Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-18 01:59:11.017 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-18 01:54:52.927 00:05:50.906 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-18 01:54:52.852 00:05:51.021 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-18 01:55:52.927 00:05:00.148 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-10-18 01:59:54.304 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55224 1 109 1 2025-10-18 01:59:54.304 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53599 1 80 1 2025-10-18 01:59:54.293 00:00:00.000 UDP 28.104.0.1:53599 -> 198.28.0.2:53 1 64 1 2025-10-18 01:59:54.293 00:00:00.000 UDP 28.104.0.1:55224 -> 198.28.0.2:53 1 64 1 2025-10-18 01:56:43.821 00:05:09.118 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-18 02:00:54.601 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41684 1 80 1 2025-10-18 02:00:54.601 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38218 1 109 1 2025-10-18 02:00:54.592 00:00:00.000 UDP 28.104.0.1:38218 -> 198.28.0.2:53 1 64 1 2025-10-18 02:00:54.592 00:00:00.000 UDP 28.104.0.1:41684 -> 198.28.0.2:53 1 64 1 2025-10-18 02:01:54.885 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42747 1 80 1 2025-10-18 02:01:54.885 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57255 1 109 1 2025-10-18 02:01:54.876 00:00:00.000 UDP 28.104.0.1:57255 -> 198.28.0.2:53 1 64 1 2025-10-18 02:01:54.876 00:00:00.000 UDP 28.104.0.1:42747 -> 198.28.0.2:53 1 64 1 2025-10-18 01:58:01.526 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2532 1 2025-10-18 01:57:52.863 00:05:50.962 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-18 02:02:55.191 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59693 1 80 1 2025-10-18 02:02:55.192 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57513 1 109 1 2025-10-18 02:02:55.180 00:00:00.000 UDP 28.104.0.1:59693 -> 198.28.0.2:53 1 64 1 2025-10-18 02:02:55.181 00:00:00.000 UDP 28.104.0.1:57513 -> 198.28.0.2:53 1 64 1 2025-10-18 02:03:55.484 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41440 1 109 1 2025-10-18 02:03:55.484 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57917 1 80 1 2025-10-18 02:03:55.475 00:00:00.000 UDP 28.104.0.1:57917 -> 198.28.0.2:53 1 64 1 2025-10-18 02:03:55.475 00:00:00.000 UDP 28.104.0.1:41440 -> 198.28.0.2:53 1 64 1 2025-10-18 02:04:11.114 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-18 02:04:55.784 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55720 1 80 1 2025-10-18 02:04:55.784 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40180 1 109 1 2025-10-18 02:04:55.774 00:00:00.000 UDP 28.104.0.1:40180 -> 198.28.0.2:53 1 64 1 2025-10-18 02:04:55.774 00:00:00.000 UDP 28.104.0.1:55720 -> 198.28.0.2:53 1 64 1 2025-10-18 02:00:52.927 00:05:50.907 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-18 02:00:52.853 00:05:51.022 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-18 02:05:56.064 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38846 1 80 1 2025-10-18 02:05:56.064 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36719 1 109 1 2025-10-18 02:01:52.928 00:05:00.149 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-10-18 02:00:52.748 00:06:00.181 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-18 02:05:56.053 00:00:00.000 UDP 28.104.0.1:38846 -> 198.28.0.2:53 1 64 1 2025-10-18 02:05:56.054 00:00:00.000 UDP 28.104.0.1:36719 -> 198.28.0.2:53 1 64 1 2025-10-18 02:02:43.825 00:05:09.115 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-18 02:06:56.347 00:00:00.000 UDP 28.104.0.1:53691 -> 198.28.0.2:53 1 64 1 2025-10-18 02:06:56.347 00:00:00.000 UDP 28.104.0.1:45747 -> 198.28.0.2:53 1 64 1 2025-10-18 02:06:56.356 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45747 1 80 1 2025-10-18 02:06:56.356 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53691 1 109 1 2025-10-18 02:03:21.533 00:05:10.004 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2576 1 2025-10-18 02:07:56.592 00:00:00.000 UDP 28.104.0.1:41828 -> 198.28.0.2:53 1 64 1 2025-10-18 02:07:56.591 00:00:00.000 UDP 28.104.0.1:37389 -> 198.28.0.2:53 1 64 1 2025-10-18 02:07:56.602 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41828 1 109 1 2025-10-18 02:07:56.602 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37389 1 80 1 2025-10-18 02:03:52.864 00:05:50.961 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-18 02:08:56.912 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50986 1 80 1 2025-10-18 02:08:56.912 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60563 1 109 1 2025-10-18 02:08:56.901 00:00:00.000 UDP 28.104.0.1:50986 -> 198.28.0.2:53 1 64 1 2025-10-18 02:08:56.901 00:00:00.000 UDP 28.104.0.1:60563 -> 198.28.0.2:53 1 64 1 2025-10-18 02:09:11.500 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-18 02:09:57.213 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41325 1 80 1 2025-10-18 02:09:57.213 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50792 1 109 1 2025-10-18 02:09:57.202 00:00:00.000 UDP 28.104.0.1:50792 -> 198.28.0.2:53 1 64 1 2025-10-18 02:09:57.202 00:00:00.000 UDP 28.104.0.1:41325 -> 198.28.0.2:53 1 64 1 2025-10-18 02:10:57.503 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48745 1 109 1 2025-10-18 02:10:57.503 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58772 1 80 1 2025-10-18 02:10:57.493 00:00:00.000 UDP 28.104.0.1:58772 -> 198.28.0.2:53 1 64 1 2025-10-18 02:10:57.493 00:00:00.000 UDP 28.104.0.1:48745 -> 198.28.0.2:53 1 64 1 2025-10-18 02:06:52.930 00:05:50.909 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-18 02:06:52.855 00:05:51.024 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-18 02:07:52.930 00:05:00.150 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-10-18 02:11:57.789 00:00:00.000 UDP 28.104.0.1:45412 -> 198.28.0.2:53 1 64 1 2025-10-18 02:11:57.789 00:00:00.000 UDP 28.104.0.1:53057 -> 198.28.0.2:53 1 64 1 2025-10-18 02:11:57.799 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45412 1 109 1 2025-10-18 02:11:57.799 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53057 1 80 1 2025-10-18 02:08:43.825 00:05:09.115 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-18 02:07:52.753 00:06:00.179 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-18 02:08:41.538 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2564 1 2025-10-18 02:12:58.103 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37764 1 109 1 2025-10-18 02:12:58.103 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47802 1 80 1 2025-10-18 02:12:58.092 00:00:00.000 UDP 28.104.0.1:37764 -> 198.28.0.2:53 1 64 1 2025-10-18 02:12:58.092 00:00:00.000 UDP 28.104.0.1:47802 -> 198.28.0.2:53 1 64 1 2025-10-18 02:13:58.394 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60232 1 80 1 2025-10-18 02:13:58.394 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44803 1 109 1 2025-10-18 02:13:58.384 00:00:00.000 UDP 28.104.0.1:44803 -> 198.28.0.2:53 1 64 1 2025-10-18 02:13:58.383 00:00:00.000 UDP 28.104.0.1:60232 -> 198.28.0.2:53 1 64 1 2025-10-18 02:14:11.366 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-18 02:09:52.865 00:05:50.963 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-18 02:14:58.690 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56772 1 80 1 2025-10-18 02:14:58.690 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34748 1 109 1 2025-10-18 02:14:58.679 00:00:00.000 UDP 28.104.0.1:56772 -> 198.28.0.2:53 1 64 1 2025-10-18 02:14:58.679 00:00:00.000 UDP 28.104.0.1:34748 -> 198.28.0.2:53 1 64 1 2025-10-18 02:15:58.931 00:00:00.000 UDP 28.104.0.1:34676 -> 198.28.0.2:53 1 64 1 2025-10-18 02:15:58.932 00:00:00.000 UDP 28.104.0.1:60025 -> 198.28.0.2:53 1 64 1 2025-10-18 02:15:58.943 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34676 1 80 1 2025-10-18 02:15:58.942 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60025 1 109 1 2025-10-18 02:16:59.206 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55745 1 109 1 2025-10-18 02:16:59.206 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55408 1 80 1 2025-10-18 02:16:59.195 00:00:00.000 UDP 28.104.0.1:55408 -> 198.28.0.2:53 1 64 1 2025-10-18 02:16:59.195 00:00:00.000 UDP 28.104.0.1:55745 -> 198.28.0.2:53 1 64 1 2025-10-18 02:12:52.930 00:05:50.908 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-18 02:12:52.855 00:05:51.023 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-18 02:13:52.930 00:05:00.150 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-10-18 02:17:59.506 00:00:00.000 UDP 28.104.0.1:41250 -> 198.28.0.2:53 1 64 1 2025-10-18 02:17:59.506 00:00:00.000 UDP 28.104.0.1:43845 -> 198.28.0.2:53 1 64 1 2025-10-18 02:17:59.516 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41250 1 109 1 2025-10-18 02:17:59.517 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43845 1 80 1 2025-10-18 02:14:01.543 00:05:10.002 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2520 1 2025-10-18 02:14:43.828 00:05:09.114 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-18 02:18:59.812 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32860 1 80 1 2025-10-18 02:18:59.812 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40763 1 109 1 2025-10-18 02:18:59.801 00:00:00.000 UDP 28.104.0.1:32860 -> 198.28.0.2:53 1 64 1 2025-10-18 02:18:59.801 00:00:00.000 UDP 28.104.0.1:40763 -> 198.28.0.2:53 1 64 1 2025-10-18 02:19:11.365 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-18 02:14:52.753 00:06:00.179 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-18 02:20:00.113 00:00:00.000 UDP 28.104.0.1:57710 -> 198.28.0.2:53 1 64 1 2025-10-18 02:20:00.113 00:00:00.000 UDP 28.104.0.1:47231 -> 198.28.0.2:53 1 64 1 2025-10-18 02:20:00.124 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47231 1 80 1 2025-10-18 02:20:00.124 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57710 1 109 1 2025-10-18 02:15:52.866 00:05:50.963 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-18 02:21:00.417 00:00:00.000 UDP 28.104.0.1:58640 -> 198.28.0.2:53 1 64 1 2025-10-18 02:21:00.417 00:00:00.000 UDP 28.104.0.1:49964 -> 198.28.0.2:53 1 64 1 2025-10-18 02:21:00.427 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58640 1 80 1 2025-10-18 02:21:00.427 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49964 1 109 1 2025-10-18 02:22:00.734 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57470 1 109 1 2025-10-18 02:22:00.733 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33559 1 80 1 2025-10-18 02:22:00.724 00:00:00.000 UDP 28.104.0.1:33559 -> 198.28.0.2:53 1 64 1 2025-10-18 02:22:00.724 00:00:00.000 UDP 28.104.0.1:57470 -> 198.28.0.2:53 1 64 1 2025-10-18 02:23:01.078 00:00:00.000 UDP 28.104.0.1:56132 -> 198.28.0.2:53 1 64 1 2025-10-18 02:23:01.077 00:00:00.000 UDP 28.104.0.1:41347 -> 198.28.0.2:53 1 64 1 2025-10-18 02:23:01.088 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56132 1 80 1 2025-10-18 02:23:01.088 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41347 1 109 1 2025-10-18 02:19:21.545 00:05:10.053 OSPF 28.0.2.2:0 -> 224.0.0.5:0 38 2760 1 2025-10-18 02:18:52.933 00:05:50.907 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-18 02:18:52.858 00:05:51.022 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-18 02:19:52.933 00:05:00.154 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-10-18 02:24:01.375 00:00:00.000 UDP 28.104.0.1:52128 -> 198.28.0.2:53 1 64 1 2025-10-18 02:24:01.375 00:00:00.000 UDP 28.104.0.1:60244 -> 198.28.0.2:53 1 64 1 2025-10-18 02:24:01.385 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60244 1 109 1 2025-10-18 02:24:01.385 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52128 1 80 1 2025-10-18 02:24:11.718 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-18 02:20:43.829 00:05:09.115 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-18 02:25:01.676 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52098 1 80 1 2025-10-18 02:25:01.676 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48439 1 109 1 2025-10-18 02:25:01.666 00:00:00.000 UDP 28.104.0.1:48439 -> 198.28.0.2:53 1 64 1 2025-10-18 02:25:01.666 00:00:00.000 UDP 28.104.0.1:52098 -> 198.28.0.2:53 1 64 1 2025-10-18 02:26:01.973 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56623 1 80 1 2025-10-18 02:26:01.973 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56104 1 109 1 2025-10-18 02:26:01.964 00:00:00.000 UDP 28.104.0.1:56623 -> 198.28.0.2:53 1 64 1 2025-10-18 02:26:01.963 00:00:00.000 UDP 28.104.0.1:56104 -> 198.28.0.2:53 1 64 1 2025-10-18 02:21:52.870 00:05:50.972 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-18 02:21:52.755 00:06:00.178 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-18 02:27:02.273 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34574 1 109 1 2025-10-18 02:27:02.273 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51895 1 80 1 2025-10-18 02:27:02.263 00:00:00.000 UDP 28.104.0.1:34574 -> 198.28.0.2:53 1 64 1 2025-10-18 02:27:02.263 00:00:00.000 UDP 28.104.0.1:51895 -> 198.28.0.2:53 1 64 1 2025-10-18 02:28:02.578 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51044 1 80 1 2025-10-18 02:28:02.578 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60490 1 109 1 2025-10-18 02:28:02.557 00:00:00.000 UDP 28.104.0.1:60490 -> 198.28.0.2:53 1 64 1 2025-10-18 02:28:02.557 00:00:00.000 UDP 28.104.0.1:51044 -> 198.28.0.2:53 1 64 1 2025-10-18 02:24:41.548 00:05:10.002 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2480 1 2025-10-18 02:29:02.831 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33705 1 109 1 2025-10-18 02:29:02.831 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43926 1 80 1 2025-10-18 02:29:02.821 00:00:00.000 UDP 28.104.0.1:33705 -> 198.28.0.2:53 1 64 1 2025-10-18 02:29:02.821 00:00:00.000 UDP 28.104.0.1:43926 -> 198.28.0.2:53 1 64 1 2025-10-18 02:29:11.579 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-18 02:24:52.933 00:05:50.919 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-18 02:24:52.858 00:05:51.034 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-18 02:25:52.932 00:05:00.155 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-10-18 02:30:03.135 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36972 1 109 1 2025-10-18 02:30:03.135 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54698 1 80 1 2025-10-18 02:30:03.126 00:00:00.000 UDP 28.104.0.1:36972 -> 198.28.0.2:53 1 64 1 2025-10-18 02:30:03.126 00:00:00.000 UDP 28.104.0.1:54698 -> 198.28.0.2:53 1 64 1 2025-10-18 02:26:43.838 00:05:09.107 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-18 02:31:03.446 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45186 1 80 1 2025-10-18 02:31:03.449 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44422 1 109 1 2025-10-18 02:31:03.437 00:00:00.000 UDP 28.104.0.1:45186 -> 198.28.0.2:53 1 64 1 2025-10-18 02:31:03.437 00:00:00.000 UDP 28.104.0.1:44422 -> 198.28.0.2:53 1 64 1 2025-10-18 02:32:03.735 00:00:00.000 UDP 28.104.0.1:38459 -> 198.28.0.2:53 1 64 1 2025-10-18 02:32:03.735 00:00:00.000 UDP 28.104.0.1:57388 -> 198.28.0.2:53 1 64 1 2025-10-18 02:32:03.745 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38459 1 109 1 2025-10-18 02:32:03.745 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57388 1 80 1 2025-10-18 02:27:52.868 00:05:50.975 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-18 02:33:04.066 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49021 1 109 1 2025-10-18 02:33:04.066 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45993 1 80 1 2025-10-18 02:33:04.056 00:00:00.000 UDP 28.104.0.1:45993 -> 198.28.0.2:53 1 64 1 2025-10-18 02:33:04.056 00:00:00.000 UDP 28.104.0.1:49021 -> 198.28.0.2:53 1 64 1 2025-10-18 02:28:52.770 00:06:00.168 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-18 02:34:04.373 00:00:00.000 UDP 28.104.0.1:52303 -> 198.28.0.2:53 1 64 1 2025-10-18 02:34:04.373 00:00:00.000 UDP 28.104.0.1:37922 -> 198.28.0.2:53 1 64 1 2025-10-18 02:34:04.384 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37922 1 80 1 2025-10-18 02:34:04.384 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52303 1 109 1 2025-10-18 02:30:01.550 00:05:10.012 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2548 1 2025-10-18 02:34:11.580 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-18 02:35:04.679 00:00:00.000 UDP 28.104.0.1:40830 -> 198.28.0.2:53 1 64 1 2025-10-18 02:35:04.679 00:00:00.000 UDP 28.104.0.1:35565 -> 198.28.0.2:53 1 64 1 2025-10-18 02:35:04.688 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40830 1 109 1 2025-10-18 02:35:04.688 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35565 1 80 1 2025-10-18 02:30:52.936 00:05:50.920 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-18 02:30:52.859 00:05:51.038 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-18 02:31:52.935 00:05:00.154 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-10-18 02:36:04.975 00:00:00.000 UDP 28.104.0.1:39354 -> 198.28.0.2:53 1 64 1 2025-10-18 02:36:04.975 00:00:00.000 UDP 28.104.0.1:49535 -> 198.28.0.2:53 1 64 1 2025-10-18 02:36:04.984 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49535 1 109 1 2025-10-18 02:36:04.984 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39354 1 80 1 2025-10-18 02:32:43.842 00:05:09.106 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-18 02:37:05.287 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54575 1 80 1 2025-10-18 02:37:05.287 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60520 1 109 1 2025-10-18 02:37:05.277 00:00:00.000 UDP 28.104.0.1:54575 -> 198.28.0.2:53 1 64 1 2025-10-18 02:37:05.277 00:00:00.000 UDP 28.104.0.1:60520 -> 198.28.0.2:53 1 64 1 2025-10-18 02:38:05.589 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44012 1 109 1 2025-10-18 02:38:05.589 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36445 1 80 1 2025-10-18 02:38:05.579 00:00:00.000 UDP 28.104.0.1:36445 -> 198.28.0.2:53 1 64 1 2025-10-18 02:38:05.578 00:00:00.000 UDP 28.104.0.1:44012 -> 198.28.0.2:53 1 64 1 2025-10-18 02:33:52.874 00:05:50.972 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-18 02:39:05.883 00:00:00.000 UDP 28.104.0.1:57221 -> 198.28.0.2:53 1 64 1 2025-10-18 02:39:05.883 00:00:00.000 UDP 28.104.0.1:60459 -> 198.28.0.2:53 1 64 1 2025-10-18 02:39:05.892 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57221 1 109 1 2025-10-18 02:39:05.892 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60459 1 80 1 2025-10-18 02:39:11.577 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-18 02:35:21.562 00:05:10.009 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2724 1 2025-10-18 02:40:06.198 00:00:00.000 UDP 28.104.0.1:60439 -> 198.28.0.2:53 1 64 1 2025-10-18 02:40:06.199 00:00:00.000 UDP 28.104.0.1:59827 -> 198.28.0.2:53 1 64 1 2025-10-18 02:40:06.209 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59827 1 109 1 2025-10-18 02:40:06.209 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60439 1 80 1 2025-10-18 02:35:52.763 00:06:00.178 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-18 02:41:06.493 00:00:00.000 UDP 28.104.0.1:33039 -> 198.28.0.2:53 1 64 1 2025-10-18 02:41:06.493 00:00:00.000 UDP 28.104.0.1:49818 -> 198.28.0.2:53 1 64 1 2025-10-18 02:41:06.505 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33039 1 80 1 2025-10-18 02:41:06.505 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49818 1 109 1 2025-10-18 02:36:52.938 00:05:50.919 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-18 02:36:52.871 00:05:51.026 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-18 02:37:52.940 00:05:00.173 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-10-18 02:42:06.843 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44442 1 80 1 2025-10-18 02:42:06.843 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49509 1 109 1 2025-10-18 02:42:06.835 00:00:00.000 UDP 28.104.0.1:49509 -> 198.28.0.2:53 1 64 1 2025-10-18 02:42:06.835 00:00:00.000 UDP 28.104.0.1:44442 -> 198.28.0.2:53 1 64 1 2025-10-18 02:38:43.848 00:05:09.104 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-18 02:43:07.146 00:00:00.000 UDP 28.104.0.1:49493 -> 198.28.0.2:53 1 64 1 2025-10-18 02:43:07.146 00:00:00.000 UDP 28.104.0.1:33950 -> 198.28.0.2:53 1 64 1 2025-10-18 02:43:07.155 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33950 1 80 1 2025-10-18 02:43:07.155 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49493 1 109 1 2025-10-18 02:44:07.471 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49392 1 109 1 2025-10-18 02:44:07.472 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42809 1 80 1 2025-10-18 02:44:07.461 00:00:00.000 UDP 28.104.0.1:42809 -> 198.28.0.2:53 1 64 1 2025-10-18 02:44:07.461 00:00:00.000 UDP 28.104.0.1:49392 -> 198.28.0.2:53 1 64 1 2025-10-18 02:44:12.077 00:00:00.033 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-18 02:39:52.882 00:05:50.966 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-18 02:40:41.571 00:05:10.015 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2336 1 2025-10-18 02:45:07.769 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33253 1 109 1 2025-10-18 02:45:07.769 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45498 1 80 1 2025-10-18 02:45:07.758 00:00:00.000 UDP 28.104.0.1:33253 -> 198.28.0.2:53 1 64 1 2025-10-18 02:45:07.758 00:00:00.000 UDP 28.104.0.1:45498 -> 198.28.0.2:53 1 64 1 2025-10-18 02:46:08.078 00:00:00.000 UDP 28.104.0.1:33808 -> 198.28.0.2:53 1 64 1 2025-10-18 02:46:08.077 00:00:00.000 UDP 28.104.0.1:56818 -> 198.28.0.2:53 1 64 1 2025-10-18 02:46:08.089 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33808 1 80 1 2025-10-18 02:46:08.089 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56818 1 109 1 2025-10-18 02:47:08.380 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46861 1 80 1 2025-10-18 02:47:08.381 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53080 1 109 1 2025-10-18 02:47:08.372 00:00:00.000 UDP 28.104.0.1:53080 -> 198.28.0.2:53 1 64 1 2025-10-18 02:47:08.372 00:00:00.000 UDP 28.104.0.1:46861 -> 198.28.0.2:53 1 64 1 2025-10-18 02:42:52.941 00:05:50.920 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-18 02:42:52.872 00:05:51.029 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-18 02:43:52.941 00:05:00.174 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-10-18 02:42:52.764 00:06:00.178 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-18 02:48:08.727 00:00:00.000 UDP 28.104.0.1:37873 -> 198.28.0.2:53 1 64 1 2025-10-18 02:48:08.727 00:00:00.000 UDP 28.104.0.1:46478 -> 198.28.0.2:53 1 64 1 2025-10-18 02:48:08.739 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37873 1 109 1 2025-10-18 02:48:08.739 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46478 1 80 1 2025-10-18 02:44:43.848 00:05:09.103 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-18 02:49:11.887 00:00:00.027 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-18 02:49:09.063 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46850 1 109 1 2025-10-18 02:49:09.063 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50907 1 80 1 2025-10-18 02:49:09.052 00:00:00.000 UDP 28.104.0.1:50907 -> 198.28.0.2:53 1 64 1 2025-10-18 02:49:09.052 00:00:00.000 UDP 28.104.0.1:46850 -> 198.28.0.2:53 1 64 1 2025-10-18 02:50:09.365 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43408 1 80 1 2025-10-18 02:50:09.364 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40093 1 109 1 2025-10-18 02:50:09.353 00:00:00.000 UDP 28.104.0.1:40093 -> 198.28.0.2:53 1 64 1 2025-10-18 02:50:09.353 00:00:00.000 UDP 28.104.0.1:43408 -> 198.28.0.2:53 1 64 1 2025-10-18 02:46:01.586 00:05:10.004 OSPF 28.0.2.2:0 -> 224.0.0.5:0 39 2808 1 2025-10-18 02:45:52.882 00:05:50.970 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-18 02:51:09.664 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39826 1 80 1 2025-10-18 02:51:09.664 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33177 1 109 1 2025-10-18 02:51:09.653 00:00:00.000 UDP 28.104.0.1:39826 -> 198.28.0.2:53 1 64 1 2025-10-18 02:51:09.653 00:00:00.000 UDP 28.104.0.1:33177 -> 198.28.0.2:53 1 64 1 2025-10-18 02:52:09.958 00:00:00.000 UDP 28.104.0.1:52176 -> 198.28.0.2:53 1 64 1 2025-10-18 02:52:09.959 00:00:00.000 UDP 28.104.0.1:58665 -> 198.28.0.2:53 1 64 1 2025-10-18 02:52:09.969 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58665 1 80 1 2025-10-18 02:52:09.968 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52176 1 109 1 2025-10-18 02:53:10.269 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43162 1 109 1 2025-10-18 02:53:10.270 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40198 1 80 1 2025-10-18 02:53:10.259 00:00:00.000 UDP 28.104.0.1:43162 -> 198.28.0.2:53 1 64 1 2025-10-18 02:53:10.259 00:00:00.000 UDP 28.104.0.1:40198 -> 198.28.0.2:53 1 64 1 2025-10-18 02:48:52.941 00:05:50.921 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-18 02:48:52.873 00:05:51.029 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-18 02:49:52.941 00:05:00.175 TCP 28.154.0.1:179 -> 28.157.0.1:37077 12 738 1 2025-10-18 02:54:11.136 00:00:00.000 UDP 28.104.0.1:42388 -> 198.28.0.2:53 1 64 1 2025-10-18 02:54:11.136 00:00:00.000 UDP 28.104.0.1:51187 -> 198.28.0.2:53 1 64 1 2025-10-18 02:54:12.150 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-18 02:54:11.147 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51187 1 109 1 2025-10-18 02:54:11.146 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42388 1 80 1 2025-10-18 02:50:43.850 00:05:09.104 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-18 02:49:52.767 00:06:00.177 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-18 02:55:11.447 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43257 1 109 1 2025-10-18 02:55:11.447 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56764 1 80 1 2025-10-18 02:55:11.437 00:00:00.000 UDP 28.104.0.1:56764 -> 198.28.0.2:53 1 64 1 2025-10-18 02:55:11.437 00:00:00.000 UDP 28.104.0.1:43257 -> 198.28.0.2:53 1 64 1 2025-10-18 02:51:21.591 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2480 1 2025-10-18 02:56:11.731 00:00:00.000 UDP 28.104.0.1:49333 -> 198.28.0.2:53 1 64 1 2025-10-18 02:56:11.731 00:00:00.000 UDP 28.104.0.1:44379 -> 198.28.0.2:53 1 64 1 2025-10-18 02:56:11.741 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49333 1 80 1 2025-10-18 02:56:11.741 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44379 1 109 1 2025-10-18 02:51:52.886 00:05:50.970 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-18 02:57:12.055 00:00:00.000 UDP 28.104.0.1:46887 -> 198.28.0.2:53 1 64 1 2025-10-18 02:57:12.055 00:00:00.000 UDP 28.104.0.1:46018 -> 198.28.0.2:53 1 64 1 2025-10-18 02:57:12.066 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46887 1 109 1 2025-10-18 02:57:12.066 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46018 1 80 1 2025-10-18 02:58:12.415 00:00:00.000 UDP 28.104.0.1:55561 -> 198.28.0.2:53 1 64 1 2025-10-18 02:58:12.415 00:00:00.000 UDP 28.104.0.1:48493 -> 198.28.0.2:53 1 64 1 2025-10-18 02:58:12.424 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48493 1 109 1 2025-10-18 02:58:12.424 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55561 1 80 1 Summary: total flows: 317, total bytes: 93843, total packets: 1384, avg bps: 197, avg pps: 0, avg bpp: 67 Time window: 2025-10-18 01:54:52 - 2025-10-18 02:58:12 Total flows processed: 317, passed: 317, Blocks skipped: 0, Bytes read: 33032 Sys: 0.0027s User: 0.0036s Wall: 0.0035s flows/second: 90695.4 Runtime: 0.0035s