Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-01 10:59:00.096 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39498 1 80 1 2025-09-01 10:59:00.097 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36020 1 109 1 2025-09-01 10:59:00.087 00:00:00.000 UDP 28.104.0.1:39498 -> 198.28.0.2:53 1 64 1 2025-09-01 10:59:00.088 00:00:00.000 UDP 28.104.0.1:36020 -> 198.28.0.2:53 1 64 1 2025-09-01 11:00:00.388 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47419 1 109 1 2025-09-01 11:00:00.388 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50064 1 80 1 2025-09-01 11:00:00.378 00:00:00.000 UDP 28.104.0.1:50064 -> 198.28.0.2:53 1 64 1 2025-09-01 11:00:00.378 00:00:00.000 UDP 28.104.0.1:47419 -> 198.28.0.2:53 1 64 1 2025-09-01 10:56:21.867 00:05:01.272 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-01 10:56:21.907 00:05:01.067 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-01 11:01:00.749 00:00:00.000 UDP 28.104.0.1:42512 -> 198.28.0.2:53 1 64 1 2025-09-01 11:01:00.749 00:00:00.000 UDP 28.104.0.1:52658 -> 198.28.0.2:53 1 64 1 2025-09-01 11:01:00.760 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52658 1 109 1 2025-09-01 11:01:00.760 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42512 1 80 1 2025-09-01 10:56:58.223 00:05:10.007 OSPF 28.0.2.2:0 -> 224.0.0.5:0 33 2296 1 2025-09-01 10:57:21.857 00:05:01.317 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-01 10:57:23.140 00:04:00.028 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-09-01 10:57:23.140 00:04:00.144 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-01 11:01:37.259 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-01 11:02:01.048 00:00:00.000 UDP 28.104.0.1:35179 -> 198.28.0.2:53 1 64 1 2025-09-01 11:02:01.048 00:00:00.000 UDP 28.104.0.1:38961 -> 198.28.0.2:53 1 64 1 2025-09-01 11:02:01.058 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38961 1 109 1 2025-09-01 11:02:01.058 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35179 1 80 1 2025-09-01 10:58:21.857 00:05:01.125 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-01 11:03:01.370 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51983 1 109 1 2025-09-01 11:03:01.370 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57347 1 80 1 2025-09-01 11:03:01.359 00:00:00.000 UDP 28.104.0.1:57347 -> 198.28.0.2:53 1 64 1 2025-09-01 11:03:01.359 00:00:00.000 UDP 28.104.0.1:51983 -> 198.28.0.2:53 1 64 1 2025-09-01 11:04:01.646 00:00:00.000 UDP 28.104.0.1:34060 -> 198.28.0.2:53 1 64 1 2025-09-01 11:04:01.646 00:00:00.000 UDP 28.104.0.1:53917 -> 198.28.0.2:53 1 64 1 2025-09-01 11:04:01.655 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34060 1 80 1 2025-09-01 11:04:01.656 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53917 1 109 1 2025-09-01 11:05:01.953 00:00:00.000 UDP 28.104.0.1:36175 -> 198.28.0.2:53 1 64 1 2025-09-01 11:05:01.953 00:00:00.000 UDP 28.104.0.1:49416 -> 198.28.0.2:53 1 64 1 2025-09-01 11:05:01.963 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36175 1 80 1 2025-09-01 11:05:01.963 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49416 1 109 1 2025-09-01 11:06:02.252 00:00:00.000 UDP 28.104.0.1:42209 -> 198.28.0.2:53 1 64 1 2025-09-01 11:06:02.252 00:00:00.000 UDP 28.104.0.1:51190 -> 198.28.0.2:53 1 64 1 2025-09-01 11:06:02.263 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42209 1 80 1 2025-09-01 11:06:02.263 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51190 1 109 1 2025-09-01 11:02:21.866 00:05:01.273 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-01 11:02:21.907 00:05:01.064 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-01 11:02:18.230 00:05:10.008 OSPF 28.0.2.2:0 -> 224.0.0.5:0 38 2744 1 2025-09-01 11:06:37.318 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-01 11:07:02.553 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40713 1 109 1 2025-09-01 11:07:02.553 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60013 1 80 1 2025-09-01 11:07:02.542 00:00:00.000 UDP 28.104.0.1:60013 -> 198.28.0.2:53 1 64 1 2025-09-01 11:07:02.542 00:00:00.000 UDP 28.104.0.1:40713 -> 198.28.0.2:53 1 64 1 2025-09-01 11:02:23.164 00:06:00.004 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-09-01 11:02:23.163 00:06:00.121 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-09-01 11:03:21.858 00:05:01.292 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-01 11:08:02.805 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60834 1 80 1 2025-09-01 11:08:02.805 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51655 1 109 1 2025-09-01 11:08:02.795 00:00:00.000 UDP 28.104.0.1:60834 -> 198.28.0.2:53 1 64 1 2025-09-01 11:08:02.795 00:00:00.000 UDP 28.104.0.1:51655 -> 198.28.0.2:53 1 64 1 2025-09-01 11:04:21.858 00:05:01.125 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-01 11:09:03.063 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53863 1 80 1 2025-09-01 11:09:03.064 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39846 1 109 1 2025-09-01 11:09:03.054 00:00:00.000 UDP 28.104.0.1:39846 -> 198.28.0.2:53 1 64 1 2025-09-01 11:09:03.054 00:00:00.000 UDP 28.104.0.1:53863 -> 198.28.0.2:53 1 64 1 2025-09-01 11:10:03.351 00:00:00.000 UDP 28.104.0.1:41120 -> 198.28.0.2:53 1 64 1 2025-09-01 11:10:03.352 00:00:00.000 UDP 28.104.0.1:49342 -> 198.28.0.2:53 1 64 1 2025-09-01 11:10:03.363 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41120 1 80 1 2025-09-01 11:10:03.363 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49342 1 109 1 2025-09-01 11:11:03.660 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54534 1 80 1 2025-09-01 11:11:03.659 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46849 1 109 1 2025-09-01 11:11:03.649 00:00:00.000 UDP 28.104.0.1:54534 -> 198.28.0.2:53 1 64 1 2025-09-01 11:11:03.648 00:00:00.000 UDP 28.104.0.1:46849 -> 198.28.0.2:53 1 64 1 2025-09-01 11:11:37.688 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-01 11:07:38.240 00:05:10.003 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2336 1 2025-09-01 11:12:03.943 00:00:00.000 UDP 28.104.0.1:48566 -> 198.28.0.2:53 1 64 1 2025-09-01 11:12:03.944 00:00:00.000 UDP 28.104.0.1:60439 -> 198.28.0.2:53 1 64 1 2025-09-01 11:12:03.955 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60439 1 80 1 2025-09-01 11:12:03.955 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48566 1 109 1 2025-09-01 11:08:21.871 00:05:01.272 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-01 11:08:21.911 00:05:01.066 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-01 11:13:04.243 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34295 1 80 1 2025-09-01 11:13:04.243 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53901 1 109 1 2025-09-01 11:13:04.233 00:00:00.000 UDP 28.104.0.1:53901 -> 198.28.0.2:53 1 64 1 2025-09-01 11:13:04.233 00:00:00.000 UDP 28.104.0.1:34295 -> 198.28.0.2:53 1 64 1 2025-09-01 11:09:21.859 00:05:01.292 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-01 11:14:04.567 00:00:00.000 UDP 28.104.0.1:39477 -> 198.28.0.2:53 1 64 1 2025-09-01 11:14:04.567 00:00:00.000 UDP 28.104.0.1:43517 -> 198.28.0.2:53 1 64 1 2025-09-01 11:14:04.577 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39477 1 80 1 2025-09-01 11:14:04.577 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43517 1 109 1 2025-09-01 11:09:23.139 00:06:00.050 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-09-01 11:09:23.139 00:06:00.145 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-09-01 11:10:21.859 00:05:01.128 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-01 11:15:04.861 00:00:00.000 UDP 28.104.0.1:38328 -> 198.28.0.2:53 1 64 1 2025-09-01 11:15:04.861 00:00:00.000 UDP 28.104.0.1:33537 -> 198.28.0.2:53 1 64 1 2025-09-01 11:15:04.870 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38328 1 109 1 2025-09-01 11:15:04.870 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33537 1 80 1 2025-09-01 11:16:05.150 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56955 1 80 1 2025-09-01 11:16:05.152 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41713 1 109 1 2025-09-01 11:16:05.140 00:00:00.000 UDP 28.104.0.1:41713 -> 198.28.0.2:53 1 64 1 2025-09-01 11:16:05.140 00:00:00.000 UDP 28.104.0.1:56955 -> 198.28.0.2:53 1 64 1 2025-09-01 11:16:37.693 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-01 11:17:05.446 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54987 1 109 1 2025-09-01 11:17:05.446 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58268 1 80 1 2025-09-01 11:17:05.435 00:00:00.000 UDP 28.104.0.1:54987 -> 198.28.0.2:53 1 64 1 2025-09-01 11:17:05.435 00:00:00.000 UDP 28.104.0.1:58268 -> 198.28.0.2:53 1 64 1 2025-09-01 11:12:58.241 00:05:10.024 OSPF 28.0.2.2:0 -> 224.0.0.5:0 40 2980 1 2025-09-01 11:18:05.740 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47631 1 80 1 2025-09-01 11:18:05.739 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44119 1 109 1 2025-09-01 11:18:05.729 00:00:00.000 UDP 28.104.0.1:47631 -> 198.28.0.2:53 1 64 1 2025-09-01 11:18:05.727 00:00:00.000 UDP 28.104.0.1:44119 -> 198.28.0.2:53 1 64 1 2025-09-01 11:16:23.142 00:02:00.041 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-09-01 11:14:21.910 00:05:01.068 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-01 11:16:23.142 00:02:00.144 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-09-01 11:14:21.870 00:05:01.279 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-01 11:19:06.083 00:00:00.000 UDP 28.104.0.1:58167 -> 198.28.0.2:53 1 64 1 2025-09-01 11:19:06.083 00:00:00.000 UDP 28.104.0.1:42533 -> 198.28.0.2:53 1 64 1 2025-09-01 11:19:06.093 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42533 1 109 1 2025-09-01 11:19:06.093 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58167 1 80 1 2025-09-01 11:15:21.861 00:05:01.299 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-01 11:20:06.379 00:00:00.000 UDP 28.104.0.1:51954 -> 198.28.0.2:53 1 64 1 2025-09-01 11:20:06.379 00:00:00.000 UDP 28.104.0.1:47535 -> 198.28.0.2:53 1 64 1 2025-09-01 11:20:06.391 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47535 1 109 1 2025-09-01 11:20:06.391 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51954 1 80 1 2025-09-01 11:16:21.861 00:05:01.128 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-01 11:21:06.686 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57925 1 80 1 2025-09-01 11:21:06.685 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41467 1 109 1 2025-09-01 11:21:06.675 00:00:00.000 UDP 28.104.0.1:41467 -> 198.28.0.2:53 1 64 1 2025-09-01 11:21:06.675 00:00:00.000 UDP 28.104.0.1:57925 -> 198.28.0.2:53 1 64 1 2025-09-01 11:21:37.636 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-01 11:22:06.975 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51896 1 80 1 2025-09-01 11:22:06.975 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59464 1 109 1 2025-09-01 11:22:06.965 00:00:00.000 UDP 28.104.0.1:51896 -> 198.28.0.2:53 1 64 1 2025-09-01 11:22:06.965 00:00:00.000 UDP 28.104.0.1:59464 -> 198.28.0.2:53 1 64 1 2025-09-01 11:18:18.264 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2416 1 2025-09-01 11:23:07.257 00:00:00.000 UDP 28.104.0.1:52108 -> 198.28.0.2:53 1 64 1 2025-09-01 11:23:07.257 00:00:00.000 UDP 28.104.0.1:60347 -> 198.28.0.2:53 1 64 1 2025-09-01 11:23:07.269 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60347 1 80 1 2025-09-01 11:23:07.269 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52108 1 109 1 2025-09-01 11:19:23.149 00:04:00.138 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-01 11:19:23.149 00:04:00.036 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-09-01 11:24:07.548 00:00:00.000 UDP 28.104.0.1:50031 -> 198.28.0.2:53 1 64 1 2025-09-01 11:24:07.548 00:00:00.000 UDP 28.104.0.1:48865 -> 198.28.0.2:53 1 64 1 2025-09-01 11:24:07.558 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50031 1 109 1 2025-09-01 11:24:07.558 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48865 1 80 1 2025-09-01 11:20:21.871 00:05:01.280 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-01 11:20:21.911 00:05:01.076 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-01 11:25:07.857 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60897 1 80 1 2025-09-01 11:25:07.857 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49692 1 109 1 2025-09-01 11:25:07.846 00:00:00.000 UDP 28.104.0.1:60897 -> 198.28.0.2:53 1 64 1 2025-09-01 11:25:07.846 00:00:00.000 UDP 28.104.0.1:49692 -> 198.28.0.2:53 1 64 1 2025-09-01 11:21:21.861 00:05:01.301 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-01 11:26:08.145 00:00:00.000 UDP 28.104.0.1:56066 -> 198.28.0.2:53 1 64 1 2025-09-01 11:26:08.145 00:00:00.000 UDP 28.104.0.1:53570 -> 198.28.0.2:53 1 64 1 2025-09-01 11:26:08.155 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56066 1 80 1 2025-09-01 11:26:08.155 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53570 1 109 1 2025-09-01 11:22:21.862 00:05:01.136 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-01 11:26:37.827 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-01 11:27:08.406 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58867 1 80 1 2025-09-01 11:27:08.406 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59669 1 109 1 2025-09-01 11:27:08.395 00:00:00.000 UDP 28.104.0.1:58867 -> 198.28.0.2:53 1 64 1 2025-09-01 11:27:08.395 00:00:00.000 UDP 28.104.0.1:59669 -> 198.28.0.2:53 1 64 1 2025-09-01 11:23:38.270 00:05:10.010 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2572 1 2025-09-01 11:28:08.688 00:00:00.000 UDP 28.104.0.1:60625 -> 198.28.0.2:53 1 64 1 2025-09-01 11:28:08.688 00:00:00.000 UDP 28.104.0.1:48966 -> 198.28.0.2:53 1 64 1 2025-09-01 11:28:08.698 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60625 1 80 1 2025-09-01 11:28:08.698 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48966 1 109 1 2025-09-01 11:24:23.150 00:04:00.037 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-09-01 11:24:23.150 00:04:00.138 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-01 11:29:08.946 00:00:00.000 UDP 28.104.0.1:41713 -> 198.28.0.2:53 1 64 1 2025-09-01 11:29:08.946 00:00:00.000 UDP 28.104.0.1:59710 -> 198.28.0.2:53 1 64 1 2025-09-01 11:29:08.956 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59710 1 80 1 2025-09-01 11:29:08.956 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41713 1 109 1 2025-09-01 11:30:09.274 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54643 1 109 1 2025-09-01 11:30:09.273 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35318 1 80 1 2025-09-01 11:30:09.263 00:00:00.000 UDP 28.104.0.1:35318 -> 198.28.0.2:53 1 64 1 2025-09-01 11:30:09.263 00:00:00.000 UDP 28.104.0.1:54643 -> 198.28.0.2:53 1 64 1 2025-09-01 11:26:21.873 00:05:01.286 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-01 11:26:21.913 00:05:01.079 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-01 11:31:09.566 00:00:00.000 UDP 28.104.0.1:54884 -> 198.28.0.2:53 1 64 1 2025-09-01 11:31:09.566 00:00:00.000 UDP 28.104.0.1:60389 -> 198.28.0.2:53 1 64 1 2025-09-01 11:31:09.575 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54884 1 80 1 2025-09-01 11:31:09.576 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60389 1 109 1 2025-09-01 11:27:21.861 00:05:01.302 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-01 11:31:37.900 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-01 11:32:09.817 00:00:00.000 UDP 28.104.0.1:58582 -> 198.28.0.2:53 1 64 1 2025-09-01 11:32:09.817 00:00:00.000 UDP 28.104.0.1:43526 -> 198.28.0.2:53 1 64 1 2025-09-01 11:32:09.827 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58582 1 80 1 2025-09-01 11:32:09.827 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43526 1 109 1 2025-09-01 11:28:21.862 00:05:01.150 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-01 11:28:58.280 00:05:10.002 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2320 1 2025-09-01 11:33:10.119 00:00:00.000 UDP 28.104.0.1:38357 -> 198.28.0.2:53 1 64 1 2025-09-01 11:33:10.119 00:00:00.000 UDP 28.104.0.1:45004 -> 198.28.0.2:53 1 64 1 2025-09-01 11:33:10.130 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45004 1 109 1 2025-09-01 11:33:10.130 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38357 1 80 1 2025-09-01 11:29:23.152 00:04:00.045 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-09-01 11:29:23.152 00:04:00.139 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-01 11:34:10.419 00:00:00.000 UDP 28.104.0.1:36362 -> 198.28.0.2:53 1 64 1 2025-09-01 11:34:10.419 00:00:00.000 UDP 28.104.0.1:56425 -> 198.28.0.2:53 1 64 1 2025-09-01 11:34:10.428 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56425 1 80 1 2025-09-01 11:34:10.428 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36362 1 109 1 2025-09-01 11:35:10.683 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39130 1 109 1 2025-09-01 11:35:10.683 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44696 1 80 1 2025-09-01 11:35:10.673 00:00:00.000 UDP 28.104.0.1:44696 -> 198.28.0.2:53 1 64 1 2025-09-01 11:35:10.673 00:00:00.000 UDP 28.104.0.1:39130 -> 198.28.0.2:53 1 64 1 2025-09-01 11:36:10.968 00:00:00.000 UDP 28.104.0.1:60462 -> 198.28.0.2:53 1 64 1 2025-09-01 11:36:10.968 00:00:00.000 UDP 28.104.0.1:36695 -> 198.28.0.2:53 1 64 1 2025-09-01 11:36:10.978 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36695 1 109 1 2025-09-01 11:36:10.978 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60462 1 80 1 2025-09-01 11:32:21.873 00:05:01.280 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-01 11:32:21.913 00:05:01.089 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-01 11:36:37.957 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-01 11:37:11.277 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53636 1 80 1 2025-09-01 11:37:11.277 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57526 1 109 1 2025-09-01 11:37:11.267 00:00:00.000 UDP 28.104.0.1:57526 -> 198.28.0.2:53 1 64 1 2025-09-01 11:37:11.267 00:00:00.000 UDP 28.104.0.1:53636 -> 198.28.0.2:53 1 64 1 2025-09-01 11:33:21.863 00:05:01.300 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-01 11:38:11.544 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48355 1 80 1 2025-09-01 11:38:11.544 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47182 1 109 1 2025-09-01 11:38:11.534 00:00:00.000 UDP 28.104.0.1:47182 -> 198.28.0.2:53 1 64 1 2025-09-01 11:38:11.534 00:00:00.000 UDP 28.104.0.1:48355 -> 198.28.0.2:53 1 64 1 2025-09-01 11:34:23.153 00:04:00.045 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-09-01 11:34:23.153 00:04:00.139 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-01 11:34:21.865 00:05:01.149 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-01 11:34:18.284 00:05:10.003 OSPF 28.0.2.2:0 -> 224.0.0.5:0 38 2760 1 2025-09-01 11:39:11.828 00:00:00.000 UDP 28.104.0.1:50591 -> 198.28.0.2:53 1 64 1 2025-09-01 11:39:11.828 00:00:00.000 UDP 28.104.0.1:37594 -> 198.28.0.2:53 1 64 1 2025-09-01 11:39:11.838 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50591 1 109 1 2025-09-01 11:39:11.838 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37594 1 80 1 2025-09-01 11:40:12.129 00:00:00.000 UDP 28.104.0.1:45504 -> 198.28.0.2:53 1 64 1 2025-09-01 11:40:12.129 00:00:00.000 UDP 28.104.0.1:53889 -> 198.28.0.2:53 1 64 1 2025-09-01 11:40:12.139 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45504 1 80 1 2025-09-01 11:40:12.139 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53889 1 109 1 2025-09-01 11:41:12.455 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41836 1 109 1 2025-09-01 11:41:12.455 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46354 1 80 1 2025-09-01 11:41:12.444 00:00:00.000 UDP 28.104.0.1:46354 -> 198.28.0.2:53 1 64 1 2025-09-01 11:41:12.444 00:00:00.000 UDP 28.104.0.1:41836 -> 198.28.0.2:53 1 64 1 2025-09-01 11:41:38.180 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-01 11:42:12.709 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37008 1 109 1 2025-09-01 11:42:12.709 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40263 1 80 1 2025-09-01 11:42:12.700 00:00:00.000 UDP 28.104.0.1:37008 -> 198.28.0.2:53 1 64 1 2025-09-01 11:42:12.700 00:00:00.000 UDP 28.104.0.1:40263 -> 198.28.0.2:53 1 64 1 2025-09-01 11:38:21.875 00:05:01.284 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-01 11:38:21.915 00:05:01.089 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-01 11:43:13.007 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52109 1 109 1 2025-09-01 11:43:13.007 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51438 1 80 1 2025-09-01 11:43:12.996 00:00:00.000 UDP 28.104.0.1:51438 -> 198.28.0.2:53 1 64 1 2025-09-01 11:43:12.996 00:00:00.000 UDP 28.104.0.1:52109 -> 198.28.0.2:53 1 64 1 2025-09-01 11:39:21.867 00:05:01.302 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-01 11:39:38.287 00:05:10.002 OSPF 28.0.2.2:0 -> 224.0.0.5:0 39 2868 1 2025-09-01 11:44:13.361 00:00:00.000 UDP 28.104.0.1:52963 -> 198.28.0.2:53 1 64 1 2025-09-01 11:44:13.361 00:00:00.000 UDP 28.104.0.1:50053 -> 198.28.0.2:53 1 64 1 2025-09-01 11:44:13.370 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50053 1 80 1 2025-09-01 11:44:13.370 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52963 1 109 1 2025-09-01 11:40:21.868 00:05:01.147 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-01 11:39:23.155 00:06:00.140 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-09-01 11:39:23.155 00:06:00.046 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-09-01 11:45:13.671 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37486 1 109 1 2025-09-01 11:45:13.671 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34133 1 80 1 2025-09-01 11:45:13.661 00:00:00.000 UDP 28.104.0.1:37486 -> 198.28.0.2:53 1 64 1 2025-09-01 11:45:13.661 00:00:00.000 UDP 28.104.0.1:34133 -> 198.28.0.2:53 1 64 1 2025-09-01 11:46:13.967 00:00:00.000 UDP 28.104.0.1:44639 -> 198.28.0.2:53 1 64 1 2025-09-01 11:46:13.967 00:00:00.000 UDP 28.104.0.1:59066 -> 198.28.0.2:53 1 64 1 2025-09-01 11:46:13.978 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44639 1 80 1 2025-09-01 11:46:13.978 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59066 1 109 1 2025-09-01 11:46:38.076 00:00:00.043 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-01 11:47:14.289 00:00:00.000 UDP 28.104.0.1:45065 -> 198.28.0.2:53 1 64 1 2025-09-01 11:47:14.289 00:00:00.000 UDP 28.104.0.1:53274 -> 198.28.0.2:53 1 64 1 2025-09-01 11:47:14.299 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53274 1 109 1 2025-09-01 11:47:14.299 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45065 1 80 1 2025-09-01 11:48:14.594 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54324 1 109 1 2025-09-01 11:48:14.594 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41426 1 80 1 2025-09-01 11:48:14.584 00:00:00.000 UDP 28.104.0.1:41426 -> 198.28.0.2:53 1 64 1 2025-09-01 11:48:14.584 00:00:00.000 UDP 28.104.0.1:54324 -> 198.28.0.2:53 1 64 1 2025-09-01 11:44:21.917 00:05:01.094 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-01 11:44:21.877 00:05:01.283 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-01 11:49:14.856 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55730 1 109 1 2025-09-01 11:49:14.856 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60894 1 80 1 2025-09-01 11:44:58.289 00:05:10.024 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2496 1 2025-09-01 11:49:14.846 00:00:00.000 UDP 28.104.0.1:60894 -> 198.28.0.2:53 1 64 1 2025-09-01 11:49:14.846 00:00:00.000 UDP 28.104.0.1:55730 -> 198.28.0.2:53 1 64 1 2025-09-01 11:45:21.868 00:05:01.303 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-01 11:50:15.149 00:00:00.000 UDP 28.104.0.1:40149 -> 198.28.0.2:53 1 64 1 2025-09-01 11:50:15.149 00:00:00.000 UDP 28.104.0.1:43402 -> 198.28.0.2:53 1 64 1 2025-09-01 11:50:15.160 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43402 1 109 1 2025-09-01 11:50:15.160 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40149 1 80 1 2025-09-01 11:46:23.160 00:04:00.053 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-09-01 11:46:23.160 00:04:00.145 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-01 11:46:21.868 00:05:01.154 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-01 11:51:15.446 00:00:00.000 UDP 28.104.0.1:54012 -> 198.28.0.2:53 1 64 1 2025-09-01 11:51:15.445 00:00:00.000 UDP 28.104.0.1:33918 -> 198.28.0.2:53 1 64 1 2025-09-01 11:51:15.456 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33918 1 80 1 2025-09-01 11:51:15.456 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54012 1 109 1 2025-09-01 11:51:38.217 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-01 11:52:15.707 00:00:00.000 UDP 28.104.0.1:54662 -> 198.28.0.2:53 1 64 1 2025-09-01 11:52:15.707 00:00:00.000 UDP 28.104.0.1:54382 -> 198.28.0.2:53 1 64 1 2025-09-01 11:52:15.717 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54382 1 109 1 2025-09-01 11:52:15.717 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54662 1 80 1 2025-09-01 11:53:16.018 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37564 1 109 1 2025-09-01 11:53:16.022 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56471 1 80 1 2025-09-01 11:53:16.007 00:00:00.000 UDP 28.104.0.1:56471 -> 198.28.0.2:53 1 64 1 2025-09-01 11:53:16.007 00:00:00.000 UDP 28.104.0.1:37564 -> 198.28.0.2:53 1 64 1 2025-09-01 11:54:16.280 00:00:00.000 UDP 28.104.0.1:57674 -> 198.28.0.2:53 1 64 1 2025-09-01 11:54:16.280 00:00:00.000 UDP 28.104.0.1:46330 -> 198.28.0.2:53 1 64 1 2025-09-01 11:54:16.290 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46330 1 109 1 2025-09-01 11:54:16.291 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57674 1 80 1 2025-09-01 11:50:21.880 00:05:01.282 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-01 11:50:21.920 00:05:01.092 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-01 11:50:18.313 00:05:10.003 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2572 1 2025-09-01 11:55:16.536 00:00:00.000 UDP 28.104.0.1:34925 -> 198.28.0.2:53 1 64 1 2025-09-01 11:55:16.536 00:00:00.000 UDP 28.104.0.1:59861 -> 198.28.0.2:53 1 64 1 2025-09-01 11:55:16.545 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34925 1 80 1 2025-09-01 11:55:16.545 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59861 1 109 1 2025-09-01 11:51:21.871 00:05:01.302 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-01 11:51:23.162 00:04:00.053 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-09-01 11:51:23.162 00:04:00.145 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-01 11:56:16.840 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40883 1 109 1 2025-09-01 11:56:16.840 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48491 1 80 1 2025-09-01 11:56:16.831 00:00:00.000 UDP 28.104.0.1:40883 -> 198.28.0.2:53 1 64 1 2025-09-01 11:56:16.831 00:00:00.000 UDP 28.104.0.1:48491 -> 198.28.0.2:53 1 64 1 2025-09-01 11:52:21.871 00:05:01.152 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-01 11:56:38.324 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-01 11:57:17.106 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41190 1 109 1 2025-09-01 11:57:17.106 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60367 1 80 1 2025-09-01 11:57:17.096 00:00:00.000 UDP 28.104.0.1:60367 -> 198.28.0.2:53 1 64 1 2025-09-01 11:57:17.096 00:00:00.000 UDP 28.104.0.1:41190 -> 198.28.0.2:53 1 64 1 2025-09-01 11:58:17.396 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43825 1 109 1 2025-09-01 11:58:17.396 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34537 1 80 1 2025-09-01 11:58:17.387 00:00:00.000 UDP 28.104.0.1:34537 -> 198.28.0.2:53 1 64 1 2025-09-01 11:58:17.387 00:00:00.000 UDP 28.104.0.1:43825 -> 198.28.0.2:53 1 64 1 Summary: total flows: 325, total bytes: 94438, total packets: 1391, avg bps: 203, avg pps: 0, avg bpp: 67 Time window: 2025-09-01 10:56:21 - 2025-09-01 11:58:17 Total flows processed: 325, passed: 325, Blocks skipped: 0, Bytes read: 33864 Sys: 0.0033s User: 0.0033s Wall: 0.0057s flows/second: 57308.9 Runtime: 0.0057s