Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-13 09:58:13.324 00:01:00.015 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-08-13 09:55:13.231 00:04:00.093 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-08-13 09:55:11.654 00:05:01.554 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-08-13 09:59:32.714 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37689 1 109 1 2025-08-13 09:59:32.714 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33609 1 80 1 2025-08-13 09:59:32.703 00:00:00.000 UDP 28.104.0.1:33609 -> 198.28.0.2:53 1 64 1 2025-08-13 09:59:32.703 00:00:00.000 UDP 28.104.0.1:37689 -> 198.28.0.2:53 1 64 1 2025-08-13 09:56:11.604 00:05:01.615 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-08-13 10:00:33.058 00:00:00.000 UDP 28.104.0.1:52038 -> 198.28.0.2:53 1 64 1 2025-08-13 10:00:33.058 00:00:00.000 UDP 28.104.0.1:42267 -> 198.28.0.2:53 1 64 1 2025-08-13 10:00:33.070 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52038 1 109 1 2025-08-13 10:00:33.070 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42267 1 80 1 2025-08-13 10:01:33.376 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33056 1 80 1 2025-08-13 10:01:33.376 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42312 1 109 1 2025-08-13 10:01:33.367 00:00:00.000 UDP 28.104.0.1:33056 -> 198.28.0.2:53 1 64 1 2025-08-13 10:01:33.367 00:00:00.000 UDP 28.104.0.1:42312 -> 198.28.0.2:53 1 64 1 2025-08-13 09:58:11.615 00:05:01.709 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-08-13 10:02:26.952 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-13 10:02:33.699 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55790 1 109 1 2025-08-13 10:02:33.698 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37009 1 80 1 2025-08-13 10:02:33.688 00:00:00.000 UDP 28.104.0.1:55790 -> 198.28.0.2:53 1 64 1 2025-08-13 10:02:33.688 00:00:00.000 UDP 28.104.0.1:37009 -> 198.28.0.2:53 1 64 1 2025-08-13 09:58:30.558 00:05:10.004 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2596 1 2025-08-13 10:03:33.977 00:00:00.000 UDP 28.104.0.1:32945 -> 198.28.0.2:53 1 64 1 2025-08-13 10:03:33.977 00:00:00.000 UDP 28.104.0.1:35125 -> 198.28.0.2:53 1 64 1 2025-08-13 10:03:33.988 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32945 1 109 1 2025-08-13 10:03:33.988 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35125 1 80 1 2025-08-13 10:00:13.232 00:04:00.093 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-08-13 10:00:13.325 00:04:00.014 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-08-13 10:00:11.606 00:05:01.729 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-08-13 10:04:34.272 00:00:00.000 UDP 28.104.0.1:36084 -> 198.28.0.2:53 1 64 1 2025-08-13 10:04:34.272 00:00:00.000 UDP 28.104.0.1:37559 -> 198.28.0.2:53 1 64 1 2025-08-13 10:04:34.284 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36084 1 109 1 2025-08-13 10:04:34.284 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37559 1 80 1 2025-08-13 10:01:11.656 00:05:01.559 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-08-13 10:05:34.560 00:00:00.000 UDP 28.104.0.1:52980 -> 198.28.0.2:53 1 64 1 2025-08-13 10:05:34.561 00:00:00.000 UDP 28.104.0.1:52673 -> 198.28.0.2:53 1 64 1 2025-08-13 10:05:34.571 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52980 1 109 1 2025-08-13 10:05:34.571 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52673 1 80 1 2025-08-13 10:02:11.607 00:05:01.620 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-08-13 10:06:34.864 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43145 1 80 1 2025-08-13 10:06:34.865 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40457 1 109 1 2025-08-13 10:06:34.854 00:00:00.000 UDP 28.104.0.1:40457 -> 198.28.0.2:53 1 64 1 2025-08-13 10:06:34.854 00:00:00.000 UDP 28.104.0.1:43145 -> 198.28.0.2:53 1 64 1 2025-08-13 10:07:27.155 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-13 10:07:35.186 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41105 1 109 1 2025-08-13 10:07:35.186 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51113 1 80 1 2025-08-13 10:07:35.176 00:00:00.000 UDP 28.104.0.1:41105 -> 198.28.0.2:53 1 64 1 2025-08-13 10:07:35.176 00:00:00.000 UDP 28.104.0.1:51113 -> 198.28.0.2:53 1 64 1 2025-08-13 10:03:50.564 00:05:10.009 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2336 1 2025-08-13 10:04:11.618 00:05:01.726 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-08-13 10:08:35.440 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52998 1 109 1 2025-08-13 10:08:35.440 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50069 1 80 1 2025-08-13 10:08:35.430 00:00:00.000 UDP 28.104.0.1:50069 -> 198.28.0.2:53 1 64 1 2025-08-13 10:08:35.430 00:00:00.000 UDP 28.104.0.1:52998 -> 198.28.0.2:53 1 64 1 2025-08-13 10:05:13.234 00:04:00.109 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-08-13 10:05:13.324 00:04:00.019 TCP 28.154.0.1:179 -> 28.155.0.1:36643 8 511 1 2025-08-13 10:09:35.737 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41673 1 80 1 2025-08-13 10:09:35.737 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36522 1 109 1 2025-08-13 10:09:35.727 00:00:00.000 UDP 28.104.0.1:41673 -> 198.28.0.2:53 1 64 1 2025-08-13 10:09:35.728 00:00:00.000 UDP 28.104.0.1:36522 -> 198.28.0.2:53 1 64 1 2025-08-13 10:06:11.607 00:05:01.747 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-08-13 10:10:36.040 00:00:00.000 UDP 28.104.0.1:39634 -> 198.28.0.2:53 1 64 1 2025-08-13 10:10:36.040 00:00:00.000 UDP 28.104.0.1:57693 -> 198.28.0.2:53 1 64 1 2025-08-13 10:10:36.050 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57693 1 80 1 2025-08-13 10:10:36.050 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39634 1 109 1 2025-08-13 10:07:11.657 00:05:01.561 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-08-13 10:11:36.338 00:00:00.000 UDP 28.104.0.1:46490 -> 198.28.0.2:53 1 64 1 2025-08-13 10:11:36.338 00:00:00.000 UDP 28.104.0.1:49421 -> 198.28.0.2:53 1 64 1 2025-08-13 10:11:36.350 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49421 1 109 1 2025-08-13 10:11:36.352 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46490 1 80 1 2025-08-13 10:08:11.608 00:05:01.627 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-08-13 10:12:27.246 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-13 10:12:36.641 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43269 1 80 1 2025-08-13 10:12:36.641 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40061 1 109 1 2025-08-13 10:12:36.630 00:00:00.000 UDP 28.104.0.1:43269 -> 198.28.0.2:53 1 64 1 2025-08-13 10:12:36.630 00:00:00.000 UDP 28.104.0.1:40061 -> 198.28.0.2:53 1 64 1 2025-08-13 10:09:10.574 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 39 2904 1 2025-08-13 10:13:36.934 00:00:00.000 UDP 28.104.0.1:32847 -> 198.28.0.2:53 1 64 1 2025-08-13 10:13:36.934 00:00:00.000 UDP 28.104.0.1:59740 -> 198.28.0.2:53 1 64 1 2025-08-13 10:13:36.945 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32847 1 80 1 2025-08-13 10:13:36.945 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59740 1 109 1 2025-08-13 10:10:13.239 00:04:00.109 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-08-13 10:10:13.343 00:04:00.005 TCP 28.154.0.1:179 -> 28.155.0.1:36643 5 355 1 2025-08-13 10:10:11.618 00:05:01.731 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-08-13 10:14:37.242 00:00:00.000 UDP 28.104.0.1:45612 -> 198.28.0.2:53 1 64 1 2025-08-13 10:14:37.242 00:00:00.000 UDP 28.104.0.1:51496 -> 198.28.0.2:53 1 64 1 2025-08-13 10:14:37.253 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51496 1 109 1 2025-08-13 10:14:37.253 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45612 1 80 1 2025-08-13 10:15:37.538 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58129 1 80 1 2025-08-13 10:15:37.538 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39183 1 109 1 2025-08-13 10:15:37.529 00:00:00.000 UDP 28.104.0.1:39183 -> 198.28.0.2:53 1 64 1 2025-08-13 10:15:37.529 00:00:00.000 UDP 28.104.0.1:58129 -> 198.28.0.2:53 1 64 1 2025-08-13 10:15:13.242 00:01:00.108 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-08-13 10:15:13.349 00:01:00.001 TCP 28.154.0.1:179 -> 28.155.0.1:36643 2 142 1 2025-08-13 10:12:11.608 00:05:01.753 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-08-13 10:16:37.834 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53967 1 80 1 2025-08-13 10:16:37.834 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38796 1 109 1 2025-08-13 10:16:37.825 00:00:00.000 UDP 28.104.0.1:38796 -> 198.28.0.2:53 1 64 1 2025-08-13 10:16:37.826 00:00:00.000 UDP 28.104.0.1:53967 -> 198.28.0.2:53 1 64 1 2025-08-13 10:13:11.659 00:05:01.563 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-08-13 10:17:27.509 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-13 10:17:38.108 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51783 1 109 1 2025-08-13 10:17:38.108 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56855 1 80 1 2025-08-13 10:17:38.097 00:00:00.000 UDP 28.104.0.1:51783 -> 198.28.0.2:53 1 64 1 2025-08-13 10:17:38.097 00:00:00.000 UDP 28.104.0.1:56855 -> 198.28.0.2:53 1 64 1 2025-08-13 10:14:11.609 00:05:01.622 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-08-13 10:18:38.408 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33237 1 109 1 2025-08-13 10:18:38.408 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55885 1 80 1 2025-08-13 10:18:38.399 00:00:00.000 UDP 28.104.0.1:55885 -> 198.28.0.2:53 1 64 1 2025-08-13 10:18:38.398 00:00:00.000 UDP 28.104.0.1:33237 -> 198.28.0.2:53 1 64 1 2025-08-13 10:14:30.579 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2520 1 2025-08-13 10:17:13.349 00:02:00.000 TCP 28.154.0.1:179 -> 28.155.0.1:36643 3 213 1 2025-08-13 10:19:38.694 00:00:00.000 UDP 28.104.0.1:37724 -> 198.28.0.2:53 1 64 1 2025-08-13 10:19:38.694 00:00:00.000 UDP 28.104.0.1:59108 -> 198.28.0.2:53 1 64 1 2025-08-13 10:19:38.704 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59108 1 109 1 2025-08-13 10:19:38.704 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37724 1 80 1 2025-08-13 10:16:11.619 00:05:01.732 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-08-13 10:20:38.947 00:00:00.000 UDP 28.104.0.1:34644 -> 198.28.0.2:53 1 64 1 2025-08-13 10:20:38.947 00:00:00.000 UDP 28.104.0.1:40081 -> 198.28.0.2:53 1 64 1 2025-08-13 10:20:38.956 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34644 1 109 1 2025-08-13 10:20:38.957 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40081 1 80 1 2025-08-13 10:17:13.243 00:04:00.109 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-08-13 10:20:13.351 00:01:00.001 TCP 28.154.0.1:179 -> 28.155.0.1:36643 2 142 1 2025-08-13 10:21:39.238 00:00:00.000 UDP 28.104.0.1:49160 -> 198.28.0.2:53 1 64 1 2025-08-13 10:21:39.239 00:00:00.000 UDP 28.104.0.1:60308 -> 198.28.0.2:53 1 64 1 2025-08-13 10:21:39.248 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49160 1 109 1 2025-08-13 10:21:39.248 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60308 1 80 1 2025-08-13 10:18:11.612 00:05:01.751 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-08-13 10:22:27.194 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-13 10:22:39.542 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50590 1 109 1 2025-08-13 10:22:39.542 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33486 1 80 1 2025-08-13 10:22:39.532 00:00:00.000 UDP 28.104.0.1:50590 -> 198.28.0.2:53 1 64 1 2025-08-13 10:22:39.532 00:00:00.000 UDP 28.104.0.1:33486 -> 198.28.0.2:53 1 64 1 2025-08-13 10:19:11.663 00:05:01.563 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-08-13 10:23:39.834 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40229 1 80 1 2025-08-13 10:23:39.833 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40129 1 109 1 2025-08-13 10:23:39.823 00:00:00.000 UDP 28.104.0.1:40129 -> 198.28.0.2:53 1 64 1 2025-08-13 10:23:39.823 00:00:00.000 UDP 28.104.0.1:40229 -> 198.28.0.2:53 1 64 1 2025-08-13 10:19:50.586 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2496 1 2025-08-13 10:20:11.612 00:05:01.624 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-08-13 10:22:13.352 00:02:00.000 TCP 28.154.0.1:179 -> 28.155.0.1:36643 3 213 1 2025-08-13 10:24:40.116 00:00:00.000 UDP 28.104.0.1:58694 -> 198.28.0.2:53 1 64 1 2025-08-13 10:24:40.116 00:00:00.000 UDP 28.104.0.1:35544 -> 198.28.0.2:53 1 64 1 2025-08-13 10:24:40.127 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58694 1 80 1 2025-08-13 10:24:40.127 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35544 1 109 1 2025-08-13 10:25:40.430 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56528 1 80 1 2025-08-13 10:25:40.430 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48755 1 109 1 2025-08-13 10:25:40.419 00:00:00.000 UDP 28.104.0.1:48755 -> 198.28.0.2:53 1 64 1 2025-08-13 10:25:40.419 00:00:00.000 UDP 28.104.0.1:56528 -> 198.28.0.2:53 1 64 1 2025-08-13 10:22:13.242 00:04:00.109 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-08-13 10:25:13.351 00:01:00.000 TCP 28.154.0.1:179 -> 28.155.0.1:36643 2 142 1 2025-08-13 10:22:11.622 00:05:01.730 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-08-13 10:26:40.719 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43714 1 80 1 2025-08-13 10:26:40.719 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34065 1 109 1 2025-08-13 10:26:40.709 00:00:00.000 UDP 28.104.0.1:43714 -> 198.28.0.2:53 1 64 1 2025-08-13 10:26:40.709 00:00:00.000 UDP 28.104.0.1:34065 -> 198.28.0.2:53 1 64 1 2025-08-13 10:27:27.432 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-13 10:27:41.009 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39851 1 109 1 2025-08-13 10:27:41.009 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56420 1 80 1 2025-08-13 10:27:40.998 00:00:00.000 UDP 28.104.0.1:56420 -> 198.28.0.2:53 1 64 1 2025-08-13 10:27:40.997 00:00:00.000 UDP 28.104.0.1:39851 -> 198.28.0.2:53 1 64 1 2025-08-13 10:24:11.612 00:05:01.751 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-08-13 10:28:41.309 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59893 1 109 1 2025-08-13 10:28:41.309 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49411 1 80 1 2025-08-13 10:28:41.299 00:00:00.000 UDP 28.104.0.1:49411 -> 198.28.0.2:53 1 64 1 2025-08-13 10:28:41.299 00:00:00.000 UDP 28.104.0.1:59893 -> 198.28.0.2:53 1 64 1 2025-08-13 10:25:11.662 00:05:01.566 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-08-13 10:27:13.352 00:02:00.001 TCP 28.154.0.1:179 -> 28.155.0.1:36643 3 213 1 2025-08-13 10:25:10.590 00:05:11.029 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2752 1 2025-08-13 10:29:41.565 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41183 1 109 1 2025-08-13 10:29:41.565 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39010 1 80 1 2025-08-13 10:29:41.554 00:00:00.000 UDP 28.104.0.1:41183 -> 198.28.0.2:53 1 64 1 2025-08-13 10:29:41.554 00:00:00.000 UDP 28.104.0.1:39010 -> 198.28.0.2:53 1 64 1 2025-08-13 10:26:11.614 00:05:01.625 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-08-13 10:30:41.853 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46855 1 109 1 2025-08-13 10:30:41.853 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51540 1 80 1 2025-08-13 10:30:41.843 00:00:00.000 UDP 28.104.0.1:46855 -> 198.28.0.2:53 1 64 1 2025-08-13 10:30:41.843 00:00:00.000 UDP 28.104.0.1:51540 -> 198.28.0.2:53 1 64 1 2025-08-13 10:27:13.248 00:04:00.106 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-08-13 10:30:13.354 00:01:00.000 TCP 28.154.0.1:179 -> 28.155.0.1:36643 2 142 1 2025-08-13 10:31:42.148 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54290 1 80 1 2025-08-13 10:31:42.148 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41976 1 109 1 2025-08-13 10:31:42.138 00:00:00.000 UDP 28.104.0.1:54290 -> 198.28.0.2:53 1 64 1 2025-08-13 10:31:42.138 00:00:00.000 UDP 28.104.0.1:41976 -> 198.28.0.2:53 1 64 1 2025-08-13 10:28:11.622 00:05:01.731 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-08-13 10:32:27.565 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-13 10:32:42.429 00:00:00.000 UDP 28.104.0.1:45777 -> 198.28.0.2:53 1 64 1 2025-08-13 10:32:42.429 00:00:00.000 UDP 28.104.0.1:36380 -> 198.28.0.2:53 1 64 1 2025-08-13 10:32:42.439 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36380 1 109 1 2025-08-13 10:32:42.439 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45777 1 80 1 2025-08-13 10:33:42.695 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41756 1 109 1 2025-08-13 10:33:42.695 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52202 1 80 1 2025-08-13 10:33:42.686 00:00:00.000 UDP 28.104.0.1:41756 -> 198.28.0.2:53 1 64 1 2025-08-13 10:33:42.686 00:00:00.000 UDP 28.104.0.1:52202 -> 198.28.0.2:53 1 64 1 2025-08-13 10:32:13.354 00:02:00.000 TCP 28.154.0.1:179 -> 28.155.0.1:36643 3 213 1 2025-08-13 10:30:11.616 00:05:01.748 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-08-13 10:34:42.990 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53781 1 80 1 2025-08-13 10:34:42.990 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53482 1 109 1 2025-08-13 10:34:42.980 00:00:00.000 UDP 28.104.0.1:53482 -> 198.28.0.2:53 1 64 1 2025-08-13 10:34:42.980 00:00:00.000 UDP 28.104.0.1:53781 -> 198.28.0.2:53 1 64 1 2025-08-13 10:30:30.597 00:05:10.009 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2320 1 2025-08-13 10:31:11.665 00:05:01.564 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-08-13 10:35:43.274 00:00:00.000 UDP 28.104.0.1:46353 -> 198.28.0.2:53 1 64 1 2025-08-13 10:35:43.274 00:00:00.000 UDP 28.104.0.1:36818 -> 198.28.0.2:53 1 64 1 2025-08-13 10:35:43.285 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46353 1 109 1 2025-08-13 10:35:43.285 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36818 1 80 1 2025-08-13 10:32:11.616 00:05:01.623 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-08-13 10:32:13.248 00:04:00.106 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-08-13 10:35:13.354 00:01:00.000 TCP 28.154.0.1:179 -> 28.155.0.1:36643 2 142 1 2025-08-13 10:36:43.591 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43893 1 109 1 2025-08-13 10:36:43.591 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33698 1 80 1 2025-08-13 10:36:43.582 00:00:00.000 UDP 28.104.0.1:33698 -> 198.28.0.2:53 1 64 1 2025-08-13 10:36:43.582 00:00:00.000 UDP 28.104.0.1:43893 -> 198.28.0.2:53 1 64 1 2025-08-13 10:37:27.690 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-13 10:37:43.843 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55637 1 109 1 2025-08-13 10:37:43.843 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56678 1 80 1 2025-08-13 10:37:43.833 00:00:00.000 UDP 28.104.0.1:55637 -> 198.28.0.2:53 1 64 1 2025-08-13 10:37:43.833 00:00:00.000 UDP 28.104.0.1:56678 -> 198.28.0.2:53 1 64 1 2025-08-13 10:34:11.628 00:05:01.727 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-08-13 10:38:44.129 00:00:00.000 UDP 28.104.0.1:41188 -> 198.28.0.2:53 1 64 1 2025-08-13 10:38:44.129 00:00:00.000 UDP 28.104.0.1:54726 -> 198.28.0.2:53 1 64 1 2025-08-13 10:38:44.139 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41188 1 109 1 2025-08-13 10:38:44.139 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54726 1 80 1 2025-08-13 10:39:44.476 00:00:00.000 UDP 28.104.0.1:48209 -> 198.28.0.2:53 1 64 1 2025-08-13 10:39:44.477 00:00:00.000 UDP 28.104.0.1:44903 -> 198.28.0.2:53 1 64 1 2025-08-13 10:39:44.486 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48209 1 109 1 2025-08-13 10:39:44.486 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44903 1 80 1 2025-08-13 10:35:50.605 00:05:10.016 OSPF 28.0.2.2:0 -> 224.0.0.5:0 38 2824 1 2025-08-13 10:36:11.617 00:05:01.747 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-08-13 10:40:44.738 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45137 1 80 1 2025-08-13 10:40:44.739 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47411 1 109 1 2025-08-13 10:40:44.728 00:00:00.000 UDP 28.104.0.1:45137 -> 198.28.0.2:53 1 64 1 2025-08-13 10:40:44.728 00:00:00.000 UDP 28.104.0.1:47411 -> 198.28.0.2:53 1 64 1 2025-08-13 10:37:13.250 00:04:00.104 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-08-13 10:37:13.354 00:04:00.000 TCP 28.154.0.1:179 -> 28.155.0.1:36643 5 355 1 2025-08-13 10:37:11.668 00:05:01.562 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-08-13 10:41:44.990 00:00:00.000 UDP 28.104.0.1:42037 -> 198.28.0.2:53 1 64 1 2025-08-13 10:41:44.990 00:00:00.000 UDP 28.104.0.1:44315 -> 198.28.0.2:53 1 64 1 2025-08-13 10:41:45.002 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42037 1 80 1 2025-08-13 10:41:45.002 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44315 1 109 1 2025-08-13 10:38:11.620 00:05:01.622 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-08-13 10:42:27.943 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-13 10:42:45.293 00:00:00.000 UDP 28.104.0.1:35931 -> 198.28.0.2:53 1 64 1 2025-08-13 10:42:45.293 00:00:00.000 UDP 28.104.0.1:42396 -> 198.28.0.2:53 1 64 1 2025-08-13 10:42:45.305 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42396 1 109 1 2025-08-13 10:42:45.304 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35931 1 80 1 2025-08-13 10:42:13.251 00:01:00.105 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-08-13 10:42:13.355 00:01:00.001 TCP 28.154.0.1:179 -> 28.155.0.1:36643 2 142 1 2025-08-13 10:43:45.586 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49820 1 80 1 2025-08-13 10:43:45.586 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51800 1 109 1 2025-08-13 10:43:45.577 00:00:00.000 UDP 28.104.0.1:51800 -> 198.28.0.2:53 1 64 1 2025-08-13 10:43:45.577 00:00:00.000 UDP 28.104.0.1:49820 -> 198.28.0.2:53 1 64 1 2025-08-13 10:40:11.631 00:05:01.724 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-08-13 10:44:45.868 00:00:00.000 UDP 28.104.0.1:59357 -> 198.28.0.2:53 1 64 1 2025-08-13 10:44:45.868 00:00:00.000 UDP 28.104.0.1:42340 -> 198.28.0.2:53 1 64 1 2025-08-13 10:44:45.878 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42340 1 80 1 2025-08-13 10:44:45.878 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59357 1 109 1 2025-08-13 10:41:10.622 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2616 1 2025-08-13 10:45:46.198 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50627 1 109 1 2025-08-13 10:45:46.198 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35499 1 80 1 2025-08-13 10:45:46.187 00:00:00.000 UDP 28.104.0.1:50627 -> 198.28.0.2:53 1 64 1 2025-08-13 10:45:46.187 00:00:00.000 UDP 28.104.0.1:35499 -> 198.28.0.2:53 1 64 1 2025-08-13 10:44:13.253 00:02:00.104 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-08-13 10:44:13.356 00:02:00.001 TCP 28.154.0.1:179 -> 28.155.0.1:36643 3 213 1 2025-08-13 10:42:11.623 00:05:01.744 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-08-13 10:46:46.491 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33931 1 80 1 2025-08-13 10:46:46.491 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47729 1 109 1 2025-08-13 10:46:46.481 00:00:00.000 UDP 28.104.0.1:33931 -> 198.28.0.2:53 1 64 1 2025-08-13 10:46:46.481 00:00:00.000 UDP 28.104.0.1:47729 -> 198.28.0.2:53 1 64 1 2025-08-13 10:43:11.675 00:05:01.557 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-08-13 10:47:27.764 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-13 10:47:46.786 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45900 1 80 1 2025-08-13 10:47:46.786 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33315 1 109 1 2025-08-13 10:47:46.776 00:00:00.000 UDP 28.104.0.1:33315 -> 198.28.0.2:53 1 64 1 2025-08-13 10:47:46.776 00:00:00.000 UDP 28.104.0.1:45900 -> 198.28.0.2:53 1 64 1 2025-08-13 10:47:13.252 00:01:00.105 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-08-13 10:47:13.356 00:01:00.001 TCP 28.154.0.1:179 -> 28.155.0.1:36643 2 142 1 2025-08-13 10:44:11.622 00:05:01.620 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-08-13 10:48:47.078 00:00:00.000 UDP 28.104.0.1:44067 -> 198.28.0.2:53 1 64 1 2025-08-13 10:48:47.078 00:00:00.000 UDP 28.104.0.1:57606 -> 198.28.0.2:53 1 64 1 2025-08-13 10:48:47.089 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44067 1 109 1 2025-08-13 10:48:47.089 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57606 1 80 1 2025-08-13 10:49:47.374 00:00:00.000 UDP 28.104.0.1:37257 -> 198.28.0.2:53 1 64 1 2025-08-13 10:49:47.374 00:00:00.000 UDP 28.104.0.1:58826 -> 198.28.0.2:53 1 64 1 2025-08-13 10:49:47.384 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37257 1 109 1 2025-08-13 10:49:47.384 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58826 1 80 1 2025-08-13 10:46:11.632 00:05:01.725 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-08-13 10:50:47.680 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32798 1 109 1 2025-08-13 10:50:47.680 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34336 1 80 1 2025-08-13 10:46:30.627 00:05:10.004 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2496 1 2025-08-13 10:50:47.669 00:00:00.000 UDP 28.104.0.1:34336 -> 198.28.0.2:53 1 64 1 2025-08-13 10:50:47.669 00:00:00.000 UDP 28.104.0.1:32798 -> 198.28.0.2:53 1 64 1 2025-08-13 10:49:13.357 00:02:00.001 TCP 28.154.0.1:179 -> 28.155.0.1:36643 3 213 1 2025-08-13 10:51:47.975 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51219 1 80 1 2025-08-13 10:51:47.975 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33602 1 109 1 2025-08-13 10:51:47.965 00:00:00.000 UDP 28.104.0.1:51219 -> 198.28.0.2:53 1 64 1 2025-08-13 10:51:47.965 00:00:00.000 UDP 28.104.0.1:33602 -> 198.28.0.2:53 1 64 1 2025-08-13 10:48:11.623 00:05:01.746 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-08-13 10:52:27.863 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-13 10:52:48.266 00:00:00.000 UDP 28.104.0.1:52680 -> 198.28.0.2:53 1 64 1 2025-08-13 10:52:48.266 00:00:00.000 UDP 28.104.0.1:34227 -> 198.28.0.2:53 1 64 1 2025-08-13 10:52:48.277 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34227 1 109 1 2025-08-13 10:52:48.277 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52680 1 80 1 2025-08-13 10:49:13.254 00:04:00.105 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-08-13 10:52:13.359 00:01:00.000 TCP 28.154.0.1:179 -> 28.155.0.1:36643 2 142 1 2025-08-13 10:49:11.672 00:05:01.559 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-08-13 10:53:48.561 00:00:00.000 UDP 28.104.0.1:41742 -> 198.28.0.2:53 1 64 1 2025-08-13 10:53:48.561 00:00:00.000 UDP 28.104.0.1:38911 -> 198.28.0.2:53 1 64 1 2025-08-13 10:53:48.573 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41742 1 80 1 2025-08-13 10:53:48.574 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38911 1 109 1 2025-08-13 10:50:11.623 00:05:01.620 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-08-13 10:54:48.862 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44597 1 109 1 2025-08-13 10:54:48.862 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53480 1 80 1 2025-08-13 10:54:48.851 00:00:00.000 UDP 28.104.0.1:44597 -> 198.28.0.2:53 1 64 1 2025-08-13 10:54:48.851 00:00:00.000 UDP 28.104.0.1:53480 -> 198.28.0.2:53 1 64 1 2025-08-13 10:55:49.249 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50193 1 80 1 2025-08-13 10:55:49.250 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34948 1 109 1 2025-08-13 10:55:49.239 00:00:00.000 UDP 28.104.0.1:50193 -> 198.28.0.2:53 1 64 1 2025-08-13 10:55:49.239 00:00:00.000 UDP 28.104.0.1:34948 -> 198.28.0.2:53 1 64 1 2025-08-13 10:51:50.631 00:05:10.008 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2688 1 2025-08-13 10:54:13.359 00:02:00.000 TCP 28.154.0.1:179 -> 28.155.0.1:36643 3 213 1 2025-08-13 10:52:11.632 00:05:01.727 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-08-13 10:56:49.543 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32922 1 109 1 2025-08-13 10:56:49.543 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37690 1 80 1 2025-08-13 10:56:49.532 00:00:00.000 UDP 28.104.0.1:37690 -> 198.28.0.2:53 1 64 1 2025-08-13 10:56:49.532 00:00:00.000 UDP 28.104.0.1:32922 -> 198.28.0.2:53 1 64 1 2025-08-13 10:57:27.941 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-13 10:57:49.833 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41335 1 109 1 2025-08-13 10:57:49.833 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36524 1 80 1 2025-08-13 10:57:49.822 00:00:00.000 UDP 28.104.0.1:36524 -> 198.28.0.2:53 1 64 1 2025-08-13 10:57:49.822 00:00:00.000 UDP 28.104.0.1:41335 -> 198.28.0.2:53 1 64 1 2025-08-13 10:54:13.253 00:04:00.105 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-08-13 10:57:13.358 00:01:00.000 TCP 28.154.0.1:179 -> 28.155.0.1:36643 2 142 1 2025-08-13 10:54:11.625 00:05:01.746 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-08-13 10:58:50.103 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57392 1 109 1 2025-08-13 10:58:50.104 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36040 1 80 1 2025-08-13 10:58:50.093 00:00:00.000 UDP 28.104.0.1:57392 -> 198.28.0.2:53 1 64 1 2025-08-13 10:58:50.093 00:00:00.000 UDP 28.104.0.1:36040 -> 198.28.0.2:53 1 64 1 Summary: total flows: 339, total bytes: 92835, total packets: 1355, avg bps: 193, avg pps: 0, avg bpp: 68 Time window: 2025-08-13 09:55:11 - 2025-08-13 10:59:13 Total flows processed: 339, passed: 339, Blocks skipped: 0, Bytes read: 35320 Sys: 0.0019s User: 0.0046s Wall: 0.0041s flows/second: 82845.0 Runtime: 0.0041s