09:20:16.261 00:00:00.000 UDP 28.104.0.1:53533 -> 198.28.0.2:53 1 64 1 2025-08-13 09:20:16.261 00:00:00.000 UDP 28.104.0.1:42370 -> 198.28.0.2:53 1 64 1 2025-08-13 09:20:16.272 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53533 1 109 1 2025-08-13 09:20:16.272 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42370 1 80 1 2025-08-13 09:21:16.572 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39954 1 80 1 2025-08-13 09:21:16.572 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36485 1 109 1 2025-08-13 09:21:16.562 00:00:00.000 UDP 28.104.0.1:39954 -> 198.28.0.2:53 1 64 1 2025-08-13 09:21:16.562 00:00:00.000 UDP 28.104.0.1:36485 -> 198.28.0.2:53 1 64 1 2025-08-13 09:18:13.214 00:04:00.098 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-08-13 09:21:13.311 00:01:00.005 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-08-13 09:22:16.858 00:00:00.000 UDP 28.104.0.1:49213 -> 198.28.0.2:53 1 64 1 2025-08-13 09:22:16.858 00:00:00.000 UDP 28.104.0.1:37934 -> 198.28.0.2:53 1 64 1 2025-08-13 09:22:16.869 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37934 1 109 1 2025-08-13 09:18:11.596 00:05:01.726 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-08-13 09:22:16.869 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49213 1 80 1 2025-08-13 09:22:25.990 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-13 09:23:17.202 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52905 1 80 1 2025-08-13 09:23:17.202 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54252 1 109 1 2025-08-13 09:19:11.647 00:05:01.547 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-08-13 09:23:17.193 00:00:00.000 UDP 28.104.0.1:52905 -> 198.28.0.2:53 1 64 1 2025-08-13 09:23:17.193 00:00:00.000 UDP 28.104.0.1:54252 -> 198.28.0.2:53 1 64 1 2025-08-13 09:24:17.497 00:00:00.000 UDP 28.104.0.1:33567 -> 198.28.0.2:53 1 64 1 2025-08-13 09:24:17.497 00:00:00.000 UDP 28.104.0.1:59634 -> 198.28.0.2:53 1 64 1 2025-08-13 09:24:17.507 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59634 1 109 1 2025-08-13 09:24:17.507 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33567 1 80 1 2025-08-13 09:20:11.596 00:05:01.607 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-08-13 09:25:17.807 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41576 1 80 1 2025-08-13 09:25:17.807 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60923 1 109 1 2025-08-13 09:25:17.795 00:00:00.000 UDP 28.104.0.1:60923 -> 198.28.0.2:53 1 64 1 2025-08-13 09:25:17.795 00:00:00.000 UDP 28.104.0.1:41576 -> 198.28.0.2:53 1 64 1 2025-08-13 09:21:10.505 00:05:10.010 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2496 1 2025-08-13 09:22:11.606 00:05:01.706 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-08-13 09:26:18.111 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47682 1 109 1 2025-08-13 09:26:18.111 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46870 1 80 1 2025-08-13 09:26:18.102 00:00:00.000 UDP 28.104.0.1:46870 -> 198.28.0.2:53 1 64 1 2025-08-13 09:26:18.102 00:00:00.000 UDP 28.104.0.1:47682 -> 198.28.0.2:53 1 64 1 2025-08-13 09:23:13.311 00:04:00.005 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-08-13 09:23:13.214 00:04:00.098 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-08-13 09:27:18.408 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57475 1 109 1 2025-08-13 09:27:18.408 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56718 1 80 1 2025-08-13 09:27:18.397 00:00:00.000 UDP 28.104.0.1:57475 -> 198.28.0.2:53 1 64 1 2025-08-13 09:27:18.397 00:00:00.000 UDP 28.104.0.1:56718 -> 198.28.0.2:53 1 64 1 2025-08-13 09:27:26.281 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-13 09:28:18.691 00:00:00.000 UDP 28.104.0.1:57514 -> 198.28.0.2:53 1 64 1 2025-08-13 09:28:18.691 00:00:00.000 UDP 28.104.0.1:55319 -> 198.28.0.2:53 1 64 1 2025-08-13 09:24:11.597 00:05:01.727 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-08-13 09:28:18.703 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55319 1 109 1 2025-08-13 09:28:18.703 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57514 1 80 1 2025-08-13 09:29:18.996 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50879 1 109 1 2025-08-13 09:29:18.996 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60163 1 80 1 2025-08-13 09:25:11.649 00:05:01.548 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-08-13 09:29:18.986 00:00:00.000 UDP 28.104.0.1:50879 -> 198.28.0.2:53 1 64 1 2025-08-13 09:29:18.986 00:00:00.000 UDP 28.104.0.1:60163 -> 198.28.0.2:53 1 64 1 2025-08-13 09:26:11.598 00:05:01.613 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-08-13 09:30:22.746 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49155 1 80 1 2025-08-13 09:30:22.746 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52343 1 109 1 2025-08-13 09:30:22.736 00:00:00.000 UDP 28.104.0.1:52343 -> 198.28.0.2:53 1 64 1 2025-08-13 09:30:22.736 00:00:00.000 UDP 28.104.0.1:49155 -> 198.28.0.2:53 1 64 1 2025-08-13 09:26:30.514 00:05:10.015 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2768 1 2025-08-13 09:31:24.285 00:00:00.000 UDP 28.104.0.1:38029 -> 198.28.0.2:53 1 64 1 2025-08-13 09:31:24.285 00:00:00.000 UDP 28.104.0.1:43479 -> 198.28.0.2:53 1 64 1 2025-08-13 09:31:24.296 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38029 1 80 1 2025-08-13 09:31:24.296 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43479 1 109 1 2025-08-13 09:28:13.312 00:04:00.010 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-08-13 09:28:13.221 00:04:00.093 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-08-13 09:28:11.608 00:05:01.706 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-08-13 09:32:26.173 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-13 09:32:24.599 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49644 1 109 1 2025-08-13 09:32:24.599 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54972 1 80 1 2025-08-13 09:32:24.588 00:00:00.000 UDP 28.104.0.1:54972 -> 198.28.0.2:53 1 64 1 2025-08-13 09:32:24.589 00:00:00.000 UDP 28.104.0.1:49644 -> 198.28.0.2:53 1 64 1 2025-08-13 09:33:24.859 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50326 1 80 1 2025-08-13 09:33:24.859 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57155 1 109 1 2025-08-13 09:33:24.850 00:00:00.000 UDP 28.104.0.1:50326 -> 198.28.0.2:53 1 64 1 2025-08-13 09:33:24.850 00:00:00.000 UDP 28.104.0.1:57155 -> 198.28.0.2:53 1 64 1 2025-08-13 09:30:11.599 00:05:01.727 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-08-13 09:34:25.179 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51434 1 80 1 2025-08-13 09:34:25.180 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52835 1 109 1 2025-08-13 09:34:25.168 00:00:00.000 UDP 28.104.0.1:52835 -> 198.28.0.2:53 1 64 1 2025-08-13 09:34:25.168 00:00:00.000 UDP 28.104.0.1:51434 -> 198.28.0.2:53 1 64 1 2025-08-13 09:31:11.648 00:05:01.560 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-08-13 09:35:25.479 00:00:00.000 UDP 28.104.0.1:53158 -> 198.28.0.2:53 1 64 1 2025-08-13 09:35:25.479 00:00:00.000 UDP 28.104.0.1:38396 -> 198.28.0.2:53 1 64 1 2025-08-13 09:35:25.489 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38396 1 80 1 2025-08-13 09:35:25.488 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53158 1 109 1 2025-08-13 09:31:50.529 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2320 1 2025-08-13 09:32:11.598 00:05:01.614 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-08-13 09:36:25.727 00:00:00.000 UDP 28.104.0.1:41348 -> 198.28.0.2:53 1 64 1 2025-08-13 09:36:25.727 00:00:00.000 UDP 28.104.0.1:46369 -> 198.28.0.2:53 1 64 1 2025-08-13 09:36:25.737 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46369 1 80 1 2025-08-13 09:36:25.736 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41348 1 109 1 2025-08-13 09:33:13.225 00:04:00.095 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-08-13 09:33:13.316 00:04:00.013 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-08-13 09:37:26.454 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-13 09:37:25.988 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42537 1 80 1 2025-08-13 09:37:25.988 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55124 1 109 1 2025-08-13 09:37:25.980 00:00:00.000 UDP 28.104.0.1:42537 -> 198.28.0.2:53 1 64 1 2025-08-13 09:37:25.980 00:00:00.000 UDP 28.104.0.1:55124 -> 198.28.0.2:53 1 64 1 2025-08-13 09:34:11.609 00:05:01.707 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-08-13 09:38:26.274 00:00:00.000 UDP 28.104.0.1:59769 -> 198.28.0.2:53 1 64 1 2025-08-13 09:38:26.274 00:00:00.000 UDP 28.104.0.1:34878 -> 198.28.0.2:53 1 64 1 2025-08-13 09:38:26.285 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59769 1 80 1 2025-08-13 09:38:26.285 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34878 1 109 1 2025-08-13 09:38:13.225 00:01:00.092 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-08-13 09:38:13.316 00:01:00.014 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-08-13 09:39:26.572 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43374 1 80 1 2025-08-13 09:39:26.572 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39811 1 109 1 2025-08-13 09:39:26.562 00:00:00.000 UDP 28.104.0.1:39811 -> 198.28.0.2:53 1 64 1 2025-08-13 09:39:26.561 00:00:00.000 UDP 28.104.0.1:43374 -> 198.28.0.2:53 1 64 1 2025-08-13 09:36:11.601 00:05:01.729 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-08-13 09:40:26.865 00:00:00.000 UDP 28.104.0.1:49263 -> 198.28.0.2:53 1 64 1 2025-08-13 09:40:26.865 00:00:00.000 UDP 28.104.0.1:59175 -> 198.28.0.2:53 1 64 1 2025-08-13 09:40:26.875 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49263 1 80 1 2025-08-13 09:40:26.875 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59175 1 109 1 2025-08-13 09:37:11.650 00:05:01.554 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-08-13 09:41:27.184 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51864 1 80 1 2025-08-13 09:41:27.184 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55517 1 109 1 2025-08-13 09:37:10.535 00:05:10.008 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2688 1 2025-08-13 09:41:27.175 00:00:00.000 UDP 28.104.0.1:51864 -> 198.28.0.2:53 1 64 1 2025-08-13 09:41:27.175 00:00:00.000 UDP 28.104.0.1:55517 -> 198.28.0.2:53 1 64 1 2025-08-13 09:38:11.600 00:05:01.614 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-08-13 09:40:13.225 00:02:00.095 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-08-13 09:40:13.317 00:02:00.013 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-08-13 09:42:26.640 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-13 09:42:27.475 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45076 1 80 1 2025-08-13 09:42:27.475 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50386 1 109 1 2025-08-13 09:42:27.465 00:00:00.000 UDP 28.104.0.1:50386 -> 198.28.0.2:53 1 64 1 2025-08-13 09:42:27.465 00:00:00.000 UDP 28.104.0.1:45076 -> 198.28.0.2:53 1 64 1 2025-08-13 09:43:27.757 00:00:00.000 UDP 28.104.0.1:60127 -> 198.28.0.2:53 1 64 1 2025-08-13 09:43:27.757 00:00:00.000 UDP 28.104.0.1:60357 -> 198.28.0.2:53 1 64 1 2025-08-13 09:43:27.769 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60357 1 109 1 2025-08-13 09:43:27.769 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60127 1 80 1 2025-08-13 09:43:13.225 00:01:00.094 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-08-13 09:43:13.319 00:01:00.011 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-08-13 09:40:11.611 00:05:01.708 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-08-13 09:44:28.083 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55816 1 80 1 2025-08-13 09:44:28.083 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52821 1 109 1 2025-08-13 09:44:28.074 00:00:00.000 UDP 28.104.0.1:52821 -> 198.28.0.2:53 1 64 1 2025-08-13 09:44:28.074 00:00:00.000 UDP 28.104.0.1:55816 -> 198.28.0.2:53 1 64 1 2025-08-13 09:45:28.382 00:00:00.000 UDP 28.104.0.1:51528 -> 198.28.0.2:53 1 64 1 2025-08-13 09:45:28.382 00:00:00.000 UDP 28.104.0.1:59962 -> 198.28.0.2:53 1 64 1 2025-08-13 09:45:28.391 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59962 1 109 1 2025-08-13 09:45:28.392 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51528 1 80 1 2025-08-13 09:42:11.607 00:05:01.727 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-08-13 09:46:28.685 00:00:00.000 UDP 28.104.0.1:56354 -> 198.28.0.2:53 1 64 1 2025-08-13 09:46:28.685 00:00:00.000 UDP 28.104.0.1:59182 -> 198.28.0.2:53 1 64 1 2025-08-13 09:46:28.695 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56354 1 109 1 2025-08-13 09:46:28.695 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59182 1 80 1 2025-08-13 09:42:30.541 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2616 1 2025-08-13 09:43:11.652 00:05:01.552 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-08-13 09:45:13.320 00:02:00.014 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-08-13 09:47:26.805 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-13 09:47:28.997 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39830 1 80 1 2025-08-13 09:47:28.997 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38035 1 109 1 2025-08-13 09:47:28.989 00:00:00.000 UDP 28.104.0.1:39830 -> 198.28.0.2:53 1 64 1 2025-08-13 09:47:28.989 00:00:00.000 UDP 28.104.0.1:38035 -> 198.28.0.2:53 1 64 1 2025-08-13 09:44:11.602 00:05:01.612 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-08-13 09:48:29.290 00:00:00.000 UDP 28.104.0.1:48792 -> 198.28.0.2:53 1 64 1 2025-08-13 09:48:29.290 00:00:00.000 UDP 28.104.0.1:53537 -> 198.28.0.2:53 1 64 1 2025-08-13 09:48:29.301 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48792 1 80 1 2025-08-13 09:48:29.299 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53537 1 109 1 2025-08-13 09:45:13.225 00:04:00.097 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-08-13 09:48:13.322 00:01:00.012 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-08-13 09:49:29.601 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56957 1 109 1 2025-08-13 09:49:29.602 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40296 1 80 1 2025-08-13 09:49:29.590 00:00:00.000 UDP 28.104.0.1:56957 -> 198.28.0.2:53 1 64 1 2025-08-13 09:49:29.590 00:00:00.000 UDP 28.104.0.1:40296 -> 198.28.0.2:53 1 64 1 2025-08-13 09:46:11.612 00:05:01.711 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-08-13 09:50:30.125 00:00:00.000 UDP 28.104.0.1:50657 -> 198.28.0.2:53 1 64 1 2025-08-13 09:50:30.125 00:00:00.000 UDP 28.104.0.1:42732 -> 198.28.0.2:53 1 64 1 2025-08-13 09:50:30.136 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50657 1 80 1 2025-08-13 09:50:30.136 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42732 1 109 1 2025-08-13 09:51:30.430 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53065 1 109 1 2025-08-13 09:51:30.434 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40583 1 80 1 2025-08-13 09:51:30.420 00:00:00.000 UDP 28.104.0.1:53065 -> 198.28.0.2:53 1 64 1 2025-08-13 09:51:30.420 00:00:00.000 UDP 28.104.0.1:40583 -> 198.28.0.2:53 1 64 1 2025-08-13 09:47:50.548 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 38 2680 1 2025-08-13 09:50:13.323 00:02:00.013 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-08-13 09:48:11.603 00:05:01.730 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-08-13 09:52:26.800 00:00:00.025 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-13 09:52:30.761 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34791 1 109 1 2025-08-13 09:52:30.761 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60906 1 80 1 2025-08-13 09:52:30.751 00:00:00.000 UDP 28.104.0.1:60906 -> 198.28.0.2:53 1 64 1 2025-08-13 09:52:30.751 00:00:00.000 UDP 28.104.0.1:34791 -> 198.28.0.2:53 1 64 1 2025-08-13 09:49:11.653 00:05:01.551 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-08-13 09:53:31.053 00:00:00.000 UDP 28.104.0.1:46710 -> 198.28.0.2:53 1 64 1 2025-08-13 09:53:31.053 00:00:00.000 UDP 28.104.0.1:36442 -> 198.28.0.2:53 1 64 1 2025-08-13 09:53:31.063 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46710 1 109 1 2025-08-13 09:53:31.063 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36442 1 80 1 2025-08-13 09:50:13.230 00:04:00.093 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-08-13 09:53:13.323 00:01:00.014 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-08-13 09:50:11.603 00:05:01.611 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-08-13 09:54:31.305 00:00:00.000 UDP 28.104.0.1:59595 -> 198.28.0.2:53 1 64 1 2025-08-13 09:54:31.306 00:00:00.000 UDP 28.104.0.1:39091 -> 198.28.0.2:53 1 64 1 2025-08-13 09:54:31.317 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59595 1 80 1 2025-08-13 09:54:31.317 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39091 1 109 1 2025-08-13 09:55:31.558 00:00:00.000 UDP 28.104.0.1:57597 -> 198.28.0.2:53 1 64 1 2025-08-13 09:55:31.558 00:00:00.000 UDP 28.104.0.1:49191 -> 198.28.0.2:53 1 64 1 2025-08-13 09:55:31.567 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49191 1 80 1 2025-08-13 09:55:31.567 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57597 1 109 1 2025-08-13 09:52:11.615 00:05:01.709 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-08-13 09:56:31.908 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58216 1 80 1 2025-08-13 09:56:31.908 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54598 1 109 1 2025-08-13 09:56:31.898 00:00:00.000 UDP 28.104.0.1:54598 -> 198.28.0.2:53 1 64 1 2025-08-13 09:56:31.898 00:00:00.000 UDP 28.104.0.1:58216 -> 198.28.0.2:53 1 64 1 2025-08-13 09:55:13.323 00:02:00.015 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-08-13 09:53:10.552 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2436 1 2025-08-13 09:57:26.811 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-13 09:57:32.196 00:00:00.000 UDP 28.104.0.1:56602 -> 198.28.0.2:53 1 64 1 2025-08-13 09:57:32.196 00:00:00.000 UDP 28.104.0.1:39416 -> 198.28.0.2:53 1 64 1 2025-08-13 09:57:32.207 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56602 1 109 1 2025-08-13 09:57:32.206 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39416 1 80 1 2025-08-13 09:54:11.604 00:05:01.729 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-08-13 09:58:32.460 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38476 1 80 1 2025-08-13 09:58:32.459 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33542 1 109 1 2025-08-13 09:58:32.447 00:00:00.000 UDP 28.104.0.1:33542 -> 198.28.0.2:53 1 64 1 2025-08-13 09:58:32.447 00:00:00.000 UDP 28.104.0.1:38476 -> 198.28.0.2:53 1 64 1 Summary: total flows: 337, total bytes: 94907, total packets: 1397, avg bps: 197, avg pps: 0, avg bpp: 67 Time window: 2025-08-13 08:55:11 - 2025-08-13 09:59:13 Total flows processed: 337, passed: 337, Blocks skipped: 0, Bytes read: 35112 Sys: 0.0025s User: 0.0025s Wall: 0.0027s flows/second: 126497.3 Runtime: 0.0027s