Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-18 09:59:01.063 00:00:00.000 UDP 28.104.0.1:43941 -> 198.28.0.2:53 1 64 1 2025-10-18 09:59:01.063 00:00:00.000 UDP 28.104.0.1:41013 -> 198.28.0.2:53 1 64 1 2025-10-18 09:59:01.074 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41013 1 109 1 2025-10-18 09:59:01.073 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43941 1 80 1 2025-10-18 09:59:20.595 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-18 09:54:53.100 00:05:51.023 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-18 10:00:01.365 00:00:00.000 UDP 28.104.0.1:49015 -> 198.28.0.2:53 1 64 1 2025-10-18 10:00:01.365 00:00:00.000 UDP 28.104.0.1:44141 -> 198.28.0.2:53 1 64 1 2025-10-18 10:00:01.376 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49015 1 109 1 2025-10-18 10:00:01.376 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44141 1 80 1 2025-10-18 09:55:53.183 00:05:50.891 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-18 10:01:01.671 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44397 1 80 1 2025-10-18 10:01:01.671 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35171 1 109 1 2025-10-18 10:01:01.661 00:00:00.000 UDP 28.104.0.1:44397 -> 198.28.0.2:53 1 64 1 2025-10-18 10:01:01.661 00:00:00.000 UDP 28.104.0.1:35171 -> 198.28.0.2:53 1 64 1 2025-10-18 09:56:53.110 00:05:50.962 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-18 09:57:53.172 00:04:00.081 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-10-18 09:57:42.129 00:05:10.030 OSPF 28.0.2.2:0 -> 224.0.0.5:0 38 2720 1 2025-10-18 10:02:02.240 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48770 1 109 1 2025-10-18 10:02:02.240 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51925 1 80 1 2025-10-18 10:02:02.229 00:00:00.000 UDP 28.104.0.1:51925 -> 198.28.0.2:53 1 64 1 2025-10-18 10:02:02.229 00:00:00.000 UDP 28.104.0.1:48770 -> 198.28.0.2:53 1 64 1 2025-10-18 09:58:52.939 00:05:00.236 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-10-18 10:03:02.538 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38732 1 109 1 2025-10-18 10:03:02.538 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56353 1 80 1 2025-10-18 10:03:02.527 00:00:00.000 UDP 28.104.0.1:38732 -> 198.28.0.2:53 1 64 1 2025-10-18 10:03:02.527 00:00:00.000 UDP 28.104.0.1:56353 -> 198.28.0.2:53 1 64 1 2025-10-18 10:04:02.882 00:00:00.000 UDP 28.104.0.1:46615 -> 198.28.0.2:53 1 64 1 2025-10-18 10:04:02.882 00:00:00.000 UDP 28.104.0.1:33149 -> 198.28.0.2:53 1 64 1 2025-10-18 10:04:02.892 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33149 1 80 1 2025-10-18 10:04:02.892 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46615 1 109 1 2025-10-18 10:04:20.738 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-18 09:59:53.176 00:05:50.908 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-18 10:05:03.145 00:00:00.000 UDP 28.104.0.1:57170 -> 198.28.0.2:53 1 64 1 2025-10-18 10:05:03.145 00:00:00.000 UDP 28.104.0.1:51007 -> 198.28.0.2:53 1 64 1 2025-10-18 10:05:03.155 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51007 1 109 1 2025-10-18 10:05:03.155 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57170 1 80 1 2025-10-18 10:00:53.108 00:05:51.017 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-18 10:06:03.463 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34712 1 80 1 2025-10-18 10:06:03.464 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56552 1 109 1 2025-10-18 10:06:03.456 00:00:00.000 UDP 28.104.0.1:56552 -> 198.28.0.2:53 1 64 1 2025-10-18 10:06:03.455 00:00:00.000 UDP 28.104.0.1:34712 -> 198.28.0.2:53 1 64 1 2025-10-18 10:01:53.185 00:05:50.888 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-18 10:02:53.176 00:04:00.078 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-10-18 10:07:03.784 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55712 1 80 1 2025-10-18 10:07:03.783 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43331 1 109 1 2025-10-18 10:07:03.774 00:00:00.000 UDP 28.104.0.1:55712 -> 198.28.0.2:53 1 64 1 2025-10-18 10:07:03.774 00:00:00.000 UDP 28.104.0.1:43331 -> 198.28.0.2:53 1 64 1 2025-10-18 10:03:02.140 00:05:10.009 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2532 1 2025-10-18 10:02:53.117 00:05:50.956 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-18 10:08:04.063 00:00:00.000 UDP 28.104.0.1:58240 -> 198.28.0.2:53 1 64 1 2025-10-18 10:08:04.064 00:00:00.000 UDP 28.104.0.1:56032 -> 198.28.0.2:53 1 64 1 2025-10-18 10:08:04.073 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58240 1 80 1 2025-10-18 10:08:04.074 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56032 1 109 1 2025-10-18 10:04:52.938 00:05:00.240 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-10-18 10:09:04.378 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35170 1 80 1 2025-10-18 10:09:04.379 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59636 1 109 1 2025-10-18 10:09:04.367 00:00:00.000 UDP 28.104.0.1:35170 -> 198.28.0.2:53 1 64 1 2025-10-18 10:09:04.368 00:00:00.000 UDP 28.104.0.1:59636 -> 198.28.0.2:53 1 64 1 2025-10-18 10:09:20.737 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-18 10:10:04.673 00:00:00.000 UDP 28.104.0.1:52464 -> 198.28.0.2:53 1 64 1 2025-10-18 10:10:04.673 00:00:00.000 UDP 28.104.0.1:40557 -> 198.28.0.2:53 1 64 1 2025-10-18 10:10:04.683 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52464 1 109 1 2025-10-18 10:10:04.684 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40557 1 80 1 2025-10-18 10:05:53.177 00:05:50.906 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-18 10:11:04.976 00:00:00.000 UDP 28.104.0.1:51244 -> 198.28.0.2:53 1 64 1 2025-10-18 10:11:04.976 00:00:00.000 UDP 28.104.0.1:33531 -> 198.28.0.2:53 1 64 1 2025-10-18 10:11:04.986 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33531 1 109 1 2025-10-18 10:11:04.986 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51244 1 80 1 2025-10-18 10:06:53.107 00:05:51.016 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-18 10:07:53.178 00:04:00.078 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-10-18 10:12:05.632 00:00:00.000 UDP 28.104.0.1:56469 -> 198.28.0.2:53 1 64 1 2025-10-18 10:12:05.632 00:00:00.000 UDP 28.104.0.1:45940 -> 198.28.0.2:53 1 64 1 2025-10-18 10:12:05.643 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56469 1 109 1 2025-10-18 10:12:05.643 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45940 1 80 1 2025-10-18 10:08:22.151 00:05:10.019 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2468 1 2025-10-18 10:07:53.187 00:05:50.892 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-18 10:13:05.943 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35923 1 109 1 2025-10-18 10:13:05.944 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47883 1 80 1 2025-10-18 10:13:05.933 00:00:00.000 UDP 28.104.0.1:47883 -> 198.28.0.2:53 1 64 1 2025-10-18 10:13:05.932 00:00:00.000 UDP 28.104.0.1:35923 -> 198.28.0.2:53 1 64 1 2025-10-18 10:08:53.118 00:05:50.956 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-18 10:14:06.240 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38866 1 80 1 2025-10-18 10:14:06.240 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60262 1 109 1 2025-10-18 10:14:06.230 00:00:00.000 UDP 28.104.0.1:38866 -> 198.28.0.2:53 1 64 1 2025-10-18 10:14:06.230 00:00:00.000 UDP 28.104.0.1:60262 -> 198.28.0.2:53 1 64 1 2025-10-18 10:14:21.110 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-18 10:10:52.950 00:05:00.231 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-10-18 10:15:06.536 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45119 1 80 1 2025-10-18 10:15:06.536 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49726 1 109 1 2025-10-18 10:15:06.525 00:00:00.000 UDP 28.104.0.1:49726 -> 198.28.0.2:53 1 64 1 2025-10-18 10:15:06.525 00:00:00.000 UDP 28.104.0.1:45119 -> 198.28.0.2:53 1 64 1 2025-10-18 10:16:06.826 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52292 1 80 1 2025-10-18 10:16:06.826 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46373 1 109 1 2025-10-18 10:16:06.815 00:00:00.000 UDP 28.104.0.1:46373 -> 198.28.0.2:53 1 64 1 2025-10-18 10:16:06.815 00:00:00.000 UDP 28.104.0.1:52292 -> 198.28.0.2:53 1 64 1 2025-10-18 10:11:53.180 00:05:50.904 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-18 10:12:53.180 00:04:00.076 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-10-18 10:17:07.074 00:00:00.000 UDP 28.104.0.1:43965 -> 198.28.0.2:53 1 64 1 2025-10-18 10:17:07.074 00:00:00.000 UDP 28.104.0.1:53813 -> 198.28.0.2:53 1 64 1 2025-10-18 10:17:07.086 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43965 1 80 1 2025-10-18 10:17:07.086 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53813 1 109 1 2025-10-18 10:12:53.109 00:05:51.015 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-18 10:13:42.168 00:05:10.008 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2680 1 2025-10-18 10:18:07.366 00:00:00.000 UDP 28.104.0.1:55829 -> 198.28.0.2:53 1 64 1 2025-10-18 10:18:07.366 00:00:00.000 UDP 28.104.0.1:51070 -> 198.28.0.2:53 1 64 1 2025-10-18 10:18:07.376 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55829 1 109 1 2025-10-18 10:18:07.376 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51070 1 80 1 2025-10-18 10:13:53.191 00:05:50.884 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-18 10:19:07.677 00:00:00.000 UDP 28.104.0.1:44646 -> 198.28.0.2:53 1 64 1 2025-10-18 10:19:07.677 00:00:00.000 UDP 28.104.0.1:39843 -> 198.28.0.2:53 1 64 1 2025-10-18 10:19:07.687 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44646 1 109 1 2025-10-18 10:19:07.687 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39843 1 80 1 2025-10-18 10:19:21.220 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-18 10:14:53.119 00:05:50.956 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-18 10:20:07.967 00:00:00.000 UDP 28.104.0.1:46320 -> 198.28.0.2:53 1 64 1 2025-10-18 10:20:07.967 00:00:00.000 UDP 28.104.0.1:50910 -> 198.28.0.2:53 1 64 1 2025-10-18 10:20:07.976 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46320 1 80 1 2025-10-18 10:20:07.976 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50910 1 109 1 2025-10-18 10:16:52.940 00:05:00.244 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-10-18 10:21:08.261 00:00:00.000 UDP 28.104.0.1:33320 -> 198.28.0.2:53 1 64 1 2025-10-18 10:21:08.261 00:00:00.000 UDP 28.104.0.1:35216 -> 198.28.0.2:53 1 64 1 2025-10-18 10:21:08.272 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35216 1 109 1 2025-10-18 10:21:08.272 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33320 1 80 1 2025-10-18 10:22:08.563 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41655 1 80 1 2025-10-18 10:22:08.563 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46105 1 109 1 2025-10-18 10:22:08.552 00:00:00.000 UDP 28.104.0.1:41655 -> 198.28.0.2:53 1 64 1 2025-10-18 10:22:08.552 00:00:00.000 UDP 28.104.0.1:46105 -> 198.28.0.2:53 1 64 1 2025-10-18 10:17:53.181 00:05:50.908 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-18 10:17:53.181 00:06:00.078 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-18 10:23:08.860 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50702 1 80 1 2025-10-18 10:23:08.860 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40396 1 109 1 2025-10-18 10:23:08.848 00:00:00.000 UDP 28.104.0.1:50702 -> 198.28.0.2:53 1 64 1 2025-10-18 10:23:08.848 00:00:00.000 UDP 28.104.0.1:40396 -> 198.28.0.2:53 1 64 1 2025-10-18 10:19:02.176 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2400 1 2025-10-18 10:18:53.110 00:05:51.019 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-18 10:24:09.185 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35911 1 109 1 2025-10-18 10:24:09.185 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33404 1 80 1 2025-10-18 10:24:09.175 00:00:00.000 UDP 28.104.0.1:35911 -> 198.28.0.2:53 1 64 1 2025-10-18 10:24:09.175 00:00:00.000 UDP 28.104.0.1:33404 -> 198.28.0.2:53 1 64 1 2025-10-18 10:24:20.830 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-18 10:19:53.195 00:05:50.884 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-18 10:25:09.472 00:00:00.000 UDP 28.104.0.1:50550 -> 198.28.0.2:53 1 64 1 2025-10-18 10:25:09.471 00:00:00.000 UDP 28.104.0.1:46114 -> 198.28.0.2:53 1 64 1 2025-10-18 10:25:09.482 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46114 1 109 1 2025-10-18 10:25:09.483 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50550 1 80 1 2025-10-18 10:20:53.124 00:05:50.955 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-18 10:26:09.768 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57181 1 80 1 2025-10-18 10:26:09.768 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54512 1 109 1 2025-10-18 10:26:09.760 00:00:00.000 UDP 28.104.0.1:57181 -> 198.28.0.2:53 1 64 1 2025-10-18 10:26:09.760 00:00:00.000 UDP 28.104.0.1:54512 -> 198.28.0.2:53 1 64 1 2025-10-18 10:22:52.945 00:05:00.242 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-10-18 10:27:10.068 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47967 1 80 1 2025-10-18 10:27:10.068 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52568 1 109 1 2025-10-18 10:27:10.060 00:00:00.000 UDP 28.104.0.1:47967 -> 198.28.0.2:53 1 64 1 2025-10-18 10:27:10.060 00:00:00.000 UDP 28.104.0.1:52568 -> 198.28.0.2:53 1 64 1 2025-10-18 10:28:10.370 00:00:00.000 UDP 28.104.0.1:33721 -> 198.28.0.2:53 1 64 1 2025-10-18 10:28:10.370 00:00:00.000 UDP 28.104.0.1:57919 -> 198.28.0.2:53 1 64 1 2025-10-18 10:28:10.381 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33721 1 80 1 2025-10-18 10:28:10.381 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57919 1 109 1 2025-10-18 10:24:22.182 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2664 1 2025-10-18 10:23:53.185 00:05:50.905 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-18 10:24:53.185 00:04:00.075 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-10-18 10:29:10.671 00:00:00.000 UDP 28.104.0.1:43558 -> 198.28.0.2:53 1 64 1 2025-10-18 10:29:10.671 00:00:00.000 UDP 28.104.0.1:37821 -> 198.28.0.2:53 1 64 1 2025-10-18 10:29:10.682 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37821 1 109 1 2025-10-18 10:29:10.682 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43558 1 80 1 2025-10-18 10:29:21.044 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-18 10:24:53.115 00:05:51.016 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-18 10:30:10.968 00:00:00.000 UDP 28.104.0.1:49316 -> 198.28.0.2:53 1 64 1 2025-10-18 10:30:10.968 00:00:00.000 UDP 28.104.0.1:40709 -> 198.28.0.2:53 1 64 1 2025-10-18 10:30:10.979 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40709 1 80 1 2025-10-18 10:30:10.979 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49316 1 109 1 2025-10-18 10:25:53.196 00:05:50.885 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-18 10:31:11.275 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57828 1 80 1 2025-10-18 10:31:11.275 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35346 1 109 1 2025-10-18 10:31:11.266 00:00:00.000 UDP 28.104.0.1:35346 -> 198.28.0.2:53 1 64 1 2025-10-18 10:31:11.266 00:00:00.000 UDP 28.104.0.1:57828 -> 198.28.0.2:53 1 64 1 2025-10-18 10:26:53.124 00:05:50.955 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-18 10:32:11.556 00:00:00.000 UDP 28.104.0.1:48844 -> 198.28.0.2:53 1 64 1 2025-10-18 10:32:11.557 00:00:00.000 UDP 28.104.0.1:43805 -> 198.28.0.2:53 1 64 1 2025-10-18 10:32:11.567 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48844 1 80 1 2025-10-18 10:32:11.567 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43805 1 109 1 2025-10-18 10:28:52.946 00:05:00.245 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-10-18 10:33:11.813 00:00:00.000 UDP 28.104.0.1:42737 -> 198.28.0.2:53 1 64 1 2025-10-18 10:33:11.813 00:00:00.000 UDP 28.104.0.1:60169 -> 198.28.0.2:53 1 64 1 2025-10-18 10:33:11.822 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60169 1 80 1 2025-10-18 10:33:11.822 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42737 1 109 1 2025-10-18 10:29:53.189 00:04:00.075 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-10-18 10:29:42.189 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 39 2756 1 2025-10-18 10:34:12.106 00:00:00.000 UDP 28.104.0.1:55668 -> 198.28.0.2:53 1 64 1 2025-10-18 10:34:12.106 00:00:00.000 UDP 28.104.0.1:42093 -> 198.28.0.2:53 1 64 1 2025-10-18 10:34:12.116 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55668 1 80 1 2025-10-18 10:34:12.116 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42093 1 109 1 2025-10-18 10:34:21.361 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-18 10:29:53.188 00:05:50.903 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-18 10:35:12.362 00:00:00.000 UDP 28.104.0.1:56050 -> 198.28.0.2:53 1 64 1 2025-10-18 10:35:12.361 00:00:00.000 UDP 28.104.0.1:38333 -> 198.28.0.2:53 1 64 1 2025-10-18 10:35:12.373 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38333 1 80 1 2025-10-18 10:35:12.374 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56050 1 109 1 2025-10-18 10:30:53.117 00:05:51.014 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-18 10:36:12.699 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35092 1 109 1 2025-10-18 10:36:12.699 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51192 1 80 1 2025-10-18 10:36:12.689 00:00:00.000 UDP 28.104.0.1:51192 -> 198.28.0.2:53 1 64 1 2025-10-18 10:36:12.689 00:00:00.000 UDP 28.104.0.1:35092 -> 198.28.0.2:53 1 64 1 2025-10-18 10:31:53.200 00:05:50.881 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-18 10:37:12.984 00:00:00.000 UDP 28.104.0.1:37490 -> 198.28.0.2:53 1 64 1 2025-10-18 10:37:12.984 00:00:00.000 UDP 28.104.0.1:33645 -> 198.28.0.2:53 1 64 1 2025-10-18 10:37:12.995 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37490 1 80 1 2025-10-18 10:37:12.995 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33645 1 109 1 2025-10-18 10:32:53.127 00:05:50.954 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-18 10:38:13.249 00:00:00.000 UDP 28.104.0.1:44956 -> 198.28.0.2:53 1 64 1 2025-10-18 10:38:13.249 00:00:00.000 UDP 28.104.0.1:48797 -> 198.28.0.2:53 1 64 1 2025-10-18 10:38:13.259 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48797 1 109 1 2025-10-18 10:38:13.259 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44956 1 80 1 2025-10-18 10:34:53.192 00:04:00.074 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-10-18 10:34:52.945 00:05:00.246 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-10-18 10:39:13.537 00:00:00.000 UDP 28.104.0.1:38443 -> 198.28.0.2:53 1 64 1 2025-10-18 10:39:13.537 00:00:00.000 UDP 28.104.0.1:43161 -> 198.28.0.2:53 1 64 1 2025-10-18 10:35:02.194 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2336 1 2025-10-18 10:39:13.548 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38443 1 80 1 2025-10-18 10:39:13.548 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43161 1 109 1 2025-10-18 10:39:21.541 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-18 10:40:13.827 00:00:00.000 UDP 28.104.0.1:53448 -> 198.28.0.2:53 1 64 1 2025-10-18 10:40:13.827 00:00:00.000 UDP 28.104.0.1:60818 -> 198.28.0.2:53 1 64 1 2025-10-18 10:40:13.838 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60818 1 109 1 2025-10-18 10:40:13.838 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53448 1 80 1 2025-10-18 10:35:53.191 00:05:50.902 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-18 10:41:14.128 00:00:00.000 UDP 28.104.0.1:45823 -> 198.28.0.2:53 1 64 1 2025-10-18 10:41:14.128 00:00:00.000 UDP 28.104.0.1:52517 -> 198.28.0.2:53 1 64 1 2025-10-18 10:41:14.138 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52517 1 109 1 2025-10-18 10:41:14.139 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45823 1 80 1 2025-10-18 10:36:53.118 00:05:51.013 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-18 10:42:14.423 00:00:00.000 UDP 28.104.0.1:47088 -> 198.28.0.2:53 1 64 1 2025-10-18 10:42:14.423 00:00:00.000 UDP 28.104.0.1:35583 -> 198.28.0.2:53 1 64 1 2025-10-18 10:42:14.433 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35583 1 80 1 2025-10-18 10:42:14.434 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47088 1 109 1 2025-10-18 10:37:53.201 00:05:50.880 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-18 10:43:14.732 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54480 1 80 1 2025-10-18 10:43:14.732 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43240 1 109 1 2025-10-18 10:43:14.723 00:00:00.000 UDP 28.104.0.1:54480 -> 198.28.0.2:53 1 64 1 2025-10-18 10:43:14.722 00:00:00.000 UDP 28.104.0.1:43240 -> 198.28.0.2:53 1 64 1 2025-10-18 10:38:53.130 00:05:50.952 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-18 10:39:53.191 00:04:00.074 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-10-18 10:44:15.068 00:00:00.000 UDP 28.104.0.1:56676 -> 198.28.0.2:53 1 64 1 2025-10-18 10:44:15.068 00:00:00.000 UDP 28.104.0.1:43821 -> 198.28.0.2:53 1 64 1 2025-10-18 10:44:15.080 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56676 1 80 1 2025-10-18 10:44:15.080 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43821 1 109 1 2025-10-18 10:44:21.453 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-18 10:40:22.199 00:05:10.008 OSPF 28.0.2.2:0 -> 224.0.0.5:0 38 2804 1 2025-10-18 10:40:52.950 00:05:00.243 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-10-18 10:45:15.357 00:00:00.000 UDP 28.104.0.1:60090 -> 198.28.0.2:53 1 64 1 2025-10-18 10:45:15.358 00:00:00.000 UDP 28.104.0.1:40784 -> 198.28.0.2:53 1 64 1 2025-10-18 10:45:15.368 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40784 1 109 1 2025-10-18 10:45:15.368 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60090 1 80 1 2025-10-18 10:46:15.650 00:00:00.000 UDP 28.104.0.1:57269 -> 198.28.0.2:53 1 64 1 2025-10-18 10:46:15.649 00:00:00.000 UDP 28.104.0.1:51154 -> 198.28.0.2:53 1 64 1 2025-10-18 10:46:15.660 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57269 1 109 1 2025-10-18 10:46:15.659 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51154 1 80 1 2025-10-18 10:41:53.191 00:05:50.901 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-18 10:47:15.951 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49039 1 80 1 2025-10-18 10:47:15.951 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56802 1 109 1 2025-10-18 10:47:15.941 00:00:00.000 UDP 28.104.0.1:49039 -> 198.28.0.2:53 1 64 1 2025-10-18 10:47:15.941 00:00:00.000 UDP 28.104.0.1:56802 -> 198.28.0.2:53 1 64 1 2025-10-18 10:42:53.122 00:05:51.010 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-18 10:48:16.241 00:00:00.000 UDP 28.104.0.1:58684 -> 198.28.0.2:53 1 64 1 2025-10-18 10:48:16.241 00:00:00.000 UDP 28.104.0.1:56992 -> 198.28.0.2:53 1 64 1 2025-10-18 10:48:16.252 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56992 1 109 1 2025-10-18 10:48:16.252 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58684 1 80 1 2025-10-18 10:43:53.202 00:05:50.881 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-18 10:44:53.193 00:04:00.075 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-10-18 10:49:16.536 00:00:00.000 UDP 28.104.0.1:49929 -> 198.28.0.2:53 1 64 1 2025-10-18 10:49:16.536 00:00:00.000 UDP 28.104.0.1:36973 -> 198.28.0.2:53 1 64 1 2025-10-18 10:49:16.548 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36973 1 109 1 2025-10-18 10:49:16.548 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49929 1 80 1 2025-10-18 10:49:21.848 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-18 10:44:53.133 00:05:50.950 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-18 10:45:42.209 00:05:10.002 OSPF 28.0.2.2:0 -> 224.0.0.5:0 32 2176 1 2025-10-18 10:50:16.823 00:00:00.000 UDP 28.104.0.1:34335 -> 198.28.0.2:53 1 64 1 2025-10-18 10:50:16.823 00:00:00.000 UDP 28.104.0.1:59735 -> 198.28.0.2:53 1 64 1 2025-10-18 10:50:16.832 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59735 1 109 1 2025-10-18 10:50:16.832 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34335 1 80 1 2025-10-18 10:46:52.952 00:05:00.242 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-10-18 10:51:17.127 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34705 1 109 1 2025-10-18 10:51:17.127 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60840 1 80 1 2025-10-18 10:51:17.116 00:00:00.000 UDP 28.104.0.1:34705 -> 198.28.0.2:53 1 64 1 2025-10-18 10:51:17.116 00:00:00.000 UDP 28.104.0.1:60840 -> 198.28.0.2:53 1 64 1 2025-10-18 10:52:17.421 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44573 1 80 1 2025-10-18 10:52:17.422 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57481 1 109 1 2025-10-18 10:52:17.410 00:00:00.000 UDP 28.104.0.1:44573 -> 198.28.0.2:53 1 64 1 2025-10-18 10:52:17.410 00:00:00.000 UDP 28.104.0.1:57481 -> 198.28.0.2:53 1 64 1 2025-10-18 10:47:53.193 00:05:50.899 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-18 10:53:17.665 00:00:00.000 UDP 28.104.0.1:53125 -> 198.28.0.2:53 1 64 1 2025-10-18 10:53:17.665 00:00:00.000 UDP 28.104.0.1:59120 -> 198.28.0.2:53 1 64 1 2025-10-18 10:53:17.677 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53125 1 109 1 2025-10-18 10:53:17.676 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59120 1 80 1 2025-10-18 10:48:53.125 00:05:51.009 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-18 10:49:53.194 00:04:00.074 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-10-18 10:54:17.958 00:00:00.000 UDP 28.104.0.1:50500 -> 198.28.0.2:53 1 64 1 2025-10-18 10:54:17.958 00:00:00.000 UDP 28.104.0.1:54911 -> 198.28.0.2:53 1 64 1 2025-10-18 10:54:17.968 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54911 1 80 1 2025-10-18 10:54:17.969 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50500 1 109 1 2025-10-18 10:54:21.611 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-18 10:49:53.206 00:05:50.879 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-18 10:51:02.210 00:05:10.008 OSPF 28.0.2.2:0 -> 224.0.0.5:0 38 2784 1 2025-10-18 10:55:18.258 00:00:00.000 UDP 28.104.0.1:36387 -> 198.28.0.2:53 1 64 1 2025-10-18 10:55:18.258 00:00:00.000 UDP 28.104.0.1:43973 -> 198.28.0.2:53 1 64 1 2025-10-18 10:55:18.269 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43973 1 80 1 2025-10-18 10:55:18.269 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36387 1 109 1 2025-10-18 10:50:53.134 00:05:50.949 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-18 10:54:53.195 00:01:00.073 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-18 10:56:18.553 00:00:00.000 UDP 28.104.0.1:38670 -> 198.28.0.2:53 1 64 1 2025-10-18 10:56:18.553 00:00:00.000 UDP 28.104.0.1:36762 -> 198.28.0.2:53 1 64 1 2025-10-18 10:56:18.564 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38670 1 80 1 2025-10-18 10:56:18.564 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36762 1 109 1 2025-10-18 10:52:52.953 00:05:00.243 TCP 28.154.0.1:179 -> 28.155.0.1:36643 12 738 1 2025-10-18 10:57:18.850 00:00:00.000 UDP 28.104.0.1:52689 -> 198.28.0.2:53 1 64 1 2025-10-18 10:57:18.850 00:00:00.000 UDP 28.104.0.1:34866 -> 198.28.0.2:53 1 64 1 2025-10-18 10:57:18.860 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52689 1 109 1 2025-10-18 10:57:18.860 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34866 1 80 1 2025-10-18 10:58:19.175 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58211 1 80 1 2025-10-18 10:58:19.175 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48837 1 109 1 2025-10-18 10:58:19.164 00:00:00.000 UDP 28.104.0.1:48837 -> 198.28.0.2:53 1 64 1 2025-10-18 10:58:19.163 00:00:00.000 UDP 28.104.0.1:58211 -> 198.28.0.2:53 1 64 1 2025-10-18 10:53:53.195 00:05:50.899 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 Summary: total flows: 325, total bytes: 94521, total packets: 1392, avg bps: 194, avg pps: 0, avg bpp: 67 Time window: 2025-10-18 09:54:53 - 2025-10-18 10:59:44 Total flows processed: 325, passed: 325, Blocks skipped: 0, Bytes read: 33864 Sys: 0.0044s User: 0.0035s Wall: 0.0044s flows/second: 74217.3 Runtime: 0.0044s