Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-17 16:59:00.214 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-17 16:54:52.741 00:05:50.910 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-17 16:54:52.661 00:05:51.029 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-17 16:59:53.794 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38564 1 109 1 2025-10-17 16:59:53.794 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60658 1 80 1 2025-10-17 16:54:52.590 00:06:00.153 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-17 16:59:53.784 00:00:00.000 UDP 28.104.0.1:60658 -> 198.28.0.2:53 1 64 1 2025-10-17 16:59:53.784 00:00:00.000 UDP 28.104.0.1:38564 -> 198.28.0.2:53 1 64 1 2025-10-17 16:56:43.639 00:05:09.115 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-17 17:00:54.092 00:00:00.000 UDP 28.104.0.1:45517 -> 198.28.0.2:53 1 64 1 2025-10-17 17:00:54.092 00:00:00.000 UDP 28.104.0.1:37108 -> 198.28.0.2:53 1 64 1 2025-10-17 17:00:54.105 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37108 1 109 1 2025-10-17 17:00:54.105 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45517 1 80 1 2025-10-17 17:01:54.357 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54915 1 80 1 2025-10-17 17:01:54.356 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42972 1 109 1 2025-10-17 17:01:54.347 00:00:00.000 UDP 28.104.0.1:54915 -> 198.28.0.2:53 1 64 1 2025-10-17 17:01:54.347 00:00:00.000 UDP 28.104.0.1:42972 -> 198.28.0.2:53 1 64 1 2025-10-17 16:57:52.671 00:05:50.969 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-17 17:02:54.701 00:00:00.000 UDP 28.104.0.1:40488 -> 198.28.0.2:53 1 64 1 2025-10-17 17:02:54.701 00:00:00.000 UDP 28.104.0.1:59375 -> 198.28.0.2:53 1 64 1 2025-10-17 17:02:54.712 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59375 1 109 1 2025-10-17 17:02:54.712 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40488 1 80 1 2025-10-17 17:03:54.973 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53912 1 109 1 2025-10-17 17:03:54.974 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47870 1 80 1 2025-10-17 17:03:54.962 00:00:00.000 UDP 28.104.0.1:47870 -> 198.28.0.2:53 1 64 1 2025-10-17 17:03:54.962 00:00:00.000 UDP 28.104.0.1:53912 -> 198.28.0.2:53 1 64 1 2025-10-17 17:04:00.319 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-17 17:00:00.803 00:05:10.008 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2496 1 2025-10-17 16:59:52.742 00:06:00.123 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-17 17:04:55.259 00:00:00.000 UDP 28.104.0.1:48093 -> 198.28.0.2:53 1 64 1 2025-10-17 17:04:55.259 00:00:00.000 UDP 28.104.0.1:60714 -> 198.28.0.2:53 1 64 1 2025-10-17 17:04:55.269 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48093 1 80 1 2025-10-17 17:04:55.269 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60714 1 109 1 2025-10-17 17:00:52.742 00:05:50.909 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-17 17:00:52.661 00:05:51.030 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-17 17:05:55.555 00:00:00.000 UDP 28.104.0.1:56635 -> 198.28.0.2:53 1 64 1 2025-10-17 17:05:55.555 00:00:00.000 UDP 28.104.0.1:55303 -> 198.28.0.2:53 1 64 1 2025-10-17 17:05:55.566 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55303 1 80 1 2025-10-17 17:05:55.566 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56635 1 109 1 2025-10-17 17:02:43.640 00:05:09.115 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-17 17:06:55.865 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49125 1 109 1 2025-10-17 17:06:55.865 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34303 1 80 1 2025-10-17 17:01:52.590 00:06:00.156 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-17 17:06:55.855 00:00:00.000 UDP 28.104.0.1:49125 -> 198.28.0.2:53 1 64 1 2025-10-17 17:06:55.855 00:00:00.000 UDP 28.104.0.1:34303 -> 198.28.0.2:53 1 64 1 2025-10-17 17:07:56.196 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36343 1 80 1 2025-10-17 17:07:56.197 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56364 1 109 1 2025-10-17 17:07:56.188 00:00:00.000 UDP 28.104.0.1:56364 -> 198.28.0.2:53 1 64 1 2025-10-17 17:07:56.187 00:00:00.000 UDP 28.104.0.1:36343 -> 198.28.0.2:53 1 64 1 2025-10-17 17:03:52.674 00:05:50.971 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-17 17:08:56.488 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39118 1 109 1 2025-10-17 17:08:56.489 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38631 1 80 1 2025-10-17 17:08:56.479 00:00:00.000 UDP 28.104.0.1:38631 -> 198.28.0.2:53 1 64 1 2025-10-17 17:08:56.479 00:00:00.000 UDP 28.104.0.1:39118 -> 198.28.0.2:53 1 64 1 2025-10-17 17:09:00.552 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-17 17:05:20.811 00:05:10.009 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2620 1 2025-10-17 17:09:56.787 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41053 1 80 1 2025-10-17 17:09:56.787 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34907 1 109 1 2025-10-17 17:09:56.777 00:00:00.000 UDP 28.104.0.1:34907 -> 198.28.0.2:53 1 64 1 2025-10-17 17:09:56.777 00:00:00.000 UDP 28.104.0.1:41053 -> 198.28.0.2:53 1 64 1 2025-10-17 17:10:57.061 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40707 1 109 1 2025-10-17 17:10:57.061 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44113 1 80 1 2025-10-17 17:10:57.051 00:00:00.000 UDP 28.104.0.1:44113 -> 198.28.0.2:53 1 64 1 2025-10-17 17:10:57.051 00:00:00.000 UDP 28.104.0.1:40707 -> 198.28.0.2:53 1 64 1 2025-10-17 17:06:52.746 00:05:50.909 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-17 17:06:52.665 00:05:51.032 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-17 17:06:52.746 00:06:00.121 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-17 17:11:57.343 00:00:00.000 UDP 28.104.0.1:48717 -> 198.28.0.2:53 1 64 1 2025-10-17 17:11:57.343 00:00:00.000 UDP 28.104.0.1:46479 -> 198.28.0.2:53 1 64 1 2025-10-17 17:11:57.354 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46479 1 80 1 2025-10-17 17:11:57.354 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48717 1 109 1 2025-10-17 17:08:43.645 00:05:09.112 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-17 17:12:57.632 00:00:00.000 UDP 28.104.0.1:57784 -> 198.28.0.2:53 1 64 1 2025-10-17 17:12:57.632 00:00:00.000 UDP 28.104.0.1:54676 -> 198.28.0.2:53 1 64 1 2025-10-17 17:12:57.641 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54676 1 109 1 2025-10-17 17:12:57.641 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57784 1 80 1 2025-10-17 17:08:52.592 00:06:00.155 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-17 17:13:57.900 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54502 1 109 1 2025-10-17 17:13:57.900 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54407 1 80 1 2025-10-17 17:13:57.889 00:00:00.000 UDP 28.104.0.1:54407 -> 198.28.0.2:53 1 64 1 2025-10-17 17:13:57.888 00:00:00.000 UDP 28.104.0.1:54502 -> 198.28.0.2:53 1 64 1 2025-10-17 17:14:00.626 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-17 17:09:52.676 00:05:50.973 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-17 17:10:40.820 00:05:10.007 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2536 1 2025-10-17 17:14:58.199 00:00:00.000 UDP 28.104.0.1:39436 -> 198.28.0.2:53 1 64 1 2025-10-17 17:14:58.199 00:00:00.000 UDP 28.104.0.1:45694 -> 198.28.0.2:53 1 64 1 2025-10-17 17:14:58.209 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39436 1 80 1 2025-10-17 17:14:58.209 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45694 1 109 1 2025-10-17 17:15:58.493 00:00:00.000 UDP 28.104.0.1:53558 -> 198.28.0.2:53 1 64 1 2025-10-17 17:15:58.493 00:00:00.000 UDP 28.104.0.1:41180 -> 198.28.0.2:53 1 64 1 2025-10-17 17:15:58.503 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41180 1 80 1 2025-10-17 17:15:58.503 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53558 1 109 1 2025-10-17 17:16:58.755 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39102 1 109 1 2025-10-17 17:16:58.754 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35352 1 80 1 2025-10-17 17:16:58.745 00:00:00.000 UDP 28.104.0.1:39102 -> 198.28.0.2:53 1 64 1 2025-10-17 17:16:58.745 00:00:00.000 UDP 28.104.0.1:35352 -> 198.28.0.2:53 1 64 1 2025-10-17 17:12:52.746 00:05:50.913 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-17 17:12:52.666 00:05:51.033 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-17 17:17:59.052 00:00:00.000 UDP 28.104.0.1:38924 -> 198.28.0.2:53 1 64 1 2025-10-17 17:17:59.052 00:00:00.000 UDP 28.104.0.1:48291 -> 198.28.0.2:53 1 64 1 2025-10-17 17:17:59.062 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48291 1 80 1 2025-10-17 17:17:59.063 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38924 1 109 1 2025-10-17 17:13:52.747 00:06:00.122 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-17 17:14:43.647 00:05:09.112 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-17 17:19:00.644 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-17 17:18:59.351 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58036 1 109 1 2025-10-17 17:18:59.350 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53707 1 80 1 2025-10-17 17:18:59.341 00:00:00.000 UDP 28.104.0.1:58036 -> 198.28.0.2:53 1 64 1 2025-10-17 17:18:59.340 00:00:00.000 UDP 28.104.0.1:53707 -> 198.28.0.2:53 1 64 1 2025-10-17 17:19:59.613 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58102 1 109 1 2025-10-17 17:19:59.613 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35936 1 80 1 2025-10-17 17:19:59.603 00:00:00.000 UDP 28.104.0.1:35936 -> 198.28.0.2:53 1 64 1 2025-10-17 17:19:59.603 00:00:00.000 UDP 28.104.0.1:58102 -> 198.28.0.2:53 1 64 1 2025-10-17 17:15:58.687 00:05:02.146 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2612 1 2025-10-17 17:15:52.677 00:05:50.973 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-17 17:15:52.595 00:06:00.154 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-17 17:20:59.910 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50454 1 80 1 2025-10-17 17:20:59.910 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49953 1 109 1 2025-10-17 17:20:59.900 00:00:00.000 UDP 28.104.0.1:49953 -> 198.28.0.2:53 1 64 1 2025-10-17 17:20:59.900 00:00:00.000 UDP 28.104.0.1:50454 -> 198.28.0.2:53 1 64 1 2025-10-17 17:22:00.201 00:00:00.000 UDP 28.104.0.1:51868 -> 198.28.0.2:53 1 64 1 2025-10-17 17:22:00.201 00:00:00.000 UDP 28.104.0.1:43470 -> 198.28.0.2:53 1 64 1 2025-10-17 17:22:00.211 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43470 1 109 1 2025-10-17 17:22:00.211 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51868 1 80 1 2025-10-17 17:23:00.510 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57055 1 109 1 2025-10-17 17:23:00.510 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37505 1 80 1 2025-10-17 17:23:00.500 00:00:00.000 UDP 28.104.0.1:57055 -> 198.28.0.2:53 1 64 1 2025-10-17 17:23:00.500 00:00:00.000 UDP 28.104.0.1:37505 -> 198.28.0.2:53 1 64 1 2025-10-17 17:18:52.748 00:05:50.914 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-17 17:18:52.669 00:05:51.033 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-17 17:24:00.808 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-17 17:24:00.763 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58391 1 109 1 2025-10-17 17:24:00.763 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48105 1 80 1 2025-10-17 17:24:00.754 00:00:00.000 UDP 28.104.0.1:48105 -> 198.28.0.2:53 1 64 1 2025-10-17 17:24:00.753 00:00:00.000 UDP 28.104.0.1:58391 -> 198.28.0.2:53 1 64 1 2025-10-17 17:20:43.650 00:05:09.113 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-17 17:25:01.069 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50981 1 109 1 2025-10-17 17:25:01.068 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35282 1 80 1 2025-10-17 17:25:01.060 00:00:00.000 UDP 28.104.0.1:50981 -> 198.28.0.2:53 1 64 1 2025-10-17 17:25:01.059 00:00:00.000 UDP 28.104.0.1:35282 -> 198.28.0.2:53 1 64 1 2025-10-17 17:21:10.833 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2560 1 2025-10-17 17:20:52.748 00:06:00.128 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-17 17:26:01.358 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57052 1 80 1 2025-10-17 17:26:01.358 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45380 1 109 1 2025-10-17 17:26:01.347 00:00:00.000 UDP 28.104.0.1:45380 -> 198.28.0.2:53 1 64 1 2025-10-17 17:26:01.347 00:00:00.000 UDP 28.104.0.1:57052 -> 198.28.0.2:53 1 64 1 2025-10-17 17:21:52.679 00:05:50.972 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-17 17:27:01.645 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37725 1 109 1 2025-10-17 17:27:01.645 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54468 1 80 1 2025-10-17 17:27:01.635 00:00:00.000 UDP 28.104.0.1:37725 -> 198.28.0.2:53 1 64 1 2025-10-17 17:27:01.635 00:00:00.000 UDP 28.104.0.1:54468 -> 198.28.0.2:53 1 64 1 2025-10-17 17:22:52.597 00:06:00.157 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-17 17:28:01.938 00:00:00.000 UDP 28.104.0.1:58017 -> 198.28.0.2:53 1 64 1 2025-10-17 17:28:01.939 00:00:00.000 UDP 28.104.0.1:60748 -> 198.28.0.2:53 1 64 1 2025-10-17 17:28:01.948 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60748 1 80 1 2025-10-17 17:28:01.948 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58017 1 109 1 2025-10-17 17:29:02.199 00:00:00.000 UDP 28.104.0.1:54822 -> 198.28.0.2:53 1 64 1 2025-10-17 17:29:02.199 00:00:00.000 UDP 28.104.0.1:43923 -> 198.28.0.2:53 1 64 1 2025-10-17 17:29:00.634 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-17 17:29:02.209 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54822 1 109 1 2025-10-17 17:29:02.209 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43923 1 80 1 2025-10-17 17:24:52.753 00:05:50.908 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-17 17:24:52.671 00:05:51.030 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-17 17:30:02.450 00:00:00.000 UDP 28.104.0.1:40862 -> 198.28.0.2:53 1 64 1 2025-10-17 17:30:02.450 00:00:00.000 UDP 28.104.0.1:50986 -> 198.28.0.2:53 1 64 1 2025-10-17 17:30:02.462 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50986 1 80 1 2025-10-17 17:30:02.462 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40862 1 109 1 2025-10-17 17:26:30.838 00:05:10.015 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2628 1 2025-10-17 17:26:43.651 00:05:09.113 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-17 17:31:02.759 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48729 1 109 1 2025-10-17 17:31:02.760 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45147 1 80 1 2025-10-17 17:31:02.749 00:00:00.000 UDP 28.104.0.1:45147 -> 198.28.0.2:53 1 64 1 2025-10-17 17:31:02.749 00:00:00.000 UDP 28.104.0.1:48729 -> 198.28.0.2:53 1 64 1 2025-10-17 17:32:03.064 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47127 1 109 1 2025-10-17 17:32:03.064 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50878 1 80 1 2025-10-17 17:32:03.053 00:00:00.000 UDP 28.104.0.1:50878 -> 198.28.0.2:53 1 64 1 2025-10-17 17:32:03.053 00:00:00.000 UDP 28.104.0.1:47127 -> 198.28.0.2:53 1 64 1 2025-10-17 17:27:52.682 00:05:50.971 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-17 17:27:52.754 00:06:00.122 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-17 17:33:03.441 00:00:00.000 UDP 28.104.0.1:47050 -> 198.28.0.2:53 1 64 1 2025-10-17 17:33:03.441 00:00:00.000 UDP 28.104.0.1:57642 -> 198.28.0.2:53 1 64 1 2025-10-17 17:33:03.453 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47050 1 80 1 2025-10-17 17:33:03.453 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57642 1 109 1 2025-10-17 17:34:03.750 00:00:00.000 UDP 28.104.0.1:48593 -> 198.28.0.2:53 1 64 1 2025-10-17 17:34:03.749 00:00:00.000 UDP 28.104.0.1:49806 -> 198.28.0.2:53 1 64 1 2025-10-17 17:34:01.023 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-17 17:34:03.762 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48593 1 80 1 2025-10-17 17:34:03.761 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49806 1 109 1 2025-10-17 17:29:52.599 00:06:00.157 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-17 17:35:04.067 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34447 1 80 1 2025-10-17 17:35:04.067 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53794 1 109 1 2025-10-17 17:35:04.057 00:00:00.000 UDP 28.104.0.1:53794 -> 198.28.0.2:53 1 64 1 2025-10-17 17:35:04.057 00:00:00.000 UDP 28.104.0.1:34447 -> 198.28.0.2:53 1 64 1 2025-10-17 17:30:52.755 00:05:50.908 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-17 17:30:52.675 00:05:51.029 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-17 17:31:50.844 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2580 1 2025-10-17 17:36:04.371 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45507 1 80 1 2025-10-17 17:36:04.371 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50850 1 109 1 2025-10-17 17:36:04.360 00:00:00.000 UDP 28.104.0.1:50850 -> 198.28.0.2:53 1 64 1 2025-10-17 17:36:04.361 00:00:00.000 UDP 28.104.0.1:45507 -> 198.28.0.2:53 1 64 1 2025-10-17 17:32:43.652 00:05:09.114 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-17 17:37:04.622 00:00:00.000 UDP 28.104.0.1:46892 -> 198.28.0.2:53 1 64 1 2025-10-17 17:37:04.622 00:00:00.000 UDP 28.104.0.1:50327 -> 198.28.0.2:53 1 64 1 2025-10-17 17:37:04.634 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50327 1 109 1 2025-10-17 17:37:04.634 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46892 1 80 1 2025-10-17 17:38:04.875 00:00:00.000 UDP 28.104.0.1:35351 -> 198.28.0.2:53 1 64 1 2025-10-17 17:38:04.875 00:00:00.000 UDP 28.104.0.1:40848 -> 198.28.0.2:53 1 64 1 2025-10-17 17:38:04.886 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35351 1 80 1 2025-10-17 17:38:04.886 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40848 1 109 1 2025-10-17 17:33:52.685 00:05:50.968 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-17 17:39:00.816 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-17 17:39:05.133 00:00:00.000 UDP 28.104.0.1:50686 -> 198.28.0.2:53 1 64 1 2025-10-17 17:39:05.133 00:00:00.000 UDP 28.104.0.1:43921 -> 198.28.0.2:53 1 64 1 2025-10-17 17:39:05.143 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50686 1 109 1 2025-10-17 17:39:05.143 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43921 1 80 1 2025-10-17 17:34:52.756 00:06:00.122 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-17 17:40:05.421 00:00:00.000 UDP 28.104.0.1:55778 -> 198.28.0.2:53 1 64 1 2025-10-17 17:40:05.422 00:00:00.000 UDP 28.104.0.1:54681 -> 198.28.0.2:53 1 64 1 2025-10-17 17:40:05.433 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54681 1 80 1 2025-10-17 17:40:05.433 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55778 1 109 1 2025-10-17 17:41:05.715 00:00:00.000 UDP 28.104.0.1:57800 -> 198.28.0.2:53 1 64 1 2025-10-17 17:41:05.715 00:00:00.000 UDP 28.104.0.1:41173 -> 198.28.0.2:53 1 64 1 2025-10-17 17:41:05.725 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41173 1 109 1 2025-10-17 17:41:05.725 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57800 1 80 1 2025-10-17 17:37:10.850 00:05:10.002 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2376 1 2025-10-17 17:36:52.756 00:05:50.909 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-17 17:36:52.676 00:05:51.030 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-17 17:36:52.599 00:06:00.157 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-17 17:42:06.015 00:00:00.000 UDP 28.104.0.1:41927 -> 198.28.0.2:53 1 64 1 2025-10-17 17:42:06.011 00:00:00.000 UDP 28.104.0.1:36352 -> 198.28.0.2:53 1 64 1 2025-10-17 17:42:06.024 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36352 1 80 1 2025-10-17 17:42:06.026 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41927 1 109 1 2025-10-17 17:38:43.653 00:05:09.114 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-17 17:43:06.310 00:00:00.000 UDP 28.104.0.1:55809 -> 198.28.0.2:53 1 64 1 2025-10-17 17:43:06.310 00:00:00.000 UDP 28.104.0.1:41495 -> 198.28.0.2:53 1 64 1 2025-10-17 17:43:06.322 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55809 1 109 1 2025-10-17 17:43:06.322 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41495 1 80 1 2025-10-17 17:44:01.043 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-17 17:44:07.328 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51620 1 109 1 2025-10-17 17:44:07.328 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60375 1 80 1 2025-10-17 17:44:07.318 00:00:00.000 UDP 28.104.0.1:51620 -> 198.28.0.2:53 1 64 1 2025-10-17 17:44:07.318 00:00:00.000 UDP 28.104.0.1:60375 -> 198.28.0.2:53 1 64 1 2025-10-17 17:39:52.688 00:05:50.968 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-17 17:45:07.617 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58486 1 80 1 2025-10-17 17:45:07.617 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38779 1 109 1 2025-10-17 17:45:07.607 00:00:00.000 UDP 28.104.0.1:38779 -> 198.28.0.2:53 1 64 1 2025-10-17 17:45:07.607 00:00:00.000 UDP 28.104.0.1:58486 -> 198.28.0.2:53 1 64 1 2025-10-17 17:46:07.924 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45482 1 109 1 2025-10-17 17:46:07.924 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46396 1 80 1 2025-10-17 17:46:07.914 00:00:00.000 UDP 28.104.0.1:45482 -> 198.28.0.2:53 1 64 1 2025-10-17 17:46:07.914 00:00:00.000 UDP 28.104.0.1:46396 -> 198.28.0.2:53 1 64 1 2025-10-17 17:42:30.852 00:05:10.013 OSPF 28.0.2.2:0 -> 224.0.0.5:0 38 2832 1 2025-10-17 17:41:52.757 00:06:00.122 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-17 17:47:08.227 00:00:00.000 UDP 28.104.0.1:40142 -> 198.28.0.2:53 1 64 1 2025-10-17 17:47:08.227 00:00:00.000 UDP 28.104.0.1:54060 -> 198.28.0.2:53 1 64 1 2025-10-17 17:47:08.238 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54060 1 109 1 2025-10-17 17:47:08.238 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40142 1 80 1 2025-10-17 17:42:52.756 00:05:50.910 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-17 17:42:52.678 00:05:51.028 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-17 17:48:08.524 00:00:00.000 UDP 28.104.0.1:55475 -> 198.28.0.2:53 1 64 1 2025-10-17 17:48:08.524 00:00:00.000 UDP 28.104.0.1:33960 -> 198.28.0.2:53 1 64 1 2025-10-17 17:48:08.535 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55475 1 109 1 2025-10-17 17:48:08.535 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33960 1 80 1 2025-10-17 17:43:52.601 00:06:00.159 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-17 17:44:43.655 00:05:09.115 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-17 17:49:01.635 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-17 17:49:08.817 00:00:00.000 UDP 28.104.0.1:59473 -> 198.28.0.2:53 1 64 1 2025-10-17 17:49:08.817 00:00:00.000 UDP 28.104.0.1:39896 -> 198.28.0.2:53 1 64 1 2025-10-17 17:49:08.828 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59473 1 109 1 2025-10-17 17:49:08.828 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39896 1 80 1 2025-10-17 17:50:09.073 00:00:00.000 UDP 28.104.0.1:34886 -> 198.28.0.2:53 1 64 1 2025-10-17 17:50:09.073 00:00:00.000 UDP 28.104.0.1:35663 -> 198.28.0.2:53 1 64 1 2025-10-17 17:50:09.084 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34886 1 109 1 2025-10-17 17:50:09.084 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35663 1 80 1 2025-10-17 17:45:52.689 00:05:50.968 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-17 17:51:09.373 00:00:00.000 UDP 28.104.0.1:60054 -> 198.28.0.2:53 1 64 1 2025-10-17 17:51:09.373 00:00:00.000 UDP 28.104.0.1:55884 -> 198.28.0.2:53 1 64 1 2025-10-17 17:51:09.384 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60054 1 109 1 2025-10-17 17:51:09.384 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55884 1 80 1 2025-10-17 17:47:50.866 00:05:10.004 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2416 1 2025-10-17 17:52:09.637 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57630 1 80 1 2025-10-17 17:52:09.637 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37026 1 109 1 2025-10-17 17:52:09.626 00:00:00.000 UDP 28.104.0.1:37026 -> 198.28.0.2:53 1 64 1 2025-10-17 17:52:09.626 00:00:00.000 UDP 28.104.0.1:57630 -> 198.28.0.2:53 1 64 1 2025-10-17 17:53:09.944 00:00:00.000 UDP 28.104.0.1:57688 -> 198.28.0.2:53 1 64 1 2025-10-17 17:53:09.943 00:00:00.000 UDP 28.104.0.1:46997 -> 198.28.0.2:53 1 64 1 2025-10-17 17:53:09.954 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46997 1 80 1 2025-10-17 17:53:09.955 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57688 1 109 1 2025-10-17 17:48:52.681 00:05:51.027 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-17 17:48:52.759 00:05:50.909 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-17 17:48:52.759 00:06:00.122 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-17 17:54:01.442 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-17 17:54:10.205 00:00:00.000 UDP 28.104.0.1:57113 -> 198.28.0.2:53 1 64 1 2025-10-17 17:54:10.205 00:00:00.000 UDP 28.104.0.1:58826 -> 198.28.0.2:53 1 64 1 2025-10-17 17:54:10.215 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58826 1 80 1 2025-10-17 17:54:10.215 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57113 1 109 1 2025-10-17 17:50:43.657 00:05:09.113 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-17 17:55:10.495 00:00:00.000 UDP 28.104.0.1:41703 -> 198.28.0.2:53 1 64 1 2025-10-17 17:55:10.495 00:00:00.000 UDP 28.104.0.1:42726 -> 198.28.0.2:53 1 64 1 2025-10-17 17:55:10.506 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41703 1 80 1 2025-10-17 17:55:10.506 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42726 1 109 1 2025-10-17 17:50:52.603 00:06:00.159 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-17 17:56:10.788 00:00:00.000 UDP 28.104.0.1:55943 -> 198.28.0.2:53 1 64 1 2025-10-17 17:56:10.787 00:00:00.000 UDP 28.104.0.1:36329 -> 198.28.0.2:53 1 64 1 2025-10-17 17:56:10.798 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36329 1 109 1 2025-10-17 17:56:10.799 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55943 1 80 1 2025-10-17 17:51:52.693 00:05:50.967 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-17 17:57:11.060 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59765 1 80 1 2025-10-17 17:57:11.060 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43159 1 109 1 2025-10-17 17:57:11.050 00:00:00.000 UDP 28.104.0.1:43159 -> 198.28.0.2:53 1 64 1 2025-10-17 17:57:11.050 00:00:00.000 UDP 28.104.0.1:59765 -> 198.28.0.2:53 1 64 1 2025-10-17 17:53:10.871 00:05:10.008 OSPF 28.0.2.2:0 -> 224.0.0.5:0 38 2692 1 2025-10-17 17:58:11.320 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52531 1 109 1 2025-10-17 17:58:11.320 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37912 1 80 1 2025-10-17 17:58:11.310 00:00:00.000 UDP 28.104.0.1:37912 -> 198.28.0.2:53 1 64 1 2025-10-17 17:58:11.310 00:00:00.000 UDP 28.104.0.1:52531 -> 198.28.0.2:53 1 64 1 Summary: total flows: 316, total bytes: 94232, total packets: 1387, avg bps: 197, avg pps: 0, avg bpp: 67 Time window: 2025-10-17 16:54:52 - 2025-10-17 17:58:20 Total flows processed: 316, passed: 316, Blocks skipped: 0, Bytes read: 32928 Sys: 0.0031s User: 0.0042s Wall: 0.0034s flows/second: 91805.8 Runtime: 0.0035s