Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-18 17:59:30.393 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-18 17:54:53.315 00:05:50.982 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-18 17:59:52.426 00:00:00.000 UDP 28.104.0.1:44974 -> 198.28.0.2:53 1 64 1 2025-10-18 17:59:52.427 00:00:00.000 UDP 28.104.0.1:34559 -> 198.28.0.2:53 1 64 1 2025-10-18 17:59:52.436 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34559 1 80 1 2025-10-18 17:59:52.436 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44974 1 109 1 2025-10-18 17:56:32.820 00:05:10.012 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2416 1 2025-10-18 17:55:53.327 00:05:50.919 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-18 18:00:52.738 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37554 1 109 1 2025-10-18 18:00:52.738 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47065 1 80 1 2025-10-18 18:00:52.728 00:00:00.000 UDP 28.104.0.1:47065 -> 198.28.0.2:53 1 64 1 2025-10-18 18:00:52.728 00:00:00.000 UDP 28.104.0.1:37554 -> 198.28.0.2:53 1 64 1 2025-10-18 17:56:53.326 00:05:50.921 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-18 18:01:53.045 00:00:00.000 UDP 28.104.0.1:50803 -> 198.28.0.2:53 1 64 1 2025-10-18 17:57:53.321 00:04:00.071 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-10-18 18:01:53.045 00:00:00.000 UDP 28.104.0.1:58676 -> 198.28.0.2:53 1 64 1 2025-10-18 18:01:53.055 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50803 1 80 1 2025-10-18 18:01:53.055 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58676 1 109 1 2025-10-18 18:02:53.360 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54344 1 80 1 2025-10-18 18:02:53.361 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59142 1 109 1 2025-10-18 18:02:53.350 00:00:00.000 UDP 28.104.0.1:59142 -> 198.28.0.2:53 1 64 1 2025-10-18 18:02:53.350 00:00:00.000 UDP 28.104.0.1:54344 -> 198.28.0.2:53 1 64 1 2025-10-18 17:57:53.122 00:06:00.199 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-18 18:03:53.627 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42019 1 109 1 2025-10-18 18:03:53.627 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49736 1 80 1 2025-10-18 18:03:53.617 00:00:00.000 UDP 28.104.0.1:42019 -> 198.28.0.2:53 1 64 1 2025-10-18 18:03:53.617 00:00:00.000 UDP 28.104.0.1:49736 -> 198.28.0.2:53 1 64 1 2025-10-18 18:04:30.344 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-18 17:59:53.321 00:05:50.937 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-18 18:04:53.904 00:00:00.000 UDP 28.104.0.1:42466 -> 198.28.0.2:53 1 64 1 2025-10-18 18:04:53.904 00:00:00.000 UDP 28.104.0.1:41074 -> 198.28.0.2:53 1 64 1 2025-10-18 18:04:53.916 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41074 1 109 1 2025-10-18 18:04:53.916 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42466 1 80 1 2025-10-18 18:00:53.315 00:05:50.982 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-18 18:05:54.201 00:00:00.000 UDP 28.104.0.1:49251 -> 198.28.0.2:53 1 64 1 2025-10-18 18:05:54.201 00:00:00.000 UDP 28.104.0.1:60615 -> 198.28.0.2:53 1 64 1 2025-10-18 18:05:54.211 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49251 1 109 1 2025-10-18 18:05:54.211 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60615 1 80 1 2025-10-18 18:01:52.833 00:05:10.010 OSPF 28.0.2.2:0 -> 224.0.0.5:0 38 2800 1 2025-10-18 18:01:53.331 00:05:50.917 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-18 18:02:53.320 00:04:00.072 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-10-18 18:06:54.506 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39069 1 80 1 2025-10-18 18:06:54.506 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50209 1 109 1 2025-10-18 18:06:54.497 00:00:00.000 UDP 28.104.0.1:39069 -> 198.28.0.2:53 1 64 1 2025-10-18 18:06:54.497 00:00:00.000 UDP 28.104.0.1:50209 -> 198.28.0.2:53 1 64 1 2025-10-18 18:02:53.327 00:05:50.920 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-18 18:07:54.793 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34070 1 109 1 2025-10-18 18:07:54.793 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45844 1 80 1 2025-10-18 18:07:54.782 00:00:00.000 UDP 28.104.0.1:45844 -> 198.28.0.2:53 1 64 1 2025-10-18 18:07:54.782 00:00:00.000 UDP 28.104.0.1:34070 -> 198.28.0.2:53 1 64 1 2025-10-18 18:08:55.065 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57892 1 109 1 2025-10-18 18:08:55.065 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60355 1 80 1 2025-10-18 18:08:55.055 00:00:00.000 UDP 28.104.0.1:60355 -> 198.28.0.2:53 1 64 1 2025-10-18 18:08:55.055 00:00:00.000 UDP 28.104.0.1:57892 -> 198.28.0.2:53 1 64 1 2025-10-18 18:09:30.571 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-18 18:04:53.124 00:06:00.199 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-18 18:09:55.345 00:00:00.000 UDP 28.104.0.1:53223 -> 198.28.0.2:53 1 64 1 2025-10-18 18:09:55.345 00:00:00.000 UDP 28.104.0.1:53693 -> 198.28.0.2:53 1 64 1 2025-10-18 18:09:55.355 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53223 1 80 1 2025-10-18 18:09:55.356 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53693 1 109 1 2025-10-18 18:05:53.322 00:05:50.936 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-18 18:10:55.637 00:00:00.000 UDP 28.104.0.1:46621 -> 198.28.0.2:53 1 64 1 2025-10-18 18:10:55.637 00:00:00.000 UDP 28.104.0.1:56391 -> 198.28.0.2:53 1 64 1 2025-10-18 18:10:55.647 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56391 1 80 1 2025-10-18 18:10:55.647 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46621 1 109 1 2025-10-18 18:07:12.843 00:05:10.007 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2596 1 2025-10-18 18:06:53.317 00:05:50.981 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-18 18:11:55.944 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36954 1 80 1 2025-10-18 18:11:55.944 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44824 1 109 1 2025-10-18 18:07:53.322 00:04:00.073 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-10-18 18:11:55.933 00:00:00.000 UDP 28.104.0.1:36954 -> 198.28.0.2:53 1 64 1 2025-10-18 18:11:55.933 00:00:00.000 UDP 28.104.0.1:44824 -> 198.28.0.2:53 1 64 1 2025-10-18 18:07:53.332 00:05:50.915 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-18 18:12:56.334 00:00:00.000 UDP 28.104.0.1:58180 -> 198.28.0.2:53 1 64 1 2025-10-18 18:12:56.334 00:00:00.000 UDP 28.104.0.1:41461 -> 198.28.0.2:53 1 64 1 2025-10-18 18:12:56.344 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41461 1 80 1 2025-10-18 18:12:56.344 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58180 1 109 1 2025-10-18 18:08:53.327 00:05:50.921 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-18 18:12:53.324 00:01:00.073 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-18 18:11:53.127 00:02:00.198 TCP 28.154.0.1:179 -> 28.155.0.1:36643 6 369 1 2025-10-18 18:13:56.643 00:00:00.000 UDP 28.104.0.1:35014 -> 198.28.0.2:53 1 64 1 2025-10-18 18:13:56.643 00:00:00.000 UDP 28.104.0.1:41800 -> 198.28.0.2:53 1 64 1 2025-10-18 18:13:56.654 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41800 1 80 1 2025-10-18 18:13:56.653 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35014 1 109 1 2025-10-18 18:14:31.005 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-18 18:14:56.909 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46149 1 80 1 2025-10-18 18:14:56.909 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39479 1 109 1 2025-10-18 18:14:56.899 00:00:00.000 UDP 28.104.0.1:39479 -> 198.28.0.2:53 1 64 1 2025-10-18 18:14:56.899 00:00:00.000 UDP 28.104.0.1:46149 -> 198.28.0.2:53 1 64 1 2025-10-18 18:15:57.186 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46360 1 109 1 2025-10-18 18:15:57.186 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51951 1 80 1 2025-10-18 18:15:57.176 00:00:00.000 UDP 28.104.0.1:46360 -> 198.28.0.2:53 1 64 1 2025-10-18 18:15:57.176 00:00:00.000 UDP 28.104.0.1:51951 -> 198.28.0.2:53 1 64 1 2025-10-18 18:12:32.849 00:05:10.003 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2580 1 2025-10-18 18:11:53.322 00:05:50.938 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-18 18:14:53.324 00:02:00.072 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-18 18:16:57.445 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53355 1 109 1 2025-10-18 18:16:57.443 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54729 1 80 1 2025-10-18 18:16:57.435 00:00:00.000 UDP 28.104.0.1:53355 -> 198.28.0.2:53 1 64 1 2025-10-18 18:16:57.435 00:00:00.000 UDP 28.104.0.1:54729 -> 198.28.0.2:53 1 64 1 2025-10-18 18:12:53.319 00:05:50.981 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-18 18:17:57.714 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58126 1 80 1 2025-10-18 18:17:57.714 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51871 1 109 1 2025-10-18 18:17:57.705 00:00:00.000 UDP 28.104.0.1:58126 -> 198.28.0.2:53 1 64 1 2025-10-18 18:17:57.705 00:00:00.000 UDP 28.104.0.1:51871 -> 198.28.0.2:53 1 64 1 2025-10-18 18:13:53.334 00:05:50.917 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-18 18:17:53.325 00:01:00.071 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-18 18:14:53.126 00:04:00.199 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-18 18:18:57.962 00:00:00.000 UDP 28.104.0.1:51212 -> 198.28.0.2:53 1 64 1 2025-10-18 18:18:57.961 00:00:00.000 UDP 28.104.0.1:49407 -> 198.28.0.2:53 1 64 1 2025-10-18 18:18:57.971 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49407 1 80 1 2025-10-18 18:18:57.972 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51212 1 109 1 2025-10-18 18:19:30.660 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-18 18:14:53.327 00:05:50.924 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-18 18:19:58.273 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54212 1 109 1 2025-10-18 18:19:58.273 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33117 1 80 1 2025-10-18 18:19:58.262 00:00:00.000 UDP 28.104.0.1:33117 -> 198.28.0.2:53 1 64 1 2025-10-18 18:19:58.262 00:00:00.000 UDP 28.104.0.1:54212 -> 198.28.0.2:53 1 64 1 2025-10-18 18:20:58.568 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58380 1 80 1 2025-10-18 18:20:58.568 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58458 1 109 1 2025-10-18 18:20:58.559 00:00:00.000 UDP 28.104.0.1:58380 -> 198.28.0.2:53 1 64 1 2025-10-18 18:20:58.559 00:00:00.000 UDP 28.104.0.1:58458 -> 198.28.0.2:53 1 64 1 2025-10-18 18:19:53.327 00:02:00.072 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-18 18:21:58.866 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39084 1 80 1 2025-10-18 18:21:58.866 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54041 1 109 1 2025-10-18 18:21:58.856 00:00:00.000 UDP 28.104.0.1:39084 -> 198.28.0.2:53 1 64 1 2025-10-18 18:21:58.856 00:00:00.000 UDP 28.104.0.1:54041 -> 198.28.0.2:53 1 64 1 2025-10-18 18:17:52.851 00:05:10.003 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2560 1 2025-10-18 18:17:53.326 00:05:50.936 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-18 18:22:59.197 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49361 1 109 1 2025-10-18 18:22:59.197 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40980 1 80 1 2025-10-18 18:22:59.187 00:00:00.000 UDP 28.104.0.1:49361 -> 198.28.0.2:53 1 64 1 2025-10-18 18:22:59.187 00:00:00.000 UDP 28.104.0.1:40980 -> 198.28.0.2:53 1 64 1 2025-10-18 18:18:53.318 00:05:50.984 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-18 18:22:53.329 00:01:00.069 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-18 18:19:53.128 00:04:00.200 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-18 18:23:59.487 00:00:00.000 UDP 28.104.0.1:52637 -> 198.28.0.2:53 1 64 1 2025-10-18 18:23:59.488 00:00:00.000 UDP 28.104.0.1:58988 -> 198.28.0.2:53 1 64 1 2025-10-18 18:23:59.497 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52637 1 109 1 2025-10-18 18:23:59.497 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58988 1 80 1 2025-10-18 18:24:30.654 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-18 18:19:53.337 00:05:50.916 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-18 18:24:59.789 00:00:00.000 UDP 28.104.0.1:38712 -> 198.28.0.2:53 1 64 1 2025-10-18 18:24:59.789 00:00:00.000 UDP 28.104.0.1:32791 -> 198.28.0.2:53 1 64 1 2025-10-18 18:24:59.800 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:32791 1 109 1 2025-10-18 18:24:59.800 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38712 1 80 1 2025-10-18 18:20:53.329 00:05:50.924 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-18 18:26:00.101 00:00:00.000 UDP 28.104.0.1:52757 -> 198.28.0.2:53 1 64 1 2025-10-18 18:26:00.101 00:00:00.000 UDP 28.104.0.1:59273 -> 198.28.0.2:53 1 64 1 2025-10-18 18:26:00.112 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59273 1 80 1 2025-10-18 18:26:00.112 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52757 1 109 1 2025-10-18 18:24:53.329 00:02:00.076 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-18 18:27:00.414 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47288 1 80 1 2025-10-18 18:27:00.414 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33288 1 109 1 2025-10-18 18:27:00.404 00:00:00.000 UDP 28.104.0.1:47288 -> 198.28.0.2:53 1 64 1 2025-10-18 18:27:00.404 00:00:00.000 UDP 28.104.0.1:33288 -> 198.28.0.2:53 1 64 1 2025-10-18 18:23:12.855 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2400 1 2025-10-18 18:28:00.715 00:00:00.000 UDP 28.104.0.1:36462 -> 198.28.0.2:53 1 64 1 2025-10-18 18:28:00.715 00:00:00.000 UDP 28.104.0.1:35393 -> 198.28.0.2:53 1 64 1 2025-10-18 18:28:00.725 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36462 1 109 1 2025-10-18 18:28:00.725 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35393 1 80 1 2025-10-18 18:23:53.328 00:05:50.935 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-18 18:27:53.328 00:01:00.074 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-18 18:24:53.129 00:04:00.200 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-18 18:29:01.015 00:00:00.000 UDP 28.104.0.1:59270 -> 198.28.0.2:53 1 64 1 2025-10-18 18:29:01.016 00:00:00.000 UDP 28.104.0.1:42546 -> 198.28.0.2:53 1 64 1 2025-10-18 18:29:01.026 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59270 1 80 1 2025-10-18 18:29:01.027 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42546 1 109 1 2025-10-18 18:29:30.923 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-18 18:24:53.319 00:05:50.984 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-18 18:30:01.330 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59694 1 109 1 2025-10-18 18:30:01.330 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45230 1 80 1 2025-10-18 18:30:01.320 00:00:00.000 UDP 28.104.0.1:59694 -> 198.28.0.2:53 1 64 1 2025-10-18 18:30:01.320 00:00:00.000 UDP 28.104.0.1:45230 -> 198.28.0.2:53 1 64 1 2025-10-18 18:25:53.338 00:05:50.916 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-18 18:31:01.632 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48318 1 109 1 2025-10-18 18:31:01.632 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38940 1 80 1 2025-10-18 18:31:01.622 00:00:00.000 UDP 28.104.0.1:48318 -> 198.28.0.2:53 1 64 1 2025-10-18 18:31:01.622 00:00:00.000 UDP 28.104.0.1:38940 -> 198.28.0.2:53 1 64 1 2025-10-18 18:26:53.329 00:05:50.925 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-18 18:29:53.329 00:02:00.075 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-18 18:32:01.919 00:00:00.000 UDP 28.104.0.1:35926 -> 198.28.0.2:53 1 64 1 2025-10-18 18:32:01.919 00:00:00.000 UDP 28.104.0.1:59280 -> 198.28.0.2:53 1 64 1 2025-10-18 18:32:01.930 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35926 1 109 1 2025-10-18 18:32:01.930 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59280 1 80 1 2025-10-18 18:28:32.859 00:05:10.009 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2584 1 2025-10-18 18:33:02.208 00:00:00.000 UDP 28.104.0.1:40189 -> 198.28.0.2:53 1 64 1 2025-10-18 18:33:02.208 00:00:00.000 UDP 28.104.0.1:44936 -> 198.28.0.2:53 1 64 1 2025-10-18 18:33:02.217 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40189 1 109 1 2025-10-18 18:33:02.217 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44936 1 80 1 2025-10-18 18:29:53.132 00:04:00.199 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-18 18:32:53.331 00:01:00.076 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-18 18:34:02.772 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59776 1 109 1 2025-10-18 18:34:02.772 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37273 1 80 1 2025-10-18 18:34:02.762 00:00:00.000 UDP 28.104.0.1:37273 -> 198.28.0.2:53 1 64 1 2025-10-18 18:34:02.761 00:00:00.000 UDP 28.104.0.1:59776 -> 198.28.0.2:53 1 64 1 2025-10-18 18:34:30.859 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-18 18:29:53.328 00:05:50.936 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-18 18:35:03.083 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39787 1 80 1 2025-10-18 18:35:03.083 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60003 1 109 1 2025-10-18 18:35:03.075 00:00:00.000 UDP 28.104.0.1:39787 -> 198.28.0.2:53 1 64 1 2025-10-18 18:35:03.074 00:00:00.000 UDP 28.104.0.1:60003 -> 198.28.0.2:53 1 64 1 2025-10-18 18:30:53.320 00:05:50.984 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-18 18:36:03.365 00:00:00.000 UDP 28.104.0.1:57393 -> 198.28.0.2:53 1 64 1 2025-10-18 18:36:03.365 00:00:00.000 UDP 28.104.0.1:39771 -> 198.28.0.2:53 1 64 1 2025-10-18 18:36:03.375 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39771 1 109 1 2025-10-18 18:36:03.375 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57393 1 80 1 2025-10-18 18:31:53.341 00:05:50.913 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-18 18:37:03.671 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34502 1 109 1 2025-10-18 18:37:03.671 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49340 1 80 1 2025-10-18 18:37:03.661 00:00:00.000 UDP 28.104.0.1:34502 -> 198.28.0.2:53 1 64 1 2025-10-18 18:37:03.661 00:00:00.000 UDP 28.104.0.1:49340 -> 198.28.0.2:53 1 64 1 2025-10-18 18:32:53.334 00:05:50.922 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-18 18:33:51.832 00:05:01.040 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2612 1 2025-10-18 18:38:03.952 00:00:00.000 UDP 28.104.0.1:43705 -> 198.28.0.2:53 1 64 1 2025-10-18 18:38:03.952 00:00:00.000 UDP 28.104.0.1:53869 -> 198.28.0.2:53 1 64 1 2025-10-18 18:38:03.961 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43705 1 109 1 2025-10-18 18:38:03.963 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53869 1 80 1 2025-10-18 18:34:53.330 00:04:00.076 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-10-18 18:39:04.316 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51316 1 80 1 2025-10-18 18:39:04.317 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54390 1 109 1 2025-10-18 18:39:04.306 00:00:00.000 UDP 28.104.0.1:54390 -> 198.28.0.2:53 1 64 1 2025-10-18 18:39:04.306 00:00:00.000 UDP 28.104.0.1:51316 -> 198.28.0.2:53 1 64 1 2025-10-18 18:39:30.903 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-18 18:34:53.131 00:06:00.199 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-18 18:40:04.636 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54315 1 80 1 2025-10-18 18:40:04.636 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56348 1 109 1 2025-10-18 18:40:04.625 00:00:00.000 UDP 28.104.0.1:54315 -> 198.28.0.2:53 1 64 1 2025-10-18 18:40:04.625 00:00:00.000 UDP 28.104.0.1:56348 -> 198.28.0.2:53 1 64 1 2025-10-18 18:35:53.330 00:05:50.935 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-18 18:41:04.943 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48392 1 80 1 2025-10-18 18:41:04.943 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47086 1 109 1 2025-10-18 18:41:04.933 00:00:00.000 UDP 28.104.0.1:48392 -> 198.28.0.2:53 1 64 1 2025-10-18 18:41:04.933 00:00:00.000 UDP 28.104.0.1:47086 -> 198.28.0.2:53 1 64 1 2025-10-18 18:36:53.324 00:05:50.991 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-18 18:42:05.256 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33585 1 80 1 2025-10-18 18:42:05.256 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47449 1 109 1 2025-10-18 18:42:05.247 00:00:00.000 UDP 28.104.0.1:33585 -> 198.28.0.2:53 1 64 1 2025-10-18 18:42:05.247 00:00:00.000 UDP 28.104.0.1:47449 -> 198.28.0.2:53 1 64 1 2025-10-18 18:37:53.340 00:05:50.925 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-18 18:43:05.539 00:00:00.000 UDP 28.104.0.1:37880 -> 198.28.0.2:53 1 64 1 2025-10-18 18:43:05.539 00:00:00.000 UDP 28.104.0.1:52906 -> 198.28.0.2:53 1 64 1 2025-10-18 18:43:05.552 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52906 1 80 1 2025-10-18 18:43:05.551 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37880 1 109 1 2025-10-18 18:39:02.872 00:05:10.008 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2628 1 2025-10-18 18:38:53.333 00:05:50.931 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-18 18:39:53.331 00:04:00.076 TCP 28.154.0.1:179 -> 28.157.0.1:37077 10 615 1 2025-10-18 18:44:05.845 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53664 1 109 1 2025-10-18 18:44:05.847 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36238 1 80 1 2025-10-18 18:44:05.835 00:00:00.000 UDP 28.104.0.1:36238 -> 198.28.0.2:53 1 64 1 2025-10-18 18:44:05.835 00:00:00.000 UDP 28.104.0.1:53664 -> 198.28.0.2:53 1 64 1 2025-10-18 18:44:31.260 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-18 18:45:06.109 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43486 1 80 1 2025-10-18 18:45:06.109 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60201 1 109 1 2025-10-18 18:45:06.100 00:00:00.000 UDP 28.104.0.1:60201 -> 198.28.0.2:53 1 64 1 2025-10-18 18:45:06.100 00:00:00.000 UDP 28.104.0.1:43486 -> 198.28.0.2:53 1 64 1 2025-10-18 18:44:53.330 00:01:00.076 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-18 18:41:53.132 00:04:00.198 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-18 18:46:06.399 00:00:00.000 UDP 28.104.0.1:39794 -> 198.28.0.2:53 1 64 1 2025-10-18 18:46:06.399 00:00:00.000 UDP 28.104.0.1:41239 -> 198.28.0.2:53 1 64 1 2025-10-18 18:46:06.409 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41239 1 80 1 2025-10-18 18:46:06.409 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39794 1 109 1 2025-10-18 18:41:53.331 00:05:50.944 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-18 18:47:06.689 00:00:00.000 UDP 28.104.0.1:55070 -> 198.28.0.2:53 1 64 1 2025-10-18 18:47:06.690 00:00:00.000 UDP 28.104.0.1:48085 -> 198.28.0.2:53 1 64 1 2025-10-18 18:47:06.700 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55070 1 109 1 2025-10-18 18:47:06.700 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48085 1 80 1 2025-10-18 18:42:53.325 00:05:50.990 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-18 18:48:06.995 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58604 1 80 1 2025-10-18 18:48:06.995 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47059 1 109 1 2025-10-18 18:48:06.985 00:00:00.000 UDP 28.104.0.1:47059 -> 198.28.0.2:53 1 64 1 2025-10-18 18:48:06.985 00:00:00.000 UDP 28.104.0.1:58604 -> 198.28.0.2:53 1 64 1 2025-10-18 18:44:22.881 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2580 1 2025-10-18 18:43:53.341 00:05:50.925 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-18 18:46:53.332 00:02:00.075 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-18 18:49:07.284 00:00:00.000 UDP 28.104.0.1:59062 -> 198.28.0.2:53 1 64 1 2025-10-18 18:49:07.284 00:00:00.000 UDP 28.104.0.1:44045 -> 198.28.0.2:53 1 64 1 2025-10-18 18:49:07.295 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44045 1 80 1 2025-10-18 18:49:07.295 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59062 1 109 1 2025-10-18 18:49:31.266 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-18 18:44:53.337 00:05:50.931 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-18 18:50:07.585 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43310 1 80 1 2025-10-18 18:50:07.585 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49674 1 109 1 2025-10-18 18:50:07.574 00:00:00.000 UDP 28.104.0.1:43310 -> 198.28.0.2:53 1 64 1 2025-10-18 18:50:07.574 00:00:00.000 UDP 28.104.0.1:49674 -> 198.28.0.2:53 1 64 1 2025-10-18 18:46:53.136 00:04:00.196 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-18 18:49:53.332 00:01:00.076 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-18 18:51:07.893 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33187 1 109 1 2025-10-18 18:51:07.893 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55570 1 80 1 2025-10-18 18:51:07.882 00:00:00.000 UDP 28.104.0.1:33187 -> 198.28.0.2:53 1 64 1 2025-10-18 18:51:07.883 00:00:00.000 UDP 28.104.0.1:55570 -> 198.28.0.2:53 1 64 1 2025-10-18 18:52:08.198 00:00:00.000 UDP 28.104.0.1:55765 -> 198.28.0.2:53 1 64 1 2025-10-18 18:52:08.197 00:00:00.000 UDP 28.104.0.1:51520 -> 198.28.0.2:53 1 64 1 2025-10-18 18:52:08.208 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55765 1 109 1 2025-10-18 18:52:08.208 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51520 1 80 1 2025-10-18 18:47:53.331 00:05:50.948 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-18 18:53:08.494 00:00:00.000 UDP 28.104.0.1:38199 -> 198.28.0.2:53 1 64 1 2025-10-18 18:53:08.494 00:00:00.000 UDP 28.104.0.1:59278 -> 198.28.0.2:53 1 64 1 2025-10-18 18:53:08.503 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38199 1 109 1 2025-10-18 18:53:08.503 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59278 1 80 1 2025-10-18 18:48:53.326 00:05:50.993 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-18 18:51:53.332 00:02:00.077 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 2025-10-18 18:49:42.887 00:05:10.013 OSPF 28.0.2.2:0 -> 224.0.0.5:0 35 2440 1 2025-10-18 18:54:08.798 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34701 1 109 1 2025-10-18 18:54:08.798 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45624 1 80 1 2025-10-18 18:54:08.787 00:00:00.000 UDP 28.104.0.1:34701 -> 198.28.0.2:53 1 64 1 2025-10-18 18:54:08.787 00:00:00.000 UDP 28.104.0.1:45624 -> 198.28.0.2:53 1 64 1 2025-10-18 18:54:31.535 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-18 18:49:53.341 00:05:50.929 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-18 18:55:09.103 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39941 1 109 1 2025-10-18 18:55:09.103 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57325 1 80 1 2025-10-18 18:55:09.093 00:00:00.000 UDP 28.104.0.1:57325 -> 198.28.0.2:53 1 64 1 2025-10-18 18:55:09.093 00:00:00.000 UDP 28.104.0.1:39941 -> 198.28.0.2:53 1 64 1 2025-10-18 18:50:53.337 00:05:50.934 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-18 18:54:53.332 00:01:00.077 TCP 28.154.0.1:179 -> 28.157.0.1:37077 4 246 1 2025-10-18 18:51:53.137 00:04:00.196 TCP 28.154.0.1:179 -> 28.155.0.1:36643 10 615 1 2025-10-18 18:56:09.389 00:00:00.000 UDP 28.104.0.1:49688 -> 198.28.0.2:53 1 64 1 2025-10-18 18:56:09.389 00:00:00.000 UDP 28.104.0.1:47058 -> 198.28.0.2:53 1 64 1 2025-10-18 18:56:09.398 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49688 1 80 1 2025-10-18 18:56:09.398 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47058 1 109 1 2025-10-18 18:57:13.559 00:00:00.000 UDP 28.104.0.1:40328 -> 198.28.0.2:53 1 64 1 2025-10-18 18:57:13.560 00:00:00.000 UDP 28.104.0.1:56322 -> 198.28.0.2:53 1 64 1 2025-10-18 18:57:13.571 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40328 1 109 1 2025-10-18 18:57:13.571 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56322 1 80 1 2025-10-18 18:58:13.863 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40175 1 109 1 2025-10-18 18:58:13.863 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57712 1 80 1 2025-10-18 18:58:13.853 00:00:00.000 UDP 28.104.0.1:40175 -> 198.28.0.2:53 1 64 1 2025-10-18 18:58:13.853 00:00:00.000 UDP 28.104.0.1:57712 -> 198.28.0.2:53 1 64 1 2025-10-18 18:53:53.332 00:05:50.949 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-18 18:56:53.337 00:02:00.075 TCP 28.154.0.1:179 -> 28.157.0.1:37077 6 369 1 Summary: total flows: 330, total bytes: 94326, total packets: 1391, avg bps: 193, avg pps: 0, avg bpp: 67 Time window: 2025-10-18 17:54:53 - 2025-10-18 18:59:44 Total flows processed: 330, passed: 330, Blocks skipped: 0, Bytes read: 34384 Sys: 0.0047s User: 0.0012s Wall: 0.0039s flows/second: 84202.5 Runtime: 0.0039s