Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-05 01:59:25.209 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38181 1 109 1 2025-09-05 01:59:25.209 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56686 1 80 1 2025-09-05 01:54:25.608 00:06:00.230 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-09-05 01:59:25.199 00:00:00.000 UDP 28.104.0.1:38181 -> 198.28.0.2:53 1 64 1 2025-09-05 01:59:25.200 00:00:00.000 UDP 28.104.0.1:56686 -> 198.28.0.2:53 1 64 1 2025-09-05 02:00:25.504 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47101 1 80 1 2025-09-05 02:00:25.504 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37080 1 109 1 2025-09-05 01:56:23.630 00:05:01.979 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-05 01:56:23.670 00:05:02.049 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-05 01:55:25.608 00:06:00.228 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-09-05 02:00:25.494 00:00:00.000 UDP 28.104.0.1:37080 -> 198.28.0.2:53 1 64 1 2025-09-05 02:00:25.494 00:00:00.000 UDP 28.104.0.1:47101 -> 198.28.0.2:53 1 64 1 2025-09-05 02:01:27.083 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38356 1 80 1 2025-09-05 01:57:23.620 00:05:02.000 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-05 02:01:27.083 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55728 1 109 1 2025-09-05 02:01:27.074 00:00:00.000 UDP 28.104.0.1:55728 -> 198.28.0.2:53 1 64 1 2025-09-05 02:01:27.074 00:00:00.000 UDP 28.104.0.1:38356 -> 198.28.0.2:53 1 64 1 2025-09-05 02:02:27.364 00:00:00.000 UDP 28.104.0.1:43109 -> 198.28.0.2:53 1 64 1 2025-09-05 02:02:27.364 00:00:00.000 UDP 28.104.0.1:60288 -> 198.28.0.2:53 1 64 1 2025-09-05 02:02:27.375 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60288 1 109 1 2025-09-05 01:58:23.620 00:05:02.110 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-05 02:02:27.375 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43109 1 80 1 2025-09-05 02:03:21.814 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-05 02:03:27.664 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35480 1 109 1 2025-09-05 02:03:27.664 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36759 1 80 1 2025-09-05 02:03:27.653 00:00:00.000 UDP 28.104.0.1:36759 -> 198.28.0.2:53 1 64 1 2025-09-05 02:03:27.653 00:00:00.000 UDP 28.104.0.1:35480 -> 198.28.0.2:53 1 64 1 2025-09-05 01:59:25.399 00:05:10.104 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2452 1 2025-09-05 02:04:27.960 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46920 1 109 1 2025-09-05 02:04:27.960 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56090 1 80 1 2025-09-05 02:04:27.949 00:00:00.000 UDP 28.104.0.1:56090 -> 198.28.0.2:53 1 64 1 2025-09-05 02:04:27.949 00:00:00.000 UDP 28.104.0.1:46920 -> 198.28.0.2:53 1 64 1 2025-09-05 02:05:28.246 00:00:00.000 UDP 28.104.0.1:39653 -> 198.28.0.2:53 1 64 1 2025-09-05 02:05:28.246 00:00:00.000 UDP 28.104.0.1:47556 -> 198.28.0.2:53 1 64 1 2025-09-05 02:05:28.257 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47556 1 80 1 2025-09-05 02:05:28.257 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39653 1 109 1 2025-09-05 02:01:25.609 00:06:00.236 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-09-05 02:02:23.630 00:05:01.998 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-05 02:06:28.536 00:00:00.000 UDP 28.104.0.1:46688 -> 198.28.0.2:53 1 64 1 2025-09-05 02:02:23.670 00:05:02.051 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-05 02:06:28.536 00:00:00.000 UDP 28.104.0.1:60274 -> 198.28.0.2:53 1 64 1 2025-09-05 02:06:28.546 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60274 1 109 1 2025-09-05 02:06:28.546 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46688 1 80 1 2025-09-05 02:07:28.852 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39779 1 80 1 2025-09-05 02:03:23.620 00:05:02.019 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-05 02:07:28.852 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44090 1 109 1 2025-09-05 02:07:28.842 00:00:00.000 UDP 28.104.0.1:39779 -> 198.28.0.2:53 1 64 1 2025-09-05 02:07:28.842 00:00:00.000 UDP 28.104.0.1:44090 -> 198.28.0.2:53 1 64 1 2025-09-05 02:02:25.609 00:06:00.231 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-09-05 02:08:22.254 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-05 02:04:23.620 00:05:02.112 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-05 02:08:29.167 00:00:00.000 UDP 28.104.0.1:54510 -> 198.28.0.2:53 1 64 1 2025-09-05 02:08:29.167 00:00:00.000 UDP 28.104.0.1:50099 -> 198.28.0.2:53 1 64 1 2025-09-05 02:08:29.177 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50099 1 80 1 2025-09-05 02:08:29.177 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54510 1 109 1 2025-09-05 02:04:45.413 00:05:10.018 OSPF 28.0.2.2:0 -> 224.0.0.5:0 39 2876 1 2025-09-05 02:09:29.427 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43635 1 109 1 2025-09-05 02:09:29.426 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59682 1 80 1 2025-09-05 02:09:29.416 00:00:00.000 UDP 28.104.0.1:59682 -> 198.28.0.2:53 1 64 1 2025-09-05 02:09:29.416 00:00:00.000 UDP 28.104.0.1:43635 -> 198.28.0.2:53 1 64 1 2025-09-05 02:10:29.680 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55824 1 109 1 2025-09-05 02:10:29.680 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57131 1 80 1 2025-09-05 02:10:29.668 00:00:00.000 UDP 28.104.0.1:55824 -> 198.28.0.2:53 1 64 1 2025-09-05 02:10:29.668 00:00:00.000 UDP 28.104.0.1:57131 -> 198.28.0.2:53 1 64 1 2025-09-05 02:11:29.966 00:00:00.000 UDP 28.104.0.1:43126 -> 198.28.0.2:53 1 64 1 2025-09-05 02:11:29.965 00:00:00.000 UDP 28.104.0.1:35495 -> 198.28.0.2:53 1 64 1 2025-09-05 02:11:29.976 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35495 1 80 1 2025-09-05 02:11:29.977 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43126 1 109 1 2025-09-05 02:08:23.632 00:05:01.998 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-05 02:08:23.672 00:05:02.050 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-05 02:12:30.267 00:00:00.000 UDP 28.104.0.1:34281 -> 198.28.0.2:53 1 64 1 2025-09-05 02:12:30.267 00:00:00.000 UDP 28.104.0.1:39759 -> 198.28.0.2:53 1 64 1 2025-09-05 02:12:30.279 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34281 1 109 1 2025-09-05 02:12:30.278 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39759 1 80 1 2025-09-05 02:13:21.993 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-05 02:09:23.621 00:05:02.019 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-05 02:13:30.573 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50764 1 109 1 2025-09-05 02:13:30.573 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35851 1 80 1 2025-09-05 02:08:25.629 00:06:00.212 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-09-05 02:13:30.563 00:00:00.000 UDP 28.104.0.1:35851 -> 198.28.0.2:53 1 64 1 2025-09-05 02:13:30.563 00:00:00.000 UDP 28.104.0.1:50764 -> 198.28.0.2:53 1 64 1 2025-09-05 02:10:05.432 00:05:10.013 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2320 1 2025-09-05 02:09:25.629 00:06:00.214 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-09-05 02:14:30.860 00:00:00.000 UDP 28.104.0.1:33252 -> 198.28.0.2:53 1 64 1 2025-09-05 02:14:30.860 00:00:00.000 UDP 28.104.0.1:51823 -> 198.28.0.2:53 1 64 1 2025-09-05 02:10:23.622 00:05:02.111 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-05 02:14:30.870 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33252 1 80 1 2025-09-05 02:14:30.871 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51823 1 109 1 2025-09-05 02:15:31.177 00:00:00.000 UDP 28.104.0.1:38562 -> 198.28.0.2:53 1 64 1 2025-09-05 02:15:31.177 00:00:00.000 UDP 28.104.0.1:34097 -> 198.28.0.2:53 1 64 1 2025-09-05 02:15:31.186 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38562 1 109 1 2025-09-05 02:15:31.186 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34097 1 80 1 2025-09-05 02:16:31.484 00:00:00.000 UDP 28.104.0.1:49843 -> 198.28.0.2:53 1 64 1 2025-09-05 02:16:31.484 00:00:00.000 UDP 28.104.0.1:37437 -> 198.28.0.2:53 1 64 1 2025-09-05 02:16:31.495 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37437 1 80 1 2025-09-05 02:16:31.495 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49843 1 109 1 2025-09-05 02:17:31.745 00:00:00.000 UDP 28.104.0.1:40120 -> 198.28.0.2:53 1 64 1 2025-09-05 02:17:31.745 00:00:00.000 UDP 28.104.0.1:37034 -> 198.28.0.2:53 1 64 1 2025-09-05 02:17:31.757 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37034 1 80 1 2025-09-05 02:17:31.757 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40120 1 109 1 2025-09-05 02:18:22.272 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-05 02:18:32.032 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34854 1 80 1 2025-09-05 02:18:32.038 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40589 1 109 1 2025-09-05 02:14:23.633 00:05:01.998 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-05 02:14:23.673 00:05:02.050 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-05 02:18:32.022 00:00:00.000 UDP 28.104.0.1:34854 -> 198.28.0.2:53 1 64 1 2025-09-05 02:18:32.027 00:00:00.000 UDP 28.104.0.1:40589 -> 198.28.0.2:53 1 64 1 2025-09-05 02:15:23.623 00:05:02.019 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-05 02:19:32.289 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43344 1 109 1 2025-09-05 02:19:32.289 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39496 1 80 1 2025-09-05 02:19:32.279 00:00:00.000 UDP 28.104.0.1:43344 -> 198.28.0.2:53 1 64 1 2025-09-05 02:19:32.279 00:00:00.000 UDP 28.104.0.1:39496 -> 198.28.0.2:53 1 64 1 2025-09-05 02:15:25.447 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2584 1 2025-09-05 02:16:23.622 00:05:02.110 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-05 02:15:25.631 00:06:00.211 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-09-05 02:20:32.573 00:00:00.000 UDP 28.104.0.1:58052 -> 198.28.0.2:53 1 64 1 2025-09-05 02:20:32.573 00:00:00.000 UDP 28.104.0.1:33712 -> 198.28.0.2:53 1 64 1 2025-09-05 02:20:32.585 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58052 1 80 1 2025-09-05 02:20:32.585 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33712 1 109 1 2025-09-05 02:16:25.630 00:06:00.212 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-09-05 02:21:32.863 00:00:00.000 UDP 28.104.0.1:40504 -> 198.28.0.2:53 1 64 1 2025-09-05 02:21:32.863 00:00:00.000 UDP 28.104.0.1:38064 -> 198.28.0.2:53 1 64 1 2025-09-05 02:21:32.876 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38064 1 109 1 2025-09-05 02:21:32.876 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40504 1 80 1 2025-09-05 02:22:33.191 00:00:00.000 UDP 28.104.0.1:44102 -> 198.28.0.2:53 1 64 1 2025-09-05 02:22:33.191 00:00:00.000 UDP 28.104.0.1:55885 -> 198.28.0.2:53 1 64 1 2025-09-05 02:22:33.201 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44102 1 80 1 2025-09-05 02:22:33.201 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55885 1 109 1 2025-09-05 02:23:22.497 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-05 02:23:33.496 00:00:00.000 UDP 28.104.0.1:57240 -> 198.28.0.2:53 1 64 1 2025-09-05 02:23:33.496 00:00:00.000 UDP 28.104.0.1:50462 -> 198.28.0.2:53 1 64 1 2025-09-05 02:23:33.506 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50462 1 80 1 2025-09-05 02:23:33.506 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57240 1 109 1 2025-09-05 02:20:23.634 00:05:01.998 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-05 02:20:23.674 00:05:02.054 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-05 02:24:33.770 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39976 1 109 1 2025-09-05 02:24:33.770 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54185 1 80 1 2025-09-05 02:24:33.760 00:00:00.000 UDP 28.104.0.1:39976 -> 198.28.0.2:53 1 64 1 2025-09-05 02:24:33.760 00:00:00.000 UDP 28.104.0.1:54185 -> 198.28.0.2:53 1 64 1 2025-09-05 02:20:45.450 00:05:10.009 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2704 1 2025-09-05 02:21:23.624 00:05:02.019 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-05 02:25:34.044 00:00:00.000 UDP 28.104.0.1:39156 -> 198.28.0.2:53 1 64 1 2025-09-05 02:25:34.044 00:00:00.000 UDP 28.104.0.1:34373 -> 198.28.0.2:53 1 64 1 2025-09-05 02:25:34.054 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34373 1 109 1 2025-09-05 02:25:34.054 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39156 1 80 1 2025-09-05 02:22:23.623 00:05:02.128 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-05 02:26:34.344 00:00:00.000 UDP 28.104.0.1:55434 -> 198.28.0.2:53 1 64 1 2025-09-05 02:26:34.344 00:00:00.000 UDP 28.104.0.1:55004 -> 198.28.0.2:53 1 64 1 2025-09-05 02:26:34.355 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55004 1 109 1 2025-09-05 02:26:34.355 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55434 1 80 1 2025-09-05 02:22:25.631 00:06:00.211 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-09-05 02:27:34.609 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59618 1 80 1 2025-09-05 02:27:34.609 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35006 1 109 1 2025-09-05 02:27:34.599 00:00:00.000 UDP 28.104.0.1:35006 -> 198.28.0.2:53 1 64 1 2025-09-05 02:27:34.599 00:00:00.000 UDP 28.104.0.1:59618 -> 198.28.0.2:53 1 64 1 2025-09-05 02:28:22.524 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-05 02:23:25.632 00:06:00.215 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-09-05 02:28:34.887 00:00:00.000 UDP 28.104.0.1:58787 -> 198.28.0.2:53 1 64 1 2025-09-05 02:28:34.888 00:00:00.000 UDP 28.104.0.1:53973 -> 198.28.0.2:53 1 64 1 2025-09-05 02:28:34.898 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53973 1 109 1 2025-09-05 02:28:34.897 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58787 1 80 1 2025-09-05 02:29:35.193 00:00:00.000 UDP 28.104.0.1:33848 -> 198.28.0.2:53 1 64 1 2025-09-05 02:29:35.193 00:00:00.000 UDP 28.104.0.1:36833 -> 198.28.0.2:53 1 64 1 2025-09-05 02:29:35.205 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33848 1 80 1 2025-09-05 02:29:35.205 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36833 1 109 1 2025-09-05 02:26:05.461 00:05:10.011 OSPF 28.0.2.2:0 -> 224.0.0.5:0 33 2256 1 2025-09-05 02:26:23.634 00:05:02.000 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-05 02:26:23.674 00:05:02.055 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-05 02:30:35.525 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55344 1 109 1 2025-09-05 02:30:35.525 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46302 1 80 1 2025-09-05 02:30:35.514 00:00:00.000 UDP 28.104.0.1:55344 -> 198.28.0.2:53 1 64 1 2025-09-05 02:30:35.514 00:00:00.000 UDP 28.104.0.1:46302 -> 198.28.0.2:53 1 64 1 2025-09-05 02:27:23.627 00:05:02.018 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-05 02:31:35.819 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46042 1 80 1 2025-09-05 02:31:35.819 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60938 1 109 1 2025-09-05 02:31:35.809 00:00:00.000 UDP 28.104.0.1:46042 -> 198.28.0.2:53 1 64 1 2025-09-05 02:31:35.808 00:00:00.000 UDP 28.104.0.1:60938 -> 198.28.0.2:53 1 64 1 2025-09-05 02:28:23.624 00:05:02.114 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-05 02:32:36.119 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57929 1 80 1 2025-09-05 02:32:36.120 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55150 1 109 1 2025-09-05 02:32:36.108 00:00:00.000 UDP 28.104.0.1:57929 -> 198.28.0.2:53 1 64 1 2025-09-05 02:32:36.109 00:00:00.000 UDP 28.104.0.1:55150 -> 198.28.0.2:53 1 64 1 2025-09-05 02:33:22.639 00:00:00.025 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-05 02:33:36.402 00:00:00.000 UDP 28.104.0.1:55880 -> 198.28.0.2:53 1 64 1 2025-09-05 02:33:36.403 00:00:00.000 UDP 28.104.0.1:52772 -> 198.28.0.2:53 1 64 1 2025-09-05 02:33:36.413 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52772 1 109 1 2025-09-05 02:33:36.413 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55880 1 80 1 2025-09-05 02:29:25.633 00:06:00.211 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-09-05 02:34:36.695 00:00:00.000 UDP 28.104.0.1:51953 -> 198.28.0.2:53 1 64 1 2025-09-05 02:34:36.695 00:00:00.000 UDP 28.104.0.1:57878 -> 198.28.0.2:53 1 64 1 2025-09-05 02:34:36.706 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51953 1 80 1 2025-09-05 02:34:36.706 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57878 1 109 1 2025-09-05 02:30:25.633 00:06:00.216 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-09-05 02:35:37.006 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36497 1 109 1 2025-09-05 02:35:37.007 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38584 1 80 1 2025-09-05 02:35:36.995 00:00:00.000 UDP 28.104.0.1:38584 -> 198.28.0.2:53 1 64 1 2025-09-05 02:35:36.995 00:00:00.000 UDP 28.104.0.1:36497 -> 198.28.0.2:53 1 64 1 2025-09-05 02:31:25.471 00:05:10.008 OSPF 28.0.2.2:0 -> 224.0.0.5:0 40 3040 1 2025-09-05 02:32:23.635 00:05:02.001 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-05 02:32:23.675 00:05:02.056 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-05 02:36:37.267 00:00:00.000 UDP 28.104.0.1:57646 -> 198.28.0.2:53 1 64 1 2025-09-05 02:36:37.267 00:00:00.000 UDP 28.104.0.1:32875 -> 198.28.0.2:53 1 64 1 2025-09-05 02:36:37.277 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32875 1 109 1 2025-09-05 02:36:37.277 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57646 1 80 1 2025-09-05 02:33:23.627 00:05:02.019 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-05 02:37:37.576 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51343 1 80 1 2025-09-05 02:37:37.576 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39428 1 109 1 2025-09-05 02:37:37.566 00:00:00.000 UDP 28.104.0.1:39428 -> 198.28.0.2:53 1 64 1 2025-09-05 02:37:37.566 00:00:00.000 UDP 28.104.0.1:51343 -> 198.28.0.2:53 1 64 1 2025-09-05 02:38:22.652 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-05 02:34:23.626 00:05:02.117 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-05 02:38:37.889 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52466 1 80 1 2025-09-05 02:38:37.889 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47532 1 109 1 2025-09-05 02:38:37.879 00:00:00.000 UDP 28.104.0.1:52466 -> 198.28.0.2:53 1 64 1 2025-09-05 02:38:37.879 00:00:00.000 UDP 28.104.0.1:47532 -> 198.28.0.2:53 1 64 1 2025-09-05 02:39:38.173 00:00:00.000 UDP 28.104.0.1:41097 -> 198.28.0.2:53 1 64 1 2025-09-05 02:39:38.173 00:00:00.000 UDP 28.104.0.1:49626 -> 198.28.0.2:53 1 64 1 2025-09-05 02:39:38.184 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49626 1 80 1 2025-09-05 02:39:38.184 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41097 1 109 1 2025-09-05 02:40:38.481 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50812 1 80 1 2025-09-05 02:40:38.481 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49215 1 109 1 2025-09-05 02:40:38.471 00:00:00.000 UDP 28.104.0.1:49215 -> 198.28.0.2:53 1 64 1 2025-09-05 02:40:38.470 00:00:00.000 UDP 28.104.0.1:50812 -> 198.28.0.2:53 1 64 1 2025-09-05 02:36:45.480 00:05:10.013 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2400 1 2025-09-05 02:36:25.636 00:06:00.211 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-09-05 02:41:38.720 00:00:00.000 UDP 28.104.0.1:43808 -> 198.28.0.2:53 1 64 1 2025-09-05 02:41:38.720 00:00:00.000 UDP 28.104.0.1:39038 -> 198.28.0.2:53 1 64 1 2025-09-05 02:41:38.730 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39038 1 109 1 2025-09-05 02:41:38.730 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43808 1 80 1 2025-09-05 02:38:23.640 00:05:01.996 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-05 02:38:23.680 00:05:02.058 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-05 02:37:25.636 00:06:00.215 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-09-05 02:42:39.644 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49913 1 80 1 2025-09-05 02:42:39.645 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38442 1 109 1 2025-09-05 02:42:39.634 00:00:00.000 UDP 28.104.0.1:38442 -> 198.28.0.2:53 1 64 1 2025-09-05 02:42:39.634 00:00:00.000 UDP 28.104.0.1:49913 -> 198.28.0.2:53 1 64 1 2025-09-05 02:43:22.801 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-05 02:39:23.629 00:05:02.017 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-05 02:43:39.932 00:00:00.000 UDP 28.104.0.1:52175 -> 198.28.0.2:53 1 64 1 2025-09-05 02:43:39.931 00:00:00.000 UDP 28.104.0.1:56057 -> 198.28.0.2:53 1 64 1 2025-09-05 02:43:39.943 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52175 1 80 1 2025-09-05 02:43:39.943 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56057 1 109 1 2025-09-05 02:40:23.629 00:05:02.118 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-05 02:44:40.320 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50400 1 109 1 2025-09-05 02:44:40.321 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37339 1 80 1 2025-09-05 02:44:40.310 00:00:00.000 UDP 28.104.0.1:37339 -> 198.28.0.2:53 1 64 1 2025-09-05 02:44:40.310 00:00:00.000 UDP 28.104.0.1:50400 -> 198.28.0.2:53 1 64 1 2025-09-05 02:45:40.609 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48269 1 109 1 2025-09-05 02:45:40.609 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39322 1 80 1 2025-09-05 02:45:40.598 00:00:00.000 UDP 28.104.0.1:39322 -> 198.28.0.2:53 1 64 1 2025-09-05 02:45:40.598 00:00:00.000 UDP 28.104.0.1:48269 -> 198.28.0.2:53 1 64 1 2025-09-05 02:42:05.492 00:05:10.004 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2504 1 2025-09-05 02:46:40.896 00:00:00.000 UDP 28.104.0.1:53640 -> 198.28.0.2:53 1 64 1 2025-09-05 02:46:40.896 00:00:00.000 UDP 28.104.0.1:55748 -> 198.28.0.2:53 1 64 1 2025-09-05 02:46:40.907 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55748 1 80 1 2025-09-05 02:46:40.907 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53640 1 109 1 2025-09-05 02:47:41.154 00:00:00.000 UDP 28.104.0.1:57126 -> 198.28.0.2:53 1 64 1 2025-09-05 02:47:41.153 00:00:00.000 UDP 28.104.0.1:36250 -> 198.28.0.2:53 1 64 1 2025-09-05 02:47:41.164 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57126 1 109 1 2025-09-05 02:47:41.164 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36250 1 80 1 2025-09-05 02:48:23.343 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-05 02:43:25.636 00:06:00.213 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-09-05 02:44:23.641 00:05:01.996 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-05 02:44:23.681 00:05:02.058 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-05 02:48:41.452 00:00:00.000 UDP 28.104.0.1:38905 -> 198.28.0.2:53 1 64 1 2025-09-05 02:48:41.453 00:00:00.000 UDP 28.104.0.1:41074 -> 198.28.0.2:53 1 64 1 2025-09-05 02:48:41.462 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41074 1 109 1 2025-09-05 02:48:41.462 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38905 1 80 1 2025-09-05 02:44:25.636 00:06:00.217 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-09-05 02:45:23.631 00:05:02.017 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-05 02:49:41.743 00:00:00.000 UDP 28.104.0.1:47904 -> 198.28.0.2:53 1 64 1 2025-09-05 02:49:41.743 00:00:00.000 UDP 28.104.0.1:49344 -> 198.28.0.2:53 1 64 1 2025-09-05 02:49:41.754 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47904 1 109 1 2025-09-05 02:49:41.753 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49344 1 80 1 2025-09-05 02:46:23.631 00:05:02.118 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-05 02:50:42.061 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54170 1 80 1 2025-09-05 02:50:42.061 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35689 1 109 1 2025-09-05 02:50:42.052 00:00:00.000 UDP 28.104.0.1:35689 -> 198.28.0.2:53 1 64 1 2025-09-05 02:50:42.052 00:00:00.000 UDP 28.104.0.1:54170 -> 198.28.0.2:53 1 64 1 2025-09-05 02:51:42.359 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39110 1 109 1 2025-09-05 02:51:42.359 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37834 1 80 1 2025-09-05 02:47:25.497 00:05:10.009 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2560 1 2025-09-05 02:51:42.349 00:00:00.000 UDP 28.104.0.1:39110 -> 198.28.0.2:53 1 64 1 2025-09-05 02:51:42.348 00:00:00.000 UDP 28.104.0.1:37834 -> 198.28.0.2:53 1 64 1 2025-09-05 02:52:42.653 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53420 1 80 1 2025-09-05 02:52:42.653 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34015 1 109 1 2025-09-05 02:52:42.643 00:00:00.000 UDP 28.104.0.1:34015 -> 198.28.0.2:53 1 64 1 2025-09-05 02:52:42.643 00:00:00.000 UDP 28.104.0.1:53420 -> 198.28.0.2:53 1 64 1 2025-09-05 02:53:23.345 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-05 02:53:42.958 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41113 1 109 1 2025-09-05 02:53:42.958 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46020 1 80 1 2025-09-05 02:53:42.948 00:00:00.000 UDP 28.104.0.1:41113 -> 198.28.0.2:53 1 64 1 2025-09-05 02:53:42.948 00:00:00.000 UDP 28.104.0.1:46020 -> 198.28.0.2:53 1 64 1 2025-09-05 02:50:23.642 00:05:01.997 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-05 02:50:23.682 00:05:02.064 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-05 02:54:43.253 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45054 1 80 1 2025-09-05 02:54:43.253 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35568 1 109 1 2025-09-05 02:54:43.243 00:00:00.000 UDP 28.104.0.1:35568 -> 198.28.0.2:53 1 64 1 2025-09-05 02:54:43.243 00:00:00.000 UDP 28.104.0.1:45054 -> 198.28.0.2:53 1 64 1 2025-09-05 02:50:25.638 00:06:00.215 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-09-05 02:51:23.632 00:05:02.017 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-05 02:55:43.536 00:00:00.000 UDP 28.104.0.1:41870 -> 198.28.0.2:53 1 64 1 2025-09-05 02:55:43.536 00:00:00.000 UDP 28.104.0.1:36024 -> 198.28.0.2:53 1 64 1 2025-09-05 02:55:43.547 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41870 1 109 1 2025-09-05 02:55:43.547 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36024 1 80 1 2025-09-05 02:51:25.638 00:06:00.218 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-09-05 02:52:23.632 00:05:02.124 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-05 02:56:43.798 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34185 1 109 1 2025-09-05 02:56:43.797 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46104 1 80 1 2025-09-05 02:56:43.787 00:00:00.000 UDP 28.104.0.1:34185 -> 198.28.0.2:53 1 64 1 2025-09-05 02:56:43.787 00:00:00.000 UDP 28.104.0.1:46104 -> 198.28.0.2:53 1 64 1 2025-09-05 02:52:45.507 00:05:10.020 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2480 1 2025-09-05 02:57:44.105 00:00:00.000 UDP 28.104.0.1:49514 -> 198.28.0.2:53 1 64 1 2025-09-05 02:57:44.105 00:00:00.000 UDP 28.104.0.1:60904 -> 198.28.0.2:53 1 64 1 2025-09-05 02:57:44.116 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60904 1 80 1 2025-09-05 02:57:44.116 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49514 1 109 1 2025-09-05 02:58:22.948 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-05 02:58:44.406 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34809 1 109 1 2025-09-05 02:58:44.406 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41061 1 80 1 2025-09-05 02:58:44.396 00:00:00.000 UDP 28.104.0.1:34809 -> 198.28.0.2:53 1 64 1 2025-09-05 02:58:44.396 00:00:00.000 UDP 28.104.0.1:41061 -> 198.28.0.2:53 1 64 1 Summary: total flows: 321, total bytes: 95238, total packets: 1405, avg bps: 197, avg pps: 0, avg bpp: 67 Time window: 2025-09-05 01:54:25 - 2025-09-05 02:58:44 Total flows processed: 321, passed: 321, Blocks skipped: 0, Bytes read: 33448 Sys: 0.0050s User: 0.0008s Wall: 0.0040s flows/second: 80775.8 Runtime: 0.0040s