Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-15 12:59:14.362 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49012 1 80 1 2025-09-15 12:59:14.361 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60168 1 109 1 2025-09-15 12:59:14.351 00:00:00.000 UDP 28.104.0.1:49012 -> 198.28.0.2:53 1 64 1 2025-09-15 12:59:14.350 00:00:00.000 UDP 28.104.0.1:60168 -> 198.28.0.2:53 1 64 1 2025-09-15 12:55:28.482 00:05:04.875 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-15 13:00:14.652 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48210 1 80 1 2025-09-15 13:00:14.652 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35869 1 109 1 2025-09-15 13:00:14.642 00:00:00.000 UDP 28.104.0.1:35869 -> 198.28.0.2:53 1 64 1 2025-09-15 13:00:14.642 00:00:00.000 UDP 28.104.0.1:48210 -> 198.28.0.2:53 1 64 1 2025-09-15 12:59:33.347 00:01:00.269 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-09-15 12:59:33.347 00:01:00.196 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-09-15 13:01:14.938 00:00:00.000 UDP 28.104.0.1:46618 -> 198.28.0.2:53 1 64 1 2025-09-15 13:01:14.938 00:00:00.000 UDP 28.104.0.1:33918 -> 198.28.0.2:53 1 64 1 2025-09-15 13:01:14.950 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33918 1 80 1 2025-09-15 13:01:14.949 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46618 1 109 1 2025-09-15 12:57:28.481 00:05:05.133 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-15 12:57:56.206 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2560 1 2025-09-15 13:02:15.261 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46333 1 80 1 2025-09-15 13:02:15.261 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35345 1 109 1 2025-09-15 13:02:15.249 00:00:00.000 UDP 28.104.0.1:35345 -> 198.28.0.2:53 1 64 1 2025-09-15 13:02:15.249 00:00:00.000 UDP 28.104.0.1:46333 -> 198.28.0.2:53 1 64 1 2025-09-15 13:03:15.547 00:00:00.000 UDP 28.104.0.1:51751 -> 198.28.0.2:53 1 64 1 2025-09-15 13:03:15.547 00:00:00.000 UDP 28.104.0.1:54713 -> 198.28.0.2:53 1 64 1 2025-09-15 13:03:15.557 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54713 1 80 1 2025-09-15 13:03:15.557 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51751 1 109 1 2025-09-15 13:03:31.423 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-15 13:01:33.347 00:02:00.269 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-09-15 13:01:33.347 00:02:00.193 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-09-15 13:04:15.847 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57489 1 109 1 2025-09-15 13:04:15.847 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38026 1 80 1 2025-09-15 13:04:15.836 00:00:00.000 UDP 28.104.0.1:57489 -> 198.28.0.2:53 1 64 1 2025-09-15 13:04:15.836 00:00:00.000 UDP 28.104.0.1:38026 -> 198.28.0.2:53 1 64 1 2025-09-15 13:00:28.491 00:05:04.855 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-15 13:00:28.531 00:05:05.081 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-15 13:05:16.130 00:00:00.000 UDP 28.104.0.1:60830 -> 198.28.0.2:53 1 64 1 2025-09-15 13:05:16.130 00:00:00.000 UDP 28.104.0.1:38186 -> 198.28.0.2:53 1 64 1 2025-09-15 13:05:16.141 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38186 1 109 1 2025-09-15 13:05:16.141 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60830 1 80 1 2025-09-15 13:01:28.482 00:05:04.878 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-15 13:04:33.347 00:01:00.275 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-09-15 13:04:33.347 00:01:00.193 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-09-15 13:06:16.469 00:00:00.000 UDP 28.104.0.1:50064 -> 198.28.0.2:53 1 64 1 2025-09-15 13:06:16.469 00:00:00.000 UDP 28.104.0.1:40251 -> 198.28.0.2:53 1 64 1 2025-09-15 13:06:16.478 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40251 1 80 1 2025-09-15 13:06:16.478 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50064 1 109 1 2025-09-15 13:07:16.762 00:00:00.000 UDP 28.104.0.1:60458 -> 198.28.0.2:53 1 64 1 2025-09-15 13:07:16.762 00:00:00.000 UDP 28.104.0.1:54860 -> 198.28.0.2:53 1 64 1 2025-09-15 13:07:16.772 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54860 1 80 1 2025-09-15 13:07:16.772 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60458 1 109 1 2025-09-15 13:03:16.211 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2320 1 2025-09-15 13:03:28.483 00:05:05.133 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-15 13:08:17.061 00:00:00.000 UDP 28.104.0.1:36127 -> 198.28.0.2:53 1 64 1 2025-09-15 13:08:17.061 00:00:00.000 UDP 28.104.0.1:39437 -> 198.28.0.2:53 1 64 1 2025-09-15 13:08:17.072 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39437 1 109 1 2025-09-15 13:08:17.072 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36127 1 80 1 2025-09-15 13:06:33.350 00:02:00.272 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-09-15 13:06:33.350 00:02:00.194 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-09-15 13:08:31.467 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-15 13:09:17.356 00:00:00.000 UDP 28.104.0.1:50389 -> 198.28.0.2:53 1 64 1 2025-09-15 13:09:17.356 00:00:00.000 UDP 28.104.0.1:52549 -> 198.28.0.2:53 1 64 1 2025-09-15 13:09:17.367 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52549 1 80 1 2025-09-15 13:09:17.366 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50389 1 109 1 2025-09-15 13:10:17.660 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55923 1 80 1 2025-09-15 13:10:17.659 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40161 1 109 1 2025-09-15 13:10:17.650 00:00:00.000 UDP 28.104.0.1:55923 -> 198.28.0.2:53 1 64 1 2025-09-15 13:10:17.650 00:00:00.000 UDP 28.104.0.1:40161 -> 198.28.0.2:53 1 64 1 2025-09-15 13:09:33.348 00:01:00.275 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-09-15 13:09:33.348 00:01:00.196 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-09-15 13:06:28.493 00:05:04.856 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-15 13:06:28.533 00:05:05.073 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-15 13:11:17.942 00:00:00.000 UDP 28.104.0.1:60704 -> 198.28.0.2:53 1 64 1 2025-09-15 13:11:17.942 00:00:00.000 UDP 28.104.0.1:53478 -> 198.28.0.2:53 1 64 1 2025-09-15 13:11:17.951 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53478 1 109 1 2025-09-15 13:11:17.952 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60704 1 80 1 2025-09-15 13:07:28.484 00:05:04.877 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-15 13:12:18.252 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32783 1 109 1 2025-09-15 13:12:18.252 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56728 1 80 1 2025-09-15 13:12:18.241 00:00:00.000 UDP 28.104.0.1:56728 -> 198.28.0.2:53 1 64 1 2025-09-15 13:12:18.241 00:00:00.000 UDP 28.104.0.1:32783 -> 198.28.0.2:53 1 64 1 2025-09-15 13:08:36.216 00:05:10.007 OSPF 28.0.2.2:0 -> 224.0.0.5:0 40 2936 1 2025-09-15 13:13:18.545 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56351 1 80 1 2025-09-15 13:13:18.545 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50247 1 109 1 2025-09-15 13:13:18.535 00:00:00.000 UDP 28.104.0.1:56351 -> 198.28.0.2:53 1 64 1 2025-09-15 13:13:18.535 00:00:00.000 UDP 28.104.0.1:50247 -> 198.28.0.2:53 1 64 1 2025-09-15 13:11:33.349 00:02:00.274 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-09-15 13:11:33.349 00:02:00.198 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-09-15 13:13:31.609 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-15 13:09:28.484 00:05:05.134 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-15 13:14:18.836 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42320 1 80 1 2025-09-15 13:14:18.836 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53215 1 109 1 2025-09-15 13:14:18.827 00:00:00.000 UDP 28.104.0.1:42320 -> 198.28.0.2:53 1 64 1 2025-09-15 13:14:18.827 00:00:00.000 UDP 28.104.0.1:53215 -> 198.28.0.2:53 1 64 1 2025-09-15 13:15:19.150 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46653 1 109 1 2025-09-15 13:15:19.149 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37099 1 80 1 2025-09-15 13:15:19.139 00:00:00.000 UDP 28.104.0.1:37099 -> 198.28.0.2:53 1 64 1 2025-09-15 13:15:19.139 00:00:00.000 UDP 28.104.0.1:46653 -> 198.28.0.2:53 1 64 1 2025-09-15 13:14:33.353 00:01:00.272 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-09-15 13:14:33.353 00:01:00.195 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-09-15 13:16:19.444 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45905 1 109 1 2025-09-15 13:16:19.444 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36672 1 80 1 2025-09-15 13:16:19.433 00:00:00.000 UDP 28.104.0.1:36672 -> 198.28.0.2:53 1 64 1 2025-09-15 13:16:19.433 00:00:00.000 UDP 28.104.0.1:45905 -> 198.28.0.2:53 1 64 1 2025-09-15 13:12:28.495 00:05:04.859 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-15 13:12:28.535 00:05:05.081 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-15 13:17:19.725 00:00:00.000 UDP 28.104.0.1:51545 -> 198.28.0.2:53 1 64 1 2025-09-15 13:17:19.725 00:00:00.000 UDP 28.104.0.1:35329 -> 198.28.0.2:53 1 64 1 2025-09-15 13:17:19.735 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51545 1 109 1 2025-09-15 13:17:19.735 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35329 1 80 1 2025-09-15 13:13:28.484 00:05:04.879 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-15 13:13:56.224 00:05:10.007 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2520 1 2025-09-15 13:18:20.053 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34142 1 80 1 2025-09-15 13:18:20.053 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56820 1 109 1 2025-09-15 13:18:20.043 00:00:00.000 UDP 28.104.0.1:34142 -> 198.28.0.2:53 1 64 1 2025-09-15 13:18:20.044 00:00:00.000 UDP 28.104.0.1:56820 -> 198.28.0.2:53 1 64 1 2025-09-15 13:18:31.702 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-15 13:19:20.353 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47566 1 109 1 2025-09-15 13:19:20.353 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51520 1 80 1 2025-09-15 13:19:20.342 00:00:00.000 UDP 28.104.0.1:51520 -> 198.28.0.2:53 1 64 1 2025-09-15 13:19:20.342 00:00:00.000 UDP 28.104.0.1:47566 -> 198.28.0.2:53 1 64 1 2025-09-15 13:15:28.487 00:05:05.139 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-15 13:20:20.593 00:00:00.000 UDP 28.104.0.1:57154 -> 198.28.0.2:53 1 64 1 2025-09-15 13:20:20.593 00:00:00.000 UDP 28.104.0.1:56792 -> 198.28.0.2:53 1 64 1 2025-09-15 13:20:20.604 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57154 1 80 1 2025-09-15 13:20:20.604 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56792 1 109 1 2025-09-15 13:16:33.353 00:04:00.273 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-09-15 13:16:33.353 00:04:00.196 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-15 13:21:20.885 00:00:00.000 UDP 28.104.0.1:56716 -> 198.28.0.2:53 1 64 1 2025-09-15 13:21:20.885 00:00:00.000 UDP 28.104.0.1:42968 -> 198.28.0.2:53 1 64 1 2025-09-15 13:21:20.896 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42968 1 109 1 2025-09-15 13:21:20.896 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56716 1 80 1 2025-09-15 13:22:21.155 00:00:00.000 UDP 28.104.0.1:56924 -> 198.28.0.2:53 1 64 1 2025-09-15 13:22:21.155 00:00:00.000 UDP 28.104.0.1:43283 -> 198.28.0.2:53 1 64 1 2025-09-15 13:22:21.165 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43283 1 80 1 2025-09-15 13:22:21.165 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56924 1 109 1 2025-09-15 13:21:33.355 00:01:00.276 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-09-15 13:21:33.355 00:01:00.194 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-09-15 13:18:28.495 00:05:04.861 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-15 13:18:28.535 00:05:05.084 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-15 13:23:21.462 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37263 1 80 1 2025-09-15 13:23:21.462 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40208 1 109 1 2025-09-15 13:23:21.452 00:00:00.000 UDP 28.104.0.1:40208 -> 198.28.0.2:53 1 64 1 2025-09-15 13:23:21.452 00:00:00.000 UDP 28.104.0.1:37263 -> 198.28.0.2:53 1 64 1 2025-09-15 13:19:16.231 00:05:10.008 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2496 1 2025-09-15 13:23:31.641 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-15 13:19:28.485 00:05:04.883 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-15 13:24:21.743 00:00:00.000 UDP 28.104.0.1:36340 -> 198.28.0.2:53 1 64 1 2025-09-15 13:24:21.743 00:00:00.000 UDP 28.104.0.1:53903 -> 198.28.0.2:53 1 64 1 2025-09-15 13:24:21.754 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36340 1 80 1 2025-09-15 13:24:21.754 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53903 1 109 1 2025-09-15 13:25:22.070 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60087 1 109 1 2025-09-15 13:25:22.070 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35851 1 80 1 2025-09-15 13:25:22.059 00:00:00.000 UDP 28.104.0.1:35851 -> 198.28.0.2:53 1 64 1 2025-09-15 13:25:22.059 00:00:00.000 UDP 28.104.0.1:60087 -> 198.28.0.2:53 1 64 1 2025-09-15 13:23:33.357 00:02:00.276 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-09-15 13:23:33.357 00:02:00.195 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-09-15 13:21:28.496 00:05:05.134 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-15 13:26:22.928 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38933 1 80 1 2025-09-15 13:26:22.928 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39450 1 109 1 2025-09-15 13:26:22.917 00:00:00.000 UDP 28.104.0.1:39450 -> 198.28.0.2:53 1 64 1 2025-09-15 13:26:22.917 00:00:00.000 UDP 28.104.0.1:38933 -> 198.28.0.2:53 1 64 1 2025-09-15 13:27:23.238 00:00:00.000 UDP 28.104.0.1:57863 -> 198.28.0.2:53 1 64 1 2025-09-15 13:27:23.238 00:00:00.000 UDP 28.104.0.1:43112 -> 198.28.0.2:53 1 64 1 2025-09-15 13:27:23.249 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43112 1 80 1 2025-09-15 13:27:23.249 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57863 1 109 1 2025-09-15 13:26:33.358 00:01:00.274 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-09-15 13:26:33.358 00:01:00.193 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-09-15 13:28:23.539 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44243 1 109 1 2025-09-15 13:28:23.539 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49172 1 80 1 2025-09-15 13:28:23.527 00:00:00.000 UDP 28.104.0.1:49172 -> 198.28.0.2:53 1 64 1 2025-09-15 13:28:23.528 00:00:00.000 UDP 28.104.0.1:44243 -> 198.28.0.2:53 1 64 1 2025-09-15 13:24:28.507 00:05:04.856 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-15 13:28:31.970 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-15 13:24:28.546 00:05:05.074 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-15 13:24:36.239 00:05:10.048 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2544 1 2025-09-15 13:29:23.839 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38949 1 80 1 2025-09-15 13:29:23.839 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55334 1 109 1 2025-09-15 13:29:23.828 00:00:00.000 UDP 28.104.0.1:55334 -> 198.28.0.2:53 1 64 1 2025-09-15 13:29:23.829 00:00:00.000 UDP 28.104.0.1:38949 -> 198.28.0.2:53 1 64 1 2025-09-15 13:25:28.497 00:05:04.876 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-15 13:30:24.133 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40819 1 80 1 2025-09-15 13:30:24.133 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46799 1 109 1 2025-09-15 13:30:24.124 00:00:00.000 UDP 28.104.0.1:46799 -> 198.28.0.2:53 1 64 1 2025-09-15 13:30:24.124 00:00:00.000 UDP 28.104.0.1:40819 -> 198.28.0.2:53 1 64 1 2025-09-15 13:28:33.361 00:02:00.274 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-09-15 13:28:33.361 00:02:00.192 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-09-15 13:31:24.423 00:00:00.000 UDP 28.104.0.1:45798 -> 198.28.0.2:53 1 64 1 2025-09-15 13:31:24.424 00:00:00.000 UDP 28.104.0.1:51687 -> 198.28.0.2:53 1 64 1 2025-09-15 13:31:24.433 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45798 1 109 1 2025-09-15 13:31:24.433 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51687 1 80 1 2025-09-15 13:27:28.498 00:05:05.133 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-15 13:32:24.709 00:00:00.000 UDP 28.104.0.1:47747 -> 198.28.0.2:53 1 64 1 2025-09-15 13:32:24.709 00:00:00.000 UDP 28.104.0.1:38741 -> 198.28.0.2:53 1 64 1 2025-09-15 13:32:24.719 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47747 1 109 1 2025-09-15 13:32:24.719 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38741 1 80 1 2025-09-15 13:31:33.364 00:01:00.271 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-09-15 13:31:33.364 00:01:00.188 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-09-15 13:33:25.001 00:00:00.000 UDP 28.104.0.1:50716 -> 198.28.0.2:53 1 64 1 2025-09-15 13:33:25.001 00:00:00.000 UDP 28.104.0.1:47103 -> 198.28.0.2:53 1 64 1 2025-09-15 13:33:25.016 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50716 1 80 1 2025-09-15 13:33:25.016 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47103 1 109 1 2025-09-15 13:33:31.856 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-15 13:29:56.248 00:05:10.013 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2536 1 2025-09-15 13:34:25.270 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49659 1 80 1 2025-09-15 13:34:25.270 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49615 1 109 1 2025-09-15 13:34:25.260 00:00:00.000 UDP 28.104.0.1:49659 -> 198.28.0.2:53 1 64 1 2025-09-15 13:34:25.260 00:00:00.000 UDP 28.104.0.1:49615 -> 198.28.0.2:53 1 64 1 2025-09-15 13:30:28.508 00:05:04.857 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-15 13:30:28.548 00:05:05.074 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-15 13:35:25.565 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50221 1 80 1 2025-09-15 13:35:25.565 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47590 1 109 1 2025-09-15 13:35:25.553 00:00:00.000 UDP 28.104.0.1:50221 -> 198.28.0.2:53 1 64 1 2025-09-15 13:35:25.553 00:00:00.000 UDP 28.104.0.1:47590 -> 198.28.0.2:53 1 64 1 2025-09-15 13:33:33.365 00:02:00.271 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-09-15 13:33:33.365 00:02:00.188 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-09-15 13:31:28.499 00:05:04.876 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-15 13:36:25.843 00:00:00.000 UDP 28.104.0.1:54323 -> 198.28.0.2:53 1 64 1 2025-09-15 13:36:25.843 00:00:00.000 UDP 28.104.0.1:55857 -> 198.28.0.2:53 1 64 1 2025-09-15 13:36:25.853 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54323 1 80 1 2025-09-15 13:36:25.853 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55857 1 109 1 2025-09-15 13:37:26.145 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58222 1 109 1 2025-09-15 13:37:26.145 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46236 1 80 1 2025-09-15 13:37:26.137 00:00:00.000 UDP 28.104.0.1:58222 -> 198.28.0.2:53 1 64 1 2025-09-15 13:37:26.137 00:00:00.000 UDP 28.104.0.1:46236 -> 198.28.0.2:53 1 64 1 2025-09-15 13:36:33.367 00:01:00.271 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-09-15 13:36:33.367 00:01:00.188 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-09-15 13:33:28.499 00:05:05.138 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-15 13:38:26.440 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39872 1 109 1 2025-09-15 13:38:26.439 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53430 1 80 1 2025-09-15 13:38:26.428 00:00:00.000 UDP 28.104.0.1:53430 -> 198.28.0.2:53 1 64 1 2025-09-15 13:38:26.429 00:00:00.000 UDP 28.104.0.1:39872 -> 198.28.0.2:53 1 64 1 2025-09-15 13:38:32.047 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-15 13:39:26.718 00:00:00.000 UDP 28.104.0.1:46600 -> 198.28.0.2:53 1 64 1 2025-09-15 13:39:26.718 00:00:00.000 UDP 28.104.0.1:49866 -> 198.28.0.2:53 1 64 1 2025-09-15 13:35:16.259 00:05:10.007 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2728 1 2025-09-15 13:39:26.729 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46600 1 80 1 2025-09-15 13:39:26.729 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49866 1 109 1 2025-09-15 13:40:27.047 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37618 1 109 1 2025-09-15 13:40:27.048 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36351 1 80 1 2025-09-15 13:40:27.038 00:00:00.000 UDP 28.104.0.1:36351 -> 198.28.0.2:53 1 64 1 2025-09-15 13:40:27.038 00:00:00.000 UDP 28.104.0.1:37618 -> 198.28.0.2:53 1 64 1 2025-09-15 13:38:33.366 00:02:00.188 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-09-15 13:38:33.366 00:02:00.271 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-09-15 13:36:28.508 00:05:04.857 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-15 13:36:28.549 00:05:05.078 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-15 13:41:27.297 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51329 1 109 1 2025-09-15 13:41:27.297 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47117 1 80 1 2025-09-15 13:41:27.287 00:00:00.000 UDP 28.104.0.1:51329 -> 198.28.0.2:53 1 64 1 2025-09-15 13:41:27.288 00:00:00.000 UDP 28.104.0.1:47117 -> 198.28.0.2:53 1 64 1 2025-09-15 13:37:28.499 00:05:04.877 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-15 13:42:27.598 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38810 1 109 1 2025-09-15 13:42:27.597 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53757 1 80 1 2025-09-15 13:42:27.587 00:00:00.000 UDP 28.104.0.1:38810 -> 198.28.0.2:53 1 64 1 2025-09-15 13:42:27.587 00:00:00.000 UDP 28.104.0.1:53757 -> 198.28.0.2:53 1 64 1 2025-09-15 13:41:33.366 00:01:00.275 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-09-15 13:41:33.366 00:01:00.188 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-09-15 13:43:27.882 00:00:00.000 UDP 28.104.0.1:38417 -> 198.28.0.2:53 1 64 1 2025-09-15 13:43:27.882 00:00:00.000 UDP 28.104.0.1:52449 -> 198.28.0.2:53 1 64 1 2025-09-15 13:43:27.893 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52449 1 109 1 2025-09-15 13:43:27.893 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38417 1 80 1 2025-09-15 13:43:31.938 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-15 13:39:28.499 00:05:05.139 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-15 13:44:28.189 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48195 1 109 1 2025-09-15 13:44:28.189 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35057 1 80 1 2025-09-15 13:44:28.179 00:00:00.000 UDP 28.104.0.1:35057 -> 198.28.0.2:53 1 64 1 2025-09-15 13:44:28.179 00:00:00.000 UDP 28.104.0.1:48195 -> 198.28.0.2:53 1 64 1 2025-09-15 13:40:36.268 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2680 1 2025-09-15 13:45:28.479 00:00:00.000 UDP 28.104.0.1:39403 -> 198.28.0.2:53 1 64 1 2025-09-15 13:45:28.479 00:00:00.000 UDP 28.104.0.1:32795 -> 198.28.0.2:53 1 64 1 2025-09-15 13:45:28.489 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32795 1 109 1 2025-09-15 13:45:28.489 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39403 1 80 1 2025-09-15 13:43:33.368 00:02:00.188 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-09-15 13:43:33.368 00:02:00.271 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-09-15 13:46:28.796 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59031 1 109 1 2025-09-15 13:46:28.796 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35452 1 80 1 2025-09-15 13:46:28.785 00:00:00.000 UDP 28.104.0.1:59031 -> 198.28.0.2:53 1 64 1 2025-09-15 13:46:28.785 00:00:00.000 UDP 28.104.0.1:35452 -> 198.28.0.2:53 1 64 1 2025-09-15 13:42:28.514 00:05:04.857 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-15 13:42:28.554 00:05:05.074 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-15 13:46:33.370 00:01:00.268 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-09-15 13:47:29.080 00:00:00.000 UDP 28.104.0.1:37460 -> 198.28.0.2:53 1 64 1 2025-09-15 13:47:29.080 00:00:00.000 UDP 28.104.0.1:40015 -> 198.28.0.2:53 1 64 1 2025-09-15 13:46:33.370 00:01:00.185 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-09-15 13:47:29.091 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37460 1 80 1 2025-09-15 13:47:29.091 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40015 1 109 1 2025-09-15 13:43:28.505 00:05:04.877 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-15 13:48:29.373 00:00:00.000 UDP 28.104.0.1:40154 -> 198.28.0.2:53 1 64 1 2025-09-15 13:48:29.373 00:00:00.000 UDP 28.104.0.1:49233 -> 198.28.0.2:53 1 64 1 2025-09-15 13:48:32.176 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-15 13:48:29.384 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40154 1 109 1 2025-09-15 13:48:29.384 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49233 1 80 1 2025-09-15 13:49:29.675 00:00:00.000 UDP 28.104.0.1:37428 -> 198.28.0.2:53 1 64 1 2025-09-15 13:49:29.675 00:00:00.000 UDP 28.104.0.1:50483 -> 198.28.0.2:53 1 64 1 2025-09-15 13:49:29.685 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37428 1 80 1 2025-09-15 13:49:29.685 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50483 1 109 1 2025-09-15 13:45:28.506 00:05:05.133 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-15 13:45:56.273 00:05:10.004 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2536 1 2025-09-15 13:50:30.009 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37579 1 109 1 2025-09-15 13:50:30.009 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43402 1 80 1 2025-09-15 13:50:29.996 00:00:00.000 UDP 28.104.0.1:37579 -> 198.28.0.2:53 1 64 1 2025-09-15 13:50:29.997 00:00:00.000 UDP 28.104.0.1:43402 -> 198.28.0.2:53 1 64 1 2025-09-15 13:51:30.335 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59165 1 109 1 2025-09-15 13:51:30.335 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50934 1 80 1 2025-09-15 13:51:30.324 00:00:00.000 UDP 28.104.0.1:59165 -> 198.28.0.2:53 1 64 1 2025-09-15 13:51:30.324 00:00:00.000 UDP 28.104.0.1:50934 -> 198.28.0.2:53 1 64 1 2025-09-15 13:52:30.624 00:00:00.000 UDP 28.104.0.1:43806 -> 198.28.0.2:53 1 64 1 2025-09-15 13:48:33.372 00:04:00.272 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-09-15 13:52:30.624 00:00:00.000 UDP 28.104.0.1:44485 -> 198.28.0.2:53 1 64 1 2025-09-15 13:48:33.372 00:04:00.185 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-09-15 13:52:30.633 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43806 1 109 1 2025-09-15 13:52:30.633 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44485 1 80 1 2025-09-15 13:48:28.516 00:05:04.859 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-15 13:48:28.556 00:05:05.085 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-15 13:53:30.920 00:00:00.000 UDP 28.104.0.1:53463 -> 198.28.0.2:53 1 64 1 2025-09-15 13:53:30.920 00:00:00.000 UDP 28.104.0.1:55098 -> 198.28.0.2:53 1 64 1 2025-09-15 13:53:32.331 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-15 13:53:30.929 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55098 1 80 1 2025-09-15 13:53:30.929 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53463 1 109 1 2025-09-15 13:49:28.507 00:05:04.878 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-15 13:53:33.375 00:01:00.269 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-09-15 13:54:31.229 00:00:00.000 UDP 28.104.0.1:52936 -> 198.28.0.2:53 1 64 1 2025-09-15 13:53:33.375 00:01:00.182 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-09-15 13:54:31.229 00:00:00.000 UDP 28.104.0.1:58984 -> 198.28.0.2:53 1 64 1 2025-09-15 13:54:31.240 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58984 1 80 1 2025-09-15 13:54:31.240 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52936 1 109 1 2025-09-15 13:51:16.278 00:05:10.003 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2528 1 2025-09-15 13:55:31.523 00:00:00.000 UDP 28.104.0.1:37672 -> 198.28.0.2:53 1 64 1 2025-09-15 13:55:31.523 00:00:00.000 UDP 28.104.0.1:41592 -> 198.28.0.2:53 1 64 1 2025-09-15 13:51:28.507 00:05:05.143 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-15 13:55:31.534 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37672 1 109 1 2025-09-15 13:55:31.536 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41592 1 80 1 2025-09-15 13:56:31.825 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51162 1 109 1 2025-09-15 13:56:31.825 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46094 1 80 1 2025-09-15 13:56:31.814 00:00:00.000 UDP 28.104.0.1:51162 -> 198.28.0.2:53 1 64 1 2025-09-15 13:56:31.814 00:00:00.000 UDP 28.104.0.1:46094 -> 198.28.0.2:53 1 64 1 2025-09-15 13:57:32.105 00:00:00.000 UDP 28.104.0.1:38265 -> 198.28.0.2:53 1 64 1 2025-09-15 13:55:33.376 00:02:00.270 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-09-15 13:57:32.105 00:00:00.000 UDP 28.104.0.1:58249 -> 198.28.0.2:53 1 64 1 2025-09-15 13:55:33.376 00:02:00.182 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-09-15 13:57:32.115 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58249 1 80 1 2025-09-15 13:57:32.115 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38265 1 109 1 2025-09-15 13:54:28.518 00:05:04.858 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-15 13:58:32.401 00:00:00.000 UDP 28.104.0.1:44574 -> 198.28.0.2:53 1 64 1 2025-09-15 13:58:32.400 00:00:00.000 UDP 28.104.0.1:52193 -> 198.28.0.2:53 1 64 1 2025-09-15 13:58:32.704 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-15 13:58:32.412 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52193 1 109 1 2025-09-15 13:58:32.412 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44574 1 80 1 2025-09-15 13:54:28.558 00:05:05.088 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 Summary: total flows: 347, total bytes: 94462, total packets: 1391, avg bps: 196, avg pps: 0, avg bpp: 67 Time window: 2025-09-15 12:55:28 - 2025-09-15 13:59:33 Total flows processed: 347, passed: 347, Blocks skipped: 0, Bytes read: 36152 Sys: 0.0039s User: 0.0029s Wall: 0.0038s flows/second: 90505.8 Runtime: 0.0038s