Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-13 01:54:31.555 00:05:55.748 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-13 01:54:31.799 00:05:55.544 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-13 01:59:30.446 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38091 1 80 1 2025-09-13 01:59:30.446 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57257 1 109 1 2025-09-13 01:59:30.436 00:00:00.000 UDP 28.104.0.1:38091 -> 198.28.0.2:53 1 64 1 2025-09-13 01:59:30.436 00:00:00.000 UDP 28.104.0.1:57257 -> 198.28.0.2:53 1 64 1 2025-09-13 01:54:31.555 00:06:00.264 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-09-13 01:55:31.565 00:05:55.728 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-13 02:00:30.705 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51596 1 109 1 2025-09-13 02:00:30.705 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52015 1 80 1 2025-09-13 02:00:30.694 00:00:00.000 UDP 28.104.0.1:51596 -> 198.28.0.2:53 1 64 1 2025-09-13 02:00:30.694 00:00:00.000 UDP 28.104.0.1:52015 -> 198.28.0.2:53 1 64 1 2025-09-13 02:01:30.956 00:00:00.000 UDP 28.104.0.1:59580 -> 198.28.0.2:53 1 64 1 2025-09-13 02:01:30.956 00:00:00.000 UDP 28.104.0.1:52324 -> 198.28.0.2:53 1 64 1 2025-09-13 02:01:30.967 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59580 1 109 1 2025-09-13 01:57:27.292 00:05:04.518 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-13 02:01:30.967 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52324 1 80 1 2025-09-13 02:02:20.292 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-13 02:02:31.271 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41558 1 109 1 2025-09-13 02:02:31.271 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58142 1 80 1 2025-09-13 02:02:31.261 00:00:00.000 UDP 28.104.0.1:58142 -> 198.28.0.2:53 1 64 1 2025-09-13 01:57:31.556 00:06:00.219 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-09-13 02:02:31.260 00:00:00.000 UDP 28.104.0.1:41558 -> 198.28.0.2:53 1 64 1 2025-09-13 01:59:01.233 00:05:10.003 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2616 1 2025-09-13 02:03:31.581 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48724 1 80 1 2025-09-13 02:03:31.581 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52155 1 109 1 2025-09-13 02:03:31.571 00:00:00.000 UDP 28.104.0.1:48724 -> 198.28.0.2:53 1 64 1 2025-09-13 02:03:31.571 00:00:00.000 UDP 28.104.0.1:52155 -> 198.28.0.2:53 1 64 1 2025-09-13 02:04:31.919 00:00:00.000 UDP 28.104.0.1:53522 -> 198.28.0.2:53 1 64 1 2025-09-13 02:04:31.919 00:00:00.000 UDP 28.104.0.1:35096 -> 198.28.0.2:53 1 64 1 2025-09-13 02:04:31.929 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53522 1 109 1 2025-09-13 02:04:31.929 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35096 1 80 1 2025-09-13 02:00:31.557 00:05:55.747 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-13 02:00:31.800 00:05:55.544 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-13 02:05:32.193 00:00:00.000 UDP 28.104.0.1:34493 -> 198.28.0.2:53 1 64 1 2025-09-13 02:05:32.193 00:00:00.000 UDP 28.104.0.1:38750 -> 198.28.0.2:53 1 64 1 2025-09-13 02:05:32.203 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38750 1 109 1 2025-09-13 02:05:32.204 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34493 1 80 1 2025-09-13 02:01:31.568 00:05:55.727 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-13 02:06:32.975 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48025 1 80 1 2025-09-13 02:06:32.975 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50090 1 109 1 2025-09-13 02:01:31.557 00:06:00.265 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-09-13 02:06:32.965 00:00:00.000 UDP 28.104.0.1:50090 -> 198.28.0.2:53 1 64 1 2025-09-13 02:06:32.965 00:00:00.000 UDP 28.104.0.1:48025 -> 198.28.0.2:53 1 64 1 2025-09-13 02:07:20.416 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-13 02:07:33.276 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44919 1 109 1 2025-09-13 02:03:27.294 00:05:04.519 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-13 02:07:33.276 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52916 1 80 1 2025-09-13 02:07:33.264 00:00:00.000 UDP 28.104.0.1:52916 -> 198.28.0.2:53 1 64 1 2025-09-13 02:07:33.264 00:00:00.000 UDP 28.104.0.1:44919 -> 198.28.0.2:53 1 64 1 2025-09-13 02:08:33.571 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50591 1 109 1 2025-09-13 02:08:33.571 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37880 1 80 1 2025-09-13 02:08:33.562 00:00:00.000 UDP 28.104.0.1:37880 -> 198.28.0.2:53 1 64 1 2025-09-13 02:08:33.562 00:00:00.000 UDP 28.104.0.1:50591 -> 198.28.0.2:53 1 64 1 2025-09-13 02:04:21.237 00:05:10.022 OSPF 28.0.2.2:0 -> 224.0.0.5:0 39 2952 1 2025-09-13 02:09:33.871 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42588 1 80 1 2025-09-13 02:09:33.870 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56265 1 109 1 2025-09-13 02:09:33.860 00:00:00.000 UDP 28.104.0.1:42588 -> 198.28.0.2:53 1 64 1 2025-09-13 02:09:33.860 00:00:00.000 UDP 28.104.0.1:56265 -> 198.28.0.2:53 1 64 1 2025-09-13 02:04:31.557 00:06:00.224 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-09-13 02:10:34.195 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51275 1 109 1 2025-09-13 02:10:34.195 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38823 1 80 1 2025-09-13 02:10:34.185 00:00:00.000 UDP 28.104.0.1:38823 -> 198.28.0.2:53 1 64 1 2025-09-13 02:10:34.185 00:00:00.000 UDP 28.104.0.1:51275 -> 198.28.0.2:53 1 64 1 2025-09-13 02:06:31.557 00:05:55.748 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-13 02:06:31.801 00:05:55.544 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-13 02:11:34.496 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56634 1 80 1 2025-09-13 02:11:34.496 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49627 1 109 1 2025-09-13 02:11:34.487 00:00:00.000 UDP 28.104.0.1:49627 -> 198.28.0.2:53 1 64 1 2025-09-13 02:11:34.487 00:00:00.000 UDP 28.104.0.1:56634 -> 198.28.0.2:53 1 64 1 2025-09-13 02:12:20.508 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-13 02:07:31.567 00:05:55.728 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-13 02:12:34.782 00:00:00.000 UDP 28.104.0.1:38060 -> 198.28.0.2:53 1 64 1 2025-09-13 02:12:34.782 00:00:00.000 UDP 28.104.0.1:46903 -> 198.28.0.2:53 1 64 1 2025-09-13 02:12:34.793 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38060 1 109 1 2025-09-13 02:12:34.793 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46903 1 80 1 2025-09-13 02:08:31.559 00:06:00.275 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-09-13 02:09:27.294 00:05:04.527 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-13 02:13:35.091 00:00:00.000 UDP 28.104.0.1:40137 -> 198.28.0.2:53 1 64 1 2025-09-13 02:13:35.091 00:00:00.000 UDP 28.104.0.1:58313 -> 198.28.0.2:53 1 64 1 2025-09-13 02:13:35.102 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58313 1 80 1 2025-09-13 02:13:35.102 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40137 1 109 1 2025-09-13 02:09:41.244 00:05:10.010 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2520 1 2025-09-13 02:14:35.383 00:00:00.000 UDP 28.104.0.1:51775 -> 198.28.0.2:53 1 64 1 2025-09-13 02:14:35.383 00:00:00.000 UDP 28.104.0.1:48229 -> 198.28.0.2:53 1 64 1 2025-09-13 02:14:35.394 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51775 1 80 1 2025-09-13 02:14:35.394 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48229 1 109 1 2025-09-13 02:15:35.692 00:00:00.000 UDP 28.104.0.1:56193 -> 198.28.0.2:53 1 64 1 2025-09-13 02:15:35.692 00:00:00.000 UDP 28.104.0.1:55010 -> 198.28.0.2:53 1 64 1 2025-09-13 02:15:35.702 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55010 1 80 1 2025-09-13 02:15:35.702 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56193 1 109 1 2025-09-13 02:16:35.998 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40930 1 109 1 2025-09-13 02:16:35.997 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47170 1 80 1 2025-09-13 02:11:31.558 00:06:00.224 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-09-13 02:16:35.986 00:00:00.000 UDP 28.104.0.1:47170 -> 198.28.0.2:53 1 64 1 2025-09-13 02:16:35.987 00:00:00.000 UDP 28.104.0.1:40930 -> 198.28.0.2:53 1 64 1 2025-09-13 02:17:20.555 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-13 02:12:31.558 00:05:55.749 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-13 02:12:31.811 00:05:55.536 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-13 02:17:36.289 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54424 1 109 1 2025-09-13 02:17:36.288 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33541 1 80 1 2025-09-13 02:17:36.281 00:00:00.000 UDP 28.104.0.1:54424 -> 198.28.0.2:53 1 64 1 2025-09-13 02:17:36.280 00:00:00.000 UDP 28.104.0.1:33541 -> 198.28.0.2:53 1 64 1 2025-09-13 02:13:31.569 00:05:55.728 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-13 02:18:36.589 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48223 1 109 1 2025-09-13 02:18:36.589 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41200 1 80 1 2025-09-13 02:18:36.579 00:00:00.000 UDP 28.104.0.1:41200 -> 198.28.0.2:53 1 64 1 2025-09-13 02:18:36.579 00:00:00.000 UDP 28.104.0.1:48223 -> 198.28.0.2:53 1 64 1 2025-09-13 02:15:01.255 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2624 1 2025-09-13 02:15:27.296 00:05:04.526 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-13 02:19:36.889 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52099 1 109 1 2025-09-13 02:19:36.888 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54332 1 80 1 2025-09-13 02:19:36.877 00:00:00.000 UDP 28.104.0.1:52099 -> 198.28.0.2:53 1 64 1 2025-09-13 02:19:36.876 00:00:00.000 UDP 28.104.0.1:54332 -> 198.28.0.2:53 1 64 1 2025-09-13 02:20:37.183 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60731 1 109 1 2025-09-13 02:20:37.183 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60551 1 80 1 2025-09-13 02:15:31.558 00:06:00.278 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-09-13 02:20:37.172 00:00:00.000 UDP 28.104.0.1:60731 -> 198.28.0.2:53 1 64 1 2025-09-13 02:20:37.172 00:00:00.000 UDP 28.104.0.1:60551 -> 198.28.0.2:53 1 64 1 2025-09-13 02:21:37.473 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40064 1 80 1 2025-09-13 02:21:37.473 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55575 1 109 1 2025-09-13 02:21:37.463 00:00:00.000 UDP 28.104.0.1:55575 -> 198.28.0.2:53 1 64 1 2025-09-13 02:21:37.463 00:00:00.000 UDP 28.104.0.1:40064 -> 198.28.0.2:53 1 64 1 2025-09-13 02:22:20.832 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-13 02:22:37.772 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34223 1 80 1 2025-09-13 02:22:37.772 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36211 1 109 1 2025-09-13 02:22:37.761 00:00:00.000 UDP 28.104.0.1:34223 -> 198.28.0.2:53 1 64 1 2025-09-13 02:22:37.761 00:00:00.000 UDP 28.104.0.1:36211 -> 198.28.0.2:53 1 64 1 2025-09-13 02:18:31.560 00:05:55.747 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-13 02:18:31.811 00:05:55.536 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-13 02:18:31.561 00:06:00.227 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-09-13 02:23:38.068 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46290 1 109 1 2025-09-13 02:23:38.068 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60832 1 80 1 2025-09-13 02:23:38.058 00:00:00.000 UDP 28.104.0.1:60832 -> 198.28.0.2:53 1 64 1 2025-09-13 02:23:38.058 00:00:00.000 UDP 28.104.0.1:46290 -> 198.28.0.2:53 1 64 1 2025-09-13 02:19:31.571 00:05:55.727 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-13 02:24:38.792 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49189 1 109 1 2025-09-13 02:24:38.792 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44495 1 80 1 2025-09-13 02:20:21.260 00:05:10.009 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2336 1 2025-09-13 02:24:38.781 00:00:00.000 UDP 28.104.0.1:49189 -> 198.28.0.2:53 1 64 1 2025-09-13 02:24:38.781 00:00:00.000 UDP 28.104.0.1:44495 -> 198.28.0.2:53 1 64 1 2025-09-13 02:21:27.297 00:05:04.526 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-13 02:25:39.069 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40595 1 80 1 2025-09-13 02:25:39.069 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33870 1 109 1 2025-09-13 02:25:39.059 00:00:00.000 UDP 28.104.0.1:33870 -> 198.28.0.2:53 1 64 1 2025-09-13 02:25:39.059 00:00:00.000 UDP 28.104.0.1:40595 -> 198.28.0.2:53 1 64 1 2025-09-13 02:26:39.366 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53262 1 80 1 2025-09-13 02:26:39.367 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57998 1 109 1 2025-09-13 02:26:39.358 00:00:00.000 UDP 28.104.0.1:53262 -> 198.28.0.2:53 1 64 1 2025-09-13 02:26:39.358 00:00:00.000 UDP 28.104.0.1:57998 -> 198.28.0.2:53 1 64 1 2025-09-13 02:27:20.844 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-13 02:22:31.560 00:06:00.276 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-09-13 02:27:39.659 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57950 1 80 1 2025-09-13 02:27:39.659 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39136 1 109 1 2025-09-13 02:27:39.650 00:00:00.000 UDP 28.104.0.1:39136 -> 198.28.0.2:53 1 64 1 2025-09-13 02:27:39.650 00:00:00.000 UDP 28.104.0.1:57950 -> 198.28.0.2:53 1 64 1 2025-09-13 02:28:39.960 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51722 1 109 1 2025-09-13 02:28:39.960 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36196 1 80 1 2025-09-13 02:28:39.946 00:00:00.000 UDP 28.104.0.1:36196 -> 198.28.0.2:53 1 64 1 2025-09-13 02:28:39.946 00:00:00.000 UDP 28.104.0.1:51722 -> 198.28.0.2:53 1 64 1 2025-09-13 02:24:31.561 00:05:55.747 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-13 02:24:31.813 00:05:55.535 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-13 02:29:40.243 00:00:00.000 UDP 28.104.0.1:48359 -> 198.28.0.2:53 1 64 1 2025-09-13 02:29:40.243 00:00:00.000 UDP 28.104.0.1:44008 -> 198.28.0.2:53 1 64 1 2025-09-13 02:29:40.253 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44008 1 80 1 2025-09-13 02:29:40.253 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48359 1 109 1 2025-09-13 02:25:41.269 00:05:10.007 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2456 1 2025-09-13 02:25:31.573 00:05:55.725 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-13 02:25:31.563 00:06:00.227 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-09-13 02:30:40.536 00:00:00.000 UDP 28.104.0.1:36041 -> 198.28.0.2:53 1 64 1 2025-09-13 02:30:40.536 00:00:00.000 UDP 28.104.0.1:46589 -> 198.28.0.2:53 1 64 1 2025-09-13 02:30:40.547 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36041 1 80 1 2025-09-13 02:30:40.547 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46589 1 109 1 2025-09-13 02:27:27.298 00:05:04.527 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-13 02:31:40.824 00:00:00.000 UDP 28.104.0.1:37201 -> 198.28.0.2:53 1 64 1 2025-09-13 02:31:40.824 00:00:00.000 UDP 28.104.0.1:46517 -> 198.28.0.2:53 1 64 1 2025-09-13 02:31:40.834 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46517 1 80 1 2025-09-13 02:31:40.834 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37201 1 109 1 2025-09-13 02:32:20.859 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-13 02:32:41.112 00:00:00.000 UDP 28.104.0.1:32962 -> 198.28.0.2:53 1 64 1 2025-09-13 02:32:41.112 00:00:00.000 UDP 28.104.0.1:47756 -> 198.28.0.2:53 1 64 1 2025-09-13 02:32:41.122 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47756 1 80 1 2025-09-13 02:32:41.122 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32962 1 109 1 2025-09-13 02:33:41.375 00:00:00.000 UDP 28.104.0.1:44396 -> 198.28.0.2:53 1 64 1 2025-09-13 02:33:41.375 00:00:00.000 UDP 28.104.0.1:59657 -> 198.28.0.2:53 1 64 1 2025-09-13 02:33:41.386 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44396 1 109 1 2025-09-13 02:33:41.386 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59657 1 80 1 2025-09-13 02:29:31.566 00:06:00.273 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-09-13 02:34:41.705 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54708 1 109 1 2025-09-13 02:34:41.705 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48349 1 80 1 2025-09-13 02:34:41.695 00:00:00.000 UDP 28.104.0.1:54708 -> 198.28.0.2:53 1 64 1 2025-09-13 02:34:41.695 00:00:00.000 UDP 28.104.0.1:48349 -> 198.28.0.2:53 1 64 1 2025-09-13 02:31:01.273 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 40 2932 1 2025-09-13 02:30:31.569 00:05:55.741 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-13 02:30:31.815 00:05:55.535 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-13 02:35:42.009 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50797 1 109 1 2025-09-13 02:35:42.009 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36272 1 80 1 2025-09-13 02:35:41.996 00:00:00.000 UDP 28.104.0.1:36272 -> 198.28.0.2:53 1 64 1 2025-09-13 02:35:41.996 00:00:00.000 UDP 28.104.0.1:50797 -> 198.28.0.2:53 1 64 1 2025-09-13 02:31:31.575 00:05:55.725 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-13 02:36:42.299 00:00:00.000 UDP 28.104.0.1:34005 -> 198.28.0.2:53 1 64 1 2025-09-13 02:36:42.299 00:00:00.000 UDP 28.104.0.1:37953 -> 198.28.0.2:53 1 64 1 2025-09-13 02:36:42.309 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34005 1 80 1 2025-09-13 02:36:42.309 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37953 1 109 1 2025-09-13 02:37:21.028 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-13 02:32:31.568 00:06:00.223 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-09-13 02:33:27.298 00:05:04.532 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-13 02:37:43.131 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57337 1 109 1 2025-09-13 02:37:43.131 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34106 1 80 1 2025-09-13 02:37:43.119 00:00:00.000 UDP 28.104.0.1:34106 -> 198.28.0.2:53 1 64 1 2025-09-13 02:37:43.119 00:00:00.000 UDP 28.104.0.1:57337 -> 198.28.0.2:53 1 64 1 2025-09-13 02:38:43.424 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41993 1 80 1 2025-09-13 02:38:43.424 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57843 1 109 1 2025-09-13 02:38:43.413 00:00:00.000 UDP 28.104.0.1:57843 -> 198.28.0.2:53 1 64 1 2025-09-13 02:38:43.413 00:00:00.000 UDP 28.104.0.1:41993 -> 198.28.0.2:53 1 64 1 2025-09-13 02:39:43.665 00:00:00.000 UDP 28.104.0.1:60700 -> 198.28.0.2:53 1 64 1 2025-09-13 02:39:43.665 00:00:00.000 UDP 28.104.0.1:35216 -> 198.28.0.2:53 1 64 1 2025-09-13 02:39:43.675 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35216 1 109 1 2025-09-13 02:39:43.675 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60700 1 80 1 2025-09-13 02:36:21.279 00:05:10.004 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2636 1 2025-09-13 02:40:43.953 00:00:00.000 UDP 28.104.0.1:43841 -> 198.28.0.2:53 1 64 1 2025-09-13 02:40:43.953 00:00:00.000 UDP 28.104.0.1:55440 -> 198.28.0.2:53 1 64 1 2025-09-13 02:40:43.964 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43841 1 109 1 2025-09-13 02:40:43.964 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55440 1 80 1 2025-09-13 02:36:31.568 00:05:55.744 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-13 02:36:31.815 00:05:55.537 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-13 02:36:31.568 00:06:00.274 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-09-13 02:41:44.264 00:00:00.000 UDP 28.104.0.1:35804 -> 198.28.0.2:53 1 64 1 2025-09-13 02:41:44.264 00:00:00.000 UDP 28.104.0.1:55555 -> 198.28.0.2:53 1 64 1 2025-09-13 02:41:44.274 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55555 1 109 1 2025-09-13 02:41:44.273 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35804 1 80 1 2025-09-13 02:42:20.886 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-13 02:37:31.579 00:05:55.724 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-13 02:42:44.568 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48808 1 80 1 2025-09-13 02:42:44.568 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53248 1 109 1 2025-09-13 02:42:44.557 00:00:00.000 UDP 28.104.0.1:53248 -> 198.28.0.2:53 1 64 1 2025-09-13 02:42:44.557 00:00:00.000 UDP 28.104.0.1:48808 -> 198.28.0.2:53 1 64 1 2025-09-13 02:39:27.302 00:05:04.530 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-13 02:43:44.851 00:00:00.000 UDP 28.104.0.1:38054 -> 198.28.0.2:53 1 64 1 2025-09-13 02:43:44.851 00:00:00.000 UDP 28.104.0.1:46415 -> 198.28.0.2:53 1 64 1 2025-09-13 02:43:44.862 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46415 1 109 1 2025-09-13 02:43:44.861 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38054 1 80 1 2025-09-13 02:39:31.573 00:06:00.221 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-09-13 02:44:45.149 00:00:00.000 UDP 28.104.0.1:57116 -> 198.28.0.2:53 1 64 1 2025-09-13 02:44:45.149 00:00:00.000 UDP 28.104.0.1:51416 -> 198.28.0.2:53 1 64 1 2025-09-13 02:44:45.160 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51416 1 80 1 2025-09-13 02:44:45.160 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57116 1 109 1 2025-09-13 02:45:45.453 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32982 1 80 1 2025-09-13 02:45:45.454 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37201 1 109 1 2025-09-13 02:45:45.442 00:00:00.000 UDP 28.104.0.1:37201 -> 198.28.0.2:53 1 64 1 2025-09-13 02:45:45.442 00:00:00.000 UDP 28.104.0.1:32982 -> 198.28.0.2:53 1 64 1 2025-09-13 02:41:41.282 00:05:10.009 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2456 1 2025-09-13 02:46:55.281 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60932 1 109 1 2025-09-13 02:46:55.281 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59505 1 80 1 2025-09-13 02:46:55.272 00:00:00.000 UDP 28.104.0.1:59505 -> 198.28.0.2:53 1 64 1 2025-09-13 02:46:55.272 00:00:00.000 UDP 28.104.0.1:60932 -> 198.28.0.2:53 1 64 1 2025-09-13 02:47:21.133 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-13 02:42:31.573 00:05:55.741 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-13 02:42:31.819 00:05:55.535 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-13 02:47:55.570 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43401 1 80 1 2025-09-13 02:47:55.570 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40589 1 109 1 2025-09-13 02:47:55.560 00:00:00.000 UDP 28.104.0.1:43401 -> 198.28.0.2:53 1 64 1 2025-09-13 02:47:55.560 00:00:00.000 UDP 28.104.0.1:40589 -> 198.28.0.2:53 1 64 1 2025-09-13 02:43:31.582 00:05:55.721 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-13 02:43:31.573 00:06:00.269 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-09-13 02:48:55.849 00:00:00.000 UDP 28.104.0.1:59085 -> 198.28.0.2:53 1 64 1 2025-09-13 02:48:55.849 00:00:00.000 UDP 28.104.0.1:32885 -> 198.28.0.2:53 1 64 1 2025-09-13 02:48:55.861 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59085 1 109 1 2025-09-13 02:48:55.861 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32885 1 80 1 2025-09-13 02:45:27.302 00:05:04.532 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-13 02:49:56.179 00:00:00.000 UDP 28.104.0.1:56371 -> 198.28.0.2:53 1 64 1 2025-09-13 02:49:56.179 00:00:00.000 UDP 28.104.0.1:46233 -> 198.28.0.2:53 1 64 1 2025-09-13 02:49:56.190 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56371 1 80 1 2025-09-13 02:49:56.192 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46233 1 109 1 2025-09-13 02:50:56.477 00:00:00.000 UDP 28.104.0.1:33766 -> 198.28.0.2:53 1 64 1 2025-09-13 02:50:56.478 00:00:00.000 UDP 28.104.0.1:52889 -> 198.28.0.2:53 1 64 1 2025-09-13 02:50:56.488 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52889 1 80 1 2025-09-13 02:50:56.488 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33766 1 109 1 2025-09-13 02:47:01.291 00:05:10.003 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2544 1 2025-09-13 02:46:31.573 00:06:00.223 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-09-13 02:51:56.767 00:00:00.000 UDP 28.104.0.1:59505 -> 198.28.0.2:53 1 64 1 2025-09-13 02:51:56.767 00:00:00.000 UDP 28.104.0.1:58193 -> 198.28.0.2:53 1 64 1 2025-09-13 02:51:56.777 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58193 1 80 1 2025-09-13 02:51:56.778 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59505 1 109 1 2025-09-13 02:52:21.236 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-13 02:52:57.079 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60798 1 80 1 2025-09-13 02:52:57.078 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35121 1 109 1 2025-09-13 02:52:57.068 00:00:00.000 UDP 28.104.0.1:60798 -> 198.28.0.2:53 1 64 1 2025-09-13 02:52:57.069 00:00:00.000 UDP 28.104.0.1:35121 -> 198.28.0.2:53 1 64 1 2025-09-13 02:48:31.572 00:05:55.742 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-13 02:48:31.822 00:05:55.532 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-13 02:53:57.355 00:00:00.000 UDP 28.104.0.1:56522 -> 198.28.0.2:53 1 64 1 2025-09-13 02:53:57.355 00:00:00.000 UDP 28.104.0.1:46247 -> 198.28.0.2:53 1 64 1 2025-09-13 02:53:57.366 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46247 1 80 1 2025-09-13 02:53:57.366 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56522 1 109 1 2025-09-13 02:49:31.582 00:05:55.722 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-13 02:54:57.628 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36223 1 109 1 2025-09-13 02:54:57.628 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37919 1 80 1 2025-09-13 02:54:57.618 00:00:00.000 UDP 28.104.0.1:36223 -> 198.28.0.2:53 1 64 1 2025-09-13 02:54:57.618 00:00:00.000 UDP 28.104.0.1:37919 -> 198.28.0.2:53 1 64 1 2025-09-13 02:51:27.303 00:05:04.532 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-13 02:50:31.572 00:06:00.270 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-09-13 02:55:57.922 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36985 1 80 1 2025-09-13 02:55:57.922 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50678 1 109 1 2025-09-13 02:55:57.913 00:00:00.000 UDP 28.104.0.1:50678 -> 198.28.0.2:53 1 64 1 2025-09-13 02:55:57.912 00:00:00.000 UDP 28.104.0.1:36985 -> 198.28.0.2:53 1 64 1 2025-09-13 02:52:21.294 00:05:00.714 OSPF 28.0.2.2:0 -> 224.0.0.5:0 33 2252 1 2025-09-13 02:56:58.236 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43881 1 109 1 2025-09-13 02:56:58.236 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43203 1 80 1 2025-09-13 02:56:58.225 00:00:00.000 UDP 28.104.0.1:43881 -> 198.28.0.2:53 1 64 1 2025-09-13 02:56:58.225 00:00:00.000 UDP 28.104.0.1:43203 -> 198.28.0.2:53 1 64 1 2025-09-13 02:57:21.807 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-13 02:57:58.517 00:00:00.000 UDP 28.104.0.1:40114 -> 198.28.0.2:53 1 64 1 2025-09-13 02:57:58.517 00:00:00.000 UDP 28.104.0.1:41261 -> 198.28.0.2:53 1 64 1 2025-09-13 02:57:58.528 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41261 1 109 1 2025-09-13 02:57:58.528 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40114 1 80 1 2025-09-13 02:53:31.576 00:06:00.224 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 Summary: total flows: 317, total bytes: 95069, total packets: 1402, avg bps: 195, avg pps: 0, avg bpp: 67 Time window: 2025-09-13 01:54:31 - 2025-09-13 02:59:31 Total flows processed: 317, passed: 317, Blocks skipped: 0, Bytes read: 33032 Sys: 0.0027s User: 0.0027s Wall: 0.0027s flows/second: 119578.6 Runtime: 0.0027s