Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-15 08:59:18.246 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42995 1 80 1 2025-10-15 08:59:18.246 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53569 1 109 1 2025-10-15 08:59:18.236 00:00:00.000 UDP 28.104.0.1:53569 -> 198.28.0.2:53 1 64 1 2025-10-15 08:59:18.236 00:00:00.000 UDP 28.104.0.1:42995 -> 198.28.0.2:53 1 64 1 2025-10-15 08:55:42.378 00:05:09.288 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-15 09:00:18.530 00:00:00.000 UDP 28.104.0.1:51113 -> 198.28.0.2:53 1 64 1 2025-10-15 09:00:18.530 00:00:00.000 UDP 28.104.0.1:39986 -> 198.28.0.2:53 1 64 1 2025-10-15 09:00:18.540 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51113 1 109 1 2025-10-15 09:00:18.540 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39986 1 80 1 2025-10-15 08:55:51.485 00:05:50.935 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-15 08:55:51.500 00:06:00.168 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-15 09:01:18.830 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34123 1 109 1 2025-10-15 09:01:18.830 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54229 1 80 1 2025-10-15 09:01:18.821 00:00:00.000 UDP 28.104.0.1:54229 -> 198.28.0.2:53 1 64 1 2025-10-15 09:01:18.821 00:00:00.000 UDP 28.104.0.1:34123 -> 198.28.0.2:53 1 64 1 2025-10-15 08:56:51.675 00:05:50.695 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-15 08:57:56.113 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 40 3084 1 2025-10-15 09:02:19.126 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56708 1 80 1 2025-10-15 09:02:19.125 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45946 1 109 1 2025-10-15 09:02:19.116 00:00:00.000 UDP 28.104.0.1:56708 -> 198.28.0.2:53 1 64 1 2025-10-15 09:02:19.116 00:00:00.000 UDP 28.104.0.1:45946 -> 198.28.0.2:53 1 64 1 2025-10-15 08:58:42.369 00:05:09.129 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-15 09:02:53.173 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-15 09:03:19.414 00:00:00.000 UDP 28.104.0.1:45419 -> 198.28.0.2:53 1 64 1 2025-10-15 09:03:19.414 00:00:00.000 UDP 28.104.0.1:39317 -> 198.28.0.2:53 1 64 1 2025-10-15 09:03:19.423 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39317 1 109 1 2025-10-15 09:03:19.423 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45419 1 80 1 2025-10-15 08:58:51.666 00:06:00.085 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-15 09:04:20.329 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32990 1 109 1 2025-10-15 09:04:20.329 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49190 1 80 1 2025-10-15 09:04:20.319 00:00:00.000 UDP 28.104.0.1:32990 -> 198.28.0.2:53 1 64 1 2025-10-15 09:04:20.319 00:00:00.000 UDP 28.104.0.1:49190 -> 198.28.0.2:53 1 64 1 2025-10-15 09:05:20.607 00:00:00.000 UDP 28.104.0.1:52747 -> 198.28.0.2:53 1 64 1 2025-10-15 09:05:20.607 00:00:00.000 UDP 28.104.0.1:49610 -> 198.28.0.2:53 1 64 1 2025-10-15 09:05:20.619 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49610 1 109 1 2025-10-15 09:05:20.618 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52747 1 80 1 2025-10-15 09:01:42.381 00:05:09.286 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-15 09:06:20.914 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41379 1 109 1 2025-10-15 09:06:20.913 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49272 1 80 1 2025-10-15 09:06:20.903 00:00:00.000 UDP 28.104.0.1:49272 -> 198.28.0.2:53 1 64 1 2025-10-15 09:06:20.903 00:00:00.000 UDP 28.104.0.1:41379 -> 198.28.0.2:53 1 64 1 2025-10-15 09:01:51.486 00:05:50.936 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-15 09:07:21.210 00:00:00.000 UDP 28.104.0.1:35303 -> 198.28.0.2:53 1 64 1 2025-10-15 09:07:21.210 00:00:00.000 UDP 28.104.0.1:47611 -> 198.28.0.2:53 1 64 1 2025-10-15 09:07:21.222 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35303 1 109 1 2025-10-15 09:07:21.222 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47611 1 80 1 2025-10-15 09:03:16.120 00:05:10.011 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2640 1 2025-10-15 09:02:51.677 00:05:50.695 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-15 09:02:51.504 00:06:00.164 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-15 09:07:53.170 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-15 09:08:21.517 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52543 1 109 1 2025-10-15 09:08:21.517 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51659 1 80 1 2025-10-15 09:08:21.508 00:00:00.000 UDP 28.104.0.1:52543 -> 198.28.0.2:53 1 64 1 2025-10-15 09:08:21.508 00:00:00.000 UDP 28.104.0.1:51659 -> 198.28.0.2:53 1 64 1 2025-10-15 09:04:42.371 00:05:09.127 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-15 09:09:21.807 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39316 1 80 1 2025-10-15 09:09:21.807 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38174 1 109 1 2025-10-15 09:09:21.797 00:00:00.000 UDP 28.104.0.1:38174 -> 198.28.0.2:53 1 64 1 2025-10-15 09:09:21.797 00:00:00.000 UDP 28.104.0.1:39316 -> 198.28.0.2:53 1 64 1 2025-10-15 09:10:22.066 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36294 1 80 1 2025-10-15 09:10:22.066 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57952 1 109 1 2025-10-15 09:10:22.056 00:00:00.000 UDP 28.104.0.1:36294 -> 198.28.0.2:53 1 64 1 2025-10-15 09:10:22.056 00:00:00.000 UDP 28.104.0.1:57952 -> 198.28.0.2:53 1 64 1 2025-10-15 09:05:51.668 00:06:00.085 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-15 09:11:22.363 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49672 1 80 1 2025-10-15 09:11:22.363 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39921 1 109 1 2025-10-15 09:11:22.352 00:00:00.000 UDP 28.104.0.1:49672 -> 198.28.0.2:53 1 64 1 2025-10-15 09:11:22.352 00:00:00.000 UDP 28.104.0.1:39921 -> 198.28.0.2:53 1 64 1 2025-10-15 09:07:42.381 00:05:09.288 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-15 09:12:22.660 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45939 1 80 1 2025-10-15 09:12:22.660 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45652 1 109 1 2025-10-15 09:12:22.650 00:00:00.000 UDP 28.104.0.1:45939 -> 198.28.0.2:53 1 64 1 2025-10-15 09:12:22.650 00:00:00.000 UDP 28.104.0.1:45652 -> 198.28.0.2:53 1 64 1 2025-10-15 09:07:51.488 00:05:50.934 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-15 09:08:36.130 00:05:10.002 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2612 1 2025-10-15 09:12:53.151 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-15 09:13:22.955 00:00:00.000 UDP 28.104.0.1:43191 -> 198.28.0.2:53 1 64 1 2025-10-15 09:13:22.956 00:00:00.000 UDP 28.104.0.1:46925 -> 198.28.0.2:53 1 64 1 2025-10-15 09:13:22.966 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43191 1 80 1 2025-10-15 09:13:22.966 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46925 1 109 1 2025-10-15 09:08:51.677 00:05:50.694 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-15 09:14:23.222 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53758 1 109 1 2025-10-15 09:14:23.222 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59883 1 80 1 2025-10-15 09:14:23.213 00:00:00.000 UDP 28.104.0.1:59883 -> 198.28.0.2:53 1 64 1 2025-10-15 09:14:23.213 00:00:00.000 UDP 28.104.0.1:53758 -> 198.28.0.2:53 1 64 1 2025-10-15 09:09:51.504 00:06:00.166 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-15 09:10:42.372 00:05:09.128 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-15 09:15:23.511 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45935 1 109 1 2025-10-15 09:15:23.511 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56569 1 80 1 2025-10-15 09:15:23.501 00:00:00.000 UDP 28.104.0.1:56569 -> 198.28.0.2:53 1 64 1 2025-10-15 09:15:23.501 00:00:00.000 UDP 28.104.0.1:45935 -> 198.28.0.2:53 1 64 1 2025-10-15 09:16:23.809 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40447 1 80 1 2025-10-15 09:16:23.809 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51508 1 109 1 2025-10-15 09:16:23.798 00:00:00.000 UDP 28.104.0.1:51508 -> 198.28.0.2:53 1 64 1 2025-10-15 09:16:23.799 00:00:00.000 UDP 28.104.0.1:40447 -> 198.28.0.2:53 1 64 1 2025-10-15 09:17:24.158 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48498 1 80 1 2025-10-15 09:17:24.158 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34855 1 109 1 2025-10-15 09:17:24.149 00:00:00.000 UDP 28.104.0.1:34855 -> 198.28.0.2:53 1 64 1 2025-10-15 09:17:24.149 00:00:00.000 UDP 28.104.0.1:48498 -> 198.28.0.2:53 1 64 1 2025-10-15 09:12:51.669 00:06:00.085 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-15 09:13:42.381 00:05:09.288 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-15 09:17:52.993 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-15 09:13:56.132 00:05:10.003 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2448 1 2025-10-15 09:18:24.398 00:00:00.000 UDP 28.104.0.1:43519 -> 198.28.0.2:53 1 64 1 2025-10-15 09:18:24.399 00:00:00.000 UDP 28.104.0.1:59473 -> 198.28.0.2:53 1 64 1 2025-10-15 09:18:24.409 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59473 1 109 1 2025-10-15 09:18:24.409 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43519 1 80 1 2025-10-15 09:13:51.489 00:05:50.933 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-15 09:19:24.693 00:00:00.000 UDP 28.104.0.1:57757 -> 198.28.0.2:53 1 64 1 2025-10-15 09:19:24.693 00:00:00.000 UDP 28.104.0.1:41926 -> 198.28.0.2:53 1 64 1 2025-10-15 09:19:24.704 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57757 1 109 1 2025-10-15 09:19:24.704 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41926 1 80 1 2025-10-15 09:14:51.679 00:05:50.693 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-15 09:20:24.992 00:00:00.000 UDP 28.104.0.1:50136 -> 198.28.0.2:53 1 64 1 2025-10-15 09:20:24.991 00:00:00.000 UDP 28.104.0.1:34676 -> 198.28.0.2:53 1 64 1 2025-10-15 09:20:25.002 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50136 1 80 1 2025-10-15 09:20:25.002 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34676 1 109 1 2025-10-15 09:16:42.372 00:05:09.131 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-15 09:21:25.293 00:00:00.000 UDP 28.104.0.1:43379 -> 198.28.0.2:53 1 64 1 2025-10-15 09:21:25.293 00:00:00.000 UDP 28.104.0.1:32950 -> 198.28.0.2:53 1 64 1 2025-10-15 09:21:25.303 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43379 1 109 1 2025-10-15 09:21:25.302 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32950 1 80 1 2025-10-15 09:16:51.507 00:06:00.164 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-15 09:22:25.587 00:00:00.000 UDP 28.104.0.1:57412 -> 198.28.0.2:53 1 64 1 2025-10-15 09:22:25.587 00:00:00.000 UDP 28.104.0.1:54152 -> 198.28.0.2:53 1 64 1 2025-10-15 09:22:25.600 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57412 1 80 1 2025-10-15 09:22:25.600 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54152 1 109 1 2025-10-15 09:22:53.257 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-15 09:19:16.136 00:05:10.002 OSPF 28.0.2.2:0 -> 224.0.0.5:0 33 2256 1 2025-10-15 09:23:25.882 00:00:00.000 UDP 28.104.0.1:46694 -> 198.28.0.2:53 1 64 1 2025-10-15 09:23:25.882 00:00:00.000 UDP 28.104.0.1:53661 -> 198.28.0.2:53 1 64 1 2025-10-15 09:23:25.892 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46694 1 109 1 2025-10-15 09:23:25.892 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53661 1 80 1 2025-10-15 09:19:42.383 00:05:09.289 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-15 09:24:26.791 00:00:00.000 UDP 28.104.0.1:48869 -> 198.28.0.2:53 1 64 1 2025-10-15 09:24:26.791 00:00:00.000 UDP 28.104.0.1:44954 -> 198.28.0.2:53 1 64 1 2025-10-15 09:24:26.800 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48869 1 109 1 2025-10-15 09:24:26.800 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44954 1 80 1 2025-10-15 09:19:51.492 00:05:50.941 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-15 09:19:51.670 00:06:00.085 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-15 09:25:27.112 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37234 1 80 1 2025-10-15 09:25:27.112 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45678 1 109 1 2025-10-15 09:25:27.101 00:00:00.000 UDP 28.104.0.1:37234 -> 198.28.0.2:53 1 64 1 2025-10-15 09:25:27.101 00:00:00.000 UDP 28.104.0.1:45678 -> 198.28.0.2:53 1 64 1 2025-10-15 09:20:51.680 00:05:50.694 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-15 09:26:27.397 00:00:00.000 UDP 28.104.0.1:33756 -> 198.28.0.2:53 1 64 1 2025-10-15 09:26:27.398 00:00:00.000 UDP 28.104.0.1:50786 -> 198.28.0.2:53 1 64 1 2025-10-15 09:26:27.408 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50786 1 80 1 2025-10-15 09:26:27.408 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33756 1 109 1 2025-10-15 09:22:42.373 00:05:09.129 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-15 09:27:27.697 00:00:00.000 UDP 28.104.0.1:46079 -> 198.28.0.2:53 1 64 1 2025-10-15 09:27:27.697 00:00:00.000 UDP 28.104.0.1:37041 -> 198.28.0.2:53 1 64 1 2025-10-15 09:27:27.707 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46079 1 80 1 2025-10-15 09:27:27.707 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37041 1 109 1 2025-10-15 09:27:53.319 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-15 09:28:28.052 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38514 1 80 1 2025-10-15 09:28:28.052 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53891 1 109 1 2025-10-15 09:28:28.041 00:00:00.000 UDP 28.104.0.1:53891 -> 198.28.0.2:53 1 64 1 2025-10-15 09:28:28.041 00:00:00.000 UDP 28.104.0.1:38514 -> 198.28.0.2:53 1 64 1 2025-10-15 09:24:36.138 00:05:10.010 OSPF 28.0.2.2:0 -> 224.0.0.5:0 39 2948 1 2025-10-15 09:23:51.506 00:06:00.167 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-15 09:29:28.347 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44042 1 109 1 2025-10-15 09:29:28.347 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34447 1 80 1 2025-10-15 09:29:28.338 00:00:00.000 UDP 28.104.0.1:44042 -> 198.28.0.2:53 1 64 1 2025-10-15 09:29:28.338 00:00:00.000 UDP 28.104.0.1:34447 -> 198.28.0.2:53 1 64 1 2025-10-15 09:25:42.383 00:05:09.292 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-15 09:30:28.634 00:00:00.000 UDP 28.104.0.1:36420 -> 198.28.0.2:53 1 64 1 2025-10-15 09:30:28.634 00:00:00.000 UDP 28.104.0.1:40768 -> 198.28.0.2:53 1 64 1 2025-10-15 09:30:28.644 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40768 1 80 1 2025-10-15 09:30:28.644 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36420 1 109 1 2025-10-15 09:25:51.493 00:05:50.932 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-15 09:31:28.894 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45272 1 109 1 2025-10-15 09:31:28.894 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49203 1 80 1 2025-10-15 09:31:28.884 00:00:00.000 UDP 28.104.0.1:49203 -> 198.28.0.2:53 1 64 1 2025-10-15 09:31:28.884 00:00:00.000 UDP 28.104.0.1:45272 -> 198.28.0.2:53 1 64 1 2025-10-15 09:26:51.682 00:05:50.692 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-15 09:26:51.672 00:06:00.084 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-15 09:32:29.199 00:00:00.000 UDP 28.104.0.1:60343 -> 198.28.0.2:53 1 64 1 2025-10-15 09:32:29.199 00:00:00.000 UDP 28.104.0.1:42225 -> 198.28.0.2:53 1 64 1 2025-10-15 09:32:29.210 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42225 1 80 1 2025-10-15 09:32:29.210 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60343 1 109 1 2025-10-15 09:32:53.409 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-15 09:28:42.374 00:05:09.129 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-15 09:33:30.128 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56780 1 109 1 2025-10-15 09:33:30.128 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59468 1 80 1 2025-10-15 09:33:30.117 00:00:00.000 UDP 28.104.0.1:59468 -> 198.28.0.2:53 1 64 1 2025-10-15 09:33:30.117 00:00:00.000 UDP 28.104.0.1:56780 -> 198.28.0.2:53 1 64 1 2025-10-15 09:29:56.147 00:05:10.002 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2560 1 2025-10-15 09:34:30.415 00:00:00.000 UDP 28.104.0.1:55610 -> 198.28.0.2:53 1 64 1 2025-10-15 09:34:30.415 00:00:00.000 UDP 28.104.0.1:37806 -> 198.28.0.2:53 1 64 1 2025-10-15 09:34:30.425 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37806 1 80 1 2025-10-15 09:34:30.425 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55610 1 109 1 2025-10-15 09:35:30.713 00:00:00.000 UDP 28.104.0.1:46044 -> 198.28.0.2:53 1 64 1 2025-10-15 09:35:30.713 00:00:00.000 UDP 28.104.0.1:52501 -> 198.28.0.2:53 1 64 1 2025-10-15 09:35:30.724 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46044 1 109 1 2025-10-15 09:35:30.724 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52501 1 80 1 2025-10-15 09:31:42.384 00:05:09.294 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-15 09:30:51.508 00:06:00.170 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-15 09:36:31.003 00:00:00.000 UDP 28.104.0.1:49556 -> 198.28.0.2:53 1 64 1 2025-10-15 09:36:31.003 00:00:00.000 UDP 28.104.0.1:59820 -> 198.28.0.2:53 1 64 1 2025-10-15 09:36:31.017 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49556 1 109 1 2025-10-15 09:36:31.014 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59820 1 80 1 2025-10-15 09:31:51.493 00:05:50.935 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-15 09:37:31.256 00:00:00.000 UDP 28.104.0.1:42271 -> 198.28.0.2:53 1 64 1 2025-10-15 09:37:31.256 00:00:00.000 UDP 28.104.0.1:47864 -> 198.28.0.2:53 1 64 1 2025-10-15 09:37:31.268 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42271 1 80 1 2025-10-15 09:37:31.268 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47864 1 109 1 2025-10-15 09:32:51.685 00:05:50.693 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-15 09:37:53.664 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-15 09:38:31.524 00:00:00.000 UDP 28.104.0.1:53917 -> 198.28.0.2:53 1 64 1 2025-10-15 09:38:31.524 00:00:00.000 UDP 28.104.0.1:36284 -> 198.28.0.2:53 1 64 1 2025-10-15 09:38:31.534 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36284 1 80 1 2025-10-15 09:38:31.534 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53917 1 109 1 2025-10-15 09:33:51.678 00:06:00.081 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-15 09:34:42.376 00:05:09.132 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-15 09:35:16.150 00:05:10.003 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2336 1 2025-10-15 09:39:31.780 00:00:00.000 UDP 28.104.0.1:41482 -> 198.28.0.2:53 1 64 1 2025-10-15 09:39:31.780 00:00:00.000 UDP 28.104.0.1:47185 -> 198.28.0.2:53 1 64 1 2025-10-15 09:39:31.791 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47185 1 109 1 2025-10-15 09:39:31.790 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41482 1 80 1 2025-10-15 09:40:32.095 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54975 1 109 1 2025-10-15 09:40:32.095 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39188 1 80 1 2025-10-15 09:40:32.084 00:00:00.000 UDP 28.104.0.1:39188 -> 198.28.0.2:53 1 64 1 2025-10-15 09:40:32.084 00:00:00.000 UDP 28.104.0.1:54975 -> 198.28.0.2:53 1 64 1 2025-10-15 09:41:32.384 00:00:00.000 UDP 28.104.0.1:53786 -> 198.28.0.2:53 1 64 1 2025-10-15 09:41:32.383 00:00:00.000 UDP 28.104.0.1:51040 -> 198.28.0.2:53 1 64 1 2025-10-15 09:41:32.396 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53786 1 109 1 2025-10-15 09:41:32.396 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51040 1 80 1 2025-10-15 09:37:42.388 00:05:09.291 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-15 09:42:32.647 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38806 1 109 1 2025-10-15 09:42:32.647 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51065 1 80 1 2025-10-15 09:42:32.636 00:00:00.000 UDP 28.104.0.1:38806 -> 198.28.0.2:53 1 64 1 2025-10-15 09:42:32.636 00:00:00.000 UDP 28.104.0.1:51065 -> 198.28.0.2:53 1 64 1 2025-10-15 09:37:51.502 00:05:50.927 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-15 09:37:51.512 00:06:00.168 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-15 09:42:53.647 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-15 09:43:32.941 00:00:00.000 UDP 28.104.0.1:39073 -> 198.28.0.2:53 1 64 1 2025-10-15 09:43:32.941 00:00:00.000 UDP 28.104.0.1:40600 -> 198.28.0.2:53 1 64 1 2025-10-15 09:43:32.951 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40600 1 109 1 2025-10-15 09:43:32.951 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39073 1 80 1 2025-10-15 09:38:51.689 00:05:50.690 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-15 09:44:33.255 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51849 1 80 1 2025-10-15 09:44:33.255 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50035 1 109 1 2025-10-15 09:44:33.244 00:00:00.000 UDP 28.104.0.1:51849 -> 198.28.0.2:53 1 64 1 2025-10-15 09:44:33.244 00:00:00.000 UDP 28.104.0.1:50035 -> 198.28.0.2:53 1 64 1 2025-10-15 09:40:36.153 00:05:10.024 OSPF 28.0.2.2:0 -> 224.0.0.5:0 40 2868 1 2025-10-15 09:40:42.378 00:05:09.133 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-15 09:45:33.543 00:00:00.000 UDP 28.104.0.1:37632 -> 198.28.0.2:53 1 64 1 2025-10-15 09:45:33.543 00:00:00.000 UDP 28.104.0.1:60815 -> 198.28.0.2:53 1 64 1 2025-10-15 09:45:33.553 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60815 1 109 1 2025-10-15 09:45:33.553 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37632 1 80 1 2025-10-15 09:40:51.679 00:06:00.081 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-15 09:46:33.846 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45674 1 109 1 2025-10-15 09:46:33.846 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41205 1 80 1 2025-10-15 09:46:33.835 00:00:00.000 UDP 28.104.0.1:41205 -> 198.28.0.2:53 1 64 1 2025-10-15 09:46:33.835 00:00:00.000 UDP 28.104.0.1:45674 -> 198.28.0.2:53 1 64 1 2025-10-15 09:47:34.137 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34722 1 80 1 2025-10-15 09:47:34.137 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34715 1 109 1 2025-10-15 09:47:34.127 00:00:00.000 UDP 28.104.0.1:34722 -> 198.28.0.2:53 1 64 1 2025-10-15 09:47:34.127 00:00:00.000 UDP 28.104.0.1:34715 -> 198.28.0.2:53 1 64 1 2025-10-15 09:47:53.793 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-15 09:43:42.389 00:05:09.291 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-15 09:48:34.503 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33411 1 109 1 2025-10-15 09:48:34.503 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51995 1 80 1 2025-10-15 09:48:34.493 00:00:00.000 UDP 28.104.0.1:33411 -> 198.28.0.2:53 1 64 1 2025-10-15 09:48:34.493 00:00:00.000 UDP 28.104.0.1:51995 -> 198.28.0.2:53 1 64 1 2025-10-15 09:43:51.502 00:05:50.930 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-15 09:49:34.792 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34337 1 109 1 2025-10-15 09:49:34.792 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40220 1 80 1 2025-10-15 09:49:34.783 00:00:00.000 UDP 28.104.0.1:34337 -> 198.28.0.2:53 1 64 1 2025-10-15 09:49:34.783 00:00:00.000 UDP 28.104.0.1:40220 -> 198.28.0.2:53 1 64 1 2025-10-15 09:44:51.690 00:05:50.691 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-15 09:44:51.511 00:06:00.171 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-15 09:45:56.178 00:05:10.009 OSPF 28.0.2.2:0 -> 224.0.0.5:0 32 2176 1 2025-10-15 09:50:35.110 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39726 1 80 1 2025-10-15 09:50:35.111 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35733 1 109 1 2025-10-15 09:50:35.100 00:00:00.000 UDP 28.104.0.1:39726 -> 198.28.0.2:53 1 64 1 2025-10-15 09:50:35.100 00:00:00.000 UDP 28.104.0.1:35733 -> 198.28.0.2:53 1 64 1 2025-10-15 09:46:42.380 00:05:09.133 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-15 09:51:35.413 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41328 1 109 1 2025-10-15 09:51:35.413 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46969 1 80 1 2025-10-15 09:51:35.402 00:00:00.000 UDP 28.104.0.1:41328 -> 198.28.0.2:53 1 64 1 2025-10-15 09:51:35.403 00:00:00.000 UDP 28.104.0.1:46969 -> 198.28.0.2:53 1 64 1 2025-10-15 09:52:35.695 00:00:00.000 UDP 28.104.0.1:57973 -> 198.28.0.2:53 1 64 1 2025-10-15 09:52:35.695 00:00:00.000 UDP 28.104.0.1:37089 -> 198.28.0.2:53 1 64 1 2025-10-15 09:52:35.705 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37089 1 80 1 2025-10-15 09:52:35.705 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57973 1 109 1 2025-10-15 09:47:51.680 00:06:00.081 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-15 09:52:53.898 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-15 09:53:35.987 00:00:00.000 UDP 28.104.0.1:48542 -> 198.28.0.2:53 1 64 1 2025-10-15 09:53:35.987 00:00:00.000 UDP 28.104.0.1:32847 -> 198.28.0.2:53 1 64 1 2025-10-15 09:53:35.998 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48542 1 109 1 2025-10-15 09:53:35.998 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32847 1 80 1 2025-10-15 09:49:42.392 00:05:09.291 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-15 09:54:36.241 00:00:00.000 UDP 28.104.0.1:50586 -> 198.28.0.2:53 1 64 1 2025-10-15 09:54:36.242 00:00:00.000 UDP 28.104.0.1:39796 -> 198.28.0.2:53 1 64 1 2025-10-15 09:54:36.253 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50586 1 80 1 2025-10-15 09:54:36.252 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39796 1 109 1 2025-10-15 09:49:51.503 00:05:50.930 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-15 09:51:16.185 00:05:10.007 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2700 1 2025-10-15 09:55:36.536 00:00:00.000 UDP 28.104.0.1:60478 -> 198.28.0.2:53 1 64 1 2025-10-15 09:55:36.536 00:00:00.000 UDP 28.104.0.1:36376 -> 198.28.0.2:53 1 64 1 2025-10-15 09:55:36.545 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36376 1 80 1 2025-10-15 09:55:36.545 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60478 1 109 1 2025-10-15 09:50:51.691 00:05:50.690 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-15 09:56:36.842 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60997 1 109 1 2025-10-15 09:56:36.842 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59017 1 80 1 2025-10-15 09:56:36.833 00:00:00.000 UDP 28.104.0.1:60997 -> 198.28.0.2:53 1 64 1 2025-10-15 09:56:36.834 00:00:00.000 UDP 28.104.0.1:59017 -> 198.28.0.2:53 1 64 1 2025-10-15 09:52:42.382 00:05:09.132 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-15 09:51:51.514 00:06:00.170 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-15 09:57:37.104 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53650 1 109 1 2025-10-15 09:57:37.104 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34288 1 80 1 2025-10-15 09:57:37.093 00:00:00.000 UDP 28.104.0.1:34288 -> 198.28.0.2:53 1 64 1 2025-10-15 09:57:37.093 00:00:00.000 UDP 28.104.0.1:53650 -> 198.28.0.2:53 1 64 1 2025-10-15 09:57:53.914 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-15 09:58:37.381 00:00:00.000 UDP 28.104.0.1:41431 -> 198.28.0.2:53 1 64 1 2025-10-15 09:58:37.381 00:00:00.000 UDP 28.104.0.1:46170 -> 198.28.0.2:53 1 64 1 2025-10-15 09:58:37.391 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46170 1 109 1 2025-10-15 09:58:37.391 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41431 1 80 1 Summary: total flows: 320, total bytes: 94829, total packets: 1394, avg bps: 200, avg pps: 0, avg bpp: 68 Time window: 2025-10-15 08:55:42 - 2025-10-15 09:58:37 Total flows processed: 320, passed: 320, Blocks skipped: 0, Bytes read: 33344 Sys: 0.0059s User: 0.0010s Wall: 0.0034s flows/second: 93950.5 Runtime: 0.0034s