Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-04 04:58:55.785 00:00:00.000 UDP 28.104.0.1:37461 -> 198.28.0.2:53 1 64 1 2025-09-04 04:58:55.785 00:00:00.000 UDP 28.104.0.1:41562 -> 198.28.0.2:53 1 64 1 2025-09-04 04:58:55.796 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37461 1 80 1 2025-09-04 04:58:55.796 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41562 1 109 1 2025-09-04 04:59:56.088 00:00:00.000 UDP 28.104.0.1:54404 -> 198.28.0.2:53 1 64 1 2025-09-04 04:59:56.088 00:00:00.000 UDP 28.104.0.1:51844 -> 198.28.0.2:53 1 64 1 2025-09-04 04:59:56.098 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54404 1 80 1 2025-09-04 04:59:56.098 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51844 1 109 1 2025-09-04 04:56:24.992 00:05:00.276 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-09-04 04:56:23.240 00:05:01.752 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-04 04:56:23.280 00:05:01.803 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-04 04:56:23.738 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2688 1 2025-09-04 05:00:56.390 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49862 1 80 1 2025-09-04 05:00:56.389 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50387 1 109 1 2025-09-04 05:00:56.379 00:00:00.000 UDP 28.104.0.1:49862 -> 198.28.0.2:53 1 64 1 2025-09-04 05:00:56.379 00:00:00.000 UDP 28.104.0.1:50387 -> 198.28.0.2:53 1 64 1 2025-09-04 04:57:24.993 00:05:00.287 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-09-04 04:57:23.232 00:05:01.773 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-04 05:01:56.678 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40169 1 80 1 2025-09-04 05:01:56.678 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42726 1 109 1 2025-09-04 05:01:56.667 00:00:00.000 UDP 28.104.0.1:40169 -> 198.28.0.2:53 1 64 1 2025-09-04 05:01:56.668 00:00:00.000 UDP 28.104.0.1:42726 -> 198.28.0.2:53 1 64 1 2025-09-04 04:58:23.230 00:05:01.872 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-04 05:02:56.957 00:00:00.000 UDP 28.104.0.1:37693 -> 198.28.0.2:53 1 64 1 2025-09-04 05:02:56.957 00:00:00.000 UDP 28.104.0.1:44039 -> 198.28.0.2:53 1 64 1 2025-09-04 05:02:56.967 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37693 1 109 1 2025-09-04 05:02:56.636 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-04 05:02:56.967 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44039 1 80 1 2025-09-04 05:03:57.212 00:00:00.000 UDP 28.104.0.1:35936 -> 198.28.0.2:53 1 64 1 2025-09-04 05:03:57.212 00:00:00.000 UDP 28.104.0.1:44884 -> 198.28.0.2:53 1 64 1 2025-09-04 05:03:57.221 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44884 1 80 1 2025-09-04 05:03:57.221 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35936 1 109 1 2025-09-04 05:04:57.515 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50343 1 80 1 2025-09-04 05:04:57.515 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39973 1 109 1 2025-09-04 05:04:57.505 00:00:00.000 UDP 28.104.0.1:50343 -> 198.28.0.2:53 1 64 1 2025-09-04 05:04:57.505 00:00:00.000 UDP 28.104.0.1:39973 -> 198.28.0.2:53 1 64 1 2025-09-04 05:05:57.778 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48665 1 109 1 2025-09-04 05:05:57.778 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57240 1 80 1 2025-09-04 05:05:57.768 00:00:00.000 UDP 28.104.0.1:48665 -> 198.28.0.2:53 1 64 1 2025-09-04 05:05:57.768 00:00:00.000 UDP 28.104.0.1:57240 -> 198.28.0.2:53 1 64 1 2025-09-04 05:01:43.744 00:05:10.018 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2648 1 2025-09-04 05:02:24.992 00:05:00.276 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-09-04 05:02:23.241 00:05:01.763 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-04 05:02:23.281 00:05:01.803 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-04 05:06:58.068 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48511 1 109 1 2025-09-04 05:06:58.068 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54090 1 80 1 2025-09-04 05:06:58.058 00:00:00.000 UDP 28.104.0.1:48511 -> 198.28.0.2:53 1 64 1 2025-09-04 05:06:58.058 00:00:00.000 UDP 28.104.0.1:54090 -> 198.28.0.2:53 1 64 1 2025-09-04 05:03:23.232 00:05:01.783 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-04 05:03:24.994 00:05:00.288 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-09-04 05:07:58.317 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46354 1 109 1 2025-09-04 05:07:58.317 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45107 1 80 1 2025-09-04 05:07:57.192 00:00:00.025 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-04 05:07:58.307 00:00:00.000 UDP 28.104.0.1:46354 -> 198.28.0.2:53 1 64 1 2025-09-04 05:07:58.307 00:00:00.000 UDP 28.104.0.1:45107 -> 198.28.0.2:53 1 64 1 2025-09-04 05:04:23.232 00:05:01.863 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-04 05:08:58.599 00:00:00.000 UDP 28.104.0.1:46746 -> 198.28.0.2:53 1 64 1 2025-09-04 05:08:58.599 00:00:00.000 UDP 28.104.0.1:58999 -> 198.28.0.2:53 1 64 1 2025-09-04 05:08:58.610 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58999 1 109 1 2025-09-04 05:08:58.610 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46746 1 80 1 2025-09-04 05:09:58.871 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56322 1 109 1 2025-09-04 05:09:58.871 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51445 1 80 1 2025-09-04 05:09:58.861 00:00:00.000 UDP 28.104.0.1:51445 -> 198.28.0.2:53 1 64 1 2025-09-04 05:09:58.861 00:00:00.000 UDP 28.104.0.1:56322 -> 198.28.0.2:53 1 64 1 2025-09-04 05:10:59.134 00:00:00.000 UDP 28.104.0.1:57463 -> 198.28.0.2:53 1 64 1 2025-09-04 05:10:59.134 00:00:00.000 UDP 28.104.0.1:40102 -> 198.28.0.2:53 1 64 1 2025-09-04 05:10:59.146 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40102 1 109 1 2025-09-04 05:10:59.146 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57463 1 80 1 2025-09-04 05:07:03.754 00:05:10.007 OSPF 28.0.2.2:0 -> 224.0.0.5:0 38 2680 1 2025-09-04 05:11:59.449 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43586 1 80 1 2025-09-04 05:11:59.450 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59168 1 109 1 2025-09-04 05:11:59.439 00:00:00.000 UDP 28.104.0.1:59168 -> 198.28.0.2:53 1 64 1 2025-09-04 05:11:59.439 00:00:00.000 UDP 28.104.0.1:43586 -> 198.28.0.2:53 1 64 1 2025-09-04 05:08:23.241 00:05:01.765 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-04 05:08:23.282 00:05:01.803 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-04 05:12:57.056 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-04 05:12:59.702 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36061 1 109 1 2025-09-04 05:12:59.702 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59921 1 80 1 2025-09-04 05:12:59.692 00:00:00.000 UDP 28.104.0.1:36061 -> 198.28.0.2:53 1 64 1 2025-09-04 05:12:59.692 00:00:00.000 UDP 28.104.0.1:59921 -> 198.28.0.2:53 1 64 1 2025-09-04 05:09:23.234 00:05:01.784 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-04 05:08:25.006 00:06:00.266 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-09-04 05:13:59.954 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57706 1 80 1 2025-09-04 05:13:59.956 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57863 1 109 1 2025-09-04 05:13:59.944 00:00:00.000 UDP 28.104.0.1:57706 -> 198.28.0.2:53 1 64 1 2025-09-04 05:13:59.945 00:00:00.000 UDP 28.104.0.1:57863 -> 198.28.0.2:53 1 64 1 2025-09-04 05:09:25.005 00:06:00.279 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-09-04 05:10:23.232 00:05:01.864 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-04 05:15:00.261 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53443 1 109 1 2025-09-04 05:15:00.262 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43088 1 80 1 2025-09-04 05:15:00.251 00:00:00.000 UDP 28.104.0.1:53443 -> 198.28.0.2:53 1 64 1 2025-09-04 05:15:00.251 00:00:00.000 UDP 28.104.0.1:43088 -> 198.28.0.2:53 1 64 1 2025-09-04 05:16:00.546 00:00:00.000 UDP 28.104.0.1:35017 -> 198.28.0.2:53 1 64 1 2025-09-04 05:16:00.546 00:00:00.000 UDP 28.104.0.1:50172 -> 198.28.0.2:53 1 64 1 2025-09-04 05:16:00.557 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35017 1 80 1 2025-09-04 05:16:00.557 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50172 1 109 1 2025-09-04 05:12:23.760 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2360 1 2025-09-04 05:17:00.806 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57021 1 109 1 2025-09-04 05:17:00.806 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60903 1 80 1 2025-09-04 05:17:00.797 00:00:00.000 UDP 28.104.0.1:57021 -> 198.28.0.2:53 1 64 1 2025-09-04 05:17:00.798 00:00:00.000 UDP 28.104.0.1:60903 -> 198.28.0.2:53 1 64 1 2025-09-04 05:17:57.048 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-04 05:18:01.102 00:00:00.000 UDP 28.104.0.1:53910 -> 198.28.0.2:53 1 64 1 2025-09-04 05:18:01.102 00:00:00.000 UDP 28.104.0.1:37599 -> 198.28.0.2:53 1 64 1 2025-09-04 05:18:01.111 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53910 1 80 1 2025-09-04 05:18:01.111 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37599 1 109 1 2025-09-04 05:14:23.243 00:05:01.765 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-04 05:14:23.283 00:05:01.804 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-04 05:19:01.455 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46770 1 109 1 2025-09-04 05:19:01.454 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50715 1 80 1 2025-09-04 05:19:01.445 00:00:00.000 UDP 28.104.0.1:50715 -> 198.28.0.2:53 1 64 1 2025-09-04 05:19:01.445 00:00:00.000 UDP 28.104.0.1:46770 -> 198.28.0.2:53 1 64 1 2025-09-04 05:15:23.234 00:05:01.792 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-04 05:20:01.754 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35883 1 109 1 2025-09-04 05:20:01.755 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48829 1 80 1 2025-09-04 05:20:01.744 00:00:00.000 UDP 28.104.0.1:48829 -> 198.28.0.2:53 1 64 1 2025-09-04 05:20:01.744 00:00:00.000 UDP 28.104.0.1:35883 -> 198.28.0.2:53 1 64 1 2025-09-04 05:15:25.007 00:06:00.267 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-09-04 05:16:23.233 00:05:01.864 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-04 05:21:02.049 00:00:00.000 UDP 28.104.0.1:45365 -> 198.28.0.2:53 1 64 1 2025-09-04 05:21:02.050 00:00:00.000 UDP 28.104.0.1:37856 -> 198.28.0.2:53 1 64 1 2025-09-04 05:21:02.061 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37856 1 109 1 2025-09-04 05:21:02.061 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45365 1 80 1 2025-09-04 05:16:25.006 00:06:00.279 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-09-04 05:17:43.768 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2600 1 2025-09-04 05:22:02.357 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33950 1 109 1 2025-09-04 05:22:02.357 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37327 1 80 1 2025-09-04 05:22:02.346 00:00:00.000 UDP 28.104.0.1:37327 -> 198.28.0.2:53 1 64 1 2025-09-04 05:22:02.346 00:00:00.000 UDP 28.104.0.1:33950 -> 198.28.0.2:53 1 64 1 2025-09-04 05:23:02.645 00:00:00.000 UDP 28.104.0.1:55870 -> 198.28.0.2:53 1 64 1 2025-09-04 05:23:02.645 00:00:00.000 UDP 28.104.0.1:42677 -> 198.28.0.2:53 1 64 1 2025-09-04 05:22:56.985 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-04 05:23:02.656 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55870 1 109 1 2025-09-04 05:23:02.656 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42677 1 80 1 2025-09-04 05:24:02.951 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35475 1 80 1 2025-09-04 05:24:02.951 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56250 1 109 1 2025-09-04 05:24:02.940 00:00:00.000 UDP 28.104.0.1:56250 -> 198.28.0.2:53 1 64 1 2025-09-04 05:24:02.940 00:00:00.000 UDP 28.104.0.1:35475 -> 198.28.0.2:53 1 64 1 2025-09-04 05:20:23.248 00:05:01.792 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-04 05:20:23.288 00:05:01.800 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-04 05:25:03.266 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44330 1 109 1 2025-09-04 05:25:03.266 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53428 1 80 1 2025-09-04 05:25:03.255 00:00:00.000 UDP 28.104.0.1:53428 -> 198.28.0.2:53 1 64 1 2025-09-04 05:25:03.255 00:00:00.000 UDP 28.104.0.1:44330 -> 198.28.0.2:53 1 64 1 2025-09-04 05:21:23.238 00:05:01.815 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-04 05:26:03.640 00:00:00.000 UDP 28.104.0.1:51222 -> 198.28.0.2:53 1 64 1 2025-09-04 05:26:03.640 00:00:00.000 UDP 28.104.0.1:50976 -> 198.28.0.2:53 1 64 1 2025-09-04 05:26:03.652 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50976 1 109 1 2025-09-04 05:26:03.652 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51222 1 80 1 2025-09-04 05:22:23.238 00:05:01.859 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-04 05:27:03.947 00:00:00.000 UDP 28.104.0.1:60590 -> 198.28.0.2:53 1 64 1 2025-09-04 05:27:03.946 00:00:00.000 UDP 28.104.0.1:40280 -> 198.28.0.2:53 1 64 1 2025-09-04 05:27:03.957 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60590 1 109 1 2025-09-04 05:27:03.957 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40280 1 80 1 2025-09-04 05:23:03.772 00:05:10.013 OSPF 28.0.2.2:0 -> 224.0.0.5:0 38 2784 1 2025-09-04 05:22:25.041 00:06:00.244 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-09-04 05:27:57.298 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-04 05:28:04.196 00:00:00.000 UDP 28.104.0.1:44139 -> 198.28.0.2:53 1 64 1 2025-09-04 05:28:04.196 00:00:00.000 UDP 28.104.0.1:44920 -> 198.28.0.2:53 1 64 1 2025-09-04 05:28:04.206 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44920 1 80 1 2025-09-04 05:28:04.206 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44139 1 109 1 2025-09-04 05:23:25.040 00:06:00.256 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-09-04 05:29:04.485 00:00:00.000 UDP 28.104.0.1:57524 -> 198.28.0.2:53 1 64 1 2025-09-04 05:29:04.485 00:00:00.000 UDP 28.104.0.1:59307 -> 198.28.0.2:53 1 64 1 2025-09-04 05:29:04.497 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59307 1 109 1 2025-09-04 05:29:04.496 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57524 1 80 1 2025-09-04 05:30:04.738 00:00:00.000 UDP 28.104.0.1:38355 -> 198.28.0.2:53 1 64 1 2025-09-04 05:30:04.736 00:00:00.000 UDP 28.104.0.1:45455 -> 198.28.0.2:53 1 64 1 2025-09-04 05:30:04.747 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38355 1 109 1 2025-09-04 05:30:04.745 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45455 1 80 1 2025-09-04 05:26:23.250 00:05:01.793 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-04 05:26:23.290 00:05:01.799 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-04 05:31:04.998 00:00:00.000 UDP 28.104.0.1:53509 -> 198.28.0.2:53 1 64 1 2025-09-04 05:31:04.998 00:00:00.000 UDP 28.104.0.1:55376 -> 198.28.0.2:53 1 64 1 2025-09-04 05:31:05.008 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55376 1 80 1 2025-09-04 05:31:05.008 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53509 1 109 1 2025-09-04 05:27:23.240 00:05:01.814 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-04 05:32:05.310 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54814 1 80 1 2025-09-04 05:32:05.307 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52077 1 109 1 2025-09-04 05:32:05.298 00:00:00.000 UDP 28.104.0.1:52077 -> 198.28.0.2:53 1 64 1 2025-09-04 05:32:05.299 00:00:00.000 UDP 28.104.0.1:54814 -> 198.28.0.2:53 1 64 1 2025-09-04 05:28:23.240 00:05:01.860 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-04 05:28:23.786 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 33 2256 1 2025-09-04 05:32:57.243 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-04 05:33:05.603 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48320 1 80 1 2025-09-04 05:33:05.603 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50360 1 109 1 2025-09-04 05:33:05.593 00:00:00.000 UDP 28.104.0.1:48320 -> 198.28.0.2:53 1 64 1 2025-09-04 05:33:05.593 00:00:00.000 UDP 28.104.0.1:50360 -> 198.28.0.2:53 1 64 1 2025-09-04 05:34:05.882 00:00:00.000 UDP 28.104.0.1:33433 -> 198.28.0.2:53 1 64 1 2025-09-04 05:34:05.882 00:00:00.000 UDP 28.104.0.1:55171 -> 198.28.0.2:53 1 64 1 2025-09-04 05:34:05.893 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55171 1 80 1 2025-09-04 05:34:05.893 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33433 1 109 1 2025-09-04 05:29:25.044 00:06:00.242 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-09-04 05:35:06.183 00:00:00.000 UDP 28.104.0.1:53157 -> 198.28.0.2:53 1 64 1 2025-09-04 05:35:06.184 00:00:00.000 UDP 28.104.0.1:38774 -> 198.28.0.2:53 1 64 1 2025-09-04 05:35:06.194 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38774 1 80 1 2025-09-04 05:35:06.194 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53157 1 109 1 2025-09-04 05:30:25.045 00:06:00.255 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-09-04 05:36:06.476 00:00:00.000 UDP 28.104.0.1:50393 -> 198.28.0.2:53 1 64 1 2025-09-04 05:36:06.475 00:00:00.000 UDP 28.104.0.1:47883 -> 198.28.0.2:53 1 64 1 2025-09-04 05:36:06.487 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50393 1 80 1 2025-09-04 05:36:06.487 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47883 1 109 1 2025-09-04 05:32:23.293 00:05:01.800 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-04 05:32:23.253 00:05:01.792 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-04 05:37:07.001 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45435 1 80 1 2025-09-04 05:37:07.002 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47273 1 109 1 2025-09-04 05:37:06.991 00:00:00.000 UDP 28.104.0.1:47273 -> 198.28.0.2:53 1 64 1 2025-09-04 05:37:06.991 00:00:00.000 UDP 28.104.0.1:45435 -> 198.28.0.2:53 1 64 1 2025-09-04 05:33:23.242 00:05:01.813 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-04 05:37:57.557 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-04 05:33:43.791 00:05:10.004 OSPF 28.0.2.2:0 -> 224.0.0.5:0 40 3008 1 2025-09-04 05:38:07.262 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38768 1 109 1 2025-09-04 05:38:07.262 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36202 1 80 1 2025-09-04 05:38:07.252 00:00:00.000 UDP 28.104.0.1:36202 -> 198.28.0.2:53 1 64 1 2025-09-04 05:38:07.252 00:00:00.000 UDP 28.104.0.1:38768 -> 198.28.0.2:53 1 64 1 2025-09-04 05:34:23.242 00:05:01.862 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-04 05:39:07.516 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46079 1 80 1 2025-09-04 05:39:07.516 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53845 1 109 1 2025-09-04 05:39:07.506 00:00:00.000 UDP 28.104.0.1:53845 -> 198.28.0.2:53 1 64 1 2025-09-04 05:39:07.506 00:00:00.000 UDP 28.104.0.1:46079 -> 198.28.0.2:53 1 64 1 2025-09-04 05:40:07.758 00:00:00.000 UDP 28.104.0.1:60745 -> 198.28.0.2:53 1 64 1 2025-09-04 05:40:07.758 00:00:00.000 UDP 28.104.0.1:59173 -> 198.28.0.2:53 1 64 1 2025-09-04 05:40:07.768 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59173 1 109 1 2025-09-04 05:40:07.768 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60745 1 80 1 2025-09-04 05:41:08.067 00:00:00.000 UDP 28.104.0.1:43850 -> 198.28.0.2:53 1 64 1 2025-09-04 05:41:08.067 00:00:00.000 UDP 28.104.0.1:39077 -> 198.28.0.2:53 1 64 1 2025-09-04 05:41:08.078 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39077 1 109 1 2025-09-04 05:41:08.077 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43850 1 80 1 2025-09-04 05:36:25.044 00:06:00.245 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-09-04 05:42:08.321 00:00:00.000 UDP 28.104.0.1:46205 -> 198.28.0.2:53 1 64 1 2025-09-04 05:42:08.321 00:00:00.000 UDP 28.104.0.1:52792 -> 198.28.0.2:53 1 64 1 2025-09-04 05:42:08.332 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46205 1 80 1 2025-09-04 05:42:08.332 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52792 1 109 1 2025-09-04 05:38:23.253 00:05:01.794 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-04 05:38:23.293 00:05:01.801 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-04 05:37:25.045 00:06:00.256 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-09-04 05:42:57.518 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-04 05:43:08.617 00:00:00.000 UDP 28.104.0.1:58515 -> 198.28.0.2:53 1 64 1 2025-09-04 05:43:08.617 00:00:00.000 UDP 28.104.0.1:32794 -> 198.28.0.2:53 1 64 1 2025-09-04 05:43:08.628 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58515 1 80 1 2025-09-04 05:43:08.628 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32794 1 109 1 2025-09-04 05:39:03.795 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2376 1 2025-09-04 05:39:23.243 00:05:01.814 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-04 05:44:08.865 00:00:00.000 UDP 28.104.0.1:39301 -> 198.28.0.2:53 1 64 1 2025-09-04 05:44:08.865 00:00:00.000 UDP 28.104.0.1:49635 -> 198.28.0.2:53 1 64 1 2025-09-04 05:44:08.877 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39301 1 80 1 2025-09-04 05:44:08.877 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49635 1 109 1 2025-09-04 05:40:23.243 00:05:01.861 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-04 05:45:09.188 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43239 1 109 1 2025-09-04 05:45:09.188 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47336 1 80 1 2025-09-04 05:45:09.178 00:00:00.000 UDP 28.104.0.1:47336 -> 198.28.0.2:53 1 64 1 2025-09-04 05:45:09.178 00:00:00.000 UDP 28.104.0.1:43239 -> 198.28.0.2:53 1 64 1 2025-09-04 05:46:09.473 00:00:00.000 UDP 28.104.0.1:56381 -> 198.28.0.2:53 1 64 1 2025-09-04 05:46:09.473 00:00:00.000 UDP 28.104.0.1:33613 -> 198.28.0.2:53 1 64 1 2025-09-04 05:46:09.484 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56381 1 80 1 2025-09-04 05:46:09.484 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33613 1 109 1 2025-09-04 05:47:09.790 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47552 1 80 1 2025-09-04 05:47:09.791 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38306 1 109 1 2025-09-04 05:47:09.781 00:00:00.000 UDP 28.104.0.1:38306 -> 198.28.0.2:53 1 64 1 2025-09-04 05:47:09.780 00:00:00.000 UDP 28.104.0.1:47552 -> 198.28.0.2:53 1 64 1 2025-09-04 05:47:57.688 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-04 05:48:10.064 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51041 1 109 1 2025-09-04 05:48:10.064 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36980 1 80 1 2025-09-04 05:48:10.054 00:00:00.000 UDP 28.104.0.1:36980 -> 198.28.0.2:53 1 64 1 2025-09-04 05:48:10.054 00:00:00.000 UDP 28.104.0.1:51041 -> 198.28.0.2:53 1 64 1 2025-09-04 05:43:25.046 00:06:00.253 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-09-04 05:44:23.253 00:05:01.799 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-04 05:44:23.294 00:05:01.802 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-04 05:44:23.802 00:05:10.054 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2480 1 2025-09-04 05:49:10.362 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43327 1 109 1 2025-09-04 05:49:10.362 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51967 1 80 1 2025-09-04 05:49:10.352 00:00:00.000 UDP 28.104.0.1:51967 -> 198.28.0.2:53 1 64 1 2025-09-04 05:49:10.352 00:00:00.000 UDP 28.104.0.1:43327 -> 198.28.0.2:53 1 64 1 2025-09-04 05:44:25.048 00:06:00.255 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-09-04 05:45:23.246 00:05:01.820 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-04 05:50:10.667 00:00:00.000 UDP 28.104.0.1:36591 -> 198.28.0.2:53 1 64 1 2025-09-04 05:50:10.667 00:00:00.000 UDP 28.104.0.1:47647 -> 198.28.0.2:53 1 64 1 2025-09-04 05:50:10.678 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36591 1 109 1 2025-09-04 05:50:10.678 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47647 1 80 1 2025-09-04 05:46:23.244 00:05:01.862 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-04 05:51:10.920 00:00:00.000 UDP 28.104.0.1:53636 -> 198.28.0.2:53 1 64 1 2025-09-04 05:51:10.920 00:00:00.000 UDP 28.104.0.1:51160 -> 198.28.0.2:53 1 64 1 2025-09-04 05:51:10.931 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51160 1 80 1 2025-09-04 05:51:10.931 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53636 1 109 1 2025-09-04 05:52:11.575 00:00:00.000 UDP 28.104.0.1:45410 -> 198.28.0.2:53 1 64 1 2025-09-04 05:52:11.575 00:00:00.000 UDP 28.104.0.1:40253 -> 198.28.0.2:53 1 64 1 2025-09-04 05:52:11.586 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45410 1 80 1 2025-09-04 05:52:11.586 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40253 1 109 1 2025-09-04 05:52:57.577 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-04 05:53:11.878 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42536 1 80 1 2025-09-04 05:53:11.879 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33311 1 109 1 2025-09-04 05:53:11.867 00:00:00.000 UDP 28.104.0.1:33311 -> 198.28.0.2:53 1 64 1 2025-09-04 05:53:11.868 00:00:00.000 UDP 28.104.0.1:42536 -> 198.28.0.2:53 1 64 1 2025-09-04 05:49:43.813 00:05:10.008 OSPF 28.0.2.2:0 -> 224.0.0.5:0 38 2824 1 2025-09-04 05:54:12.189 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52771 1 80 1 2025-09-04 05:54:12.189 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35592 1 109 1 2025-09-04 05:54:12.179 00:00:00.000 UDP 28.104.0.1:35592 -> 198.28.0.2:53 1 64 1 2025-09-04 05:54:12.179 00:00:00.000 UDP 28.104.0.1:52771 -> 198.28.0.2:53 1 64 1 2025-09-04 05:50:23.256 00:05:01.800 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-04 05:50:23.296 00:05:01.801 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-04 05:55:12.745 00:00:00.000 UDP 28.104.0.1:35549 -> 198.28.0.2:53 1 64 1 2025-09-04 05:55:12.745 00:00:00.000 UDP 28.104.0.1:34972 -> 198.28.0.2:53 1 64 1 2025-09-04 05:55:12.757 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35549 1 80 1 2025-09-04 05:55:12.757 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34972 1 109 1 2025-09-04 05:51:23.246 00:05:01.820 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-04 05:50:25.054 00:06:00.245 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-09-04 05:56:13.068 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47496 1 80 1 2025-09-04 05:56:13.068 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32804 1 109 1 2025-09-04 05:56:13.057 00:00:00.000 UDP 28.104.0.1:32804 -> 198.28.0.2:53 1 64 1 2025-09-04 05:56:13.056 00:00:00.000 UDP 28.104.0.1:47496 -> 198.28.0.2:53 1 64 1 2025-09-04 05:52:23.246 00:05:01.862 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-04 05:51:25.055 00:06:00.250 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-09-04 05:57:13.359 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60887 1 109 1 2025-09-04 05:57:13.359 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40892 1 80 1 2025-09-04 05:57:13.349 00:00:00.000 UDP 28.104.0.1:40892 -> 198.28.0.2:53 1 64 1 2025-09-04 05:57:13.349 00:00:00.000 UDP 28.104.0.1:60887 -> 198.28.0.2:53 1 64 1 2025-09-04 05:57:57.737 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-04 05:58:13.654 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32978 1 80 1 2025-09-04 05:58:13.654 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48669 1 109 1 2025-09-04 05:58:13.644 00:00:00.000 UDP 28.104.0.1:48669 -> 198.28.0.2:53 1 64 1 2025-09-04 05:58:13.644 00:00:00.000 UDP 28.104.0.1:32978 -> 198.28.0.2:53 1 64 1 Summary: total flows: 321, total bytes: 95274, total packets: 1401, avg bps: 205, avg pps: 0, avg bpp: 68 Time window: 2025-09-04 04:56:23 - 2025-09-04 05:58:13 Total flows processed: 321, passed: 321, Blocks skipped: 0, Bytes read: 33448 Sys: 0.0042s User: 0.0021s Wall: 0.0035s flows/second: 91714.7 Runtime: 0.0035s