Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-01 15:55:23.274 00:04:00.084 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-09-01 15:55:23.274 00:04:00.108 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-01 15:55:28.711 00:05:10.013 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2480 1 2025-09-01 15:59:49.941 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50737 1 109 1 2025-09-01 15:59:49.941 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52789 1 80 1 2025-09-01 15:59:49.930 00:00:00.000 UDP 28.104.0.1:50737 -> 198.28.0.2:53 1 64 1 2025-09-01 15:59:49.931 00:00:00.000 UDP 28.104.0.1:52789 -> 198.28.0.2:53 1 64 1 2025-09-01 15:56:21.975 00:05:01.301 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-01 15:56:22.016 00:05:01.194 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-01 16:00:50.256 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49686 1 109 1 2025-09-01 16:00:50.256 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59090 1 80 1 2025-09-01 16:00:50.246 00:00:00.000 UDP 28.104.0.1:49686 -> 198.28.0.2:53 1 64 1 2025-09-01 16:00:50.246 00:00:00.000 UDP 28.104.0.1:59090 -> 198.28.0.2:53 1 64 1 2025-09-01 16:00:23.278 00:01:00.116 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-09-01 16:00:23.278 00:01:00.085 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-09-01 15:57:21.965 00:05:01.321 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-01 16:01:43.209 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-01 16:01:50.538 00:00:00.000 UDP 28.104.0.1:45230 -> 198.28.0.2:53 1 64 1 2025-09-01 16:01:50.538 00:00:00.000 UDP 28.104.0.1:33036 -> 198.28.0.2:53 1 64 1 2025-09-01 16:01:50.549 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45230 1 109 1 2025-09-01 16:01:50.549 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33036 1 80 1 2025-09-01 15:58:21.965 00:05:01.256 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-01 16:02:50.782 00:00:00.000 UDP 28.104.0.1:53635 -> 198.28.0.2:53 1 64 1 2025-09-01 16:02:50.782 00:00:00.000 UDP 28.104.0.1:36645 -> 198.28.0.2:53 1 64 1 2025-09-01 16:02:50.793 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36645 1 109 1 2025-09-01 16:02:50.793 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53635 1 80 1 2025-09-01 16:03:51.143 00:00:00.000 UDP 28.104.0.1:36652 -> 198.28.0.2:53 1 64 1 2025-09-01 16:03:51.142 00:00:00.000 UDP 28.104.0.1:42820 -> 198.28.0.2:53 1 64 1 2025-09-01 16:03:51.153 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42820 1 80 1 2025-09-01 16:03:51.154 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36652 1 109 1 2025-09-01 16:02:23.276 00:02:00.117 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-09-01 16:02:23.276 00:02:00.083 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-09-01 16:04:51.428 00:00:00.000 UDP 28.104.0.1:59602 -> 198.28.0.2:53 1 64 1 2025-09-01 16:04:51.428 00:00:00.000 UDP 28.104.0.1:48944 -> 198.28.0.2:53 1 64 1 2025-09-01 16:04:51.438 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48944 1 80 1 2025-09-01 16:04:51.438 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59602 1 109 1 2025-09-01 16:00:48.723 00:05:10.017 OSPF 28.0.2.2:0 -> 224.0.0.5:0 39 2836 1 2025-09-01 16:05:51.736 00:00:00.000 UDP 28.104.0.1:46970 -> 198.28.0.2:53 1 64 1 2025-09-01 16:05:51.736 00:00:00.000 UDP 28.104.0.1:37062 -> 198.28.0.2:53 1 64 1 2025-09-01 16:05:51.746 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37062 1 109 1 2025-09-01 16:05:51.746 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46970 1 80 1 2025-09-01 16:05:23.278 00:01:00.082 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-09-01 16:05:23.278 00:01:00.131 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-09-01 16:02:21.977 00:05:01.301 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-01 16:02:22.019 00:05:01.192 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-01 16:06:43.272 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-01 16:06:52.001 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46548 1 109 1 2025-09-01 16:06:52.001 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33807 1 80 1 2025-09-01 16:06:51.989 00:00:00.000 UDP 28.104.0.1:46548 -> 198.28.0.2:53 1 64 1 2025-09-01 16:06:51.989 00:00:00.000 UDP 28.104.0.1:33807 -> 198.28.0.2:53 1 64 1 2025-09-01 16:03:21.967 00:05:01.321 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-01 16:07:52.296 00:00:00.000 UDP 28.104.0.1:48750 -> 198.28.0.2:53 1 64 1 2025-09-01 16:07:52.296 00:00:00.000 UDP 28.104.0.1:34218 -> 198.28.0.2:53 1 64 1 2025-09-01 16:07:52.308 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34218 1 80 1 2025-09-01 16:07:52.308 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48750 1 109 1 2025-09-01 16:04:21.968 00:05:01.255 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-01 16:08:52.602 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52452 1 109 1 2025-09-01 16:08:52.602 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42256 1 80 1 2025-09-01 16:08:52.592 00:00:00.000 UDP 28.104.0.1:42256 -> 198.28.0.2:53 1 64 1 2025-09-01 16:08:52.592 00:00:00.000 UDP 28.104.0.1:52452 -> 198.28.0.2:53 1 64 1 2025-09-01 16:07:23.279 00:02:00.082 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-09-01 16:07:23.279 00:02:00.115 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-09-01 16:09:52.886 00:00:00.000 UDP 28.104.0.1:50603 -> 198.28.0.2:53 1 64 1 2025-09-01 16:09:52.886 00:00:00.000 UDP 28.104.0.1:44558 -> 198.28.0.2:53 1 64 1 2025-09-01 16:09:52.899 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50603 1 80 1 2025-09-01 16:09:52.899 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44558 1 109 1 2025-09-01 16:06:08.740 00:05:10.014 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2588 1 2025-09-01 16:10:53.215 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46382 1 80 1 2025-09-01 16:10:53.214 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35956 1 109 1 2025-09-01 16:10:53.202 00:00:00.000 UDP 28.104.0.1:35956 -> 198.28.0.2:53 1 64 1 2025-09-01 16:10:53.202 00:00:00.000 UDP 28.104.0.1:46382 -> 198.28.0.2:53 1 64 1 2025-09-01 16:10:23.279 00:01:00.082 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-09-01 16:10:23.279 00:01:00.115 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-09-01 16:11:43.482 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-01 16:11:53.491 00:00:00.000 UDP 28.104.0.1:54200 -> 198.28.0.2:53 1 64 1 2025-09-01 16:11:53.491 00:00:00.000 UDP 28.104.0.1:33303 -> 198.28.0.2:53 1 64 1 2025-09-01 16:11:53.503 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54200 1 109 1 2025-09-01 16:11:53.502 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33303 1 80 1 2025-09-01 16:08:22.019 00:05:01.196 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-01 16:08:21.978 00:05:01.301 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-01 16:12:53.798 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55231 1 80 1 2025-09-01 16:12:53.798 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52630 1 109 1 2025-09-01 16:12:53.787 00:00:00.000 UDP 28.104.0.1:52630 -> 198.28.0.2:53 1 64 1 2025-09-01 16:12:53.787 00:00:00.000 UDP 28.104.0.1:55231 -> 198.28.0.2:53 1 64 1 2025-09-01 16:09:21.969 00:05:01.321 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-01 16:13:54.067 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53261 1 109 1 2025-09-01 16:13:54.067 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41446 1 80 1 2025-09-01 16:13:54.058 00:00:00.000 UDP 28.104.0.1:53261 -> 198.28.0.2:53 1 64 1 2025-09-01 16:13:54.058 00:00:00.000 UDP 28.104.0.1:41446 -> 198.28.0.2:53 1 64 1 2025-09-01 16:10:21.970 00:05:01.255 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-01 16:12:23.280 00:02:00.114 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-09-01 16:12:23.280 00:02:00.089 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-09-01 16:14:54.357 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37298 1 80 1 2025-09-01 16:14:54.357 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55795 1 109 1 2025-09-01 16:14:54.348 00:00:00.000 UDP 28.104.0.1:37298 -> 198.28.0.2:53 1 64 1 2025-09-01 16:14:54.348 00:00:00.000 UDP 28.104.0.1:55795 -> 198.28.0.2:53 1 64 1 2025-09-01 16:11:28.755 00:05:10.002 OSPF 28.0.2.2:0 -> 224.0.0.5:0 33 2296 1 2025-09-01 16:15:54.659 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36371 1 80 1 2025-09-01 16:15:54.658 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47739 1 109 1 2025-09-01 16:15:54.649 00:00:00.000 UDP 28.104.0.1:36371 -> 198.28.0.2:53 1 64 1 2025-09-01 16:15:54.649 00:00:00.000 UDP 28.104.0.1:47739 -> 198.28.0.2:53 1 64 1 2025-09-01 16:15:23.279 00:01:00.118 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-09-01 16:15:23.279 00:01:00.090 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-09-01 16:16:43.796 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-01 16:16:54.919 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52873 1 80 1 2025-09-01 16:16:54.919 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60950 1 109 1 2025-09-01 16:16:54.910 00:00:00.000 UDP 28.104.0.1:52873 -> 198.28.0.2:53 1 64 1 2025-09-01 16:16:54.909 00:00:00.000 UDP 28.104.0.1:60950 -> 198.28.0.2:53 1 64 1 2025-09-01 16:17:55.353 00:00:00.000 UDP 28.104.0.1:47992 -> 198.28.0.2:53 1 64 1 2025-09-01 16:17:55.353 00:00:00.000 UDP 28.104.0.1:53935 -> 198.28.0.2:53 1 64 1 2025-09-01 16:17:55.363 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53935 1 109 1 2025-09-01 16:17:55.363 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47992 1 80 1 2025-09-01 16:14:21.980 00:05:01.310 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-01 16:14:22.022 00:05:01.195 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-01 16:18:55.661 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38186 1 109 1 2025-09-01 16:18:55.661 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37979 1 80 1 2025-09-01 16:18:55.651 00:00:00.000 UDP 28.104.0.1:37979 -> 198.28.0.2:53 1 64 1 2025-09-01 16:18:55.651 00:00:00.000 UDP 28.104.0.1:38186 -> 198.28.0.2:53 1 64 1 2025-09-01 16:15:21.971 00:05:01.328 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-01 16:19:55.967 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35945 1 109 1 2025-09-01 16:19:55.967 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48832 1 80 1 2025-09-01 16:19:55.957 00:00:00.000 UDP 28.104.0.1:48832 -> 198.28.0.2:53 1 64 1 2025-09-01 16:19:55.957 00:00:00.000 UDP 28.104.0.1:35945 -> 198.28.0.2:53 1 64 1 2025-09-01 16:16:21.970 00:05:01.259 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-01 16:20:56.268 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58182 1 109 1 2025-09-01 16:20:56.268 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57119 1 80 1 2025-09-01 16:20:56.257 00:00:00.000 UDP 28.104.0.1:58182 -> 198.28.0.2:53 1 64 1 2025-09-01 16:20:56.257 00:00:00.000 UDP 28.104.0.1:57119 -> 198.28.0.2:53 1 64 1 2025-09-01 16:16:48.756 00:05:10.003 OSPF 28.0.2.2:0 -> 224.0.0.5:0 38 2704 1 2025-09-01 16:17:23.280 00:04:00.090 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-09-01 16:17:23.280 00:04:00.118 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-01 16:21:43.735 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-01 16:21:56.568 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49703 1 109 1 2025-09-01 16:21:56.568 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48012 1 80 1 2025-09-01 16:21:56.557 00:00:00.000 UDP 28.104.0.1:48012 -> 198.28.0.2:53 1 64 1 2025-09-01 16:21:56.557 00:00:00.000 UDP 28.104.0.1:49703 -> 198.28.0.2:53 1 64 1 2025-09-01 16:22:56.870 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52179 1 109 1 2025-09-01 16:22:56.870 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41980 1 80 1 2025-09-01 16:22:56.859 00:00:00.000 UDP 28.104.0.1:52179 -> 198.28.0.2:53 1 64 1 2025-09-01 16:22:56.859 00:00:00.000 UDP 28.104.0.1:41980 -> 198.28.0.2:53 1 64 1 2025-09-01 16:23:57.141 00:00:00.000 UDP 28.104.0.1:39950 -> 198.28.0.2:53 1 64 1 2025-09-01 16:23:57.141 00:00:00.000 UDP 28.104.0.1:49552 -> 198.28.0.2:53 1 64 1 2025-09-01 16:23:57.151 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39950 1 80 1 2025-09-01 16:23:57.152 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49552 1 109 1 2025-09-01 16:20:21.982 00:05:01.310 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-01 16:20:22.022 00:05:01.200 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-01 16:24:57.394 00:00:00.000 UDP 28.104.0.1:41291 -> 198.28.0.2:53 1 64 1 2025-09-01 16:24:57.394 00:00:00.000 UDP 28.104.0.1:34022 -> 198.28.0.2:53 1 64 1 2025-09-01 16:24:57.403 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41291 1 109 1 2025-09-01 16:24:57.404 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34022 1 80 1 2025-09-01 16:21:21.971 00:05:01.331 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-01 16:25:57.697 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49071 1 109 1 2025-09-01 16:25:57.697 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57875 1 80 1 2025-09-01 16:25:57.687 00:00:00.000 UDP 28.104.0.1:57875 -> 198.28.0.2:53 1 64 1 2025-09-01 16:25:57.687 00:00:00.000 UDP 28.104.0.1:49071 -> 198.28.0.2:53 1 64 1 2025-09-01 16:22:21.972 00:05:01.261 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-01 16:22:23.291 00:04:00.080 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-09-01 16:22:23.291 00:04:00.109 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-01 16:22:08.760 00:05:10.007 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2600 1 2025-09-01 16:26:43.836 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-01 16:26:57.954 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39180 1 109 1 2025-09-01 16:26:57.954 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45911 1 80 1 2025-09-01 16:26:57.945 00:00:00.000 UDP 28.104.0.1:45911 -> 198.28.0.2:53 1 64 1 2025-09-01 16:26:57.945 00:00:00.000 UDP 28.104.0.1:39180 -> 198.28.0.2:53 1 64 1 2025-09-01 16:27:58.246 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59661 1 109 1 2025-09-01 16:27:58.246 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56017 1 80 1 2025-09-01 16:27:58.237 00:00:00.000 UDP 28.104.0.1:59661 -> 198.28.0.2:53 1 64 1 2025-09-01 16:27:58.237 00:00:00.000 UDP 28.104.0.1:56017 -> 198.28.0.2:53 1 64 1 2025-09-01 16:28:58.508 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35876 1 80 1 2025-09-01 16:28:58.508 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56566 1 109 1 2025-09-01 16:28:58.498 00:00:00.000 UDP 28.104.0.1:56566 -> 198.28.0.2:53 1 64 1 2025-09-01 16:28:58.498 00:00:00.000 UDP 28.104.0.1:35876 -> 198.28.0.2:53 1 64 1 2025-09-01 16:29:58.764 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32839 1 109 1 2025-09-01 16:29:58.765 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60687 1 80 1 2025-09-01 16:29:58.755 00:00:00.000 UDP 28.104.0.1:60687 -> 198.28.0.2:53 1 64 1 2025-09-01 16:29:58.755 00:00:00.000 UDP 28.104.0.1:32839 -> 198.28.0.2:53 1 64 1 2025-09-01 16:26:21.982 00:05:01.311 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-01 16:26:22.022 00:05:01.203 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-01 16:30:59.066 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48870 1 80 1 2025-09-01 16:30:59.066 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45830 1 109 1 2025-09-01 16:30:59.056 00:00:00.000 UDP 28.104.0.1:45830 -> 198.28.0.2:53 1 64 1 2025-09-01 16:30:59.057 00:00:00.000 UDP 28.104.0.1:48870 -> 198.28.0.2:53 1 64 1 2025-09-01 16:27:21.973 00:05:01.331 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-01 16:27:23.293 00:04:00.082 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-09-01 16:27:23.293 00:04:00.109 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-01 16:27:28.766 00:05:10.010 OSPF 28.0.2.2:0 -> 224.0.0.5:0 39 2820 1 2025-09-01 16:31:44.014 00:00:00.020 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-01 16:31:59.359 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51618 1 109 1 2025-09-01 16:31:59.359 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39677 1 80 1 2025-09-01 16:31:59.349 00:00:00.000 UDP 28.104.0.1:39677 -> 198.28.0.2:53 1 64 1 2025-09-01 16:31:59.349 00:00:00.000 UDP 28.104.0.1:51618 -> 198.28.0.2:53 1 64 1 2025-09-01 16:28:21.974 00:05:01.262 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-01 16:32:59.644 00:00:00.000 UDP 28.104.0.1:34137 -> 198.28.0.2:53 1 64 1 2025-09-01 16:32:59.644 00:00:00.000 UDP 28.104.0.1:33008 -> 198.28.0.2:53 1 64 1 2025-09-01 16:32:59.654 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34137 1 109 1 2025-09-01 16:32:59.654 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33008 1 80 1 2025-09-01 16:32:23.293 00:01:00.110 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-09-01 16:33:59.904 00:00:00.000 UDP 28.104.0.1:35844 -> 198.28.0.2:53 1 64 1 2025-09-01 16:33:59.904 00:00:00.000 UDP 28.104.0.1:53079 -> 198.28.0.2:53 1 64 1 2025-09-01 16:33:59.915 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35844 1 80 1 2025-09-01 16:33:59.915 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53079 1 109 1 2025-09-01 16:35:00.226 00:00:00.000 UDP 28.104.0.1:56241 -> 198.28.0.2:53 1 64 1 2025-09-01 16:35:00.225 00:00:00.000 UDP 28.104.0.1:58163 -> 198.28.0.2:53 1 64 1 2025-09-01 16:35:00.238 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56241 1 109 1 2025-09-01 16:35:00.238 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58163 1 80 1 2025-09-01 16:36:00.476 00:00:00.000 UDP 28.104.0.1:57444 -> 198.28.0.2:53 1 64 1 2025-09-01 16:36:00.476 00:00:00.000 UDP 28.104.0.1:55743 -> 198.28.0.2:53 1 64 1 2025-09-01 16:36:00.488 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57444 1 80 1 2025-09-01 16:36:00.488 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55743 1 109 1 2025-09-01 16:32:23.294 00:04:00.081 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-09-01 16:34:23.296 00:02:00.107 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-09-01 16:32:21.985 00:05:01.312 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-01 16:32:22.026 00:05:01.200 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-01 16:36:43.921 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-01 16:37:00.747 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47242 1 80 1 2025-09-01 16:37:00.748 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38636 1 109 1 2025-09-01 16:32:48.773 00:05:10.002 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2468 1 2025-09-01 16:37:00.735 00:00:00.000 UDP 28.104.0.1:38636 -> 198.28.0.2:53 1 64 1 2025-09-01 16:37:00.736 00:00:00.000 UDP 28.104.0.1:47242 -> 198.28.0.2:53 1 64 1 2025-09-01 16:33:21.976 00:05:01.332 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-01 16:38:01.067 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54612 1 109 1 2025-09-01 16:38:01.067 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37615 1 80 1 2025-09-01 16:38:01.057 00:00:00.000 UDP 28.104.0.1:37615 -> 198.28.0.2:53 1 64 1 2025-09-01 16:38:01.057 00:00:00.000 UDP 28.104.0.1:54612 -> 198.28.0.2:53 1 64 1 2025-09-01 16:37:23.297 00:01:00.115 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-09-01 16:37:23.297 00:01:00.087 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-09-01 16:34:21.976 00:05:01.261 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-01 16:39:01.325 00:00:00.000 UDP 28.104.0.1:55446 -> 198.28.0.2:53 1 64 1 2025-09-01 16:39:01.325 00:00:00.000 UDP 28.104.0.1:45134 -> 198.28.0.2:53 1 64 1 2025-09-01 16:39:01.336 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45134 1 80 1 2025-09-01 16:39:01.336 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55446 1 109 1 2025-09-01 16:40:01.579 00:00:00.000 UDP 28.104.0.1:57842 -> 198.28.0.2:53 1 64 1 2025-09-01 16:40:01.578 00:00:00.000 UDP 28.104.0.1:58518 -> 198.28.0.2:53 1 64 1 2025-09-01 16:40:01.590 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58518 1 109 1 2025-09-01 16:40:01.589 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57842 1 80 1 2025-09-01 16:41:01.868 00:00:00.000 UDP 28.104.0.1:49179 -> 198.28.0.2:53 1 64 1 2025-09-01 16:41:01.868 00:00:00.000 UDP 28.104.0.1:43464 -> 198.28.0.2:53 1 64 1 2025-09-01 16:41:01.879 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43464 1 109 1 2025-09-01 16:41:01.879 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49179 1 80 1 2025-09-01 16:39:23.297 00:02:00.107 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-09-01 16:39:23.297 00:02:00.079 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-09-01 16:41:44.020 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-01 16:42:02.193 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42317 1 109 1 2025-09-01 16:42:02.193 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50093 1 80 1 2025-09-01 16:42:02.182 00:00:00.000 UDP 28.104.0.1:42317 -> 198.28.0.2:53 1 64 1 2025-09-01 16:42:02.181 00:00:00.000 UDP 28.104.0.1:50093 -> 198.28.0.2:53 1 64 1 2025-09-01 16:38:21.986 00:05:01.311 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-01 16:38:22.026 00:05:01.201 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-01 16:38:08.776 00:05:10.007 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2440 1 2025-09-01 16:43:02.486 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45349 1 109 1 2025-09-01 16:43:02.487 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40224 1 80 1 2025-09-01 16:43:02.477 00:00:00.000 UDP 28.104.0.1:40224 -> 198.28.0.2:53 1 64 1 2025-09-01 16:43:02.477 00:00:00.000 UDP 28.104.0.1:45349 -> 198.28.0.2:53 1 64 1 2025-09-01 16:42:23.296 00:01:00.079 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-09-01 16:42:23.296 00:01:00.106 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-09-01 16:39:21.976 00:05:01.336 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-01 16:44:02.780 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49593 1 109 1 2025-09-01 16:44:02.780 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53984 1 80 1 2025-09-01 16:44:02.771 00:00:00.000 UDP 28.104.0.1:49593 -> 198.28.0.2:53 1 64 1 2025-09-01 16:44:02.771 00:00:00.000 UDP 28.104.0.1:53984 -> 198.28.0.2:53 1 64 1 2025-09-01 16:40:21.977 00:05:01.267 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-01 16:45:03.067 00:00:00.000 UDP 28.104.0.1:48586 -> 198.28.0.2:53 1 64 1 2025-09-01 16:45:03.067 00:00:00.000 UDP 28.104.0.1:42436 -> 198.28.0.2:53 1 64 1 2025-09-01 16:45:03.077 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42436 1 80 1 2025-09-01 16:45:03.077 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48586 1 109 1 2025-09-01 16:46:03.424 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49143 1 109 1 2025-09-01 16:46:03.424 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56575 1 80 1 2025-09-01 16:46:03.413 00:00:00.000 UDP 28.104.0.1:56575 -> 198.28.0.2:53 1 64 1 2025-09-01 16:46:03.414 00:00:00.000 UDP 28.104.0.1:49143 -> 198.28.0.2:53 1 64 1 2025-09-01 16:44:23.298 00:02:00.106 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-09-01 16:44:23.298 00:02:00.079 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-09-01 16:46:44.066 00:00:00.042 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-01 16:47:03.721 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58053 1 80 1 2025-09-01 16:47:03.721 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38957 1 109 1 2025-09-01 16:47:03.712 00:00:00.000 UDP 28.104.0.1:38957 -> 198.28.0.2:53 1 64 1 2025-09-01 16:47:03.712 00:00:00.000 UDP 28.104.0.1:58053 -> 198.28.0.2:53 1 64 1 2025-09-01 16:43:28.782 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2320 1 2025-09-01 16:48:04.023 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54452 1 109 1 2025-09-01 16:48:04.018 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56523 1 80 1 2025-09-01 16:48:04.006 00:00:00.000 UDP 28.104.0.1:56523 -> 198.28.0.2:53 1 64 1 2025-09-01 16:48:04.006 00:00:00.000 UDP 28.104.0.1:54452 -> 198.28.0.2:53 1 64 1 2025-09-01 16:47:23.298 00:01:00.079 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-09-01 16:47:23.298 00:01:00.106 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-09-01 16:44:21.987 00:05:01.311 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-01 16:44:22.027 00:05:01.201 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-01 16:49:04.380 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49948 1 80 1 2025-09-01 16:49:04.380 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57439 1 109 1 2025-09-01 16:49:04.371 00:00:00.000 UDP 28.104.0.1:57439 -> 198.28.0.2:53 1 64 1 2025-09-01 16:49:04.370 00:00:00.000 UDP 28.104.0.1:49948 -> 198.28.0.2:53 1 64 1 2025-09-01 16:45:21.977 00:05:01.331 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-01 16:50:04.664 00:00:00.000 UDP 28.104.0.1:42973 -> 198.28.0.2:53 1 64 1 2025-09-01 16:50:04.664 00:00:00.000 UDP 28.104.0.1:47592 -> 198.28.0.2:53 1 64 1 2025-09-01 16:50:04.673 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47592 1 80 1 2025-09-01 16:50:04.673 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42973 1 109 1 2025-09-01 16:46:21.977 00:05:01.261 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-01 16:51:04.972 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33721 1 109 1 2025-09-01 16:51:04.972 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52554 1 80 1 2025-09-01 16:51:04.961 00:00:00.000 UDP 28.104.0.1:52554 -> 198.28.0.2:53 1 64 1 2025-09-01 16:51:04.961 00:00:00.000 UDP 28.104.0.1:33721 -> 198.28.0.2:53 1 64 1 2025-09-01 16:51:44.542 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-01 16:52:05.217 00:00:00.000 UDP 28.104.0.1:55084 -> 198.28.0.2:53 1 64 1 2025-09-01 16:52:05.217 00:00:00.000 UDP 28.104.0.1:37033 -> 198.28.0.2:53 1 64 1 2025-09-01 16:52:05.227 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55084 1 80 1 2025-09-01 16:52:05.227 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37033 1 109 1 2025-09-01 16:48:48.789 00:05:10.002 OSPF 28.0.2.2:0 -> 224.0.0.5:0 38 2744 1 2025-09-01 16:53:05.526 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59185 1 80 1 2025-09-01 16:53:05.526 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51677 1 109 1 2025-09-01 16:53:05.517 00:00:00.000 UDP 28.104.0.1:51677 -> 198.28.0.2:53 1 64 1 2025-09-01 16:53:05.517 00:00:00.000 UDP 28.104.0.1:59185 -> 198.28.0.2:53 1 64 1 2025-09-01 16:49:23.298 00:04:00.088 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-09-01 16:49:23.298 00:04:00.107 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-01 16:54:05.861 00:00:00.000 UDP 28.104.0.1:56642 -> 198.28.0.2:53 1 64 1 2025-09-01 16:54:05.861 00:00:00.000 UDP 28.104.0.1:60082 -> 198.28.0.2:53 1 64 1 2025-09-01 16:54:05.872 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60082 1 109 1 2025-09-01 16:54:05.872 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56642 1 80 1 2025-09-01 16:50:21.988 00:05:01.314 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-01 16:50:22.028 00:05:01.201 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-01 16:55:06.182 00:00:00.000 UDP 28.104.0.1:41612 -> 198.28.0.2:53 1 64 1 2025-09-01 16:55:06.182 00:00:00.000 UDP 28.104.0.1:50094 -> 198.28.0.2:53 1 64 1 2025-09-01 16:55:06.193 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50094 1 109 1 2025-09-01 16:55:06.193 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41612 1 80 1 2025-09-01 16:51:21.978 00:05:01.336 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-01 16:56:06.484 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47203 1 80 1 2025-09-01 16:56:06.484 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39763 1 109 1 2025-09-01 16:56:06.474 00:00:00.000 UDP 28.104.0.1:39763 -> 198.28.0.2:53 1 64 1 2025-09-01 16:56:06.475 00:00:00.000 UDP 28.104.0.1:47203 -> 198.28.0.2:53 1 64 1 2025-09-01 16:52:21.978 00:05:01.261 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-01 16:56:44.535 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-01 16:57:06.727 00:00:00.000 UDP 28.104.0.1:55190 -> 198.28.0.2:53 1 64 1 2025-09-01 16:57:06.727 00:00:00.000 UDP 28.104.0.1:50587 -> 198.28.0.2:53 1 64 1 2025-09-01 16:57:06.737 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50587 1 109 1 2025-09-01 16:57:06.737 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55190 1 80 1 2025-09-01 16:58:07.046 00:00:00.000 UDP 28.104.0.1:46674 -> 198.28.0.2:53 1 64 1 2025-09-01 16:58:07.046 00:00:00.000 UDP 28.104.0.1:42504 -> 198.28.0.2:53 1 64 1 2025-09-01 16:58:07.056 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46674 1 109 1 2025-09-01 16:58:07.057 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42504 1 80 1 2025-09-01 16:54:23.302 00:04:00.105 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-01 16:54:08.792 00:05:10.021 OSPF 28.0.2.2:0 -> 224.0.0.5:0 38 2820 1 2025-09-01 16:54:23.302 00:04:00.087 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 Summary: total flows: 339, total bytes: 98107, total packets: 1444, avg bps: 204, avg pps: 0, avg bpp: 67 Time window: 2025-09-01 15:55:23 - 2025-09-01 16:59:18 Total flows processed: 339, passed: 339, Blocks skipped: 0, Bytes read: 35320 Sys: 0.0027s User: 0.0036s Wall: 0.0038s flows/second: 89872.3 Runtime: 0.0038s