Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-01 13:59:53.894 00:00:00.000 UDP 28.104.0.1:44705 -> 198.28.0.2:53 1 64 1 2025-09-01 13:59:53.895 00:00:00.000 UDP 28.104.0.1:36433 -> 198.28.0.2:53 1 64 1 2025-09-01 13:59:53.905 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44705 1 80 1 2025-09-01 13:59:53.905 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36433 1 109 1 2025-09-01 13:56:21.936 00:05:01.285 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-01 13:56:21.976 00:05:01.139 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-01 14:00:54.166 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43786 1 80 1 2025-09-01 14:00:54.166 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46327 1 109 1 2025-09-01 14:00:54.157 00:00:00.000 UDP 28.104.0.1:43786 -> 198.28.0.2:53 1 64 1 2025-09-01 14:00:54.157 00:00:00.000 UDP 28.104.0.1:46327 -> 198.28.0.2:53 1 64 1 2025-09-01 13:57:21.925 00:05:01.306 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-01 14:01:40.893 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-01 14:01:54.462 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40623 1 109 1 2025-09-01 14:01:54.462 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40488 1 80 1 2025-09-01 14:01:54.452 00:00:00.000 UDP 28.104.0.1:40623 -> 198.28.0.2:53 1 64 1 2025-09-01 14:01:54.452 00:00:00.000 UDP 28.104.0.1:40488 -> 198.28.0.2:53 1 64 1 2025-09-01 13:58:21.926 00:05:01.199 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-01 13:58:18.527 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2680 1 2025-09-01 14:02:54.715 00:00:00.000 UDP 28.104.0.1:45727 -> 198.28.0.2:53 1 64 1 2025-09-01 14:02:54.714 00:00:00.000 UDP 28.104.0.1:34554 -> 198.28.0.2:53 1 64 1 2025-09-01 14:02:54.726 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34554 1 109 1 2025-09-01 14:02:54.726 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45727 1 80 1 2025-09-01 13:59:23.221 00:04:00.074 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-09-01 13:59:23.221 00:04:00.136 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-01 14:03:55.026 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57718 1 109 1 2025-09-01 14:03:55.023 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52030 1 80 1 2025-09-01 14:03:55.016 00:00:00.000 UDP 28.104.0.1:57718 -> 198.28.0.2:53 1 64 1 2025-09-01 14:03:55.010 00:00:00.000 UDP 28.104.0.1:52030 -> 198.28.0.2:53 1 64 1 2025-09-01 14:04:55.336 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35028 1 80 1 2025-09-01 14:04:55.336 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52014 1 109 1 2025-09-01 14:04:55.325 00:00:00.000 UDP 28.104.0.1:52014 -> 198.28.0.2:53 1 64 1 2025-09-01 14:04:55.325 00:00:00.000 UDP 28.104.0.1:35028 -> 198.28.0.2:53 1 64 1 2025-09-01 14:05:55.634 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57484 1 109 1 2025-09-01 14:05:55.635 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37522 1 80 1 2025-09-01 14:05:55.623 00:00:00.000 UDP 28.104.0.1:37522 -> 198.28.0.2:53 1 64 1 2025-09-01 14:05:55.623 00:00:00.000 UDP 28.104.0.1:57484 -> 198.28.0.2:53 1 64 1 2025-09-01 14:02:21.977 00:05:01.139 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-01 14:02:21.936 00:05:01.288 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-01 14:06:40.876 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-01 14:06:55.917 00:00:00.000 UDP 28.104.0.1:45327 -> 198.28.0.2:53 1 64 1 2025-09-01 14:06:55.917 00:00:00.000 UDP 28.104.0.1:33435 -> 198.28.0.2:53 1 64 1 2025-09-01 14:06:55.929 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33435 1 109 1 2025-09-01 14:06:55.929 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45327 1 80 1 2025-09-01 14:03:21.927 00:05:01.308 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-01 14:03:38.533 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 39 2884 1 2025-09-01 14:07:56.241 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45300 1 80 1 2025-09-01 14:07:56.241 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33871 1 109 1 2025-09-01 14:07:56.230 00:00:00.000 UDP 28.104.0.1:33871 -> 198.28.0.2:53 1 64 1 2025-09-01 14:07:56.230 00:00:00.000 UDP 28.104.0.1:45300 -> 198.28.0.2:53 1 64 1 2025-09-01 14:04:23.222 00:04:00.073 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-09-01 14:04:23.221 00:04:00.136 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-01 14:04:21.926 00:05:01.199 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-01 14:08:56.525 00:00:00.000 UDP 28.104.0.1:37373 -> 198.28.0.2:53 1 64 1 2025-09-01 14:08:56.525 00:00:00.000 UDP 28.104.0.1:44783 -> 198.28.0.2:53 1 64 1 2025-09-01 14:08:56.537 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44783 1 80 1 2025-09-01 14:08:56.537 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37373 1 109 1 2025-09-01 14:09:56.834 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39088 1 109 1 2025-09-01 14:09:56.834 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39090 1 80 1 2025-09-01 14:09:56.824 00:00:00.000 UDP 28.104.0.1:39090 -> 198.28.0.2:53 1 64 1 2025-09-01 14:09:56.824 00:00:00.000 UDP 28.104.0.1:39088 -> 198.28.0.2:53 1 64 1 2025-09-01 14:10:57.099 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56198 1 80 1 2025-09-01 14:10:57.099 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42563 1 109 1 2025-09-01 14:10:57.089 00:00:00.000 UDP 28.104.0.1:56198 -> 198.28.0.2:53 1 64 1 2025-09-01 14:10:57.089 00:00:00.000 UDP 28.104.0.1:42563 -> 198.28.0.2:53 1 64 1 2025-09-01 14:11:40.872 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-01 14:11:57.352 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33385 1 109 1 2025-09-01 14:11:57.352 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56054 1 80 1 2025-09-01 14:11:57.343 00:00:00.000 UDP 28.104.0.1:56054 -> 198.28.0.2:53 1 64 1 2025-09-01 14:11:57.343 00:00:00.000 UDP 28.104.0.1:33385 -> 198.28.0.2:53 1 64 1 2025-09-01 14:08:21.938 00:05:01.289 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-01 14:08:21.978 00:05:01.138 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-01 14:12:57.618 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53658 1 109 1 2025-09-01 14:12:57.618 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56877 1 80 1 2025-09-01 14:12:57.607 00:00:00.000 UDP 28.104.0.1:53658 -> 198.28.0.2:53 1 64 1 2025-09-01 14:12:57.607 00:00:00.000 UDP 28.104.0.1:56877 -> 198.28.0.2:53 1 64 1 2025-09-01 14:08:58.539 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2496 1 2025-09-01 14:09:21.928 00:05:01.309 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-01 14:09:23.225 00:04:00.073 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-09-01 14:09:23.225 00:04:00.133 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-01 14:13:57.903 00:00:00.000 UDP 28.104.0.1:34786 -> 198.28.0.2:53 1 64 1 2025-09-01 14:13:57.903 00:00:00.000 UDP 28.104.0.1:46293 -> 198.28.0.2:53 1 64 1 2025-09-01 14:13:57.913 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34786 1 109 1 2025-09-01 14:13:57.913 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46293 1 80 1 2025-09-01 14:10:21.928 00:05:01.199 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-01 14:14:58.216 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37528 1 109 1 2025-09-01 14:14:58.216 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37290 1 80 1 2025-09-01 14:14:58.205 00:00:00.000 UDP 28.104.0.1:37528 -> 198.28.0.2:53 1 64 1 2025-09-01 14:14:58.205 00:00:00.000 UDP 28.104.0.1:37290 -> 198.28.0.2:53 1 64 1 2025-09-01 14:15:58.504 00:00:00.000 UDP 28.104.0.1:53014 -> 198.28.0.2:53 1 64 1 2025-09-01 14:15:58.504 00:00:00.000 UDP 28.104.0.1:55436 -> 198.28.0.2:53 1 64 1 2025-09-01 14:15:58.515 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53014 1 109 1 2025-09-01 14:15:58.516 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55436 1 80 1 2025-09-01 14:16:41.283 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-01 14:16:58.802 00:00:00.000 UDP 28.104.0.1:38067 -> 198.28.0.2:53 1 64 1 2025-09-01 14:16:58.802 00:00:00.000 UDP 28.104.0.1:50049 -> 198.28.0.2:53 1 64 1 2025-09-01 14:16:58.813 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50049 1 109 1 2025-09-01 14:16:58.813 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38067 1 80 1 2025-09-01 14:17:59.064 00:00:00.000 UDP 28.104.0.1:58963 -> 198.28.0.2:53 1 64 1 2025-09-01 14:17:59.064 00:00:00.000 UDP 28.104.0.1:34362 -> 198.28.0.2:53 1 64 1 2025-09-01 14:17:59.074 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58963 1 80 1 2025-09-01 14:17:59.074 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34362 1 109 1 2025-09-01 14:14:23.228 00:04:00.071 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-09-01 14:14:21.982 00:05:01.144 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-01 14:14:23.227 00:04:00.134 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-01 14:14:21.942 00:05:01.287 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-01 14:14:18.545 00:05:10.016 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2572 1 2025-09-01 14:18:59.407 00:00:00.000 UDP 28.104.0.1:40342 -> 198.28.0.2:53 1 64 1 2025-09-01 14:18:59.407 00:00:00.000 UDP 28.104.0.1:49039 -> 198.28.0.2:53 1 64 1 2025-09-01 14:18:59.418 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49039 1 109 1 2025-09-01 14:18:59.418 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40342 1 80 1 2025-09-01 14:15:21.932 00:05:01.306 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-01 14:19:59.706 00:00:00.000 UDP 28.104.0.1:45277 -> 198.28.0.2:53 1 64 1 2025-09-01 14:19:59.706 00:00:00.000 UDP 28.104.0.1:58410 -> 198.28.0.2:53 1 64 1 2025-09-01 14:19:59.716 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45277 1 109 1 2025-09-01 14:19:59.716 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58410 1 80 1 2025-09-01 14:16:21.932 00:05:01.203 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-01 14:21:00.032 00:00:00.000 UDP 28.104.0.1:43286 -> 198.28.0.2:53 1 64 1 2025-09-01 14:21:00.031 00:00:00.000 UDP 28.104.0.1:35868 -> 198.28.0.2:53 1 64 1 2025-09-01 14:21:00.042 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43286 1 80 1 2025-09-01 14:21:00.042 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35868 1 109 1 2025-09-01 14:21:41.301 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-01 14:22:00.335 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45384 1 80 1 2025-09-01 14:22:00.335 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51419 1 109 1 2025-09-01 14:22:00.324 00:00:00.000 UDP 28.104.0.1:45384 -> 198.28.0.2:53 1 64 1 2025-09-01 14:22:00.324 00:00:00.000 UDP 28.104.0.1:51419 -> 198.28.0.2:53 1 64 1 2025-09-01 14:23:00.580 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45379 1 80 1 2025-09-01 14:23:00.580 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54295 1 109 1 2025-09-01 14:23:00.569 00:00:00.000 UDP 28.104.0.1:45379 -> 198.28.0.2:53 1 64 1 2025-09-01 14:23:00.569 00:00:00.000 UDP 28.104.0.1:54295 -> 198.28.0.2:53 1 64 1 2025-09-01 14:19:23.227 00:04:00.071 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-09-01 14:19:23.227 00:04:00.133 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-01 14:19:38.561 00:05:00.660 OSPF 28.0.2.2:0 -> 224.0.0.5:0 33 2252 1 2025-09-01 14:24:00.830 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46824 1 109 1 2025-09-01 14:24:00.830 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53460 1 80 1 2025-09-01 14:24:00.820 00:00:00.000 UDP 28.104.0.1:46824 -> 198.28.0.2:53 1 64 1 2025-09-01 14:24:00.819 00:00:00.000 UDP 28.104.0.1:53460 -> 198.28.0.2:53 1 64 1 2025-09-01 14:20:21.984 00:05:01.142 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-01 14:20:21.944 00:05:01.294 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-01 14:25:01.119 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60225 1 80 1 2025-09-01 14:25:01.119 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51832 1 109 1 2025-09-01 14:25:01.108 00:00:00.000 UDP 28.104.0.1:51832 -> 198.28.0.2:53 1 64 1 2025-09-01 14:25:01.108 00:00:00.000 UDP 28.104.0.1:60225 -> 198.28.0.2:53 1 64 1 2025-09-01 14:24:23.237 00:01:00.124 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-09-01 14:21:21.934 00:05:01.331 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-01 14:26:01.410 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55203 1 80 1 2025-09-01 14:26:01.409 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40283 1 109 1 2025-09-01 14:26:01.400 00:00:00.000 UDP 28.104.0.1:55203 -> 198.28.0.2:53 1 64 1 2025-09-01 14:26:01.399 00:00:00.000 UDP 28.104.0.1:40283 -> 198.28.0.2:53 1 64 1 2025-09-01 14:22:21.934 00:05:01.209 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-01 14:26:42.132 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-01 14:27:01.657 00:00:00.000 UDP 28.104.0.1:59965 -> 198.28.0.2:53 1 64 1 2025-09-01 14:27:01.657 00:00:00.000 UDP 28.104.0.1:40208 -> 198.28.0.2:53 1 64 1 2025-09-01 14:27:01.667 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40208 1 80 1 2025-09-01 14:27:01.667 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59965 1 109 1 2025-09-01 14:28:01.962 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57827 1 80 1 2025-09-01 14:28:01.961 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55829 1 109 1 2025-09-01 14:28:01.951 00:00:00.000 UDP 28.104.0.1:55829 -> 198.28.0.2:53 1 64 1 2025-09-01 14:28:01.951 00:00:00.000 UDP 28.104.0.1:57827 -> 198.28.0.2:53 1 64 1 2025-09-01 14:24:23.236 00:04:00.090 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-09-01 14:26:23.246 00:02:00.115 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-09-01 14:29:02.263 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49089 1 80 1 2025-09-01 14:29:02.263 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57566 1 109 1 2025-09-01 14:29:02.254 00:00:00.000 UDP 28.104.0.1:57566 -> 198.28.0.2:53 1 64 1 2025-09-01 14:29:02.254 00:00:00.000 UDP 28.104.0.1:49089 -> 198.28.0.2:53 1 64 1 2025-09-01 14:24:48.571 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 38 2760 1 2025-09-01 14:30:02.556 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37639 1 80 1 2025-09-01 14:30:02.556 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56684 1 109 1 2025-09-01 14:30:02.545 00:00:00.000 UDP 28.104.0.1:37639 -> 198.28.0.2:53 1 64 1 2025-09-01 14:30:02.546 00:00:00.000 UDP 28.104.0.1:56684 -> 198.28.0.2:53 1 64 1 2025-09-01 14:29:23.249 00:01:00.078 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-09-01 14:29:23.249 00:01:00.113 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-09-01 14:26:21.946 00:05:01.303 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-01 14:26:21.986 00:05:01.146 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-01 14:31:02.841 00:00:00.000 UDP 28.104.0.1:53167 -> 198.28.0.2:53 1 64 1 2025-09-01 14:31:02.841 00:00:00.000 UDP 28.104.0.1:40053 -> 198.28.0.2:53 1 64 1 2025-09-01 14:31:02.854 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40053 1 109 1 2025-09-01 14:31:02.854 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53167 1 80 1 2025-09-01 14:27:21.937 00:05:01.323 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-01 14:31:41.306 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-01 14:32:03.147 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39456 1 109 1 2025-09-01 14:32:03.147 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46525 1 80 1 2025-09-01 14:32:03.136 00:00:00.000 UDP 28.104.0.1:46525 -> 198.28.0.2:53 1 64 1 2025-09-01 14:32:03.136 00:00:00.000 UDP 28.104.0.1:39456 -> 198.28.0.2:53 1 64 1 2025-09-01 14:28:21.937 00:05:01.212 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-01 14:33:03.458 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33754 1 80 1 2025-09-01 14:33:03.458 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56751 1 109 1 2025-09-01 14:33:03.448 00:00:00.000 UDP 28.104.0.1:33754 -> 198.28.0.2:53 1 64 1 2025-09-01 14:33:03.448 00:00:00.000 UDP 28.104.0.1:56751 -> 198.28.0.2:53 1 64 1 2025-09-01 14:31:23.250 00:02:00.079 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-09-01 14:31:23.250 00:02:00.115 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-09-01 14:34:03.743 00:00:00.000 UDP 28.104.0.1:54743 -> 198.28.0.2:53 1 64 1 2025-09-01 14:34:03.744 00:00:00.000 UDP 28.104.0.1:41356 -> 198.28.0.2:53 1 64 1 2025-09-01 14:34:03.754 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41356 1 80 1 2025-09-01 14:34:03.754 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54743 1 109 1 2025-09-01 14:30:08.577 00:05:10.002 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2480 1 2025-09-01 14:35:04.054 00:00:00.000 UDP 28.104.0.1:55453 -> 198.28.0.2:53 1 64 1 2025-09-01 14:35:04.054 00:00:00.000 UDP 28.104.0.1:59395 -> 198.28.0.2:53 1 64 1 2025-09-01 14:35:04.064 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55453 1 80 1 2025-09-01 14:35:04.064 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59395 1 109 1 2025-09-01 14:34:23.251 00:01:00.077 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-09-01 14:34:23.251 00:01:00.113 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-09-01 14:36:04.350 00:00:00.000 UDP 28.104.0.1:59936 -> 198.28.0.2:53 1 64 1 2025-09-01 14:36:04.350 00:00:00.000 UDP 28.104.0.1:47268 -> 198.28.0.2:53 1 64 1 2025-09-01 14:36:04.360 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47268 1 80 1 2025-09-01 14:36:04.360 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59936 1 109 1 2025-09-01 14:32:21.987 00:05:01.152 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-01 14:32:21.947 00:05:01.303 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-01 14:36:41.605 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-01 14:37:04.600 00:00:00.000 UDP 28.104.0.1:55327 -> 198.28.0.2:53 1 64 1 2025-09-01 14:37:04.599 00:00:00.000 UDP 28.104.0.1:51696 -> 198.28.0.2:53 1 64 1 2025-09-01 14:37:04.610 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55327 1 109 1 2025-09-01 14:37:04.610 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51696 1 80 1 2025-09-01 14:33:21.938 00:05:01.323 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-01 14:38:04.891 00:00:00.000 UDP 28.104.0.1:60678 -> 198.28.0.2:53 1 64 1 2025-09-01 14:38:04.891 00:00:00.000 UDP 28.104.0.1:37214 -> 198.28.0.2:53 1 64 1 2025-09-01 14:38:04.903 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37214 1 109 1 2025-09-01 14:38:04.903 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60678 1 80 1 2025-09-01 14:34:21.938 00:05:01.212 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-01 14:39:05.184 00:00:00.000 UDP 28.104.0.1:41217 -> 198.28.0.2:53 1 64 1 2025-09-01 14:39:05.184 00:00:00.000 UDP 28.104.0.1:56687 -> 198.28.0.2:53 1 64 1 2025-09-01 14:39:05.194 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41217 1 80 1 2025-09-01 14:39:05.194 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56687 1 109 1 2025-09-01 14:35:28.578 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 39 2804 1 2025-09-01 14:40:05.477 00:00:00.000 UDP 28.104.0.1:36240 -> 198.28.0.2:53 1 64 1 2025-09-01 14:40:05.477 00:00:00.000 UDP 28.104.0.1:53027 -> 198.28.0.2:53 1 64 1 2025-09-01 14:40:05.488 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36240 1 80 1 2025-09-01 14:40:05.488 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53027 1 109 1 2025-09-01 14:36:23.251 00:04:00.079 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-09-01 14:36:23.251 00:04:00.116 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-01 14:41:05.741 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54498 1 109 1 2025-09-01 14:41:05.741 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37604 1 80 1 2025-09-01 14:41:05.732 00:00:00.000 UDP 28.104.0.1:54498 -> 198.28.0.2:53 1 64 1 2025-09-01 14:41:05.732 00:00:00.000 UDP 28.104.0.1:37604 -> 198.28.0.2:53 1 64 1 2025-09-01 14:41:41.581 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-01 14:42:06.453 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46470 1 80 1 2025-09-01 14:42:06.453 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57600 1 109 1 2025-09-01 14:42:06.442 00:00:00.000 UDP 28.104.0.1:46470 -> 198.28.0.2:53 1 64 1 2025-09-01 14:42:06.443 00:00:00.000 UDP 28.104.0.1:57600 -> 198.28.0.2:53 1 64 1 2025-09-01 14:38:21.950 00:05:01.302 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-01 14:38:21.990 00:05:01.151 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-01 14:43:06.747 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37570 1 109 1 2025-09-01 14:43:06.747 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54141 1 80 1 2025-09-01 14:43:06.738 00:00:00.000 UDP 28.104.0.1:37570 -> 198.28.0.2:53 1 64 1 2025-09-01 14:43:06.738 00:00:00.000 UDP 28.104.0.1:54141 -> 198.28.0.2:53 1 64 1 2025-09-01 14:39:21.940 00:05:01.322 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-01 14:44:07.053 00:00:00.000 UDP 28.104.0.1:46733 -> 198.28.0.2:53 1 64 1 2025-09-01 14:44:07.053 00:00:00.000 UDP 28.104.0.1:56223 -> 198.28.0.2:53 1 64 1 2025-09-01 14:44:07.062 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46733 1 80 1 2025-09-01 14:44:07.062 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56223 1 109 1 2025-09-01 14:40:21.940 00:05:01.212 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-01 14:40:48.585 00:05:10.008 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2588 1 2025-09-01 14:45:07.345 00:00:00.000 UDP 28.104.0.1:38922 -> 198.28.0.2:53 1 64 1 2025-09-01 14:45:07.345 00:00:00.000 UDP 28.104.0.1:45271 -> 198.28.0.2:53 1 64 1 2025-09-01 14:45:07.357 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38922 1 109 1 2025-09-01 14:45:07.358 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45271 1 80 1 2025-09-01 14:41:23.251 00:04:00.081 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-09-01 14:41:23.251 00:04:00.115 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-01 14:46:07.655 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56650 1 80 1 2025-09-01 14:46:07.655 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55140 1 109 1 2025-09-01 14:46:07.645 00:00:00.000 UDP 28.104.0.1:55140 -> 198.28.0.2:53 1 64 1 2025-09-01 14:46:07.645 00:00:00.000 UDP 28.104.0.1:56650 -> 198.28.0.2:53 1 64 1 2025-09-01 14:46:41.773 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-01 14:47:13.971 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52986 1 109 1 2025-09-01 14:47:13.970 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50483 1 80 1 2025-09-01 14:47:13.960 00:00:00.000 UDP 28.104.0.1:52986 -> 198.28.0.2:53 1 64 1 2025-09-01 14:47:13.960 00:00:00.000 UDP 28.104.0.1:50483 -> 198.28.0.2:53 1 64 1 2025-09-01 14:48:14.262 00:00:00.000 UDP 28.104.0.1:38158 -> 198.28.0.2:53 1 64 1 2025-09-01 14:48:14.261 00:00:00.000 UDP 28.104.0.1:47043 -> 198.28.0.2:53 1 64 1 2025-09-01 14:48:14.273 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38158 1 109 1 2025-09-01 14:48:14.272 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47043 1 80 1 2025-09-01 14:44:21.951 00:05:01.303 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-01 14:44:21.991 00:05:01.151 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-01 14:49:14.565 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51657 1 80 1 2025-09-01 14:49:14.565 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44249 1 109 1 2025-09-01 14:49:14.554 00:00:00.000 UDP 28.104.0.1:51657 -> 198.28.0.2:53 1 64 1 2025-09-01 14:49:14.555 00:00:00.000 UDP 28.104.0.1:44249 -> 198.28.0.2:53 1 64 1 2025-09-01 14:45:21.943 00:05:01.322 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-01 14:50:15.176 00:00:00.000 UDP 28.104.0.1:47220 -> 198.28.0.2:53 1 64 1 2025-09-01 14:50:15.176 00:00:00.000 UDP 28.104.0.1:46387 -> 198.28.0.2:53 1 64 1 2025-09-01 14:50:15.186 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46387 1 109 1 2025-09-01 14:50:15.186 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47220 1 80 1 2025-09-01 14:46:23.251 00:04:00.081 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-09-01 14:46:23.251 00:04:00.116 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-01 14:46:08.593 00:05:10.013 OSPF 28.0.2.2:0 -> 224.0.0.5:0 33 2296 1 2025-09-01 14:46:21.944 00:05:01.209 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-01 14:51:15.477 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56947 1 109 1 2025-09-01 14:51:15.477 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55010 1 80 1 2025-09-01 14:51:15.468 00:00:00.000 UDP 28.104.0.1:55010 -> 198.28.0.2:53 1 64 1 2025-09-01 14:51:15.468 00:00:00.000 UDP 28.104.0.1:56947 -> 198.28.0.2:53 1 64 1 2025-09-01 14:51:41.990 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-01 14:52:15.756 00:00:00.000 UDP 28.104.0.1:46407 -> 198.28.0.2:53 1 64 1 2025-09-01 14:52:15.756 00:00:00.000 UDP 28.104.0.1:44301 -> 198.28.0.2:53 1 64 1 2025-09-01 14:52:15.767 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44301 1 109 1 2025-09-01 14:52:15.767 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46407 1 80 1 2025-09-01 14:53:16.022 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33393 1 80 1 2025-09-01 14:53:16.026 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48895 1 109 1 2025-09-01 14:53:16.015 00:00:00.000 UDP 28.104.0.1:48895 -> 198.28.0.2:53 1 64 1 2025-09-01 14:53:16.011 00:00:00.000 UDP 28.104.0.1:33393 -> 198.28.0.2:53 1 64 1 2025-09-01 14:54:16.324 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41109 1 80 1 2025-09-01 14:54:16.324 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53866 1 109 1 2025-09-01 14:54:16.314 00:00:00.000 UDP 28.104.0.1:41109 -> 198.28.0.2:53 1 64 1 2025-09-01 14:54:16.314 00:00:00.000 UDP 28.104.0.1:53866 -> 198.28.0.2:53 1 64 1 2025-09-01 14:50:21.954 00:05:01.302 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-01 14:50:21.994 00:05:01.157 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-01 14:55:16.615 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45101 1 80 1 2025-09-01 14:55:16.615 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58516 1 109 1 2025-09-01 14:55:16.604 00:00:00.000 UDP 28.104.0.1:45101 -> 198.28.0.2:53 1 64 1 2025-09-01 14:55:16.604 00:00:00.000 UDP 28.104.0.1:58516 -> 198.28.0.2:53 1 64 1 2025-09-01 14:51:21.944 00:05:01.322 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-01 14:51:23.255 00:04:00.078 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-09-01 14:51:23.255 00:04:00.116 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-01 14:51:28.607 00:05:10.013 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2624 1 2025-09-01 14:56:16.899 00:00:00.000 UDP 28.104.0.1:35935 -> 198.28.0.2:53 1 64 1 2025-09-01 14:56:16.899 00:00:00.000 UDP 28.104.0.1:45056 -> 198.28.0.2:53 1 64 1 2025-09-01 14:56:16.910 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45056 1 80 1 2025-09-01 14:56:16.911 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35935 1 109 1 2025-09-01 14:52:21.945 00:05:01.217 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-01 14:56:41.961 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-01 14:57:17.167 00:00:00.000 UDP 28.104.0.1:41897 -> 198.28.0.2:53 1 64 1 2025-09-01 14:57:17.167 00:00:00.000 UDP 28.104.0.1:49236 -> 198.28.0.2:53 1 64 1 2025-09-01 14:57:17.178 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41897 1 80 1 2025-09-01 14:57:17.178 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49236 1 109 1 2025-09-01 14:56:23.257 00:01:00.116 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-09-01 14:56:23.257 00:01:00.077 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-09-01 14:58:17.476 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53099 1 109 1 2025-09-01 14:58:17.477 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35672 1 80 1 2025-09-01 14:58:17.467 00:00:00.000 UDP 28.104.0.1:35672 -> 198.28.0.2:53 1 64 1 2025-09-01 14:58:17.466 00:00:00.000 UDP 28.104.0.1:53099 -> 198.28.0.2:53 1 64 1 Summary: total flows: 328, total bytes: 94197, total packets: 1387, avg bps: 202, avg pps: 0, avg bpp: 67 Time window: 2025-09-01 13:56:21 - 2025-09-01 14:58:17 Total flows processed: 328, passed: 328, Blocks skipped: 0, Bytes read: 34176 Sys: 0.0020s User: 0.0040s Wall: 0.0045s flows/second: 72567.3 Runtime: 0.0045s