Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-12 10:59:11.358 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42867 1 80 1 2025-09-12 10:59:11.358 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39192 1 109 1 2025-09-12 10:59:11.348 00:00:00.000 UDP 28.104.0.1:39192 -> 198.28.0.2:53 1 64 1 2025-09-12 10:59:11.348 00:00:00.000 UDP 28.104.0.1:42867 -> 198.28.0.2:53 1 64 1 2025-09-12 10:54:31.296 00:05:55.755 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-12 10:54:31.105 00:05:55.906 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-12 10:54:31.105 00:06:00.228 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-09-12 11:00:11.652 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50670 1 109 1 2025-09-12 11:00:11.652 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58213 1 80 1 2025-09-12 11:00:11.642 00:00:00.000 UDP 28.104.0.1:50670 -> 198.28.0.2:53 1 64 1 2025-09-12 11:00:11.642 00:00:00.000 UDP 28.104.0.1:58213 -> 198.28.0.2:53 1 64 1 2025-09-12 10:56:26.999 00:05:00.003 TCP 28.151.0.1:179 -> 28.154.0.1:41239 11 686 1 2025-09-12 11:01:11.908 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56785 1 109 1 2025-09-12 11:01:11.908 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53133 1 80 1 2025-09-12 11:01:11.898 00:00:00.000 UDP 28.104.0.1:53133 -> 198.28.0.2:53 1 64 1 2025-09-12 11:01:11.898 00:00:00.000 UDP 28.104.0.1:56785 -> 198.28.0.2:53 1 64 1 2025-09-12 10:57:27.000 00:05:04.311 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-12 11:02:02.445 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-12 11:02:12.205 00:00:00.000 UDP 28.104.0.1:44787 -> 198.28.0.2:53 1 64 1 2025-09-12 11:02:12.204 00:00:00.000 UDP 28.104.0.1:44175 -> 198.28.0.2:53 1 64 1 2025-09-12 11:02:12.214 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44175 1 80 1 2025-09-12 11:02:12.214 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44787 1 109 1 2025-09-12 10:58:09.944 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2376 1 2025-09-12 11:03:12.510 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38171 1 109 1 2025-09-12 11:03:12.510 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33042 1 80 1 2025-09-12 11:03:12.499 00:00:00.000 UDP 28.104.0.1:33042 -> 198.28.0.2:53 1 64 1 2025-09-12 11:03:12.499 00:00:00.000 UDP 28.104.0.1:38171 -> 198.28.0.2:53 1 64 1 2025-09-12 10:58:31.105 00:06:00.249 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-09-12 11:04:12.808 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43587 1 80 1 2025-09-12 11:04:12.808 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56369 1 109 1 2025-09-12 11:04:12.798 00:00:00.000 UDP 28.104.0.1:43587 -> 198.28.0.2:53 1 64 1 2025-09-12 11:04:12.798 00:00:00.000 UDP 28.104.0.1:56369 -> 198.28.0.2:53 1 64 1 2025-09-12 11:05:13.107 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54883 1 80 1 2025-09-12 11:05:13.107 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60996 1 109 1 2025-09-12 11:05:13.096 00:00:00.000 UDP 28.104.0.1:60996 -> 198.28.0.2:53 1 64 1 2025-09-12 11:05:13.096 00:00:00.000 UDP 28.104.0.1:54883 -> 198.28.0.2:53 1 64 1 2025-09-12 11:00:31.105 00:05:55.907 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-12 11:00:31.299 00:05:55.752 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-12 11:06:13.399 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38004 1 109 1 2025-09-12 11:06:13.399 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33616 1 80 1 2025-09-12 11:06:13.388 00:00:00.000 UDP 28.104.0.1:33616 -> 198.28.0.2:53 1 64 1 2025-09-12 11:06:13.388 00:00:00.000 UDP 28.104.0.1:38004 -> 198.28.0.2:53 1 64 1 2025-09-12 11:01:31.115 00:05:55.887 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-12 11:01:31.106 00:06:00.231 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-09-12 11:07:02.335 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-12 11:07:13.689 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54016 1 80 1 2025-09-12 11:07:13.689 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53214 1 109 1 2025-09-12 11:07:13.679 00:00:00.000 UDP 28.104.0.1:54016 -> 198.28.0.2:53 1 64 1 2025-09-12 11:07:13.679 00:00:00.000 UDP 28.104.0.1:53214 -> 198.28.0.2:53 1 64 1 2025-09-12 11:03:27.002 00:05:04.317 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-12 11:03:29.950 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2608 1 2025-09-12 11:08:13.983 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58632 1 109 1 2025-09-12 11:08:13.983 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49062 1 80 1 2025-09-12 11:08:13.972 00:00:00.000 UDP 28.104.0.1:49062 -> 198.28.0.2:53 1 64 1 2025-09-12 11:08:13.972 00:00:00.000 UDP 28.104.0.1:58632 -> 198.28.0.2:53 1 64 1 2025-09-12 11:09:14.287 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51207 1 80 1 2025-09-12 11:09:14.286 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35563 1 109 1 2025-09-12 11:09:14.274 00:00:00.000 UDP 28.104.0.1:35563 -> 198.28.0.2:53 1 64 1 2025-09-12 11:09:14.274 00:00:00.000 UDP 28.104.0.1:51207 -> 198.28.0.2:53 1 64 1 2025-09-12 11:10:14.627 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40248 1 80 1 2025-09-12 11:10:14.628 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47633 1 109 1 2025-09-12 11:10:14.616 00:00:00.000 UDP 28.104.0.1:40248 -> 198.28.0.2:53 1 64 1 2025-09-12 11:10:14.616 00:00:00.000 UDP 28.104.0.1:47633 -> 198.28.0.2:53 1 64 1 2025-09-12 11:05:31.109 00:06:00.246 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-09-12 11:11:14.927 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49402 1 109 1 2025-09-12 11:11:14.927 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43050 1 80 1 2025-09-12 11:11:14.916 00:00:00.000 UDP 28.104.0.1:43050 -> 198.28.0.2:53 1 64 1 2025-09-12 11:11:14.916 00:00:00.000 UDP 28.104.0.1:49402 -> 198.28.0.2:53 1 64 1 2025-09-12 11:06:31.109 00:05:55.905 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-12 11:06:31.308 00:05:55.746 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-12 11:12:02.536 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-12 11:12:15.258 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39306 1 80 1 2025-09-12 11:12:15.259 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42753 1 109 1 2025-09-12 11:12:15.249 00:00:00.000 UDP 28.104.0.1:42753 -> 198.28.0.2:53 1 64 1 2025-09-12 11:12:15.249 00:00:00.000 UDP 28.104.0.1:39306 -> 198.28.0.2:53 1 64 1 2025-09-12 11:07:31.129 00:05:55.875 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-12 11:08:49.956 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2336 1 2025-09-12 11:13:15.557 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60302 1 109 1 2025-09-12 11:13:15.557 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41211 1 80 1 2025-09-12 11:13:15.546 00:00:00.000 UDP 28.104.0.1:60302 -> 198.28.0.2:53 1 64 1 2025-09-12 11:13:15.546 00:00:00.000 UDP 28.104.0.1:41211 -> 198.28.0.2:53 1 64 1 2025-09-12 11:09:27.003 00:05:04.317 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-12 11:08:31.120 00:06:00.220 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-09-12 11:14:15.855 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52501 1 80 1 2025-09-12 11:14:15.855 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40401 1 109 1 2025-09-12 11:14:15.844 00:00:00.000 UDP 28.104.0.1:52501 -> 198.28.0.2:53 1 64 1 2025-09-12 11:14:15.844 00:00:00.000 UDP 28.104.0.1:40401 -> 198.28.0.2:53 1 64 1 2025-09-12 11:15:16.166 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55551 1 109 1 2025-09-12 11:15:16.165 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43595 1 80 1 2025-09-12 11:15:16.156 00:00:00.000 UDP 28.104.0.1:55551 -> 198.28.0.2:53 1 64 1 2025-09-12 11:15:16.156 00:00:00.000 UDP 28.104.0.1:43595 -> 198.28.0.2:53 1 64 1 2025-09-12 11:16:16.449 00:00:00.000 UDP 28.104.0.1:39155 -> 198.28.0.2:53 1 64 1 2025-09-12 11:16:16.449 00:00:00.000 UDP 28.104.0.1:42787 -> 198.28.0.2:53 1 64 1 2025-09-12 11:16:16.458 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42787 1 80 1 2025-09-12 11:16:16.458 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39155 1 109 1 2025-09-12 11:17:02.558 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-12 11:17:16.739 00:00:00.000 UDP 28.104.0.1:43642 -> 198.28.0.2:53 1 64 1 2025-09-12 11:17:16.739 00:00:00.000 UDP 28.104.0.1:46489 -> 198.28.0.2:53 1 64 1 2025-09-12 11:17:16.749 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46489 1 109 1 2025-09-12 11:17:16.750 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43642 1 80 1 2025-09-12 11:12:31.120 00:05:55.895 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-12 11:12:31.310 00:05:55.744 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-12 11:12:31.119 00:06:00.236 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-09-12 11:18:17.061 00:00:00.000 UDP 28.104.0.1:42785 -> 198.28.0.2:53 1 64 1 2025-09-12 11:18:17.061 00:00:00.000 UDP 28.104.0.1:55680 -> 198.28.0.2:53 1 64 1 2025-09-12 11:18:17.071 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55680 1 80 1 2025-09-12 11:18:17.071 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42785 1 109 1 2025-09-12 11:14:09.961 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 39 2892 1 2025-09-12 11:13:31.130 00:05:55.874 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-12 11:19:17.368 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36307 1 80 1 2025-09-12 11:19:17.368 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49419 1 109 1 2025-09-12 11:19:17.357 00:00:00.000 UDP 28.104.0.1:36307 -> 198.28.0.2:53 1 64 1 2025-09-12 11:19:17.357 00:00:00.000 UDP 28.104.0.1:49419 -> 198.28.0.2:53 1 64 1 2025-09-12 11:15:27.004 00:05:04.317 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-12 11:20:17.662 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52730 1 80 1 2025-09-12 11:20:17.663 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57849 1 109 1 2025-09-12 11:20:17.653 00:00:00.000 UDP 28.104.0.1:52730 -> 198.28.0.2:53 1 64 1 2025-09-12 11:20:17.653 00:00:00.000 UDP 28.104.0.1:57849 -> 198.28.0.2:53 1 64 1 2025-09-12 11:15:31.121 00:06:00.220 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-09-12 11:21:18.229 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58166 1 109 1 2025-09-12 11:21:18.228 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34451 1 80 1 2025-09-12 11:21:18.217 00:00:00.000 UDP 28.104.0.1:34451 -> 198.28.0.2:53 1 64 1 2025-09-12 11:21:18.218 00:00:00.000 UDP 28.104.0.1:58166 -> 198.28.0.2:53 1 64 1 2025-09-12 11:22:02.662 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-12 11:22:18.512 00:00:00.000 UDP 28.104.0.1:45264 -> 198.28.0.2:53 1 64 1 2025-09-12 11:22:18.512 00:00:00.000 UDP 28.104.0.1:49538 -> 198.28.0.2:53 1 64 1 2025-09-12 11:22:18.522 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45264 1 80 1 2025-09-12 11:22:18.522 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49538 1 109 1 2025-09-12 11:23:18.808 00:00:00.000 UDP 28.104.0.1:47873 -> 198.28.0.2:53 1 64 1 2025-09-12 11:23:18.808 00:00:00.000 UDP 28.104.0.1:54266 -> 198.28.0.2:53 1 64 1 2025-09-12 11:23:18.817 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54266 1 80 1 2025-09-12 11:23:18.817 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47873 1 109 1 2025-09-12 11:18:31.121 00:05:55.895 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-12 11:18:31.311 00:05:55.744 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-12 11:19:29.966 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 38 2780 1 2025-09-12 11:24:19.697 00:00:00.000 UDP 28.104.0.1:56022 -> 198.28.0.2:53 1 64 1 2025-09-12 11:24:19.696 00:00:00.000 UDP 28.104.0.1:35367 -> 198.28.0.2:53 1 64 1 2025-09-12 11:24:19.706 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35367 1 109 1 2025-09-12 11:24:19.706 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56022 1 80 1 2025-09-12 11:19:31.131 00:05:55.874 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-12 11:19:31.122 00:06:00.264 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-09-12 11:25:19.995 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45555 1 109 1 2025-09-12 11:25:19.995 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39786 1 80 1 2025-09-12 11:25:19.985 00:00:00.000 UDP 28.104.0.1:45555 -> 198.28.0.2:53 1 64 1 2025-09-12 11:25:19.984 00:00:00.000 UDP 28.104.0.1:39786 -> 198.28.0.2:53 1 64 1 2025-09-12 11:21:27.004 00:05:04.365 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-12 11:26:20.254 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48568 1 109 1 2025-09-12 11:26:20.254 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57404 1 80 1 2025-09-12 11:26:20.243 00:00:00.000 UDP 28.104.0.1:57404 -> 198.28.0.2:53 1 64 1 2025-09-12 11:26:20.243 00:00:00.000 UDP 28.104.0.1:48568 -> 198.28.0.2:53 1 64 1 2025-09-12 11:27:02.886 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-12 11:27:20.534 00:00:00.000 UDP 28.104.0.1:33942 -> 198.28.0.2:53 1 64 1 2025-09-12 11:27:20.534 00:00:00.000 UDP 28.104.0.1:38087 -> 198.28.0.2:53 1 64 1 2025-09-12 11:27:20.544 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33942 1 80 1 2025-09-12 11:27:20.544 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38087 1 109 1 2025-09-12 11:22:31.121 00:06:00.222 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-09-12 11:28:20.829 00:00:00.000 UDP 28.104.0.1:41645 -> 198.28.0.2:53 1 64 1 2025-09-12 11:28:20.829 00:00:00.000 UDP 28.104.0.1:42748 -> 198.28.0.2:53 1 64 1 2025-09-12 11:28:20.842 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41645 1 109 1 2025-09-12 11:28:20.841 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42748 1 80 1 2025-09-12 11:24:49.972 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2376 1 2025-09-12 11:29:21.120 00:00:00.000 UDP 28.104.0.1:39829 -> 198.28.0.2:53 1 64 1 2025-09-12 11:29:21.120 00:00:00.000 UDP 28.104.0.1:55221 -> 198.28.0.2:53 1 64 1 2025-09-12 11:29:21.131 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55221 1 80 1 2025-09-12 11:29:21.131 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39829 1 109 1 2025-09-12 11:24:31.122 00:05:55.896 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-12 11:24:31.348 00:05:55.709 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-12 11:30:21.422 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59774 1 80 1 2025-09-12 11:30:21.423 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58344 1 109 1 2025-09-12 11:30:21.412 00:00:00.000 UDP 28.104.0.1:59774 -> 198.28.0.2:53 1 64 1 2025-09-12 11:30:21.412 00:00:00.000 UDP 28.104.0.1:58344 -> 198.28.0.2:53 1 64 1 2025-09-12 11:25:31.132 00:05:55.875 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-12 11:31:21.721 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56944 1 109 1 2025-09-12 11:31:21.721 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35935 1 80 1 2025-09-12 11:31:21.712 00:00:00.000 UDP 28.104.0.1:56944 -> 198.28.0.2:53 1 64 1 2025-09-12 11:31:21.712 00:00:00.000 UDP 28.104.0.1:35935 -> 198.28.0.2:53 1 64 1 2025-09-12 11:27:27.006 00:05:04.363 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-12 11:26:31.123 00:06:00.270 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-09-12 11:32:02.858 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-12 11:32:22.059 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55223 1 109 1 2025-09-12 11:32:22.059 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42246 1 80 1 2025-09-12 11:32:22.050 00:00:00.000 UDP 28.104.0.1:55223 -> 198.28.0.2:53 1 64 1 2025-09-12 11:32:22.050 00:00:00.000 UDP 28.104.0.1:42246 -> 198.28.0.2:53 1 64 1 2025-09-12 11:33:22.342 00:00:00.000 UDP 28.104.0.1:39393 -> 198.28.0.2:53 1 64 1 2025-09-12 11:33:22.342 00:00:00.000 UDP 28.104.0.1:41018 -> 198.28.0.2:53 1 64 1 2025-09-12 11:33:22.352 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39393 1 109 1 2025-09-12 11:33:22.352 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41018 1 80 1 2025-09-12 11:34:22.636 00:00:00.000 UDP 28.104.0.1:40061 -> 198.28.0.2:53 1 64 1 2025-09-12 11:30:09.978 00:05:10.029 OSPF 28.0.2.2:0 -> 224.0.0.5:0 38 2688 1 2025-09-12 11:34:22.636 00:00:00.000 UDP 28.104.0.1:38626 -> 198.28.0.2:53 1 64 1 2025-09-12 11:34:22.647 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40061 1 109 1 2025-09-12 11:34:22.648 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38626 1 80 1 2025-09-12 11:29:31.123 00:06:00.221 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-09-12 11:35:22.908 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37421 1 80 1 2025-09-12 11:35:22.908 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37435 1 109 1 2025-09-12 11:35:22.897 00:00:00.000 UDP 28.104.0.1:37435 -> 198.28.0.2:53 1 64 1 2025-09-12 11:35:22.896 00:00:00.000 UDP 28.104.0.1:37421 -> 198.28.0.2:53 1 64 1 2025-09-12 11:30:31.122 00:05:55.895 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-12 11:30:31.358 00:05:55.698 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-12 11:36:23.170 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56454 1 109 1 2025-09-12 11:36:23.174 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33345 1 80 1 2025-09-12 11:36:23.160 00:00:00.000 UDP 28.104.0.1:33345 -> 198.28.0.2:53 1 64 1 2025-09-12 11:36:23.160 00:00:00.000 UDP 28.104.0.1:56454 -> 198.28.0.2:53 1 64 1 2025-09-12 11:31:31.135 00:05:55.872 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-12 11:37:02.977 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-12 11:37:23.472 00:00:00.000 UDP 28.104.0.1:50154 -> 198.28.0.2:53 1 64 1 2025-09-12 11:37:23.472 00:00:00.000 UDP 28.104.0.1:41749 -> 198.28.0.2:53 1 64 1 2025-09-12 11:37:23.486 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41749 1 109 1 2025-09-12 11:37:23.484 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50154 1 80 1 2025-09-12 11:33:27.007 00:05:04.363 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-12 11:38:23.790 00:00:00.000 UDP 28.104.0.1:40994 -> 198.28.0.2:53 1 64 1 2025-09-12 11:38:23.791 00:00:00.000 UDP 28.104.0.1:56700 -> 198.28.0.2:53 1 64 1 2025-09-12 11:38:23.801 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56700 1 80 1 2025-09-12 11:38:23.801 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40994 1 109 1 2025-09-12 11:33:31.126 00:06:00.270 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-09-12 11:39:24.097 00:00:00.000 UDP 28.104.0.1:39253 -> 198.28.0.2:53 1 64 1 2025-09-12 11:39:24.097 00:00:00.000 UDP 28.104.0.1:50449 -> 198.28.0.2:53 1 64 1 2025-09-12 11:39:24.108 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39253 1 80 1 2025-09-12 11:39:24.108 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50449 1 109 1 2025-09-12 11:35:29.983 00:05:10.009 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2336 1 2025-09-12 11:40:24.401 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50514 1 109 1 2025-09-12 11:40:24.401 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34358 1 80 1 2025-09-12 11:40:24.391 00:00:00.000 UDP 28.104.0.1:34358 -> 198.28.0.2:53 1 64 1 2025-09-12 11:40:24.391 00:00:00.000 UDP 28.104.0.1:50514 -> 198.28.0.2:53 1 64 1 2025-09-12 11:41:24.684 00:00:00.000 UDP 28.104.0.1:47345 -> 198.28.0.2:53 1 64 1 2025-09-12 11:36:31.126 00:05:55.894 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-12 11:41:24.684 00:00:00.000 UDP 28.104.0.1:51361 -> 198.28.0.2:53 1 64 1 2025-09-12 11:36:31.360 00:05:55.699 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-12 11:41:24.694 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51361 1 80 1 2025-09-12 11:41:24.694 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47345 1 109 1 2025-09-12 11:36:31.127 00:06:00.219 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-09-12 11:42:03.386 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-12 11:42:24.985 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59904 1 80 1 2025-09-12 11:37:31.136 00:05:55.874 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-12 11:42:24.985 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38926 1 109 1 2025-09-12 11:42:24.977 00:00:00.000 UDP 28.104.0.1:59904 -> 198.28.0.2:53 1 64 1 2025-09-12 11:42:24.977 00:00:00.000 UDP 28.104.0.1:38926 -> 198.28.0.2:53 1 64 1 2025-09-12 11:43:25.241 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39459 1 80 1 2025-09-12 11:43:25.242 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38816 1 109 1 2025-09-12 11:43:25.231 00:00:00.000 UDP 28.104.0.1:39459 -> 198.28.0.2:53 1 64 1 2025-09-12 11:43:25.233 00:00:00.000 UDP 28.104.0.1:38816 -> 198.28.0.2:53 1 64 1 2025-09-12 11:39:27.010 00:05:04.361 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-12 11:44:25.881 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58288 1 109 1 2025-09-12 11:44:25.881 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45319 1 80 1 2025-09-12 11:44:25.870 00:00:00.000 UDP 28.104.0.1:58288 -> 198.28.0.2:53 1 64 1 2025-09-12 11:44:25.870 00:00:00.000 UDP 28.104.0.1:45319 -> 198.28.0.2:53 1 64 1 2025-09-12 11:40:49.992 00:05:00.060 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2388 1 2025-09-12 11:45:26.154 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59587 1 80 1 2025-09-12 11:45:26.154 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42952 1 109 1 2025-09-12 11:45:26.144 00:00:00.000 UDP 28.104.0.1:42952 -> 198.28.0.2:53 1 64 1 2025-09-12 11:45:26.144 00:00:00.000 UDP 28.104.0.1:59587 -> 198.28.0.2:53 1 64 1 2025-09-12 11:40:31.126 00:06:00.272 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-09-12 11:46:26.446 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54376 1 109 1 2025-09-12 11:46:26.446 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43862 1 80 1 2025-09-12 11:46:26.437 00:00:00.000 UDP 28.104.0.1:43862 -> 198.28.0.2:53 1 64 1 2025-09-12 11:46:26.436 00:00:00.000 UDP 28.104.0.1:54376 -> 198.28.0.2:53 1 64 1 2025-09-12 11:47:03.128 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-12 11:42:31.126 00:05:55.901 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-12 11:47:26.728 00:00:00.000 UDP 28.104.0.1:49475 -> 198.28.0.2:53 1 64 1 2025-09-12 11:42:31.360 00:05:55.707 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-12 11:47:26.727 00:00:00.000 UDP 28.104.0.1:48012 -> 198.28.0.2:53 1 64 1 2025-09-12 11:47:26.738 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49475 1 80 1 2025-09-12 11:47:26.740 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48012 1 109 1 2025-09-12 11:48:27.058 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55680 1 109 1 2025-09-12 11:43:31.137 00:05:55.901 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-12 11:48:27.058 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55962 1 80 1 2025-09-12 11:48:27.047 00:00:00.000 UDP 28.104.0.1:55962 -> 198.28.0.2:53 1 64 1 2025-09-12 11:48:27.047 00:00:00.000 UDP 28.104.0.1:55680 -> 198.28.0.2:53 1 64 1 2025-09-12 11:43:31.127 00:06:00.223 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-09-12 11:49:27.343 00:00:00.000 UDP 28.104.0.1:41831 -> 198.28.0.2:53 1 64 1 2025-09-12 11:49:27.343 00:00:00.000 UDP 28.104.0.1:46466 -> 198.28.0.2:53 1 64 1 2025-09-12 11:49:27.354 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46466 1 80 1 2025-09-12 11:49:27.354 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41831 1 109 1 2025-09-12 11:45:27.010 00:05:04.362 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-12 11:46:00.000 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 39 2936 1 2025-09-12 11:50:27.606 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35856 1 109 1 2025-09-12 11:50:27.606 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59951 1 80 1 2025-09-12 11:50:27.597 00:00:00.000 UDP 28.104.0.1:59951 -> 198.28.0.2:53 1 64 1 2025-09-12 11:50:27.597 00:00:00.000 UDP 28.104.0.1:35856 -> 198.28.0.2:53 1 64 1 2025-09-12 11:51:27.869 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39870 1 80 1 2025-09-12 11:51:27.869 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49210 1 109 1 2025-09-12 11:51:27.859 00:00:00.000 UDP 28.104.0.1:49210 -> 198.28.0.2:53 1 64 1 2025-09-12 11:51:27.859 00:00:00.000 UDP 28.104.0.1:39870 -> 198.28.0.2:53 1 64 1 2025-09-12 11:52:03.260 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-12 11:52:28.176 00:00:00.000 UDP 28.104.0.1:41705 -> 198.28.0.2:53 1 64 1 2025-09-12 11:52:28.176 00:00:00.000 UDP 28.104.0.1:44305 -> 198.28.0.2:53 1 64 1 2025-09-12 11:52:28.186 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44305 1 109 1 2025-09-12 11:52:28.186 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41705 1 80 1 2025-09-12 11:47:31.128 00:06:00.271 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-09-12 11:48:31.128 00:05:55.927 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-12 11:53:28.468 00:00:00.000 UDP 28.104.0.1:41910 -> 198.28.0.2:53 1 64 1 2025-09-12 11:48:31.361 00:05:55.734 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-12 11:53:28.468 00:00:00.000 UDP 28.104.0.1:57036 -> 198.28.0.2:53 1 64 1 2025-09-12 11:53:28.478 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41910 1 80 1 2025-09-12 11:53:28.478 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57036 1 109 1 2025-09-12 11:54:28.726 00:00:00.000 UDP 28.104.0.1:37712 -> 198.28.0.2:53 1 64 1 2025-09-12 11:54:28.726 00:00:00.000 UDP 28.104.0.1:46910 -> 198.28.0.2:53 1 64 1 2025-09-12 11:54:28.737 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46910 1 109 1 2025-09-12 11:49:31.139 00:05:55.908 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-12 11:54:28.737 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37712 1 80 1 2025-09-12 11:55:29.044 00:00:00.000 UDP 28.104.0.1:58493 -> 198.28.0.2:53 1 64 1 2025-09-12 11:55:29.044 00:00:00.000 UDP 28.104.0.1:55627 -> 198.28.0.2:53 1 64 1 2025-09-12 11:50:31.128 00:06:00.223 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-09-12 11:51:20.005 00:05:10.038 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2600 1 2025-09-12 11:55:29.054 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55627 1 80 1 2025-09-12 11:51:27.040 00:05:04.332 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-12 11:55:29.054 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58493 1 109 1 2025-09-12 11:56:29.346 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33448 1 80 1 2025-09-12 11:56:29.346 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37708 1 109 1 2025-09-12 11:56:29.336 00:00:00.000 UDP 28.104.0.1:37708 -> 198.28.0.2:53 1 64 1 2025-09-12 11:56:29.336 00:00:00.000 UDP 28.104.0.1:33448 -> 198.28.0.2:53 1 64 1 2025-09-12 11:57:03.525 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-12 11:57:29.668 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36052 1 80 1 2025-09-12 11:57:29.668 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53972 1 109 1 2025-09-12 11:57:29.659 00:00:00.000 UDP 28.104.0.1:36052 -> 198.28.0.2:53 1 64 1 2025-09-12 11:57:29.659 00:00:00.000 UDP 28.104.0.1:53972 -> 198.28.0.2:53 1 64 1 2025-09-12 11:58:29.953 00:00:00.000 UDP 28.104.0.1:37214 -> 198.28.0.2:53 1 64 1 2025-09-12 11:58:29.953 00:00:00.000 UDP 28.104.0.1:40140 -> 198.28.0.2:53 1 64 1 2025-09-12 11:58:29.964 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40140 1 80 1 2025-09-12 11:58:29.965 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37214 1 109 1 Summary: total flows: 320, total bytes: 94465, total packets: 1391, avg bps: 196, avg pps: 0, avg bpp: 67 Time window: 2025-09-12 10:54:31 - 2025-09-12 11:58:29 Total flows processed: 320, passed: 320, Blocks skipped: 0, Bytes read: 33344 Sys: 0.0045s User: 0.0022s Wall: 0.0042s flows/second: 75988.1 Runtime: 0.0042s