Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-20 01:59:36.098 00:00:00.000 UDP 28.104.0.1:55104 -> 198.28.0.2:53 1 64 1 2025-09-20 01:59:36.098 00:00:00.000 UDP 28.104.0.1:37389 -> 198.28.0.2:53 1 64 1 2025-09-20 01:55:36.693 00:05:00.334 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-09-20 01:59:36.107 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55104 1 109 1 2025-09-20 01:59:36.107 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37389 1 80 1 2025-09-20 01:55:36.953 00:05:53.560 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-20 02:00:36.351 00:00:00.000 UDP 28.104.0.1:49089 -> 198.28.0.2:53 1 64 1 2025-09-20 02:00:36.351 00:00:00.000 UDP 28.104.0.1:57987 -> 198.28.0.2:53 1 64 1 2025-09-20 02:00:36.363 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49089 1 80 1 2025-09-20 02:00:36.363 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57987 1 109 1 2025-09-20 02:00:42.453 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-20 01:57:36.694 00:05:00.329 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-09-20 02:01:36.643 00:00:00.000 UDP 28.104.0.1:48557 -> 198.28.0.2:53 1 64 1 2025-09-20 02:01:36.643 00:00:00.000 UDP 28.104.0.1:60156 -> 198.28.0.2:53 1 64 1 2025-09-20 02:01:36.653 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48557 1 80 1 2025-09-20 02:01:36.653 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60156 1 109 1 2025-09-20 01:58:15.084 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2560 1 2025-09-20 02:02:36.962 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58197 1 80 1 2025-09-20 02:02:36.961 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38925 1 109 1 2025-09-20 02:02:36.952 00:00:00.000 UDP 28.104.0.1:58197 -> 198.28.0.2:53 1 64 1 2025-09-20 02:02:36.951 00:00:00.000 UDP 28.104.0.1:38925 -> 198.28.0.2:53 1 64 1 2025-09-20 01:59:30.524 00:05:06.171 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-20 02:03:37.207 00:00:00.000 UDP 28.104.0.1:53619 -> 198.28.0.2:53 1 64 1 2025-09-20 02:03:37.207 00:00:00.000 UDP 28.104.0.1:39449 -> 198.28.0.2:53 1 64 1 2025-09-20 02:03:37.218 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53619 1 80 1 2025-09-20 02:03:37.218 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39449 1 109 1 2025-09-20 01:59:36.942 00:05:53.623 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-20 02:04:37.685 00:00:00.000 UDP 28.104.0.1:47171 -> 198.28.0.2:53 1 64 1 2025-09-20 02:04:37.685 00:00:00.000 UDP 28.104.0.1:59021 -> 198.28.0.2:53 1 64 1 2025-09-20 02:00:30.514 00:05:06.191 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-20 02:04:37.696 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59021 1 109 1 2025-09-20 02:04:37.696 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47171 1 80 1 2025-09-20 02:05:37.936 00:00:00.000 UDP 28.104.0.1:55293 -> 198.28.0.2:53 1 64 1 2025-09-20 02:05:37.936 00:00:00.000 UDP 28.104.0.1:52708 -> 198.28.0.2:53 1 64 1 2025-09-20 02:01:36.695 00:05:00.332 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-09-20 02:05:37.945 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55293 1 109 1 2025-09-20 02:05:37.945 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52708 1 80 1 2025-09-20 02:05:42.471 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-20 02:01:36.967 00:05:53.548 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-20 02:06:38.962 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37905 1 80 1 2025-09-20 02:06:38.962 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59803 1 109 1 2025-09-20 02:06:38.952 00:00:00.000 UDP 28.104.0.1:37905 -> 198.28.0.2:53 1 64 1 2025-09-20 02:06:38.952 00:00:00.000 UDP 28.104.0.1:59803 -> 198.28.0.2:53 1 64 1 2025-09-20 02:03:36.694 00:05:00.330 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-09-20 02:07:39.217 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47185 1 109 1 2025-09-20 02:07:39.217 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43330 1 80 1 2025-09-20 02:07:39.206 00:00:00.000 UDP 28.104.0.1:47185 -> 198.28.0.2:53 1 64 1 2025-09-20 02:07:39.206 00:00:00.000 UDP 28.104.0.1:43330 -> 198.28.0.2:53 1 64 1 2025-09-20 02:03:35.090 00:05:10.008 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2416 1 2025-09-20 02:08:39.502 00:00:00.000 UDP 28.104.0.1:45171 -> 198.28.0.2:53 1 64 1 2025-09-20 02:08:39.502 00:00:00.000 UDP 28.104.0.1:40109 -> 198.28.0.2:53 1 64 1 2025-09-20 02:08:39.511 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45171 1 109 1 2025-09-20 02:08:39.511 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40109 1 80 1 2025-09-20 02:05:30.525 00:05:06.171 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-20 02:09:39.798 00:00:00.000 UDP 28.104.0.1:36762 -> 198.28.0.2:53 1 64 1 2025-09-20 02:09:39.797 00:00:00.000 UDP 28.104.0.1:35766 -> 198.28.0.2:53 1 64 1 2025-09-20 02:09:39.807 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35766 1 80 1 2025-09-20 02:09:39.807 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36762 1 109 1 2025-09-20 02:05:36.957 00:05:53.608 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-20 02:10:40.098 00:00:00.000 UDP 28.104.0.1:33540 -> 198.28.0.2:53 1 64 1 2025-09-20 02:10:40.098 00:00:00.000 UDP 28.104.0.1:41114 -> 198.28.0.2:53 1 64 1 2025-09-20 02:06:30.514 00:05:06.192 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-20 02:10:42.514 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-20 02:10:40.108 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41114 1 109 1 2025-09-20 02:10:40.108 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33540 1 80 1 2025-09-20 02:07:36.695 00:05:00.341 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-09-20 02:11:40.354 00:00:00.000 UDP 28.104.0.1:33474 -> 198.28.0.2:53 1 64 1 2025-09-20 02:11:40.354 00:00:00.000 UDP 28.104.0.1:42598 -> 198.28.0.2:53 1 64 1 2025-09-20 02:11:40.365 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33474 1 109 1 2025-09-20 02:11:40.365 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42598 1 80 1 2025-09-20 02:07:36.967 00:05:53.547 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-20 02:12:40.612 00:00:00.000 UDP 28.104.0.1:43158 -> 198.28.0.2:53 1 64 1 2025-09-20 02:12:40.612 00:00:00.000 UDP 28.104.0.1:39834 -> 198.28.0.2:53 1 64 1 2025-09-20 02:12:40.624 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39834 1 80 1 2025-09-20 02:12:40.624 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43158 1 109 1 2025-09-20 02:08:55.098 00:05:10.010 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2652 1 2025-09-20 02:09:36.695 00:05:00.334 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-09-20 02:13:40.917 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43237 1 109 1 2025-09-20 02:13:40.916 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34493 1 80 1 2025-09-20 02:13:40.905 00:00:00.000 UDP 28.104.0.1:34493 -> 198.28.0.2:53 1 64 1 2025-09-20 02:13:40.906 00:00:00.000 UDP 28.104.0.1:43237 -> 198.28.0.2:53 1 64 1 2025-09-20 02:14:41.165 00:00:00.000 UDP 28.104.0.1:36863 -> 198.28.0.2:53 1 64 1 2025-09-20 02:14:41.165 00:00:00.000 UDP 28.104.0.1:60982 -> 198.28.0.2:53 1 64 1 2025-09-20 02:14:41.177 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36863 1 80 1 2025-09-20 02:14:41.177 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60982 1 109 1 2025-09-20 02:15:42.934 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-20 02:15:41.482 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58766 1 80 1 2025-09-20 02:15:41.482 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59556 1 109 1 2025-09-20 02:11:30.526 00:05:06.174 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-20 02:15:41.472 00:00:00.000 UDP 28.104.0.1:59556 -> 198.28.0.2:53 1 64 1 2025-09-20 02:15:41.472 00:00:00.000 UDP 28.104.0.1:58766 -> 198.28.0.2:53 1 64 1 2025-09-20 02:11:36.958 00:05:53.610 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-20 02:12:30.515 00:05:06.195 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-20 02:16:41.737 00:00:00.000 UDP 28.104.0.1:56744 -> 198.28.0.2:53 1 64 1 2025-09-20 02:16:41.737 00:00:00.000 UDP 28.104.0.1:50443 -> 198.28.0.2:53 1 64 1 2025-09-20 02:16:41.747 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50443 1 80 1 2025-09-20 02:16:41.747 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56744 1 109 1 2025-09-20 02:13:36.698 00:05:00.342 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-09-20 02:17:42.002 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55634 1 80 1 2025-09-20 02:17:42.002 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40812 1 109 1 2025-09-20 02:17:41.991 00:00:00.000 UDP 28.104.0.1:40812 -> 198.28.0.2:53 1 64 1 2025-09-20 02:17:41.991 00:00:00.000 UDP 28.104.0.1:55634 -> 198.28.0.2:53 1 64 1 2025-09-20 02:14:15.109 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2516 1 2025-09-20 02:13:36.968 00:05:53.548 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-20 02:18:42.315 00:00:00.000 UDP 28.104.0.1:43042 -> 198.28.0.2:53 1 64 1 2025-09-20 02:18:42.315 00:00:00.000 UDP 28.104.0.1:54682 -> 198.28.0.2:53 1 64 1 2025-09-20 02:18:42.326 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43042 1 109 1 2025-09-20 02:18:42.326 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54682 1 80 1 2025-09-20 02:15:36.699 00:05:00.331 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-09-20 02:19:42.613 00:00:00.000 UDP 28.104.0.1:54762 -> 198.28.0.2:53 1 64 1 2025-09-20 02:19:42.613 00:00:00.000 UDP 28.104.0.1:45796 -> 198.28.0.2:53 1 64 1 2025-09-20 02:19:42.624 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54762 1 109 1 2025-09-20 02:19:42.624 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45796 1 80 1 2025-09-20 02:20:42.882 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46601 1 109 1 2025-09-20 02:20:42.724 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-20 02:20:42.882 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47839 1 80 1 2025-09-20 02:20:42.870 00:00:00.000 UDP 28.104.0.1:46601 -> 198.28.0.2:53 1 64 1 2025-09-20 02:20:42.870 00:00:00.000 UDP 28.104.0.1:47839 -> 198.28.0.2:53 1 64 1 2025-09-20 02:17:30.528 00:05:06.173 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-20 02:21:43.184 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54670 1 109 1 2025-09-20 02:21:43.184 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32812 1 80 1 2025-09-20 02:21:43.172 00:00:00.000 UDP 28.104.0.1:32812 -> 198.28.0.2:53 1 64 1 2025-09-20 02:21:43.172 00:00:00.000 UDP 28.104.0.1:54670 -> 198.28.0.2:53 1 64 1 2025-09-20 02:17:36.967 00:05:53.600 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-20 02:18:30.516 00:05:06.196 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-20 02:22:43.480 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49639 1 80 1 2025-09-20 02:22:43.480 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37937 1 109 1 2025-09-20 02:22:43.469 00:00:00.000 UDP 28.104.0.1:37937 -> 198.28.0.2:53 1 64 1 2025-09-20 02:22:43.469 00:00:00.000 UDP 28.104.0.1:49639 -> 198.28.0.2:53 1 64 1 2025-09-20 02:19:36.701 00:05:00.369 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-09-20 02:23:43.763 00:00:00.000 UDP 28.104.0.1:34505 -> 198.28.0.2:53 1 64 1 2025-09-20 02:23:43.763 00:00:00.000 UDP 28.104.0.1:42736 -> 198.28.0.2:53 1 64 1 2025-09-20 02:23:43.774 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34505 1 109 1 2025-09-20 02:23:43.774 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42736 1 80 1 2025-09-20 02:19:35.116 00:05:10.007 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2616 1 2025-09-20 02:19:36.975 00:05:53.543 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-20 02:24:44.062 00:00:00.000 UDP 28.104.0.1:59363 -> 198.28.0.2:53 1 64 1 2025-09-20 02:24:44.062 00:00:00.000 UDP 28.104.0.1:52236 -> 198.28.0.2:53 1 64 1 2025-09-20 02:24:44.072 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59363 1 109 1 2025-09-20 02:24:44.072 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52236 1 80 1 2025-09-20 02:21:36.702 00:05:00.330 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-09-20 02:25:42.869 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-20 02:25:44.324 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39880 1 80 1 2025-09-20 02:25:44.325 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50920 1 109 1 2025-09-20 02:25:44.314 00:00:00.000 UDP 28.104.0.1:39880 -> 198.28.0.2:53 1 64 1 2025-09-20 02:25:44.314 00:00:00.000 UDP 28.104.0.1:50920 -> 198.28.0.2:53 1 64 1 2025-09-20 02:26:44.579 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55326 1 80 1 2025-09-20 02:26:44.579 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46034 1 109 1 2025-09-20 02:26:44.569 00:00:00.000 UDP 28.104.0.1:46034 -> 198.28.0.2:53 1 64 1 2025-09-20 02:26:44.568 00:00:00.000 UDP 28.104.0.1:55326 -> 198.28.0.2:53 1 64 1 2025-09-20 02:23:30.527 00:05:06.176 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-20 02:27:44.863 00:00:00.000 UDP 28.104.0.1:47899 -> 198.28.0.2:53 1 64 1 2025-09-20 02:27:44.863 00:00:00.000 UDP 28.104.0.1:58638 -> 198.28.0.2:53 1 64 1 2025-09-20 02:27:44.874 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58638 1 109 1 2025-09-20 02:27:44.874 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47899 1 80 1 2025-09-20 02:23:36.965 00:05:53.603 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-20 02:24:30.517 00:05:06.202 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-20 02:28:45.193 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54074 1 80 1 2025-09-20 02:28:45.192 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33878 1 109 1 2025-09-20 02:28:45.182 00:00:00.000 UDP 28.104.0.1:54074 -> 198.28.0.2:53 1 64 1 2025-09-20 02:28:45.182 00:00:00.000 UDP 28.104.0.1:33878 -> 198.28.0.2:53 1 64 1 2025-09-20 02:24:55.122 00:05:10.004 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2728 1 2025-09-20 02:25:36.703 00:05:00.369 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-09-20 02:29:45.432 00:00:00.000 UDP 28.104.0.1:55360 -> 198.28.0.2:53 1 64 1 2025-09-20 02:29:45.432 00:00:00.000 UDP 28.104.0.1:35277 -> 198.28.0.2:53 1 64 1 2025-09-20 02:29:45.443 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55360 1 80 1 2025-09-20 02:29:45.443 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35277 1 109 1 2025-09-20 02:25:36.976 00:05:53.542 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-20 02:30:43.042 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-20 02:30:45.705 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41137 1 109 1 2025-09-20 02:30:45.705 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34984 1 80 1 2025-09-20 02:30:45.694 00:00:00.000 UDP 28.104.0.1:41137 -> 198.28.0.2:53 1 64 1 2025-09-20 02:30:45.694 00:00:00.000 UDP 28.104.0.1:34984 -> 198.28.0.2:53 1 64 1 2025-09-20 02:27:36.703 00:05:00.338 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-09-20 02:31:45.955 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45172 1 80 1 2025-09-20 02:31:45.955 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45169 1 109 1 2025-09-20 02:31:45.945 00:00:00.000 UDP 28.104.0.1:45169 -> 198.28.0.2:53 1 64 1 2025-09-20 02:31:45.945 00:00:00.000 UDP 28.104.0.1:45172 -> 198.28.0.2:53 1 64 1 2025-09-20 02:32:46.240 00:00:00.000 UDP 28.104.0.1:34002 -> 198.28.0.2:53 1 64 1 2025-09-20 02:32:46.240 00:00:00.000 UDP 28.104.0.1:57727 -> 198.28.0.2:53 1 64 1 2025-09-20 02:32:46.250 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34002 1 109 1 2025-09-20 02:32:46.250 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57727 1 80 1 2025-09-20 02:29:30.530 00:05:06.194 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-20 02:33:46.531 00:00:00.000 UDP 28.104.0.1:53222 -> 198.28.0.2:53 1 64 1 2025-09-20 02:33:46.531 00:00:00.000 UDP 28.104.0.1:52206 -> 198.28.0.2:53 1 64 1 2025-09-20 02:33:46.542 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52206 1 80 1 2025-09-20 02:33:46.542 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53222 1 109 1 2025-09-20 02:30:15.126 00:05:10.004 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2416 1 2025-09-20 02:29:36.967 00:05:53.608 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-20 02:30:30.519 00:05:06.213 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-20 02:34:46.781 00:00:00.000 UDP 28.104.0.1:51361 -> 198.28.0.2:53 1 64 1 2025-09-20 02:34:46.781 00:00:00.000 UDP 28.104.0.1:48242 -> 198.28.0.2:53 1 64 1 2025-09-20 02:34:46.792 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51361 1 109 1 2025-09-20 02:34:46.791 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48242 1 80 1 2025-09-20 02:31:36.720 00:05:00.353 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-09-20 02:35:42.966 00:00:00.040 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-20 02:35:47.089 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52638 1 109 1 2025-09-20 02:35:47.090 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39694 1 80 1 2025-09-20 02:35:47.079 00:00:00.000 UDP 28.104.0.1:39694 -> 198.28.0.2:53 1 64 1 2025-09-20 02:35:47.079 00:00:00.000 UDP 28.104.0.1:52638 -> 198.28.0.2:53 1 64 1 2025-09-20 02:31:36.977 00:05:53.544 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-20 02:36:47.379 00:00:00.000 UDP 28.104.0.1:58799 -> 198.28.0.2:53 1 64 1 2025-09-20 02:36:47.379 00:00:00.000 UDP 28.104.0.1:46471 -> 198.28.0.2:53 1 64 1 2025-09-20 02:36:47.389 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46471 1 109 1 2025-09-20 02:36:47.388 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58799 1 80 1 2025-09-20 02:33:36.720 00:05:00.345 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-09-20 02:37:47.682 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39003 1 109 1 2025-09-20 02:37:47.682 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49149 1 80 1 2025-09-20 02:37:47.672 00:00:00.000 UDP 28.104.0.1:49149 -> 198.28.0.2:53 1 64 1 2025-09-20 02:37:47.671 00:00:00.000 UDP 28.104.0.1:39003 -> 198.28.0.2:53 1 64 1 2025-09-20 02:38:47.968 00:00:00.000 UDP 28.104.0.1:50805 -> 198.28.0.2:53 1 64 1 2025-09-20 02:38:47.969 00:00:00.000 UDP 28.104.0.1:49328 -> 198.28.0.2:53 1 64 1 2025-09-20 02:38:47.979 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49328 1 109 1 2025-09-20 02:38:47.979 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50805 1 80 1 2025-09-20 02:35:30.531 00:05:06.191 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-20 02:39:48.277 00:00:00.000 UDP 28.104.0.1:39553 -> 198.28.0.2:53 1 64 1 2025-09-20 02:35:35.129 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2496 1 2025-09-20 02:39:48.277 00:00:00.000 UDP 28.104.0.1:47247 -> 198.28.0.2:53 1 64 1 2025-09-20 02:39:48.289 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47247 1 109 1 2025-09-20 02:39:48.289 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39553 1 80 1 2025-09-20 02:35:36.970 00:05:53.601 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-20 02:36:30.520 00:05:06.211 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-20 02:40:43.148 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-20 02:40:48.583 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45930 1 80 1 2025-09-20 02:40:48.583 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54394 1 109 1 2025-09-20 02:40:48.572 00:00:00.000 UDP 28.104.0.1:54394 -> 198.28.0.2:53 1 64 1 2025-09-20 02:40:48.573 00:00:00.000 UDP 28.104.0.1:45930 -> 198.28.0.2:53 1 64 1 2025-09-20 02:37:36.722 00:05:00.354 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-09-20 02:41:48.883 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36725 1 109 1 2025-09-20 02:41:48.884 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40863 1 80 1 2025-09-20 02:41:48.873 00:00:00.000 UDP 28.104.0.1:40863 -> 198.28.0.2:53 1 64 1 2025-09-20 02:41:48.873 00:00:00.000 UDP 28.104.0.1:36725 -> 198.28.0.2:53 1 64 1 2025-09-20 02:37:36.982 00:05:53.540 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-20 02:42:49.178 00:00:00.000 UDP 28.104.0.1:53560 -> 198.28.0.2:53 1 64 1 2025-09-20 02:42:49.178 00:00:00.000 UDP 28.104.0.1:57337 -> 198.28.0.2:53 1 64 1 2025-09-20 02:42:49.189 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57337 1 80 1 2025-09-20 02:42:49.189 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53560 1 109 1 2025-09-20 02:39:36.721 00:05:00.348 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-09-20 02:43:49.486 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50567 1 80 1 2025-09-20 02:43:49.486 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50746 1 109 1 2025-09-20 02:43:49.475 00:00:00.000 UDP 28.104.0.1:50567 -> 198.28.0.2:53 1 64 1 2025-09-20 02:43:49.476 00:00:00.000 UDP 28.104.0.1:50746 -> 198.28.0.2:53 1 64 1 2025-09-20 02:44:49.772 00:00:00.000 UDP 28.104.0.1:50334 -> 198.28.0.2:53 1 64 1 2025-09-20 02:44:49.773 00:00:00.000 UDP 28.104.0.1:54935 -> 198.28.0.2:53 1 64 1 2025-09-20 02:44:49.784 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54935 1 80 1 2025-09-20 02:44:49.784 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50334 1 109 1 2025-09-20 02:40:55.135 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2616 1 2025-09-20 02:41:30.531 00:05:06.192 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-20 02:45:43.252 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-20 02:45:50.605 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44040 1 80 1 2025-09-20 02:45:50.605 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60819 1 109 1 2025-09-20 02:45:50.594 00:00:00.000 UDP 28.104.0.1:60819 -> 198.28.0.2:53 1 64 1 2025-09-20 02:45:50.594 00:00:00.000 UDP 28.104.0.1:44040 -> 198.28.0.2:53 1 64 1 2025-09-20 02:41:36.973 00:05:53.605 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-20 02:42:30.521 00:05:06.213 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-20 02:46:50.898 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57441 1 80 1 2025-09-20 02:46:50.898 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52469 1 109 1 2025-09-20 02:46:50.887 00:00:00.000 UDP 28.104.0.1:57441 -> 198.28.0.2:53 1 64 1 2025-09-20 02:46:50.887 00:00:00.000 UDP 28.104.0.1:52469 -> 198.28.0.2:53 1 64 1 2025-09-20 02:43:36.724 00:05:00.355 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-09-20 02:47:51.168 00:00:00.000 UDP 28.104.0.1:46475 -> 198.28.0.2:53 1 64 1 2025-09-20 02:47:51.168 00:00:00.000 UDP 28.104.0.1:39056 -> 198.28.0.2:53 1 64 1 2025-09-20 02:47:51.179 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39056 1 80 1 2025-09-20 02:47:51.179 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46475 1 109 1 2025-09-20 02:43:36.984 00:05:53.542 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-20 02:48:51.454 00:00:00.000 UDP 28.104.0.1:54935 -> 198.28.0.2:53 1 64 1 2025-09-20 02:48:51.454 00:00:00.000 UDP 28.104.0.1:37802 -> 198.28.0.2:53 1 64 1 2025-09-20 02:48:51.463 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54935 1 109 1 2025-09-20 02:48:51.463 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37802 1 80 1 2025-09-20 02:45:36.724 00:05:00.355 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-09-20 02:49:51.759 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60346 1 109 1 2025-09-20 02:49:51.759 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60806 1 80 1 2025-09-20 02:49:51.749 00:00:00.000 UDP 28.104.0.1:60346 -> 198.28.0.2:53 1 64 1 2025-09-20 02:49:51.749 00:00:00.000 UDP 28.104.0.1:60806 -> 198.28.0.2:53 1 64 1 2025-09-20 02:46:15.139 00:05:10.749 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2480 1 2025-09-20 02:50:43.403 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-20 02:50:52.078 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39458 1 80 1 2025-09-20 02:50:52.078 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52580 1 109 1 2025-09-20 02:50:52.069 00:00:00.000 UDP 28.104.0.1:52580 -> 198.28.0.2:53 1 64 1 2025-09-20 02:50:52.069 00:00:00.000 UDP 28.104.0.1:39458 -> 198.28.0.2:53 1 64 1 2025-09-20 02:47:30.535 00:05:06.191 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-20 02:51:52.359 00:00:00.000 UDP 28.104.0.1:54616 -> 198.28.0.2:53 1 64 1 2025-09-20 02:51:52.359 00:00:00.000 UDP 28.104.0.1:33742 -> 198.28.0.2:53 1 64 1 2025-09-20 02:51:52.370 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54616 1 109 1 2025-09-20 02:51:52.370 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33742 1 80 1 2025-09-20 02:47:36.974 00:05:53.602 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-20 02:48:30.524 00:05:06.212 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-09-20 02:52:52.619 00:00:00.000 UDP 28.104.0.1:41130 -> 198.28.0.2:53 1 64 1 2025-09-20 02:52:52.619 00:00:00.000 UDP 28.104.0.1:34022 -> 198.28.0.2:53 1 64 1 2025-09-20 02:52:52.629 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34022 1 80 1 2025-09-20 02:52:52.629 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41130 1 109 1 2025-09-20 02:49:36.724 00:05:00.355 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-09-20 02:53:52.912 00:00:00.000 UDP 28.104.0.1:56138 -> 198.28.0.2:53 1 64 1 2025-09-20 02:53:52.912 00:00:00.000 UDP 28.104.0.1:48884 -> 198.28.0.2:53 1 64 1 2025-09-20 02:53:52.923 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56138 1 109 1 2025-09-20 02:53:52.923 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48884 1 80 1 2025-09-20 02:49:36.985 00:05:53.542 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-09-20 02:54:53.224 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60545 1 80 1 2025-09-20 02:54:53.224 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36111 1 109 1 2025-09-20 02:54:53.213 00:00:00.000 UDP 28.104.0.1:60545 -> 198.28.0.2:53 1 64 1 2025-09-20 02:54:53.213 00:00:00.000 UDP 28.104.0.1:36111 -> 198.28.0.2:53 1 64 1 2025-09-20 02:51:36.726 00:05:00.354 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-09-20 02:55:43.337 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-09-20 02:51:35.144 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 40 3008 1 2025-09-20 02:55:53.514 00:00:00.000 UDP 28.104.0.1:36282 -> 198.28.0.2:53 1 64 1 2025-09-20 02:55:53.515 00:00:00.000 UDP 28.104.0.1:34787 -> 198.28.0.2:53 1 64 1 2025-09-20 02:55:53.525 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34787 1 109 1 2025-09-20 02:55:53.525 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36282 1 80 1 2025-09-20 02:56:53.864 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56217 1 80 1 2025-09-20 02:56:53.864 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39484 1 109 1 2025-09-20 02:56:53.856 00:00:00.000 UDP 28.104.0.1:56217 -> 198.28.0.2:53 1 64 1 2025-09-20 02:56:53.856 00:00:00.000 UDP 28.104.0.1:39484 -> 198.28.0.2:53 1 64 1 2025-09-20 02:53:30.536 00:05:06.192 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-09-20 02:57:54.173 00:00:00.000 UDP 28.104.0.1:44295 -> 198.28.0.2:53 1 64 1 2025-09-20 02:57:54.173 00:00:00.000 UDP 28.104.0.1:33477 -> 198.28.0.2:53 1 64 1 2025-09-20 02:57:54.184 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44295 1 109 1 2025-09-20 02:57:54.184 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33477 1 80 1 2025-09-20 02:53:36.976 00:05:53.605 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-09-20 02:54:30.526 00:05:06.212 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 Summary: total flows: 319, total bytes: 94511, total packets: 1392, avg bps: 196, avg pps: 0, avg bpp: 67 Time window: 2025-09-20 01:55:36 - 2025-09-20 02:59:36 Total flows processed: 319, passed: 319, Blocks skipped: 0, Bytes read: 33240 Sys: 0.0041s User: 0.0031s Wall: 0.0037s flows/second: 87227.5 Runtime: 0.0037s