Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-15 13:59:32.711 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60749 1 109 1 2025-09-15 13:59:32.711 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58312 1 80 1 2025-09-15 13:58:33.376 00:01:00.273 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-09-15 13:59:32.701 00:00:00.000 UDP 28.104.0.1:60749 -> 198.28.0.2:53 1 64 1 2025-09-15 13:59:32.701 00:00:00.000 UDP 28.104.0.1:58312 -> 198.28.0.2:53 1 64 1 2025-09-15 13:58:33.376 00:01:00.185 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-09-15 13:55:28.508 00:05:04.878 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-15 14:00:33.004 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58155 1 80 1 2025-09-15 14:00:33.004 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38567 1 109 1 2025-09-15 14:00:32.995 00:00:00.000 UDP 28.104.0.1:58155 -> 198.28.0.2:53 1 64 1 2025-09-15 14:00:32.995 00:00:00.000 UDP 28.104.0.1:38567 -> 198.28.0.2:53 1 64 1 2025-09-15 13:56:36.282 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2536 1 2025-09-15 14:01:33.307 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34167 1 109 1 2025-09-15 14:01:33.307 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54225 1 80 1 2025-09-15 14:01:33.297 00:00:00.000 UDP 28.104.0.1:54225 -> 198.28.0.2:53 1 64 1 2025-09-15 14:01:33.297 00:00:00.000 UDP 28.104.0.1:34167 -> 198.28.0.2:53 1 64 1 2025-09-15 13:57:28.509 00:05:05.149 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-15 14:02:33.607 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54680 1 80 1 2025-09-15 14:02:33.607 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36089 1 109 1 2025-09-15 14:02:33.597 00:00:00.000 UDP 28.104.0.1:54680 -> 198.28.0.2:53 1 64 1 2025-09-15 14:00:33.377 00:02:00.273 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-09-15 14:00:33.377 00:02:00.185 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-09-15 14:02:33.597 00:00:00.000 UDP 28.104.0.1:36089 -> 198.28.0.2:53 1 64 1 2025-09-15 14:03:33.893 00:00:00.000 UDP 28.104.0.1:58273 -> 198.28.0.2:53 1 64 1 2025-09-15 14:03:33.893 00:00:00.000 UDP 28.104.0.1:38628 -> 198.28.0.2:53 1 64 1 2025-09-15 14:03:32.440 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-15 14:03:33.903 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58273 1 80 1 2025-09-15 14:03:33.903 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38628 1 109 1 2025-09-15 14:03:33.378 00:01:00.189 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-09-15 14:03:33.378 00:01:00.272 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-09-15 14:04:34.204 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39628 1 80 1 2025-09-15 14:04:34.204 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53812 1 109 1 2025-09-15 14:00:28.520 00:05:04.858 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-15 14:00:28.560 00:05:05.090 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-15 14:04:34.194 00:00:00.000 UDP 28.104.0.1:53812 -> 198.28.0.2:53 1 64 1 2025-09-15 14:04:34.194 00:00:00.000 UDP 28.104.0.1:39628 -> 198.28.0.2:53 1 64 1 2025-09-15 14:01:28.512 00:05:04.889 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-15 14:05:34.446 00:00:00.000 UDP 28.104.0.1:47913 -> 198.28.0.2:53 1 64 1 2025-09-15 14:05:34.446 00:00:00.000 UDP 28.104.0.1:46446 -> 198.28.0.2:53 1 64 1 2025-09-15 14:05:34.457 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46446 1 80 1 2025-09-15 14:05:34.459 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47913 1 109 1 2025-09-15 14:01:56.291 00:05:10.023 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2388 1 2025-09-15 14:06:34.717 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44113 1 80 1 2025-09-15 14:06:34.717 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47390 1 109 1 2025-09-15 14:06:34.708 00:00:00.000 UDP 28.104.0.1:44113 -> 198.28.0.2:53 1 64 1 2025-09-15 14:06:34.707 00:00:00.000 UDP 28.104.0.1:47390 -> 198.28.0.2:53 1 64 1 2025-09-15 14:05:33.378 00:02:00.272 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-09-15 14:05:33.378 00:02:00.183 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-09-15 14:07:35.012 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50922 1 80 1 2025-09-15 14:07:35.017 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58343 1 109 1 2025-09-15 14:03:28.513 00:05:05.149 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-15 14:07:35.000 00:00:00.000 UDP 28.104.0.1:58343 -> 198.28.0.2:53 1 64 1 2025-09-15 14:07:34.999 00:00:00.000 UDP 28.104.0.1:50922 -> 198.28.0.2:53 1 64 1 2025-09-15 14:08:32.752 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-15 14:08:35.295 00:00:00.000 UDP 28.104.0.1:53286 -> 198.28.0.2:53 1 64 1 2025-09-15 14:08:35.296 00:00:00.000 UDP 28.104.0.1:33455 -> 198.28.0.2:53 1 64 1 2025-09-15 14:08:35.307 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53286 1 109 1 2025-09-15 14:08:35.307 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33455 1 80 1 2025-09-15 14:08:33.390 00:01:00.261 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-09-15 14:08:33.390 00:01:00.173 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-09-15 14:09:35.598 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49962 1 109 1 2025-09-15 14:09:35.598 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48841 1 80 1 2025-09-15 14:09:35.587 00:00:00.000 UDP 28.104.0.1:48841 -> 198.28.0.2:53 1 64 1 2025-09-15 14:09:35.587 00:00:00.000 UDP 28.104.0.1:49962 -> 198.28.0.2:53 1 64 1 2025-09-15 14:10:35.900 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37551 1 80 1 2025-09-15 14:10:35.900 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55036 1 109 1 2025-09-15 14:06:28.522 00:05:04.875 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-15 14:06:28.563 00:05:05.087 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-15 14:10:35.889 00:00:00.000 UDP 28.104.0.1:37551 -> 198.28.0.2:53 1 64 1 2025-09-15 14:10:35.890 00:00:00.000 UDP 28.104.0.1:55036 -> 198.28.0.2:53 1 64 1 2025-09-15 14:07:16.289 00:05:10.004 OSPF 28.0.2.2:0 -> 224.0.0.5:0 38 2828 1 2025-09-15 14:11:36.206 00:00:00.000 UDP 28.104.0.1:44403 -> 198.28.0.2:53 1 64 1 2025-09-15 14:11:36.206 00:00:00.000 UDP 28.104.0.1:42084 -> 198.28.0.2:53 1 64 1 2025-09-15 14:11:36.217 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44403 1 80 1 2025-09-15 14:07:28.514 00:05:04.888 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-15 14:11:36.216 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42084 1 109 1 2025-09-15 14:10:33.390 00:02:00.261 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-09-15 14:10:33.390 00:02:00.173 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-09-15 14:12:36.512 00:00:00.000 UDP 28.104.0.1:36598 -> 198.28.0.2:53 1 64 1 2025-09-15 14:12:36.512 00:00:00.000 UDP 28.104.0.1:56633 -> 198.28.0.2:53 1 64 1 2025-09-15 14:12:36.523 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56633 1 80 1 2025-09-15 14:12:36.522 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36598 1 109 1 2025-09-15 14:13:32.855 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-15 14:13:36.815 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50389 1 80 1 2025-09-15 14:13:36.815 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34827 1 109 1 2025-09-15 14:09:28.513 00:05:05.148 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-15 14:13:36.804 00:00:00.000 UDP 28.104.0.1:50389 -> 198.28.0.2:53 1 64 1 2025-09-15 14:13:36.804 00:00:00.000 UDP 28.104.0.1:34827 -> 198.28.0.2:53 1 64 1 2025-09-15 14:13:33.391 00:01:00.263 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-09-15 14:13:33.391 00:01:00.173 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-09-15 14:14:37.097 00:00:00.000 UDP 28.104.0.1:32932 -> 198.28.0.2:53 1 64 1 2025-09-15 14:14:37.097 00:00:00.000 UDP 28.104.0.1:44149 -> 198.28.0.2:53 1 64 1 2025-09-15 14:14:37.106 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44149 1 80 1 2025-09-15 14:14:37.106 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32932 1 109 1 2025-09-15 14:15:37.394 00:00:00.000 UDP 28.104.0.1:49194 -> 198.28.0.2:53 1 64 1 2025-09-15 14:15:37.394 00:00:00.000 UDP 28.104.0.1:48959 -> 198.28.0.2:53 1 64 1 2025-09-15 14:15:37.404 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48959 1 109 1 2025-09-15 14:15:37.404 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49194 1 80 1 2025-09-15 14:12:28.524 00:05:04.872 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-15 14:12:28.564 00:05:05.088 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-15 14:16:37.688 00:00:00.000 UDP 28.104.0.1:37755 -> 198.28.0.2:53 1 64 1 2025-09-15 14:16:37.688 00:00:00.000 UDP 28.104.0.1:55215 -> 198.28.0.2:53 1 64 1 2025-09-15 14:16:37.698 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55215 1 109 1 2025-09-15 14:16:37.699 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37755 1 80 1 2025-09-15 14:12:36.295 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2600 1 2025-09-15 14:13:28.514 00:05:04.891 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-15 14:17:37.998 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39424 1 80 1 2025-09-15 14:17:37.997 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45767 1 109 1 2025-09-15 14:15:33.395 00:02:00.259 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-09-15 14:15:33.395 00:02:00.184 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-09-15 14:17:37.987 00:00:00.000 UDP 28.104.0.1:39424 -> 198.28.0.2:53 1 64 1 2025-09-15 14:17:37.987 00:00:00.000 UDP 28.104.0.1:45767 -> 198.28.0.2:53 1 64 1 2025-09-15 14:18:33.088 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-15 14:18:38.255 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40041 1 109 1 2025-09-15 14:18:38.254 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47281 1 80 1 2025-09-15 14:18:38.245 00:00:00.000 UDP 28.104.0.1:47281 -> 198.28.0.2:53 1 64 1 2025-09-15 14:18:38.245 00:00:00.000 UDP 28.104.0.1:40041 -> 198.28.0.2:53 1 64 1 2025-09-15 14:18:33.395 00:01:00.265 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-09-15 14:18:33.395 00:01:00.183 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-09-15 14:19:38.569 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50957 1 80 1 2025-09-15 14:19:38.569 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59133 1 109 1 2025-09-15 14:15:28.514 00:05:05.149 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-15 14:19:38.559 00:00:00.000 UDP 28.104.0.1:59133 -> 198.28.0.2:53 1 64 1 2025-09-15 14:19:38.559 00:00:00.000 UDP 28.104.0.1:50957 -> 198.28.0.2:53 1 64 1 2025-09-15 14:20:38.852 00:00:00.000 UDP 28.104.0.1:55367 -> 198.28.0.2:53 1 64 1 2025-09-15 14:20:38.852 00:00:00.000 UDP 28.104.0.1:53739 -> 198.28.0.2:53 1 64 1 2025-09-15 14:20:38.863 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55367 1 80 1 2025-09-15 14:20:38.862 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53739 1 109 1 2025-09-15 14:21:39.441 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55654 1 80 1 2025-09-15 14:21:39.441 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55133 1 109 1 2025-09-15 14:21:39.432 00:00:00.000 UDP 28.104.0.1:55133 -> 198.28.0.2:53 1 64 1 2025-09-15 14:21:39.431 00:00:00.000 UDP 28.104.0.1:55654 -> 198.28.0.2:53 1 64 1 2025-09-15 14:17:56.299 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2528 1 2025-09-15 14:20:33.396 00:02:00.258 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-09-15 14:20:33.396 00:02:00.183 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-09-15 14:18:28.524 00:05:04.875 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-15 14:18:28.564 00:05:05.088 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-15 14:22:39.743 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59368 1 109 1 2025-09-15 14:22:39.743 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56223 1 80 1 2025-09-15 14:22:39.733 00:00:00.000 UDP 28.104.0.1:59368 -> 198.28.0.2:53 1 64 1 2025-09-15 14:22:39.732 00:00:00.000 UDP 28.104.0.1:56223 -> 198.28.0.2:53 1 64 1 2025-09-15 14:23:32.924 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-15 14:23:40.063 00:00:00.000 UDP 28.104.0.1:51821 -> 198.28.0.2:53 1 64 1 2025-09-15 14:23:40.063 00:00:00.000 UDP 28.104.0.1:47784 -> 198.28.0.2:53 1 64 1 2025-09-15 14:19:28.515 00:05:04.895 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-15 14:23:40.073 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47784 1 109 1 2025-09-15 14:23:40.073 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51821 1 80 1 2025-09-15 14:23:33.401 00:01:00.255 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-09-15 14:23:33.401 00:01:00.181 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-09-15 14:24:40.306 00:00:00.000 UDP 28.104.0.1:53194 -> 198.28.0.2:53 1 64 1 2025-09-15 14:24:40.306 00:00:00.000 UDP 28.104.0.1:57115 -> 198.28.0.2:53 1 64 1 2025-09-15 14:24:40.316 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53194 1 80 1 2025-09-15 14:24:40.316 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57115 1 109 1 2025-09-15 14:21:28.515 00:05:05.148 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-15 14:25:40.574 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34917 1 80 1 2025-09-15 14:25:40.574 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54727 1 109 1 2025-09-15 14:25:40.562 00:00:00.000 UDP 28.104.0.1:54727 -> 198.28.0.2:53 1 64 1 2025-09-15 14:25:40.563 00:00:00.000 UDP 28.104.0.1:34917 -> 198.28.0.2:53 1 64 1 2025-09-15 14:25:33.400 00:01:00.255 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-09-15 14:25:33.400 00:01:00.182 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-09-15 14:26:40.871 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39592 1 80 1 2025-09-15 14:26:40.871 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33643 1 109 1 2025-09-15 14:26:40.862 00:00:00.000 UDP 28.104.0.1:39592 -> 198.28.0.2:53 1 64 1 2025-09-15 14:26:40.862 00:00:00.000 UDP 28.104.0.1:33643 -> 198.28.0.2:53 1 64 1 2025-09-15 14:23:16.305 00:05:10.003 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2560 1 2025-09-15 14:27:41.189 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44759 1 109 1 2025-09-15 14:27:41.189 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45814 1 80 1 2025-09-15 14:27:41.178 00:00:00.000 UDP 28.104.0.1:44759 -> 198.28.0.2:53 1 64 1 2025-09-15 14:27:41.178 00:00:00.000 UDP 28.104.0.1:45814 -> 198.28.0.2:53 1 64 1 2025-09-15 14:28:33.049 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-15 14:24:28.526 00:05:04.875 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-15 14:24:28.566 00:05:05.087 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-15 14:28:41.475 00:00:00.000 UDP 28.104.0.1:46530 -> 198.28.0.2:53 1 64 1 2025-09-15 14:28:41.475 00:00:00.000 UDP 28.104.0.1:45294 -> 198.28.0.2:53 1 64 1 2025-09-15 14:28:41.486 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46530 1 80 1 2025-09-15 14:28:41.486 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45294 1 109 1 2025-09-15 14:27:33.406 00:02:00.251 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-09-15 14:27:33.406 00:02:00.176 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-09-15 14:25:28.518 00:05:04.895 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-15 14:29:41.785 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42876 1 80 1 2025-09-15 14:29:41.785 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49174 1 109 1 2025-09-15 14:29:41.775 00:00:00.000 UDP 28.104.0.1:49174 -> 198.28.0.2:53 1 64 1 2025-09-15 14:29:41.775 00:00:00.000 UDP 28.104.0.1:42876 -> 198.28.0.2:53 1 64 1 2025-09-15 14:30:42.085 00:00:00.000 UDP 28.104.0.1:49709 -> 198.28.0.2:53 1 64 1 2025-09-15 14:30:42.085 00:00:00.000 UDP 28.104.0.1:39185 -> 198.28.0.2:53 1 64 1 2025-09-15 14:30:42.096 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39185 1 109 1 2025-09-15 14:30:42.096 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49709 1 80 1 2025-09-15 14:30:33.403 00:01:00.254 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-09-15 14:30:33.403 00:01:00.180 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-09-15 14:31:42.386 00:00:00.000 UDP 28.104.0.1:46569 -> 198.28.0.2:53 1 64 1 2025-09-15 14:31:42.386 00:00:00.000 UDP 28.104.0.1:43983 -> 198.28.0.2:53 1 64 1 2025-09-15 14:27:28.518 00:05:05.148 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-15 14:31:42.396 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43983 1 109 1 2025-09-15 14:31:42.396 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46569 1 80 1 2025-09-15 14:32:42.700 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51167 1 109 1 2025-09-15 14:32:42.700 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55862 1 80 1 2025-09-15 14:32:42.690 00:00:00.000 UDP 28.104.0.1:55862 -> 198.28.0.2:53 1 64 1 2025-09-15 14:32:42.690 00:00:00.000 UDP 28.104.0.1:51167 -> 198.28.0.2:53 1 64 1 2025-09-15 14:28:36.308 00:05:10.009 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2376 1 2025-09-15 14:33:33.019 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-15 14:33:42.988 00:00:00.000 UDP 28.104.0.1:39134 -> 198.28.0.2:53 1 64 1 2025-09-15 14:33:42.988 00:00:00.000 UDP 28.104.0.1:47342 -> 198.28.0.2:53 1 64 1 2025-09-15 14:33:43.000 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47342 1 80 1 2025-09-15 14:33:43.000 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39134 1 109 1 2025-09-15 14:32:33.404 00:02:00.254 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-09-15 14:32:33.404 00:02:00.179 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-09-15 14:30:28.534 00:05:04.869 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-15 14:30:28.574 00:05:05.082 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-15 14:34:43.298 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36201 1 109 1 2025-09-15 14:34:43.298 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41257 1 80 1 2025-09-15 14:34:43.288 00:00:00.000 UDP 28.104.0.1:41257 -> 198.28.0.2:53 1 64 1 2025-09-15 14:34:43.288 00:00:00.000 UDP 28.104.0.1:36201 -> 198.28.0.2:53 1 64 1 2025-09-15 14:31:28.526 00:05:04.888 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-15 14:35:43.547 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59122 1 109 1 2025-09-15 14:35:43.547 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53053 1 80 1 2025-09-15 14:35:43.538 00:00:00.000 UDP 28.104.0.1:53053 -> 198.28.0.2:53 1 64 1 2025-09-15 14:35:43.538 00:00:00.000 UDP 28.104.0.1:59122 -> 198.28.0.2:53 1 64 1 2025-09-15 14:35:33.404 00:01:00.256 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-09-15 14:35:33.404 00:01:00.182 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-09-15 14:36:43.851 00:00:00.000 UDP 28.104.0.1:33732 -> 198.28.0.2:53 1 64 1 2025-09-15 14:36:43.850 00:00:00.000 UDP 28.104.0.1:51121 -> 198.28.0.2:53 1 64 1 2025-09-15 14:36:43.860 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51121 1 80 1 2025-09-15 14:36:43.861 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33732 1 109 1 2025-09-15 14:33:28.524 00:05:05.142 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-15 14:37:44.131 00:00:00.000 UDP 28.104.0.1:43918 -> 198.28.0.2:53 1 64 1 2025-09-15 14:37:44.131 00:00:00.000 UDP 28.104.0.1:53585 -> 198.28.0.2:53 1 64 1 2025-09-15 14:37:44.143 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53585 1 109 1 2025-09-15 14:37:44.145 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43918 1 80 1 2025-09-15 14:33:56.318 00:05:10.004 OSPF 28.0.2.2:0 -> 224.0.0.5:0 40 3008 1 2025-09-15 14:38:33.351 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-15 14:38:44.399 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42667 1 109 1 2025-09-15 14:38:44.398 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54703 1 80 1 2025-09-15 14:38:44.390 00:00:00.000 UDP 28.104.0.1:54703 -> 198.28.0.2:53 1 64 1 2025-09-15 14:38:44.390 00:00:00.000 UDP 28.104.0.1:42667 -> 198.28.0.2:53 1 64 1 2025-09-15 14:37:33.403 00:02:00.255 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-09-15 14:37:33.403 00:02:00.182 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-09-15 14:39:44.698 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47623 1 80 1 2025-09-15 14:39:44.700 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37951 1 109 1 2025-09-15 14:39:44.690 00:00:00.000 UDP 28.104.0.1:37951 -> 198.28.0.2:53 1 64 1 2025-09-15 14:39:44.689 00:00:00.000 UDP 28.104.0.1:47623 -> 198.28.0.2:53 1 64 1 2025-09-15 14:36:28.535 00:05:04.869 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-15 14:36:28.575 00:05:05.081 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-15 14:40:45.189 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56960 1 80 1 2025-09-15 14:40:45.189 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37088 1 109 1 2025-09-15 14:40:45.179 00:00:00.000 UDP 28.104.0.1:37088 -> 198.28.0.2:53 1 64 1 2025-09-15 14:40:45.179 00:00:00.000 UDP 28.104.0.1:56960 -> 198.28.0.2:53 1 64 1 2025-09-15 14:37:28.526 00:05:04.890 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-15 14:40:33.404 00:01:00.254 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-09-15 14:40:33.404 00:01:00.184 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-09-15 14:41:45.480 00:00:00.000 UDP 28.104.0.1:53760 -> 198.28.0.2:53 1 64 1 2025-09-15 14:41:45.480 00:00:00.000 UDP 28.104.0.1:52432 -> 198.28.0.2:53 1 64 1 2025-09-15 14:41:45.489 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53760 1 109 1 2025-09-15 14:41:45.490 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52432 1 80 1 2025-09-15 14:42:45.783 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44330 1 109 1 2025-09-15 14:42:45.783 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36128 1 80 1 2025-09-15 14:42:45.773 00:00:00.000 UDP 28.104.0.1:36128 -> 198.28.0.2:53 1 64 1 2025-09-15 14:42:45.773 00:00:00.000 UDP 28.104.0.1:44330 -> 198.28.0.2:53 1 64 1 2025-09-15 14:39:16.322 00:05:10.009 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2520 1 2025-09-15 14:43:33.295 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-15 14:39:28.526 00:05:05.140 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-15 14:43:46.076 00:00:00.000 UDP 28.104.0.1:44701 -> 198.28.0.2:53 1 64 1 2025-09-15 14:43:46.076 00:00:00.000 UDP 28.104.0.1:59645 -> 198.28.0.2:53 1 64 1 2025-09-15 14:43:46.086 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44701 1 80 1 2025-09-15 14:43:46.086 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59645 1 109 1 2025-09-15 14:42:33.405 00:02:00.253 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-09-15 14:42:33.405 00:02:00.180 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-09-15 14:44:46.376 00:00:00.000 UDP 28.104.0.1:47347 -> 198.28.0.2:53 1 64 1 2025-09-15 14:44:46.376 00:00:00.000 UDP 28.104.0.1:42505 -> 198.28.0.2:53 1 64 1 2025-09-15 14:44:46.386 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42505 1 80 1 2025-09-15 14:44:46.386 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47347 1 109 1 2025-09-15 14:45:46.698 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44818 1 80 1 2025-09-15 14:45:46.698 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38932 1 109 1 2025-09-15 14:45:46.688 00:00:00.000 UDP 28.104.0.1:38932 -> 198.28.0.2:53 1 64 1 2025-09-15 14:45:46.688 00:00:00.000 UDP 28.104.0.1:44818 -> 198.28.0.2:53 1 64 1 2025-09-15 14:45:33.406 00:01:00.180 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-09-15 14:45:33.406 00:01:00.255 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-09-15 14:42:28.538 00:05:04.868 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-15 14:42:28.578 00:05:05.080 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-15 14:46:46.985 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56091 1 80 1 2025-09-15 14:46:46.986 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41120 1 109 1 2025-09-15 14:46:46.976 00:00:00.000 UDP 28.104.0.1:41120 -> 198.28.0.2:53 1 64 1 2025-09-15 14:46:46.976 00:00:00.000 UDP 28.104.0.1:56091 -> 198.28.0.2:53 1 64 1 2025-09-15 14:43:28.527 00:05:04.888 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-15 14:47:47.255 00:00:00.000 UDP 28.104.0.1:58011 -> 198.28.0.2:53 1 64 1 2025-09-15 14:47:47.255 00:00:00.000 UDP 28.104.0.1:37472 -> 198.28.0.2:53 1 64 1 2025-09-15 14:47:47.265 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58011 1 80 1 2025-09-15 14:47:47.265 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37472 1 109 1 2025-09-15 14:48:33.413 00:00:00.030 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-15 14:44:36.331 00:05:10.004 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2480 1 2025-09-15 14:48:47.550 00:00:00.000 UDP 28.104.0.1:56732 -> 198.28.0.2:53 1 64 1 2025-09-15 14:48:47.550 00:00:00.000 UDP 28.104.0.1:46225 -> 198.28.0.2:53 1 64 1 2025-09-15 14:48:47.560 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56732 1 109 1 2025-09-15 14:48:47.560 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46225 1 80 1 2025-09-15 14:47:33.407 00:02:00.255 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-09-15 14:47:33.407 00:02:00.180 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-09-15 14:45:28.530 00:05:05.139 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-15 14:49:47.848 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57172 1 80 1 2025-09-15 14:49:47.848 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59039 1 109 1 2025-09-15 14:49:47.839 00:00:00.000 UDP 28.104.0.1:59039 -> 198.28.0.2:53 1 64 1 2025-09-15 14:49:47.839 00:00:00.000 UDP 28.104.0.1:57172 -> 198.28.0.2:53 1 64 1 2025-09-15 14:50:54.578 00:00:00.000 UDP 28.104.0.1:41542 -> 198.28.0.2:53 1 64 1 2025-09-15 14:50:54.578 00:00:00.000 UDP 28.104.0.1:45242 -> 198.28.0.2:53 1 64 1 2025-09-15 14:50:54.591 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45242 1 109 1 2025-09-15 14:50:54.590 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41542 1 80 1 2025-09-15 14:50:33.406 00:01:00.255 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-09-15 14:50:33.406 00:01:00.181 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-09-15 14:51:54.833 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60480 1 109 1 2025-09-15 14:51:54.833 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47370 1 80 1 2025-09-15 14:51:54.823 00:00:00.000 UDP 28.104.0.1:60480 -> 198.28.0.2:53 1 64 1 2025-09-15 14:51:54.823 00:00:00.000 UDP 28.104.0.1:47370 -> 198.28.0.2:53 1 64 1 2025-09-15 14:48:28.541 00:05:04.867 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-15 14:48:28.580 00:05:05.079 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-15 14:52:55.135 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39622 1 109 1 2025-09-15 14:52:55.135 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40107 1 80 1 2025-09-15 14:52:55.125 00:00:00.000 UDP 28.104.0.1:40107 -> 198.28.0.2:53 1 64 1 2025-09-15 14:52:55.125 00:00:00.000 UDP 28.104.0.1:39622 -> 198.28.0.2:53 1 64 1 2025-09-15 14:53:34.235 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-15 14:49:28.531 00:05:04.886 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-15 14:53:55.420 00:00:00.000 UDP 28.104.0.1:59319 -> 198.28.0.2:53 1 64 1 2025-09-15 14:53:55.420 00:00:00.000 UDP 28.104.0.1:56796 -> 198.28.0.2:53 1 64 1 2025-09-15 14:53:55.432 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59319 1 80 1 2025-09-15 14:53:55.432 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56796 1 109 1 2025-09-15 14:49:56.336 00:05:10.014 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2544 1 2025-09-15 14:52:33.407 00:02:00.256 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-09-15 14:52:33.407 00:02:00.181 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-09-15 14:54:55.723 00:00:00.000 UDP 28.104.0.1:37645 -> 198.28.0.2:53 1 64 1 2025-09-15 14:54:55.724 00:00:00.000 UDP 28.104.0.1:34306 -> 198.28.0.2:53 1 64 1 2025-09-15 14:54:55.734 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34306 1 80 1 2025-09-15 14:54:55.734 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37645 1 109 1 2025-09-15 14:51:28.533 00:05:05.138 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-15 14:55:56.055 00:00:00.000 UDP 28.104.0.1:51872 -> 198.28.0.2:53 1 64 1 2025-09-15 14:55:56.055 00:00:00.000 UDP 28.104.0.1:45541 -> 198.28.0.2:53 1 64 1 2025-09-15 14:55:56.065 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51872 1 109 1 2025-09-15 14:55:56.065 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45541 1 80 1 2025-09-15 14:55:33.407 00:01:00.257 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-09-15 14:55:33.407 00:01:00.183 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-09-15 14:56:56.320 00:00:00.000 UDP 28.104.0.1:38199 -> 198.28.0.2:53 1 64 1 2025-09-15 14:56:56.321 00:00:00.000 UDP 28.104.0.1:34896 -> 198.28.0.2:53 1 64 1 2025-09-15 14:56:56.330 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38199 1 109 1 2025-09-15 14:56:56.331 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34896 1 80 1 2025-09-15 14:57:56.623 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56306 1 80 1 2025-09-15 14:57:56.624 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54825 1 109 1 2025-09-15 14:57:56.612 00:00:00.000 UDP 28.104.0.1:56306 -> 198.28.0.2:53 1 64 1 2025-09-15 14:57:56.612 00:00:00.000 UDP 28.104.0.1:54825 -> 198.28.0.2:53 1 64 1 2025-09-15 14:57:33.408 00:01:00.257 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-09-15 14:57:33.408 00:01:00.182 TCP 28.154.0.1:179 -> 28.155.0.1:36643 4 246 1 2025-09-15 14:58:33.647 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-15 14:54:28.542 00:05:04.872 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-15 14:54:28.582 00:05:05.079 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 Summary: total flows: 349, total bytes: 94621, total packets: 1394, avg bps: 196, avg pps: 0, avg bpp: 67 Time window: 2025-09-15 13:55:28 - 2025-09-15 14:59:33 Total flows processed: 349, passed: 349, Blocks skipped: 0, Bytes read: 36360 Sys: 0.0045s User: 0.0022s Wall: 0.0055s flows/second: 62905.5 Runtime: 0.0056s