Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-17 17:59:01.505 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-17 17:59:11.602 00:00:00.000 UDP 28.104.0.1:54822 -> 198.28.0.2:53 1 64 1 2025-10-17 17:59:11.602 00:00:00.000 UDP 28.104.0.1:53897 -> 198.28.0.2:53 1 64 1 2025-10-17 17:59:11.612 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54822 1 109 1 2025-10-17 17:59:11.612 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53897 1 80 1 2025-10-17 17:54:52.759 00:05:50.921 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-17 17:54:52.681 00:05:51.037 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-17 18:00:11.858 00:00:00.000 UDP 28.104.0.1:43407 -> 198.28.0.2:53 1 64 1 2025-10-17 18:00:11.858 00:00:00.000 UDP 28.104.0.1:33152 -> 198.28.0.2:53 1 64 1 2025-10-17 18:00:11.868 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43407 1 109 1 2025-10-17 18:00:11.869 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33152 1 80 1 2025-10-17 17:55:52.761 00:06:00.124 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-17 17:56:43.659 00:05:09.114 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-17 18:01:12.164 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59656 1 109 1 2025-10-17 18:01:12.164 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41310 1 80 1 2025-10-17 18:01:12.154 00:00:00.000 UDP 28.104.0.1:41310 -> 198.28.0.2:53 1 64 1 2025-10-17 18:01:12.154 00:00:00.000 UDP 28.104.0.1:59656 -> 198.28.0.2:53 1 64 1 2025-10-17 18:02:12.458 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42489 1 109 1 2025-10-17 18:02:12.458 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40498 1 80 1 2025-10-17 18:02:12.447 00:00:00.000 UDP 28.104.0.1:40498 -> 198.28.0.2:53 1 64 1 2025-10-17 18:02:12.447 00:00:00.000 UDP 28.104.0.1:42489 -> 198.28.0.2:53 1 64 1 2025-10-17 17:57:52.691 00:05:50.969 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-17 17:58:30.878 00:05:10.004 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2580 1 2025-10-17 17:57:52.604 00:06:00.162 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-17 18:03:12.750 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41685 1 80 1 2025-10-17 18:03:12.750 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37721 1 109 1 2025-10-17 18:03:12.741 00:00:00.000 UDP 28.104.0.1:37721 -> 198.28.0.2:53 1 64 1 2025-10-17 18:03:12.741 00:00:00.000 UDP 28.104.0.1:41685 -> 198.28.0.2:53 1 64 1 2025-10-17 18:04:01.496 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-17 18:04:13.070 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36686 1 109 1 2025-10-17 18:04:13.070 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58583 1 80 1 2025-10-17 18:04:13.060 00:00:00.000 UDP 28.104.0.1:36686 -> 198.28.0.2:53 1 64 1 2025-10-17 18:04:13.060 00:00:00.000 UDP 28.104.0.1:58583 -> 198.28.0.2:53 1 64 1 2025-10-17 18:05:13.323 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43910 1 109 1 2025-10-17 18:05:13.323 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36951 1 80 1 2025-10-17 18:05:13.312 00:00:00.000 UDP 28.104.0.1:43910 -> 198.28.0.2:53 1 64 1 2025-10-17 18:05:13.313 00:00:00.000 UDP 28.104.0.1:36951 -> 198.28.0.2:53 1 64 1 2025-10-17 18:00:52.762 00:05:50.909 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-17 18:00:52.682 00:05:51.029 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-17 18:06:13.609 00:00:00.000 UDP 28.104.0.1:34385 -> 198.28.0.2:53 1 64 1 2025-10-17 18:06:13.609 00:00:00.000 UDP 28.104.0.1:33059 -> 198.28.0.2:53 1 64 1 2025-10-17 18:06:13.618 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34385 1 109 1 2025-10-17 18:06:13.618 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33059 1 80 1 2025-10-17 18:02:43.660 00:05:09.117 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-17 18:07:13.899 00:00:00.000 UDP 28.104.0.1:46651 -> 198.28.0.2:53 1 64 1 2025-10-17 18:07:13.899 00:00:00.000 UDP 28.104.0.1:59701 -> 198.28.0.2:53 1 64 1 2025-10-17 18:07:13.908 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59701 1 109 1 2025-10-17 18:07:13.908 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46651 1 80 1 2025-10-17 18:02:52.763 00:06:00.122 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-17 18:03:50.881 00:05:10.008 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2384 1 2025-10-17 18:08:14.199 00:00:00.000 UDP 28.104.0.1:57477 -> 198.28.0.2:53 1 64 1 2025-10-17 18:08:14.199 00:00:00.000 UDP 28.104.0.1:39312 -> 198.28.0.2:53 1 64 1 2025-10-17 18:08:14.209 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39312 1 80 1 2025-10-17 18:08:14.209 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57477 1 109 1 2025-10-17 18:03:52.694 00:05:50.967 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-17 18:09:01.541 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-17 18:09:14.505 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42737 1 80 1 2025-10-17 18:09:14.506 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59867 1 109 1 2025-10-17 18:09:14.495 00:00:00.000 UDP 28.104.0.1:59867 -> 198.28.0.2:53 1 64 1 2025-10-17 18:09:14.494 00:00:00.000 UDP 28.104.0.1:42737 -> 198.28.0.2:53 1 64 1 2025-10-17 18:04:52.605 00:06:00.161 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-17 18:10:14.985 00:00:00.000 UDP 28.104.0.1:42919 -> 198.28.0.2:53 1 64 1 2025-10-17 18:10:14.985 00:00:00.000 UDP 28.104.0.1:41921 -> 198.28.0.2:53 1 64 1 2025-10-17 18:10:14.995 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42919 1 109 1 2025-10-17 18:10:14.995 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41921 1 80 1 2025-10-17 18:11:15.288 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56135 1 109 1 2025-10-17 18:11:15.288 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37981 1 80 1 2025-10-17 18:11:15.277 00:00:00.000 UDP 28.104.0.1:37981 -> 198.28.0.2:53 1 64 1 2025-10-17 18:11:15.277 00:00:00.000 UDP 28.104.0.1:56135 -> 198.28.0.2:53 1 64 1 2025-10-17 18:06:52.768 00:05:50.906 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-17 18:06:52.684 00:05:51.030 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-17 18:12:15.569 00:00:00.000 UDP 28.104.0.1:59787 -> 198.28.0.2:53 1 64 1 2025-10-17 18:12:15.569 00:00:00.000 UDP 28.104.0.1:42865 -> 198.28.0.2:53 1 64 1 2025-10-17 18:12:15.579 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59787 1 109 1 2025-10-17 18:12:15.579 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42865 1 80 1 2025-10-17 18:08:43.660 00:05:09.117 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-17 18:13:15.870 00:00:00.000 UDP 28.104.0.1:42666 -> 198.28.0.2:53 1 64 1 2025-10-17 18:13:15.870 00:00:00.000 UDP 28.104.0.1:46932 -> 198.28.0.2:53 1 64 1 2025-10-17 18:13:15.880 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46932 1 109 1 2025-10-17 18:13:15.880 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42666 1 80 1 2025-10-17 18:09:10.890 00:05:10.009 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2584 1 2025-10-17 18:14:01.443 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-17 18:14:16.170 00:00:00.000 UDP 28.104.0.1:59918 -> 198.28.0.2:53 1 64 1 2025-10-17 18:14:16.170 00:00:00.000 UDP 28.104.0.1:43543 -> 198.28.0.2:53 1 64 1 2025-10-17 18:14:16.183 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43543 1 80 1 2025-10-17 18:14:16.183 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59918 1 109 1 2025-10-17 18:09:52.693 00:05:50.970 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-17 18:09:52.767 00:06:00.122 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-17 18:15:16.471 00:00:00.000 UDP 28.104.0.1:58241 -> 198.28.0.2:53 1 64 1 2025-10-17 18:15:16.471 00:00:00.000 UDP 28.104.0.1:44498 -> 198.28.0.2:53 1 64 1 2025-10-17 18:15:16.483 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44498 1 109 1 2025-10-17 18:15:16.483 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58241 1 80 1 2025-10-17 18:16:16.779 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56099 1 80 1 2025-10-17 18:16:16.779 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60678 1 109 1 2025-10-17 18:16:16.769 00:00:00.000 UDP 28.104.0.1:56099 -> 198.28.0.2:53 1 64 1 2025-10-17 18:16:16.769 00:00:00.000 UDP 28.104.0.1:60678 -> 198.28.0.2:53 1 64 1 2025-10-17 18:11:52.610 00:06:00.160 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-17 18:17:17.106 00:00:00.000 UDP 28.104.0.1:54325 -> 198.28.0.2:53 1 64 1 2025-10-17 18:17:17.106 00:00:00.000 UDP 28.104.0.1:38495 -> 198.28.0.2:53 1 64 1 2025-10-17 18:17:17.115 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38495 1 80 1 2025-10-17 18:17:17.115 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54325 1 109 1 2025-10-17 18:12:52.767 00:05:50.908 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-17 18:12:52.685 00:05:51.030 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-17 18:18:17.409 00:00:00.000 UDP 28.104.0.1:35951 -> 198.28.0.2:53 1 64 1 2025-10-17 18:18:17.408 00:00:00.000 UDP 28.104.0.1:49012 -> 198.28.0.2:53 1 64 1 2025-10-17 18:18:17.418 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35951 1 109 1 2025-10-17 18:18:17.418 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49012 1 80 1 2025-10-17 18:14:30.899 00:05:10.008 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2624 1 2025-10-17 18:14:43.664 00:05:09.116 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-17 18:19:01.819 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-17 18:19:17.715 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38628 1 109 1 2025-10-17 18:19:17.715 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57910 1 80 1 2025-10-17 18:19:17.705 00:00:00.000 UDP 28.104.0.1:57910 -> 198.28.0.2:53 1 64 1 2025-10-17 18:19:17.705 00:00:00.000 UDP 28.104.0.1:38628 -> 198.28.0.2:53 1 64 1 2025-10-17 18:20:18.005 00:00:00.000 UDP 28.104.0.1:33913 -> 198.28.0.2:53 1 64 1 2025-10-17 18:20:18.007 00:00:00.000 UDP 28.104.0.1:43328 -> 198.28.0.2:53 1 64 1 2025-10-17 18:20:18.016 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33913 1 109 1 2025-10-17 18:20:18.020 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43328 1 80 1 2025-10-17 18:15:52.696 00:05:50.970 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-17 18:21:18.322 00:00:00.000 UDP 28.104.0.1:51058 -> 198.28.0.2:53 1 64 1 2025-10-17 18:21:18.322 00:00:00.000 UDP 28.104.0.1:43637 -> 198.28.0.2:53 1 64 1 2025-10-17 18:21:18.332 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51058 1 80 1 2025-10-17 18:21:18.332 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43637 1 109 1 2025-10-17 18:16:52.770 00:06:00.123 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-17 18:22:18.633 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49010 1 80 1 2025-10-17 18:22:18.633 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60477 1 109 1 2025-10-17 18:22:18.623 00:00:00.000 UDP 28.104.0.1:60477 -> 198.28.0.2:53 1 64 1 2025-10-17 18:22:18.623 00:00:00.000 UDP 28.104.0.1:49010 -> 198.28.0.2:53 1 64 1 2025-10-17 18:23:18.940 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33427 1 109 1 2025-10-17 18:23:18.940 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51912 1 80 1 2025-10-17 18:23:18.930 00:00:00.000 UDP 28.104.0.1:33427 -> 198.28.0.2:53 1 64 1 2025-10-17 18:23:18.930 00:00:00.000 UDP 28.104.0.1:51912 -> 198.28.0.2:53 1 64 1 2025-10-17 18:18:52.768 00:05:50.912 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-17 18:18:52.692 00:05:51.028 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-17 18:18:52.610 00:06:00.161 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-17 18:24:01.922 00:00:00.028 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-17 18:19:50.908 00:05:10.008 OSPF 28.0.2.2:0 -> 224.0.0.5:0 38 2692 1 2025-10-17 18:24:19.245 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42824 1 109 1 2025-10-17 18:24:19.245 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41793 1 80 1 2025-10-17 18:24:19.234 00:00:00.000 UDP 28.104.0.1:41793 -> 198.28.0.2:53 1 64 1 2025-10-17 18:24:19.234 00:00:00.000 UDP 28.104.0.1:42824 -> 198.28.0.2:53 1 64 1 2025-10-17 18:20:43.666 00:05:09.115 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-17 18:25:19.495 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37818 1 80 1 2025-10-17 18:25:19.495 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60618 1 109 1 2025-10-17 18:25:19.485 00:00:00.000 UDP 28.104.0.1:60618 -> 198.28.0.2:53 1 64 1 2025-10-17 18:25:19.485 00:00:00.000 UDP 28.104.0.1:37818 -> 198.28.0.2:53 1 64 1 2025-10-17 18:26:19.752 00:00:00.000 UDP 28.104.0.1:54610 -> 198.28.0.2:53 1 64 1 2025-10-17 18:26:19.752 00:00:00.000 UDP 28.104.0.1:54908 -> 198.28.0.2:53 1 64 1 2025-10-17 18:26:19.764 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54610 1 109 1 2025-10-17 18:26:19.764 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54908 1 80 1 2025-10-17 18:21:52.701 00:05:50.972 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-17 18:27:20.071 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56894 1 109 1 2025-10-17 18:27:20.071 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55306 1 80 1 2025-10-17 18:27:20.061 00:00:00.000 UDP 28.104.0.1:56894 -> 198.28.0.2:53 1 64 1 2025-10-17 18:27:20.061 00:00:00.000 UDP 28.104.0.1:55306 -> 198.28.0.2:53 1 64 1 2025-10-17 18:28:20.368 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33248 1 80 1 2025-10-17 18:28:20.368 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40160 1 109 1 2025-10-17 18:28:20.358 00:00:00.000 UDP 28.104.0.1:40160 -> 198.28.0.2:53 1 64 1 2025-10-17 18:28:20.358 00:00:00.000 UDP 28.104.0.1:33248 -> 198.28.0.2:53 1 64 1 2025-10-17 18:23:52.770 00:06:00.126 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-17 18:29:02.284 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-17 18:29:20.670 00:00:00.000 UDP 28.104.0.1:48488 -> 198.28.0.2:53 1 64 1 2025-10-17 18:29:20.670 00:00:00.000 UDP 28.104.0.1:51285 -> 198.28.0.2:53 1 64 1 2025-10-17 18:25:10.915 00:05:10.009 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2400 1 2025-10-17 18:29:20.680 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48488 1 80 1 2025-10-17 18:29:20.679 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51285 1 109 1 2025-10-17 18:24:52.771 00:05:50.912 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-17 18:24:52.694 00:05:51.029 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-17 18:30:20.983 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43522 1 109 1 2025-10-17 18:30:20.983 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33276 1 80 1 2025-10-17 18:30:20.973 00:00:00.000 UDP 28.104.0.1:33276 -> 198.28.0.2:53 1 64 1 2025-10-17 18:30:20.973 00:00:00.000 UDP 28.104.0.1:43522 -> 198.28.0.2:53 1 64 1 2025-10-17 18:26:43.670 00:05:09.112 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-17 18:25:52.611 00:06:00.161 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-17 18:31:21.292 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39683 1 80 1 2025-10-17 18:31:21.291 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42995 1 109 1 2025-10-17 18:31:21.282 00:00:00.000 UDP 28.104.0.1:39683 -> 198.28.0.2:53 1 64 1 2025-10-17 18:31:21.281 00:00:00.000 UDP 28.104.0.1:42995 -> 198.28.0.2:53 1 64 1 2025-10-17 18:32:21.595 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37213 1 80 1 2025-10-17 18:32:21.595 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51749 1 109 1 2025-10-17 18:32:21.585 00:00:00.000 UDP 28.104.0.1:37213 -> 198.28.0.2:53 1 64 1 2025-10-17 18:32:21.585 00:00:00.000 UDP 28.104.0.1:51749 -> 198.28.0.2:53 1 64 1 2025-10-17 18:27:52.705 00:05:50.968 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-17 18:33:21.869 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54308 1 80 1 2025-10-17 18:33:21.869 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54882 1 109 1 2025-10-17 18:33:21.860 00:00:00.000 UDP 28.104.0.1:54882 -> 198.28.0.2:53 1 64 1 2025-10-17 18:33:21.860 00:00:00.000 UDP 28.104.0.1:54308 -> 198.28.0.2:53 1 64 1 2025-10-17 18:34:01.984 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-17 18:34:22.197 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50105 1 109 1 2025-10-17 18:34:22.197 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59594 1 80 1 2025-10-17 18:34:22.187 00:00:00.000 UDP 28.104.0.1:50105 -> 198.28.0.2:53 1 64 1 2025-10-17 18:34:22.187 00:00:00.000 UDP 28.104.0.1:59594 -> 198.28.0.2:53 1 64 1 2025-10-17 18:30:30.924 00:05:10.004 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2644 1 2025-10-17 18:35:22.493 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33959 1 80 1 2025-10-17 18:35:22.493 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57966 1 109 1 2025-10-17 18:35:22.483 00:00:00.000 UDP 28.104.0.1:57966 -> 198.28.0.2:53 1 64 1 2025-10-17 18:35:22.483 00:00:00.000 UDP 28.104.0.1:33959 -> 198.28.0.2:53 1 64 1 2025-10-17 18:30:52.772 00:05:50.912 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-17 18:30:52.695 00:05:51.029 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-17 18:30:52.773 00:06:00.126 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-17 18:36:22.783 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44286 1 80 1 2025-10-17 18:36:22.783 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50215 1 109 1 2025-10-17 18:36:22.772 00:00:00.000 UDP 28.104.0.1:44286 -> 198.28.0.2:53 1 64 1 2025-10-17 18:36:22.772 00:00:00.000 UDP 28.104.0.1:50215 -> 198.28.0.2:53 1 64 1 2025-10-17 18:32:43.674 00:05:09.112 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-17 18:37:23.090 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35310 1 80 1 2025-10-17 18:37:23.090 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57726 1 109 1 2025-10-17 18:37:23.081 00:00:00.000 UDP 28.104.0.1:57726 -> 198.28.0.2:53 1 64 1 2025-10-17 18:37:23.081 00:00:00.000 UDP 28.104.0.1:35310 -> 198.28.0.2:53 1 64 1 2025-10-17 18:32:52.612 00:06:00.163 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-17 18:38:23.392 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38556 1 109 1 2025-10-17 18:38:23.392 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49419 1 80 1 2025-10-17 18:38:23.383 00:00:00.000 UDP 28.104.0.1:38556 -> 198.28.0.2:53 1 64 1 2025-10-17 18:38:23.383 00:00:00.000 UDP 28.104.0.1:49419 -> 198.28.0.2:53 1 64 1 2025-10-17 18:33:52.706 00:05:50.969 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-17 18:39:02.149 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-17 18:39:23.683 00:00:00.000 UDP 28.104.0.1:47132 -> 198.28.0.2:53 1 64 1 2025-10-17 18:39:23.683 00:00:00.000 UDP 28.104.0.1:42199 -> 198.28.0.2:53 1 64 1 2025-10-17 18:39:23.693 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42199 1 80 1 2025-10-17 18:39:23.693 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47132 1 109 1 2025-10-17 18:35:50.929 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2520 1 2025-10-17 18:40:23.997 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39725 1 80 1 2025-10-17 18:40:23.997 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46119 1 109 1 2025-10-17 18:40:23.987 00:00:00.000 UDP 28.104.0.1:39725 -> 198.28.0.2:53 1 64 1 2025-10-17 18:40:23.987 00:00:00.000 UDP 28.104.0.1:46119 -> 198.28.0.2:53 1 64 1 2025-10-17 18:41:24.577 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53277 1 109 1 2025-10-17 18:41:24.577 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38275 1 80 1 2025-10-17 18:41:24.568 00:00:00.000 UDP 28.104.0.1:53277 -> 198.28.0.2:53 1 64 1 2025-10-17 18:41:24.569 00:00:00.000 UDP 28.104.0.1:38275 -> 198.28.0.2:53 1 64 1 2025-10-17 18:36:52.774 00:05:50.911 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-17 18:36:52.696 00:05:51.031 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-17 18:42:24.872 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53493 1 109 1 2025-10-17 18:42:24.871 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59123 1 80 1 2025-10-17 18:42:24.862 00:00:00.000 UDP 28.104.0.1:59123 -> 198.28.0.2:53 1 64 1 2025-10-17 18:42:24.862 00:00:00.000 UDP 28.104.0.1:53493 -> 198.28.0.2:53 1 64 1 2025-10-17 18:38:43.675 00:05:09.112 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-17 18:37:52.776 00:06:00.126 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-17 18:43:25.189 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51594 1 109 1 2025-10-17 18:43:25.189 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57937 1 80 1 2025-10-17 18:43:25.178 00:00:00.000 UDP 28.104.0.1:51594 -> 198.28.0.2:53 1 64 1 2025-10-17 18:43:25.179 00:00:00.000 UDP 28.104.0.1:57937 -> 198.28.0.2:53 1 64 1 2025-10-17 18:44:02.186 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-17 18:44:25.500 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45161 1 109 1 2025-10-17 18:44:25.500 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36540 1 80 1 2025-10-17 18:44:25.491 00:00:00.000 UDP 28.104.0.1:36540 -> 198.28.0.2:53 1 64 1 2025-10-17 18:44:25.491 00:00:00.000 UDP 28.104.0.1:45161 -> 198.28.0.2:53 1 64 1 2025-10-17 18:39:52.707 00:05:50.969 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-17 18:39:52.614 00:06:00.163 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-17 18:45:25.811 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55586 1 109 1 2025-10-17 18:45:25.811 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55388 1 80 1 2025-10-17 18:41:10.935 00:05:10.004 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2680 1 2025-10-17 18:45:25.802 00:00:00.000 UDP 28.104.0.1:55586 -> 198.28.0.2:53 1 64 1 2025-10-17 18:45:25.802 00:00:00.000 UDP 28.104.0.1:55388 -> 198.28.0.2:53 1 64 1 2025-10-17 18:46:26.105 00:00:00.000 UDP 28.104.0.1:34274 -> 198.28.0.2:53 1 64 1 2025-10-17 18:46:26.105 00:00:00.000 UDP 28.104.0.1:39411 -> 198.28.0.2:53 1 64 1 2025-10-17 18:46:26.115 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34274 1 109 1 2025-10-17 18:46:26.115 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39411 1 80 1 2025-10-17 18:47:26.422 00:00:00.000 UDP 28.104.0.1:56730 -> 198.28.0.2:53 1 64 1 2025-10-17 18:47:26.422 00:00:00.000 UDP 28.104.0.1:52177 -> 198.28.0.2:53 1 64 1 2025-10-17 18:47:26.432 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52177 1 80 1 2025-10-17 18:47:26.432 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56730 1 109 1 2025-10-17 18:42:52.775 00:05:50.912 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-17 18:42:52.698 00:05:51.029 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-17 18:48:26.726 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48858 1 109 1 2025-10-17 18:48:26.726 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58143 1 80 1 2025-10-17 18:48:26.717 00:00:00.000 UDP 28.104.0.1:58143 -> 198.28.0.2:53 1 64 1 2025-10-17 18:48:26.717 00:00:00.000 UDP 28.104.0.1:48858 -> 198.28.0.2:53 1 64 1 2025-10-17 18:44:43.675 00:05:09.113 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-17 18:49:02.501 00:00:00.029 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-17 18:49:27.051 00:00:00.000 UDP 28.104.0.1:50817 -> 198.28.0.2:53 1 64 1 2025-10-17 18:49:27.051 00:00:00.000 UDP 28.104.0.1:41706 -> 198.28.0.2:53 1 64 1 2025-10-17 18:49:27.061 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50817 1 109 1 2025-10-17 18:49:27.061 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41706 1 80 1 2025-10-17 18:44:52.777 00:06:00.125 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-17 18:50:27.352 00:00:00.000 UDP 28.104.0.1:56258 -> 198.28.0.2:53 1 64 1 2025-10-17 18:50:27.352 00:00:00.000 UDP 28.104.0.1:54802 -> 198.28.0.2:53 1 64 1 2025-10-17 18:50:27.362 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56258 1 80 1 2025-10-17 18:50:27.362 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54802 1 109 1 2025-10-17 18:46:30.939 00:05:10.004 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2480 1 2025-10-17 18:45:52.710 00:05:50.968 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-17 18:51:27.660 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52841 1 109 1 2025-10-17 18:51:27.660 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38951 1 80 1 2025-10-17 18:51:27.649 00:00:00.000 UDP 28.104.0.1:38951 -> 198.28.0.2:53 1 64 1 2025-10-17 18:51:27.649 00:00:00.000 UDP 28.104.0.1:52841 -> 198.28.0.2:53 1 64 1 2025-10-17 18:46:52.617 00:06:00.162 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-17 18:52:27.965 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39287 1 80 1 2025-10-17 18:52:27.965 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49892 1 109 1 2025-10-17 18:52:27.955 00:00:00.000 UDP 28.104.0.1:39287 -> 198.28.0.2:53 1 64 1 2025-10-17 18:52:27.955 00:00:00.000 UDP 28.104.0.1:49892 -> 198.28.0.2:53 1 64 1 2025-10-17 18:53:28.228 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52742 1 109 1 2025-10-17 18:53:28.228 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36276 1 80 1 2025-10-17 18:53:28.218 00:00:00.000 UDP 28.104.0.1:52742 -> 198.28.0.2:53 1 64 1 2025-10-17 18:53:28.218 00:00:00.000 UDP 28.104.0.1:36276 -> 198.28.0.2:53 1 64 1 2025-10-17 18:48:52.700 00:05:51.028 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-17 18:48:52.778 00:05:50.910 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-17 18:54:02.632 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-17 18:54:28.527 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50604 1 109 1 2025-10-17 18:54:28.527 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57968 1 80 1 2025-10-17 18:54:28.517 00:00:00.000 UDP 28.104.0.1:50604 -> 198.28.0.2:53 1 64 1 2025-10-17 18:54:28.517 00:00:00.000 UDP 28.104.0.1:57968 -> 198.28.0.2:53 1 64 1 2025-10-17 18:50:43.678 00:05:09.112 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-17 18:55:28.818 00:00:00.000 UDP 28.104.0.1:50953 -> 198.28.0.2:53 1 64 1 2025-10-17 18:55:28.818 00:00:00.000 UDP 28.104.0.1:45180 -> 198.28.0.2:53 1 64 1 2025-10-17 18:55:28.830 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45180 1 109 1 2025-10-17 18:55:28.830 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50953 1 80 1 2025-10-17 18:51:50.943 00:05:10.011 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2612 1 2025-10-17 18:56:29.139 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49705 1 80 1 2025-10-17 18:56:29.139 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35964 1 109 1 2025-10-17 18:56:29.128 00:00:00.000 UDP 28.104.0.1:49705 -> 198.28.0.2:53 1 64 1 2025-10-17 18:56:29.128 00:00:00.000 UDP 28.104.0.1:35964 -> 198.28.0.2:53 1 64 1 2025-10-17 18:51:52.711 00:05:50.974 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-17 18:51:52.779 00:06:00.126 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-17 18:57:29.434 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58845 1 80 1 2025-10-17 18:57:29.434 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55896 1 109 1 2025-10-17 18:57:29.424 00:00:00.000 UDP 28.104.0.1:58845 -> 198.28.0.2:53 1 64 1 2025-10-17 18:57:29.424 00:00:00.000 UDP 28.104.0.1:55896 -> 198.28.0.2:53 1 64 1 2025-10-17 18:58:29.742 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54392 1 109 1 2025-10-17 18:58:29.741 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56747 1 80 1 2025-10-17 18:58:29.731 00:00:00.000 UDP 28.104.0.1:54392 -> 198.28.0.2:53 1 64 1 2025-10-17 18:58:29.731 00:00:00.000 UDP 28.104.0.1:56747 -> 198.28.0.2:53 1 64 1 2025-10-17 18:53:52.619 00:06:00.162 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 Summary: total flows: 321, total bytes: 95262, total packets: 1407, avg bps: 195, avg pps: 0, avg bpp: 67 Time window: 2025-10-17 17:54:52 - 2025-10-17 18:59:52 Total flows processed: 321, passed: 321, Blocks skipped: 0, Bytes read: 33448 Sys: 0.0042s User: 0.0017s Wall: 0.0040s flows/second: 80107.8 Runtime: 0.0040s