Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-17 01:59:22.374 00:00:00.000 UDP 28.104.0.1:46628 -> 198.28.0.2:53 1 64 1 2025-10-17 01:59:22.374 00:00:00.000 UDP 28.104.0.1:33299 -> 198.28.0.2:53 1 64 1 2025-10-17 01:59:22.386 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33299 1 109 1 2025-10-17 01:59:22.386 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46628 1 80 1 2025-10-17 01:54:52.390 00:05:50.918 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-17 01:54:52.485 00:05:50.782 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-17 02:00:22.685 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55830 1 109 1 2025-10-17 02:00:22.685 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39459 1 80 1 2025-10-17 02:00:22.673 00:00:00.000 UDP 28.104.0.1:39459 -> 198.28.0.2:53 1 64 1 2025-10-17 02:00:22.673 00:00:00.000 UDP 28.104.0.1:55830 -> 198.28.0.2:53 1 64 1 2025-10-17 01:56:43.258 00:05:09.240 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-17 02:01:22.966 00:00:00.000 UDP 28.104.0.1:46273 -> 198.28.0.2:53 1 64 1 2025-10-17 02:01:22.966 00:00:00.000 UDP 28.104.0.1:34643 -> 198.28.0.2:53 1 64 1 2025-10-17 02:01:22.977 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34643 1 109 1 2025-10-17 02:01:22.977 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46273 1 80 1 2025-10-17 01:56:52.487 00:06:00.063 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-17 02:02:23.704 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42758 1 80 1 2025-10-17 02:02:23.704 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54067 1 109 1 2025-10-17 02:02:23.695 00:00:00.000 UDP 28.104.0.1:54067 -> 198.28.0.2:53 1 64 1 2025-10-17 02:02:23.695 00:00:00.000 UDP 28.104.0.1:42758 -> 198.28.0.2:53 1 64 1 2025-10-17 01:57:52.401 00:05:50.857 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-17 02:03:23.991 00:00:00.000 UDP 28.104.0.1:36767 -> 198.28.0.2:53 1 64 1 2025-10-17 02:03:23.991 00:00:00.000 UDP 28.104.0.1:38816 -> 198.28.0.2:53 1 64 1 2025-10-17 02:03:24.002 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36767 1 109 1 2025-10-17 02:03:24.002 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38816 1 80 1 2025-10-17 02:03:42.198 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-17 01:58:52.294 00:06:00.194 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-17 01:59:49.692 00:05:10.002 OSPF 28.0.2.2:0 -> 224.0.0.5:0 38 2760 1 2025-10-17 02:04:24.294 00:00:00.000 UDP 28.104.0.1:54206 -> 198.28.0.2:53 1 64 1 2025-10-17 02:04:24.294 00:00:00.000 UDP 28.104.0.1:54773 -> 198.28.0.2:53 1 64 1 2025-10-17 02:04:24.303 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54773 1 80 1 2025-10-17 02:04:24.303 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54206 1 109 1 2025-10-17 02:05:24.753 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58199 1 80 1 2025-10-17 02:05:24.752 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35499 1 109 1 2025-10-17 02:05:24.742 00:00:00.000 UDP 28.104.0.1:58199 -> 198.28.0.2:53 1 64 1 2025-10-17 02:05:24.742 00:00:00.000 UDP 28.104.0.1:35499 -> 198.28.0.2:53 1 64 1 2025-10-17 02:00:52.488 00:05:50.781 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-17 02:00:52.391 00:05:50.918 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-17 02:06:25.059 00:00:00.000 UDP 28.104.0.1:39059 -> 198.28.0.2:53 1 64 1 2025-10-17 02:06:25.059 00:00:00.000 UDP 28.104.0.1:34022 -> 198.28.0.2:53 1 64 1 2025-10-17 02:06:25.069 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34022 1 80 1 2025-10-17 02:06:25.069 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39059 1 109 1 2025-10-17 02:02:43.260 00:05:09.241 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-17 02:07:25.341 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56440 1 109 1 2025-10-17 02:07:25.341 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55152 1 80 1 2025-10-17 02:07:25.331 00:00:00.000 UDP 28.104.0.1:55152 -> 198.28.0.2:53 1 64 1 2025-10-17 02:07:25.331 00:00:00.000 UDP 28.104.0.1:56440 -> 198.28.0.2:53 1 64 1 2025-10-17 02:08:25.683 00:00:00.000 UDP 28.104.0.1:35248 -> 198.28.0.2:53 1 64 1 2025-10-17 02:08:25.683 00:00:00.000 UDP 28.104.0.1:48671 -> 198.28.0.2:53 1 64 1 2025-10-17 02:08:25.694 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35248 1 80 1 2025-10-17 02:08:25.693 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48671 1 109 1 2025-10-17 02:08:42.395 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-17 02:03:52.402 00:05:50.860 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-17 02:03:52.487 00:06:00.063 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-17 02:05:09.693 00:05:10.003 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2496 1 2025-10-17 02:09:25.979 00:00:00.000 UDP 28.104.0.1:53091 -> 198.28.0.2:53 1 64 1 2025-10-17 02:09:25.979 00:00:00.000 UDP 28.104.0.1:35175 -> 198.28.0.2:53 1 64 1 2025-10-17 02:09:25.989 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53091 1 80 1 2025-10-17 02:09:25.989 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35175 1 109 1 2025-10-17 02:10:26.290 00:00:00.000 UDP 28.104.0.1:44626 -> 198.28.0.2:53 1 64 1 2025-10-17 02:10:26.290 00:00:00.000 UDP 28.104.0.1:35024 -> 198.28.0.2:53 1 64 1 2025-10-17 02:10:26.300 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35024 1 109 1 2025-10-17 02:10:26.300 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44626 1 80 1 2025-10-17 02:05:52.295 00:06:00.195 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-17 02:11:26.614 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43981 1 80 1 2025-10-17 02:11:26.611 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46874 1 109 1 2025-10-17 02:11:26.600 00:00:00.000 UDP 28.104.0.1:46874 -> 198.28.0.2:53 1 64 1 2025-10-17 02:11:26.600 00:00:00.000 UDP 28.104.0.1:43981 -> 198.28.0.2:53 1 64 1 2025-10-17 02:06:52.489 00:05:50.782 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-17 02:06:52.393 00:05:50.919 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-17 02:12:26.873 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50092 1 80 1 2025-10-17 02:12:26.873 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55773 1 109 1 2025-10-17 02:12:26.863 00:00:00.000 UDP 28.104.0.1:50092 -> 198.28.0.2:53 1 64 1 2025-10-17 02:12:26.863 00:00:00.000 UDP 28.104.0.1:55773 -> 198.28.0.2:53 1 64 1 2025-10-17 02:08:43.260 00:05:09.240 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-17 02:13:27.184 00:00:00.000 UDP 28.104.0.1:56706 -> 198.28.0.2:53 1 64 1 2025-10-17 02:13:27.184 00:00:00.000 UDP 28.104.0.1:60659 -> 198.28.0.2:53 1 64 1 2025-10-17 02:13:27.195 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56706 1 109 1 2025-10-17 02:13:27.195 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60659 1 80 1 2025-10-17 02:13:42.340 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-17 02:14:27.486 00:00:00.000 UDP 28.104.0.1:53618 -> 198.28.0.2:53 1 64 1 2025-10-17 02:14:27.486 00:00:00.000 UDP 28.104.0.1:55304 -> 198.28.0.2:53 1 64 1 2025-10-17 02:14:27.497 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53618 1 80 1 2025-10-17 02:14:27.497 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55304 1 109 1 2025-10-17 02:10:29.695 00:05:10.010 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2612 1 2025-10-17 02:09:52.404 00:05:50.858 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-17 02:15:27.780 00:00:00.000 UDP 28.104.0.1:33016 -> 198.28.0.2:53 1 64 1 2025-10-17 02:15:27.780 00:00:00.000 UDP 28.104.0.1:48371 -> 198.28.0.2:53 1 64 1 2025-10-17 02:15:27.790 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33016 1 80 1 2025-10-17 02:15:27.791 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48371 1 109 1 2025-10-17 02:10:52.489 00:06:00.066 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-17 02:16:28.086 00:00:00.000 UDP 28.104.0.1:49584 -> 198.28.0.2:53 1 64 1 2025-10-17 02:16:28.086 00:00:00.000 UDP 28.104.0.1:57359 -> 198.28.0.2:53 1 64 1 2025-10-17 02:16:28.096 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49584 1 109 1 2025-10-17 02:16:28.096 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57359 1 80 1 2025-10-17 02:17:28.386 00:00:00.000 UDP 28.104.0.1:51288 -> 198.28.0.2:53 1 64 1 2025-10-17 02:17:28.387 00:00:00.000 UDP 28.104.0.1:51138 -> 198.28.0.2:53 1 64 1 2025-10-17 02:17:28.398 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51288 1 109 1 2025-10-17 02:17:28.398 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51138 1 80 1 2025-10-17 02:12:52.490 00:05:50.782 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-17 02:12:52.395 00:05:50.917 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-17 02:12:52.297 00:06:00.195 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-17 02:18:28.705 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55207 1 80 1 2025-10-17 02:18:28.705 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54534 1 109 1 2025-10-17 02:18:28.694 00:00:00.000 UDP 28.104.0.1:54534 -> 198.28.0.2:53 1 64 1 2025-10-17 02:18:28.694 00:00:00.000 UDP 28.104.0.1:55207 -> 198.28.0.2:53 1 64 1 2025-10-17 02:18:42.619 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-17 02:14:43.263 00:05:09.241 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-17 02:19:29.001 00:00:00.000 UDP 28.104.0.1:41012 -> 198.28.0.2:53 1 64 1 2025-10-17 02:19:29.001 00:00:00.000 UDP 28.104.0.1:59084 -> 198.28.0.2:53 1 64 1 2025-10-17 02:19:29.013 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59084 1 80 1 2025-10-17 02:19:29.018 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41012 1 109 1 2025-10-17 02:15:49.706 00:05:10.003 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2596 1 2025-10-17 02:20:29.350 00:00:00.000 UDP 28.104.0.1:57886 -> 198.28.0.2:53 1 64 1 2025-10-17 02:20:29.350 00:00:00.000 UDP 28.104.0.1:37848 -> 198.28.0.2:53 1 64 1 2025-10-17 02:20:29.361 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37848 1 80 1 2025-10-17 02:20:29.360 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57886 1 109 1 2025-10-17 02:15:52.407 00:05:50.857 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-17 02:21:29.676 00:00:00.000 UDP 28.104.0.1:38958 -> 198.28.0.2:53 1 64 1 2025-10-17 02:21:29.676 00:00:00.000 UDP 28.104.0.1:56848 -> 198.28.0.2:53 1 64 1 2025-10-17 02:21:29.686 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56848 1 80 1 2025-10-17 02:21:29.686 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38958 1 109 1 2025-10-17 02:22:29.980 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60391 1 80 1 2025-10-17 02:22:29.980 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46194 1 109 1 2025-10-17 02:22:29.969 00:00:00.000 UDP 28.104.0.1:46194 -> 198.28.0.2:53 1 64 1 2025-10-17 02:22:29.969 00:00:00.000 UDP 28.104.0.1:60391 -> 198.28.0.2:53 1 64 1 2025-10-17 02:17:52.492 00:06:00.068 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-17 02:23:30.278 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33720 1 109 1 2025-10-17 02:23:30.278 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46303 1 80 1 2025-10-17 02:23:30.269 00:00:00.000 UDP 28.104.0.1:33720 -> 198.28.0.2:53 1 64 1 2025-10-17 02:23:30.269 00:00:00.000 UDP 28.104.0.1:46303 -> 198.28.0.2:53 1 64 1 2025-10-17 02:23:43.369 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-17 02:18:52.493 00:05:50.784 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-17 02:18:52.398 00:05:50.919 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-17 02:24:30.520 00:00:00.000 UDP 28.104.0.1:35311 -> 198.28.0.2:53 1 64 1 2025-10-17 02:24:30.520 00:00:00.000 UDP 28.104.0.1:52171 -> 198.28.0.2:53 1 64 1 2025-10-17 02:24:30.532 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52171 1 80 1 2025-10-17 02:24:30.531 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35311 1 109 1 2025-10-17 02:19:52.298 00:06:00.197 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-17 02:20:43.265 00:05:09.241 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-17 02:21:09.709 00:05:10.010 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2384 1 2025-10-17 02:25:30.830 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43255 1 80 1 2025-10-17 02:25:30.830 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33145 1 109 1 2025-10-17 02:25:30.819 00:00:00.000 UDP 28.104.0.1:43255 -> 198.28.0.2:53 1 64 1 2025-10-17 02:25:30.819 00:00:00.000 UDP 28.104.0.1:33145 -> 198.28.0.2:53 1 64 1 2025-10-17 02:26:31.258 00:00:00.000 UDP 28.104.0.1:33994 -> 198.28.0.2:53 1 64 1 2025-10-17 02:26:31.258 00:00:00.000 UDP 28.104.0.1:39202 -> 198.28.0.2:53 1 64 1 2025-10-17 02:26:31.268 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33994 1 109 1 2025-10-17 02:26:31.268 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39202 1 80 1 2025-10-17 02:21:52.418 00:05:50.850 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-17 02:27:31.553 00:00:00.000 UDP 28.104.0.1:59995 -> 198.28.0.2:53 1 64 1 2025-10-17 02:27:31.553 00:00:00.000 UDP 28.104.0.1:37508 -> 198.28.0.2:53 1 64 1 2025-10-17 02:27:31.564 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59995 1 80 1 2025-10-17 02:27:31.564 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37508 1 109 1 2025-10-17 02:28:31.847 00:00:00.000 UDP 28.104.0.1:47165 -> 198.28.0.2:53 1 64 1 2025-10-17 02:28:31.847 00:00:00.000 UDP 28.104.0.1:38753 -> 198.28.0.2:53 1 64 1 2025-10-17 02:28:31.859 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38753 1 109 1 2025-10-17 02:28:31.859 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47165 1 80 1 2025-10-17 02:28:42.713 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-17 02:29:32.152 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54281 1 80 1 2025-10-17 02:29:32.152 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58460 1 109 1 2025-10-17 02:29:32.143 00:00:00.000 UDP 28.104.0.1:54281 -> 198.28.0.2:53 1 64 1 2025-10-17 02:29:32.143 00:00:00.000 UDP 28.104.0.1:58460 -> 198.28.0.2:53 1 64 1 2025-10-17 02:24:52.495 00:05:50.783 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-17 02:24:52.398 00:05:50.920 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-17 02:24:52.495 00:06:00.077 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-17 02:30:32.444 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38139 1 80 1 2025-10-17 02:30:32.444 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37640 1 109 1 2025-10-17 02:30:32.433 00:00:00.000 UDP 28.104.0.1:37640 -> 198.28.0.2:53 1 64 1 2025-10-17 02:30:32.433 00:00:00.000 UDP 28.104.0.1:38139 -> 198.28.0.2:53 1 64 1 2025-10-17 02:26:29.719 00:05:10.010 OSPF 28.0.2.2:0 -> 224.0.0.5:0 38 2720 1 2025-10-17 02:26:43.267 00:05:09.239 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-17 02:31:32.752 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59020 1 109 1 2025-10-17 02:31:32.752 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44312 1 80 1 2025-10-17 02:31:32.741 00:00:00.000 UDP 28.104.0.1:59020 -> 198.28.0.2:53 1 64 1 2025-10-17 02:31:32.741 00:00:00.000 UDP 28.104.0.1:44312 -> 198.28.0.2:53 1 64 1 2025-10-17 02:26:52.305 00:06:00.192 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-17 02:32:33.063 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42684 1 80 1 2025-10-17 02:32:33.063 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58035 1 109 1 2025-10-17 02:32:33.053 00:00:00.000 UDP 28.104.0.1:58035 -> 198.28.0.2:53 1 64 1 2025-10-17 02:32:33.053 00:00:00.000 UDP 28.104.0.1:42684 -> 198.28.0.2:53 1 64 1 2025-10-17 02:27:52.409 00:05:50.859 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-17 02:33:33.364 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60868 1 109 1 2025-10-17 02:33:33.364 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59296 1 80 1 2025-10-17 02:33:33.354 00:00:00.000 UDP 28.104.0.1:59296 -> 198.28.0.2:53 1 64 1 2025-10-17 02:33:33.353 00:00:00.000 UDP 28.104.0.1:60868 -> 198.28.0.2:53 1 64 1 2025-10-17 02:33:42.931 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-17 02:34:33.645 00:00:00.000 UDP 28.104.0.1:33773 -> 198.28.0.2:53 1 64 1 2025-10-17 02:34:33.645 00:00:00.000 UDP 28.104.0.1:53572 -> 198.28.0.2:53 1 64 1 2025-10-17 02:34:33.656 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53572 1 109 1 2025-10-17 02:34:33.656 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33773 1 80 1 2025-10-17 02:35:33.951 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53152 1 109 1 2025-10-17 02:35:33.951 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56384 1 80 1 2025-10-17 02:35:33.941 00:00:00.000 UDP 28.104.0.1:56384 -> 198.28.0.2:53 1 64 1 2025-10-17 02:35:33.941 00:00:00.000 UDP 28.104.0.1:53152 -> 198.28.0.2:53 1 64 1 2025-10-17 02:30:52.497 00:05:50.782 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-17 02:30:52.401 00:05:50.918 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-17 02:31:49.729 00:05:10.007 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2592 1 2025-10-17 02:36:34.257 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38291 1 109 1 2025-10-17 02:36:34.257 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39606 1 80 1 2025-10-17 02:36:34.247 00:00:00.000 UDP 28.104.0.1:39606 -> 198.28.0.2:53 1 64 1 2025-10-17 02:36:34.247 00:00:00.000 UDP 28.104.0.1:38291 -> 198.28.0.2:53 1 64 1 2025-10-17 02:32:43.268 00:05:09.239 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-17 02:31:52.497 00:06:00.076 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-17 02:37:34.543 00:00:00.000 UDP 28.104.0.1:56275 -> 198.28.0.2:53 1 64 1 2025-10-17 02:37:34.542 00:00:00.000 UDP 28.104.0.1:50315 -> 198.28.0.2:53 1 64 1 2025-10-17 02:37:34.554 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50315 1 109 1 2025-10-17 02:37:34.554 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56275 1 80 1 2025-10-17 02:38:34.845 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40856 1 109 1 2025-10-17 02:38:34.845 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45060 1 80 1 2025-10-17 02:38:34.835 00:00:00.000 UDP 28.104.0.1:45060 -> 198.28.0.2:53 1 64 1 2025-10-17 02:38:34.835 00:00:00.000 UDP 28.104.0.1:40856 -> 198.28.0.2:53 1 64 1 2025-10-17 02:38:43.292 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-17 02:33:52.412 00:05:50.858 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-17 02:33:52.306 00:06:00.192 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-17 02:39:35.149 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57278 1 80 1 2025-10-17 02:39:35.149 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56855 1 109 1 2025-10-17 02:39:35.139 00:00:00.000 UDP 28.104.0.1:57278 -> 198.28.0.2:53 1 64 1 2025-10-17 02:39:35.139 00:00:00.000 UDP 28.104.0.1:56855 -> 198.28.0.2:53 1 64 1 2025-10-17 02:40:35.400 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45396 1 109 1 2025-10-17 02:40:35.400 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40987 1 80 1 2025-10-17 02:40:35.390 00:00:00.000 UDP 28.104.0.1:45396 -> 198.28.0.2:53 1 64 1 2025-10-17 02:40:35.390 00:00:00.000 UDP 28.104.0.1:40987 -> 198.28.0.2:53 1 64 1 2025-10-17 02:37:09.735 00:05:10.011 OSPF 28.0.2.2:0 -> 224.0.0.5:0 38 2692 1 2025-10-17 02:41:35.646 00:00:00.000 UDP 28.104.0.1:42865 -> 198.28.0.2:53 1 64 1 2025-10-17 02:41:35.646 00:00:00.000 UDP 28.104.0.1:40547 -> 198.28.0.2:53 1 64 1 2025-10-17 02:41:35.656 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40547 1 109 1 2025-10-17 02:41:35.656 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42865 1 80 1 2025-10-17 02:36:52.498 00:05:50.783 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-17 02:36:52.403 00:05:50.918 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-17 02:42:35.963 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39873 1 80 1 2025-10-17 02:42:35.963 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50506 1 109 1 2025-10-17 02:42:35.952 00:00:00.000 UDP 28.104.0.1:39873 -> 198.28.0.2:53 1 64 1 2025-10-17 02:42:35.952 00:00:00.000 UDP 28.104.0.1:50506 -> 198.28.0.2:53 1 64 1 2025-10-17 02:38:43.271 00:05:09.238 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-17 02:43:36.253 00:00:00.000 UDP 28.104.0.1:52966 -> 198.28.0.2:53 1 64 1 2025-10-17 02:43:36.253 00:00:00.000 UDP 28.104.0.1:50536 -> 198.28.0.2:53 1 64 1 2025-10-17 02:43:36.263 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52966 1 80 1 2025-10-17 02:43:36.263 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50536 1 109 1 2025-10-17 02:43:42.860 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-17 02:38:52.498 00:06:00.076 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-17 02:44:36.558 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53231 1 109 1 2025-10-17 02:44:36.558 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52737 1 80 1 2025-10-17 02:44:36.547 00:00:00.000 UDP 28.104.0.1:52737 -> 198.28.0.2:53 1 64 1 2025-10-17 02:44:36.547 00:00:00.000 UDP 28.104.0.1:53231 -> 198.28.0.2:53 1 64 1 2025-10-17 02:39:52.412 00:05:50.859 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-17 02:45:49.658 00:00:00.000 UDP 28.104.0.1:54532 -> 198.28.0.2:53 1 64 1 2025-10-17 02:40:52.307 00:06:00.192 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-17 02:45:49.657 00:00:00.000 UDP 28.104.0.1:53738 -> 198.28.0.2:53 1 64 1 2025-10-17 02:45:49.669 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53738 1 109 1 2025-10-17 02:45:49.670 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54532 1 80 1 2025-10-17 02:42:29.745 00:05:10.007 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2320 1 2025-10-17 02:46:49.952 00:00:00.000 UDP 28.104.0.1:49465 -> 198.28.0.2:53 1 64 1 2025-10-17 02:46:49.952 00:00:00.000 UDP 28.104.0.1:42626 -> 198.28.0.2:53 1 64 1 2025-10-17 02:46:49.963 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42626 1 80 1 2025-10-17 02:46:49.963 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49465 1 109 1 2025-10-17 02:42:52.499 00:05:50.783 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-17 02:42:52.404 00:05:50.918 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-17 02:47:50.261 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46263 1 109 1 2025-10-17 02:47:50.261 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39696 1 80 1 2025-10-17 02:47:50.251 00:00:00.000 UDP 28.104.0.1:46263 -> 198.28.0.2:53 1 64 1 2025-10-17 02:47:50.250 00:00:00.000 UDP 28.104.0.1:39696 -> 198.28.0.2:53 1 64 1 2025-10-17 02:48:43.241 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-17 02:48:50.696 00:00:00.000 UDP 28.104.0.1:51400 -> 198.28.0.2:53 1 64 1 2025-10-17 02:48:50.696 00:00:00.000 UDP 28.104.0.1:57109 -> 198.28.0.2:53 1 64 1 2025-10-17 02:48:50.707 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57109 1 109 1 2025-10-17 02:44:43.271 00:05:09.240 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-17 02:48:50.707 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51400 1 80 1 2025-10-17 02:49:51.003 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38948 1 80 1 2025-10-17 02:49:51.002 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54079 1 109 1 2025-10-17 02:49:50.992 00:00:00.000 UDP 28.104.0.1:54079 -> 198.28.0.2:53 1 64 1 2025-10-17 02:49:50.992 00:00:00.000 UDP 28.104.0.1:38948 -> 198.28.0.2:53 1 64 1 2025-10-17 02:45:52.501 00:06:00.074 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-17 02:50:51.293 00:00:00.000 UDP 28.104.0.1:37687 -> 198.28.0.2:53 1 64 1 2025-10-17 02:50:51.293 00:00:00.000 UDP 28.104.0.1:47804 -> 198.28.0.2:53 1 64 1 2025-10-17 02:45:52.414 00:05:50.858 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-17 02:50:51.303 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47804 1 80 1 2025-10-17 02:50:51.303 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37687 1 109 1 2025-10-17 02:51:52.068 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57638 1 109 1 2025-10-17 02:51:52.068 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33839 1 80 1 2025-10-17 02:51:52.058 00:00:00.000 UDP 28.104.0.1:57638 -> 198.28.0.2:53 1 64 1 2025-10-17 02:51:52.058 00:00:00.000 UDP 28.104.0.1:33839 -> 198.28.0.2:53 1 64 1 2025-10-17 02:47:49.753 00:05:10.008 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2700 1 2025-10-17 02:52:52.368 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40858 1 80 1 2025-10-17 02:52:52.368 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56828 1 109 1 2025-10-17 02:52:52.359 00:00:00.000 UDP 28.104.0.1:40858 -> 198.28.0.2:53 1 64 1 2025-10-17 02:52:52.359 00:00:00.000 UDP 28.104.0.1:56828 -> 198.28.0.2:53 1 64 1 2025-10-17 02:47:52.310 00:06:00.199 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-17 02:53:43.182 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-17 02:48:52.500 00:05:50.782 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-17 02:48:52.405 00:05:50.917 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-17 02:53:52.665 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39875 1 109 1 2025-10-17 02:53:52.665 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54558 1 80 1 2025-10-17 02:53:52.654 00:00:00.000 UDP 28.104.0.1:54558 -> 198.28.0.2:53 1 64 1 2025-10-17 02:53:52.653 00:00:00.000 UDP 28.104.0.1:39875 -> 198.28.0.2:53 1 64 1 2025-10-17 02:50:43.272 00:05:09.247 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-17 02:54:52.971 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44424 1 109 1 2025-10-17 02:54:52.970 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36178 1 80 1 2025-10-17 02:54:52.960 00:00:00.000 UDP 28.104.0.1:36178 -> 198.28.0.2:53 1 64 1 2025-10-17 02:54:52.961 00:00:00.000 UDP 28.104.0.1:44424 -> 198.28.0.2:53 1 64 1 2025-10-17 02:55:53.263 00:00:00.000 UDP 28.104.0.1:50012 -> 198.28.0.2:53 1 64 1 2025-10-17 02:55:53.263 00:00:00.000 UDP 28.104.0.1:40764 -> 198.28.0.2:53 1 64 1 2025-10-17 02:55:53.272 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40764 1 109 1 2025-10-17 02:55:53.273 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50012 1 80 1 2025-10-17 02:51:52.415 00:05:50.858 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-17 02:56:53.571 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49162 1 109 1 2025-10-17 02:56:53.572 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41069 1 80 1 2025-10-17 02:56:53.561 00:00:00.000 UDP 28.104.0.1:41069 -> 198.28.0.2:53 1 64 1 2025-10-17 02:56:53.561 00:00:00.000 UDP 28.104.0.1:49162 -> 198.28.0.2:53 1 64 1 2025-10-17 02:53:09.761 00:05:10.008 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2584 1 2025-10-17 02:52:52.507 00:06:00.068 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-17 02:57:54.223 00:00:00.000 UDP 28.104.0.1:58546 -> 198.28.0.2:53 1 64 1 2025-10-17 02:57:54.223 00:00:00.000 UDP 28.104.0.1:53286 -> 198.28.0.2:53 1 64 1 2025-10-17 02:57:54.232 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53286 1 109 1 2025-10-17 02:57:54.234 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58546 1 80 1 2025-10-17 02:58:43.527 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 Summary: total flows: 316, total bytes: 94340, total packets: 1390, avg bps: 196, avg pps: 0, avg bpp: 67 Time window: 2025-10-17 01:54:52 - 2025-10-17 02:58:52 Total flows processed: 316, passed: 316, Blocks skipped: 0, Bytes read: 32928 Sys: 0.0038s User: 0.0015s Wall: 0.0031s flows/second: 102561.3 Runtime: 0.0031s