Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-24 00:59:16.303 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40216 1 80 1 2025-10-24 00:59:16.303 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54517 1 109 1 2025-10-24 00:59:16.293 00:00:00.000 UDP 28.104.0.1:40216 -> 198.28.0.2:53 1 64 1 2025-10-24 00:59:16.293 00:00:00.000 UDP 28.104.0.1:54517 -> 198.28.0.2:53 1 64 1 2025-10-24 01:00:16.595 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60556 1 109 1 2025-10-24 01:00:16.595 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38673 1 80 1 2025-10-24 01:00:16.585 00:00:00.000 UDP 28.104.0.1:38673 -> 198.28.0.2:53 1 64 1 2025-10-24 01:00:16.585 00:00:00.000 UDP 28.104.0.1:60556 -> 198.28.0.2:53 1 64 1 2025-10-24 00:56:46.694 00:05:09.069 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-24 01:01:17.415 00:00:00.000 UDP 28.104.0.1:38514 -> 198.28.0.2:53 1 64 1 2025-10-24 01:01:17.415 00:00:00.000 UDP 28.104.0.1:50168 -> 198.28.0.2:53 1 64 1 2025-10-24 01:01:17.425 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50168 1 80 1 2025-10-24 01:01:17.425 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38514 1 109 1 2025-10-24 00:56:55.717 00:06:00.047 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-24 01:02:03.067 00:00:00.042 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-24 01:02:17.721 00:00:00.000 UDP 28.104.0.1:46989 -> 198.28.0.2:53 1 64 1 2025-10-24 01:02:17.720 00:00:00.000 UDP 28.104.0.1:45064 -> 198.28.0.2:53 1 64 1 2025-10-24 01:02:17.731 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45064 1 109 1 2025-10-24 01:02:17.731 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46989 1 80 1 2025-10-24 00:58:43.611 00:05:10.013 OSPF 28.0.2.2:0 -> 224.0.0.5:0 41 3044 1 2025-10-24 01:03:17.979 00:00:00.000 UDP 28.104.0.1:58843 -> 198.28.0.2:53 1 64 1 2025-10-24 01:03:17.979 00:00:00.000 UDP 28.104.0.1:35033 -> 198.28.0.2:53 1 64 1 2025-10-24 01:03:17.990 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58843 1 109 1 2025-10-24 01:03:17.990 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35033 1 80 1 2025-10-24 00:58:55.717 00:05:50.991 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-24 01:04:18.284 00:00:00.000 UDP 28.104.0.1:45628 -> 198.28.0.2:53 1 64 1 2025-10-24 01:04:18.284 00:00:00.000 UDP 28.104.0.1:48491 -> 198.28.0.2:53 1 64 1 2025-10-24 01:04:18.296 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45628 1 80 1 2025-10-24 01:04:18.295 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48491 1 109 1 2025-10-24 00:59:55.728 00:05:50.969 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-24 00:59:55.753 00:05:50.994 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-24 00:59:55.638 00:06:00.082 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-24 01:05:18.583 00:00:00.000 UDP 28.104.0.1:58155 -> 198.28.0.2:53 1 64 1 2025-10-24 01:05:18.583 00:00:00.000 UDP 28.104.0.1:36897 -> 198.28.0.2:53 1 64 1 2025-10-24 01:05:18.593 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58155 1 109 1 2025-10-24 01:05:18.593 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36897 1 80 1 2025-10-24 01:06:18.878 00:00:00.000 UDP 28.104.0.1:41085 -> 198.28.0.2:53 1 64 1 2025-10-24 01:06:18.877 00:00:00.000 UDP 28.104.0.1:36035 -> 198.28.0.2:53 1 64 1 2025-10-24 01:06:18.887 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36035 1 109 1 2025-10-24 01:06:18.887 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:41085 1 80 1 2025-10-24 01:02:46.696 00:05:09.068 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-24 01:07:03.516 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-24 01:07:19.209 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34454 1 80 1 2025-10-24 01:07:19.209 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57952 1 109 1 2025-10-24 01:07:19.200 00:00:00.000 UDP 28.104.0.1:34454 -> 198.28.0.2:53 1 64 1 2025-10-24 01:07:19.199 00:00:00.000 UDP 28.104.0.1:57952 -> 198.28.0.2:53 1 64 1 2025-10-24 01:04:03.623 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2336 1 2025-10-24 01:08:19.499 00:00:00.000 UDP 28.104.0.1:45740 -> 198.28.0.2:53 1 64 1 2025-10-24 01:08:19.499 00:00:00.000 UDP 28.104.0.1:48669 -> 198.28.0.2:53 1 64 1 2025-10-24 01:08:19.509 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48669 1 109 1 2025-10-24 01:08:19.509 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45740 1 80 1 2025-10-24 01:03:55.720 00:06:00.047 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-24 01:09:19.806 00:00:00.000 UDP 28.104.0.1:38482 -> 198.28.0.2:53 1 64 1 2025-10-24 01:09:19.806 00:00:00.000 UDP 28.104.0.1:56152 -> 198.28.0.2:53 1 64 1 2025-10-24 01:09:19.817 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38482 1 80 1 2025-10-24 01:09:19.817 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56152 1 109 1 2025-10-24 01:04:55.720 00:05:50.990 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-24 01:10:20.107 00:00:00.000 UDP 28.104.0.1:51889 -> 198.28.0.2:53 1 64 1 2025-10-24 01:10:20.107 00:00:00.000 UDP 28.104.0.1:58567 -> 198.28.0.2:53 1 64 1 2025-10-24 01:10:20.117 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51889 1 109 1 2025-10-24 01:10:20.116 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58567 1 80 1 2025-10-24 01:05:55.731 00:05:50.969 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-24 01:05:55.754 00:05:50.996 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-24 01:11:20.613 00:00:00.000 UDP 28.104.0.1:49134 -> 198.28.0.2:53 1 64 1 2025-10-24 01:11:20.613 00:00:00.000 UDP 28.104.0.1:51143 -> 198.28.0.2:53 1 64 1 2025-10-24 01:11:20.624 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51143 1 80 1 2025-10-24 01:11:20.624 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49134 1 109 1 2025-10-24 01:06:55.641 00:06:00.081 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-24 01:12:03.484 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-24 01:12:20.989 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39298 1 109 1 2025-10-24 01:12:20.990 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:47416 1 80 1 2025-10-24 01:12:20.979 00:00:00.000 UDP 28.104.0.1:39298 -> 198.28.0.2:53 1 64 1 2025-10-24 01:12:20.979 00:00:00.000 UDP 28.104.0.1:47416 -> 198.28.0.2:53 1 64 1 2025-10-24 01:08:46.698 00:05:09.073 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-24 01:13:21.252 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44750 1 80 1 2025-10-24 01:13:21.252 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51278 1 109 1 2025-10-24 01:13:21.242 00:00:00.000 UDP 28.104.0.1:44750 -> 198.28.0.2:53 1 64 1 2025-10-24 01:13:21.242 00:00:00.000 UDP 28.104.0.1:51278 -> 198.28.0.2:53 1 64 1 2025-10-24 01:09:23.629 00:05:10.010 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2320 1 2025-10-24 01:14:21.839 00:00:00.000 UDP 28.104.0.1:39402 -> 198.28.0.2:53 1 64 1 2025-10-24 01:14:21.839 00:00:00.000 UDP 28.104.0.1:37421 -> 198.28.0.2:53 1 64 1 2025-10-24 01:14:21.849 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39402 1 80 1 2025-10-24 01:14:21.849 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37421 1 109 1 2025-10-24 01:15:22.148 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36990 1 80 1 2025-10-24 01:15:22.148 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39951 1 109 1 2025-10-24 01:15:22.139 00:00:00.000 UDP 28.104.0.1:39951 -> 198.28.0.2:53 1 64 1 2025-10-24 01:15:22.139 00:00:00.000 UDP 28.104.0.1:36990 -> 198.28.0.2:53 1 64 1 2025-10-24 01:10:55.722 00:05:50.989 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-24 01:10:55.722 00:06:00.048 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-24 01:16:22.447 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57358 1 109 1 2025-10-24 01:16:22.447 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33561 1 80 1 2025-10-24 01:16:22.437 00:00:00.000 UDP 28.104.0.1:57358 -> 198.28.0.2:53 1 64 1 2025-10-24 01:16:22.437 00:00:00.000 UDP 28.104.0.1:33561 -> 198.28.0.2:53 1 64 1 2025-10-24 01:11:55.760 00:05:50.992 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-24 01:11:55.732 00:05:50.968 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-24 01:17:03.380 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-24 01:17:22.745 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51775 1 109 1 2025-10-24 01:17:22.745 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53254 1 80 1 2025-10-24 01:17:22.735 00:00:00.000 UDP 28.104.0.1:51775 -> 198.28.0.2:53 1 64 1 2025-10-24 01:17:22.735 00:00:00.000 UDP 28.104.0.1:53254 -> 198.28.0.2:53 1 64 1 2025-10-24 01:18:23.048 00:00:00.000 UDP 28.104.0.1:49226 -> 198.28.0.2:53 1 64 1 2025-10-24 01:18:23.049 00:00:00.000 UDP 28.104.0.1:53536 -> 198.28.0.2:53 1 64 1 2025-10-24 01:18:23.059 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53536 1 109 1 2025-10-24 01:18:23.059 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49226 1 80 1 2025-10-24 01:14:46.699 00:05:09.072 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-24 01:13:55.645 00:06:00.081 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-24 01:14:43.640 00:05:10.007 OSPF 28.0.2.2:0 -> 224.0.0.5:0 40 2940 1 2025-10-24 01:19:23.361 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50514 1 109 1 2025-10-24 01:19:23.361 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36033 1 80 1 2025-10-24 01:19:23.351 00:00:00.000 UDP 28.104.0.1:36033 -> 198.28.0.2:53 1 64 1 2025-10-24 01:19:23.351 00:00:00.000 UDP 28.104.0.1:50514 -> 198.28.0.2:53 1 64 1 2025-10-24 01:20:23.643 00:00:00.000 UDP 28.104.0.1:43120 -> 198.28.0.2:53 1 64 1 2025-10-24 01:20:23.643 00:00:00.000 UDP 28.104.0.1:48380 -> 198.28.0.2:53 1 64 1 2025-10-24 01:20:23.655 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43120 1 109 1 2025-10-24 01:20:23.655 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48380 1 80 1 2025-10-24 01:21:23.948 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37781 1 80 1 2025-10-24 01:21:23.948 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58820 1 109 1 2025-10-24 01:21:23.938 00:00:00.000 UDP 28.104.0.1:37781 -> 198.28.0.2:53 1 64 1 2025-10-24 01:21:23.938 00:00:00.000 UDP 28.104.0.1:58820 -> 198.28.0.2:53 1 64 1 2025-10-24 01:16:55.724 00:05:50.989 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-24 01:22:03.589 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-24 01:22:24.241 00:00:00.000 UDP 28.104.0.1:35786 -> 198.28.0.2:53 1 64 1 2025-10-24 01:22:24.241 00:00:00.000 UDP 28.104.0.1:36527 -> 198.28.0.2:53 1 64 1 2025-10-24 01:22:24.252 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35786 1 80 1 2025-10-24 01:22:24.252 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36527 1 109 1 2025-10-24 01:17:55.733 00:05:50.969 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-24 01:17:55.762 00:05:50.992 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-24 01:17:55.725 00:06:00.048 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-24 01:23:24.546 00:00:00.000 UDP 28.104.0.1:49343 -> 198.28.0.2:53 1 64 1 2025-10-24 01:23:24.546 00:00:00.000 UDP 28.104.0.1:43393 -> 198.28.0.2:53 1 64 1 2025-10-24 01:23:24.557 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49343 1 109 1 2025-10-24 01:23:24.556 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:43393 1 80 1 2025-10-24 01:20:03.646 00:05:10.004 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2336 1 2025-10-24 01:24:24.846 00:00:00.000 UDP 28.104.0.1:49247 -> 198.28.0.2:53 1 64 1 2025-10-24 01:24:24.846 00:00:00.000 UDP 28.104.0.1:34936 -> 198.28.0.2:53 1 64 1 2025-10-24 01:24:24.855 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34936 1 80 1 2025-10-24 01:24:24.855 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49247 1 109 1 2025-10-24 01:20:46.702 00:05:09.070 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-24 01:25:25.172 00:00:00.000 UDP 28.104.0.1:34734 -> 198.28.0.2:53 1 64 1 2025-10-24 01:25:25.172 00:00:00.000 UDP 28.104.0.1:42848 -> 198.28.0.2:53 1 64 1 2025-10-24 01:25:25.182 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42848 1 80 1 2025-10-24 01:25:25.182 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:34734 1 109 1 2025-10-24 01:20:55.646 00:06:00.079 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-24 01:26:25.512 00:00:00.000 UDP 28.104.0.1:52075 -> 198.28.0.2:53 1 64 1 2025-10-24 01:26:25.512 00:00:00.000 UDP 28.104.0.1:56975 -> 198.28.0.2:53 1 64 1 2025-10-24 01:26:25.522 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56975 1 109 1 2025-10-24 01:26:25.522 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52075 1 80 1 2025-10-24 01:27:03.630 00:00:00.024 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-24 01:27:25.813 00:00:00.000 UDP 28.104.0.1:49645 -> 198.28.0.2:53 1 64 1 2025-10-24 01:27:25.813 00:00:00.000 UDP 28.104.0.1:39020 -> 198.28.0.2:53 1 64 1 2025-10-24 01:27:25.825 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39020 1 80 1 2025-10-24 01:27:25.825 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49645 1 109 1 2025-10-24 01:22:55.725 00:05:50.989 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-24 01:28:26.106 00:00:00.000 UDP 28.104.0.1:54401 -> 198.28.0.2:53 1 64 1 2025-10-24 01:28:26.106 00:00:00.000 UDP 28.104.0.1:36889 -> 198.28.0.2:53 1 64 1 2025-10-24 01:28:26.116 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54401 1 109 1 2025-10-24 01:28:26.116 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36889 1 80 1 2025-10-24 01:23:55.734 00:05:50.970 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-24 01:23:55.763 00:05:50.993 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-24 01:29:26.370 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45395 1 80 1 2025-10-24 01:29:26.370 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53831 1 109 1 2025-10-24 01:29:26.361 00:00:00.000 UDP 28.104.0.1:53831 -> 198.28.0.2:53 1 64 1 2025-10-24 01:29:26.361 00:00:00.000 UDP 28.104.0.1:45395 -> 198.28.0.2:53 1 64 1 2025-10-24 01:25:23.651 00:05:10.005 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2536 1 2025-10-24 01:24:55.725 00:06:00.049 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-24 01:30:26.654 00:00:00.000 UDP 28.104.0.1:58931 -> 198.28.0.2:53 1 64 1 2025-10-24 01:30:26.654 00:00:00.000 UDP 28.104.0.1:50014 -> 198.28.0.2:53 1 64 1 2025-10-24 01:30:26.665 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58931 1 109 1 2025-10-24 01:30:26.665 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50014 1 80 1 2025-10-24 01:26:46.703 00:05:09.070 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-24 01:31:26.951 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52282 1 80 1 2025-10-24 01:31:26.951 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53354 1 109 1 2025-10-24 01:31:26.940 00:00:00.000 UDP 28.104.0.1:53354 -> 198.28.0.2:53 1 64 1 2025-10-24 01:31:26.941 00:00:00.000 UDP 28.104.0.1:52282 -> 198.28.0.2:53 1 64 1 2025-10-24 01:32:04.011 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-24 01:32:27.249 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39613 1 80 1 2025-10-24 01:32:27.250 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39778 1 109 1 2025-10-24 01:32:27.239 00:00:00.000 UDP 28.104.0.1:39613 -> 198.28.0.2:53 1 64 1 2025-10-24 01:32:27.240 00:00:00.000 UDP 28.104.0.1:39778 -> 198.28.0.2:53 1 64 1 2025-10-24 01:27:55.648 00:06:00.081 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-24 01:33:27.493 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56273 1 109 1 2025-10-24 01:33:27.493 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51993 1 80 1 2025-10-24 01:33:27.483 00:00:00.000 UDP 28.104.0.1:56273 -> 198.28.0.2:53 1 64 1 2025-10-24 01:33:27.484 00:00:00.000 UDP 28.104.0.1:51993 -> 198.28.0.2:53 1 64 1 2025-10-24 01:28:55.726 00:05:50.989 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-24 01:34:27.776 00:00:00.000 UDP 28.104.0.1:52781 -> 198.28.0.2:53 1 64 1 2025-10-24 01:34:27.776 00:00:00.000 UDP 28.104.0.1:33331 -> 198.28.0.2:53 1 64 1 2025-10-24 01:34:27.785 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52781 1 80 1 2025-10-24 01:34:27.786 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33331 1 109 1 2025-10-24 01:29:55.738 00:05:50.967 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-24 01:29:55.763 00:05:50.993 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-24 01:30:43.655 00:05:10.009 OSPF 28.0.2.2:0 -> 224.0.0.5:0 39 2884 1 2025-10-24 01:35:28.080 00:00:00.000 UDP 28.104.0.1:48488 -> 198.28.0.2:53 1 64 1 2025-10-24 01:35:28.080 00:00:00.000 UDP 28.104.0.1:37182 -> 198.28.0.2:53 1 64 1 2025-10-24 01:35:28.090 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48488 1 80 1 2025-10-24 01:35:28.090 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37182 1 109 1 2025-10-24 01:36:28.461 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:51311 1 80 1 2025-10-24 01:36:28.461 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58115 1 109 1 2025-10-24 01:36:28.451 00:00:00.000 UDP 28.104.0.1:58115 -> 198.28.0.2:53 1 64 1 2025-10-24 01:36:28.451 00:00:00.000 UDP 28.104.0.1:51311 -> 198.28.0.2:53 1 64 1 2025-10-24 01:31:55.728 00:06:00.046 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-24 01:32:46.704 00:05:09.071 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-24 01:37:03.940 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-24 01:37:28.761 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52637 1 109 1 2025-10-24 01:37:28.761 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53997 1 80 1 2025-10-24 01:37:28.752 00:00:00.000 UDP 28.104.0.1:52637 -> 198.28.0.2:53 1 64 1 2025-10-24 01:37:28.752 00:00:00.000 UDP 28.104.0.1:53997 -> 198.28.0.2:53 1 64 1 2025-10-24 01:38:29.087 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60386 1 80 1 2025-10-24 01:38:29.087 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:37672 1 109 1 2025-10-24 01:38:29.077 00:00:00.000 UDP 28.104.0.1:60386 -> 198.28.0.2:53 1 64 1 2025-10-24 01:38:29.077 00:00:00.000 UDP 28.104.0.1:37672 -> 198.28.0.2:53 1 64 1 2025-10-24 01:39:29.369 00:00:00.000 UDP 28.104.0.1:56698 -> 198.28.0.2:53 1 64 1 2025-10-24 01:39:29.369 00:00:00.000 UDP 28.104.0.1:46677 -> 198.28.0.2:53 1 64 1 2025-10-24 01:39:29.379 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46677 1 80 1 2025-10-24 01:39:29.380 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:56698 1 109 1 2025-10-24 01:34:55.728 00:05:50.989 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-24 01:34:55.650 00:06:00.080 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-24 01:36:03.665 00:05:10.065 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2376 1 2025-10-24 01:40:29.627 00:00:00.000 UDP 28.104.0.1:48370 -> 198.28.0.2:53 1 64 1 2025-10-24 01:40:29.627 00:00:00.000 UDP 28.104.0.1:35740 -> 198.28.0.2:53 1 64 1 2025-10-24 01:40:29.638 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35740 1 80 1 2025-10-24 01:40:29.638 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48370 1 109 1 2025-10-24 01:35:55.738 00:05:50.970 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-24 01:35:55.765 00:05:50.994 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-24 01:41:44.044 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:40634 1 80 1 2025-10-24 01:41:44.044 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36891 1 109 1 2025-10-24 01:41:44.033 00:00:00.000 UDP 28.104.0.1:40634 -> 198.28.0.2:53 1 64 1 2025-10-24 01:41:44.033 00:00:00.000 UDP 28.104.0.1:36891 -> 198.28.0.2:53 1 64 1 2025-10-24 01:42:04.016 00:00:00.021 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-24 01:42:44.326 00:00:00.000 UDP 28.104.0.1:46350 -> 198.28.0.2:53 1 64 1 2025-10-24 01:42:44.326 00:00:00.000 UDP 28.104.0.1:45140 -> 198.28.0.2:53 1 64 1 2025-10-24 01:42:44.336 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45140 1 80 1 2025-10-24 01:42:44.336 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46350 1 109 1 2025-10-24 01:38:46.708 00:05:09.069 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-24 01:43:44.622 00:00:00.000 UDP 28.104.0.1:50135 -> 198.28.0.2:53 1 64 1 2025-10-24 01:43:44.622 00:00:00.000 UDP 28.104.0.1:52336 -> 198.28.0.2:53 1 64 1 2025-10-24 01:43:44.632 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:50135 1 109 1 2025-10-24 01:43:44.632 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52336 1 80 1 2025-10-24 01:38:55.731 00:06:00.047 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-24 01:44:44.911 00:00:00.000 UDP 28.104.0.1:54973 -> 198.28.0.2:53 1 64 1 2025-10-24 01:44:44.911 00:00:00.000 UDP 28.104.0.1:42652 -> 198.28.0.2:53 1 64 1 2025-10-24 01:44:44.921 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54973 1 109 1 2025-10-24 01:44:44.921 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:42652 1 80 1 2025-10-24 01:41:23.668 00:05:10.008 OSPF 28.0.2.2:0 -> 224.0.0.5:0 37 2716 1 2025-10-24 01:40:55.729 00:05:50.988 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-24 01:45:45.213 00:00:00.000 UDP 28.104.0.1:46446 -> 198.28.0.2:53 1 64 1 2025-10-24 01:45:45.213 00:00:00.000 UDP 28.104.0.1:33237 -> 198.28.0.2:53 1 64 1 2025-10-24 01:45:45.224 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33237 1 80 1 2025-10-24 01:45:45.224 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46446 1 109 1 2025-10-24 01:46:45.507 00:00:00.000 UDP 28.104.0.1:60066 -> 198.28.0.2:53 1 64 1 2025-10-24 01:46:45.506 00:00:00.000 UDP 28.104.0.1:49896 -> 198.28.0.2:53 1 64 1 2025-10-24 01:41:55.766 00:05:50.991 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-24 01:46:45.518 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:49896 1 109 1 2025-10-24 01:46:45.518 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:60066 1 80 1 2025-10-24 01:41:55.740 00:05:50.968 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-24 01:41:55.653 00:06:00.079 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-24 01:47:04.152 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-24 01:47:45.807 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:58434 1 109 1 2025-10-24 01:47:45.807 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48670 1 80 1 2025-10-24 01:47:45.798 00:00:00.000 UDP 28.104.0.1:58434 -> 198.28.0.2:53 1 64 1 2025-10-24 01:47:45.798 00:00:00.000 UDP 28.104.0.1:48670 -> 198.28.0.2:53 1 64 1 2025-10-24 01:48:46.099 00:00:00.000 UDP 28.104.0.1:36396 -> 198.28.0.2:53 1 64 1 2025-10-24 01:48:46.099 00:00:00.000 UDP 28.104.0.1:44995 -> 198.28.0.2:53 1 64 1 2025-10-24 01:48:46.112 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36396 1 80 1 2025-10-24 01:48:46.110 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44995 1 109 1 2025-10-24 01:44:46.707 00:05:09.072 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-24 01:49:46.393 00:00:00.000 UDP 28.104.0.1:55926 -> 198.28.0.2:53 1 64 1 2025-10-24 01:49:46.393 00:00:00.000 UDP 28.104.0.1:38032 -> 198.28.0.2:53 1 64 1 2025-10-24 01:49:46.403 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38032 1 80 1 2025-10-24 01:49:46.403 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:55926 1 109 1 2025-10-24 01:50:46.706 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53422 1 109 1 2025-10-24 01:50:46.707 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:36763 1 80 1 2025-10-24 01:50:46.695 00:00:00.000 UDP 28.104.0.1:53422 -> 198.28.0.2:53 1 64 1 2025-10-24 01:50:46.695 00:00:00.000 UDP 28.104.0.1:36763 -> 198.28.0.2:53 1 64 1 2025-10-24 01:45:55.731 00:06:00.048 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-24 01:46:43.677 00:05:10.006 OSPF 28.0.2.2:0 -> 224.0.0.5:0 36 2500 1 2025-10-24 01:51:47.009 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57644 1 80 1 2025-10-24 01:51:47.016 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:38132 1 109 1 2025-10-24 01:46:55.730 00:05:50.988 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-24 01:51:46.998 00:00:00.000 UDP 28.104.0.1:38132 -> 198.28.0.2:53 1 64 1 2025-10-24 01:51:46.998 00:00:00.000 UDP 28.104.0.1:57644 -> 198.28.0.2:53 1 64 1 2025-10-24 01:52:04.166 00:00:00.022 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-24 01:52:47.572 00:00:00.000 UDP 28.104.0.1:53775 -> 198.28.0.2:53 1 64 1 2025-10-24 01:47:55.768 00:05:50.990 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-24 01:52:47.572 00:00:00.000 UDP 28.104.0.1:35620 -> 198.28.0.2:53 1 64 1 2025-10-24 01:52:47.584 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:53775 1 80 1 2025-10-24 01:47:55.741 00:05:50.968 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-24 01:52:47.584 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:35620 1 109 1 2025-10-24 01:53:47.838 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:39167 1 80 1 2025-10-24 01:53:47.838 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:33456 1 109 1 2025-10-24 01:53:47.827 00:00:00.000 UDP 28.104.0.1:39167 -> 198.28.0.2:53 1 64 1 2025-10-24 01:53:47.827 00:00:00.000 UDP 28.104.0.1:33456 -> 198.28.0.2:53 1 64 1 2025-10-24 01:48:55.654 00:06:00.080 TCP 28.154.0.1:179 -> 28.155.0.1:36643 14 861 1 2025-10-24 01:54:48.138 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:59459 1 80 1 2025-10-24 01:54:48.138 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:44370 1 109 1 2025-10-24 01:54:48.127 00:00:00.000 UDP 28.104.0.1:59459 -> 198.28.0.2:53 1 64 1 2025-10-24 01:54:48.127 00:00:00.000 UDP 28.104.0.1:44370 -> 198.28.0.2:53 1 64 1 2025-10-24 01:50:46.707 00:05:09.073 TCP 28.151.0.1:39145 -> 28.156.0.1:179 12 738 1 2025-10-24 01:55:48.800 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:46662 1 109 1 2025-10-24 01:55:48.800 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45562 1 80 1 2025-10-24 01:55:48.789 00:00:00.000 UDP 28.104.0.1:45562 -> 198.28.0.2:53 1 64 1 2025-10-24 01:55:48.789 00:00:00.000 UDP 28.104.0.1:46662 -> 198.28.0.2:53 1 64 1 2025-10-24 01:52:03.683 00:05:10.008 OSPF 28.0.2.2:0 -> 224.0.0.5:0 34 2376 1 2025-10-24 01:56:49.090 00:00:00.000 UDP 28.104.0.1:52192 -> 198.28.0.2:53 1 64 1 2025-10-24 01:56:49.090 00:00:00.000 UDP 28.104.0.1:52777 -> 198.28.0.2:53 1 64 1 2025-10-24 01:56:49.102 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52192 1 80 1 2025-10-24 01:56:49.101 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:52777 1 109 1 2025-10-24 01:57:04.326 00:00:00.023 ICMP 28.107.0.1:0 -> 28.0.198.2:0.0 3 252 1 2025-10-24 01:52:55.733 00:05:50.990 TCP 28.154.0.1:41239 -> 28.151.0.1:179 12 738 1 2025-10-24 01:57:49.384 00:00:00.000 UDP 28.104.0.1:57644 -> 198.28.0.2:53 1 64 1 2025-10-24 01:57:49.384 00:00:00.000 UDP 28.104.0.1:48888 -> 198.28.0.2:53 1 64 1 2025-10-24 01:57:49.394 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:57644 1 80 1 2025-10-24 01:57:49.394 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:48888 1 109 1 2025-10-24 01:52:55.732 00:06:00.047 TCP 28.154.0.1:179 -> 28.157.0.1:37077 14 861 1 2025-10-24 01:53:55.744 00:05:50.970 TCP 28.151.0.1:179 -> 28.154.0.1:41239 12 738 1 2025-10-24 01:58:49.685 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:45741 1 109 1 2025-10-24 01:58:49.685 00:00:00.000 UDP 198.28.0.2:53 -> 28.104.0.1:54161 1 80 1 2025-10-24 01:53:55.771 00:05:50.994 TCP 28.156.0.1:179 -> 28.151.0.1:39145 12 738 1 2025-10-24 01:58:49.676 00:00:00.000 UDP 28.104.0.1:54161 -> 198.28.0.2:53 1 64 1 2025-10-24 01:58:49.676 00:00:00.000 UDP 28.104.0.1:45741 -> 198.28.0.2:53 1 64 1 Summary: total flows: 320, total bytes: 94565, total packets: 1393, avg bps: 200, avg pps: 0, avg bpp: 67 Time window: 2025-10-24 00:56:46 - 2025-10-24 01:59:46 Total flows processed: 320, passed: 320, Blocks skipped: 0, Bytes read: 33344 Sys: 0.0065s User: 0.0011s Wall: 0.0038s flows/second: 83985.8 Runtime: 0.0038s