Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-20 16:55:15.127 00:05:01.554 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-08-20 16:59:34.227 00:00:00.000 UDP 28.104.0.1:50105 -> 198.28.0.2:53 1 64 1 2025-08-20 16:59:34.227 00:00:00.000 UDP 28.104.0.1:41776 -> 198.28.0.2:53 1 64 1 2025-08-20 16:59:34.239 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41776 1 80 1 2025-08-20 16:59:34.239 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50105 1 109 1 2025-08-20 16:55:16.713 00:06:00.071 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-08-20 16:56:15.077 00:05:01.613 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-08-20 17:00:34.493 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48300 1 80 1 2025-08-20 17:00:34.493 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46455 1 109 1 2025-08-20 17:00:34.483 00:00:00.000 UDP 28.104.0.1:46455 -> 198.28.0.2:53 1 64 1 2025-08-20 17:00:34.482 00:00:00.000 UDP 28.104.0.1:48300 -> 198.28.0.2:53 1 64 1 2025-08-20 17:00:57.513 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-20 17:01:34.809 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51133 1 109 1 2025-08-20 17:01:34.809 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47215 1 80 1 2025-08-20 17:01:34.799 00:00:00.000 UDP 28.104.0.1:51133 -> 198.28.0.2:53 1 64 1 2025-08-20 17:01:34.798 00:00:00.000 UDP 28.104.0.1:47215 -> 198.28.0.2:53 1 64 1 2025-08-20 16:58:15.089 00:05:01.695 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-08-20 17:02:35.099 00:00:00.000 UDP 28.104.0.1:46724 -> 198.28.0.2:53 1 64 1 2025-08-20 17:02:35.099 00:00:00.000 UDP 28.104.0.1:60301 -> 198.28.0.2:53 1 64 1 2025-08-20 17:02:35.109 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46724 1 80 1 2025-08-20 17:02:35.109 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60301 1 109 1 2025-08-20 16:58:44.766 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 40 2928 1 2025-08-20 17:03:35.405 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45899 1 80 1 2025-08-20 17:03:35.404 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37216 1 109 1 2025-08-20 17:03:35.395 00:00:00.000 UDP 28.104.0.1:45899 -> 198.28.0.2:53 1 64 1 2025-08-20 17:03:35.394 00:00:00.000 UDP 28.104.0.1:37216 -> 198.28.0.2:53 1 64 1 2025-08-20 16:59:16.783 00:06:00.095 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-08-20 17:00:15.079 00:05:01.716 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-08-20 17:04:35.659 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46014 1 80 1 2025-08-20 17:04:35.659 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52013 1 109 1 2025-08-20 17:04:35.648 00:00:00.000 UDP 28.104.0.1:46014 -> 198.28.0.2:53 1 64 1 2025-08-20 17:04:35.648 00:00:00.000 UDP 28.104.0.1:52013 -> 198.28.0.2:53 1 64 1 2025-08-20 17:01:15.128 00:05:01.554 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-08-20 17:05:35.947 00:00:00.000 UDP 28.104.0.1:42928 -> 198.28.0.2:53 1 64 1 2025-08-20 17:05:35.947 00:00:00.000 UDP 28.104.0.1:38586 -> 198.28.0.2:53 1 64 1 2025-08-20 17:05:35.956 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38586 1 80 1 2025-08-20 17:05:35.956 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42928 1 109 1 2025-08-20 17:05:57.697 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-20 17:02:15.079 00:05:01.614 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-08-20 17:06:36.237 00:00:00.000 UDP 28.104.0.1:47742 -> 198.28.0.2:53 1 64 1 2025-08-20 17:06:36.238 00:00:00.000 UDP 28.104.0.1:52259 -> 198.28.0.2:53 1 64 1 2025-08-20 17:06:36.248 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52259 1 80 1 2025-08-20 17:06:36.248 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47742 1 109 1 2025-08-20 17:02:16.716 00:06:00.069 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-08-20 17:07:36.541 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51140 1 80 1 2025-08-20 17:07:36.540 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45038 1 109 1 2025-08-20 17:07:36.530 00:00:00.000 UDP 28.104.0.1:51140 -> 198.28.0.2:53 1 64 1 2025-08-20 17:07:36.530 00:00:00.000 UDP 28.104.0.1:45038 -> 198.28.0.2:53 1 64 1 2025-08-20 17:04:15.089 00:05:01.695 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-08-20 17:04:04.772 00:05:10.024 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2336 1 2025-08-20 17:08:36.795 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60754 1 109 1 2025-08-20 17:08:36.795 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58112 1 80 1 2025-08-20 17:08:36.787 00:00:00.000 UDP 28.104.0.1:58112 -> 198.28.0.2:53 1 64 1 2025-08-20 17:08:36.787 00:00:00.000 UDP 28.104.0.1:60754 -> 198.28.0.2:53 1 64 1 2025-08-20 17:09:37.081 00:00:00.000 UDP 28.104.0.1:34475 -> 198.28.0.2:53 1 64 1 2025-08-20 17:09:37.081 00:00:00.000 UDP 28.104.0.1:56529 -> 198.28.0.2:53 1 64 1 2025-08-20 17:09:37.091 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56529 1 80 1 2025-08-20 17:09:37.091 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34475 1 109 1 2025-08-20 17:06:15.080 00:05:01.714 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-08-20 17:10:37.383 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51900 1 80 1 2025-08-20 17:10:37.383 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32989 1 109 1 2025-08-20 17:10:37.373 00:00:00.000 UDP 28.104.0.1:51900 -> 198.28.0.2:53 1 64 1 2025-08-20 17:10:37.373 00:00:00.000 UDP 28.104.0.1:32989 -> 198.28.0.2:53 1 64 1 2025-08-20 17:10:57.556 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-20 17:07:15.132 00:05:01.550 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-08-20 17:06:16.784 00:06:00.096 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-08-20 17:11:37.663 00:00:00.000 UDP 28.104.0.1:60232 -> 198.28.0.2:53 1 64 1 2025-08-20 17:11:37.663 00:00:00.000 UDP 28.104.0.1:33992 -> 198.28.0.2:53 1 64 1 2025-08-20 17:11:37.673 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60232 1 109 1 2025-08-20 17:11:37.673 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33992 1 80 1 2025-08-20 17:08:15.081 00:05:01.612 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-08-20 17:12:37.969 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56457 1 80 1 2025-08-20 17:12:37.970 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47586 1 109 1 2025-08-20 17:12:37.958 00:00:00.000 UDP 28.104.0.1:47586 -> 198.28.0.2:53 1 64 1 2025-08-20 17:12:37.958 00:00:00.000 UDP 28.104.0.1:56457 -> 198.28.0.2:53 1 64 1 2025-08-20 17:13:38.274 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51349 1 80 1 2025-08-20 17:13:38.274 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32819 1 109 1 2025-08-20 17:13:38.264 00:00:00.000 UDP 28.104.0.1:32819 -> 198.28.0.2:53 1 64 1 2025-08-20 17:13:38.264 00:00:00.000 UDP 28.104.0.1:51349 -> 198.28.0.2:53 1 64 1 2025-08-20 17:09:24.776 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2740 1 2025-08-20 17:09:16.722 00:06:00.065 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-08-20 17:10:15.093 00:05:01.693 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-08-20 17:14:38.572 00:00:00.000 UDP 28.104.0.1:39549 -> 198.28.0.2:53 1 64 1 2025-08-20 17:14:38.572 00:00:00.000 UDP 28.104.0.1:59775 -> 198.28.0.2:53 1 64 1 2025-08-20 17:14:38.582 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39549 1 109 1 2025-08-20 17:14:38.582 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59775 1 80 1 2025-08-20 17:15:38.874 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55799 1 109 1 2025-08-20 17:15:38.874 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35397 1 80 1 2025-08-20 17:15:38.865 00:00:00.000 UDP 28.104.0.1:55799 -> 198.28.0.2:53 1 64 1 2025-08-20 17:15:38.865 00:00:00.000 UDP 28.104.0.1:35397 -> 198.28.0.2:53 1 64 1 2025-08-20 17:15:57.962 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-20 17:12:15.082 00:05:01.713 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-08-20 17:16:39.182 00:00:00.000 UDP 28.104.0.1:54694 -> 198.28.0.2:53 1 64 1 2025-08-20 17:16:39.182 00:00:00.000 UDP 28.104.0.1:48994 -> 198.28.0.2:53 1 64 1 2025-08-20 17:16:39.193 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48994 1 109 1 2025-08-20 17:16:39.193 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54694 1 80 1 2025-08-20 17:13:15.133 00:05:01.551 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-08-20 17:17:39.487 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42692 1 80 1 2025-08-20 17:17:39.487 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38689 1 109 1 2025-08-20 17:17:39.476 00:00:00.000 UDP 28.104.0.1:42692 -> 198.28.0.2:53 1 64 1 2025-08-20 17:17:39.476 00:00:00.000 UDP 28.104.0.1:38689 -> 198.28.0.2:53 1 64 1 2025-08-20 17:14:15.082 00:05:01.611 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-08-20 17:13:16.785 00:06:00.098 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-08-20 17:18:39.775 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49189 1 80 1 2025-08-20 17:18:39.775 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56685 1 109 1 2025-08-20 17:18:39.766 00:00:00.000 UDP 28.104.0.1:49189 -> 198.28.0.2:53 1 64 1 2025-08-20 17:18:39.766 00:00:00.000 UDP 28.104.0.1:56685 -> 198.28.0.2:53 1 64 1 2025-08-20 17:14:44.781 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 32 2176 1 2025-08-20 17:19:40.045 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56014 1 109 1 2025-08-20 17:19:40.043 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38820 1 80 1 2025-08-20 17:19:40.033 00:00:00.000 UDP 28.104.0.1:38820 -> 198.28.0.2:53 1 64 1 2025-08-20 17:19:40.036 00:00:00.000 UDP 28.104.0.1:56014 -> 198.28.0.2:53 1 64 1 2025-08-20 17:16:15.093 00:05:01.697 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-08-20 17:20:40.336 00:00:00.000 UDP 28.104.0.1:35128 -> 198.28.0.2:53 1 64 1 2025-08-20 17:20:40.336 00:00:00.000 UDP 28.104.0.1:33909 -> 198.28.0.2:53 1 64 1 2025-08-20 17:20:40.346 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35128 1 80 1 2025-08-20 17:20:40.346 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33909 1 109 1 2025-08-20 17:20:57.987 00:00:00.025 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-20 17:16:16.722 00:06:00.069 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-08-20 17:21:40.639 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45289 1 109 1 2025-08-20 17:21:40.639 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60863 1 80 1 2025-08-20 17:21:40.628 00:00:00.000 UDP 28.104.0.1:45289 -> 198.28.0.2:53 1 64 1 2025-08-20 17:21:40.628 00:00:00.000 UDP 28.104.0.1:60863 -> 198.28.0.2:53 1 64 1 2025-08-20 17:18:15.083 00:05:01.718 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-08-20 17:22:40.885 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34092 1 80 1 2025-08-20 17:22:40.885 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33446 1 109 1 2025-08-20 17:22:40.875 00:00:00.000 UDP 28.104.0.1:33446 -> 198.28.0.2:53 1 64 1 2025-08-20 17:22:40.876 00:00:00.000 UDP 28.104.0.1:34092 -> 198.28.0.2:53 1 64 1 2025-08-20 17:19:15.134 00:05:01.551 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-08-20 17:23:41.178 00:00:00.000 UDP 28.104.0.1:40877 -> 198.28.0.2:53 1 64 1 2025-08-20 17:23:41.178 00:00:00.000 UDP 28.104.0.1:58339 -> 198.28.0.2:53 1 64 1 2025-08-20 17:23:41.188 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40877 1 109 1 2025-08-20 17:23:41.188 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58339 1 80 1 2025-08-20 17:20:04.785 00:05:10.011 OSPF 28.0.2.2:0 -> 224.0.0.5:0 39 2756 1 2025-08-20 17:20:15.084 00:05:01.611 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-08-20 17:24:41.484 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42931 1 80 1 2025-08-20 17:24:41.484 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34925 1 109 1 2025-08-20 17:24:41.474 00:00:00.000 UDP 28.104.0.1:34925 -> 198.28.0.2:53 1 64 1 2025-08-20 17:24:41.474 00:00:00.000 UDP 28.104.0.1:42931 -> 198.28.0.2:53 1 64 1 2025-08-20 17:20:16.790 00:06:00.095 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-08-20 17:25:41.768 00:00:00.000 UDP 28.104.0.1:50154 -> 198.28.0.2:53 1 64 1 2025-08-20 17:25:41.768 00:00:00.000 UDP 28.104.0.1:51714 -> 198.28.0.2:53 1 64 1 2025-08-20 17:25:41.778 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51714 1 80 1 2025-08-20 17:25:41.779 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50154 1 109 1 2025-08-20 17:25:57.848 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-20 17:22:15.094 00:05:01.698 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-08-20 17:26:42.069 00:00:00.000 UDP 28.104.0.1:55312 -> 198.28.0.2:53 1 64 1 2025-08-20 17:26:42.069 00:00:00.000 UDP 28.104.0.1:38827 -> 198.28.0.2:53 1 64 1 2025-08-20 17:26:42.080 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38827 1 109 1 2025-08-20 17:26:42.080 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55312 1 80 1 2025-08-20 17:27:42.362 00:00:00.000 UDP 28.104.0.1:59982 -> 198.28.0.2:53 1 64 1 2025-08-20 17:27:42.362 00:00:00.000 UDP 28.104.0.1:35743 -> 198.28.0.2:53 1 64 1 2025-08-20 17:27:42.372 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35743 1 109 1 2025-08-20 17:27:42.372 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59982 1 80 1 2025-08-20 17:23:16.727 00:06:00.065 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-08-20 17:24:15.084 00:05:01.718 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-08-20 17:28:42.658 00:00:00.000 UDP 28.104.0.1:46592 -> 198.28.0.2:53 1 64 1 2025-08-20 17:28:42.658 00:00:00.000 UDP 28.104.0.1:59109 -> 198.28.0.2:53 1 64 1 2025-08-20 17:28:42.671 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59109 1 80 1 2025-08-20 17:28:42.669 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46592 1 109 1 2025-08-20 17:25:15.133 00:05:01.551 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-08-20 17:25:24.797 00:05:10.009 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2576 1 2025-08-20 17:29:42.965 00:00:00.000 UDP 28.104.0.1:59368 -> 198.28.0.2:53 1 64 1 2025-08-20 17:29:42.965 00:00:00.000 UDP 28.104.0.1:38775 -> 198.28.0.2:53 1 64 1 2025-08-20 17:29:42.972 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38775 1 80 1 2025-08-20 17:29:42.973 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59368 1 109 1 2025-08-20 17:26:15.084 00:05:01.611 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-08-20 17:30:43.279 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55776 1 80 1 2025-08-20 17:30:43.279 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42529 1 109 1 2025-08-20 17:30:43.268 00:00:00.000 UDP 28.104.0.1:55776 -> 198.28.0.2:53 1 64 1 2025-08-20 17:30:43.268 00:00:00.000 UDP 28.104.0.1:42529 -> 198.28.0.2:53 1 64 1 2025-08-20 17:30:58.199 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-20 17:31:43.590 00:00:00.000 UDP 28.104.0.1:50561 -> 198.28.0.2:53 1 64 1 2025-08-20 17:31:43.589 00:00:00.000 UDP 28.104.0.1:35126 -> 198.28.0.2:53 1 64 1 2025-08-20 17:31:43.599 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50561 1 80 1 2025-08-20 17:31:43.599 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35126 1 109 1 2025-08-20 17:28:15.096 00:05:01.697 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-08-20 17:27:16.792 00:06:00.095 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-08-20 17:32:43.892 00:00:00.000 UDP 28.104.0.1:58001 -> 198.28.0.2:53 1 64 1 2025-08-20 17:32:43.892 00:00:00.000 UDP 28.104.0.1:56048 -> 198.28.0.2:53 1 64 1 2025-08-20 17:32:43.903 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56048 1 109 1 2025-08-20 17:32:43.903 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58001 1 80 1 2025-08-20 17:33:44.303 00:00:00.000 UDP 28.104.0.1:47577 -> 198.28.0.2:53 1 64 1 2025-08-20 17:33:44.303 00:00:00.000 UDP 28.104.0.1:39614 -> 198.28.0.2:53 1 64 1 2025-08-20 17:33:44.313 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47577 1 80 1 2025-08-20 17:33:44.312 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39614 1 109 1 2025-08-20 17:30:15.085 00:05:01.718 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-08-20 17:34:44.559 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52802 1 109 1 2025-08-20 17:34:44.559 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40554 1 80 1 2025-08-20 17:34:44.551 00:00:00.000 UDP 28.104.0.1:40554 -> 198.28.0.2:53 1 64 1 2025-08-20 17:34:44.550 00:00:00.000 UDP 28.104.0.1:52802 -> 198.28.0.2:53 1 64 1 2025-08-20 17:30:44.806 00:05:10.008 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2720 1 2025-08-20 17:30:16.729 00:06:00.065 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-08-20 17:31:15.135 00:05:01.551 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-08-20 17:35:44.846 00:00:00.000 UDP 28.104.0.1:53183 -> 198.28.0.2:53 1 64 1 2025-08-20 17:35:44.846 00:00:00.000 UDP 28.104.0.1:60853 -> 198.28.0.2:53 1 64 1 2025-08-20 17:35:44.857 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60853 1 109 1 2025-08-20 17:35:44.856 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53183 1 80 1 2025-08-20 17:35:58.407 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-20 17:32:15.085 00:05:01.611 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-08-20 17:36:45.147 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44523 1 109 1 2025-08-20 17:36:45.147 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50154 1 80 1 2025-08-20 17:36:45.136 00:00:00.000 UDP 28.104.0.1:50154 -> 198.28.0.2:53 1 64 1 2025-08-20 17:36:45.136 00:00:00.000 UDP 28.104.0.1:44523 -> 198.28.0.2:53 1 64 1 2025-08-20 17:37:45.397 00:00:00.000 UDP 28.104.0.1:50964 -> 198.28.0.2:53 1 64 1 2025-08-20 17:37:45.397 00:00:00.000 UDP 28.104.0.1:36957 -> 198.28.0.2:53 1 64 1 2025-08-20 17:37:45.408 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50964 1 109 1 2025-08-20 17:37:45.408 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36957 1 80 1 2025-08-20 17:34:15.095 00:05:01.699 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-08-20 17:38:45.685 00:00:00.000 UDP 28.104.0.1:33066 -> 198.28.0.2:53 1 64 1 2025-08-20 17:38:45.686 00:00:00.000 UDP 28.104.0.1:49219 -> 198.28.0.2:53 1 64 1 2025-08-20 17:38:45.697 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33066 1 80 1 2025-08-20 17:38:45.697 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49219 1 109 1 2025-08-20 17:34:16.793 00:06:00.096 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-08-20 17:39:45.990 00:00:00.000 UDP 28.104.0.1:48963 -> 198.28.0.2:53 1 64 1 2025-08-20 17:39:45.990 00:00:00.000 UDP 28.104.0.1:54239 -> 198.28.0.2:53 1 64 1 2025-08-20 17:39:46.001 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48963 1 80 1 2025-08-20 17:39:46.001 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54239 1 109 1 2025-08-20 17:36:04.815 00:05:10.007 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2516 1 2025-08-20 17:36:15.086 00:05:01.720 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-08-20 17:40:46.255 00:00:00.000 UDP 28.104.0.1:56944 -> 198.28.0.2:53 1 64 1 2025-08-20 17:40:46.255 00:00:00.000 UDP 28.104.0.1:38982 -> 198.28.0.2:53 1 64 1 2025-08-20 17:40:46.267 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56944 1 109 1 2025-08-20 17:40:46.267 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38982 1 80 1 2025-08-20 17:40:58.340 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-20 17:37:15.137 00:05:01.551 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-08-20 17:41:46.543 00:00:00.000 UDP 28.104.0.1:56006 -> 198.28.0.2:53 1 64 1 2025-08-20 17:41:46.543 00:00:00.000 UDP 28.104.0.1:59992 -> 198.28.0.2:53 1 64 1 2025-08-20 17:41:46.553 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59992 1 80 1 2025-08-20 17:41:46.553 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56006 1 109 1 2025-08-20 17:37:16.732 00:06:00.065 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-08-20 17:38:15.086 00:05:01.611 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-08-20 17:42:46.796 00:00:00.000 UDP 28.104.0.1:41807 -> 198.28.0.2:53 1 64 1 2025-08-20 17:42:46.796 00:00:00.000 UDP 28.104.0.1:57310 -> 198.28.0.2:53 1 64 1 2025-08-20 17:42:46.806 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41807 1 80 1 2025-08-20 17:42:46.806 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57310 1 109 1 2025-08-20 17:43:47.094 00:00:00.000 UDP 28.104.0.1:37560 -> 198.28.0.2:53 1 64 1 2025-08-20 17:43:47.094 00:00:00.000 UDP 28.104.0.1:42004 -> 198.28.0.2:53 1 64 1 2025-08-20 17:43:47.105 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37560 1 109 1 2025-08-20 17:43:47.105 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42004 1 80 1 2025-08-20 17:40:15.096 00:05:01.700 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-08-20 17:44:47.346 00:00:00.000 UDP 28.104.0.1:37561 -> 198.28.0.2:53 1 64 1 2025-08-20 17:44:47.346 00:00:00.000 UDP 28.104.0.1:36314 -> 198.28.0.2:53 1 64 1 2025-08-20 17:44:47.357 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37561 1 80 1 2025-08-20 17:44:47.357 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36314 1 109 1 2025-08-20 17:41:24.822 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2480 1 2025-08-20 17:45:47.637 00:00:00.000 UDP 28.104.0.1:43577 -> 198.28.0.2:53 1 64 1 2025-08-20 17:45:47.635 00:00:00.000 UDP 28.104.0.1:60755 -> 198.28.0.2:53 1 64 1 2025-08-20 17:45:47.648 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43577 1 109 1 2025-08-20 17:45:47.646 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60755 1 80 1 2025-08-20 17:45:58.360 00:00:00.027 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-20 17:41:16.795 00:06:00.098 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-08-20 17:42:15.086 00:05:01.722 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-08-20 17:46:47.891 00:00:00.000 UDP 28.104.0.1:37109 -> 198.28.0.2:53 1 64 1 2025-08-20 17:46:47.891 00:00:00.000 UDP 28.104.0.1:52113 -> 198.28.0.2:53 1 64 1 2025-08-20 17:46:47.902 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37109 1 80 1 2025-08-20 17:46:47.902 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52113 1 109 1 2025-08-20 17:43:15.137 00:05:01.552 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-08-20 17:47:48.194 00:00:00.000 UDP 28.104.0.1:34763 -> 198.28.0.2:53 1 64 1 2025-08-20 17:47:48.193 00:00:00.000 UDP 28.104.0.1:39486 -> 198.28.0.2:53 1 64 1 2025-08-20 17:47:48.205 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39486 1 109 1 2025-08-20 17:47:48.205 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34763 1 80 1 2025-08-20 17:44:15.088 00:05:01.612 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-08-20 17:48:48.448 00:00:00.000 UDP 28.104.0.1:43952 -> 198.28.0.2:53 1 64 1 2025-08-20 17:48:48.448 00:00:00.000 UDP 28.104.0.1:60623 -> 198.28.0.2:53 1 64 1 2025-08-20 17:48:48.457 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43952 1 80 1 2025-08-20 17:48:48.457 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60623 1 109 1 2025-08-20 17:44:16.734 00:06:00.066 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-08-20 17:49:48.748 00:00:00.000 UDP 28.104.0.1:54356 -> 198.28.0.2:53 1 64 1 2025-08-20 17:49:48.748 00:00:00.000 UDP 28.104.0.1:60520 -> 198.28.0.2:53 1 64 1 2025-08-20 17:49:48.757 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54356 1 80 1 2025-08-20 17:49:48.757 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60520 1 109 1 2025-08-20 17:46:15.097 00:05:01.703 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-08-20 17:50:49.052 00:00:00.000 UDP 28.104.0.1:36773 -> 198.28.0.2:53 1 64 1 2025-08-20 17:50:49.052 00:00:00.000 UDP 28.104.0.1:41846 -> 198.28.0.2:53 1 64 1 2025-08-20 17:46:44.828 00:05:10.007 OSPF 28.0.2.2:0 -> 224.0.0.5:0 38 2676 1 2025-08-20 17:50:49.063 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41846 1 109 1 2025-08-20 17:50:49.063 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36773 1 80 1 2025-08-20 17:50:58.508 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-20 17:51:49.359 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49679 1 80 1 2025-08-20 17:51:49.359 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54925 1 109 1 2025-08-20 17:51:49.349 00:00:00.000 UDP 28.104.0.1:49679 -> 198.28.0.2:53 1 64 1 2025-08-20 17:51:49.349 00:00:00.000 UDP 28.104.0.1:54925 -> 198.28.0.2:53 1 64 1 2025-08-20 17:48:15.087 00:05:01.722 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-08-20 17:52:49.618 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58920 1 109 1 2025-08-20 17:52:49.617 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54313 1 80 1 2025-08-20 17:52:49.608 00:00:00.000 UDP 28.104.0.1:58920 -> 198.28.0.2:53 1 64 1 2025-08-20 17:52:49.607 00:00:00.000 UDP 28.104.0.1:54313 -> 198.28.0.2:53 1 64 1 2025-08-20 17:49:15.137 00:05:01.554 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-08-20 17:48:16.797 00:06:00.097 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-08-20 17:53:49.911 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45279 1 80 1 2025-08-20 17:53:49.911 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53335 1 109 1 2025-08-20 17:53:49.902 00:00:00.000 UDP 28.104.0.1:53335 -> 198.28.0.2:53 1 64 1 2025-08-20 17:53:49.902 00:00:00.000 UDP 28.104.0.1:45279 -> 198.28.0.2:53 1 64 1 2025-08-20 17:50:15.087 00:05:01.614 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-08-20 17:54:50.159 00:00:00.000 UDP 28.104.0.1:43650 -> 198.28.0.2:53 1 64 1 2025-08-20 17:54:50.159 00:00:00.000 UDP 28.104.0.1:59749 -> 198.28.0.2:53 1 64 1 2025-08-20 17:54:50.169 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43650 1 80 1 2025-08-20 17:54:50.169 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59749 1 109 1 2025-08-20 17:55:50.448 00:00:00.000 UDP 28.104.0.1:50749 -> 198.28.0.2:53 1 64 1 2025-08-20 17:55:50.448 00:00:00.000 UDP 28.104.0.1:36815 -> 198.28.0.2:53 1 64 1 2025-08-20 17:55:50.459 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50749 1 109 1 2025-08-20 17:55:50.459 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36815 1 80 1 2025-08-20 17:55:58.680 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-08-20 17:51:16.735 00:06:00.065 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-08-20 17:52:15.100 00:05:01.700 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-08-20 17:52:04.835 00:05:10.067 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2496 1 2025-08-20 17:56:50.749 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33856 1 80 1 2025-08-20 17:56:50.749 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49508 1 109 1 2025-08-20 17:56:50.740 00:00:00.000 UDP 28.104.0.1:49508 -> 198.28.0.2:53 1 64 1 2025-08-20 17:56:50.740 00:00:00.000 UDP 28.104.0.1:33856 -> 198.28.0.2:53 1 64 1 2025-08-20 17:57:50.986 00:00:00.000 UDP 28.104.0.1:60782 -> 198.28.0.2:53 1 64 1 2025-08-20 17:57:50.986 00:00:00.000 UDP 28.104.0.1:49226 -> 198.28.0.2:53 1 64 1 2025-08-20 17:57:50.996 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49226 1 109 1 2025-08-20 17:57:50.996 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60782 1 80 1 2025-08-20 17:54:15.091 00:05:01.721 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-08-20 17:58:51.286 00:00:00.000 UDP 28.104.0.1:33866 -> 198.28.0.2:53 1 64 1 2025-08-20 17:58:51.286 00:00:00.000 UDP 28.104.0.1:45901 -> 198.28.0.2:53 1 64 1 2025-08-20 17:58:51.297 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45901 1 80 1 2025-08-20 17:58:51.297 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33866 1 109 1 Summary: total flows: 320, total bytes: 94601, total packets: 1394, avg bps: 196, avg pps: 0, avg bpp: 67 Time window: 2025-08-20 16:55:15 - 2025-08-20 17:59:16 Total flows processed: 320, passed: 320, Blocks skipped: 0, Bytes read: 33344 Sys: 0.0019s User: 0.0038s Wall: 0.0039s flows/second: 81132.6 Runtime: 0.0040s